last executing test programs:

4.26984606s ago: executing program 0 (id=4805):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=r0, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000020000000000000009a88b9b3000000001abafff0010000000000"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x18, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000180000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r7, 0x215eb000)
socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00')
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010003b15000000000000000000000000531af7c9de98e3010faf5f35e1d439253df95f59c66c6e5fb6345617c567547657a65e4d82c294fd0a0f47a0cc73562e7ea19f224f05807ba018b47438a285", @ANYRES32=0x0, @ANYBLOB="0304000012410100140012800a000100767863616e0000000400028008001c00", @ANYRES32=r9, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

3.221874692s ago: executing program 4 (id=4818):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x6, 0x80000000}]}, @union={0x9, 0x5, 0x0, 0x5, 0x1, 0x1, [{0xc, 0x5, 0x5}, {0x8, 0x3, 0x606b81}, {0x8, 0x4, 0x8f}, {0x4, 0x2, 0x58000000}, {0x2, 0x2, 0x6}]}]}}, &(0x7f0000000f40)=""/4089, 0x82, 0xff9, 0x1, 0x6000000}, 0x28)

3.121132799s ago: executing program 3 (id=4819):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x34, 0x18, 0x229, 0x0, 0x0, {0x2}, [@typed={0x69, 0x800, 0x0, 0x0, @u32}, @nested={0x15, 0x9, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x9, 0x0, 0x0, 0x0, @u32}, @generic='`']}]}, 0x34}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x5c, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x45, 0x11, 0x0, 0x1, [@generic="e796bd6dd42541affac6ff415af85ab494e09d498fc605baa5fe20e0f8a725f9f47392b70f555def59af", @generic="68eb7e22475186e591e23ad38a08862df02baf33ef122e"]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x42804}, 0x84)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0xfd, 0xff}]}, 0x10)
write$tun(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be000c2fd3fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004680)=ANY=[@ANYBLOB="2c2400001900010000000000000000001d0109004d00128008002100", @ANYRES32=0x0, @ANYBLOB="428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3db00"], 0x242c}, 0x1, 0x0, 0x0, 0x5}, 0x804)

3.070754821s ago: executing program 2 (id=4820):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
recvmsg$kcm(r1, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x18000)
r2 = socket$kcm(0x10, 0x2, 0x4)
close(r1)
syz_genetlink_get_family_id$nl80211(0x0, r0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0}, 0x4000800)
sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000400)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000040)=ANY=[], 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000380)={<r3=>r1, &(0x7f00000001c0)='#-^\x00', 0x88400, &(0x7f0000000280)={@_ha_fsid={[0x5, 0x9]}, {0x5107, 0xfffd, 0x9, 0x8}}, 0x6, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000340)=0x4})
setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f00000003c0)=0xfffffffa, 0x4)

3.061418313s ago: executing program 4 (id=4821):
socket$igmp(0x2, 0x3, 0x2) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x14) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0) (async)
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000180)="ac8042118058", 0x6}], 0x2}, 0x240000c0) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), 0x0}, 0x20) (async)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2) (async)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0xc31fe084736598c)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_linger(r5, 0x1, 0xd, 0x0, 0x0) (async)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) (async)
listen(r3, 0x0) (async)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r7 = accept(r2, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) (async)
recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8004)

2.882420706s ago: executing program 2 (id=4822):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000020000000000000009a88b9b3000000001abafff0010000000000"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x18, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000180000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r7, 0x215eb000)
socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00')
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010003b15000000000000000000000000531af7c9de98e3010faf5f35e1d439253df95f59c66c6e5fb6345617c567547657a65e4d82c294fd0a0f47a0cc73562e7ea19f224f05807ba018b47438a285", @ANYRES32=0x0, @ANYBLOB="0304000012410100140012800a000100767863616e0000000400028008001c00", @ANYRES32=r9, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

2.862760535s ago: executing program 0 (id=4823):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000006c0)="9a", 0x1}], 0x1}}], 0x2, 0x4000840)
shutdown(r0, 0x1)
setsockopt(r0, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000800)={0x7, 0xffffffffffff8000})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f00000007c0)={<r6=>r2, &(0x7f0000000640)='\x00', 0x202000, &(0x7f0000000700)={@_ha_fsid={[0x9]}, {0xde, 0xc2, 0x2, 0x4}}, 0x2, &(0x7f0000000740), &(0x7f0000000780)=0x9})
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1e000000be000000ff070000090000b5007c3300", @ANYRES32=r6, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0400000002000000020000000200"/28], 0x50)
sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80840}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x88, 0x0, 0xe02, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x15}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xbe800000}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x16}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1bd}]}, 0x88}, 0x1, 0x0, 0x0, 0xc000800}, 0x2000c801)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r7)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffd, 0xffff, 0x81, 0x500, 0x0, 0x200000, r5})
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r8, 0xba87317d461c07c9, 0x70bd2a, 0x25dfdbdb}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40490c4)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r7)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400)
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x5, 0x5}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x8, 0xc, 0x3}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40080c1}, 0x4800)
sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000005580)=@newtfilter={0x3c, 0x2c, 0x601, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xa}, {0x1}, {0x300, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x3c}}, 0x0)

2.590179554s ago: executing program 3 (id=4824):
r0 = socket$inet6(0xa, 0x1, 0x8010800000000084)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$inet6(0x10, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0), 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x42}, 0x28)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000003000000ef05000007"], 0x50)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001000320023000000000000000000000010006c00000000000000000000000000fc0200000000000000e1004000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000001e40), &(0x7f0000001f40), 0xf, r3}, 0x38)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5, r3}, 0xc)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000180)={'wg0\x00', <r6=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000240)={'ip6_vti0\x00', r6, 0x3b, 0x6, 0x6, 0x7fffffff, 0x64, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x7800, 0x2, 0x8001}})
r7 = socket(0x1, 0x803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x1fffd, {0xa, 0x40, 0x10, 0x0, r8}, [@IFA_FLAGS={0x8, 0x8, 0x6b2}, @IFA_ADDRESS={0x14, 0x1, @private1}]}, 0x34}}, 0x0)
r9 = socket(0x10, 0x803, 0x0)
unshare(0x60600)
getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000480)=""/39, &(0x7f00000004c0)=0x27)
r10 = socket(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'netpci0\x00'})
setsockopt$inet6_IPV6_ADDRFORM(r10, 0x3a, 0x1, 0x0, 0x30)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0x0, 0xfffffffd, {0xa, 0x78, 0x18, 0xfe, r8}, [@IFA_CACHEINFO={0x14, 0x6, {0x5, 0xb, 0x58, 0x7}}, @IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x54}}, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040)

2.306996487s ago: executing program 0 (id=4826):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001800c00028005000100210000002c000180deff0300200100000000000000000000000000011400040000000000000000000000ffffac1414aa3c00038000000340000100002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c0002800500010000"], 0xc8}}, 0x40000c2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010029fcdbdf2500000000000000", @ANYRES32=0x0, @ANYBLOB="00210400022400001400030062617461647630000000000000000000040014001c0016801800018014000b"], 0x54}, 0x1, 0x0, 0x0, 0x8}, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f00000005c0), 0x10)
recvmmsg(r1, &(0x7f00000018c0), 0x3fffffffffffe83, 0x2, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES8=r1], 0x48}}, 0x2404c054)
ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="24000000240000082c257a6a0000060003000000000006000300"/36], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40014)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
r5 = socket(0xa, 0x3, 0x3a)
ioctl$SIOCGETMIFCNT_IN6(r5, 0x89e0, &(0x7f0000000080)={0x10})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}, {&(0x7f0000000780)="5b06c70461fab92b3d952a0a0b5eca7d6b21f62c4f56ea9109a00b742eab4a7fdac90ab7c51a813cc4d693127d10c4e7234944e9410ad19c43ca9751c1b97aca344e5bf77fde23184af0b7e160e7a9a681f6391270dedc2978f7d1b9a913801beaa52e1eedf0ae71021e0d40864fc63603f1d6d94f55d23fb15eebc780292ee4be48a9036dcb83345a4285e043439e95b3f23b6edf199cea092725d6f7fab0f975cc42bd279f5de21d08a38091edbb34b32c6cd53373651fd3343aa6b228a996d957c556694dc3a26b68b38093a92eb192aa973bda1b51c61b6cc2b49a54550085e8d8270d889cefe65f62c975815b1b1208ed"}], 0x3f}], 0x1, 0x0)
accept4$llc(r7, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x300, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xe}, {0x0, 0xffff}, {0xa, 0xfff3}}}, 0x24}}, 0x0)

2.275415632s ago: executing program 1 (id=4827):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000180001002cbd7000000000000a1000000002ff000000000008000400", @ANYRES32=r1, @ANYBLOB="0600150008000000100016"], 0x3c}}, 0x0)

2.267777513s ago: executing program 2 (id=4828):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0x1, 0x17, &(0x7f0000002080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xaa9}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 57)

1.771487443s ago: executing program 1 (id=4829):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0xd44, 0x65, 0x4, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xfff3}, {0x3, 0xffea}, {0x3, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x80, 0x6}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @filter_kind_options=@f_cgroup={{0xb}, {0xd04, 0x2, [@TCA_CGROUP_POLICE={0x45c, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xf}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe656, 0xd, 0x80000000, 0x2, 0x2, 0x7, 0x5, 0x81, 0x3, 0x6, 0x6, 0x10, 0x8, 0x0, 0x2, 0x6, 0x5, 0x5805, 0x9, 0x3, 0x3, 0x9, 0x9, 0x6, 0xfffffffc, 0x4, 0x4, 0x9, 0x8, 0x57, 0x400, 0x100, 0x0, 0x0, 0x0, 0x0, 0x400, 0x401, 0xc, 0x4, 0x1, 0x3, 0x47, 0x9, 0xffffe166, 0x3, 0x3, 0xbf9, 0x5, 0x8, 0xc635, 0x6, 0x5, 0x1, 0x7ff, 0xfff, 0x9, 0xc1, 0x0, 0x1, 0x4c, 0x7, 0x6, 0x9, 0x3, 0xbb90, 0x5, 0x7, 0x80000001, 0x9, 0x3ff, 0xf, 0x7, 0xe, 0x3532, 0x8, 0x2, 0x4d, 0xfffffff7, 0x6, 0x7a3d, 0x200, 0x9, 0x3, 0x2, 0x5, 0x8, 0x6, 0xd, 0x5, 0xc3aa, 0x8, 0x0, 0x6, 0xb11, 0x5, 0x7, 0x3, 0x5, 0xffff06c3, 0x4, 0xc, 0x1, 0x0, 0xfffffff9, 0x4, 0xdd, 0x7, 0xffff7fff, 0x5, 0x3, 0x6, 0x2, 0x8000, 0x816, 0xffffffd7, 0x9, 0x0, 0x1, 0x7, 0x80000000, 0xfffffe01, 0x5, 0x0, 0x4, 0x0, 0x8, 0x93, 0x7fff, 0x7, 0x687, 0x7, 0xfffffffd, 0x3, 0xb1bc, 0x80, 0xf, 0x5, 0xdb24, 0x70000, 0x8, 0x9, 0x2, 0x4, 0x81, 0x3, 0x100, 0x3, 0x5, 0x7, 0x2, 0x401, 0x1, 0x8, 0x4, 0x4, 0x1, 0x620, 0x1, 0x80000001, 0x80000000, 0x1000, 0x5, 0x3, 0x2, 0x9cb, 0x2, 0x400, 0x79d74224, 0x6, 0xaf0, 0xfffffff9, 0x8001, 0x4, 0x4, 0x63, 0x120, 0x0, 0x7, 0x1000, 0x6, 0x7fffffff, 0x9, 0xffff, 0xffffffff, 0x10, 0x6f8ce021, 0xfffffffa, 0xf26d, 0xffffffff, 0x2, 0x145, 0xfffff193, 0x8, 0x1, 0x9c9c, 0x8, 0x0, 0x1ff, 0x86, 0x2, 0xff, 0xfff, 0x7, 0x4, 0x2, 0xdb, 0x8, 0x52d4, 0x3, 0x8, 0xffffffff, 0x80000001, 0xe, 0xfffffffb, 0x4, 0x80000000, 0x6, 0x7ff, 0xfffffd31, 0x3ff, 0x2b70000, 0x6, 0x100, 0x101, 0xb0ff6f2, 0xf, 0x3, 0x1ff, 0x8, 0x5, 0x2, 0xfffffffb, 0x9, 0x7, 0x0, 0x3, 0x3d5, 0xe0000000, 0x81, 0x9, 0xfffffffa, 0x80, 0x3, 0x7fff, 0x8001, 0x80000000, 0x9, 0x3, 0x1, 0x0, 0xd815, 0x3, 0x7, 0xffffffff, 0x8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xb}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0xc5}]}, @TCA_CGROUP_POLICE={0x828, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x7f}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffd}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x8, 0x80000001, 0x8, 0x7, 0x1ff, 0x6, 0x5, 0x2, 0x10000, 0x31, 0x10, 0x0, 0x7, 0x400, 0x5, 0x4, 0xff800000, 0x8, 0x4, 0x1, 0x9, 0x74cb, 0xfffff966, 0xfffffff8, 0x3, 0x10000, 0x5a, 0x1, 0x3ff, 0x949a, 0x9, 0xfffffe01, 0x4, 0x0, 0x1, 0xd77, 0x2, 0x4, 0xffffffff, 0x400, 0x6773, 0xfffffff0, 0x3, 0x6d, 0x9, 0x5, 0x80, 0x3, 0x6, 0x100, 0x1365, 0x6, 0x4, 0x9cc, 0x8, 0x7, 0x9d30, 0x9, 0x6, 0x5, 0x1, 0x1, 0xc, 0x5, 0x0, 0x2, 0x2, 0x7cae, 0x958, 0x6, 0xff, 0x7fffffff, 0x200, 0xff, 0x5, 0x6, 0x3, 0x1, 0x2, 0xfffffffb, 0x5, 0x3ff, 0x72, 0x7, 0x4, 0x3, 0xe54, 0x3, 0x2, 0x10001, 0x7fff, 0x6495, 0x6, 0x3, 0x1, 0x10, 0xb, 0x2, 0x8, 0x4, 0xe, 0x0, 0x0, 0x9, 0x87f6, 0x2, 0x2, 0x6, 0x7, 0x4, 0xeb, 0x9, 0x100, 0x1c000000, 0x1, 0x5, 0x815, 0x1, 0x5, 0x4, 0xe24, 0x9, 0x80, 0xc24, 0x5, 0x8, 0x8, 0x200, 0x5, 0x1, 0x7, 0x2, 0x6, 0x22, 0x5, 0x2, 0x3, 0x6, 0x9, 0x1, 0x82ea, 0x3ff, 0x8, 0x9, 0x8, 0x0, 0x0, 0x7, 0x8, 0x5, 0xc200, 0x6, 0x8, 0x7, 0x8, 0xfffffffe, 0xb2ce, 0xd910, 0x8, 0xd, 0x1, 0x3, 0x1, 0x1bda, 0x5, 0x9, 0x8, 0x9, 0x4, 0x6, 0xe, 0x409, 0x10001, 0x8001, 0x80000001, 0x101, 0x66, 0x80000001, 0x2, 0x6, 0x1, 0x8001, 0x8000, 0x2, 0x2, 0x10, 0x9, 0x8, 0xf, 0x4, 0x5, 0xffffffff, 0x1, 0x9, 0x81, 0x7, 0x6, 0x7, 0x9, 0x0, 0x0, 0x4, 0x101, 0x7, 0x0, 0x195, 0xfffffff7, 0x0, 0x4, 0x0, 0x51b6f671, 0x671, 0x4, 0xc, 0x7, 0x2, 0x1f9, 0x10001, 0x9, 0x2, 0x3, 0x2, 0x6, 0x9, 0x0, 0x80000000, 0xffffffff, 0x8e49, 0x10, 0x3d, 0x2, 0x2e26e7b8, 0x0, 0xfffffffe, 0x2, 0x6, 0x7, 0xb, 0x101, 0x8, 0x7f, 0x5, 0x9, 0x0, 0x0, 0x80000000, 0x6, 0x8, 0x8, 0x8, 0x3, 0x4, 0x4, 0x7, 0x40]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x8, 0xaf7c, 0xb, 0x43a, 0x9, 0x1, 0x20000000, 0x5, 0x1, 0x90a6, 0x1000, 0x800000, 0xc744, 0x4, 0x5, 0x6, 0x7, 0x7, 0x1ff, 0x7bc, 0x7fffffff, 0xd, 0x2, 0x101, 0x7, 0x10001, 0x100, 0xffff, 0x1, 0x645e, 0x9, 0x3, 0x8, 0x200, 0xa, 0x8, 0x10001, 0x7, 0x5, 0x5, 0x8, 0x0, 0x3924, 0x6, 0x4, 0xffff6a2e, 0x2, 0xffffffff, 0xe6e3, 0x8, 0x7f54, 0x5, 0x0, 0x100, 0xfffffffc, 0x5, 0x1, 0x6, 0x8, 0x5, 0x3, 0x6, 0x7, 0x8, 0x0, 0x1182, 0x0, 0x6, 0x38, 0xa1, 0x5, 0x28, 0x3, 0x8, 0x6, 0xf, 0x400, 0x0, 0x5, 0x1, 0xffffffff, 0x3d, 0x5, 0x1, 0x59f7, 0x7, 0x92, 0x8000, 0x41, 0x9, 0x10000, 0x2, 0xfffffffb, 0xa, 0x0, 0x80000000, 0x9, 0x8, 0xffffffff, 0x9, 0x7ff, 0x9, 0x7, 0x9, 0x2bc, 0x3bf39d46, 0x9, 0xf1, 0x4, 0x7, 0xd, 0x970, 0x3ff, 0x4, 0x5, 0xff000000, 0x8000, 0xc2, 0x0, 0x81, 0x8, 0x1, 0xbd, 0x7, 0x5, 0xfeab, 0x5, 0xfffffe00, 0x8000, 0x3ff, 0x1, 0x2, 0x80000001, 0x0, 0xbe, 0x80000001, 0xf504, 0x8, 0xfffffff4, 0x0, 0x7, 0x4, 0x5, 0x80000000, 0x1, 0x10001, 0x8, 0x4, 0x3ff, 0x7, 0x9, 0x4, 0x4, 0x4, 0x6, 0x2, 0x0, 0x20000000, 0x8, 0x40, 0x3, 0x7, 0xfffff147, 0xb6, 0x2, 0x9, 0x996, 0x3, 0x3, 0x800, 0x40, 0x3, 0x9, 0x1, 0x9, 0x1, 0x4, 0x94cd, 0x9, 0xac, 0x3, 0xff, 0x80000000, 0x7fff, 0x7fff, 0xb4, 0x9, 0x7fffffff, 0x0, 0x3, 0x2, 0x4, 0x8, 0x2, 0x401, 0xd, 0x3ff, 0x0, 0x9, 0x7f, 0x6, 0x9, 0x7fff, 0xff, 0xe, 0xb056, 0xfffffbff, 0x1ff, 0x4, 0x4, 0x9c, 0x0, 0xad8e, 0xa0, 0x7, 0x5, 0x7ff, 0x7, 0x3, 0x8, 0x6, 0x6, 0x8, 0xb13a7cf, 0x6, 0x8, 0x8080, 0x6, 0xe51, 0x4a0, 0x3, 0x5, 0x5, 0xac7b, 0x9, 0x1, 0xce, 0x8, 0xc, 0xf3e, 0x9, 0x7fff, 0x8, 0xf, 0x9, 0x8, 0x6, 0x5, 0x1, 0x568, 0x6, 0x80000000, 0x1e10, 0x0, 0x6]}]}, @TCA_CGROUP_EMATCHES={0x7c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x68, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x3, 0x7, 0x6}, {{0x3, 0x1, 0x1, 0x1}, {0x4, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xffff, 0x8, 0x950}, {0x3, 0x5}}}, @TCF_EM_META={0x40, 0x1, 0x0, 0x0, {{0x1, 0x4, 0x36f}, [@TCA_EM_META_LVALUE={0x25, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="61df", @TCF_META_TYPE_VAR="934c435123", @TCF_META_TYPE_VAR="51a955e23ad228", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="4621e26a472cfca88f", @TCF_META_TYPE_VAR="19a8"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x10, 0x2}, {0x1, 0xff, 0x1}}}]}}]}]}]}}]}, 0xd44}}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f00000010c0)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000000)=0x1, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = getpid()
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000008c0)=[0x45c, 0x9], 0x0, 0x0, 0x2, 0x1, r4}}, 0x40)
r5 = getuid()
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, <r6=>0x0}, &(0x7f0000000500)=0xc)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = gettid()
ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f0000000000)=r8)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000540)={0x0, <r9=>0x0}, &(0x7f0000000580)=0xc)
r10 = getgid()
gettid()
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@private0, @in=@initdev}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f00000006c0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000740)=0xc)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000780)=<r11=>0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0, <r12=>0x0}, &(0x7f0000000880)=0xc)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000008c0)={{{@in6=@dev, @in=@remote}}, {{}, 0x0, @in=@remote}}, &(0x7f00000009c0)=0xe8)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000001340)={<r15=>0x0, <r16=>0x0, <r17=>0x0}, &(0x7f0000001380)=0xc)
sendmmsg$unix(r13, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[@cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}], 0x20, 0x40800}}], 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r19, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00'})
sendmmsg$unix(r2, &(0x7f0000000d40)=[{{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000200)="fa0ce5c65ab0aa2d8b15b69a1f1c5f69c769e84ef76ae33ed68c82c7917408faaa8a39fef1cdc2d722782b5112cbd529ddf9350ffbad369491fb17f4e7cfc7d1c25c2cc4c3bcce9a9a3b27bb9e13f13b31dc6edff3181f5b2a1c0881e398938010cf921c7acb833cf6013dc18725d7125272ef498274afec90a8ae8e6e060e3cb20cd9d1d42a8fc68b6107d378cc62fb391d6ef9807ce73ce77d06c18663cc2309e5484a5881a1898116f878800a165c92823e7c6bb028f3eb513ecc1eae2e4941d95a0020ca9a1d2ee843a629e4ad59f159d6d7d2814da4e2d920d19ec579c8c881241d637e1fa59011f8bb69266554797ba3", 0xf3}], 0x1, &(0x7f0000001180)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r18, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=0xee00, @ANYRES32=r12, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r13, @ANYRES32, @ANYRES32=r19, @ANYRES32=r1, @ANYRES32=r14, @ANYRES32=r7, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x160, 0x1}}], 0x1, 0x4880)

1.717791187s ago: executing program 2 (id=4830):
r0 = socket(0x840000000002, 0x3, 0x100)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
close(0x3)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000240)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@inet=@tos={{0x28}, {0x6, 0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x15, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a8)
openat$cgroup_ro(r3, &(0x7f0000000140)='cgroup.controllers\x00', 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @dev={0xac, 0x14, 0x14, 0x2a}}, 0xc)
socket$inet_mptcp(0x2, 0x1, 0x106)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1e9000, 0x16, 0x200000006c832, 0xffffffffffffffff, 0x0)
sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000002, 0x13, r6, 0x80c3e000)
sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f00000004c0)=0x40000004, 0xfffffe5b)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001140), 0x0, 0x40080)
socket$rxrpc(0x21, 0x2, 0xa)

1.627270698s ago: executing program 3 (id=4831):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)="64b1de932e628eee8a0a89a94e5f750f399c7b1c35ac914dd6fc80d007beda93780f095b542decee786afeec8991e630bd7ebe6cdd3df5c82a54b9ba0f7e6f7cdd6729eb18e61f5296ad1df8ead0378b1cee4f7f6fef15d2b4b38d1e028e32d5584c080fcbe799a4eedfef7cbf95cb8435bf921ea828aaff4d73a74a44076e29eea4eab04413f2cc2081a0f05bec00b2ef34bd524f004ef0740ff6bc880b284742db25", 0xa3}, {&(0x7f0000000700)="6731a9da84a7f1d212561a21cd729eb4a2e7f2c859d2682f4601b2befc6bfd956ab32128d13f450ac5ef", 0x2a}], 0x2}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000008c0)="1a4327465638b8670e9ef99039dc0f60eb2cde85b2639882576537b3beb8b09ca7dd2c4972f132eb493ac7a3dd19bf1a9b8aacd86b333646a9e5342d840708bcd9aa55104cfedd028566dffeaf06fdb5f2d372c586b0b89c64700b3d9abdadd9f9fc7a36e68d46b7c9f80f6bd975de3ed294ef", 0x73}, {&(0x7f0000000980)="70c12f0fa84f4fcbfdb9e33365085ad18b6b869d3b7d05d8f7610180cb11c7f13b66eeb4156bfbb3f635a7dfde1719e1f90fe56dbf21f901857a7eafcf9fde47342a2d78eeb82a302413a3bfdb1c939d405fa6a8234f082b80073226b42969805f104a28759b329d", 0x68}, {0x0}, {0x0}], 0x4, &(0x7f0000000e00)=ANY=[@ANYBLOB="d8000000"], 0xd8}}], 0x2, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000000c0)=0x800, 0x4)
bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x4000000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000440)={<r2=>0x0, 0x8}, &(0x7f0000000480)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000a00)={r2, 0xcf, "2535a4c63c65549283e47b6e5f32e8625a245d13386bc2ec913615e115f1a99a014aba3a6e60da9e51e235591d4ee643f23f750bb4802a57dc7c3b581b7245efd357d0205a4058052bcdb9b636f101d78b1a482c660d13bd6e43a07c81b8f4e27ff6b949508fc94f4a90443524c51570a562d17ef039ef29a683c4bb6d7b7c422f1be40fb1507c567642b944a2870ee300401642e2e513fbd59c7e9066f26a7ab2e25346dddec5073eeb662bde99c28af410550ac46f41c4f027fa31087b34ff0caae3839a270fd307d332697a47b6"}, &(0x7f0000000b00)=0xd7)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0xc, 0x42, 0x40, 0xc0, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000000), 0x10f0, r3}, 0x38)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x110, 0x0, 0xffffe000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x14, 0x4, 0x4, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r4, &(0x7f0000000380)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r5, 0x702, 0xe80, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r3}, 0x38)
write(r0, &(0x7f0000001e00)="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", 0x3ee)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DAEMON(r6, &(0x7f0000000740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xac, r7, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff9}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x8810}, 0x44810)

1.456805885s ago: executing program 1 (id=4832):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
recvmsg$kcm(r1, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x18000)
r2 = socket$kcm(0x10, 0x2, 0x4)
close(r1)
syz_genetlink_get_family_id$nl80211(0x0, r0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0}, 0x4000800)
sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000400)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000040)=ANY=[], 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000380)={<r3=>r1, &(0x7f00000001c0)='#-^\x00', 0x88400, &(0x7f0000000280)={@_ha_fsid={[0x5, 0x9]}, {0x5107, 0xfffd, 0x9, 0x8}}, 0x6, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000340)=0x4})
setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f00000003c0)=0xfffffffa, 0x4)

1.26947772s ago: executing program 4 (id=4833):
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000006000030000000000000100085000000b600000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0xff6, &(0x7f0000001cc0)=""/4086, 0x41100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (fail_nth: 95)

1.099116082s ago: executing program 1 (id=4834):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x4, 0x4, 0x4, 0x2}, 0x50)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(0x3)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0xd, 0x0, &(0x7f0000001bc0))
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000090a010400000000000000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797ab10000000008000640ffffff000800084000000001080003400000011c14000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004840}, 0x8044)
close(0x3)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=<r6=>0x0)
sendmsg$NFC_CMD_DISABLE_SE(r4, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r5, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4050)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)

843.900854ms ago: executing program 4 (id=4835):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe"], 0x340a)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000000206030000000000000000000000000014000780080012400000000005001500020000000500010006000000050005000200000005"], 0x4c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xb4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4800}, 0x404c880)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b40000001300000200000000fbdbdf257f000001000000000000000000000000fe8000000400000000000000000000aa00000004000000000a006080"], 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x4051)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000014000100000000"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c)

786.647899ms ago: executing program 0 (id=4836):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000042", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)

657.445882ms ago: executing program 1 (id=4837):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x68, 0x30, 0xffff, 0x70bd29, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x20000000, 0x5, 0xfffffff7}, 0x21}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008880}, 0x800)
r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10, 0x80000)
getpeername$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r2)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r3, 0xba87317d461c07c9, 0x70bd2a, 0x25dfdbdb}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40490c4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900840000000001000000940001000000fc13c40000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2}, 0x94)

656.226817ms ago: executing program 2 (id=4838):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000020000000000000009a88b9b3000000001abafff0010000000000"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x18, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000180000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r7, 0x215eb000)
socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00')
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010003b15000000000000000000000000531af7c9de98e3010faf5f35e1d439253df95f59c66c6e5fb6345617c567547657a65e4d82c294fd0a0f47a0cc73562e7ea19f224f05807ba018b47438a285", @ANYRES32=0x0, @ANYBLOB="0304000012410100140012800a000100767863616e0000000400028008001c00", @ANYRES32=r9, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

591.818797ms ago: executing program 4 (id=4839):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0xff00, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c)

569.863101ms ago: executing program 3 (id=4840):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
getsockopt$sock_int(r1, 0x1, 0x3, 0x0, &(0x7f0000000780))
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r2, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x1}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)="f8", 0x1}], 0x1}}], 0x1, 0x20008050)
r3 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x24)
listen(r3, 0x80000000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="280000001000010025bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1008040000001c0028001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4080)
r5 = socket$inet6(0xa, 0x80002, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f00000002c0)={{<r6=>0x0, 0x4, 0x2, 0x4, 0x1000, 0x80000000, 0x5, 0x5, 0xf, 0x8, 0x3, 0x1, 0x5, 0x6, 0x4}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000380)={{r6, 0xc, 0x2, 0x8, 0x37f40000000, 0x80, 0x9, 0x80, 0x85, 0x2, 0xa, 0x400, 0xffffffffffff5491, 0x8000}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
setsockopt$inet6_mreq(r5, 0x29, 0x1c, 0x0, 0x41)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f00000000c0)=0x200, 0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r7, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r8, &(0x7f00000001c0), 0x12)

473.174279ms ago: executing program 0 (id=4841):
r0 = socket$tipc(0x1e, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x80000000, 0x0, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x58, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'bridge_slave_0\x00'}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000005100)=@newtaction={0x74, 0x1e, 0x109, 0x100, 0x0, {}, [{0x60, 0x1, [@m_ife={0x30, 0x10, 0x0, 0x0, {{0x8}, {0x4}, {0x6, 0x6, "8034"}, {0xc, 0x7, {0x92f52d05a60322be, 0xc58826ad51c40e66}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x2c, 0x11, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x74}, 0x1, 0x2b1e}, 0x40810)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0)
bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x4}}, 0x10)

430.085874ms ago: executing program 1 (id=4842):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1)
r2 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2c, &(0x7f00000000c0)=0x9, 0x4)
sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="01002dbd70000001000033000000180001801400020064756d6d793000"], 0x2c}}, 0x0)
ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, &(0x7f0000000040)={0x3c})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x44, 0x2a, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0xc, 0x17, 0x19, 0x19, 0x5}}]}}]}, 0x44}}, 0x4008000)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@private0, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0, <r7=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000400)=0xe8)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x21, 0x2, 0x2)
socket(0x2b, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="1200000003000000040000008000000012320500", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000300"/24, @ANYRES32, @ANYBLOB="ca7640ffe123a611d26ffa83e27ab5ccc1ee8a367707c15b06b2a9c0d19aa9e11a019fe68c7ce841873f230c299b0b6af9a82a402efdb398bf6b9531d54d320eb4f12d244cd28eee0d860ceb83ace5b58fd14ff8b878b6fdca785b0c6ed7a07e314afc9e8d168d10b3f27b0292c509e0430342aba3129ba2fa56d677455d341b2027ea57b10a06db24bb3df56518321499a31799366095302f8561cf753d793dd1aae2b6198426c79b8b"], 0x50)
gettid()
sendmsg$nl_route(r5, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipmr_getroute={0x1c, 0x1a, 0x100, 0x70bd2b, 0x25dfdbfb, {0x80, 0x4, 0x20, 0x6, 0xff, 0x1, 0xc8, 0x6, 0x1100}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x40)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r8=>0xffffffffffffffff})
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000001340), &(0x7f0000001380)=0xc)
sendmmsg$unix(r8, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580), 0x0, 0x40800}}], 0x1, 0x0)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, 0x0)
sendmmsg$unix(r3, &(0x7f0000008280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}}, {{0x0, 0xffffff07, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7}}}], 0x30, 0x8041}}], 0x2, 0x80)
bind$x25(r0, &(0x7f0000000080), 0x12)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0xac, 0x100000000})
connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@exit]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)

354.998693ms ago: executing program 4 (id=4843):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {}, {0xc, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0xffff, 0xf}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20040054)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000000c0)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x8001, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xfffffffc, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x3de8, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x7fff, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0xb, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x5, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x3, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x1, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x2000007, 0x61fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x7e54, 0xa, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x2, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x2, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffff22ff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0)

278.534992ms ago: executing program 3 (id=4844):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
recvmsg$kcm(r1, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x18000)
r2 = socket$kcm(0x10, 0x2, 0x4)
close(r1)
syz_genetlink_get_family_id$nl80211(0x0, r0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0}, 0x4000800)
sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000400)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000040)=ANY=[], 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, 0x0)
setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f00000003c0)=0xfffffffa, 0x4)

46.508798ms ago: executing program 0 (id=4845):
r0 = socket(0x2b, 0x80801, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "a840"}]}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x101, 0x67}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x20008805)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x8, 0xa, 0x80000001, @vifc_lcl_ifindex, @empty}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}}, 0x90)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r8 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r8, &(0x7f0000000000)={&(0x7f0000000140)={0xa, 0xa, 0x4, @private1}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@flowinfo={{0x14, 0x29, 0xb, 0x3}}], 0x18}, 0x922bac8556bdad8e)

41.50174ms ago: executing program 2 (id=4846):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4001, &(0x7f0000000900)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7004001006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0xff0f000020000080)

0s ago: executing program 3 (id=4847):
socket(0x400000000010, 0x3, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x14)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6a8, 0x3a0, 0x3a0, 0x230, 0x4c8, 0x0, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xc5}}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b3b646c379c506e83e205648a3c73050b9ad7575387a074e5d1ee348ed6a"}}, {{@ipv6={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0xffffffff, 0xff000000, 0xff000000], [0xff, 0x0, 0x0, 0xffffffff], 'pimreg\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x2, 0x1, 0x7, 0x10}, 0x0, 0x100, 0x170, 0x0, {}, [@common=@srh={{0x30}, {0x6, 0x10, 0x1, 0x5, 0x0, 0x300, 0x808}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x6, 0xff, 0x8, 0x1, 0x0, "964c73a55ed6aeafc78481772ab7e8fc4e10447d3d796fd3ac6cb3cb887fea413c6eb54f49c48c1ae0401fa2fb4831414e02fbb153db6db0b430bd31e8518c59"}}}, {{@ipv6={@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0x0, 0xffffff00, 0xff000000], [0xffffffff, 0x0, 0xff000000, 0xffffff00], '\x00', 'netpci0\x00', {0xff}, {}, 0x6, 0x7, 0x2, 0xa}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d4], 0xf, 0x2, 0x3}}, @common=@ipv6header={{0x28}, {0x2, 0x0, 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0xd}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0x0, 0xffffff00, 0x0, 0xff000000], [0x0, 0xff000000, 0xff, 0xffffffff], 'ip6_vti0\x00', 'geneve1\x00', {0xff}, {0xff}, 0x491e597b2835c6af, 0x40, 0x0, 0xc}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x9, 0xffffff61, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x708)
sendmmsg$inet6(r2, &(0x7f0000000540)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x3, @loopback, 0x3}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000240)="dc", 0x1}], 0x1}}], 0x1, 0x3404c891)
r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r2}, 0x8)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000e00)=ANY=[@ANYRES32=0x0, @ANYBLOB="0a000300020014000100336c08ee2c2cd866ebb7bce6534a4e18f4"], 0xe)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe800000"], 0xfdef)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x270, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @private=0xa010100, 0x0, 0xff000000, 'bond_slave_1\x00', 'geneve1\x00', {}, {0xff}, 0x84, 0x0, 0x28}, 0x0, 0x1b8, 0x218, 0x0, {0x0, 0x1c8}, [@common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e21], [0x4e24, 0x4e21], [0x101, 0x81c, 0x4, 0x3041800, 0x10000, 0x8, 0x7f, 0x3, 0x8000, 0xe4, 0x5e9c90b, 0x4b, 0x5, 0x2, 0x5, 0x6, 0x0, 0xea, 0x8001, 0x4, 0x6937, 0x7598, 0x4, 0x5, 0x1, 0x9, 0x7, 0x81, 0x0, 0xba11, 0x4, 0x2, 0x3d, 0x10001, 0x3ff, 0xffffffff, 0xffff, 0x8000, 0x1000, 0x0, 0x28, 0x800, 0x6, 0xfffffffa, 0xd721, 0x80000000, 0x0, 0xfff, 0x0, 0x10001, 0x2, 0x3, 0x7575bec7, 0x8cdf, 0x3, 0x4, 0x1000, 0x24, 0xd8e, 0x4, 0x8, 0x4, 0xe1, 0x8a], 0x0, [{0x80, 0xb}, {0xac, 0xc, 0x5}, {0x10, 0x4f, 0x4}, {0x4, 0x80, 0x4}], 0x4, 0x4, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0x5, 0x0, [0x25, 0x5, 0x28, 0x23, 0x12, 0x34, 0x16, 0x3, 0x10, 0x39, 0x27, 0x2a, 0x6, 0xe, 0x36, 0x10], 0x27b02525726059f5, 0x7, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3a8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
vmsplice(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000300)='0', 0x1}], 0x1, 0xa)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="180000000000000000000000000000006119040000000000950000000000000090"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6)
sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080003007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c0002800500010000000000240001"], 0x80}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48)
r6 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000880)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000e80)={0x34, 0x1402, 0x200, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r6}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r7}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0xfd}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xc1}, 0x890)

kernel console output (not intermixed with test programs):

tcp_connect+0x6f/0x7a0
[  586.135732][T18935]  __inet_stream_connect+0x258/0xe00
[  586.135762][T18935]  ? do_raw_spin_lock+0x12b/0x2f0
[  586.135792][T18935]  ? __pfx___inet_stream_connect+0x10/0x10
[  586.135819][T18935]  ? inet_stream_connect+0x51/0xa0
[  586.135844][T18935]  ? __local_bh_enable_ip+0xd6/0x140
[  586.135875][T18935]  inet_stream_connect+0x66/0xa0
[  586.135900][T18935]  __sys_connect+0x316/0x450
[  586.135931][T18935]  ? __pfx___sys_connect+0x10/0x10
[  586.135970][T18935]  ? __pfx_ksys_write+0x10/0x10
[  586.136005][T18935]  __x64_sys_connect+0x7a/0x90
[  586.136034][T18935]  do_syscall_64+0x166/0x520
[  586.136059][T18935]  ? trace_irq_disable+0x3b/0x140
[  586.136078][T18935]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  586.136098][T18935]  ? clear_bhb_loop+0x70/0xc0
[  586.136128][T18935]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  586.136149][T18935] RIP: 0033:0x7f574839e159
[  586.136167][T18935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  586.136184][T18935] RSP: 002b:00007f57491ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  586.136206][T18935] RAX: ffffffffffffffda RBX: 00007f5748626090 RCX: 00007f574839e159
[  586.136220][T18935] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000006
[  586.136232][T18935] RBP: 00007f57491ca090 R08: 0000000000000000 R09: 0000000000000000
[  586.136244][T18935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  586.136257][T18935] R13: 00007f5748626128 R14: 00007f5748626090 R15: 00007ffc33960488
[  586.136287][T18935]  </TASK>
[  586.631556][T18942] tipc: Started in network mode
[  586.631606][T18942] tipc: Node identity d651ef713b71, cluster identity 4711
[  586.631792][T18942] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  586.859957][T18940] syzkaller0: entered promiscuous mode
[  586.860001][T18940] syzkaller0: entered allmulticast mode
[  586.878697][T18932] tipc: Resetting bearer <eth:syzkaller0>
[  586.884739][T18926] tipc: Resetting bearer <eth:syzkaller0>
[  586.971485][T18926] tipc: Disabling bearer <eth:syzkaller0>
[  587.045305][T18951] FAULT_INJECTION: forcing a failure.
[  587.045305][T18951] name failslab, interval 1, probability 0, space 0, times 0
[  587.045363][T18951] CPU: 0 UID: 0 PID: 18951 Comm: syz.0.3974 Not tainted syzkaller #0 PREEMPT(full) 
[  587.045394][T18951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  587.045408][T18951] Call Trace:
[  587.045417][T18951]  <TASK>
[  587.045428][T18951]  dump_stack_lvl+0xe8/0x150
[  587.045466][T18951]  should_fail_ex+0x410/0x560
[  587.045506][T18951]  should_failslab+0xa8/0x100
[  587.045535][T18951]  __kvmalloc_node_noprof+0x176/0x820
[  587.045563][T18951]  ? __kvmalloc_node_noprof+0x345/0x820
[  587.045586][T18951]  ? bpf_compute_subprog_arg_access+0x187/0x14d0
[  587.045613][T18951]  ? bpf_compute_subprog_arg_access+0x187/0x14d0
[  587.045648][T18951]  bpf_compute_subprog_arg_access+0x187/0x14d0
[  587.045673][T18951]  ? bpf_base_func_proto+0x1d0/0xb00
[  587.045702][T18951]  ? __pfx_sk_filter_func_proto+0x10/0x10
[  587.045760][T18951]  ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10
[  587.045793][T18951]  ? __kvmalloc_node_noprof+0x345/0x820
[  587.045816][T18951]  ? bpf_compute_live_registers+0x14f/0x1ff0
[  587.045841][T18951]  ? bpf_compute_live_registers+0x14f/0x1ff0
[  587.045875][T18951]  bpf_compute_live_registers+0x8d3/0x1ff0
[  587.045920][T18951]  ? __pfx_bpf_compute_live_registers+0x10/0x10
[  587.045959][T18951]  bpf_check+0x25ed/0x2e10
[  587.045995][T18951]  ? ktime_get_with_offset+0x93/0x2d0
[  587.046024][T18951]  ? __pfx_bpf_check+0x10/0x10
[  587.046058][T18951]  ? bpf_obj_name_cpy+0x194/0x1e0
[  587.046093][T18951]  bpf_prog_load+0x14d6/0x1c20
[  587.046184][T18951]  ? __pfx_bpf_prog_load+0x10/0x10
[  587.046316][T18951]  __sys_bpf+0xd0d/0xd90
[  587.046413][T18951]  ? __pfx___sys_bpf+0x10/0x10
[  587.046532][T18951]  ? __fget_files+0x2a/0x420
[  587.046661][T18951]  ? ksys_write+0x242/0x270
[  587.046749][T18951]  ? __pfx_ksys_write+0x10/0x10
[  587.046840][T18951]  __x64_sys_bpf+0xba/0xd0
[  587.046902][T18951]  do_syscall_64+0x166/0x520
[  587.046980][T18951]  ? trace_irq_disable+0x3b/0x140
[  587.047041][T18951]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  587.047121][T18951]  ? clear_bhb_loop+0x70/0xc0
[  587.047190][T18951]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  587.047248][T18951] RIP: 0033:0x7fdeebb9e159
[  587.047331][T18951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  587.047388][T18951] RSP: 002b:00007fdeec9b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  587.047448][T18951] RAX: ffffffffffffffda RBX: 00007fdeebe25fa0 RCX: 00007fdeebb9e159
[  587.047488][T18951] RDX: 0000000000000094 RSI: 0000200000001fc0 RDI: 0000000000000005
[  587.047527][T18951] RBP: 00007fdeec9b3090 R08: 0000000000000000 R09: 0000000000000000
[  587.047559][T18951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  587.047599][T18951] R13: 00007fdeebe26038 R14: 00007fdeebe25fa0 R15: 00007ffe2f70d0c8
[  587.047704][T18951]  </TASK>
[  587.374797][T18954] netlink: 165 bytes leftover after parsing attributes in process `syz.2.3975'.
[  587.666318][T18959] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3978'.
[  587.684668][T18966] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048)
[  588.012875][T18975] vcan0: tx drop: invalid sa for name 0x0000004000000000
[  588.045102][T18975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3982'.
[  590.461087][T18984] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  590.461162][T18984] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  590.461202][T18984] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  590.581022][   T52] Bluetooth: hci1: command 0x0406 tx timeout
[  590.895051][T13706] hsr_slave_0: left promiscuous mode
[  590.977459][T13706] veth1_macvtap: left promiscuous mode
[  590.977522][T13706] veth0_macvtap: left promiscuous mode
[  591.000009][T13706] veth1_vlan: left promiscuous mode
[  591.000140][T13706] veth0_vlan: left promiscuous mode
[  591.310369][T19011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3984'.
[  591.337681][T19004] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3990'.
[  592.261476][T19023] bridge2: the hash_elasticity option has been deprecated and is always 16
[  592.921125][T13706] IPVS: stop unused estimator thread 0...
[  593.076174][T19052] FAULT_INJECTION: forcing a failure.
[  593.076174][T19052] name failslab, interval 1, probability 0, space 0, times 0
[  593.090565][T19052] CPU: 1 UID: 0 PID: 19052 Comm: syz.1.4005 Not tainted syzkaller #0 PREEMPT(full) 
[  593.090595][T19052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  593.090609][T19052] Call Trace:
[  593.090619][T19052]  <TASK>
[  593.090629][T19052]  dump_stack_lvl+0xe8/0x150
[  593.090675][T19052]  should_fail_ex+0x410/0x560
[  593.090707][T19052]  should_failslab+0xa8/0x100
[  593.090733][T19052]  __kvmalloc_node_noprof+0x176/0x820
[  593.090754][T19052]  ? rcu_is_watching+0x16/0xb0
[  593.090780][T19052]  ? bpf_compute_subprog_arg_access+0x187/0x14d0
[  593.090803][T19052]  ? trace_kmalloc+0x2a/0xf0
[  593.090831][T19052]  ? call_instance+0x263/0x560
[  593.090850][T19052]  ? call_instance+0x263/0x560
[  593.090877][T19052]  call_instance+0x263/0x560
[  593.090905][T19052]  bpf_compute_subprog_arg_access+0x2a3/0x14d0
[  593.090927][T19052]  ? bpf_base_func_proto+0x1d0/0xb00
[  593.090970][T19052]  ? __pfx_sk_filter_func_proto+0x10/0x10
[  593.091026][T19052]  ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10
[  593.091056][T19052]  ? __kvmalloc_node_noprof+0x345/0x820
[  593.091077][T19052]  ? bpf_compute_live_registers+0x14f/0x1ff0
[  593.091099][T19052]  ? bpf_compute_live_registers+0x14f/0x1ff0
[  593.091132][T19052]  bpf_compute_live_registers+0x8d3/0x1ff0
[  593.091176][T19052]  ? __pfx_bpf_compute_live_registers+0x10/0x10
[  593.091213][T19052]  bpf_check+0x25ed/0x2e10
[  593.091249][T19052]  ? ktime_get_with_offset+0x93/0x2d0
[  593.091276][T19052]  ? __pfx_bpf_check+0x10/0x10
[  593.091302][T19052]  ? bpf_obj_name_cpy+0x194/0x1e0
[  593.091336][T19052]  bpf_prog_load+0x14d6/0x1c20
[  593.091375][T19052]  ? __pfx_bpf_prog_load+0x10/0x10
[  593.091425][T19052]  __sys_bpf+0xd0d/0xd90
[  593.091458][T19052]  ? __pfx___sys_bpf+0x10/0x10
[  593.091505][T19052]  ? __fget_files+0x2a/0x420
[  593.091553][T19052]  ? ksys_write+0x242/0x270
[  593.091587][T19052]  ? __pfx_ksys_write+0x10/0x10
[  593.091625][T19052]  __x64_sys_bpf+0xba/0xd0
[  593.091649][T19052]  do_syscall_64+0x166/0x520
[  593.091679][T19052]  ? trace_irq_disable+0x3b/0x140
[  593.091700][T19052]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  593.091724][T19052]  ? clear_bhb_loop+0x70/0xc0
[  593.091751][T19052]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  593.091774][T19052] RIP: 0033:0x7f574839e159
[  593.091795][T19052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  593.091816][T19052] RSP: 002b:00007f57491eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  593.091846][T19052] RAX: ffffffffffffffda RBX: 00007f5748625fa0 RCX: 00007f574839e159
[  593.091863][T19052] RDX: 0000000000000094 RSI: 0000200000001fc0 RDI: 0000000000000005
[  593.091878][T19052] RBP: 00007f57491eb090 R08: 0000000000000000 R09: 0000000000000000
[  593.091911][T19052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  593.091926][T19052] R13: 00007f5748626038 R14: 00007f5748625fa0 R15: 00007ffc33960488
[  593.091963][T19052]  </TASK>
[  594.686413][T19092] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4017'.
[  595.061736][T19102] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4022'.
[  595.375560][T19103] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4021'.
[  595.799282][T19105] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  595.838965][T19111] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4025'.
[  596.161535][T19120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4027'.
[  596.186565][T19119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4026'.
[  596.203375][T19105] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  596.290581][T19120] vlan3: entered promiscuous mode
[  596.290636][T19120] bond0: entered promiscuous mode
[  596.290906][T19120] bond_slave_0: entered promiscuous mode
[  596.291199][T19120] bond_slave_1: entered promiscuous mode
[  596.360237][T19119] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4026'.
[  596.536259][T19105] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  596.792763][T19130] syzkaller0: entered promiscuous mode
[  596.792817][T19130] syzkaller0: entered allmulticast mode
[  596.823632][T19129] syzkaller0: entered promiscuous mode
[  596.829761][T19129] syzkaller0: entered allmulticast mode
[  596.848355][T19130] 0: reclassify loop, rule prio 0, protocol 800
[  597.165595][T19105] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  597.242332][T19139] FAULT_INJECTION: forcing a failure.
[  597.242332][T19139] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  597.265543][T19139] CPU: 1 UID: 0 PID: 19139 Comm: syz.1.4034 Not tainted syzkaller #0 PREEMPT(full) 
[  597.265574][T19139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  597.265589][T19139] Call Trace:
[  597.265598][T19139]  <TASK>
[  597.265625][T19139]  dump_stack_lvl+0xe8/0x150
[  597.265683][T19139]  should_fail_ex+0x410/0x560
[  597.265721][T19139]  _copy_from_iter+0x1d3/0x1660
[  597.265755][T19139]  ? __alloc_skb+0x27a/0x7a0
[  597.265789][T19139]  ? __alloc_skb+0x27a/0x7a0
[  597.265823][T19139]  ? __alloc_skb+0x27a/0x7a0
[  597.265856][T19139]  ? __pfx__copy_from_iter+0x10/0x10
[  597.265887][T19139]  ? kmem_cache_alloc_node_noprof+0x1f9/0x610
[  597.265920][T19139]  ? __alloc_skb+0x27a/0x7a0
[  597.265950][T19139]  ? __alloc_skb+0x27a/0x7a0
[  597.265992][T19139]  ? netlink_sendmsg+0x650/0xb40
[  597.266018][T19139]  ? skb_put+0x112/0x210
[  597.266055][T19139]  netlink_sendmsg+0x6c0/0xb40
[  597.266091][T19139]  ? __pfx_netlink_sendmsg+0x10/0x10
[  597.266126][T19139]  ? apparmor_socket_sendmsg+0x98/0x360
[  597.266161][T19139]  ? __pfx_netlink_sendmsg+0x10/0x10
[  597.266187][T19139]  sock_sendmsg_nosec+0x13a/0x180
[  597.266220][T19139]  ____sys_sendmsg+0x54e/0x850
[  597.266249][T19139]  ? __pfx_____sys_sendmsg+0x10/0x10
[  597.266281][T19139]  ? import_iovec+0x73/0xa0
[  597.266320][T19139]  ___sys_sendmsg+0x2a5/0x360
[  597.266341][T19139]  ? __lock_acquire+0x6df/0x2e50
[  597.266369][T19139]  ? __pfx____sys_sendmsg+0x10/0x10
[  597.266428][T19139]  ? __fget_files+0x2a/0x420
[  597.266457][T19139]  ? __fget_files+0x3a2/0x420
[  597.266498][T19139]  __x64_sys_sendmsg+0x1b1/0x290
[  597.266524][T19139]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  597.266569][T19139]  do_syscall_64+0x166/0x520
[  597.266600][T19139]  ? trace_irq_disable+0x3b/0x140
[  597.266621][T19139]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  597.266652][T19139]  ? clear_bhb_loop+0x70/0xc0
[  597.266680][T19139]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  597.266704][T19139] RIP: 0033:0x7f574839e159
[  597.266725][T19139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  597.266746][T19139] RSP: 002b:00007f57491eb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  597.266771][T19139] RAX: ffffffffffffffda RBX: 00007f5748625fa0 RCX: 00007f574839e159
[  597.266788][T19139] RDX: 0000000000000000 RSI: 0000200000001300 RDI: 0000000000000003
[  597.266804][T19139] RBP: 00007f57491eb090 R08: 0000000000000000 R09: 0000000000000000
[  597.266819][T19139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  597.266833][T19139] R13: 00007f5748626038 R14: 00007f5748625fa0 R15: 00007ffc33960488
[  597.266869][T19139]  </TASK>
[  597.831949][T19150] netlink: 'syz.1.4037': attribute type 5 has an invalid length.
[  598.015113][T19154] 8021q: VLANs not supported on gre0
[  598.028643][ T1461] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  598.288777][T13706] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  598.288836][T13706] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  598.288891][T13706] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  599.157650][T19034] Set syz0 is full, maxelem 65536 reached
[  599.356186][T19186] Cannot find del_set index 0 as target
[  599.389991][T19197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4051'.
[  599.390052][T19197] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4051'.
[  599.432833][T19197] geneve2: entered promiscuous mode
[  599.432888][T19197] geneve2: entered allmulticast mode
[  599.450259][T19199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4050'.
[  599.835395][T19209] xt_CT: No such helper "snmp_trap"
[  600.266379][T19199] bond0: (slave bond_slave_1): Releasing backup interface
[  600.267076][T19199] bond_slave_1 (unregistering): left promiscuous mode
[  600.975527][T19230] __nla_validate_parse: 4 callbacks suppressed
[  600.984257][T19230] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4059'.
[  601.815936][T19265] netlink: 'syz.3.4070': attribute type 22 has an invalid length.
[  601.825598][T19265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4070'.
[  601.895794][T19265] netlink: 'syz.3.4070': attribute type 22 has an invalid length.
[  601.895840][T19265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4070'.
[  601.989062][ T1461] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  601.989136][ T1461] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  601.989206][ T1461] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  601.989297][ T1461] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  602.291896][T19283] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4076'.
[  602.351282][T19283] vlan2: entered promiscuous mode
[  602.803448][T19304] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4083'.
[  603.309350][T19328] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4091'.
[  603.661659][T19339] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  603.731115][T19339] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  603.802333][T19339] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  603.871873][T19339] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  604.017536][T19345] netlink: 'syz.1.4096': attribute type 15 has an invalid length.
[  604.168257][T13705] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  604.318090][ T1461] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  604.559709][T19351] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4098'.
[  604.598192][T13706] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  604.598273][T13706] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  604.929338][T19376] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  605.486952][T19403] FAULT_INJECTION: forcing a failure.
[  605.486952][T19403] name failslab, interval 1, probability 0, space 0, times 0
[  605.487000][T19403] CPU: 1 UID: 0 PID: 19403 Comm: syz.3.4112 Not tainted syzkaller #0 PREEMPT(full) 
[  605.487024][T19403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  605.487036][T19403] Call Trace:
[  605.487044][T19403]  <TASK>
[  605.487053][T19403]  dump_stack_lvl+0xe8/0x150
[  605.487087][T19403]  should_fail_ex+0x410/0x560
[  605.487120][T19403]  should_failslab+0xa8/0x100
[  605.487144][T19403]  ? radix_tree_node_alloc+0x82/0x3a0
[  605.487258][T19403]  kmem_cache_alloc_noprof+0xa1/0x600
[  605.487286][T19403]  ? radix_tree_node_alloc+0x82/0x3a0
[  605.487310][T19403]  ? kmem_cache_alloc_noprof+0x156/0x600
[  605.487338][T19403]  ? radix_tree_node_alloc+0x82/0x3a0
[  605.487369][T19403]  radix_tree_node_alloc+0x82/0x3a0
[  605.487407][T19403]  idr_get_free+0x28f/0xa10
[  605.487446][T19403]  idr_alloc_u32+0x18a/0x330
[  605.487522][T19403]  ? __pfx_idr_alloc_u32+0x10/0x10
[  605.487553][T19403]  ? do_raw_spin_lock+0x12b/0x2f0
[  605.487586][T19403]  idr_alloc_cyclic+0x9c/0x1b0
[  605.487619][T19403]  bpf_prog_alloc_id+0x42/0x100
[  605.487646][T19403]  bpf_prog_load+0x150e/0x1c20
[  605.487680][T19403]  ? __pfx_bpf_prog_load+0x10/0x10
[  605.487727][T19403]  __sys_bpf+0xd0d/0xd90
[  605.487756][T19403]  ? __pfx___sys_bpf+0x10/0x10
[  605.487789][T19403]  ? __fget_files+0x2a/0x420
[  605.487830][T19403]  ? ksys_write+0x242/0x270
[  605.487861][T19403]  ? __pfx_ksys_write+0x10/0x10
[  605.487893][T19403]  __x64_sys_bpf+0xba/0xd0
[  605.487914][T19403]  do_syscall_64+0x166/0x520
[  605.487939][T19403]  ? trace_irq_disable+0x3b/0x140
[  605.487958][T19403]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  605.487979][T19403]  ? clear_bhb_loop+0x70/0xc0
[  605.488003][T19403]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  605.488023][T19403] RIP: 0033:0x7f0f1499e159
[  605.488041][T19403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  605.488058][T19403] RSP: 002b:00007f0f15864028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  605.488079][T19403] RAX: ffffffffffffffda RBX: 00007f0f14c25fa0 RCX: 00007f0f1499e159
[  605.488095][T19403] RDX: 0000000000000094 RSI: 00002000000004c0 RDI: 0000000000000005
[  605.488107][T19403] RBP: 00007f0f15864090 R08: 0000000000000000 R09: 0000000000000000
[  605.488120][T19403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  605.488132][T19403] R13: 00007f0f14c26038 R14: 00007f0f14c25fa0 R15: 00007ffd2af4f238
[  605.488163][T19403]  </TASK>
[  605.765358][T19405] netlink: 'syz.0.4113': attribute type 6 has an invalid length.
[  605.950619][   T52] Bluetooth: hci5: command 0x0406 tx timeout
[  606.466294][T19426] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4121'.
[  606.466342][T19426] netlink: 192 bytes leftover after parsing attributes in process `syz.1.4121'.
[  606.466463][T19426] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4121'.
[  606.715829][T19429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4123'.
[  607.064742][T19435] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4125'.
[  607.106356][T19437] syzkaller0: entered promiscuous mode
[  607.106405][T19437] syzkaller0: entered allmulticast mode
[  607.304772][T19441] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  607.378530][T19441] tipc: Resetting bearer <eth:syzkaller0>
[  607.378691][T19441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  607.518063][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  607.518110][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  607.658090][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  607.797980][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  607.798028][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  607.938077][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  607.938128][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  608.078676][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  608.180833][T19472] netlink: 'syz.4.4132': attribute type 12 has an invalid length.
[  608.182619][T19472] netlink: 'syz.4.4132': attribute type 29 has an invalid length.
[  608.186481][T19472] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4132'.
[  608.187985][T19472] netlink: 'syz.4.4132': attribute type 1 has an invalid length.
[  608.191717][T19472] netlink: 'syz.4.4132': attribute type 2 has an invalid length.
[  608.209421][T19436] tipc: Resetting bearer <eth:syzkaller0>
[  608.286462][T19436] tipc: Disabling bearer <eth:syzkaller0>
[  608.640468][T19490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4137'.
[  608.640518][T19490] netlink: 'syz.2.4137': attribute type 30 has an invalid length.
[  608.640755][T19490] netlink: 'syz.2.4137': attribute type 29 has an invalid length.
[  608.640776][T19490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4137'.
[  608.773194][T19495] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4138'.
[  609.042070][T19508] netlink: 'syz.0.4139': attribute type 13 has an invalid length.
[  609.082770][T19515] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4142'.
[  609.534892][    C1] vcan0: j1939_tp_rxtimer: 0xffff888056fce400: rx timeout, send abort
[  609.627244][T19537] FAULT_INJECTION: forcing a failure.
[  609.627244][T19537] name failslab, interval 1, probability 0, space 0, times 0
[  609.627307][T19537] CPU: 0 UID: 0 PID: 19537 Comm: syz.3.4148 Not tainted syzkaller #0 PREEMPT(full) 
[  609.627329][T19537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  609.627340][T19537] Call Trace:
[  609.627383][T19537]  <TASK>
[  609.627416][T19537]  dump_stack_lvl+0xe8/0x150
[  609.627521][T19537]  should_fail_ex+0x410/0x560
[  609.627610][T19537]  should_failslab+0xa8/0x100
[  609.627658][T19537]  ? skb_clone+0x212/0x3a0
[  609.627704][T19537]  kmem_cache_alloc_noprof+0xa1/0x600
[  609.627778][T19537]  ? skb_clone+0x212/0x3a0
[  609.627835][T19537]  skb_clone+0x212/0x3a0
[  609.627892][T19537]  bpf_clone_redirect+0x170/0x4b0
[  609.627976][T19537]  ? bpf_test_run+0x1d1/0x830
[  609.628112][T19537]  bpf_prog_885767c90d177146+0x62/0x6b
[  609.628174][T19537]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  609.628288][T19537]  ? __pfx___schedule+0x10/0x10
[  609.628387][T19537]  ? preempt_schedule_thunk+0x16/0x40
[  609.628448][T19537]  ? preempt_schedule_common+0x7f/0xd0
[  609.628571][T19537]  ? bpf_test_run+0x1d1/0x830
[  609.628634][T19537]  ? bpf_test_timer_continue+0x10c/0x320
[  609.628712][T19537]  bpf_test_run+0x354/0x830
[  609.628824][T19537]  ? __pfx_bpf_test_run+0x10/0x10
[  609.628938][T19537]  ? __kasan_krealloc+0xec/0x110
[  609.629042][T19537]  ? skb_dst_set+0x72/0x140
[  609.629105][T19537]  bpf_prog_test_run_skb+0xe35/0x2230
[  609.629217][T19537]  ? __fget_files+0x3a2/0x420
[  609.629294][T19537]  ? __fget_files+0x2a/0x420
[  609.629375][T19537]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  609.629444][T19537]  bpf_prog_test_run+0x2c5/0x340
[  609.629522][T19537]  __sys_bpf+0xa22/0xd90
[  609.629602][T19537]  ? __pfx___sys_bpf+0x10/0x10
[  609.629691][T19537]  ? __fget_files+0x2a/0x420
[  609.629820][T19537]  ? ksys_write+0x242/0x270
[  609.629897][T19537]  ? __pfx_ksys_write+0x10/0x10
[  609.629982][T19537]  __x64_sys_bpf+0xba/0xd0
[  609.630021][T19537]  do_syscall_64+0x166/0x520
[  609.630086][T19537]  ? trace_irq_disable+0x3b/0x140
[  609.630134][T19537]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.630189][T19537]  ? clear_bhb_loop+0x70/0xc0
[  609.630253][T19537]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.630314][T19537] RIP: 0033:0x7f0f1499e159
[  609.630374][T19537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  609.630432][T19537] RSP: 002b:00007f0f15864028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  609.630496][T19537] RAX: ffffffffffffffda RBX: 00007f0f14c25fa0 RCX: 00007f0f1499e159
[  609.630535][T19537] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a
[  609.630579][T19537] RBP: 00007f0f15864090 R08: 0000000000000000 R09: 0000000000000000
[  609.630620][T19537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  609.630653][T19537] R13: 00007f0f14c26038 R14: 00007f0f14c25fa0 R15: 00007ffd2af4f238
[  609.630724][T19537]  </TASK>
[  610.034979][    C1] vcan0: j1939_tp_rxtimer: 0xffff888056fce000: rx timeout, send abort
[  610.035046][    C1] vcan0: j1939_tp_rxtimer: 0xffff888056fce400: abort rx timeout. Force session deactivation
[  610.071328][T19541] netdevsim netdevsim4: Direct firmware load for .® failed with error -2
[  610.071379][T19541] netdevsim netdevsim4: Falling back to sysfs fallback for: .®
[  610.535060][    C1] vcan0: j1939_tp_rxtimer: 0xffff888056fce000: abort rx timeout. Force session deactivation
[  610.546278][T19561] FAULT_INJECTION: forcing a failure.
[  610.546278][T19561] name failslab, interval 1, probability 0, space 0, times 0
[  610.546313][T19561] CPU: 1 UID: 0 PID: 19561 Comm: syz.3.4157 Not tainted syzkaller #0 PREEMPT(full) 
[  610.546340][T19561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  610.546354][T19561] Call Trace:
[  610.546364][T19561]  <TASK>
[  610.546373][T19561]  dump_stack_lvl+0xe8/0x150
[  610.546412][T19561]  should_fail_ex+0x410/0x560
[  610.546450][T19561]  should_failslab+0xa8/0x100
[  610.546480][T19561]  __kmalloc_noprof+0xfe/0x720
[  610.546513][T19561]  ? __mutex_trylock_common+0x15f/0x270
[  610.546543][T19561]  ? ioctl_standard_iw_point+0x542/0xdc0
[  610.546658][T19561]  ? ioctl_standard_iw_point+0x542/0xdc0
[  610.546694][T19561]  ioctl_standard_iw_point+0x542/0xdc0
[  610.546722][T19561]  ? trace_contention_end+0x3d/0x140
[  610.546764][T19561]  ? __pfx_cfg80211_wext_siwgenie+0x10/0x10
[  610.546791][T19561]  ? __pfx_ioctl_standard_iw_point+0x10/0x10
[  610.546818][T19561]  ? wext_ioctl_dispatch+0xa2/0x410
[  610.546846][T19561]  ? __pfx___mutex_lock+0x10/0x10
[  610.546892][T19561]  ioctl_standard_call+0xa6/0x160
[  610.547012][T19561]  ? __pfx_cfg80211_wext_siwgenie+0x10/0x10
[  610.547040][T19561]  ? __pfx_ioctl_standard_call+0x10/0x10
[  610.547068][T19561]  ? __pfx_cfg80211_wext_siwgenie+0x10/0x10
[  610.547093][T19561]  wext_ioctl_dispatch+0xee/0x410
[  610.547118][T19561]  ? __pfx_ioctl_standard_call+0x10/0x10
[  610.547149][T19561]  wext_handle_ioctl+0x110/0x1d0
[  610.547179][T19561]  ? __pfx_wext_handle_ioctl+0x10/0x10
[  610.547203][T19561]  ? hook_file_ioctl+0x1f2/0x600
[  610.547316][T19561]  sock_ioctl+0x159/0x7e0
[  610.547347][T19561]  ? __pfx_sock_ioctl+0x10/0x10
[  610.547374][T19561]  ? __fget_files+0x2a/0x420
[  610.547403][T19561]  ? __fget_files+0x3a2/0x420
[  610.547430][T19561]  ? __fget_files+0x2a/0x420
[  610.547464][T19561]  ? bpf_lsm_file_ioctl+0x9/0x20
[  610.547494][T19561]  ? __pfx_sock_ioctl+0x10/0x10
[  610.547521][T19561]  __se_sys_ioctl+0xfc/0x170
[  610.547547][T19561]  do_syscall_64+0x166/0x520
[  610.547577][T19561]  ? trace_irq_disable+0x3b/0x140
[  610.547599][T19561]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  610.547623][T19561]  ? clear_bhb_loop+0x70/0xc0
[  610.547652][T19561]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  610.547675][T19561] RIP: 0033:0x7f0f1499e159
[  610.547696][T19561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  610.547715][T19561] RSP: 002b:00007f0f15843028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  610.547740][T19561] RAX: ffffffffffffffda RBX: 00007f0f14c26090 RCX: 00007f0f1499e159
[  610.547758][T19561] RDX: 0000200000000040 RSI: 0000000000008b30 RDI: 0000000000000004
[  610.547773][T19561] RBP: 00007f0f15843090 R08: 0000000000000000 R09: 0000000000000000
[  610.547788][T19561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  610.547801][T19561] R13: 00007f0f14c26128 R14: 00007f0f14c26090 R15: 00007ffd2af4f238
[  610.547838][T19561]  </TASK>
[  611.064376][ T5622] Bluetooth: hci2: command 0x0406 tx timeout
[  611.214080][T19566] netlink: 'syz.4.4159': attribute type 14 has an invalid length.
[  611.477772][T19579] syzkaller0: entered promiscuous mode
[  611.483640][T19579] syzkaller0: entered allmulticast mode
[  611.528407][T19578] __nla_validate_parse: 2 callbacks suppressed
[  611.528464][T19578] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4164'.
[  611.590190][T19578] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4164'.
[  611.590389][T19578] 0·: renamed from hsr0 (while UP)
[  611.613524][T19578] 0·: entered allmulticast mode
[  611.613570][T19578] hsr_slave_0: entered allmulticast mode
[  611.613659][T19578] hsr_slave_1: entered allmulticast mode
[  611.623206][T19578] net_ratelimit: 1 callbacks suppressed
[  611.623258][T19578] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  612.380424][T19612] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4174'.
[  612.642174][T19620] openvswitch: netlink: Message has -2 unknown bytes.
[  612.764861][T19627] FAULT_INJECTION: forcing a failure.
[  612.764861][T19627] name failslab, interval 1, probability 0, space 0, times 0
[  612.764921][T19627] CPU: 0 UID: 0 PID: 19627 Comm: syz.2.4181 Not tainted syzkaller #0 PREEMPT(full) 
[  612.764947][T19627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  612.765008][T19627] Call Trace:
[  612.765035][T19627]  <TASK>
[  612.765065][T19627]  dump_stack_lvl+0xe8/0x150
[  612.765201][T19627]  should_fail_ex+0x410/0x560
[  612.765306][T19627]  should_failslab+0xa8/0x100
[  612.765376][T19627]  ? skb_clone+0x212/0x3a0
[  612.765438][T19627]  kmem_cache_alloc_noprof+0xa1/0x600
[  612.765545][T19627]  ? skb_clone+0x212/0x3a0
[  612.765618][T19627]  skb_clone+0x212/0x3a0
[  612.765690][T19627]  bpf_clone_redirect+0x170/0x4b0
[  612.765778][T19627]  ? bpf_test_run+0x1d1/0x830
[  612.765841][T19627]  bpf_prog_5de8a3f9b7a888dc+0x5e/0x67
[  612.765922][T19627]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  612.766026][T19627]  ? __pfx___schedule+0x10/0x10
[  612.766136][T19627]  ? preempt_schedule_thunk+0x16/0x40
[  612.766210][T19627]  ? preempt_schedule_common+0x7f/0xd0
[  612.766297][T19627]  ? bpf_test_run+0x1d1/0x830
[  612.766369][T19627]  ? bpf_test_timer_continue+0x10c/0x320
[  612.766458][T19627]  bpf_test_run+0x354/0x830
[  612.766600][T19627]  ? __pfx_bpf_test_run+0x10/0x10
[  612.766711][T19627]  ? __kasan_krealloc+0xec/0x110
[  612.766790][T19627]  ? skb_dst_set+0x72/0x140
[  612.766861][T19627]  bpf_prog_test_run_skb+0xe35/0x2230
[  612.766984][T19627]  ? __fget_files+0x3a2/0x420
[  612.767056][T19627]  ? __fget_files+0x2a/0x420
[  612.767142][T19627]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  612.767214][T19627]  bpf_prog_test_run+0x2c5/0x340
[  612.767325][T19627]  __sys_bpf+0xa22/0xd90
[  612.767409][T19627]  ? __pfx___sys_bpf+0x10/0x10
[  612.767499][T19627]  ? __fget_files+0x2a/0x420
[  612.767620][T19627]  ? ksys_write+0x242/0x270
[  612.767711][T19627]  ? __pfx_ksys_write+0x10/0x10
[  612.767808][T19627]  __x64_sys_bpf+0xba/0xd0
[  612.767888][T19627]  do_syscall_64+0x166/0x520
[  612.767970][T19627]  ? trace_irq_disable+0x3b/0x140
[  612.768024][T19627]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  612.768086][T19627]  ? clear_bhb_loop+0x70/0xc0
[  612.768158][T19627]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  612.768267][T19627] RIP: 0033:0x7fc096b9e159
[  612.768312][T19627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  612.768363][T19627] RSP: 002b:00007fc097a7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  612.768425][T19627] RAX: ffffffffffffffda RBX: 00007fc096e25fa0 RCX: 00007fc096b9e159
[  612.768475][T19627] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a
[  612.768516][T19627] RBP: 00007fc097a7e090 R08: 0000000000000000 R09: 0000000000000000
[  612.768555][T19627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  612.768588][T19627] R13: 00007fc096e26038 R14: 00007fc096e25fa0 R15: 00007ffe0b2fd8d8
[  612.768687][T19627]  </TASK>
[  613.256670][T19624] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  613.449160][   T59] tipc: Subscription rejected, illegal request
[  613.501621][T19651] netlink: 324 bytes leftover after parsing attributes in process `syz.3.4185'.
[  613.587253][T19654] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4187'.
[  613.599731][T19654] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4187'.
[  613.871740][T19664] FAULT_INJECTION: forcing a failure.
[  613.871740][T19664] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  613.871802][T19664] CPU: 0 UID: 0 PID: 19664 Comm: syz.3.4191 Not tainted syzkaller #0 PREEMPT(full) 
[  613.871824][T19664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  613.871836][T19664] Call Trace:
[  613.871844][T19664]  <TASK>
[  613.871853][T19664]  dump_stack_lvl+0xe8/0x150
[  613.871885][T19664]  should_fail_ex+0x410/0x560
[  613.871918][T19664]  _copy_to_user+0x31/0xb0
[  613.871940][T19664]  simple_read_from_buffer+0xe1/0x170
[  613.871971][T19664]  proc_fail_nth_read+0x1bb/0x230
[  613.872020][T19664]  ? common_file_perm+0x20e/0x2b0
[  613.872058][T19664]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  613.872096][T19664]  ? rw_verify_area+0x24a/0x4c0
[  613.872131][T19664]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  613.872164][T19664]  vfs_read+0x213/0xa80
[  613.872202][T19664]  ? __pfx___mutex_lock+0x10/0x10
[  613.872235][T19664]  ? __pfx_vfs_read+0x10/0x10
[  613.872269][T19664]  ? __fget_files+0x2a/0x420
[  613.872303][T19664]  ? __fget_files+0x3a2/0x420
[  613.872333][T19664]  ? __fget_files+0x2a/0x420
[  613.872372][T19664]  ksys_read+0x150/0x270
[  613.872408][T19664]  ? __pfx_ksys_read+0x10/0x10
[  613.872453][T19664]  do_syscall_64+0x166/0x520
[  613.872482][T19664]  ? trace_irq_disable+0x3b/0x140
[  613.872503][T19664]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  613.872528][T19664]  ? clear_bhb_loop+0x70/0xc0
[  613.872557][T19664]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  613.872580][T19664] RIP: 0033:0x7f0f1495e98e
[  613.872601][T19664] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  613.872628][T19664] RSP: 002b:00007f0f15863fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  613.872656][T19664] RAX: ffffffffffffffda RBX: 00007f0f158646c0 RCX: 00007f0f1495e98e
[  613.872674][T19664] RDX: 000000000000000f RSI: 00007f0f158640a0 RDI: 0000000000000004
[  613.872689][T19664] RBP: 00007f0f15864090 R08: 0000000000000000 R09: 0000000000000000
[  613.872704][T19664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  613.872718][T19664] R13: 00007f0f14c26038 R14: 00007f0f14c25fa0 R15: 00007ffd2af4f238
[  613.872755][T19664]  </TASK>
[  614.147992][T19667] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4190'.
[  614.310298][T19675] FAULT_INJECTION: forcing a failure.
[  614.310298][T19675] name failslab, interval 1, probability 0, space 0, times 0
[  614.327647][T19675] CPU: 1 UID: 0 PID: 19675 Comm: syz.3.4195 Not tainted syzkaller #0 PREEMPT(full) 
[  614.327677][T19675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  614.327692][T19675] Call Trace:
[  614.327700][T19675]  <TASK>
[  614.327710][T19675]  dump_stack_lvl+0xe8/0x150
[  614.327744][T19675]  should_fail_ex+0x410/0x560
[  614.327779][T19675]  should_failslab+0xa8/0x100
[  614.327806][T19675]  __kmalloc_cache_noprof+0xa3/0x600
[  614.327845][T19675]  ? bpf_copy_verifier_state+0xb1f/0x1170
[  614.327875][T19675]  ? bpf_copy_verifier_state+0xb1f/0x1170
[  614.327911][T19675]  bpf_copy_verifier_state+0xb1f/0x1170
[  614.327950][T19675]  bpf_is_state_visited+0x378d/0x47e0
[  614.327984][T19675]  ? rcu_is_watching+0x16/0xb0
[  614.328011][T19675]  ? __kasan_kmalloc+0x93/0xb0
[  614.328047][T19675]  do_check_common+0x2848/0x5d30
[  614.328125][T19675]  ? __pfx_do_check_common+0x10/0x10
[  614.328164][T19675]  bpf_check+0x2639/0x2e10
[  614.328198][T19675]  ? ktime_get_with_offset+0x93/0x2d0
[  614.328224][T19675]  ? __pfx_bpf_check+0x10/0x10
[  614.328249][T19675]  ? bpf_obj_name_cpy+0x194/0x1e0
[  614.328281][T19675]  bpf_prog_load+0x14d6/0x1c20
[  614.328316][T19675]  ? __pfx_bpf_prog_load+0x10/0x10
[  614.328364][T19675]  __sys_bpf+0xd0d/0xd90
[  614.328395][T19675]  ? __pfx___sys_bpf+0x10/0x10
[  614.328429][T19675]  ? __fget_files+0x2a/0x420
[  614.328473][T19675]  ? ksys_write+0x242/0x270
[  614.328505][T19675]  ? __pfx_ksys_write+0x10/0x10
[  614.328540][T19675]  __x64_sys_bpf+0xba/0xd0
[  614.328570][T19675]  do_syscall_64+0x166/0x520
[  614.328598][T19675]  ? trace_irq_disable+0x3b/0x140
[  614.328618][T19675]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  614.328640][T19675]  ? clear_bhb_loop+0x70/0xc0
[  614.328666][T19675]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  614.328687][T19675] RIP: 0033:0x7f0f1499e159
[  614.328707][T19675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  614.328725][T19675] RSP: 002b:00007f0f15864028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  614.328748][T19675] RAX: ffffffffffffffda RBX: 00007f0f14c25fa0 RCX: 00007f0f1499e159
[  614.328763][T19675] RDX: 0000000000000094 RSI: 0000200000000380 RDI: 0000000000000005
[  614.328777][T19675] RBP: 00007f0f15864090 R08: 0000000000000000 R09: 0000000000000000
[  614.328790][T19675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  614.328802][T19675] R13: 00007f0f14c26038 R14: 00007f0f14c25fa0 R15: 00007ffd2af4f238
[  614.328833][T19675]  </TASK>
[  614.474797][T19677] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4196'.
[  614.663707][T19677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  614.739186][T19679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  614.779290][T19677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  614.901799][T19683] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4198'.
[  615.036371][T19690] netlink: 'syz.3.4200': attribute type 4 has an invalid length.
[  615.101695][T19691] netlink: 'syz.3.4200': attribute type 4 has an invalid length.
[  615.720656][T19700] tipc: Enabled bearer <udp:syz2>, priority 10
[  616.261596][T19733] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4216'.
[  616.344026][T19733] syzkaller0: entered promiscuous mode
[  616.351838][T19733] syzkaller0: entered allmulticast mode
[  616.360563][T19726] tipc: Enabled bearer <udp:syz2>, priority 10
[  616.438895][T19733] veth0_macvtap: left promiscuous mode
[  616.906183][T19751] __nla_validate_parse: 1 callbacks suppressed
[  616.906273][T19751] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4220'.
[  617.053880][T19743] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4218'.
[  617.111925][T19755] netlink: Conntrack attr has 12 unknown bytes
[  617.118318][T19755] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  619.626257][ T6128] tipc: Node number set to 3978358641
[  619.651534][T17410] tipc: Node number set to 3047409308
[  619.773497][T19764] FAULT_INJECTION: forcing a failure.
[  619.773497][T19764] name failslab, interval 1, probability 0, space 0, times 0
[  619.786911][T19764] CPU: 1 UID: 0 PID: 19764 Comm: syz.0.4224 Not tainted syzkaller #0 PREEMPT(full) 
[  619.786939][T19764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  619.786952][T19764] Call Trace:
[  619.786960][T19764]  <TASK>
[  619.786969][T19764]  dump_stack_lvl+0xe8/0x150
[  619.787004][T19764]  should_fail_ex+0x410/0x560
[  619.787055][T19764]  should_failslab+0xa8/0x100
[  619.787079][T19764]  ? dst_alloc+0x105/0x170
[  619.787185][T19764]  kmem_cache_alloc_noprof+0xa1/0x600
[  619.787217][T19764]  ? __pfx_find_exception+0x10/0x10
[  619.787264][T19764]  ? dst_alloc+0x105/0x170
[  619.787288][T19764]  ? fib_lookup+0x76/0x440
[  619.787313][T19764]  dst_alloc+0x105/0x170
[  619.787341][T19764]  ip_route_output_key_hash_rcu+0x14ac/0x2720
[  619.787376][T19764]  ? ip_route_output_key_hash+0xd8/0x2a0
[  619.787404][T19764]  ip_route_output_key_hash+0x18d/0x2a0
[  619.787432][T19764]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  619.787456][T19764]  ? crng_fast_key_erasure+0x190/0x260
[  619.787509][T19764]  ? __pfx_crng_fast_key_erasure+0x10/0x10
[  619.787541][T19764]  ip_route_output_flow+0x2a/0x150
[  619.787584][T19764]  sctp_v4_get_dst+0x3c1/0x1240
[  619.787642][T19764]  ? __asan_memset+0x22/0x50
[  619.787678][T19764]  ? __pfx_sctp_v4_get_dst+0x10/0x10
[  619.787726][T19764]  ? timer_init_key+0x161/0x2c0
[  619.787759][T19764]  ? dst_release+0x72/0x1b0
[  619.787792][T19764]  sctp_transport_route+0x119/0x2f0
[  619.787821][T19764]  sctp_assoc_add_peer+0x6c6/0x1430
[  619.787869][T19764]  sctp_connect_new_asoc+0x329/0x6b0
[  619.787905][T19764]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  619.787943][T19764]  ? __local_bh_enable_ip+0xd6/0x140
[  619.787972][T19764]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  619.788002][T19764]  ? security_sctp_bind_connect+0x7e/0x2c0
[  619.788036][T19764]  sctp_sendmsg+0x159b/0x2d00
[  619.788082][T19764]  ? __pfx_sctp_sendmsg+0x10/0x10
[  619.788118][T19764]  ? __lock_acquire+0x6df/0x2e50
[  619.788155][T19764]  ? aa_sock_msg_perm+0xfc/0x210
[  619.788189][T19764]  ? sock_rps_record_flow+0x19/0x350
[  619.788220][T19764]  ? inet_sendmsg+0x298/0x320
[  619.788250][T19764]  ? __pfx_inet_sendmsg+0x10/0x10
[  619.788275][T19764]  sock_sendmsg_nosec+0x10e/0x180
[  619.788307][T19764]  ____sys_sendmsg+0x54e/0x850
[  619.788336][T19764]  ? __pfx_____sys_sendmsg+0x10/0x10
[  619.788369][T19764]  ? import_iovec+0x73/0xa0
[  619.788407][T19764]  ___sys_sendmsg+0x2a5/0x360
[  619.788428][T19764]  ? __lock_acquire+0x6df/0x2e50
[  619.788456][T19764]  ? __pfx____sys_sendmsg+0x10/0x10
[  619.788485][T19764]  ? kstrtouint+0x6e/0xe0
[  619.788541][T19764]  ? __fget_files+0x2a/0x420
[  619.788570][T19764]  ? __fget_files+0x3a2/0x420
[  619.788617][T19764]  __sys_sendmmsg+0x273/0x4d0
[  619.788647][T19764]  ? __pfx___sys_sendmmsg+0x10/0x10
[  619.788680][T19764]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  619.788728][T19764]  ? ksys_write+0x242/0x270
[  619.788763][T19764]  ? __pfx_ksys_write+0x10/0x10
[  619.788817][T19764]  __x64_sys_sendmmsg+0xa0/0xc0
[  619.788843][T19764]  do_syscall_64+0x166/0x520
[  619.788871][T19764]  ? trace_irq_disable+0x3b/0x140
[  619.788892][T19764]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  619.788915][T19764]  ? clear_bhb_loop+0x70/0xc0
[  619.788943][T19764]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  619.788966][T19764] RIP: 0033:0x7fdeebb9e159
[  619.788987][T19764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  619.789006][T19764] RSP: 002b:00007fdeec9b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  619.789030][T19764] RAX: ffffffffffffffda RBX: 00007fdeebe25fa0 RCX: 00007fdeebb9e159
[  619.789047][T19764] RDX: 0000000000000001 RSI: 0000200000002c80 RDI: 0000000000000004
[  619.789061][T19764] RBP: 00007fdeec9b3090 R08: 0000000000000000 R09: 0000000000000000
[  619.789075][T19764] R10: 0000000000000041 R11: 0000000000000246 R12: 0000000000000002
[  619.789089][T19764] R13: 00007fdeebe26038 R14: 00007fdeebe25fa0 R15: 00007ffe2f70d0c8
[  619.789124][T19764]  </TASK>
[  620.638698][T19793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4235'.
[  620.801407][T19797] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4237'.
[  620.863366][T19800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4238'.
[  621.225264][T19811] FAULT_INJECTION: forcing a failure.
[  621.225264][T19811] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  621.225308][T19811] CPU: 0 UID: 0 PID: 19811 Comm: syz.1.4242 Not tainted syzkaller #0 PREEMPT(full) 
[  621.225331][T19811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  621.225343][T19811] Call Trace:
[  621.225351][T19811]  <TASK>
[  621.225359][T19811]  dump_stack_lvl+0xe8/0x150
[  621.225391][T19811]  should_fail_ex+0x410/0x560
[  621.225423][T19811]  _copy_to_user+0x31/0xb0
[  621.225444][T19811]  bpf_verifier_vlog+0x496/0x900
[  621.225491][T19811]  bpf_verifier_log_write+0x11d/0x1a0
[  621.225525][T19811]  ? __pfx_bpf_verifier_log_write+0x10/0x10
[  621.225556][T19811]  ? __kvmalloc_node_noprof+0x345/0x820
[  621.225578][T19811]  ? bpf_insn_def32+0x1ae/0x650
[  621.225609][T19811]  bpf_compute_live_registers+0x1896/0x1ff0
[  621.225647][T19811]  ? __pfx_bpf_compute_live_registers+0x10/0x10
[  621.225678][T19811]  bpf_check+0x25ed/0x2e10
[  621.225708][T19811]  ? ktime_get_with_offset+0x93/0x2d0
[  621.225732][T19811]  ? __pfx_bpf_check+0x10/0x10
[  621.225756][T19811]  ? bpf_obj_name_cpy+0x194/0x1e0
[  621.225786][T19811]  bpf_prog_load+0x14d6/0x1c20
[  621.225818][T19811]  ? __pfx_bpf_prog_load+0x10/0x10
[  621.225862][T19811]  __sys_bpf+0xd0d/0xd90
[  621.225890][T19811]  ? __pfx___sys_bpf+0x10/0x10
[  621.225921][T19811]  ? __fget_files+0x2a/0x420
[  621.225961][T19811]  ? ksys_write+0x242/0x270
[  621.225991][T19811]  ? __pfx_ksys_write+0x10/0x10
[  621.226022][T19811]  __x64_sys_bpf+0xba/0xd0
[  621.226044][T19811]  do_syscall_64+0x166/0x520
[  621.226070][T19811]  ? trace_irq_disable+0x3b/0x140
[  621.226088][T19811]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  621.226124][T19811]  ? clear_bhb_loop+0x70/0xc0
[  621.226149][T19811]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  621.226169][T19811] RIP: 0033:0x7f574839e159
[  621.226188][T19811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  621.226205][T19811] RSP: 002b:00007f57491eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  621.226228][T19811] RAX: ffffffffffffffda RBX: 00007f5748625fa0 RCX: 00007f574839e159
[  621.226243][T19811] RDX: 0000000000000094 RSI: 0000200000000240 RDI: 0000000000000005
[  621.226257][T19811] RBP: 00007f57491eb090 R08: 0000000000000000 R09: 0000000000000000
[  621.226269][T19811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  621.226281][T19811] R13: 00007f5748626038 R14: 00007f5748625fa0 R15: 00007ffc33960488
[  621.226313][T19811]  </TASK>
[  621.667364][T19820] netlink: 'syz.1.4249': attribute type 1 has an invalid length.
[  622.404497][T19844] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4257'.
[  622.934450][T19862] xt_hashlimit: size too large, truncated to 1048576
[  623.286745][T19878] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4267'.
[  623.453138][T19887] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4268'.
[  623.485703][T19889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4269'.
[  624.273695][T19920] netlink: 'syz.1.4281': attribute type 1 has an invalid length.
[  624.348360][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  624.536066][   T32] audit: type=1800 audit(1787934499.401:2): pid=19923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4282" name=B702 dev="tmpfs" ino=871 res=0 errno=0
[  625.085692][T19940] syzkaller0: entered promiscuous mode
[  625.093448][T19940] syzkaller0: entered allmulticast mode
[  625.101540][T19943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4291'.
[  625.111977][T19943] bond0: option miimon: invalid value (18446744073675997440)
[  625.112023][T19943] bond0: option miimon: allowed values 0 - 2147483647
[  625.129503][T19940] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  625.155434][T19938] tipc: Resetting bearer <eth:syzkaller0>
[  625.243984][T19938] tipc: Disabling bearer <eth:syzkaller0>
[  625.580363][T19963] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4301'.
[  625.843482][T19976] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4305'.
[  625.845270][T19976] xt_REDIRECT: bad rangesize 26624.
[  625.870306][T19974] bridge_slave_0: left allmulticast mode
[  625.870344][T19974] bridge_slave_0: left promiscuous mode
[  625.870558][T19974] bridge0: port 1(bridge_slave_0) entered disabled state
[  625.899397][T19974] bridge_slave_1: left allmulticast mode
[  625.906393][T19974] bridge_slave_1: left promiscuous mode
[  625.906630][T19974] bridge0: port 2(bridge_slave_1) entered disabled state
[  625.937442][T19980] netlink: Conntrack attr has 12 unknown bytes
[  625.937496][T19980] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  626.002632][T19974] bond0: (slave bond_slave_0): Releasing backup interface
[  626.042854][T19974] bond0: (slave bond_slave_1): Releasing backup interface
[  626.484239][T19974] team0: Port device team_slave_0 removed
[  626.554654][T19974] team0: Port device team_slave_1 removed
[  626.556948][T19974] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  626.562532][T19974] batman_adv: batadv0: Removing interface: batadv_slave_0
[  626.593121][T19974] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  626.593172][T19974] batman_adv: batadv0: Removing interface: batadv_slave_1
[  626.640245][T19974] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  626.891313][T19998] syzkaller0: entered promiscuous mode
[  626.891354][T19998] syzkaller0: entered allmulticast mode
[  626.912504][T19998] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  626.937763][T19998] tipc: Resetting bearer <eth:syzkaller0>
[  626.941947][T19998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  626.957646][T19997] tipc: Resetting bearer <eth:syzkaller0>
[  627.004760][T19997] tipc: Disabling bearer <eth:syzkaller0>
[  627.033727][T20002] netdevsim netdevsim4: Direct firmware load for .® failed with error -2
[  627.033779][T20002] netdevsim netdevsim4: Falling back to sysfs fallback for: .®
[  627.225031][T20011] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4316'.
[  627.234413][T20011] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4316'.
[  628.129400][T20034] syzkaller0: entered promiscuous mode
[  628.129438][T20034] syzkaller0: entered allmulticast mode
[  628.147172][T20034] 0: reclassify loop, rule prio 0, protocol 800
[  628.433455][T20054] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4331'.
[  628.433499][T20054] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4331'.
[  628.435804][T20054] netlink: 'syz.2.4331': attribute type 6 has an invalid length.
[  628.436053][T20054] netlink: 'syz.2.4331': attribute type 5 has an invalid length.
[  628.436088][T20054] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4331'.
[  628.436960][T20056] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4331'.
[  628.437014][T20056] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4331'.
[  628.437049][T20056] netlink: 'syz.2.4331': attribute type 6 has an invalid length.
[  628.437078][T20056] netlink: 'syz.2.4331': attribute type 5 has an invalid length.
[  628.437125][T20056] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4331'.
[  628.666607][T20064] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  628.876348][T20076] af_packet: tpacket_rcv: packet too big, clamped from 18 to 4294967272. macoff=96
[  629.152616][   T59] IPVS: starting estimator thread 0...
[  629.240242][T20084] IPVS: using max 31 ests per chain, 74400 per kthread
[  629.307201][T20088] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4344'.
[  629.332511][T20079] cgroup: fork rejected by pids controller in /syz2
[  629.657211][T20155] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  630.052978][T20204] netlink: 'syz.4.4350': attribute type 12 has an invalid length.
[  630.061029][T20204] netlink: 'syz.4.4350': attribute type 29 has an invalid length.
[  630.069081][T20204] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4350'.
[  630.332584][T20219] sctp: [Deprecated]: syz.0.4354 (pid 20219) Use of struct sctp_assoc_value in delayed_ack socket option.
[  630.332584][T20219] Use struct sctp_sack_info instead
[  630.556437][T20220] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  630.778970][T20225] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4358'.
[  630.779020][T20225] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4358'.
[  630.846749][ T5622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  630.857627][ T5622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  630.863729][ T5622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  630.865793][ T5622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  630.867498][ T5622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  632.079290][T20277] ip_tables: iptables: counters copy to user failed while replacing table
[  632.556085][T20294] FAULT_INJECTION: forcing a failure.
[  632.556085][T20294] name failslab, interval 1, probability 0, space 0, times 0
[  632.573763][T20294] CPU: 0 UID: 0 PID: 20294 Comm: syz.1.4379 Not tainted syzkaller #0 PREEMPT(full) 
[  632.573795][T20294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  632.573810][T20294] Call Trace:
[  632.573820][T20294]  <TASK>
[  632.573831][T20294]  dump_stack_lvl+0xe8/0x150
[  632.573870][T20294]  should_fail_ex+0x410/0x560
[  632.573908][T20294]  should_failslab+0xa8/0x100
[  632.573964][T20294]  __kmalloc_cache_noprof+0xa3/0x600
[  632.574003][T20294]  ? copy_array+0xab/0x100
[  632.574046][T20294]  ? bpf_copy_verifier_state+0xb1f/0x1170
[  632.574075][T20294]  ? bpf_copy_verifier_state+0xb1f/0x1170
[  632.574113][T20294]  bpf_copy_verifier_state+0xb1f/0x1170
[  632.574154][T20294]  bpf_is_state_visited+0x378d/0x47e0
[  632.574192][T20294]  ? __kasan_kmalloc+0x93/0xb0
[  632.574219][T20294]  ? bpf_push_jmp_history+0x27d/0x6d0
[  632.574249][T20294]  do_check_common+0x2848/0x5d30
[  632.574308][T20294]  ? __pfx_do_check_common+0x10/0x10
[  632.574346][T20294]  bpf_check+0x2639/0x2e10
[  632.574379][T20294]  ? ktime_get_with_offset+0x93/0x2d0
[  632.574405][T20294]  ? __pfx_bpf_check+0x10/0x10
[  632.574430][T20294]  ? bpf_obj_name_cpy+0x194/0x1e0
[  632.574463][T20294]  bpf_prog_load+0x14d6/0x1c20
[  632.574496][T20294]  ? __pfx_bpf_prog_load+0x10/0x10
[  632.574543][T20294]  __sys_bpf+0xd0d/0xd90
[  632.574573][T20294]  ? __pfx___sys_bpf+0x10/0x10
[  632.574606][T20294]  ? __fget_files+0x2a/0x420
[  632.574648][T20294]  ? ksys_write+0x242/0x270
[  632.574681][T20294]  ? __pfx_ksys_write+0x10/0x10
[  632.574714][T20294]  __x64_sys_bpf+0xba/0xd0
[  632.574738][T20294]  do_syscall_64+0x166/0x520
[  632.574765][T20294]  ? trace_irq_disable+0x3b/0x140
[  632.574785][T20294]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  632.574807][T20294]  ? clear_bhb_loop+0x70/0xc0
[  632.574832][T20294]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  632.574853][T20294] RIP: 0033:0x7f574839e159
[  632.574873][T20294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  632.574892][T20294] RSP: 002b:00007f57491eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  632.574914][T20294] RAX: ffffffffffffffda RBX: 00007f5748625fa0 RCX: 00007f574839e159
[  632.574930][T20294] RDX: 0000000000000094 RSI: 0000200000000380 RDI: 0000000000000005
[  632.574951][T20294] RBP: 00007f57491eb090 R08: 0000000000000000 R09: 0000000000000000
[  632.574965][T20294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  632.574978][T20294] R13: 00007f5748626038 R14: 00007f5748625fa0 R15: 00007ffc33960488
[  632.575009][T20294]  </TASK>
[  632.981614][ T5622] Bluetooth: hci4: command tx timeout
[  633.407680][T20324] netlink: 'syz.0.4390': attribute type 4 has an invalid length.
[  633.424103][T20228] bridge0: port 1(bridge_slave_0) entered blocking state
[  633.424445][T20228] bridge0: port 1(bridge_slave_0) entered disabled state
[  633.424784][T20228] bridge_slave_0: entered allmulticast mode
[  633.431542][T20228] bridge_slave_0: entered promiscuous mode
[  633.434433][T20228] bridge0: port 2(bridge_slave_1) entered blocking state
[  633.434669][T20228] bridge0: port 2(bridge_slave_1) entered disabled state
[  633.434806][T20228] bridge_slave_1: entered allmulticast mode
[  633.437504][T20228] bridge_slave_1: entered promiscuous mode
[  633.553351][T20228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  633.591481][T20228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  633.672714][T20330] xt_TCPMSS: Only works on TCP SYN packets
[  633.785898][T20337] __nla_validate_parse: 2 callbacks suppressed
[  633.785952][T20337] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4392'.
[  633.856641][T20338] netdevsim netdevsim3: Direct firmware load for .® failed with error -2
[  633.856688][T20338] netdevsim netdevsim3: Falling back to sysfs fallback for: .®
[  634.013566][T20228] team0: Port device team_slave_0 added
[  634.033487][T20228] team0: Port device team_slave_1 added
[  634.126322][T20228] batman_adv: batadv0: Adding interface: batadv_slave_0
[  634.135465][T20228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  634.136091][T20228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  634.250010][T20228] batman_adv: batadv0: Adding interface: batadv_slave_1
[  634.250051][T20228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  634.250080][T20228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  634.346201][T20350] pim6reg: entered allmulticast mode
[  634.489595][T20228] hsr_slave_0: entered promiscuous mode
[  634.496410][T20228] hsr_slave_1: entered promiscuous mode
[  634.503138][T20228] debugfs: 'hsr0' already exists in 'hsr'
[  634.503177][T20228] Cannot create hsr debugfs directory
[  635.031715][T20378] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4405'.
[  635.058287][ T5622] Bluetooth: hci4: command tx timeout
[  635.223376][T20228] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  635.372781][T20379] syzkaller0: entered promiscuous mode
[  635.372826][T20379] syzkaller0: entered allmulticast mode
[  635.696106][T20228] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  635.864229][T20228] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  635.969014][T20228] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  636.010399][T20403] netlink: 'syz.1.4415': attribute type 12 has an invalid length.
[  636.010452][T20403] netlink: 'syz.1.4415': attribute type 29 has an invalid length.
[  636.010485][T20403] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4415'.
[  636.010558][T20403] netlink: 'syz.1.4415': attribute type 1 has an invalid length.
[  636.010607][T20403] netlink: 'syz.1.4415': attribute type 2 has an invalid length.
[  636.165403][T20409] FAULT_INJECTION: forcing a failure.
[  636.165403][T20409] name failslab, interval 1, probability 0, space 0, times 0
[  636.178907][T20409] CPU: 0 UID: 0 PID: 20409 Comm: syz.4.4418 Not tainted syzkaller #0 PREEMPT(full) 
[  636.178936][T20409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  636.178950][T20409] Call Trace:
[  636.178959][T20409]  <TASK>
[  636.178969][T20409]  dump_stack_lvl+0xe8/0x150
[  636.179004][T20409]  should_fail_ex+0x410/0x560
[  636.179040][T20409]  should_failslab+0xa8/0x100
[  636.179068][T20409]  __kmalloc_cache_noprof+0xa3/0x600
[  636.179101][T20409]  ? __kmalloc_cache_noprof+0x14d/0x600
[  636.179141][T20409]  ? sctp_add_bind_addr+0x8c/0x370
[  636.179163][T20409]  ? sctp_add_bind_addr+0x8c/0x370
[  636.179204][T20409]  sctp_add_bind_addr+0x8c/0x370
[  636.179230][T20409]  sctp_copy_local_addr_list+0x31a/0x4e0
[  636.179256][T20409]  ? sctp_copy_local_addr_list+0xa3/0x4e0
[  636.179280][T20409]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  636.179304][T20409]  ? sctp_v6_is_any+0x64/0x80
[  636.179446][T20409]  ? sctp_copy_one_addr+0x93/0x360
[  636.179471][T20409]  sctp_bind_addr_copy+0xb3/0x3c0
[  636.179495][T20409]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  636.179529][T20409]  sctp_connect_new_asoc+0x2ff/0x6b0
[  636.179560][T20409]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  636.179594][T20409]  ? __local_bh_enable_ip+0xd6/0x140
[  636.179618][T20409]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  636.179644][T20409]  ? security_sctp_bind_connect+0x7e/0x2c0
[  636.179675][T20409]  sctp_sendmsg+0x159b/0x2d00
[  636.179715][T20409]  ? __pfx_sctp_sendmsg+0x10/0x10
[  636.179747][T20409]  ? __lock_acquire+0x6df/0x2e50
[  636.179783][T20409]  ? aa_sock_msg_perm+0xf5/0x210
[  636.179812][T20409]  ? sock_rps_record_flow+0x19/0x350
[  636.179838][T20409]  ? inet_sendmsg+0x298/0x320
[  636.179864][T20409]  ? __pfx_inet_sendmsg+0x10/0x10
[  636.179886][T20409]  sock_sendmsg_nosec+0x10e/0x180
[  636.179914][T20409]  ____sys_sendmsg+0x54e/0x850
[  636.179939][T20409]  ? __pfx_____sys_sendmsg+0x10/0x10
[  636.179967][T20409]  ? import_iovec+0x73/0xa0
[  636.180002][T20409]  ___sys_sendmsg+0x2a5/0x360
[  636.180019][T20409]  ? __lock_acquire+0x6df/0x2e50
[  636.180042][T20409]  ? __pfx____sys_sendmsg+0x10/0x10
[  636.180095][T20409]  ? __fget_files+0x2a/0x420
[  636.180126][T20409]  ? __fget_files+0x3a2/0x420
[  636.180160][T20409]  __x64_sys_sendmsg+0x1b1/0x290
[  636.180182][T20409]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  636.180222][T20409]  do_syscall_64+0x166/0x520
[  636.180247][T20409]  ? trace_irq_disable+0x3b/0x140
[  636.180266][T20409]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.180302][T20409]  ? clear_bhb_loop+0x70/0xc0
[  636.180328][T20409]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.180348][T20409] RIP: 0033:0x7f33f3f9e159
[  636.180368][T20409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  636.180387][T20409] RSP: 002b:00007f33f21f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  636.180409][T20409] RAX: ffffffffffffffda RBX: 00007f33f4225fa0 RCX: 00007f33f3f9e159
[  636.180424][T20409] RDX: 0000000024000052 RSI: 00002000000000c0 RDI: 0000000000000005
[  636.180439][T20409] RBP: 00007f33f21f6090 R08: 0000000000000000 R09: 0000000000000000
[  636.180452][T20409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  636.180465][T20409] R13: 00007f33f4226038 R14: 00007f33f4225fa0 R15: 00007ffdb72bb0e8
[  636.180499][T20409]  </TASK>
[  636.517316][T20411] netlink: Conntrack attr has 12 unknown bytes
[  636.523676][T20411] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  636.633286][T20416] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4420'.
[  636.921071][T20228] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  636.962247][T20228] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  636.975951][T20228] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  637.011159][T20228] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  637.033399][T20420] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4422'.
[  637.047624][T20228] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  637.068708][T20228] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  637.077566][T20228] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  637.090645][T20420] sock: sock_timestamping_bind_phc: sock not bind to device
[  637.105268][T20228] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  637.138354][ T5622] Bluetooth: hci4: command tx timeout
[  637.401421][T20447] 8021q: VLANs not supported on gre0
[  637.433837][T20228] 8021q: adding VLAN 0 to HW filter on device bond0
[  637.459070][T20228] 8021q: adding VLAN 0 to HW filter on device team0
[  637.477680][   T84] bridge0: port 1(bridge_slave_0) entered blocking state
[  637.477797][   T84] bridge0: port 1(bridge_slave_0) entered forwarding state
[  637.513454][   T84] bridge0: port 2(bridge_slave_1) entered blocking state
[  637.513834][   T84] bridge0: port 2(bridge_slave_1) entered forwarding state
[  637.581698][T20444] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4429'.
[  637.612421][T20228] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  638.189243][T20480] netlink: 'syz.4.4439': attribute type 4 has an invalid length.
[  638.365956][T20228] 8021q: adding VLAN 0 to HW filter on device batadv0
[  638.493233][T20492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4443'.
[  638.542046][T20228] veth0_vlan: entered promiscuous mode
[  638.572293][T20228] veth1_vlan: entered promiscuous mode
[  638.603633][T20488] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4441'.
[  638.615987][T20488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4441'.
[  638.616041][T20488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4441'.
[  638.644861][T20488] x_tables: duplicate underflow at hook 3
[  638.749141][T20228] veth0_macvtap: entered promiscuous mode
[  638.827553][T20490] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4442'.
[  638.858955][T20503] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4442'.
[  638.949973][T20500] syzkaller0: entered promiscuous mode
[  638.955763][T20500] syzkaller0: entered allmulticast mode
[  638.968687][T20228] veth1_macvtap: entered promiscuous mode
[  639.218486][ T5622] Bluetooth: hci4: command tx timeout
[  639.532357][T20522] netlink: 'syz.1.4449': attribute type 2 has an invalid length.
[  641.778798][ T5622] Bluetooth: hci3: command 0x0405 tx timeout
[  641.933915][T20228] batman_adv: batadv0: Interface activated: batadv_slave_0
[  641.990769][T20228] batman_adv: batadv0: Interface activated: batadv_slave_1
[  642.038538][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  642.040334][   T84] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  642.040443][   T84] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  642.040522][   T84] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  642.137369][T20528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4451'.
[  642.363092][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  642.363143][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  642.435448][T20536] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4456'.
[  642.489047][   T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  642.489094][   T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  642.566349][T20535] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4455'.
[  643.687653][T20580] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4468'.
[  643.749718][T20584] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4469'.
[  643.786596][T20587] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4471'.
[  644.400722][T20605] FAULT_INJECTION: forcing a failure.
[  644.400722][T20605] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  644.400781][T20605] CPU: 1 UID: 0 PID: 20605 Comm: syz.0.4473 Not tainted syzkaller #0 PREEMPT(full) 
[  644.400804][T20605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  644.400857][T20605] Call Trace:
[  644.400888][T20605]  <TASK>
[  644.400909][T20605]  dump_stack_lvl+0xe8/0x150
[  644.400980][T20605]  should_fail_ex+0x410/0x560
[  644.401079][T20605]  _copy_from_iter+0x1d3/0x1660
[  644.401156][T20605]  ? __alloc_skb+0x27a/0x7a0
[  644.401231][T20605]  ? __alloc_skb+0x27a/0x7a0
[  644.401307][T20605]  ? __alloc_skb+0x27a/0x7a0
[  644.401377][T20605]  ? __pfx__copy_from_iter+0x10/0x10
[  644.401453][T20605]  ? kmem_cache_alloc_node_noprof+0x1f9/0x610
[  644.401529][T20605]  ? __alloc_skb+0x27a/0x7a0
[  644.401594][T20605]  ? __alloc_skb+0x27a/0x7a0
[  644.401685][T20605]  ? netlink_sendmsg+0x650/0xb40
[  644.401742][T20605]  ? skb_put+0x112/0x210
[  644.401825][T20605]  netlink_sendmsg+0x6c0/0xb40
[  644.401902][T20605]  ? __pfx_netlink_sendmsg+0x10/0x10
[  644.401973][T20605]  ? apparmor_socket_sendmsg+0x98/0x360
[  644.402065][T20605]  ? __pfx_netlink_sendmsg+0x10/0x10
[  644.402128][T20605]  sock_sendmsg_nosec+0x13a/0x180
[  644.402203][T20605]  ____sys_sendmsg+0x54e/0x850
[  644.402276][T20605]  ? __pfx_____sys_sendmsg+0x10/0x10
[  644.402378][T20605]  ? import_iovec+0x73/0xa0
[  644.402486][T20605]  ___sys_sendmsg+0x2a5/0x360
[  644.402541][T20605]  ? __lock_acquire+0x6df/0x2e50
[  644.402612][T20605]  ? __pfx____sys_sendmsg+0x10/0x10
[  644.402758][T20605]  ? __fget_files+0x2a/0x420
[  644.402834][T20605]  ? __fget_files+0x3a2/0x420
[  644.402938][T20605]  __x64_sys_sendmsg+0x1b1/0x290
[  644.403002][T20605]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  644.403109][T20605]  do_syscall_64+0x166/0x520
[  644.403191][T20605]  ? trace_irq_disable+0x3b/0x140
[  644.403245][T20605]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  644.403306][T20605]  ? clear_bhb_loop+0x70/0xc0
[  644.403372][T20605]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  644.403447][T20605] RIP: 0033:0x7fdeebb9e159
[  644.403501][T20605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  644.403552][T20605] RSP: 002b:00007fdeec9b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  644.403616][T20605] RAX: ffffffffffffffda RBX: 00007fdeebe25fa0 RCX: 00007fdeebb9e159
[  644.403659][T20605] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[  644.403693][T20605] RBP: 00007fdeec9b3090 R08: 0000000000000000 R09: 0000000000000000
[  644.403742][T20605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  644.403789][T20605] R13: 00007fdeebe26038 R14: 00007fdeebe25fa0 R15: 00007ffe2f70d0c8
[  644.403889][T20605]  </TASK>
[  645.129685][T20615] tipc: Enabling of bearer <eth:pim6reg> rejected, failed to enable media
[  645.239041][T20611] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4475'.
[  645.437033][T20625] FAULT_INJECTION: forcing a failure.
[  645.437033][T20625] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  645.437094][T20625] CPU: 1 UID: 0 PID: 20625 Comm: syz.3.4481 Not tainted syzkaller #0 PREEMPT(full) 
[  645.437120][T20625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  645.437175][T20625] Call Trace:
[  645.437209][T20625]  <TASK>
[  645.437238][T20625]  dump_stack_lvl+0xe8/0x150
[  645.437374][T20625]  should_fail_ex+0x410/0x560
[  645.437527][T20625]  _copy_from_user+0x2d/0xb0
[  645.437589][T20625]  ___sys_sendmsg+0x1c6/0x360
[  645.437665][T20625]  ? __pfx____sys_sendmsg+0x10/0x10
[  645.437719][T20625]  ? __lock_acquire+0x6df/0x2e50
[  645.437901][T20625]  __sys_sendmmsg+0x273/0x4d0
[  645.437975][T20625]  ? __pfx___sys_sendmmsg+0x10/0x10
[  645.438069][T20625]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  645.438183][T20625]  ? ksys_write+0x242/0x270
[  645.438270][T20625]  ? __pfx_ksys_write+0x10/0x10
[  645.438363][T20625]  __x64_sys_sendmmsg+0xa0/0xc0
[  645.438430][T20625]  do_syscall_64+0x166/0x520
[  645.438502][T20625]  ? trace_irq_disable+0x3b/0x140
[  645.438553][T20625]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  645.438613][T20625]  ? clear_bhb_loop+0x70/0xc0
[  645.438683][T20625]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  645.438750][T20625] RIP: 0033:0x7f0f1499e159
[  645.438816][T20625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  645.438862][T20625] RSP: 002b:00007f0f15864028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  645.438923][T20625] RAX: ffffffffffffffda RBX: 00007f0f14c25fa0 RCX: 00007f0f1499e159
[  645.438964][T20625] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003
[  645.439002][T20625] RBP: 00007f0f15864090 R08: 0000000000000000 R09: 0000000000000000
[  645.439037][T20625] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002
[  645.439074][T20625] R13: 00007f0f14c26038 R14: 00007f0f14c25fa0 R15: 00007ffd2af4f238
[  645.439164][T20625]  </TASK>
[  645.821951][T20638] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4486'.
[  646.054477][T20645] syzkaller0: entered promiscuous mode
[  646.061260][T20643] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4487'.
[  646.061303][T20643] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4487'.
[  646.061339][T20643] netlink: 'syz.2.4487': attribute type 5 has an invalid length.
[  646.061359][T20643] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4487'.
[  646.079583][T20645] syzkaller0: entered allmulticast mode
[  646.112993][T20643] syzkaller0: entered promiscuous mode
[  646.113054][T20643] syzkaller0: entered allmulticast mode
[  646.139596][T20645] 0: reclassify loop, rule prio 0, protocol 800
[  646.251796][T20643] tipc: Started in network mode
[  646.251850][T20643] tipc: Node identity 2250e7f4e8cf, cluster identity 4711
[  646.253066][T20643] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  646.298923][T20643] tipc: Resetting bearer <eth:syzkaller0>
[  646.299400][T20643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  646.323218][T20642] tipc: Resetting bearer <eth:syzkaller0>
[  646.391278][T20642] tipc: Disabling bearer <eth:syzkaller0>
[  646.663573][T20656] xt_CT: No such helper "snmp_trap"
[  646.935470][T20669] FAULT_INJECTION: forcing a failure.
[  646.935470][T20669] name failslab, interval 1, probability 0, space 0, times 0
[  646.935522][T20669] CPU: 1 UID: 0 PID: 20669 Comm: syz.2.4496 Not tainted syzkaller #0 PREEMPT(full) 
[  646.935545][T20669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  646.935559][T20669] Call Trace:
[  646.935567][T20669]  <TASK>
[  646.935576][T20669]  dump_stack_lvl+0xe8/0x150
[  646.935641][T20669]  should_fail_ex+0x410/0x560
[  646.935779][T20669]  should_failslab+0xa8/0x100
[  646.935889][T20669]  __kmalloc_node_track_caller_noprof+0xfb/0x720
[  646.935983][T20669]  ? bpf_push_jmp_history+0x26c/0x6d0
[  646.936037][T20669]  ? bpf_push_jmp_history+0x26c/0x6d0
[  646.936095][T20669]  ? bpf_push_jmp_history+0x26c/0x6d0
[  646.936153][T20669]  krealloc_node_align_noprof+0x19a/0x390
[  646.936216][T20669]  ? __kasan_kmalloc+0x93/0xb0
[  646.936282][T20669]  bpf_push_jmp_history+0x26c/0x6d0
[  646.936368][T20669]  do_check_common+0x2a0a/0x5d30
[  646.936501][T20669]  ? __pfx_do_check_common+0x10/0x10
[  646.936588][T20669]  bpf_check+0x2639/0x2e10
[  646.936663][T20669]  ? ktime_get_with_offset+0x93/0x2d0
[  646.936713][T20669]  ? __pfx_bpf_check+0x10/0x10
[  646.936769][T20669]  ? bpf_obj_name_cpy+0x194/0x1e0
[  646.936842][T20669]  bpf_prog_load+0x14d6/0x1c20
[  646.936923][T20669]  ? __pfx_bpf_prog_load+0x10/0x10
[  646.937030][T20669]  __sys_bpf+0xd0d/0xd90
[  646.937093][T20669]  ? __pfx___sys_bpf+0x10/0x10
[  646.937196][T20669]  ? __fget_files+0x2a/0x420
[  646.937299][T20669]  ? ksys_write+0x242/0x270
[  646.937371][T20669]  ? __pfx_ksys_write+0x10/0x10
[  646.937444][T20669]  __x64_sys_bpf+0xba/0xd0
[  646.937497][T20669]  do_syscall_64+0x166/0x520
[  646.937560][T20669]  ? trace_irq_disable+0x3b/0x140
[  646.937609][T20669]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  646.937657][T20669]  ? clear_bhb_loop+0x70/0xc0
[  646.937713][T20669]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  646.937760][T20669] RIP: 0033:0x7feec839e159
[  646.937821][T20669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  646.937860][T20669] RSP: 002b:00007feec924d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  646.937915][T20669] RAX: ffffffffffffffda RBX: 00007feec8625fa0 RCX: 00007feec839e159
[  646.937951][T20669] RDX: 0000000000000094 RSI: 0000200000000380 RDI: 0000000000000005
[  646.937969][T20669] RBP: 00007feec924d090 R08: 0000000000000000 R09: 0000000000000000
[  646.937980][T20669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  646.937997][T20669] R13: 00007feec8626038 R14: 00007feec8625fa0 R15: 00007ffe41410a18
[  646.938089][T20669]  </TASK>
[  647.233904][T20668] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[  647.937513][T20702] netlink: 'syz.0.4506': attribute type 1 has an invalid length.
[  648.079880][T20702] gretap1: entered allmulticast mode
[  648.105289][T20702] bond3: (slave gretap1): making interface the new active one
[  648.113156][T20702] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  648.699438][T20713] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4511'.
[  649.129424][T20717] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4512'.
[  649.507639][T20745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4522'.
[  649.588495][T20745] vlan2: entered promiscuous mode
[  650.040955][T20761] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4527'.
[  650.165953][T20764] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4529'.
[  650.341907][T20768] FAULT_INJECTION: forcing a failure.
[  650.341907][T20768] name failslab, interval 1, probability 0, space 0, times 0
[  650.357783][T20768] CPU: 0 UID: 0 PID: 20768 Comm: syz.4.4530 Not tainted syzkaller #0 PREEMPT(full) 
[  650.357810][T20768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  650.357824][T20768] Call Trace:
[  650.357832][T20768]  <TASK>
[  650.357840][T20768]  dump_stack_lvl+0xe8/0x150
[  650.357876][T20768]  should_fail_ex+0x410/0x560
[  650.357909][T20768]  should_failslab+0xa8/0x100
[  650.357933][T20768]  __kvmalloc_node_noprof+0x176/0x820
[  650.357956][T20768]  ? bpf_compute_subprog_arg_access+0x509/0x14d0
[  650.357978][T20768]  ? bpf_compute_subprog_arg_access+0x509/0x14d0
[  650.358006][T20768]  bpf_compute_subprog_arg_access+0x509/0x14d0
[  650.358027][T20768]  ? bpf_base_func_proto+0x1d0/0xb00
[  650.358051][T20768]  ? __pfx_sk_filter_func_proto+0x10/0x10
[  650.358099][T20768]  ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10
[  650.358127][T20768]  ? __kvmalloc_node_noprof+0x345/0x820
[  650.358146][T20768]  ? bpf_compute_live_registers+0x14f/0x1ff0
[  650.358166][T20768]  ? bpf_compute_live_registers+0x14f/0x1ff0
[  650.358188][T20768]  bpf_compute_live_registers+0x8d3/0x1ff0
[  650.358218][T20768]  ? __pfx_bpf_compute_live_registers+0x10/0x10
[  650.358243][T20768]  bpf_check+0x25ed/0x2e10
[  650.358268][T20768]  ? ktime_get_with_offset+0x93/0x2d0
[  650.358287][T20768]  ? __pfx_bpf_check+0x10/0x10
[  650.358304][T20768]  ? bpf_obj_name_cpy+0x194/0x1e0
[  650.358332][T20768]  bpf_prog_load+0x14d6/0x1c20
[  650.358366][T20768]  ? __pfx_bpf_prog_load+0x10/0x10
[  650.358400][T20768]  __sys_bpf+0xd0d/0xd90
[  650.358423][T20768]  ? __pfx___sys_bpf+0x10/0x10
[  650.358447][T20768]  ? __fget_files+0x2a/0x420
[  650.358479][T20768]  ? ksys_write+0x242/0x270
[  650.358503][T20768]  ? __pfx_ksys_write+0x10/0x10
[  650.358529][T20768]  __x64_sys_bpf+0xba/0xd0
[  650.358546][T20768]  do_syscall_64+0x166/0x520
[  650.358567][T20768]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  650.358584][T20768]  ? clear_bhb_loop+0x70/0xc0
[  650.358603][T20768]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  650.358619][T20768] RIP: 0033:0x7f33f3f9e159
[  650.358634][T20768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  650.358648][T20768] RSP: 002b:00007f33f21f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  650.358666][T20768] RAX: ffffffffffffffda RBX: 00007f33f4225fa0 RCX: 00007f33f3f9e159
[  650.358678][T20768] RDX: 0000000000000094 RSI: 0000200000001fc0 RDI: 0000000000000005
[  650.358688][T20768] RBP: 00007f33f21f6090 R08: 0000000000000000 R09: 0000000000000000
[  650.358699][T20768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  650.358709][T20768] R13: 00007f33f4226038 R14: 00007f33f4225fa0 R15: 00007ffdb72bb0e8
[  650.358733][T20768]  </TASK>
[  650.941147][T20785] xt_hashlimit: size too large, truncated to 1048576
[  651.352068][T20796] bridge0: port 2(bridge_slave_1) entered disabled state
[  651.352751][T20796] bridge0: port 1(bridge_slave_0) entered disabled state
[  651.594510][T20796] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  651.623372][T20796] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  652.096476][T20827] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4542'.
[  652.118691][   T59] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  652.198893][T20809] ip6gre1: entered promiscuous mode
[  652.198934][T20809] ip6gre1: entered allmulticast mode
[  652.256533][T20831] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4545'.
[  652.258699][   T84] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  652.258835][   T84] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  652.258923][   T84] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  652.304416][T20833] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4544'.
[  656.046346][T20877] syzkaller0: entered promiscuous mode
[  656.053979][T20877] syzkaller0: entered allmulticast mode
[  656.093988][T20894] openvswitch: netlink: Missing key (keys=c0, expected=480)
[  656.101921][ T1461] tipc: Resetting bearer <eth:syzkaller0>
[  656.259338][T20885] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4556'.
[  656.410442][ T1461] bond4 (unregistering): (slave gretap1): Releasing active interface
[  656.444672][ T1461] bond3 (unregistering): (slave gre2): Releasing backup interface
[  656.444724][ T1461] gre2 (unregistering): left promiscuous mode
[  656.577509][ T1461] tipc: Disabling bearer <eth:syzkaller0>
[  656.592231][ T1461] team0: Port device bridge4 removed
[  656.635322][ T1461] bond5 (unregistering): (slave bridge8): Releasing backup interface
[  656.635376][ T1461] bridge8 (unregistering): left promiscuous mode
[  656.636734][ T1461] bridge8 (unregistering): left allmulticast mode
[  656.674350][ T1461] bond6 (unregistering): (slave bridge9): Releasing backup interface
[  656.694372][ T1461] bond0 (unregistering): Released all slaves
[  656.711275][ T1461] bond1 (unregistering): Released all slaves
[  656.736730][ T1461] bond2 (unregistering): (slave veth7): Releasing active interface
[  656.752991][ T1461] bond2 (unregistering): Released all slaves
[  656.776799][ T1461] bond3 (unregistering): Released all slaves
[  656.799283][ T1461] bond4 (unregistering): Released all slaves
[  656.846639][ T1461] bond5 (unregistering): Released all slaves
[  656.922285][ T1461] bond6 (unregistering): Released all slaves
[  656.971891][ T1461] bond7 (unregistering): Released all slaves
[  659.691055][ T1461] : left promiscuous mode
[  659.869938][ T1461] tipc: Disabling bearer <udp:syz1>
[  659.870076][ T1461] tipc: Left network mode
[  659.911490][T20916] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4561'.
[  660.302291][T20930] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4567'.
[  660.341971][T20934] FAULT_INJECTION: forcing a failure.
[  660.341971][T20934] name failslab, interval 1, probability 0, space 0, times 0
[  660.342067][T20934] CPU: 1 UID: 0 PID: 20934 Comm: syz.3.4569 Not tainted syzkaller #0 PREEMPT(full) 
[  660.342096][T20934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  660.342142][T20934] Call Trace:
[  660.342186][T20934]  <TASK>
[  660.342218][T20934]  dump_stack_lvl+0xe8/0x150
[  660.342337][T20934]  should_fail_ex+0x410/0x560
[  660.342453][T20934]  should_failslab+0xa8/0x100
[  660.342545][T20934]  __kmalloc_cache_noprof+0xa3/0x600
[  660.342647][T20934]  ? push_stack+0x7e/0x380
[  660.342737][T20934]  ? push_stack+0x7e/0x380
[  660.342841][T20934]  push_stack+0x7e/0x380
[  660.342942][T20934]  do_check_insn+0xaa9d/0x17d70
[  660.343099][T20934]  ? __asan_memcpy+0x40/0x70
[  660.343200][T20934]  ? __pfx_do_check_insn+0x10/0x10
[  660.343349][T20934]  ? vscnprintf+0x5c/0x90
[  660.343430][T20934]  ? bpf_verifier_vlog+0x3d1/0x900
[  660.343559][T20934]  ? verbose+0x11d/0x1a0
[  660.343668][T20934]  ? __pfx_bpf_verifier_log_write+0x10/0x10
[  660.343795][T20934]  ? __pfx_verbose+0x10/0x10
[  660.343896][T20934]  ? bpf_vlog_reset+0x1db/0x340
[  660.344022][T20934]  ? print_insn_state+0x106/0x170
[  660.344098][T20934]  do_check_common+0x3c19/0x5d30
[  660.344285][T20934]  ? __pfx_do_check_common+0x10/0x10
[  660.344365][T20934]  ? __pfx_verbose+0x10/0x10
[  660.344472][T20934]  ? __pfx_bpf_disasm_kfunc_name+0x10/0x10
[  660.344606][T20934]  bpf_check+0x2639/0x2e10
[  660.344709][T20934]  ? ktime_get_with_offset+0x93/0x2d0
[  660.344789][T20934]  ? __pfx_bpf_check+0x10/0x10
[  660.344861][T20934]  ? bpf_obj_name_cpy+0x194/0x1e0
[  660.344976][T20934]  bpf_prog_load+0x14d6/0x1c20
[  660.345103][T20934]  ? __pfx_bpf_prog_load+0x10/0x10
[  660.345258][T20934]  __sys_bpf+0xd0d/0xd90
[  660.345351][T20934]  ? __pfx___sys_bpf+0x10/0x10
[  660.345463][T20934]  ? __fget_files+0x2a/0x420
[  660.345591][T20934]  ? ksys_write+0x242/0x270
[  660.345701][T20934]  ? __pfx_ksys_write+0x10/0x10
[  660.345820][T20934]  __x64_sys_bpf+0xba/0xd0
[  660.345891][T20934]  do_syscall_64+0x166/0x520
[  660.345979][T20934]  ? trace_irq_disable+0x3b/0x140
[  660.346046][T20934]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  660.346115][T20934]  ? clear_bhb_loop+0x70/0xc0
[  660.346195][T20934]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  660.346262][T20934] RIP: 0033:0x7f0f1499e159
[  660.346331][T20934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  660.346397][T20934] RSP: 002b:00007f0f15864028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  660.346491][T20934] RAX: ffffffffffffffda RBX: 00007f0f14c25fa0 RCX: 00007f0f1499e159
[  660.346540][T20934] RDX: 0000000000000094 RSI: 0000200000001fc0 RDI: 0000000000000005
[  660.346583][T20934] RBP: 00007f0f15864090 R08: 0000000000000000 R09: 0000000000000000
[  660.346622][T20934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  660.346651][T20934] R13: 00007f0f14c26038 R14: 00007f0f14c25fa0 R15: 00007ffd2af4f238
[  660.346753][T20934]  </TASK>
[  660.793958][T20941] tipc: Enabled bearer <udp:syz2>, priority 10
[  661.278856][T20953] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4573'.
[  661.439300][T20947] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  661.533614][T20946] tipc: Disabling bearer <eth:syzkaller0>
[  661.742005][T20971] netlink: 'syz.4.4578': attribute type 12 has an invalid length.
[  661.753768][T20971] netlink: 'syz.4.4578': attribute type 29 has an invalid length.
[  661.753829][T20971] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4578'.
[  661.909308][ T6142] tipc: Node number set to 2979086118
[  662.022646][T20981] syz_tun: entered allmulticast mode
[  662.166252][T20983] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4581'.
[  662.218016][T20988] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4585'.
[  662.331413][T20975] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4580'.
[  663.017147][T21014] netlink: 564 bytes leftover after parsing attributes in process `syz.0.4590'.
[  663.221238][T21014] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7
[  663.502076][ T1461] hsr_slave_0: left promiscuous mode
[  663.512526][ T1461] hsr_slave_1: left promiscuous mode
[  663.519899][ T1461] batman_adv: batadv0: Removing interface: ip
[  663.607033][T21026] Bluetooth: hci0: invalid length 0, exp 2 for type 7
[  663.972729][T21045] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4597'.
[  664.493045][T21030] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  664.621024][T21042] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  664.745624][T21061] FAULT_INJECTION: forcing a failure.
[  664.745624][T21061] name failslab, interval 1, probability 0, space 0, times 0
[  664.745683][T21061] CPU: 0 UID: 0 PID: 21061 Comm: syz.3.4602 Not tainted syzkaller #0 PREEMPT(full) 
[  664.745706][T21061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  664.745758][T21061] Call Trace:
[  664.745790][T21061]  <TASK>
[  664.745823][T21061]  dump_stack_lvl+0xe8/0x150
[  664.745976][T21061]  should_fail_ex+0x410/0x560
[  664.746063][T21061]  should_failslab+0xa8/0x100
[  664.746122][T21061]  ? skb_clone+0x212/0x3a0
[  664.746186][T21061]  kmem_cache_alloc_noprof+0xa1/0x600
[  664.746264][T21061]  ? skb_clone+0x212/0x3a0
[  664.746331][T21061]  skb_clone+0x212/0x3a0
[  664.746398][T21061]  bpf_clone_redirect+0x170/0x4b0
[  664.746491][T21061]  ? bpf_test_run+0x1d1/0x830
[  664.746552][T21061]  bpf_prog_885767c90d177146+0x62/0x6b
[  664.746618][T21061]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  664.746727][T21061]  ? __pfx___schedule+0x10/0x10
[  664.746817][T21061]  ? preempt_schedule_thunk+0x16/0x40
[  664.746883][T21061]  ? preempt_schedule_common+0x7f/0xd0
[  664.746942][T21061]  ? bpf_test_run+0x1d1/0x830
[  664.747001][T21061]  ? bpf_test_timer_continue+0x10c/0x320
[  664.747084][T21061]  bpf_test_run+0x354/0x830
[  664.747188][T21061]  ? __pfx_bpf_test_run+0x10/0x10
[  664.747309][T21061]  ? __kasan_krealloc+0xec/0x110
[  664.747399][T21061]  ? skb_dst_set+0x72/0x140
[  664.747459][T21061]  bpf_prog_test_run_skb+0xe35/0x2230
[  664.747559][T21061]  ? __fget_files+0x3a2/0x420
[  664.747624][T21061]  ? __fget_files+0x2a/0x420
[  664.747699][T21061]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  664.747761][T21061]  bpf_prog_test_run+0x2c5/0x340
[  664.747830][T21061]  __sys_bpf+0xa22/0xd90
[  664.747906][T21061]  ? __pfx___sys_bpf+0x10/0x10
[  664.747989][T21061]  ? __fget_files+0x2a/0x420
[  664.748099][T21061]  ? ksys_write+0x242/0x270
[  664.748176][T21061]  ? __pfx_ksys_write+0x10/0x10
[  664.748261][T21061]  __x64_sys_bpf+0xba/0xd0
[  664.748337][T21061]  do_syscall_64+0x166/0x520
[  664.748408][T21061]  ? trace_irq_disable+0x3b/0x140
[  664.748452][T21061]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  664.748519][T21061]  ? clear_bhb_loop+0x70/0xc0
[  664.748598][T21061]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  664.748672][T21061] RIP: 0033:0x7f0f1499e159
[  664.748766][T21061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  664.748840][T21061] RSP: 002b:00007f0f15864028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  664.748897][T21061] RAX: ffffffffffffffda RBX: 00007f0f14c25fa0 RCX: 00007f0f1499e159
[  664.748939][T21061] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a
[  664.748973][T21061] RBP: 00007f0f15864090 R08: 0000000000000000 R09: 0000000000000000
[  664.748999][T21061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  664.749039][T21061] R13: 00007f0f14c26038 R14: 00007f0f14c25fa0 R15: 00007ffd2af4f238
[  664.749132][T21061]  </TASK>
[  665.200950][T21059] tipc: Enabled bearer <udp:syz2>, priority 10
[  665.483365][T21074] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4606'.
[  665.544066][ T1461] IPVS: stop unused estimator thread 0...
[  665.610564][T21079] FAULT_INJECTION: forcing a failure.
[  665.610564][T21079] name failslab, interval 1, probability 0, space 0, times 0
[  665.610625][T21079] CPU: 0 UID: 0 PID: 21079 Comm: syz.0.4608 Not tainted syzkaller #0 PREEMPT(full) 
[  665.610648][T21079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  665.610660][T21079] Call Trace:
[  665.610668][T21079]  <TASK>
[  665.610676][T21079]  dump_stack_lvl+0xe8/0x150
[  665.610787][T21079]  should_fail_ex+0x410/0x560
[  665.610886][T21079]  ? __alloc_skb+0x1db/0x7a0
[  665.610954][T21079]  should_failslab+0xa8/0x100
[  665.611032][T21079]  ? __alloc_skb+0x1db/0x7a0
[  665.611155][T21079]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  665.611240][T21079]  ? __alloc_skb+0x18d/0x7a0
[  665.611314][T21079]  ? __alloc_skb+0x1db/0x7a0
[  665.611399][T21079]  __alloc_skb+0x1db/0x7a0
[  665.611513][T21079]  netlink_ack+0x136/0xb30
[  665.611563][T21079]  ? __pfx_genl_rcv_msg+0x10/0x10
[  665.611635][T21079]  ? __pfx_nl80211_post_doit+0x10/0x10
[  665.611855][T21079]  ? __pfx_ref_tracker_free+0x10/0x10
[  665.611964][T21079]  netlink_rcv_skb+0x2a4/0x4a0
[  665.612041][T21079]  ? __pfx_genl_rcv_msg+0x10/0x10
[  665.612130][T21079]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  665.612251][T21079]  ? down_read+0x2be/0x330
[  665.612345][T21079]  genl_rcv+0x28/0x40
[  665.612424][T21079]  netlink_unicast+0x7bd/0x940
[  665.612503][T21079]  netlink_sendmsg+0x813/0xb40
[  665.612597][T21079]  ? __pfx_netlink_sendmsg+0x10/0x10
[  665.612694][T21079]  ? apparmor_socket_sendmsg+0x98/0x360
[  665.612787][T21079]  ? __pfx_netlink_sendmsg+0x10/0x10
[  665.612849][T21079]  sock_sendmsg_nosec+0x13a/0x180
[  665.612950][T21079]  ____sys_sendmsg+0x54e/0x850
[  665.613032][T21079]  ? __pfx_____sys_sendmsg+0x10/0x10
[  665.613114][T21079]  ? import_iovec+0x73/0xa0
[  665.613228][T21079]  ___sys_sendmsg+0x2a5/0x360
[  665.613284][T21079]  ? __lock_acquire+0x6df/0x2e50
[  665.613345][T21079]  ? __pfx____sys_sendmsg+0x10/0x10
[  665.613469][T21079]  ? __fget_files+0x2a/0x420
[  665.613532][T21079]  ? __fget_files+0x3a2/0x420
[  665.613662][T21079]  __x64_sys_sendmsg+0x1b1/0x290
[  665.613740][T21079]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  665.613854][T21079]  do_syscall_64+0x166/0x520
[  665.613927][T21079]  ? trace_irq_disable+0x3b/0x140
[  665.613988][T21079]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  665.614049][T21079]  ? clear_bhb_loop+0x70/0xc0
[  665.614123][T21079]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  665.614183][T21079] RIP: 0033:0x7fdeebb9e159
[  665.614237][T21079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  665.614287][T21079] RSP: 002b:00007fdeec9b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  665.614348][T21079] RAX: ffffffffffffffda RBX: 00007fdeebe25fa0 RCX: 00007fdeebb9e159
[  665.614390][T21079] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[  665.614431][T21079] RBP: 00007fdeec9b3090 R08: 0000000000000000 R09: 0000000000000000
[  665.614464][T21079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  665.614497][T21079] R13: 00007fdeebe26038 R14: 00007fdeebe25fa0 R15: 00007ffe2f70d0c8
[  665.614584][T21079]  </TASK>
[  666.410976][T17406] tipc: Node number set to 3399477236
[  666.625441][T21094] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  666.646029][T21096] netlink: 'syz.2.4612': attribute type 7 has an invalid length.
[  666.646064][T21096] netlink: 'syz.2.4612': attribute type 3 has an invalid length.
[  666.646092][T21096] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4612'.
[  666.679386][T21096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4612'.
[  666.679455][T21096] nbd: couldn't find a device at index 117441536
[  666.746223][T21111] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4616'.
[  667.245162][T21138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4623'.
[  667.290553][T21138] vlan3: entered promiscuous mode
[  667.290611][T21138] bond0: entered promiscuous mode
[  667.291457][T21138] bond_slave_0: entered promiscuous mode
[  667.291961][T21138] bond_slave_1: entered promiscuous mode
[  667.571371][T21144] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4625'.
[  667.825687][T21143] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4624'.
[  667.858625][   T59] wlan0: Trigger new scan to find an IBSS to join
[  668.210893][T21169] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  668.252594][T21171] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4631'.
[  668.699473][T21188] Cannot find add_set index 0 as target
[  670.898029][   T84] wlan0: Trigger new scan to find an IBSS to join
[  671.543615][T21178] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  671.771805][T21235] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4646'.
[  671.851799][T21240] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4648'.
[  672.341466][T21261] batadv_slave_1: entered promiscuous mode
[  672.351341][T21260] batadv_slave_1: left promiscuous mode
[  672.427598][T21263] FAULT_INJECTION: forcing a failure.
[  672.427598][T21263] name failslab, interval 1, probability 0, space 0, times 0
[  672.427653][T21263] CPU: 0 UID: 0 PID: 21263 Comm: syz.0.4657 Not tainted syzkaller #0 PREEMPT(full) 
[  672.427676][T21263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  672.427741][T21263] Call Trace:
[  672.427770][T21263]  <TASK>
[  672.427803][T21263]  dump_stack_lvl+0xe8/0x150
[  672.427907][T21263]  should_fail_ex+0x410/0x560
[  672.428001][T21263]  should_failslab+0xa8/0x100
[  672.428081][T21263]  __kmalloc_cache_noprof+0xa3/0x600
[  672.428156][T21263]  ? __kmalloc_cache_noprof+0x14d/0x600
[  672.428226][T21263]  ? sctp_add_bind_addr+0x8c/0x370
[  672.428274][T21263]  ? sctp_add_bind_addr+0x8c/0x370
[  672.428351][T21263]  sctp_add_bind_addr+0x8c/0x370
[  672.428413][T21263]  sctp_copy_local_addr_list+0x31a/0x4e0
[  672.428474][T21263]  ? sctp_copy_local_addr_list+0xa3/0x4e0
[  672.428529][T21263]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  672.428587][T21263]  ? sctp_v6_is_any+0x64/0x80
[  672.428648][T21263]  ? sctp_copy_one_addr+0x93/0x360
[  672.428708][T21263]  sctp_bind_addr_copy+0xb3/0x3c0
[  672.428762][T21263]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  672.428860][T21263]  sctp_connect_new_asoc+0x2ff/0x6b0
[  672.428914][T21263]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  672.429009][T21263]  ? __local_bh_enable_ip+0xd6/0x140
[  672.429071][T21263]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  672.429133][T21263]  ? security_sctp_bind_connect+0x7e/0x2c0
[  672.429210][T21263]  sctp_sendmsg+0x159b/0x2d00
[  672.429319][T21263]  ? __pfx_sctp_sendmsg+0x10/0x10
[  672.429410][T21263]  ? __lock_acquire+0x6df/0x2e50
[  672.429488][T21263]  ? aa_sock_msg_perm+0xf5/0x210
[  672.429559][T21263]  ? sock_rps_record_flow+0x19/0x350
[  672.429627][T21263]  ? inet_sendmsg+0x298/0x320
[  672.429689][T21263]  ? __pfx_inet_sendmsg+0x10/0x10
[  672.429740][T21263]  sock_sendmsg_nosec+0x10e/0x180
[  672.429812][T21263]  ____sys_sendmsg+0x54e/0x850
[  672.429883][T21263]  ? __pfx_____sys_sendmsg+0x10/0x10
[  672.429961][T21263]  ? import_iovec+0x73/0xa0
[  672.430061][T21263]  ___sys_sendmsg+0x2a5/0x360
[  672.430116][T21263]  ? __lock_acquire+0x6df/0x2e50
[  672.430185][T21263]  ? __pfx____sys_sendmsg+0x10/0x10
[  672.430339][T21263]  ? __fget_files+0x2a/0x420
[  672.430412][T21263]  ? __fget_files+0x3a2/0x420
[  672.430499][T21263]  __x64_sys_sendmsg+0x1b1/0x290
[  672.430624][T21263]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  672.430769][T21263]  do_syscall_64+0x166/0x520
[  672.430853][T21263]  ? trace_irq_disable+0x3b/0x140
[  672.430909][T21263]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  672.430970][T21263]  ? clear_bhb_loop+0x70/0xc0
[  672.431048][T21263]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  672.431136][T21263] RIP: 0033:0x7fdeebb9e159
[  672.431170][T21263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  672.431190][T21263] RSP: 002b:00007fdeec9b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  672.431244][T21263] RAX: ffffffffffffffda RBX: 00007fdeebe25fa0 RCX: 00007fdeebb9e159
[  672.431280][T21263] RDX: 0000000024000052 RSI: 00002000000000c0 RDI: 0000000000000005
[  672.431332][T21263] RBP: 00007fdeec9b3090 R08: 0000000000000000 R09: 0000000000000000
[  672.431364][T21263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  672.431392][T21263] R13: 00007fdeebe26038 R14: 00007fdeebe25fa0 R15: 00007ffe2f70d0c8
[  672.431519][T21263]  </TASK>
[  673.075025][T21269] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  673.184103][T21281] syzkaller0: entered promiscuous mode
[  673.184159][T21281] syzkaller0: entered allmulticast mode
[  673.213746][T21281] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  673.239799][T21281] ieee802154 phy1 wpan1: encryption failed: -22
[  673.258885][T21278] tipc: Resetting bearer <eth:syzkaller0>
[  673.306974][T21286] FAULT_INJECTION: forcing a failure.
[  673.306974][T21286] name failslab, interval 1, probability 0, space 0, times 0
[  673.307032][T21286] CPU: 0 UID: 0 PID: 21286 Comm: syz.1.4667 Not tainted syzkaller #0 PREEMPT(full) 
[  673.307061][T21286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  673.307142][T21286] Call Trace:
[  673.307177][T21286]  <TASK>
[  673.307207][T21286]  dump_stack_lvl+0xe8/0x150
[  673.307331][T21286]  should_fail_ex+0x410/0x560
[  673.307427][T21286]  should_failslab+0xa8/0x100
[  673.307508][T21286]  __kvmalloc_node_noprof+0x176/0x820
[  673.307570][T21286]  ? __kmalloc_cache_noprof+0x321/0x600
[  673.307674][T21286]  ? bpf_int_jit_compile+0x5af/0x17e0
[  673.307757][T21286]  ? bpf_int_jit_compile+0x5af/0x17e0
[  673.307848][T21286]  bpf_int_jit_compile+0x5af/0x17e0
[  673.307984][T21286]  ? __pfx_bpf_int_jit_compile+0x10/0x10
[  673.308078][T21286]  ? _copy_to_user+0x8a/0xb0
[  673.308139][T21286]  ? bpf_log_attr_finalize+0x150/0x1e0
[  673.308211][T21286]  __bpf_prog_select_runtime+0x53e/0xbf0
[  673.308320][T21286]  bpf_check+0x23e7/0x2e10
[  673.308406][T21286]  ? ktime_get_with_offset+0x93/0x2d0
[  673.308479][T21286]  ? __pfx_bpf_check+0x10/0x10
[  673.308548][T21286]  ? bpf_obj_name_cpy+0x194/0x1e0
[  673.308651][T21286]  bpf_prog_load+0x14d6/0x1c20
[  673.308753][T21286]  ? __pfx_bpf_prog_load+0x10/0x10
[  673.308870][T21286]  __sys_bpf+0xd0d/0xd90
[  673.308955][T21286]  ? __pfx___sys_bpf+0x10/0x10
[  673.309061][T21286]  ? __fget_files+0x2a/0x420
[  673.309174][T21286]  ? ksys_write+0x242/0x270
[  673.309290][T21286]  ? __pfx_ksys_write+0x10/0x10
[  673.309377][T21286]  __x64_sys_bpf+0xba/0xd0
[  673.309447][T21286]  do_syscall_64+0x166/0x520
[  673.309527][T21286]  ? trace_irq_disable+0x3b/0x140
[  673.309598][T21286]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  673.309657][T21286]  ? clear_bhb_loop+0x70/0xc0
[  673.309736][T21286]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  673.309783][T21286] RIP: 0033:0x7f574839e159
[  673.309854][T21286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  673.309905][T21286] RSP: 002b:00007f57491eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  673.309973][T21286] RAX: ffffffffffffffda RBX: 00007f5748625fa0 RCX: 00007f574839e159
[  673.310028][T21286] RDX: 0000000000000094 RSI: 0000200000000380 RDI: 0000000000000005
[  673.310074][T21286] RBP: 00007f57491eb090 R08: 0000000000000000 R09: 0000000000000000
[  673.310107][T21286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  673.310154][T21286] R13: 00007f5748626038 R14: 00007f5748625fa0 R15: 00007ffc33960488
[  673.310231][T21286]  </TASK>
[  673.347229][T21278] tipc: Disabling bearer <eth:syzkaller0>
[  673.858162][T13705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  674.017814][T21299] xt_CT: No such helper "snmp_trap"
[  674.157826][T21307] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4673'.
[  674.841713][T21324] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  675.180853][T21339] netlink: 'syz.3.4685': attribute type 3 has an invalid length.
[  675.264828][T21346] netlink: 'syz.3.4685': attribute type 3 has an invalid length.
[  675.430703][T21343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4686'.
[  675.441383][T21342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4686'.
[  675.923837][T21370] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  676.321614][T21388] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4698'.
[  676.401697][T21391] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4698'.
[  676.474856][T21395] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4700'.
[  676.760373][T21405] veth1_vlan: Caught tx_queue_len zero misconfig
[  677.081843][T21408] tipc: Enabled bearer <udp:syz2>, priority 10
[  677.135808][T21415] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4707'.
[  677.237269][T21419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4709'.
[  677.399970][T21418] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  677.413704][T21418] syzkaller0: entered promiscuous mode
[  677.413750][T21418] syzkaller0: entered allmulticast mode
[  677.833093][T21443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4716'.
[  678.033942][T21418] tipc: Resetting bearer <eth:syzkaller0>
[  678.064604][T21451] IPv6: NLM_F_CREATE should be specified when creating new route
[  678.115719][T21418] tipc: Disabling bearer <eth:syzkaller0>
[  678.149279][T21457] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4718'.
[  678.199541][   T25] tipc: Node number set to 1319755377
[  678.387553][T21458] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  678.396276][T21462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4722'.
[  678.485528][T21471] x_tables: duplicate underflow at hook 3
[  678.575031][T21477] netlink: 'syz.0.4727': attribute type 1 has an invalid length.
[  678.662084][T21476] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4726'.
[  678.710669][T21476] vlan2: entered promiscuous mode
[  678.735062][T21469] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4725'.
[  679.232799][T21505] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  679.291723][T21508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4739'.
[  679.305497][T21508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4739'.
[  679.382542][T21513] FAULT_INJECTION: forcing a failure.
[  679.382542][T21513] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  679.396752][T21513] CPU: 1 UID: 0 PID: 21513 Comm: syz.2.4741 Not tainted syzkaller #0 PREEMPT(full) 
[  679.396782][T21513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  679.396795][T21513] Call Trace:
[  679.396803][T21513]  <TASK>
[  679.396812][T21513]  dump_stack_lvl+0xe8/0x150
[  679.396845][T21513]  should_fail_ex+0x410/0x560
[  679.396879][T21513]  _copy_to_user+0x31/0xb0
[  679.396903][T21513]  bpf_verifier_vlog+0x496/0x900
[  679.396945][T21513]  bpf_verifier_log_write+0x11d/0x1a0
[  679.396982][T21513]  ? __pfx_bpf_verifier_log_write+0x10/0x10
[  679.397016][T21513]  ? __kvmalloc_node_noprof+0x345/0x820
[  679.397040][T21513]  ? bpf_insn_def32+0x1ae/0x650
[  679.397074][T21513]  bpf_compute_live_registers+0x1c8e/0x1ff0
[  679.397116][T21513]  ? __pfx_bpf_compute_live_registers+0x10/0x10
[  679.397150][T21513]  bpf_check+0x25ed/0x2e10
[  679.397186][T21513]  ? ktime_get_with_offset+0x93/0x2d0
[  679.397212][T21513]  ? __pfx_bpf_check+0x10/0x10
[  679.397237][T21513]  ? bpf_obj_name_cpy+0x194/0x1e0
[  679.397270][T21513]  bpf_prog_load+0x14d6/0x1c20
[  679.397305][T21513]  ? __pfx_bpf_prog_load+0x10/0x10
[  679.397353][T21513]  __sys_bpf+0xd0d/0xd90
[  679.397384][T21513]  ? __pfx___sys_bpf+0x10/0x10
[  679.397418][T21513]  ? __fget_files+0x2a/0x420
[  679.397461][T21513]  ? ksys_write+0x242/0x270
[  679.397493][T21513]  ? __pfx_ksys_write+0x10/0x10
[  679.397528][T21513]  __x64_sys_bpf+0xba/0xd0
[  679.397552][T21513]  do_syscall_64+0x166/0x520
[  679.397579][T21513]  ? trace_irq_disable+0x3b/0x140
[  679.397599][T21513]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  679.397621][T21513]  ? clear_bhb_loop+0x70/0xc0
[  679.397647][T21513]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  679.397668][T21513] RIP: 0033:0x7feec839e159
[  679.397694][T21513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  679.397713][T21513] RSP: 002b:00007feec924d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  679.397738][T21513] RAX: ffffffffffffffda RBX: 00007feec8625fa0 RCX: 00007feec839e159
[  679.397753][T21513] RDX: 0000000000000094 RSI: 0000200000000240 RDI: 0000000000000005
[  679.397767][T21513] RBP: 00007feec924d090 R08: 0000000000000000 R09: 0000000000000000
[  679.397781][T21513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  679.397812][T21513] R13: 00007feec8626038 R14: 00007feec8625fa0 R15: 00007ffe41410a18
[  679.397847][T21513]  </TASK>
[  680.941737][   T12] IPVS: starting estimator thread 0...
[  680.991734][T21561] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4751'.
[  681.038626][T21564] IPVS: using max 30 ests per chain, 72000 per kthread
[  683.426710][T21579] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  683.435530][T21584] syzkaller0: entered promiscuous mode
[  683.435614][T21584] syzkaller0: entered allmulticast mode
[  683.542169][T13705] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  683.545926][T13705] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  683.546019][T13705] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  683.546099][T13705] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  683.546177][T13705] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  683.546238][T13705] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  683.546316][T13705] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  683.546361][T13705] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  683.635753][T21605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4760'.
[  683.700511][T21595] tipc: Resetting bearer <eth:syzkaller0>
[  683.800644][T21595] tipc: Disabling bearer <eth:syzkaller0>
[  683.867733][T21609] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  684.329021][T21629] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  684.526710][T21639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4773'.
[  684.552906][T21639] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4773'.
[  685.262140][T21663] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  685.465042][T21671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4782'.
[  685.780161][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  685.923647][T21662] tipc: Disabling bearer <eth:syzkaller0>
[  686.085042][T21675] 8021q: VLANs not supported on gre0
[  686.402954][T21698] xt_connbytes: Forcing CT accounting to be enabled
[  686.571996][T21710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4793'.
[  686.611522][T21706] xt_CT: No such helper "pptp"
[  686.858093][T21717] FAULT_INJECTION: forcing a failure.
[  686.858093][T21717] name failslab, interval 1, probability 0, space 0, times 0
[  686.858151][T21717] CPU: 0 UID: 0 PID: 21717 Comm: syz.4.4798 Not tainted syzkaller #0 PREEMPT(full) 
[  686.858176][T21717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  686.858236][T21717] Call Trace:
[  686.858274][T21717]  <TASK>
[  686.858303][T21717]  dump_stack_lvl+0xe8/0x150
[  686.858396][T21717]  should_fail_ex+0x410/0x560
[  686.858495][T21717]  should_failslab+0xa8/0x100
[  686.858570][T21717]  ? skb_clone+0x212/0x3a0
[  686.858629][T21717]  kmem_cache_alloc_noprof+0xa1/0x600
[  686.858711][T21717]  ? skb_clone+0x212/0x3a0
[  686.858788][T21717]  skb_clone+0x212/0x3a0
[  686.858856][T21717]  bpf_clone_redirect+0x170/0x4b0
[  686.858944][T21717]  ? bpf_test_run+0x1d1/0x830
[  686.859006][T21717]  bpf_prog_885767c90d177146+0x62/0x6b
[  686.859085][T21717]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  686.859191][T21717]  ? __pfx___schedule+0x10/0x10
[  686.859315][T21717]  ? preempt_schedule_thunk+0x16/0x40
[  686.859373][T21717]  ? preempt_schedule_common+0x7f/0xd0
[  686.859437][T21717]  ? bpf_test_run+0x1d1/0x830
[  686.859502][T21717]  ? bpf_test_timer_continue+0x10c/0x320
[  686.859582][T21717]  bpf_test_run+0x354/0x830
[  686.859695][T21717]  ? __pfx_bpf_test_run+0x10/0x10
[  686.859814][T21717]  ? __kasan_krealloc+0xec/0x110
[  686.859901][T21717]  ? skb_dst_set+0x72/0x140
[  686.859969][T21717]  bpf_prog_test_run_skb+0xe35/0x2230
[  686.860087][T21717]  ? __fget_files+0x3a2/0x420
[  686.860156][T21717]  ? __fget_files+0x2a/0x420
[  686.860262][T21717]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  686.860334][T21717]  bpf_prog_test_run+0x2c5/0x340
[  686.860402][T21717]  __sys_bpf+0xa22/0xd90
[  686.860482][T21717]  ? __pfx___sys_bpf+0x10/0x10
[  686.860575][T21717]  ? __fget_files+0x2a/0x420
[  686.860694][T21717]  ? ksys_write+0x242/0x270
[  686.860785][T21717]  ? __pfx_ksys_write+0x10/0x10
[  686.860878][T21717]  __x64_sys_bpf+0xba/0xd0
[  686.860946][T21717]  do_syscall_64+0x166/0x520
[  686.861028][T21717]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  686.861105][T21717]  ? clear_bhb_loop+0x70/0xc0
[  686.861185][T21717]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  686.861261][T21717] RIP: 0033:0x7f33f3f9e159
[  686.861306][T21717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  686.861356][T21717] RSP: 002b:00007f33f21f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  686.861419][T21717] RAX: ffffffffffffffda RBX: 00007f33f4225fa0 RCX: 00007f33f3f9e159
[  686.861461][T21717] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a
[  686.861502][T21717] RBP: 00007f33f21f6090 R08: 0000000000000000 R09: 0000000000000000
[  686.861554][T21717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  686.861588][T21717] R13: 00007f33f4226038 R14: 00007f33f4225fa0 R15: 00007ffdb72bb0e8
[  686.861677][T21717]  </TASK>
[  687.328097][T21724] netlink: 'syz.3.4801': attribute type 1 has an invalid length.
[  687.452600][T21726] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4802'.
[  687.634864][T21730] netdevsim netdevsim2: Direct firmware load for .® failed with error -2
[  687.634912][T21730] netdevsim netdevsim2: Falling back to sysfs fallback for: .®
[  687.885041][T21750] netlink: 5120 bytes leftover after parsing attributes in process `syz.3.4809'.
[  687.931324][T21750] xt_policy: too many policy elements
[  687.964798][T21736] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4805'.
[  688.036423][T21742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4808'.
[  688.105471][T21753] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4810'.
[  688.495221][T21766] ip_tables: iptables: counters copy to user failed while replacing table
[  688.523318][T21766] ip_tables: iptables: counters copy to user failed while replacing table
[  689.022831][T21777] __nla_validate_parse: 1 callbacks suppressed
[  689.022907][T21777] netlink: 9160 bytes leftover after parsing attributes in process `syz.3.4819'.
[  689.258492][T21790] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  689.319714][T21793] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4822'.
[  689.655257][T21809] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4826'.
[  689.667509][T21808] FAULT_INJECTION: forcing a failure.
[  689.667509][T21808] name failslab, interval 1, probability 0, space 0, times 0
[  689.680401][T21808] CPU: 1 UID: 0 PID: 21808 Comm: syz.2.4828 Not tainted syzkaller #0 PREEMPT(full) 
[  689.680429][T21808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  689.680442][T21808] Call Trace:
[  689.680451][T21808]  <TASK>
[  689.680460][T21808]  dump_stack_lvl+0xe8/0x150
[  689.680494][T21808]  should_fail_ex+0x410/0x560
[  689.680528][T21808]  should_failslab+0xa8/0x100
[  689.680554][T21808]  __kmalloc_node_track_caller_noprof+0xfb/0x720
[  689.680589][T21808]  ? copy_array+0x71/0x100
[  689.680616][T21808]  ? copy_array+0x71/0x100
[  689.680648][T21808]  ? copy_array+0x71/0x100
[  689.680678][T21808]  krealloc_node_align_noprof+0x19a/0x390
[  689.680701][T21808]  ? rcu_is_watching+0x16/0xb0
[  689.680729][T21808]  copy_array+0x71/0x100
[  689.680768][T21808]  bpf_copy_verifier_state+0xad/0x1170
[  689.680818][T21808]  ? bpf_is_state_visited+0x2d7b/0x47e0
[  689.680839][T21808]  ? bpf_is_state_visited+0x2d7b/0x47e0
[  689.680869][T21808]  bpf_is_state_visited+0x378d/0x47e0
[  689.680902][T21808]  ? diag_append_history+0x12c/0x520
[  689.680965][T21808]  do_check_common+0x2848/0x5d30
[  689.681035][T21808]  ? __pfx_do_check_common+0x10/0x10
[  689.681064][T21808]  ? __pfx_verbose+0x10/0x10
[  689.681095][T21808]  ? __pfx_bpf_disasm_kfunc_name+0x10/0x10
[  689.681143][T21808]  bpf_check+0x2639/0x2e10
[  689.681181][T21808]  ? ktime_get_with_offset+0x93/0x2d0
[  689.681210][T21808]  ? __pfx_bpf_check+0x10/0x10
[  689.681238][T21808]  ? bpf_obj_name_cpy+0x194/0x1e0
[  689.681297][T21808]  bpf_prog_load+0x14d6/0x1c20
[  689.681344][T21808]  ? __pfx_bpf_prog_load+0x10/0x10
[  689.681398][T21808]  __sys_bpf+0xd0d/0xd90
[  689.681437][T21808]  ? __pfx___sys_bpf+0x10/0x10
[  689.681475][T21808]  ? __fget_files+0x2a/0x420
[  689.681525][T21808]  ? ksys_write+0x242/0x270
[  689.681561][T21808]  ? __pfx_ksys_write+0x10/0x10
[  689.681600][T21808]  __x64_sys_bpf+0xba/0xd0
[  689.681626][T21808]  do_syscall_64+0x166/0x520
[  689.681656][T21808]  ? trace_irq_disable+0x3b/0x140
[  689.681678][T21808]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  689.681703][T21808]  ? clear_bhb_loop+0x70/0xc0
[  689.681732][T21808]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  689.681755][T21808] RIP: 0033:0x7feec839e159
[  689.681778][T21808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  689.681799][T21808] RSP: 002b:00007feec924d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  689.681824][T21808] RAX: ffffffffffffffda RBX: 00007feec8625fa0 RCX: 00007feec839e159
[  689.681842][T21808] RDX: 0000000000000094 RSI: 0000200000001fc0 RDI: 0000000000000005
[  689.681856][T21808] RBP: 00007feec924d090 R08: 0000000000000000 R09: 0000000000000000
[  689.681871][T21808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  689.681885][T21808] R13: 00007feec8626038 R14: 00007feec8625fa0 R15: 00007ffe41410a18
[  689.681922][T21808]  </TASK>
[  690.627402][T21829] FAULT_INJECTION: forcing a failure.
[  690.627402][T21829] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  690.627455][T21829] CPU: 1 UID: 0 PID: 21829 Comm: syz.4.4833 Not tainted syzkaller #0 PREEMPT(full) 
[  690.627493][T21829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  690.627506][T21829] Call Trace:
[  690.627514][T21829]  <TASK>
[  690.627523][T21829]  dump_stack_lvl+0xe8/0x150
[  690.627558][T21829]  should_fail_ex+0x410/0x560
[  690.627593][T21829]  _copy_to_user+0x31/0xb0
[  690.627616][T21829]  bpf_verifier_vlog+0x496/0x900
[  690.627656][T21829]  verbose+0x11d/0x1a0
[  690.627686][T21829]  ? __pfx_snprintf+0x10/0x10
[  690.627712][T21829]  ? __pfx_verbose+0x10/0x10
[  690.627743][T21829]  ? lock_acquire+0x115/0x350
[  690.627768][T21829]  ? __func_imm_name+0xab/0xc0
[  690.627795][T21829]  print_bpf_insn+0x1e87/0x2910
[  690.627822][T21829]  ? __pfx_verbose+0x10/0x10
[  690.627855][T21829]  ? __pfx_print_bpf_insn+0x10/0x10
[  690.627885][T21829]  ? bpf_verifier_vlog+0x58d/0x900
[  690.627925][T21829]  ? bpf_verifier_log_write+0x11d/0x1a0
[  690.627960][T21829]  bpf_verbose_insn+0xcb/0x130
[  690.627993][T21829]  ? __pfx_bpf_verbose_insn+0x10/0x10
[  690.628024][T21829]  ? __pfx_verbose+0x10/0x10
[  690.628052][T21829]  ? __pfx_bpf_disasm_kfunc_name+0x10/0x10
[  690.628085][T21829]  ? __kvmalloc_node_noprof+0x345/0x820
[  690.628110][T21829]  ? bpf_insn_def32+0x1ae/0x650
[  690.628144][T21829]  bpf_compute_live_registers+0x1cd7/0x1ff0
[  690.628188][T21829]  ? __pfx_bpf_compute_live_registers+0x10/0x10
[  690.628231][T21829]  bpf_check+0x25ed/0x2e10
[  690.628265][T21829]  ? ktime_get_with_offset+0x93/0x2d0
[  690.628289][T21829]  ? __pfx_bpf_check+0x10/0x10
[  690.628314][T21829]  ? bpf_obj_name_cpy+0x194/0x1e0
[  690.628347][T21829]  bpf_prog_load+0x14d6/0x1c20
[  690.628382][T21829]  ? __pfx_bpf_prog_load+0x10/0x10
[  690.628430][T21829]  __sys_bpf+0xd0d/0xd90
[  690.628462][T21829]  ? __pfx___sys_bpf+0x10/0x10
[  690.628496][T21829]  ? __fget_files+0x2a/0x420
[  690.628540][T21829]  ? ksys_write+0x242/0x270
[  690.628573][T21829]  ? __pfx_ksys_write+0x10/0x10
[  690.628609][T21829]  __x64_sys_bpf+0xba/0xd0
[  690.628633][T21829]  do_syscall_64+0x166/0x520
[  690.628660][T21829]  ? trace_irq_disable+0x3b/0x140
[  690.628680][T21829]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.628702][T21829]  ? clear_bhb_loop+0x70/0xc0
[  690.628728][T21829]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.628749][T21829] RIP: 0033:0x7f33f3f9e159
[  690.628769][T21829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  690.628787][T21829] RSP: 002b:00007f33f21f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  690.628809][T21829] RAX: ffffffffffffffda RBX: 00007f33f4225fa0 RCX: 00007f33f3f9e159
[  690.628825][T21829] RDX: 0000000000000094 RSI: 0000200000000240 RDI: 0000000000000005
[  690.628839][T21829] RBP: 00007f33f21f6090 R08: 0000000000000000 R09: 0000000000000000
[  690.628853][T21829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  690.628866][T21829] R13: 00007f33f4226038 R14: 00007f33f4225fa0 R15: 00007ffdb72bb0e8
[  690.628899][T21829]  </TASK>
[  691.048405][T21836] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4835'.
[  691.184997][T21838] 8021q: VLANs not supported on gre0
[  691.395844][T21846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4840'.
[  691.413826][T21849] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4841'.
[  691.497365][T21849] netlink: 'syz.0.4841': attribute type 7 has an invalid length.
[  691.497408][T21849] netlink: 'syz.0.4841': attribute type 8 has an invalid length.
[  691.536312][T21849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4841'.
[  691.588264][T21847] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4838'.
[  691.858740][    C0] 
[  691.861130][    C0] ================================
[  691.866266][    C0] WARNING: inconsistent lock state
[  691.871412][    C0] syzkaller #0 Not tainted
[  691.875861][    C0] --------------------------------
[  691.880991][    C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage.
[  691.887872][    C0] ksoftirqd/0/15 [HC0[0]:SC1[1]:HE1:SE0] takes:
[  691.894134][    C0] ffff88807f900260 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x10d/0x250
[  691.903591][    C0] {SOFTIRQ-ON-W} state was registered at:
[  691.909331][    C0]   lock_acquire+0x115/0x350
[  691.913950][    C0]   lock_sock_nested+0x41/0x100
[  691.918836][    C0]   x25_bind+0x209/0x450
[  691.923097][    C0]   __sys_bind+0x2e3/0x410
[  691.927547][    C0]   __x64_sys_bind+0x7a/0x90
[  691.932174][    C0]   do_syscall_64+0x166/0x520
[  691.936897][    C0]   entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.942908][    C0] irq event stamp: 9280560
[  691.947335][    C0] hardirqs last  enabled at (9280560): [<ffffffff8188ed06>] __local_bh_enable_ip+0xd6/0x140
[  691.957429][    C0] hardirqs last disabled at (9280559): [<ffffffff8188eca2>] __local_bh_enable_ip+0x72/0x140
[  691.967529][    C0] softirqs last  enabled at (9280470): [<ffffffff818919e6>] run_ksoftirqd+0x36/0x60
[  691.977137][    C0] softirqs last disabled at (9280483): [<ffffffff818919e6>] run_ksoftirqd+0x36/0x60
[  691.986560][    C0] 
[  691.986560][    C0] other info that might help us debug this:
[  691.994638][    C0]  Possible unsafe locking scenario:
[  691.994638][    C0] 
[  692.002114][    C0]        CPU0
[  692.005425][    C0]        ----
[  692.008730][    C0]   lock(sk_lock-AF_X25);
[  692.013091][    C0]   <Interrupt>
[  692.016567][    C0]     lock(sk_lock-AF_X25);
[  692.021126][    C0] 
[  692.021126][    C0]  *** DEADLOCK ***
[  692.021126][    C0] 
[  692.029291][    C0] locks held by ksoftirqd/0/15: 1, last CPU#0:
[  692.035482][    C0]  #0: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb_core+0x33/0x2b0
[  692.045656][    C0] 
[  692.045656][    C0] stack backtrace:
[  692.051577][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) 
[  692.060787][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  692.070872][    C0] Call Trace:
[  692.074186][    C0]  <TASK>
[  692.077147][    C0]  dump_stack_lvl+0xe8/0x150
[  692.081779][    C0]  print_usage_bug+0x28c/0x2e0
[  692.086587][    C0]  valid_state+0xbe/0xf0
[  692.090869][    C0]  mark_lock_irq+0x36/0x380
[  692.095419][    C0]  mark_lock+0x117/0x190
[  692.099701][    C0]  __lock_acquire+0x6b7/0x2e50
[  692.104495][    C0]  ? kasan_quarantine_put+0xbb/0x1f0
[  692.109825][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  692.114904][    C0]  ? lock_acquire+0x115/0x350
[  692.119622][    C0]  lock_acquire+0x115/0x350
[  692.124156][    C0]  ? x25_kill_by_neigh+0x10d/0x250
[  692.129353][    C0]  ? x25_kill_by_neigh+0x103/0x250
[  692.134519][    C0]  lock_sock_nested+0x41/0x100
[  692.139316][    C0]  ? x25_kill_by_neigh+0x10d/0x250
[  692.144479][    C0]  x25_kill_by_neigh+0x10d/0x250
[  692.149459][    C0]  x25_lapb_receive_frame+0x1b0/0xfb0
[  692.154952][    C0]  ? netif_receive_skb_core+0x33/0x2b0
[  692.160470][    C0]  ? netif_receive_skb_core+0x33/0x2b0
[  692.165966][    C0]  ? __pfx_x25_lapb_receive_frame+0x10/0x10
[  692.171900][    C0]  netif_receive_skb_core+0x2a6/0x2b0
[  692.177327][    C0]  lapbeth_napi_poll+0x42/0x90
[  692.182211][    C0]  __napi_poll+0xaa/0x330
[  692.186594][    C0]  net_rx_action+0x61d/0xf50
[  692.191227][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  692.196417][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  692.201753][    C0]  ? __pfx_sched_clock_cpu+0x10/0x10
[  692.207091][    C0]  handle_softirqs+0x226/0x860
[  692.211893][    C0]  ? schedule+0x90/0x2b0
[  692.216246][    C0]  ? run_ksoftirqd+0x36/0x60
[  692.220868][    C0]  ? smpboot_thread_fn+0x4e/0xa70
[  692.225941][    C0]  run_ksoftirqd+0x36/0x60
[  692.230401][    C0]  smpboot_thread_fn+0x565/0xa70
[  692.235465][    C0]  ? smpboot_thread_fn+0x4e/0xa70
[  692.240549][    C0]  kthread+0x38b/0x480
[  692.244681][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  692.250208][    C0]  ? __pfx_kthread+0x10/0x10
[  692.254822][    C0]  ret_from_fork+0x514/0xb70
[  692.259434][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  692.264584][    C0]  ? __switch_to+0xc89/0x1420
[  692.269281][    C0]  ? __pfx_kthread+0x10/0x10
[  692.273891][    C0]  ret_from_fork_asm+0x1a/0x30
[  692.278695][    C0]  </TASK>
[  692.281843][    C0] BUG: sleeping function called from invalid context at net/core/sock.c:3829
[  692.281876][    C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 15, name: ksoftirqd/0
[  692.281899][    C0] preempt_count: 100, expected: 0
[  692.281936][    C0] RCU nest depth: 1, expected: 0
[  692.281975][    C0] INFO: lockdep is turned off.
[  692.281995][    C0] Preemption disabled at:
[  692.282021][    C0] [<ffffffff8188ef0b>] handle_softirqs+0xab/0x860
[  692.282154][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) 
[  692.282215][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  692.282254][    C0] Call Trace:
[  692.282275][    C0]  <TASK>
[  692.282296][    C0]  dump_stack_lvl+0xe8/0x150
[  692.282384][    C0]  __might_resched+0x36a/0x4c0
[  692.282474][    C0]  ? handle_softirqs+0xab/0x860
[  692.282556][    C0]  lock_sock_nested+0x56/0x100
[  692.282630][    C0]  x25_kill_by_neigh+0x10d/0x250
[  692.282719][    C0]  x25_lapb_receive_frame+0x1b0/0xfb0
[  692.282818][    C0]  ? netif_receive_skb_core+0x33/0x2b0
[  692.282888][    C0]  ? netif_receive_skb_core+0x33/0x2b0
[  692.282957][    C0]  ? __pfx_x25_lapb_receive_frame+0x10/0x10
[  692.283043][    C0]  netif_receive_skb_core+0x2a6/0x2b0
[  692.283116][    C0]  lapbeth_napi_poll+0x42/0x90
[  692.283191][    C0]  __napi_poll+0xaa/0x330
[  692.283255][    C0]  net_rx_action+0x61d/0xf50
[  692.283332][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  692.283403][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  692.283497][    C0]  ? __pfx_sched_clock_cpu+0x10/0x10
[  692.283571][    C0]  handle_softirqs+0x226/0x860
[  692.283643][    C0]  ? schedule+0x90/0x2b0
[  692.283700][    C0]  ? run_ksoftirqd+0x36/0x60
[  692.283782][    C0]  ? smpboot_thread_fn+0x4e/0xa70
[  692.283848][    C0]  run_ksoftirqd+0x36/0x60
[  692.283931][    C0]  smpboot_thread_fn+0x565/0xa70
[  692.284008][    C0]  ? smpboot_thread_fn+0x4e/0xa70
[  692.284089][    C0]  kthread+0x38b/0x480
[  692.284136][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  692.284209][    C0]  ? __pfx_kthread+0x10/0x10
[  692.284258][    C0]  ret_from_fork+0x514/0xb70
[  692.284317][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  692.284398][    C0]  ? __switch_to+0xc89/0x1420
[  692.284464][    C0]  ? __pfx_kthread+0x10/0x10
[  692.284517][    C0]  ret_from_fork_asm+0x1a/0x30
[  692.284611][    C0]  </TASK>