last executing test programs:

4.891032511s ago: executing program 3 (id=1819):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000003000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0)

4.697020952s ago: executing program 3 (id=1821):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000080)=0x2, 0x0)
listen(r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r6}, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000001c0)='percpu_alloc_percpu\x00'}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x42, 0x40, 0x2}, 0x48)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000002c0)={0x1c, r5, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x4000, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
r9 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r9, 0x6, 0x21, &(0x7f0000000200), 0x20)
ioctl$sock_inet6_tcp_SIOCOUTQ(r8, 0x5411, &(0x7f0000000000))
bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c)
r10 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r10, &(0x7f00000005c0), 0x10)
recvmmsg(r10, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x7f}], 0x1, 0x10002, 0x0)
sendmsg$can_bcm(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES16], 0x48}, 0x1, 0x0, 0x0, 0x8000010}, 0x20004801)
setsockopt$SO_TIMESTAMP(r10, 0x1, 0x23, &(0x7f0000000580)=0xd, 0x4)

4.09168769s ago: executing program 2 (id=1823):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="bc010000190001002abd700000000000e0000002000000000000000000000000ac1414bb00000000000000000000000000000000000000000200200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff00000000000080000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004010500ff010000000000000000000000000001000004d2330000000a000000000000000000000000000000000000000135000001003b"], 0x1bc}}, 0x4000)

3.976956344s ago: executing program 2 (id=1825):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000340)={0xfff8, 0xfffd, 0xa0, 0xffff}, 0x8)
sendmmsg$inet(r4, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}], 0x1, 0x4004000)
setsockopt(r4, 0x84, 0x7d, 0x0, 0x0)
write$tun(r2, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010102, @broadcast}, "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"}}, 0xfce)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r5, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x908c}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x70}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x9c}}, 0x0)

3.940498473s ago: executing program 3 (id=1826):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@deltclass={0x50, 0x29, 0x20, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x6, 0x7}, {0x9, 0xfff3}, {0xa, 0x6}}, [@tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x0, 0x5}}, @tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0xfb, 0x6}}, @tclass_kind_options=@c_sfq={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000800)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000004c0), 0x1000}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

3.788896104s ago: executing program 1 (id=1828):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xe, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000048510f8000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000003400000095"], &(0x7f00000006c0)='GPL\x00'}, 0x94)

3.717351213s ago: executing program 1 (id=1830):
unshare(0x20000400)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x68}, 0x1, 0x0, 0x0, 0x22040840}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20)
sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
getpid()
sendmsg$netlink(r6, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)={0x44, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc)
syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004204003400650000042190780a010101ac14140c8308a464e654cfb786060000000200004e214e2204519078089cc7e80394125f"], 0x0)

3.644857441s ago: executing program 3 (id=1831):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x7c, 0x10, 0x44b, 0x0, 0x25dfdbfb, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_PORT_SELF={0x5c, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "99c5fa4d62af7ec7f70ae9de7b2ac2b0"}, @IFLA_PORT_REQUEST={0x0, 0x6, 0xfe}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "d2755242bbf000ac80a072a18d7a0dd1"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8b}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "eef9ba7b54abd4f0c791680208f10409"}]}]}, 0xfffffffffffffe27}, 0x1, 0x0, 0x0, 0x8804}, 0x0)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x4000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d002100000000000000000004"], 0x1c}], 0x1}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3)
setsockopt$inet6_tcp_int(r2, 0x6, 0x11, &(0x7f00000002c0)=0x100000001, 0x4)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000000180))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a010400000000000000000200000034000580300001800e000100696d6d656469617465"], 0x88}}, 0x0)
unshare(0x6a040000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f3, &(0x7f0000001a80)={'syztnl0\x00', 0x0})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$xdp(0x2c, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9)
r8 = openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f0000000c40), 0x12)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

3.066645174s ago: executing program 1 (id=1833):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}}, &(0x7f0000000000)='GPL\x00', 0x2, 0xd2, &(0x7f0000000340)=""/210, 0x0, 0x8}, 0x94)

2.677349432s ago: executing program 0 (id=1836):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xff, 0x9}, 0x20) (fail_nth: 5)

2.652442985s ago: executing program 2 (id=1837):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x68}}, 0x800)
sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x24040884)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x200}, 0x18)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYRES16=r3, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000003a000000000040120000006e7000000100000000200002000a00000000800000000000000000000200000000000000aa000000000d0001007564703a73"], 0x6c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0902000004000000060000000a00000000000000236e62485d401ce1a240771f073369b727a2c8375e90e77b648a4bf003005363eb76789f18c0", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='workqueue_queue_work\x00', r9}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r8}, &(0x7f0000000200), &(0x7f0000000340)=r9}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.27885773s ago: executing program 0 (id=1838):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3}, @func_proto, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44}, 0x28)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r6, 0x0, 0xd}, 0x18)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB], 0x26c0}}, 0x4010)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', <r7=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x40}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fedbdf250f00000014000780080002"], 0x28}, 0x1, 0x0, 0x0, 0x2805}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000005500010e0e0000000000000007"], 0x38}}, 0xc000)
connect$pppoe(r3, &(0x7f00000002c0)={0x18, 0x0, {0x3, @random="18e2a3ea9dfc", 'geneve0\x00'}}, 0x1e)
setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000100)=0x1, 0x4)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000ac0)={'ip6gre0\x00', &(0x7f0000000a40)={'ip6_vti0\x00', 0x0, 0x2f, 0x3, 0x9, 0x5, 0x8, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00', 0x8000, 0x6, 0x8, 0x7}})
bind$bt_hci(r9, &(0x7f0000000040)={0x1f, 0x8e, 0x1}, 0x6)
sendmsg$802154_dgram(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, @short={0x2, 0xd9c72693ea1cffc6, 0xffff}}, 0x14, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'})

2.270649669s ago: executing program 1 (id=1839):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="bc010000190001002abd700000000000e0000002000000000000000000000000ac1414bb00000000000000000000000000000000000000000200200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff00000000000080000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004010500ff010000000000000000000000000001000004d2330000000a000000000000000000000000000000000000000135000001003b"], 0x1bc}}, 0x4000)

2.168983264s ago: executing program 1 (id=1841):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@deltclass={0x50, 0x29, 0x20, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x6, 0x7}, {0x9, 0xfff3}, {0xa, 0x6}}, [@tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x0, 0x5}}, @tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0xfb, 0x6}}, @tclass_kind_options=@c_sfq={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000800)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000004c0), 0x1000}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

2.150679762s ago: executing program 1 (id=1842):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
socket(0x2, 0x2, 0x1) (fail_nth: 1)

1.614639748s ago: executing program 2 (id=1843):
r0 = socket(0x2, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={0x4c, r3, 0x1, 0xfffffffd, 0x25dfdbfc, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xab}}, {0x8}, {0x6, 0x11, 0xffff}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x90)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="7400000010003b15000100001000000000000000", @ANYRES32=0x0, @ANYRESDEC=r3, @ANYRES32=<r4=>0x0, @ANYBLOB="060018008000000008001500656e050005000800"], 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000c800)
unshare(0x22020600)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0)
r8 = socket(0x2b, 0x80801, 0x1)
sendmmsg(r8, &(0x7f0000001f40)=[{{&(0x7f0000000180)=@qipcrtr={0x2a, 0x2, 0x8000}, 0x80, 0x0}}], 0x1, 0x20000090)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x20040885}, 0x40000)
sendmmsg(r6, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x7000000}, 0xf401}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="10000000800000000c01000048000000600397782284fc70042bb17e6ecd7de902dbc3771b6e1b595bdae822918383ae6c59a5ee9bd3eb98bf319c15013380a207f349ed82be79c51abc8a788d984e6a891d8dc1ddc5c6addb9b549f62b30fbf926504e00716e9becf602bda7b55eb9b321a3ac016c362a4c685194258864aa6f4224741a07dac134fd07fa4f23b881e8c5693cc901fe1770bd6bf2f37ecb9f8d5044e9600"/188], 0x10}}], 0x2, 0x0)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r10=>0xffffffffffffffff})
r11 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r11, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003a80), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r12, &(0x7f0000003e80)={0x0, 0x0, &(0x7f0000003e40)={&(0x7f0000003d40)=ANY=[@ANYBLOB=',\x00 \x00', @ANYRES16=r13, @ANYBLOB="010026bd7000fddbdf250700000018000180140002007465616d5f736c6176655f3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x40070)
r14 = accept4(r11, 0x0, 0x0, 0x0)
sendmsg$alg(r14, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@iv={0x1018, 0x117, 0x2, 0x1000, "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"}], 0x1018}, 0x14010016)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r14)
sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000001800)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r9, @ANYBLOB="010025bd7000fcdbdf25030000000c000600020000000000000008000100000000000c0006000100000000000000640007800c00018008000100", @ANYRES32=r0, @ANYRESOCT=r1, @ANYRES32=r10, @ANYBLOB="0c00018008000100", @ANYRES32=r1, @ANYBLOB="0c00018008000100", @ANYRES32=r14, @ANYBLOB="0c000180080001007f3c908b234a5d5201ddc670e5ce9f68633d6c1768b6f1939cc4a4c63f0cd7df46", @ANYRES32=r0, @ANYBLOB="0c00018008000100", @ANYRES32=r0, @ANYRESHEX=r7, @ANYRES8=r4, @ANYBLOB="0c0001800800000000", @ANYRES32=r0, @ANYBLOB="0d000a00237d5d292c5b25b17d0000000c00040001000000000000000c0008000700000000000000"], 0xc0}, 0x1, 0x0, 0x0, 0x20004001}, 0xc0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
connect$pppl2tp(r0, 0x0, 0x0)

1.545872134s ago: executing program 0 (id=1844):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan1\x00', <r2=>0x0})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1802004f000000950000000064b04600"/27], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x95, 0x0, &(0x7f0000000340)="000090f5e1dd00c88526faac0646fb66592bad32d9a31b4aff18caa772bad4717c2921672dc192cca9ac0ac664653c63fd59b7d5a4fcf2d0bbf2bbb301270a0b1acaeec2cd10b44db3953e79cd9ae04386736b6c73b2f2b1ec941bbc963609ae30b0d549961f793b5d1d3ac7f66c1c1855ca1ae890096198ab9366f1e43f7c62eb7e91ea8cd0b3be2daecd85461ef61e4ef56522c5", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50)
pselect6(0x40, &(0x7f00000001c0)={0x8, 0xd, 0x57f5, 0x1000000000008001, 0x1, 0x2, 0x7c, 0x3fe}, &(0x7f0000000200)={0x1, 0x9, 0x2, 0xfc09, 0x8000000000000001, 0x7, 0x5, 0x1}, &(0x7f0000000240)={0x37a6a150, 0xfff, 0x6, 0xe334, 0x4, 0x100007, 0x10001, 0x2}, &(0x7f0000000280), &(0x7f0000000300)={&(0x7f00000002c0)={[0x7]}, 0x8})
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08022abd7000ffdbdf252e0000000c002d0000000000000000000c002d000202aaaaaaaaaaaa08002c000900000008000200", @ANYRES32=r2, @ANYBLOB="05002e00050000000c0100008000aaaaaaaaaaaa"], 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000e40)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r6 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10)
r7 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfffffffd}, 0x10)
r8 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r8, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x38, 0x701, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x4000000)
r11 = socket(0x10, 0x3, 0x0)
connect$netlink(r11, &(0x7f00000014c0)=@kern={0x10, 0x0, 0x0, 0x40000}, 0xa)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x4, &(0x7f0000000240)=@gcm_256={{}, "2474000000000da1", "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "5005f500", "7c5cec21291a43fe"}, 0x38)
sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000018000100fc0f00000000000002000000000000090000000006001500060000000c0016"], 0x30}}, 0x44890)

1.5452566s ago: executing program 4 (id=1845):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r2, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0xff, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000280)="90", 0x1}], 0x1}}], 0x2, 0x4000000)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r4, 0x6}, 0x8)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_freezer_state(r6, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r7, &(0x7f0000000040)='FROZEN\x00', 0x7)
write$cgroup_freezer_state(r7, &(0x7f0000000200)='THAWED\x00', 0x7)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r5, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4008010)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='percpu_alloc_percpu\x00', r1}, 0x10)
unshare(0x2c020400)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r8=>r0})
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r8, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x14c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x8000}, {0xc, 0x90, 0xe}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0xcc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x40}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x400}, {0xc, 0x90, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x7fffffffffffffff}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40021}, 0x4000855)
bind$vsock_stream(r0, 0x0, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0xf}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
close(r10)
sendmsg$nl_xfrm(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23}}}, 0x50}}, 0x0)
listen(r0, 0x6d5)
r11 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r12=>0x0})
setsockopt$packet_add_memb(r11, 0x107, 0x1, &(0x7f00000002c0)={r12, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10)
setsockopt$packet_drop_memb(r11, 0x107, 0x2, &(0x7f0000000580)={r12, 0x1, 0x6}, 0x10)

1.321997868s ago: executing program 0 (id=1846):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c000000e7ff0000000000000000000e0000000000000000000000000600000d000000000000000000000000020000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000007000000000000000000000009000000000000000000000009000000000000000000000009060000000000"], 0x0, 0x96}, 0x28)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c000000e7ff0000000000000000000e0000000000000000000000000600000d000000000000000000000000020000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000007000000000000000000000009000000000000000000000009000000000000000000000009060000000000"], 0x0, 0x96}, 0x28) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) (async)

1.228205337s ago: executing program 2 (id=1847):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x5}]}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x5, 0x84)
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="21040000000004000000010000000800", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES64=r2], 0x38}}, 0x800) (async)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="21040000000004000000010000000800", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES64=r2], 0x38}}, 0x800)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x840000000002, 0x3, 0xfa) (async)
r4 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0)
bind$alg(r4, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000300000ac8000000060a01040000000000000000020000009c000480180001800e000100627974656f7264657200000004000280100001800b0001006e756d67656e00004c0001800b00010065787468647200003c000280080006400000000008000640000000000800054000000001080003400000002308000540000000010800064d000000040800014000000014140001800e000100696d6d65646961746500000010000180090001007866726d000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0xf0}, 0x1, 0x0, 0x0, 0x20044054}, 0x0) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000300000ac8000000060a01040000000000000000020000009c000480180001800e000100627974656f7264657200000004000280100001800b0001006e756d67656e00004c0001800b00010065787468647200003c000280080006400000000008000640000000000800054000000001080003400000002308000540000000010800064d000000040800014000000014140001800e000100696d6d65646961746500000010000180090001007866726d000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0xf0}, 0x1, 0x0, 0x0, 0x20044054}, 0x0)
listen(r3, 0x3) (async)
listen(r3, 0x3)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3577], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3577], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)='syzkaller\x00', 0x2, 0x33, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="4000000000000000040000ba8dbfcbada2699e64000200ce0000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'veth1_to_bond\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'veth1_to_bond\x00', <r8=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000000a000000c889000001040400", @ANYRES32=r7, @ANYBLOB, @ANYRES32=r8, @ANYRES32, @ANYBLOB="0400000000003971a19a9a976f30480b3911184903000000020000"], 0x50)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f00000001c0)={0x8, 0x1, 0x7, 0x6}, 0x10) (async)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f00000001c0)={0x8, 0x1, 0x7, 0x6}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xa, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9a}}, 0x0, 0x7fff, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

1.218102951s ago: executing program 0 (id=1848):
unshare(0x0)
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1f, {[0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xe3, 0x3]}}, 0x5c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x80}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

1.085156841s ago: executing program 4 (id=1849):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xff, 0x9}, 0x20) (fail_nth: 6)

1.057446821s ago: executing program 3 (id=1850):
r0 = accept$ax25(0xffffffffffffffff, &(0x7f00000001c0)={{}, [@null, @bcast, @bcast, @null, @null, @rose, @default, @netrom]}, &(0x7f0000000240)=0x48)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000340)=""/141, &(0x7f0000000400)=0x8d)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000d0425bd7000ffdbff2500000000", @ANYRES32=0x0, @ANYBLOB="10000000000000001c001280a534cc2e62726964676500000e000280050019"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0x5, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x0, 0xae0)

1.003022795s ago: executing program 0 (id=1851):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}}, &(0x7f0000000000)='GPL\x00', 0x2, 0xd2, &(0x7f0000000340)=""/210, 0x0, 0x8}, 0x94) (fail_nth: 2)

649.008149ms ago: executing program 4 (id=1852):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@deltclass={0x50, 0x29, 0x20, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x6, 0x7}, {0x9, 0xfff3}, {0xa, 0x6}}, [@tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x0, 0x5}}, @tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0xfb, 0x6}}, @tclass_kind_options=@c_sfq={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000800)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000004c0), 0x1000}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

629.442194ms ago: executing program 4 (id=1853):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207"], 0x10}}, 0x4048891) (async)
unshare(0x20000400)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={0x0}, 0x18) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
pipe(&(0x7f00000045c0)={<r2=>0xffffffffffffffff})
syz_genetlink_get_family_id$wireguard(&(0x7f000000c4c0), r2) (async)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x2, 0x6, 0x201, 0x0, 0x0, {0xd, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x45da1501f9ef4829}]}, 0x38}, 0x1, 0x0, 0x0, 0xb35f5a7a6dad2e8a}, 0x800) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYRES8=r0], 0x44}, 0x1, 0x2000000000000000}, 0x0)

553.424694ms ago: executing program 3 (id=1854):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3}, @func_proto, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44}, 0x28)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r6, 0x0, 0xd}, 0x18)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB], 0x26c0}}, 0x4010)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', <r7=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x40}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fedbdf250f00000014000780080002"], 0x28}, 0x1, 0x0, 0x0, 0x2805}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000005500010e0e0000000000000007"], 0x38}}, 0xc000)
connect$pppoe(r3, &(0x7f00000002c0)={0x18, 0x0, {0x3, @random="18e2a3ea9dfc", 'geneve0\x00'}}, 0x1e)
setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000100)=0x1, 0x4)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000ac0)={'ip6gre0\x00', &(0x7f0000000a40)={'ip6_vti0\x00', 0x0, 0x2f, 0x3, 0x9, 0x5, 0x8, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00', 0x8000, 0x6, 0x8, 0x7}})
bind$bt_hci(r9, &(0x7f0000000040)={0x1f, 0x8e, 0x1}, 0x6)
sendmsg$802154_dgram(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, @short={0x2, 0xd9c72693ea1cffc6, 0xffff}}, 0x14, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'})

125.459039ms ago: executing program 2 (id=1855):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001bb6bbd36eb0c"], 0xdc}}, 0x0)
ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a300000e0ff0900030073797a32000000002c000000060a010400000000000000000100000008000b40000000000900010073797a30000000000400074014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0)
recvmmsg(r1, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x4, 0x1, 0x0, 0x4, 0x7, 0xfffffffffffffffe, 0x1c}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x5, 0xd2, &(0x7f0000000340)=""/210, 0x0, 0x8}, 0x94)

125.351837ms ago: executing program 4 (id=1856):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x2, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x101}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x7}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x3}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x34}}, 0x60) (fail_nth: 6)

0s ago: executing program 4 (id=1857):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="f3f40000000000000000030000007000018008000300000000000d0001007564703a73797bb100000000440004"], 0x84}}, 0xffffff7f00000000)

kernel console output (not intermixed with test programs):

e_slave_0: left allmulticast mode
[  148.745327][ T7939] bridge_slave_0: left promiscuous mode
[  148.772329][ T7939] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.857606][ T7948] netlink: 'syz.3.676': attribute type 10 has an invalid length.
[  148.876184][ T7939] bridge_slave_1: left allmulticast mode
[  148.900523][ T7945] netlink: del zone limit has 4 unknown bytes
[  148.916817][ T7939] bridge_slave_1: left promiscuous mode
[  148.935756][ T7939] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.987100][ T7939] bond0: (slave bond_slave_0): Releasing backup interface
[  148.999538][ T7954] netlink: 'syz.1.683': attribute type 1 has an invalid length.
[  149.009302][ T7939] bond0: (slave bond_slave_1): Releasing backup interface
[  149.019675][ T7939] team0: Port device team_slave_0 removed
[  149.028466][ T7939] team0: Port device team_slave_1 removed
[  149.036377][ T7939] batman_adv: batadv0: Removing interface: batadv_slave_0
[  149.045289][ T7939] batman_adv: batadv0: Removing interface: batadv_slave_1
[  149.057060][ T7948] mac80211_hwsim hwsim10 wlan1: left allmulticast mode
[  149.070436][ T7948] bond0: (slave wlan1): Opening slave failed
[  149.207442][ T7959] __nla_validate_parse: 8 callbacks suppressed
[  149.207462][ T7959] netlink: 16 bytes leftover after parsing attributes in process `syz.4.684'.
[  149.225791][ T7959] netlink: 64 bytes leftover after parsing attributes in process `syz.4.684'.
[  149.267943][ T7963] netlink: 312 bytes leftover after parsing attributes in process `syz.1.686'.
[  149.283040][ T7959] tipc: Invalid UDP bearer configuration
[  149.283106][ T7959] tipc: Enabling of bearer <udp:sy{±> rejected, failed to enable media
[  149.396429][ T7967] netlink: 87 bytes leftover after parsing attributes in process `syz.3.688'.
[  149.508799][ T7971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.690'.
[  149.535211][ T7970] wireguard0: entered promiscuous mode
[  149.567778][ T7970] wireguard0: entered allmulticast mode
[  149.588066][ T7979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.692'.
[  149.640021][ T7979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.692'.
[  149.931289][ T7998] netlink: 20 bytes leftover after parsing attributes in process `syz.2.698'.
[  150.145047][ T8009] netlink: 87 bytes leftover after parsing attributes in process `syz.2.703'.
[  150.200248][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.216146][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.263692][ T8013] netlink: 20 bytes leftover after parsing attributes in process `syz.1.704'.
[  150.339113][ T6380] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  150.386370][ T8015] veth1_to_bridge: mtu less than device minimum
[  150.479664][ T8023] FAULT_INJECTION: forcing a failure.
[  150.479664][ T8023] name failslab, interval 1, probability 0, space 0, times 0
[  150.511226][ T8023] CPU: 1 UID: 0 PID: 8023 Comm: syz.2.708 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) 
[  150.511260][ T8023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  150.511272][ T8023] Call Trace:
[  150.511280][ T8023]  <TASK>
[  150.511290][ T8023]  dump_stack_lvl+0x189/0x250
[  150.511322][ T8023]  ? __pfx____ratelimit+0x10/0x10
[  150.511350][ T8023]  ? __pfx_dump_stack_lvl+0x10/0x10
[  150.511377][ T8023]  ? __pfx__printk+0x10/0x10
[  150.511410][ T8023]  ? __lock_acquire+0xab9/0xd20
[  150.511454][ T8023]  should_fail_ex+0x414/0x560
[  150.511485][ T8023]  should_failslab+0xa8/0x100
[  150.511519][ T8023]  kmem_cache_alloc_noprof+0x73/0x3c0
[  150.511549][ T8023]  ? skb_clone+0x212/0x3a0
[  150.511574][ T8023]  skb_clone+0x212/0x3a0
[  150.511599][ T8023]  __netlink_deliver_tap+0x404/0x850
[  150.511640][ T8023]  ? netlink_deliver_tap+0x2e/0x1b0
[  150.511670][ T8023]  netlink_deliver_tap+0x19c/0x1b0
[  150.511700][ T8023]  netlink_unicast+0x7fa/0x9e0
[  150.511736][ T8023]  ? __pfx_netlink_unicast+0x10/0x10
[  150.511763][ T8023]  ? netlink_sendmsg+0x642/0xb30
[  150.511798][ T8023]  ? skb_put+0x11b/0x210
[  150.511832][ T8023]  netlink_sendmsg+0x805/0xb30
[  150.511872][ T8023]  ? __pfx_netlink_sendmsg+0x10/0x10
[  150.511918][ T8023]  ? aa_sock_msg_perm+0xf1/0x1d0
[  150.511951][ T8023]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  150.511975][ T8023]  ? __pfx_netlink_sendmsg+0x10/0x10
[  150.512005][ T8023]  __sock_sendmsg+0x21c/0x270
[  150.512034][ T8023]  ____sys_sendmsg+0x505/0x830
[  150.512074][ T8023]  ? __pfx_____sys_sendmsg+0x10/0x10
[  150.512118][ T8023]  ? import_iovec+0x74/0xa0
[  150.512143][ T8023]  ___sys_sendmsg+0x21f/0x2a0
[  150.512179][ T8023]  ? __pfx____sys_sendmsg+0x10/0x10
[  150.512254][ T8023]  ? __fget_files+0x2a/0x420
[  150.512286][ T8023]  ? __fget_files+0x3a0/0x420
[  150.512332][ T8023]  __x64_sys_sendmsg+0x19b/0x260
[  150.512368][ T8023]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  150.512413][ T8023]  ? __pfx_ksys_write+0x10/0x10
[  150.512438][ T8023]  ? rcu_is_watching+0x15/0xb0
[  150.512466][ T8023]  ? do_syscall_64+0xbe/0x3b0
[  150.512498][ T8023]  do_syscall_64+0xfa/0x3b0
[  150.512523][ T8023]  ? lockdep_hardirqs_on+0x9c/0x150
[  150.512548][ T8023]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.512573][ T8023]  ? clear_bhb_loop+0x60/0xb0
[  150.512600][ T8023]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.512621][ T8023] RIP: 0033:0x7f865798ebe9
[  150.512640][ T8023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  150.512659][ T8023] RSP: 002b:00007f8658827038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  150.512682][ T8023] RAX: ffffffffffffffda RBX: 00007f8657bb5fa0 RCX: 00007f865798ebe9
[  150.512697][ T8023] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  150.512709][ T8023] RBP: 00007f8658827090 R08: 0000000000000000 R09: 0000000000000000
[  150.512721][ T8023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  150.512733][ T8023] R13: 00007f8657bb6038 R14: 00007f8657bb5fa0 R15: 00007ffcd9da2c78
[  150.512767][ T8023]  </TASK>
[  151.367312][ T6381] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  151.675343][ T8075] FAULT_INJECTION: forcing a failure.
[  151.675343][ T8075] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  151.698277][ T8075] CPU: 0 UID: 0 PID: 8075 Comm: syz.0.730 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) 
[  151.698305][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  151.698317][ T8075] Call Trace:
[  151.698325][ T8075]  <TASK>
[  151.698335][ T8075]  dump_stack_lvl+0x189/0x250
[  151.698364][ T8075]  ? __pfx____ratelimit+0x10/0x10
[  151.698389][ T8075]  ? __pfx_dump_stack_lvl+0x10/0x10
[  151.698413][ T8075]  ? __pfx__printk+0x10/0x10
[  151.698440][ T8075]  ? __might_fault+0xb0/0x130
[  151.698479][ T8075]  should_fail_ex+0x414/0x560
[  151.698506][ T8075]  _copy_from_user+0x2d/0xb0
[  151.698526][ T8075]  ___sys_sendmsg+0x158/0x2a0
[  151.698559][ T8075]  ? __pfx____sys_sendmsg+0x10/0x10
[  151.698625][ T8075]  ? __fget_files+0x2a/0x420
[  151.698653][ T8075]  ? __fget_files+0x3a0/0x420
[  151.698693][ T8075]  __x64_sys_sendmsg+0x19b/0x260
[  151.698725][ T8075]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  151.698765][ T8075]  ? __pfx_ksys_write+0x10/0x10
[  151.698790][ T8075]  ? rcu_is_watching+0x15/0xb0
[  151.698818][ T8075]  ? do_syscall_64+0xbe/0x3b0
[  151.698849][ T8075]  do_syscall_64+0xfa/0x3b0
[  151.698874][ T8075]  ? lockdep_hardirqs_on+0x9c/0x150
[  151.698898][ T8075]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.698919][ T8075]  ? clear_bhb_loop+0x60/0xb0
[  151.698946][ T8075]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.698966][ T8075] RIP: 0033:0x7f3d56f8ebe9
[  151.698984][ T8075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  151.699002][ T8075] RSP: 002b:00007f3d57df3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  151.699024][ T8075] RAX: ffffffffffffffda RBX: 00007f3d571b5fa0 RCX: 00007f3d56f8ebe9
[  151.699046][ T8075] RDX: 0000000004040040 RSI: 0000200000000380 RDI: 0000000000000004
[  151.699061][ T8075] RBP: 00007f3d57df3090 R08: 0000000000000000 R09: 0000000000000000
[  151.699073][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  151.699084][ T8075] R13: 00007f3d571b6038 R14: 00007f3d571b5fa0 R15: 00007ffedf761978
[  151.699116][ T8075]  </TASK>
[  152.206939][ T8089] FAULT_INJECTION: forcing a failure.
[  152.206939][ T8089] name failslab, interval 1, probability 0, space 0, times 0
[  152.225250][ T8089] CPU: 1 UID: 0 PID: 8089 Comm: syz.4.735 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) 
[  152.225282][ T8089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  152.225295][ T8089] Call Trace:
[  152.225304][ T8089]  <TASK>
[  152.225313][ T8089]  dump_stack_lvl+0x189/0x250
[  152.225345][ T8089]  ? __pfx____ratelimit+0x10/0x10
[  152.225372][ T8089]  ? __pfx_dump_stack_lvl+0x10/0x10
[  152.225399][ T8089]  ? __pfx__printk+0x10/0x10
[  152.225432][ T8089]  ? __lock_acquire+0xab9/0xd20
[  152.225475][ T8089]  should_fail_ex+0x414/0x560
[  152.225506][ T8089]  should_failslab+0xa8/0x100
[  152.225540][ T8089]  kmem_cache_alloc_noprof+0x73/0x3c0
[  152.225569][ T8089]  ? skb_clone+0x212/0x3a0
[  152.225595][ T8089]  skb_clone+0x212/0x3a0
[  152.225619][ T8089]  __netlink_deliver_tap+0x404/0x850
[  152.225663][ T8089]  ? netlink_deliver_tap+0x2e/0x1b0
[  152.225693][ T8089]  netlink_deliver_tap+0x19c/0x1b0
[  152.225724][ T8089]  netlink_unicast+0x7fa/0x9e0
[  152.225764][ T8089]  ? __pfx_netlink_unicast+0x10/0x10
[  152.225792][ T8089]  ? netlink_sendmsg+0x642/0xb30
[  152.225817][ T8089]  ? skb_put+0x11b/0x210
[  152.225851][ T8089]  netlink_sendmsg+0x805/0xb30
[  152.225888][ T8089]  ? __pfx_netlink_sendmsg+0x10/0x10
[  152.225921][ T8089]  ? aa_sock_msg_perm+0xf1/0x1d0
[  152.225966][ T8089]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  152.225989][ T8089]  ? __pfx_netlink_sendmsg+0x10/0x10
[  152.226018][ T8089]  __sock_sendmsg+0x21c/0x270
[  152.226045][ T8089]  ____sys_sendmsg+0x505/0x830
[  152.226084][ T8089]  ? __pfx_____sys_sendmsg+0x10/0x10
[  152.226126][ T8089]  ? import_iovec+0x74/0xa0
[  152.226151][ T8089]  ___sys_sendmsg+0x21f/0x2a0
[  152.226185][ T8089]  ? __pfx____sys_sendmsg+0x10/0x10
[  152.226257][ T8089]  ? __fget_files+0x2a/0x420
[  152.226289][ T8089]  ? __fget_files+0x3a0/0x420
[  152.226333][ T8089]  __x64_sys_sendmsg+0x19b/0x260
[  152.226370][ T8089]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  152.226415][ T8089]  ? __pfx_ksys_write+0x10/0x10
[  152.226442][ T8089]  ? rcu_is_watching+0x15/0xb0
[  152.226470][ T8089]  ? do_syscall_64+0xbe/0x3b0
[  152.226504][ T8089]  do_syscall_64+0xfa/0x3b0
[  152.226530][ T8089]  ? lockdep_hardirqs_on+0x9c/0x150
[  152.226556][ T8089]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.226578][ T8089]  ? clear_bhb_loop+0x60/0xb0
[  152.226606][ T8089]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.226628][ T8089] RIP: 0033:0x7ffa10f8ebe9
[  152.226648][ T8089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  152.226666][ T8089] RSP: 002b:00007ffa0f1ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  152.226688][ T8089] RAX: ffffffffffffffda RBX: 00007ffa111b5fa0 RCX: 00007ffa10f8ebe9
[  152.226704][ T8089] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  152.226717][ T8089] RBP: 00007ffa0f1ee090 R08: 0000000000000000 R09: 0000000000000000
[  152.226729][ T8089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  152.226741][ T8089] R13: 00007ffa111b6038 R14: 00007ffa111b5fa0 R15: 00007fffd5823918
[  152.226776][ T8089]  </TASK>
[  152.235332][ T8091] netlink: 'syz.1.736': attribute type 1 has an invalid length.
[  152.586412][ T8099] tipc: Started in network mode
[  152.591349][ T8099] tipc: Node identity 565789e31a48, cluster identity 4711
[  152.603325][ T8099] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.960849][ T8121] ip6gre0: Master is either lo or non-ether device
[  153.194264][ T6380] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  153.262104][ T8094] tipc: Disabling bearer <eth:syzkaller0>
[  153.638260][ T8137] pim6reg: entered allmulticast mode
[  153.653433][ T8138] pim6reg: left allmulticast mode
[  153.799861][ T8145] FAULT_INJECTION: forcing a failure.
[  153.799861][ T8145] name failslab, interval 1, probability 0, space 0, times 0
[  153.818656][ T8145] CPU: 0 UID: 0 PID: 8145 Comm: syz.4.756 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) 
[  153.818687][ T8145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  153.818701][ T8145] Call Trace:
[  153.818709][ T8145]  <TASK>
[  153.818719][ T8145]  dump_stack_lvl+0x189/0x250
[  153.818750][ T8145]  ? __pfx____ratelimit+0x10/0x10
[  153.818777][ T8145]  ? __pfx_dump_stack_lvl+0x10/0x10
[  153.818803][ T8145]  ? __pfx__printk+0x10/0x10
[  153.818839][ T8145]  ? __pfx___might_resched+0x10/0x10
[  153.818864][ T8145]  should_fail_ex+0x414/0x560
[  153.818894][ T8145]  should_failslab+0xa8/0x100
[  153.818927][ T8145]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  153.818959][ T8145]  ? __alloc_skb+0x112/0x2d0
[  153.818992][ T8145]  __alloc_skb+0x112/0x2d0
[  153.819026][ T8145]  netlink_sendmsg+0x5c6/0xb30
[  153.819066][ T8145]  ? __pfx_netlink_sendmsg+0x10/0x10
[  153.819099][ T8145]  ? aa_sock_msg_perm+0xf1/0x1d0
[  153.819137][ T8145]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  153.819161][ T8145]  ? __pfx_netlink_sendmsg+0x10/0x10
[  153.819190][ T8145]  __sock_sendmsg+0x21c/0x270
[  153.819218][ T8145]  ____sys_sendmsg+0x505/0x830
[  153.819257][ T8145]  ? __pfx_____sys_sendmsg+0x10/0x10
[  153.819299][ T8145]  ? import_iovec+0x74/0xa0
[  153.819324][ T8145]  ___sys_sendmsg+0x21f/0x2a0
[  153.819359][ T8145]  ? __pfx____sys_sendmsg+0x10/0x10
[  153.819428][ T8145]  ? __fget_files+0x2a/0x420
[  153.819460][ T8145]  ? __fget_files+0x3a0/0x420
[  153.819503][ T8145]  __x64_sys_sendmsg+0x19b/0x260
[  153.819537][ T8145]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  153.819579][ T8145]  ? __pfx_ksys_write+0x10/0x10
[  153.819614][ T8145]  ? rcu_is_watching+0x15/0xb0
[  153.819641][ T8145]  ? do_syscall_64+0xbe/0x3b0
[  153.819674][ T8145]  do_syscall_64+0xfa/0x3b0
[  153.819701][ T8145]  ? lockdep_hardirqs_on+0x9c/0x150
[  153.819726][ T8145]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.819748][ T8145]  ? clear_bhb_loop+0x60/0xb0
[  153.819774][ T8145]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.819794][ T8145] RIP: 0033:0x7ffa10f8ebe9
[  153.819813][ T8145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  153.819831][ T8145] RSP: 002b:00007ffa0f1ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  153.819854][ T8145] RAX: ffffffffffffffda RBX: 00007ffa111b5fa0 RCX: 00007ffa10f8ebe9
[  153.819868][ T8145] RDX: 0000000004040040 RSI: 0000200000000380 RDI: 0000000000000004
[  153.819881][ T8145] RBP: 00007ffa0f1ee090 R08: 0000000000000000 R09: 0000000000000000
[  153.819894][ T8145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  153.819906][ T8145] R13: 00007ffa111b6038 R14: 00007ffa111b5fa0 R15: 00007fffd5823918
[  153.819938][ T8145]  </TASK>
[  154.266923][ T8153] __nla_validate_parse: 14 callbacks suppressed
[  154.266943][ T8153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.760'.
[  154.339361][ T8158] netlink: 24 bytes leftover after parsing attributes in process `syz.0.760'.
[  154.426804][ T8161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  154.517590][ T8165] netlink: 20 bytes leftover after parsing attributes in process `syz.3.762'.
[  154.788695][ T8179] netlink: 28 bytes leftover after parsing attributes in process `syz.1.764'.
[  154.798509][ T8179] netlink: 28 bytes leftover after parsing attributes in process `syz.1.764'.
[  154.962767][ T6372] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  154.974189][ T8180] netlink: del zone limit has 4 unknown bytes
[  154.989808][ T8185] netlink: 87 bytes leftover after parsing attributes in process `syz.0.770'.
[  155.101200][ T8189] netlink: 312 bytes leftover after parsing attributes in process `syz.1.771'.
[  155.211054][ T8191] team0: Device gtp0 is up. Set it down before adding it as a team port
[  155.401710][ T8201] netlink: 'syz.4.776': attribute type 1 has an invalid length.
[  155.419138][ T8200] netlink: 'syz.1.775': attribute type 1 has an invalid length.
[  155.612443][ T8207] netlink: 16 bytes leftover after parsing attributes in process `syz.0.778'.
[  155.625067][ T8207] netlink: 64 bytes leftover after parsing attributes in process `syz.0.778'.
[  155.637051][ T8207] tipc: Invalid UDP bearer configuration
[  155.637113][ T8207] tipc: Enabling of bearer <udp:sy{±> rejected, failed to enable media
[  155.698734][ T8209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.779'.
[  156.697864][ T8246] netlink: 'syz.4.792': attribute type 1 has an invalid length.
[  156.735959][ T8246] netlink: 'syz.4.792': attribute type 1 has an invalid length.
[  156.957606][ T8251] netlink: del zone limit has 4 unknown bytes
[  157.196307][ T8258] netlink: del zone limit has 4 unknown bytes
[  157.251432][ T8265] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  157.479507][ T8272] netlink: 'syz.1.802': attribute type 1 has an invalid length.
[  157.563643][ T8276] netlink: 'syz.3.803': attribute type 1 has an invalid length.
[  157.779580][ T6381] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  157.833361][ T8286] netlink: del zone limit has 4 unknown bytes
[  157.846510][ T8288] FAULT_INJECTION: forcing a failure.
[  157.846510][ T8288] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  157.883211][ T8288] CPU: 0 UID: 0 PID: 8288 Comm: syz.3.809 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) 
[  157.883258][ T8288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  157.883271][ T8288] Call Trace:
[  157.883279][ T8288]  <TASK>
[  157.883289][ T8288]  dump_stack_lvl+0x189/0x250
[  157.883321][ T8288]  ? __pfx____ratelimit+0x10/0x10
[  157.883348][ T8288]  ? __pfx_dump_stack_lvl+0x10/0x10
[  157.883374][ T8288]  ? __pfx__printk+0x10/0x10
[  157.883418][ T8288]  should_fail_ex+0x414/0x560
[  157.883449][ T8288]  _copy_to_user+0x31/0xb0
[  157.883474][ T8288]  simple_read_from_buffer+0xe1/0x170
[  157.883507][ T8288]  proc_fail_nth_read+0x1b3/0x220
[  157.883535][ T8288]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  157.883563][ T8288]  ? rw_verify_area+0x2a6/0x4d0
[  157.883589][ T8288]  ? __lock_acquire+0xab9/0xd20
[  157.883619][ T8288]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  157.883645][ T8288]  vfs_read+0x200/0x980
[  157.883672][ T8288]  ? fdget_pos+0x247/0x320
[  157.883696][ T8288]  ? __pfx___mutex_lock+0x10/0x10
[  157.883725][ T8288]  ? __pfx_vfs_read+0x10/0x10
[  157.883754][ T8288]  ? __fget_files+0x2a/0x420
[  157.883791][ T8288]  ? __fget_files+0x3a0/0x420
[  157.883822][ T8288]  ? __fget_files+0x2a/0x420
[  157.883865][ T8288]  ksys_read+0x145/0x250
[  157.883897][ T8288]  ? __pfx_ksys_read+0x10/0x10
[  157.883922][ T8288]  ? rcu_is_watching+0x15/0xb0
[  157.883950][ T8288]  ? do_syscall_64+0xbe/0x3b0
[  157.883983][ T8288]  do_syscall_64+0xfa/0x3b0
[  157.884009][ T8288]  ? lockdep_hardirqs_on+0x9c/0x150
[  157.884034][ T8288]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.884056][ T8288]  ? clear_bhb_loop+0x60/0xb0
[  157.884083][ T8288]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.884104][ T8288] RIP: 0033:0x7faa8d98d5fc
[  157.884123][ T8288] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  157.884141][ T8288] RSP: 002b:00007faa8e78c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  157.884163][ T8288] RAX: ffffffffffffffda RBX: 00007faa8dbb5fa0 RCX: 00007faa8d98d5fc
[  157.884178][ T8288] RDX: 000000000000000f RSI: 00007faa8e78c0a0 RDI: 0000000000000004
[  157.884191][ T8288] RBP: 00007faa8e78c090 R08: 0000000000000000 R09: 0000000000000000
[  157.884203][ T8288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  157.884214][ T8288] R13: 00007faa8dbb6038 R14: 00007faa8dbb5fa0 R15: 00007ffe3a576e58
[  157.884256][ T8288]  </TASK>
[  158.212393][ T8293] FAULT_INJECTION: forcing a failure.
[  158.212393][ T8293] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  158.283066][ T8295] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  158.298923][ T8293] CPU: 1 UID: 0 PID: 8293 Comm: syz.3.811 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) 
[  158.298956][ T8293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  158.298969][ T8293] Call Trace:
[  158.298978][ T8293]  <TASK>
[  158.298987][ T8293]  dump_stack_lvl+0x189/0x250
[  158.299020][ T8293]  ? __pfx____ratelimit+0x10/0x10
[  158.299048][ T8293]  ? __pfx_dump_stack_lvl+0x10/0x10
[  158.299075][ T8293]  ? __pfx__printk+0x10/0x10
[  158.299106][ T8293]  ? __might_fault+0xb0/0x130
[  158.299149][ T8293]  should_fail_ex+0x414/0x560
[  158.299192][ T8293]  _copy_from_iter+0x1db/0x16f0
[  158.299228][ T8293]  ? rcu_is_watching+0x15/0xb0
[  158.299252][ T8293]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  158.299284][ T8293]  ? __pfx__copy_from_iter+0x10/0x10
[  158.299318][ T8293]  ? __build_skb_around+0x257/0x3e0
[  158.299352][ T8293]  ? netlink_sendmsg+0x642/0xb30
[  158.299378][ T8293]  ? skb_put+0x11b/0x210
[  158.299412][ T8293]  netlink_sendmsg+0x6b2/0xb30
[  158.299452][ T8293]  ? __pfx_netlink_sendmsg+0x10/0x10
[  158.299484][ T8293]  ? aa_sock_msg_perm+0xf1/0x1d0
[  158.299518][ T8293]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  158.299541][ T8293]  ? __pfx_netlink_sendmsg+0x10/0x10
[  158.299571][ T8293]  __sock_sendmsg+0x21c/0x270
[  158.299600][ T8293]  ____sys_sendmsg+0x505/0x830
[  158.299639][ T8293]  ? __pfx_____sys_sendmsg+0x10/0x10
[  158.299682][ T8293]  ? import_iovec+0x74/0xa0
[  158.299707][ T8293]  ___sys_sendmsg+0x21f/0x2a0
[  158.299742][ T8293]  ? __pfx____sys_sendmsg+0x10/0x10
[  158.299815][ T8293]  ? __fget_files+0x2a/0x420
[  158.299847][ T8293]  ? __fget_files+0x3a0/0x420
[  158.299891][ T8293]  __x64_sys_sendmsg+0x19b/0x260
[  158.299926][ T8293]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  158.299971][ T8293]  ? __pfx_ksys_write+0x10/0x10
[  158.299997][ T8293]  ? rcu_is_watching+0x15/0xb0
[  158.300024][ T8293]  ? do_syscall_64+0xbe/0x3b0
[  158.300057][ T8293]  do_syscall_64+0xfa/0x3b0
[  158.300083][ T8293]  ? lockdep_hardirqs_on+0x9c/0x150
[  158.300109][ T8293]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.300131][ T8293]  ? clear_bhb_loop+0x60/0xb0
[  158.300158][ T8293]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.300186][ T8293] RIP: 0033:0x7faa8d98ebe9
[  158.300205][ T8293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  158.300224][ T8293] RSP: 002b:00007faa8e78c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  158.300247][ T8293] RAX: ffffffffffffffda RBX: 00007faa8dbb5fa0 RCX: 00007faa8d98ebe9
[  158.300262][ T8293] RDX: 0000000004040040 RSI: 0000200000000380 RDI: 0000000000000004
[  158.300276][ T8293] RBP: 00007faa8e78c090 R08: 0000000000000000 R09: 0000000000000000
[  158.300288][ T8293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  158.300301][ T8293] R13: 00007faa8dbb6038 R14: 00007faa8dbb5fa0 R15: 00007ffe3a576e58
[  158.300334][ T8293]  </TASK>
[  158.704457][ T8301] netlink: 'syz.3.816': attribute type 1 has an invalid length.
[  159.246658][ T8316] Bluetooth: MGMT ver 1.23
[  159.416423][ T8340] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  159.480628][ T8340] __nla_validate_parse: 16 callbacks suppressed
[  159.480649][ T8340] netlink: 16 bytes leftover after parsing attributes in process `syz.1.824'.
[  159.858267][ T8352] openvswitch: netlink: IP tunnel dst address not specified
[  159.882998][ T6381] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  159.901817][ T8352] openvswitch: netlink: IP tunnel dst address not specified
[  159.979262][ T8358] netlink: 'syz.4.830': attribute type 1 has an invalid length.
[  160.111505][ T8360] netlink: 'syz.3.831': attribute type 1 has an invalid length.
[  160.179703][ T8366] netlink: 104 bytes leftover after parsing attributes in process `syz.4.834'.
[  160.270647][ T8367] netlink: del zone limit has 4 unknown bytes
[  160.307435][ T8371] netlink: 16 bytes leftover after parsing attributes in process `syz.2.835'.
[  160.333454][ T8371] netlink: 24 bytes leftover after parsing attributes in process `syz.2.835'.
[  160.346816][ T8373] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  160.375571][ T8373] netlink: 16 bytes leftover after parsing attributes in process `syz.0.836'.
[  160.496218][ T8384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.840'.
[  160.517449][ T8384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.840'.
[  160.605729][ T8389] netlink: 'syz.0.841': attribute type 1 has an invalid length.
[  160.646119][ T8391] netlink: 20 bytes leftover after parsing attributes in process `syz.3.842'.
[  160.755332][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.845'.
[  160.778419][ T6380] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  160.790888][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.845'.
[  161.025095][ T8410] netlink: del zone limit has 4 unknown bytes
[  161.110716][ T8412] team0: Device gtp0 is of different type
[  161.245790][ T8417] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  161.447912][ T6381] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  161.857442][ T8449] bond0: entered promiscuous mode
[  161.863112][ T8449] bond0: entered allmulticast mode
[  161.869627][ T8449] 8021q: adding VLAN 0 to HW filter on device bond0
[  161.978773][ T8448] netlink: del zone limit has 4 unknown bytes
[  162.048338][ T8453] netlink: del zone limit has 4 unknown bytes
[  162.167775][ T5940] IPVS: starting estimator thread 0...
[  162.293568][ T8461] IPVS: using max 27 ests per chain, 64800 per kthread
[  162.415646][ T8473] tipc: New replicast peer: 255.255.255.255
[  162.423384][ T8473] tipc: Enabled bearer <udp:syz2>, priority 10
[  162.741794][ T8481] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  162.783289][ T8491] tipc: Invalid UDP bearer configuration
[  162.783348][ T8491] tipc: Enabling of bearer <udp:sy{±> rejected, failed to enable media
[  163.163180][  T801] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  163.357222][ T6372] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  163.414782][ T5940] tipc: Node number set to 1277135331
[  163.491879][ T8525] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  163.728037][ T8531] veth0_to_team: entered promiscuous mode
[  163.734360][ T8531] veth0_to_team: entered allmulticast mode
[  163.941503][ T8541] batadv_slave_1: Device is already in use.
[  164.449910][ T8565] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  164.646838][ T8572] __nla_validate_parse: 44 callbacks suppressed
[  164.646858][ T8572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.902'.
[  164.677457][ T8574] netlink: 'syz.3.901': attribute type 1 has an invalid length.
[  164.678763][ T8572] netlink: 56 bytes leftover after parsing attributes in process `syz.2.902'.
[  164.704031][ T8572] netlink: 56 bytes leftover after parsing attributes in process `syz.2.902'.
[  164.728807][ T8572] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  164.866981][ T8583] netlink: 104 bytes leftover after parsing attributes in process `syz.4.907'.
[  164.893322][ T8579] bond0: (slave wlan1): Releasing backup interface
[  164.896818][ T8588] netlink: 20 bytes leftover after parsing attributes in process `syz.0.906'.
[  165.012057][ T8593] netlink: 'syz.4.910': attribute type 25 has an invalid length.
[  165.030237][ T8593] netlink: 'syz.4.910': attribute type 1 has an invalid length.
[  165.062767][ T8593] bridge0: port 1(bridge_slave_0) entered forwarding state
[  165.084720][ T8593] netlink: 24 bytes leftover after parsing attributes in process `syz.4.910'.
[  165.104217][ T8593] netlink: 16 bytes leftover after parsing attributes in process `syz.4.910'.
[  165.270552][ T8606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.916'.
[  165.295441][ T8606] netlink: 24 bytes leftover after parsing attributes in process `syz.4.916'.
[  165.307954][ T8609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.918'.
[  165.381621][ T8613] netlink: 'syz.4.919': attribute type 1 has an invalid length.
[  165.818143][ T8629] netlink: del zone limit has 4 unknown bytes
[  166.043387][ T8644] netlink: 'syz.1.932': attribute type 1 has an invalid length.
[  166.481693][ T8673] ieee802154 phy0 wpan0: encryption failed: -90
[  166.509329][ T6370] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  166.516655][ T8675] netlink: zone id is out of range
[  166.608306][ T8675] netlink: zone id is out of range
[  166.623084][ T8675] netlink: zone id is out of range
[  166.631502][ T8675] netlink: zone id is out of range
[  166.637841][ T8675] netlink: zone id is out of range
[  166.651198][ T8675] netlink: zone id is out of range
[  166.657716][ T8675] netlink: zone id is out of range
[  166.666011][ T8675] netlink: zone id is out of range
[  166.675065][ T8675] netlink: zone id is out of range
[  166.915709][ T8685] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.103996][ T8685] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.209102][ T8685] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.239530][ T6380] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  167.334627][ T8685] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.433505][ T8705] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  167.509477][ T8706] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  167.545474][ T6372] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  167.574844][ T6372] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  167.625158][ T6372] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  167.642860][ T6372] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.869825][ T8719] netlink: 'syz.3.960': attribute type 29 has an invalid length.
[  167.887027][ T8719] netlink: 'syz.3.960': attribute type 29 has an invalid length.
[  168.126141][ T8734] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  168.260908][   T12] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  168.707935][ T8764] tipc: Invalid UDP bearer configuration
[  168.707994][ T8764] tipc: Enabling of bearer <udp:sy{±> rejected, failed to enable media
[  168.752707][ T8766] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  168.946478][ T8780] FAULT_INJECTION: forcing a failure.
[  168.946478][ T8780] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  168.971232][ T8780] CPU: 0 UID: 0 PID: 8780 Comm: syz.0.984 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) 
[  168.971263][ T8780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  168.971276][ T8780] Call Trace:
[  168.971285][ T8780]  <TASK>
[  168.971294][ T8780]  dump_stack_lvl+0x189/0x250
[  168.971326][ T8780]  ? __pfx____ratelimit+0x10/0x10
[  168.971354][ T8780]  ? __pfx_dump_stack_lvl+0x10/0x10
[  168.971381][ T8780]  ? __pfx__printk+0x10/0x10
[  168.971412][ T8780]  ? __might_fault+0xb0/0x130
[  168.971456][ T8780]  should_fail_ex+0x414/0x560
[  168.971486][ T8780]  _copy_from_user+0x2d/0xb0
[  168.971509][ T8780]  ___sys_sendmsg+0x158/0x2a0
[  168.971545][ T8780]  ? __pfx____sys_sendmsg+0x10/0x10
[  168.971619][ T8780]  ? __fget_files+0x2a/0x420
[  168.971651][ T8780]  ? __fget_files+0x3a0/0x420
[  168.971696][ T8780]  __x64_sys_sendmsg+0x19b/0x260
[  168.971732][ T8780]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  168.971777][ T8780]  ? __pfx_ksys_write+0x10/0x10
[  168.971803][ T8780]  ? rcu_is_watching+0x15/0xb0
[  168.971832][ T8780]  ? do_syscall_64+0xbe/0x3b0
[  168.971865][ T8780]  do_syscall_64+0xfa/0x3b0
[  168.971891][ T8780]  ? lockdep_hardirqs_on+0x9c/0x150
[  168.971917][ T8780]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.971939][ T8780]  ? clear_bhb_loop+0x60/0xb0
[  168.971966][ T8780]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.971989][ T8780] RIP: 0033:0x7f3d56f8ebe9
[  168.972008][ T8780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  168.972027][ T8780] RSP: 002b:00007f3d57df3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  168.972049][ T8780] RAX: ffffffffffffffda RBX: 00007f3d571b5fa0 RCX: 00007f3d56f8ebe9
[  168.972065][ T8780] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006
[  168.972077][ T8780] RBP: 00007f3d57df3090 R08: 0000000000000000 R09: 0000000000000000
[  168.972089][ T8780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  168.972101][ T8780] R13: 00007f3d571b6038 R14: 00007f3d571b5fa0 R15: 00007ffedf761978
[  168.972135][ T8780]  </TASK>
[  169.344093][   T12] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  199.676552][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  199.683533][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  214.305065][ T8799] net_ratelimit: 5 callbacks suppressed
[  214.305086][ T8799] openvswitch: netlink: Message has 4 unknown bytes.
[  214.328712][ T8799] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  214.352938][ T8801] lo: entered allmulticast mode
[  214.363273][ T8799] batadv_slave_0: entered promiscuous mode
[  214.378595][ T8799] __nla_validate_parse: 22 callbacks suppressed
[  214.378617][ T8799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.993'.
[  214.417483][ T8799] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  214.489708][ T8799] batadv_slave_0 (unregistering): left promiscuous mode
[  214.499436][ T8799] batman_adv: batadv0: Removing interface: batadv_slave_0
[  214.545631][ T8816] netlink: 'syz.0.994': attribute type 1 has an invalid length.
[  214.978018][ T8827] netlink: 80 bytes leftover after parsing attributes in process `syz.1.995'.
[  216.238940][ T8862] netlink: del zone limit has 4 unknown bytes
[  216.306208][ T8864] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma?
[  216.587572][ T8871] netlink: 'syz.4.1002': attribute type 83 has an invalid length.
[  216.758966][ T8878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1004'.
[  216.869780][ T8881] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1004'.
[  216.900744][ T8880] netlink: del zone limit has 4 unknown bytes
[  217.055917][ T8886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1007'.
[  217.112877][ T5863] Bluetooth: hci3: command 0x0406 tx timeout
[  217.123463][ T5863] Bluetooth: hci2: command 0x0406 tx timeout
[  217.129769][ T5182] Bluetooth: hci1: command 0x0406 tx timeout
[  217.392363][ T8891] netlink: del zone limit has 4 unknown bytes
[  217.406435][ T8896] netlink: 'syz.0.1009': attribute type 1 has an invalid length.
[  217.551745][ T8904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1011'.
[  217.596921][ T8904] bridge_slave_1: left allmulticast mode
[  217.603661][ T8904] bridge_slave_1: left promiscuous mode
[  217.609873][ T8904] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.638072][ T8904] bridge_slave_0: left allmulticast mode
[  217.647277][ T8904] bridge_slave_0: left promiscuous mode
[  217.659544][ T8904] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.999956][ T8916] netlink: del zone limit has 4 unknown bytes
[  218.210261][ T8921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1015'.
[  218.284004][ T8919] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1015'.
[  218.319806][ T8928] netlink: 'syz.4.1016': attribute type 1 has an invalid length.
[  219.310673][ T8956] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1025'.
[  219.354650][ T8956] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1025'.
[  219.371128][ T8956] tipc: Invalid UDP bearer configuration
[  219.371192][ T8956] tipc: Enabling of bearer <udp:sy{±> rejected, failed to enable media
[  219.911190][ T8981] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  220.137309][ T8984] syzkaller0: entered promiscuous mode
[  220.167196][ T8984] syzkaller0: entered allmulticast mode
[  220.365795][ T9013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1034'.
[  220.504459][ T9018] IPv6: Can't replace route, no match found
[  220.808313][ T8981] tipc: Resetting bearer <eth:syzkaller0>
[  220.824702][ T9013] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  220.909567][ T9013] batman_adv: batadv0: Removing interface: batadv_slave_0
[  221.004379][ T8978] tipc: Resetting bearer <eth:syzkaller0>
[  222.337315][ T8978] tipc: Disabling bearer <eth:syzkaller0>
[  222.474996][ T9042] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1042'.
[  222.555199][ T9040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1041'.
[  222.578958][ T9046] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1041'.
[  222.752482][ T9052] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1045'.
[  222.761793][ T9052] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1045'.
[  222.853181][ T9055] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1047'.
[  222.933370][ T9058] syzkaller1: entered promiscuous mode
[  222.938921][ T9058] syzkaller1: entered allmulticast mode
[  223.085132][   T30] audit: type=1800 audit(1754678689.672:2): pid=9074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1050" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=1082 res=0 errno=0
[  223.124535][ T9074] netlink: 'syz.2.1050': attribute type 1 has an invalid length.
[  223.160835][ T9074] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1050'.
[  223.200049][ T9078] netlink: 'syz.3.1053': attribute type 1 has an invalid length.
[  223.210612][ T9073] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1051'.
[  223.214583][ T9075] netlink: del zone limit has 4 unknown bytes
[  223.401298][ T6387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.416553][ T6387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  223.504093][ T9088] ipvlan2: entered promiscuous mode
[  223.525065][ T9088] bridge0: port 3(ipvlan2) entered blocking state
[  223.532314][ T9088] bridge0: port 3(ipvlan2) entered disabled state
[  223.540504][ T9088] ipvlan2: entered allmulticast mode
[  223.549955][ T9088] bridge0: entered allmulticast mode
[  223.562902][ T9088] ipvlan2: left allmulticast mode
[  223.568553][ T9088] bridge0: left allmulticast mode
[  223.574140][ T9092] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1056'.
[  223.758144][ T9098] 8021q: adding VLAN 0 to HW filter on device bond1
[  223.769370][ T9098] bridge0: port 3(bond1) entered blocking state
[  223.776567][ T9098] bridge0: port 3(bond1) entered disabled state
[  223.783356][ T9098] bond1: entered allmulticast mode
[  223.791908][ T9098] bond1: entered promiscuous mode
[  223.798668][ T9098] bridge0: port 3(bond1) entered blocking state
[  223.805365][ T9098] bridge0: port 3(bond1) entered forwarding state
[  223.964001][ T9110] tipc: Invalid UDP bearer configuration
[  223.964059][ T9110] tipc: Enabling of bearer <udp:sy{±> rejected, failed to enable media
[  224.013402][ T9115] netlink: 'syz.1.1066': attribute type 1 has an invalid length.
[  224.480027][ T6387] bridge0: port 3(bond1) entered disabled state
[  224.536020][ T9147] tipc: Invalid UDP bearer configuration
[  224.536082][ T9147] tipc: Enabling of bearer <udp:sy{±> rejected, failed to enable media
[  224.906740][ T9165] netlink: 'syz.4.1085': attribute type 1 has an invalid length.
[  225.006089][ T9168] tipc: New replicast peer: 255.255.255.255
[  225.026712][ T9168] tipc: Enabled bearer <udp:syz2>, priority 10
[  225.179913][ T9168] tipc: Disabling bearer <udp:syz2>
[  225.497695][ T9188] FAULT_INJECTION: forcing a failure.
[  225.497695][ T9188] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  225.517953][ T9188] CPU: 1 UID: 0 PID: 9188 Comm: syz.0.1090 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) 
[  225.517986][ T9188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  225.518000][ T9188] Call Trace:
[  225.518009][ T9188]  <TASK>
[  225.518019][ T9188]  dump_stack_lvl+0x189/0x250
[  225.518053][ T9188]  ? __pfx____ratelimit+0x10/0x10
[  225.518081][ T9188]  ? __pfx_dump_stack_lvl+0x10/0x10
[  225.518108][ T9188]  ? __pfx__printk+0x10/0x10
[  225.518154][ T9188]  should_fail_ex+0x414/0x560
[  225.518186][ T9188]  _copy_to_user+0x31/0xb0
[  225.518212][ T9188]  simple_read_from_buffer+0xe1/0x170
[  225.518251][ T9188]  proc_fail_nth_read+0x1b3/0x220
[  225.518282][ T9188]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  225.518313][ T9188]  ? rw_verify_area+0x2a6/0x4d0
[  225.518341][ T9188]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  225.518370][ T9188]  vfs_read+0x200/0x980
[  225.518398][ T9188]  ? fdget_pos+0x247/0x320
[  225.518422][ T9188]  ? __pfx___mutex_lock+0x10/0x10
[  225.518461][ T9188]  ? __pfx_vfs_read+0x10/0x10
[  225.518495][ T9188]  ? __rcu_read_unlock+0x84/0xe0
[  225.518528][ T9188]  ? __fget_files+0x3a0/0x420
[  225.518561][ T9188]  ? __fget_files+0x2a/0x420
[  225.518606][ T9188]  ksys_read+0x145/0x250
[  225.518638][ T9188]  ? __pfx_ksys_read+0x10/0x10
[  225.518665][ T9188]  ? rcu_is_watching+0x15/0xb0
[  225.518694][ T9188]  ? do_syscall_64+0xbe/0x3b0
[  225.518728][ T9188]  do_syscall_64+0xfa/0x3b0
[  225.518758][ T9188]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.518784][ T9188]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  225.518807][ T9188]  ? clear_bhb_loop+0x60/0xb0
[  225.518836][ T9188]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.518859][ T9188] RIP: 0033:0x7f3d56f8d5fc
[  225.518879][ T9188] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  225.518899][ T9188] RSP: 002b:00007f3d57df3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  225.518923][ T9188] RAX: ffffffffffffffda RBX: 00007f3d571b5fa0 RCX: 00007f3d56f8d5fc
[  225.518939][ T9188] RDX: 000000000000000f RSI: 00007f3d57df30a0 RDI: 0000000000000007
[  225.518953][ T9188] RBP: 00007f3d57df3090 R08: 0000000000000000 R09: 0000000000000000
[  225.518967][ T9188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  225.518980][ T9188] R13: 00007f3d571b6038 R14: 00007f3d571b5fa0 R15: 00007ffedf761978
[  225.519016][ T9188]  </TASK>
[  225.952511][ T9201] bond0: entered promiscuous mode
[  225.958420][ T9201] bond0: entered allmulticast mode
[  226.018163][ T9201] FAULT_INJECTION: forcing a failure.
[  226.018163][ T9201] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  226.071276][ T9208] __nla_validate_parse: 12 callbacks suppressed
[  226.071296][ T9208] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1099'.
[  226.087982][ T9206] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1095'.
[  226.097205][ T9201] CPU: 1 UID: 0 PID: 9201 Comm: syz.0.1095 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) 
[  226.097237][ T9201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  226.097250][ T9201] Call Trace:
[  226.097259][ T9201]  <TASK>
[  226.097268][ T9201]  dump_stack_lvl+0x189/0x250
[  226.097300][ T9201]  ? __pfx____ratelimit+0x10/0x10
[  226.097327][ T9201]  ? __pfx_dump_stack_lvl+0x10/0x10
[  226.097354][ T9201]  ? __pfx__printk+0x10/0x10
[  226.097398][ T9201]  should_fail_ex+0x414/0x560
[  226.097429][ T9201]  _copy_to_user+0x31/0xb0
[  226.097453][ T9201]  simple_read_from_buffer+0xe1/0x170
[  226.097490][ T9201]  proc_fail_nth_read+0x1b3/0x220
[  226.097524][ T9201]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  226.097553][ T9201]  ? rw_verify_area+0x2a6/0x4d0
[  226.097579][ T9201]  ? __lock_acquire+0xab9/0xd20
[  226.097609][ T9201]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  226.097635][ T9201]  vfs_read+0x200/0x980
[  226.097662][ T9201]  ? fdget_pos+0x247/0x320
[  226.097687][ T9201]  ? __pfx___mutex_lock+0x10/0x10
[  226.097716][ T9201]  ? __pfx_vfs_read+0x10/0x10
[  226.097746][ T9201]  ? __fget_files+0x2a/0x420
[  226.097784][ T9201]  ? __fget_files+0x3a0/0x420
[  226.097814][ T9201]  ? __fget_files+0x2a/0x420
[  226.097857][ T9201]  ksys_read+0x145/0x250
[  226.097888][ T9201]  ? __pfx_ksys_read+0x10/0x10
[  226.097914][ T9201]  ? rcu_is_watching+0x15/0xb0
[  226.097941][ T9201]  ? do_syscall_64+0xbe/0x3b0
[  226.097974][ T9201]  do_syscall_64+0xfa/0x3b0
[  226.098000][ T9201]  ? lockdep_hardirqs_on+0x9c/0x150
[  226.098026][ T9201]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.098048][ T9201]  ? clear_bhb_loop+0x60/0xb0
[  226.098075][ T9201]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.098096][ T9201] RIP: 0033:0x7f3d56f8d5fc
[  226.098116][ T9201] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  226.098135][ T9201] RSP: 002b:00007f3d57df3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  226.098167][ T9201] RAX: ffffffffffffffda RBX: 00007f3d571b5fa0 RCX: 00007f3d56f8d5fc
[  226.098182][ T9201] RDX: 000000000000000f RSI: 00007f3d57df30a0 RDI: 0000000000000007
[  226.098195][ T9201] RBP: 00007f3d57df3090 R08: 0000000000000000 R09: 0000000000000000
[  226.098208][ T9201] R10: 000000000000006e R11: 0000000000000246 R12: 0000000000000001
[  226.098220][ T9201] R13: 00007f3d571b6038 R14: 00007f3d571b5fa0 R15: 00007ffedf761978
[  226.098254][ T9201]  </TASK>
[  226.346868][ T9208] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1099'.
[  226.620216][ T9215] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1101'.
[  226.699482][ T9219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1103'.
[  226.722641][ T9219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1103'.
[  226.894456][ T9224] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1105'.
[  227.054342][ T9235] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1109'.
[  227.104487][ T9233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1108'.
[  227.275387][ T9240] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1108'.
[  227.762021][ T9264] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  227.901464][ T9269] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  229.337154][ T9314] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  230.226881][ T6381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  230.250449][ T6381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.317581][ T6387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  230.335848][ T6387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.430523][ T6381] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  230.546998][ T6381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  230.568665][ T6381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.679545][ T9367] netlink: del zone limit has 4 unknown bytes
[  231.207881][ T9385] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  231.219726][ T9384] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  231.437451][ T9399] __nla_validate_parse: 17 callbacks suppressed
[  231.437474][ T9399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1160'.
[  231.443521][ T9403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1161'.
[  231.443969][ T9399] netlink: 'syz.4.1160': attribute type 18 has an invalid length.
[  231.470981][ T9403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1161'.
[  231.486794][ T6381] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  231.487037][ T9399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1160'.
[  231.506536][ T6381] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  231.514419][ T9399] netlink: 'syz.4.1160': attribute type 18 has an invalid length.
[  231.533582][ T6381] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  231.556658][ T6381] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  231.825718][ T9412] netlink: del zone limit has 4 unknown bytes
[  231.843540][ T9417] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  231.851025][ T9417] IPv6: NLM_F_CREATE should be set when creating new route
[  231.932450][ T9423] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  232.055442][ T9428] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1168'.
[  232.115340][ T9430] netlink: 'syz.2.1170': attribute type 1 has an invalid length.
[  232.161488][ T6387] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  232.181321][ T9434] FAULT_INJECTION: forcing a failure.
[  232.181321][ T9434] name failslab, interval 1, probability 0, space 0, times 0
[  232.219198][ T9434] CPU: 0 UID: 0 PID: 9434 Comm: syz.1.1172 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) 
[  232.219230][ T9434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  232.219244][ T9434] Call Trace:
[  232.219252][ T9434]  <TASK>
[  232.219262][ T9434]  dump_stack_lvl+0x189/0x250
[  232.219295][ T9434]  ? __pfx____ratelimit+0x10/0x10
[  232.219322][ T9434]  ? __pfx_dump_stack_lvl+0x10/0x10
[  232.219349][ T9434]  ? __pfx__printk+0x10/0x10
[  232.219386][ T9434]  ? __pfx___might_resched+0x10/0x10
[  232.219413][ T9434]  should_fail_ex+0x414/0x560
[  232.219445][ T9434]  should_failslab+0xa8/0x100
[  232.219479][ T9434]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  232.219511][ T9434]  ? __alloc_skb+0x112/0x2d0
[  232.219545][ T9434]  __alloc_skb+0x112/0x2d0
[  232.219577][ T9434]  netlink_sendmsg+0x5c6/0xb30
[  232.219616][ T9434]  ? __pfx_netlink_sendmsg+0x10/0x10
[  232.219648][ T9434]  ? aa_sock_msg_perm+0xf1/0x1d0
[  232.219681][ T9434]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  232.219705][ T9434]  ? __pfx_netlink_sendmsg+0x10/0x10
[  232.219735][ T9434]  __sock_sendmsg+0x21c/0x270
[  232.219763][ T9434]  ____sys_sendmsg+0x505/0x830
[  232.219812][ T9434]  ? __pfx_____sys_sendmsg+0x10/0x10
[  232.219853][ T9434]  ? import_iovec+0x74/0xa0
[  232.219878][ T9434]  ___sys_sendmsg+0x21f/0x2a0
[  232.219914][ T9434]  ? __pfx____sys_sendmsg+0x10/0x10
[  232.219984][ T9434]  ? __fget_files+0x2a/0x420
[  232.220016][ T9434]  ? __fget_files+0x3a0/0x420
[  232.220061][ T9434]  __x64_sys_sendmsg+0x19b/0x260
[  232.220097][ T9434]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  232.220141][ T9434]  ? __pfx_ksys_write+0x10/0x10
[  232.220167][ T9434]  ? rcu_is_watching+0x15/0xb0
[  232.220200][ T9434]  ? do_syscall_64+0xbe/0x3b0
[  232.220232][ T9434]  do_syscall_64+0xfa/0x3b0
[  232.220257][ T9434]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.220283][ T9434]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.220305][ T9434]  ? clear_bhb_loop+0x60/0xb0
[  232.220331][ T9434]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.220352][ T9434] RIP: 0033:0x7f389098ebe9
[  232.220372][ T9434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  232.220392][ T9434] RSP: 002b:00007f38917d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  232.220415][ T9434] RAX: ffffffffffffffda RBX: 00007f3890bb5fa0 RCX: 00007f389098ebe9
[  232.220430][ T9434] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004
[  232.220443][ T9434] RBP: 00007f38917d7090 R08: 0000000000000000 R09: 0000000000000000
[  232.220457][ T9434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  232.220469][ T9434] R13: 00007f3890bb6038 R14: 00007f3890bb5fa0 R15: 00007ffe94ad9238
[  232.220501][ T9434]  </TASK>
[  232.838502][ T9453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1177'.
[  232.850778][ T9453] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1177'.
[  233.181425][ T6372] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  233.201279][ T9469] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1184'.
[  233.304317][ T9475] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  233.329461][ T9475] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1187'.
[  233.516293][ T9483] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1190'.
[  233.561073][ T6387] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  233.679523][ T9493] sctp: [Deprecated]: syz.0.1194 (pid 9493) Use of struct sctp_assoc_value in delayed_ack socket option.
[  233.679523][ T9493] Use struct sctp_sack_info instead
[  233.862810][ T9503] netlink: 'syz.1.1198': attribute type 1 has an invalid length.
[  233.884582][ T9503] netlink: 'syz.1.1198': attribute type 2 has an invalid length.
[  233.892389][ T9503] netlink: 'syz.1.1198': attribute type 1 has an invalid length.
[  234.184599][ T9523] tipc: Invalid UDP bearer configuration
[  234.184660][ T9523] tipc: Enabling of bearer <udp:sy{±> rejected, failed to enable media
[  234.742372][ T9533] netlink: 'syz.0.1208': attribute type 4 has an invalid length.
[  234.809702][ T9549] netlink: 'syz.0.1208': attribute type 4 has an invalid length.
[  235.565479][ T9576] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  235.875319][ T9595] netlink: 'syz.1.1223': attribute type 1 has an invalid length.
[  236.054473][ T9600] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  236.128524][ T9607] netlink: 'syz.2.1225': attribute type 1 has an invalid length.
[  236.173989][ T6387] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  236.665091][ T9632] netlink: 'syz.4.1238': attribute type 1 has an invalid length.
[  236.739776][ T9639] netlink: 'syz.3.1241': attribute type 1 has an invalid length.
[  236.754142][ T9636] __nla_validate_parse: 12 callbacks suppressed
[  236.754163][ T9636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1239'.
[  237.277724][ T9650] bond0: left promiscuous mode
[  237.284414][ T9650] bond0: left allmulticast mode
[  237.336290][ T9664] RDS: rds_bind could not find a transport for ::ffff:100.9.1.2, load rds_tcp or rds_rdma?
[  237.438596][ T9673] FAULT_INJECTION: forcing a failure.
[  237.438596][ T9673] name failslab, interval 1, probability 0, space 0, times 0
[  237.472428][ T9673] CPU: 0 UID: 0 PID: 9673 Comm: syz.1.1249 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) 
[  237.472461][ T9673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  237.472474][ T9673] Call Trace:
[  237.472482][ T9673]  <TASK>
[  237.472491][ T9673]  dump_stack_lvl+0x189/0x250
[  237.472527][ T9673]  ? __pfx____ratelimit+0x10/0x10
[  237.472555][ T9673]  ? __pfx_dump_stack_lvl+0x10/0x10
[  237.472580][ T9673]  ? __pfx__printk+0x10/0x10
[  237.472614][ T9673]  ? __lock_acquire+0xab9/0xd20
[  237.472657][ T9673]  should_fail_ex+0x414/0x560
[  237.472688][ T9673]  should_failslab+0xa8/0x100
[  237.472722][ T9673]  kmem_cache_alloc_noprof+0x73/0x3c0
[  237.472751][ T9673]  ? skb_clone+0x212/0x3a0
[  237.472777][ T9673]  skb_clone+0x212/0x3a0
[  237.472801][ T9673]  __netlink_deliver_tap+0x404/0x850
[  237.472845][ T9673]  ? netlink_deliver_tap+0x2e/0x1b0
[  237.472875][ T9673]  netlink_deliver_tap+0x19c/0x1b0
[  237.472906][ T9673]  netlink_unicast+0x7fa/0x9e0
[  237.472941][ T9673]  ? __pfx_netlink_unicast+0x10/0x10
[  237.472969][ T9673]  ? netlink_sendmsg+0x642/0xb30
[  237.472994][ T9673]  ? skb_put+0x11b/0x210
[  237.473028][ T9673]  netlink_sendmsg+0x805/0xb30
[  237.473076][ T9673]  ? __pfx_netlink_sendmsg+0x10/0x10
[  237.473109][ T9673]  ? aa_sock_msg_perm+0xf1/0x1d0
[  237.473142][ T9673]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  237.473166][ T9673]  ? __pfx_netlink_sendmsg+0x10/0x10
[  237.473196][ T9673]  __sock_sendmsg+0x21c/0x270
[  237.473225][ T9673]  ____sys_sendmsg+0x505/0x830
[  237.473263][ T9673]  ? __pfx_____sys_sendmsg+0x10/0x10
[  237.473307][ T9673]  ? import_iovec+0x74/0xa0
[  237.473332][ T9673]  ___sys_sendmsg+0x21f/0x2a0
[  237.473368][ T9673]  ? __pfx____sys_sendmsg+0x10/0x10
[  237.473443][ T9673]  ? __fget_files+0x2a/0x420
[  237.473475][ T9673]  ? __fget_files+0x3a0/0x420
[  237.473519][ T9673]  __x64_sys_sendmsg+0x19b/0x260
[  237.473555][ T9673]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  237.473600][ T9673]  ? __pfx_ksys_write+0x10/0x10
[  237.473626][ T9673]  ? rcu_is_watching+0x15/0xb0
[  237.473654][ T9673]  ? do_syscall_64+0xbe/0x3b0
[  237.473687][ T9673]  do_syscall_64+0xfa/0x3b0
[  237.473713][ T9673]  ? lockdep_hardirqs_on+0x9c/0x150
[  237.473740][ T9673]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.473762][ T9673]  ? clear_bhb_loop+0x60/0xb0
[  237.473789][ T9673]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.473811][ T9673] RIP: 0033:0x7f389098ebe9
[  237.473830][ T9673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  237.473850][ T9673] RSP: 002b:00007f3891795038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  237.473873][ T9673] RAX: ffffffffffffffda RBX: 00007f3890bb6180 RCX: 00007f389098ebe9
[  237.473889][ T9673] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004
[  237.473903][ T9673] RBP: 00007f3891795090 R08: 0000000000000000 R09: 0000000000000000
[  237.473916][ T9673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  237.473928][ T9673] R13: 00007f3890bb6218 R14: 00007f3890bb6180 R15: 00007ffe94ad9238
[  237.473963][ T9673]  </TASK>
[  237.805395][ T9680] openvswitch: netlink: Missing key (keys=40, expected=80)
[  237.809434][ T9679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1252'.
[  237.822142][ T9679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1252'.
[  237.859740][ T9681] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1251'.
[  238.137032][ T9689] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1256'.
[  238.164802][ T9689] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1256'.
[  238.178303][ T9689] tipc: Invalid UDP bearer configuration
[  238.179407][ T9689] tipc: Enabling of bearer <udp:sy{±> rejected, failed to enable media
[  238.218346][ T9700] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1259'.
[  238.319060][ T9702] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1261'.
[  238.337955][ T9705] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1263'.
[  238.417186][ T9709] netlink: 'syz.0.1264': attribute type 10 has an invalid length.
[  238.513873][ T9709] 8021q: adding VLAN 0 to HW filter on device bond0
[  238.532169][ T9709] 8021q: adding VLAN 0 to HW filter on device team0
[  238.544273][ T9709] team0: entered promiscuous mode
[  238.550204][ T9709] team0: entered allmulticast mode
[  238.563533][ T9709] bond0: (slave team0): Enslaving as an active interface with an up link
[  238.580769][ T9717] netlink: 'syz.3.1265': attribute type 4 has an invalid length.
[  238.613732][ T9718] netlink: del zone limit has 4 unknown bytes
[  238.736442][ T9721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1268'.
[  238.766181][ T9721] IPv6: Can't replace route, no match found
[  239.104142][ T9736] netlink: 'syz.1.1274': attribute type 1 has an invalid length.
[  239.844199][ T9773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  239.867065][ T9774] netlink: 'syz.2.1284': attribute type 1 has an invalid length.
[  239.909814][ T9763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  240.047017][ T9778] netlink: 'syz.3.1286': attribute type 1 has an invalid length.
[  240.447491][ T9793] netlink: 'syz.4.1291': attribute type 3 has an invalid length.
[  240.906063][ T9815] netlink: 'syz.4.1298': attribute type 1 has an invalid length.
[  241.339300][ T9832] netlink: del zone limit has 4 unknown bytes
[  241.399780][ T6372] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  241.926004][ T9852] __nla_validate_parse: 18 callbacks suppressed
[  241.926023][ T9852] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1310'.
[  241.963278][ T9855] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1311'.
[  241.988319][ T9858] netlink: 'syz.1.1313': attribute type 1 has an invalid length.
[  242.061308][ T9858] 8021q: adding VLAN 0 to HW filter on device bond2
[  242.070212][ T9850] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1307'.
[  242.079463][ T9850] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1307'.
[  242.088514][ T9850] netlink: 'syz.2.1307': attribute type 4 has an invalid length.
[  242.098145][ T9862] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1307'.
[  242.232324][ T9861] bond2: (slave veth19): Enslaving as an active interface with a down link
[  242.341217][ T9858] 8021q: adding VLAN 0 to HW filter on device batadv1
[  242.390892][ T9858] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  242.557899][ T9872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1316'.
[  242.834890][ T9879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1316'.
[  242.855302][ T9879] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  242.888925][ T9869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1316'.
[  242.919393][ T9869] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  242.972302][ T9889] netlink: del zone limit has 4 unknown bytes
[  243.187473][ T9895] hsr0: entered promiscuous mode
[  243.497488][ T9920] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1330'.
[  243.538089][ T9920] veth1_to_bond: entered allmulticast mode
[  243.553615][ T9920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1330'.
[  243.565080][ T9916] vxcan1 speed is unknown, defaulting to 1000
[  243.627219][ T9925] 8021q: adding VLAN 0 to HW filter on device bond0
[  243.670545][ T9925] bond0: (slave rose0): Enslaving as an active interface with an up link
[  243.702264][ T9916] vxcan1 speed is unknown, defaulting to 1000
[  243.835121][ T9920] veth1_to_bond (unregistering): left allmulticast mode
[  243.868831][ T9916] vxcan1 speed is unknown, defaulting to 1000
[  244.493596][   T44] vxcan1 speed is unknown, defaulting to 1000
[  244.500410][ T9916] infiniband syz2: set active
[  244.511958][ T9916] infiniband syz2: added vxcan1
[  244.541288][ T9916] syz2: rxe_create_cq: returned err = -12
[  244.572736][ T9916] infiniband syz2: Couldn't create ib_mad CQ
[  244.595078][ T9916] infiniband syz2: Couldn't open port 1
[  244.728172][ T9916] RDS/IB: syz2: added
[  244.748029][ T9916] smc: adding ib device syz2 with port count 1
[  244.773012][ T9916] smc:    ib device syz2 port 1 has pnetid 
[  244.783530][   T44] vxcan1 speed is unknown, defaulting to 1000
[  244.808678][ T9916] vxcan1 speed is unknown, defaulting to 1000
[  245.184418][ T9969] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  245.229336][ T9969] bond0: (slave lo): Error: Device can not be enslaved while up
[  245.579532][ T9916] vxcan1 speed is unknown, defaulting to 1000
[  246.060762][ T9994] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  246.178666][ T9916] vxcan1 speed is unknown, defaulting to 1000
[  246.596782][ T9916] vxcan1 speed is unknown, defaulting to 1000
[  246.985069][ T9916] vxcan1 speed is unknown, defaulting to 1000
[  247.094962][T10024] __nla_validate_parse: 3 callbacks suppressed
[  247.094986][T10024] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1356'.
[  247.132935][T10024] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1356'.
[  247.141970][T10024] tipc: Invalid UDP bearer configuration
[  247.142030][T10024] tipc: Enabling of bearer <udp:sy{±> rejected, failed to enable media
[  247.335377][T10028] netlink: del zone limit has 4 unknown bytes
[  247.365682][ T9916] vxcan1 speed is unknown, defaulting to 1000
[  247.554688][T10033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1359'.
[  247.639578][T10036] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  247.695912][T10040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1359'.
[  247.913946][ T9916] vxcan1 speed is unknown, defaulting to 1000
[  248.019137][T10043] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1363'.
[  248.238351][ T9916] vxcan1 speed is unknown, defaulting to 1000
[  248.420677][ T9916] vxcan1 speed is unknown, defaulting to 1000
[  248.596131][ T9965] siw: device registration error -23
[  248.787931][T10053] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1367'.
[  248.799497][T10051] block nbd0: server does not support multiple connections per device.
[  248.810479][T10051] block nbd0: shutting down sockets
[  248.843462][T10051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1365'.
[  248.853812][T10051] netlink: 'syz.0.1365': attribute type 2 has an invalid length.
[  248.867188][T10051] netlink: 'syz.0.1365': attribute type 1 has an invalid length.
[  248.934814][T10051] netlink: 'syz.0.1365': attribute type 5 has an invalid length.
[  248.971122][T10061] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1368'.
[  249.119815][T10061] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1368'.
[  249.566691][T10061] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1368'.
[  250.725473][ T6381] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  250.821446][T10110] netlink: del zone limit has 4 unknown bytes
[  251.345444][T10141] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  251.393624][T10142] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.550792][T10142] bridge_slave_1 (unregistering): left allmulticast mode
[  251.575857][T10142] bridge_slave_1 (unregistering): left promiscuous mode
[  251.598783][T10142] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.837586][T10147] vxcan1 speed is unknown, defaulting to 1000
[  252.113886][T10171] __nla_validate_parse: 74 callbacks suppressed
[  252.113907][T10171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1405'.
[  252.629910][T10184] vxcan1 speed is unknown, defaulting to 1000
[  253.076763][T10209] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1414'.
[  253.663372][T10217] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  253.753178][T10219] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1415'.
[  253.906021][    C0] vcan0: j1939_tp_rxtimer: 0xffff888020b76c00: rx timeout, send abort
[  253.916917][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888020b76c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[  254.270685][T10224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1417'.
[  254.678447][T10243] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1424'.
[  254.926975][T10258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1430'.
[  254.952126][T10258] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  254.988712][T10258] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1430'.
[  255.016664][T10258] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1430'.
[  255.086013][T10258] !
: entered promiscuous mode
[  255.094521][T10258] debugfs: 'hsr1' already exists in 'hsr'
[  255.104240][T10258] Cannot create hsr debugfs directory
[  255.254966][ T6387] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  255.291953][T10274] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1436'.
[  255.611422][T10298] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1440'.
[  255.621553][T10298] tipc: Invalid UDP bearer configuration
[  255.621611][T10298] tipc: Enabling of bearer <udp:sy{±> rejected, failed to enable media
[  255.679346][ T6387] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  255.856025][T10312] netlink: 'syz.1.1446': attribute type 9 has an invalid length.
[  256.126966][T10322] ipvlan2: entered promiscuous mode
[  256.153499][T10322] bridge0: port 1(ipvlan2) entered blocking state
[  256.166488][T10322] bridge0: port 1(ipvlan2) entered disabled state
[  256.186545][T10322] ipvlan2: entered allmulticast mode
[  256.191909][T10322] bridge0: entered allmulticast mode
[  256.277099][T10322] ipvlan2: left allmulticast mode
[  256.284278][T10322] bridge0: left allmulticast mode
[  256.411293][T10331] 8021q: adding VLAN 0 to HW filter on device bond2
[  256.688113][T10351] bridge12: entered allmulticast mode
[  256.701463][T10357] netlink: 'syz.2.1461': attribute type 1 has an invalid length.
[  256.731690][T10353] bridge13: entered allmulticast mode
[  256.930224][T10370] gretap0: entered promiscuous mode
[  256.991830][T10370] gretap0: left promiscuous mode
[  257.008172][T10376] netlink: 'syz.3.1467': attribute type 1 has an invalid length.
[  257.040920][T10378] lo speed is unknown, defaulting to 1000
[  257.059528][T10378] lo speed is unknown, defaulting to 1000
[  257.091912][T10378] lo speed is unknown, defaulting to 1000
[  257.244031][T10388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  257.486305][T10378] infiniband syz0: set active
[  257.491207][T10378] infiniband syz0: added lo
[  257.503892][  T980] lo speed is unknown, defaulting to 1000
[  257.549410][T10378] RDS/IB: syz0: added
[  257.554401][T10378] smc: adding ib device syz0 with port count 1
[  257.560728][T10378] smc:    ib device syz0 port 1 has pnetid 
[  257.570205][T10378] lo speed is unknown, defaulting to 1000
[  257.589945][  T980] lo speed is unknown, defaulting to 1000
[  257.676661][T10403] blkio.reset_stats is deprecated
[  257.697324][T10403] __nla_validate_parse: 10 callbacks suppressed
[  257.697348][T10403] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1475'.
[  257.761518][T10407] netlink: 'syz.1.1478': attribute type 1 has an invalid length.
[  257.763723][ T6387] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  258.031382][T10417] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1480'.
[  258.047436][T10413] vxcan1 speed is unknown, defaulting to 1000
[  258.053378][T10378] lo speed is unknown, defaulting to 1000
[  258.099954][T10419] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1482'.
[  258.139459][T10419] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1482'.
[  258.186831][T10419] gretap0: entered promiscuous mode
[  258.216474][T10419] gretap0: left promiscuous mode
[  258.595144][T10431] vxcan1 speed is unknown, defaulting to 1000
[  258.601087][T10432] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode
[  258.666753][T10432] netlink: 'syz.3.1488': attribute type 10 has an invalid length.
[  258.675987][T10432] mac80211_hwsim hwsim10 wlan1: left allmulticast mode
[  258.734485][T10432] bond0: (slave wlan1): Opening slave failed
[  258.806379][T10413] lo speed is unknown, defaulting to 1000
[  258.860287][T10448] netlink: 'syz.1.1491': attribute type 4 has an invalid length.
[  259.199477][T10378] lo speed is unknown, defaulting to 1000
[  259.267947][T10452] vxcan1 speed is unknown, defaulting to 1000
[  259.923742][T10378] lo speed is unknown, defaulting to 1000
[  260.245133][T10431] lo speed is unknown, defaulting to 1000
[  260.367258][T10489] netlink: 'syz.0.1502': attribute type 4 has an invalid length.
[  260.510769][T10452] lo speed is unknown, defaulting to 1000
[  260.778927][T10499] netlink: 'syz.0.1504': attribute type 8 has an invalid length.
[  260.814426][T10378] lo speed is unknown, defaulting to 1000
[  261.079872][ T6387] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  261.127242][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  261.133767][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  261.404962][T10517] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1510'.
[  261.957589][T10533] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  261.960210][T10535] netlink: 'syz.1.1517': attribute type 4 has an invalid length.
[  261.965004][T10533] IPv6: NLM_F_CREATE should be set when creating new route
[  261.982975][T10533] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1516'.
[  262.026981][T10535] netlink: 14345 bytes leftover after parsing attributes in process `syz.1.1517'.
[  262.106261][T10540] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1519'.
[  262.459887][T10549] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1520'.
[  262.472832][T10549] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1520'.
[  263.132893][T10575] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  263.312068][T10586] __nla_validate_parse: 1 callbacks suppressed
[  263.312091][T10586] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1533'.
[  263.463569][T10580] nbd0: detected capacity change from 0 to 549764202496
[  263.567272][T10600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1536'.
[  263.592166][ T5873] block nbd0: Receive control failed (result -32)
[  263.615511][T10600] netlink: 'syz.2.1536': attribute type 5 has an invalid length.
[  263.635213][T10600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1536'.
[  263.750335][T10609] netlink: 'syz.0.1539': attribute type 1 has an invalid length.
[  263.771681][T10607] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1538'.
[  263.857200][T10612] netlink: 'syz.4.1540': attribute type 4 has an invalid length.
[  263.909041][T10612] netlink: 'syz.4.1540': attribute type 4 has an invalid length.
[  263.989267][T10617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1542'.
[  264.097672][T10620] netlink: 57 bytes leftover after parsing attributes in process `syz.0.1542'.
[  264.178486][T10620] bond3: entered promiscuous mode
[  264.684822][T10648] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1551'.
[  264.755662][T10652] netlink: 'syz.4.1554': attribute type 3 has an invalid length.
[  264.774739][T10652] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  264.827268][T10651] netlink: 'syz.4.1554': attribute type 3 has an invalid length.
[  264.842055][T10651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  264.886511][T10661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1553'.
[  264.907807][T10653] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.928251][T10661] netlink: 'syz.1.1553': attribute type 5 has an invalid length.
[  264.949335][T10661] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1553'.
[  265.000678][T10669] netlink: 'syz.2.1557': attribute type 1 has an invalid length.
[  265.016897][T10667] block nbd1: server does not support multiple connections per device.
[  265.031152][T10667] block nbd1: shutting down sockets
[  265.045083][T10661] geneve2: entered promiscuous mode
[  265.068167][T10661] geneve2: entered allmulticast mode
[  265.085431][T10667] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1556'.
[  265.129425][T10667] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  265.178309][T10669] 8021q: adding VLAN 0 to HW filter on device bond1
[  265.188433][ T6377] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  265.236667][T10679] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  265.259558][T10671] bond1: (slave bridge1): making interface the new active one
[  265.281815][T10671] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  265.299713][T10653] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.350538][T10676] bond1: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  265.420114][ T6377] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  265.487907][T10687] vxcan1 speed is unknown, defaulting to 1000
[  265.508151][T10692] FAULT_INJECTION: forcing a failure.
[  265.508151][T10692] name failslab, interval 1, probability 0, space 0, times 0
[  265.548655][T10692] CPU: 1 UID: 0 PID: 10692 Comm: syz.0.1562 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) 
[  265.548688][T10692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  265.548714][T10692] Call Trace:
[  265.548723][T10692]  <TASK>
[  265.548733][T10692]  dump_stack_lvl+0x189/0x250
[  265.548767][T10692]  ? __pfx____ratelimit+0x10/0x10
[  265.548804][T10692]  ? __pfx_dump_stack_lvl+0x10/0x10
[  265.548830][T10692]  ? __pfx__printk+0x10/0x10
[  265.548868][T10692]  ? __pfx___might_resched+0x10/0x10
[  265.548889][T10692]  ? fs_reclaim_acquire+0x7d/0x100
[  265.548927][T10692]  should_fail_ex+0x414/0x560
[  265.548959][T10692]  should_failslab+0xa8/0x100
[  265.548995][T10692]  __kmalloc_cache_noprof+0x70/0x3d0
[  265.549025][T10692]  ? nfnetlink_rcv+0xeff/0x2520
[  265.549055][T10692]  nfnetlink_rcv+0xeff/0x2520
[  265.549116][T10692]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  265.549158][T10692]  ? ref_tracker_free+0x63a/0x7d0
[  265.549218][T10692]  ? __netlink_deliver_tap+0x807/0x850
[  265.549247][T10692]  ? netlink_deliver_tap+0x2e/0x1b0
[  265.549296][T10692]  netlink_unicast+0x82c/0x9e0
[  265.549333][T10692]  ? __pfx_netlink_unicast+0x10/0x10
[  265.549361][T10692]  ? netlink_sendmsg+0x642/0xb30
[  265.549387][T10692]  ? skb_put+0x11b/0x210
[  265.549422][T10692]  netlink_sendmsg+0x805/0xb30
[  265.549462][T10692]  ? __pfx_netlink_sendmsg+0x10/0x10
[  265.549495][T10692]  ? aa_sock_msg_perm+0xf1/0x1d0
[  265.549528][T10692]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  265.549566][T10692]  ? __pfx_netlink_sendmsg+0x10/0x10
[  265.549596][T10692]  __sock_sendmsg+0x21c/0x270
[  265.549629][T10692]  ____sys_sendmsg+0x505/0x830
[  265.549670][T10692]  ? __pfx_____sys_sendmsg+0x10/0x10
[  265.549714][T10692]  ? import_iovec+0x74/0xa0
[  265.549747][T10692]  ___sys_sendmsg+0x21f/0x2a0
[  265.549810][T10692]  ? __pfx____sys_sendmsg+0x10/0x10
[  265.549886][T10692]  ? __fget_files+0x2a/0x420
[  265.549919][T10692]  ? __fget_files+0x3a0/0x420
[  265.549970][T10692]  __x64_sys_sendmsg+0x19b/0x260
[  265.550008][T10692]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  265.550053][T10692]  ? __pfx_ksys_write+0x10/0x10
[  265.550080][T10692]  ? rcu_is_watching+0x15/0xb0
[  265.550108][T10692]  ? do_syscall_64+0xbe/0x3b0
[  265.550142][T10692]  do_syscall_64+0xfa/0x3b0
[  265.550169][T10692]  ? lockdep_hardirqs_on+0x9c/0x150
[  265.550196][T10692]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.550218][T10692]  ? clear_bhb_loop+0x60/0xb0
[  265.550246][T10692]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.550267][T10692] RIP: 0033:0x7f3d56f8ebe9
[  265.550288][T10692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  265.550307][T10692] RSP: 002b:00007f3d57df3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  265.550331][T10692] RAX: ffffffffffffffda RBX: 00007f3d571b5fa0 RCX: 00007f3d56f8ebe9
[  265.550346][T10692] RDX: 0000000000000080 RSI: 00002000000000c0 RDI: 0000000000000003
[  265.550360][T10692] RBP: 00007f3d57df3090 R08: 0000000000000000 R09: 0000000000000000
[  265.550373][T10692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  265.550386][T10692] R13: 00007f3d571b6038 R14: 00007f3d571b5fa0 R15: 00007ffedf761978
[  265.550421][T10692]  </TASK>
[  266.082378][T10687] lo speed is unknown, defaulting to 1000
[  266.110199][T10696] vxcan1 speed is unknown, defaulting to 1000
[  266.159209][T10709] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  266.396015][ T6372] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  266.482282][T10718] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  266.623333][ T6377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  266.641909][ T6377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  266.675787][T10696] lo speed is unknown, defaulting to 1000
[  266.930385][T10653] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.951596][T10653] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  267.080882][T10653] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.115855][T10653] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  267.560791][ T6372] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  267.571495][ T6372] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  267.661133][ T6372] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  267.682277][ T6372] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  267.746529][ T6372] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  267.758861][ T6372] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  267.867840][ T6372] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  267.890267][ T6372] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  267.919479][T10742] vxcan1 speed is unknown, defaulting to 1000
[  268.190613][T10741] hsr_slave_1 (unregistering): left promiscuous mode
[  268.198907][T10748] netlink: 'syz.4.1579': attribute type 18 has an invalid length.
[  268.227855][T10748] netlink: 'syz.4.1579': attribute type 18 has an invalid length.
[  268.385001][T10742] lo speed is unknown, defaulting to 1000
[  268.428667][T10754] __nla_validate_parse: 9 callbacks suppressed
[  268.428688][T10754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1582'.
[  268.453803][T10754] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  268.475138][T10756] netlink: 'syz.0.1584': attribute type 1 has an invalid length.
[  268.626576][T10764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1585'.
[  268.647553][T10764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1585'.
[  268.658848][T10766] openvswitch: netlink: Missing key (keys=40, expected=80)
[  268.716267][T10769] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1587'.
[  268.772147][T10768] tipc: Started in network mode
[  268.785869][T10768] tipc: Node identity 1e68f65d3d0c, cluster identity 4711
[  268.797431][T10768] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  268.806568][T10769] syzkaller0: entered promiscuous mode
[  268.819221][T10769] syzkaller0: entered allmulticast mode
[  268.832018][T10769] tipc: Resetting bearer <eth:syzkaller0>
[  268.846292][ T6370] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  268.935006][T10767] tipc: Resetting bearer <eth:syzkaller0>
[  268.955081][T10779] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1591'.
[  268.965475][T10767] tipc: Disabling bearer <eth:syzkaller0>
[  269.478846][T10809] netlink: 996 bytes leftover after parsing attributes in process `syz.4.1597'.
[  269.574574][T10812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1600'.
[  269.816420][T10819] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1602'.
[  269.910271][T10821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1603'.
[  269.920527][T10823] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1604'.
[  270.034026][T10824] bridge15: entered promiscuous mode
[  270.490649][T10844] syzkaller1: tun_chr_ioctl cmd 1074025677
[  270.499704][T10844] syzkaller1: linktype set to 778
[  270.537085][T10847] openvswitch: netlink: IP tunnel dst address not specified
[  271.407590][T10891] netlink: 'syz.2.1626': attribute type 10 has an invalid length.
[  271.476809][T10891] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  271.896740][T10899] vxcan1 speed is unknown, defaulting to 1000
[  272.017906][T10910] tipc: Started in network mode
[  272.035307][T10910] tipc: Node identity ae968351130b, cluster identity 4711
[  272.057675][T10910] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  272.079568][T10915] syzkaller0: entered promiscuous mode
[  272.103801][T10915] syzkaller0: entered allmulticast mode
[  272.189126][T10910] tipc: Resetting bearer <eth:syzkaller0>
[  272.239709][T10909] tipc: Resetting bearer <eth:syzkaller0>
[  272.276702][T10909] tipc: Disabling bearer <eth:syzkaller0>
[  272.305082][T10899] lo speed is unknown, defaulting to 1000
[  272.599503][ T1333] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  272.990731][T10945] vxcan1 speed is unknown, defaulting to 1000
[  273.183342][T10957] batman_adv: batadv0: Adding interface: ip6gretap1
[  273.190247][T10957] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  273.250532][T10957] batman_adv: batadv0: Interface activated: ip6gretap1
[  273.820328][T10945] lo speed is unknown, defaulting to 1000
[  274.240604][T11001] __nla_validate_parse: 17 callbacks suppressed
[  274.240629][T11001] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1662'.
[  274.894744][T10995] nbd: must specify at least one socket
[  274.920927][T11018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1659'.
[  274.973165][T10995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1659'.
[  275.169193][T10994] vxcan1 speed is unknown, defaulting to 1000
[  275.242170][T11025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1670'.
[  275.772383][T11030] IPv6: sit1: Disabled Multicast RS
[  276.200632][T11032] vxcan1 speed is unknown, defaulting to 1000
[  276.297702][T11043] openvswitch: netlink: IP tunnel dst address not specified
[  276.447411][T11049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1677'.
[  276.473182][T11049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1677'.
[  276.731761][T11058] netlink: 'syz.4.1680': attribute type 2 has an invalid length.
[  276.905286][T10994] lo speed is unknown, defaulting to 1000
[  277.022478][T11066] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1682'.
[  277.445032][T11032] lo speed is unknown, defaulting to 1000
[  277.874120][T11080] netlink: 'syz.1.1685': attribute type 1 has an invalid length.
[  278.101930][T11086] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1687'.
[  278.359290][T11093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1690'.
[  278.374149][T11093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1690'.
[  278.565441][T11096] ip6tnl2: entered promiscuous mode
[  279.120341][T11114] netlink: 'syz.4.1694': attribute type 4 has an invalid length.
[  279.308153][T11117] pim6reg: entered allmulticast mode
[  279.318807][T11118] pim6reg: left allmulticast mode
[  279.949696][T11131] netlink: 'syz.1.1702': attribute type 1 has an invalid length.
[  280.010588][T11131] 8021q: adding VLAN 0 to HW filter on device bond3
[  280.110600][T11135] bond3: (slave bridge17): making interface the new active one
[  280.135610][T11135] bond3: (slave bridge17): Enslaving as an active interface with an up link
[  280.215614][T11131] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  280.553700][T11160] syzkaller1: entered promiscuous mode
[  280.562434][T11160] syzkaller1: entered allmulticast mode
[  280.579382][T11153] vxcan1 speed is unknown, defaulting to 1000
[  280.607671][T11162] netlink: 'syz.2.1711': attribute type 1 has an invalid length.
[  280.649368][T11162] __nla_validate_parse: 1 callbacks suppressed
[  280.649390][T11162] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1711'.
[  280.654223][T11164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1710'.
[  280.776960][T11162] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1711'.
[  281.117783][T11182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1717'.
[  281.257514][T11190] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1717'.
[  281.366358][T11194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1720'.
[  281.377694][T11194] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  281.404788][T11194] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1720'.
[  281.422860][T11194] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1720'.
[  281.648534][T11153] lo speed is unknown, defaulting to 1000
[  281.648560][T11188] vxcan1 speed is unknown, defaulting to 1000
[  288.593172][T11188] lo speed is unknown, defaulting to 1000
[  289.668776][T11212] sch_fq: defrate 4294967295 ignored.
[  289.692006][T11213] sctp: [Deprecated]: syz.1.1726 (pid 11213) Use of struct sctp_assoc_value in delayed_ack socket option.
[  289.692006][T11213] Use struct sctp_sack_info instead
[  289.852331][T11216] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1728'.
[  289.935508][T11219] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1729'.
[  289.945437][T11219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1729'.
[  290.023251][ T6387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  290.034237][ T6387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  290.345910][T11231] FAULT_INJECTION: forcing a failure.
[  290.345910][T11231] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  290.409664][T11231] CPU: 1 UID: 0 PID: 11231 Comm: syz.4.1733 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) 
[  290.409697][T11231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  290.409710][T11231] Call Trace:
[  290.409718][T11231]  <TASK>
[  290.409727][T11231]  dump_stack_lvl+0x189/0x250
[  290.409758][T11231]  ? __pfx____ratelimit+0x10/0x10
[  290.409785][T11231]  ? __pfx_dump_stack_lvl+0x10/0x10
[  290.409813][T11231]  ? __pfx__printk+0x10/0x10
[  290.409843][T11231]  ? __might_fault+0xb0/0x130
[  290.409886][T11231]  should_fail_ex+0x414/0x560
[  290.409917][T11231]  _copy_from_user+0x2d/0xb0
[  290.409938][T11231]  packet_setsockopt+0x8d0/0x12c0
[  290.409965][T11231]  ? __pfx_packet_setsockopt+0x10/0x10
[  290.409993][T11231]  ? __lock_acquire+0xab9/0xd20
[  290.410031][T11231]  ? aa_sk_perm+0x81e/0x950
[  290.410066][T11231]  ? __pfx_aa_sk_perm+0x10/0x10
[  290.410097][T11231]  ? __fget_files+0x2a/0x420
[  290.410128][T11231]  ? aa_sock_opt_perm+0xff/0x1b0
[  290.410162][T11231]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  290.410187][T11231]  ? __pfx_packet_setsockopt+0x10/0x10
[  290.410210][T11231]  do_sock_setsockopt+0x17c/0x1b0
[  290.410248][T11231]  __x64_sys_setsockopt+0x13f/0x1b0
[  290.410285][T11231]  do_syscall_64+0xfa/0x3b0
[  290.410311][T11231]  ? lockdep_hardirqs_on+0x9c/0x150
[  290.410337][T11231]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.410368][T11231]  ? clear_bhb_loop+0x60/0xb0
[  290.410395][T11231]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.410416][T11231] RIP: 0033:0x7ffa10f8ebe9
[  290.410435][T11231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  290.410455][T11231] RSP: 002b:00007ffa0f1ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  290.410478][T11231] RAX: ffffffffffffffda RBX: 00007ffa111b5fa0 RCX: 00007ffa10f8ebe9
[  290.410494][T11231] RDX: 0000000000000002 RSI: 0000000000000107 RDI: 0000000000000004
[  290.410507][T11231] RBP: 00007ffa0f1ee090 R08: 0000000000000010 R09: 0000000000000000
[  290.410521][T11231] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001
[  290.410534][T11231] R13: 00007ffa111b6038 R14: 00007ffa111b5fa0 R15: 00007fffd5823918
[  290.410567][T11231]  </TASK>
[  290.696159][T11240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1735'.
[  290.708812][T11240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1735'.
[  291.007676][T11243] netlink: 'syz.4.1737': attribute type 4 has an invalid length.
[  291.059505][T11250] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  291.231692][T11257] netlink: 'syz.0.1740': attribute type 1 has an invalid length.
[  291.288370][T11259] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1742'.
[  291.664971][T11273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1745'.
[  291.675140][T11273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1745'.
[  291.728068][   T12] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  291.731108][T11271] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  291.746860][T11271] syzkaller0: entered promiscuous mode
[  291.754555][T11271] syzkaller0: entered allmulticast mode
[  291.828348][T11271] tipc: Resetting bearer <eth:syzkaller0>
[  291.857997][T11278] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  291.897691][T11270] tipc: Resetting bearer <eth:syzkaller0>
[  291.965263][T11270] tipc: Disabling bearer <eth:syzkaller0>
[  291.975634][T11283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1748'.
[  291.985702][T11283] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  292.018152][T11283] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1748'.
[  292.067405][T11285] tun0: tun_chr_ioctl cmd 2148045848
[  292.548017][T11308] vxcan1 speed is unknown, defaulting to 1000
[  292.804088][T11308] lo speed is unknown, defaulting to 1000
[  293.003788][T11322] veth9: entered promiscuous mode
[  293.154980][T11334] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  293.186617][T11334] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  293.610088][T11359] 
@ÿ: renamed from bond_slave_0 (while UP)
[  293.749736][ T6372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  293.782388][ T6372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  294.116923][T11378] netlink: 'syz.3.1777': attribute type 1 has an invalid length.
[  294.210535][T11383] netlink: 'syz.1.1778': attribute type 12 has an invalid length.
[  294.945238][T11419] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  296.067618][  T980] tipc: Node number set to 593819229
[  296.489760][T11419] syzkaller0: entered promiscuous mode
[  296.495500][T11419] syzkaller0: entered allmulticast mode
[  296.519734][T11432] tipc: Resetting bearer <eth:syzkaller0>
[  296.586898][T11417] tipc: Resetting bearer <eth:syzkaller0>
[  296.661849][T11417] tipc: Disabling bearer <eth:syzkaller0>
[  296.710833][T11448] __nla_validate_parse: 5 callbacks suppressed
[  296.710854][T11448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1797'.
[  296.739652][T11448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1797'.
[  296.849550][T11452] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  296.876957][T11451] tipc: Resetting bearer <eth:syzkaller0>
[  296.890547][T11454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1800'.
[  296.969161][ T6377] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  296.969498][T11458] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1800'.
[  297.040921][T11461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1801'.
[  297.087260][   T12] smc: removing ib device syz2
[  297.144275][ T5948] vxcan1 speed is unknown, defaulting to 1000
[  297.156332][ T5948] syz2: Port: 1 Link DOWN
[  297.296565][ T6372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  297.336762][ T6372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  297.550244][T11485] netlink: 'syz.4.1809': attribute type 1 has an invalid length.
[  297.604397][T11486] smc: net device bond0 applied user defined pnetid SYZ2
[  297.644484][T11486] netlink: 'syz.0.1808': attribute type 1 has an invalid length.
[  297.738341][T11486] 8021q: adding VLAN 0 to HW filter on device bond4
[  297.769338][T11492] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1811'.
[  297.800538][T11492] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1811'.
[  297.828281][T11492] tipc: Invalid UDP bearer configuration
[  297.828353][T11492] tipc: Enabling of bearer <udp:sy{±> rejected, failed to enable media
[  297.869618][  T980] tipc: Node number set to 598305075
[  298.208125][T11499] lo speed is unknown, defaulting to 1000
[  298.433520][T11509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1816'.
[  298.455791][T11508] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1816'.
[  298.659934][T11511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1817'.
[  299.037251][T11523] FAULT_INJECTION: forcing a failure.
[  299.037251][T11523] name failslab, interval 1, probability 0, space 0, times 0
[  299.073994][T11523] CPU: 0 UID: 0 PID: 11523 Comm: syz.2.1822 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) 
[  299.074027][T11523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  299.074040][T11523] Call Trace:
[  299.074048][T11523]  <TASK>
[  299.074057][T11523]  dump_stack_lvl+0x189/0x250
[  299.074089][T11523]  ? __pfx____ratelimit+0x10/0x10
[  299.074116][T11523]  ? __pfx_dump_stack_lvl+0x10/0x10
[  299.074143][T11523]  ? __pfx__printk+0x10/0x10
[  299.074180][T11523]  ? __pfx___might_resched+0x10/0x10
[  299.074200][T11523]  ? fs_reclaim_acquire+0x7d/0x100
[  299.074240][T11523]  should_fail_ex+0x414/0x560
[  299.074268][T11523]  should_failslab+0xa8/0x100
[  299.074296][T11523]  __kmalloc_cache_noprof+0x70/0x3d0
[  299.074322][T11523]  ? ipv6_flowlabel_opt+0x165c/0x23a0
[  299.074353][T11523]  ipv6_flowlabel_opt+0x165c/0x23a0
[  299.074395][T11523]  ? __pfx_ipv6_flowlabel_opt+0x10/0x10
[  299.074426][T11523]  ? register_lock_class+0x51/0x320
[  299.074466][T11523]  ? __lock_acquire+0xab9/0xd20
[  299.074513][T11523]  ? __local_bh_enable_ip+0x12d/0x1c0
[  299.074535][T11523]  ? lockdep_hardirqs_on+0x9c/0x150
[  299.074564][T11523]  ? __local_bh_enable_ip+0x12d/0x1c0
[  299.074606][T11523]  do_ipv6_setsockopt+0xdb0/0x2eb0
[  299.074645][T11523]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[  299.074672][T11523]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  299.074715][T11523]  ? vfs_write+0x8d8/0xa90
[  299.074749][T11523]  ? __pfx___might_resched+0x10/0x10
[  299.074780][T11523]  ? __lock_acquire+0xab9/0xd20
[  299.074818][T11523]  ? aa_sk_perm+0x81e/0x950
[  299.074861][T11523]  ? __pfx_aa_sk_perm+0x10/0x10
[  299.074893][T11523]  ? __fget_files+0x2a/0x420
[  299.074923][T11523]  ? aa_sock_opt_perm+0xff/0x1b0
[  299.074958][T11523]  ipv6_setsockopt+0x59/0x170
[  299.074984][T11523]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  299.075015][T11523]  do_sock_setsockopt+0x17c/0x1b0
[  299.075052][T11523]  __x64_sys_setsockopt+0x13f/0x1b0
[  299.075091][T11523]  do_syscall_64+0xfa/0x3b0
[  299.075118][T11523]  ? lockdep_hardirqs_on+0x9c/0x150
[  299.075144][T11523]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.075168][T11523]  ? clear_bhb_loop+0x60/0xb0
[  299.075195][T11523]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.075217][T11523] RIP: 0033:0x7f865798ebe9
[  299.075237][T11523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  299.075256][T11523] RSP: 002b:00007f8658827038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  299.075279][T11523] RAX: ffffffffffffffda RBX: 00007f8657bb5fa0 RCX: 00007f865798ebe9
[  299.075295][T11523] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003
[  299.075308][T11523] RBP: 00007f8658827090 R08: 0000000000000020 R09: 0000000000000000
[  299.075321][T11523] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001
[  299.075335][T11523] R13: 00007f8657bb6038 R14: 00007f8657bb5fa0 R15: 00007ffcd9da2c78
[  299.075369][T11523]  </TASK>
[  299.401535][ T6372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  299.463817][ T6372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  299.789978][T11538] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode
[  299.810015][T11532] syzkaller1: entered promiscuous mode
[  299.832208][T11532] syzkaller1: entered allmulticast mode
[  300.551771][T11558] lo speed is unknown, defaulting to 1000
[  300.688541][T11571] FAULT_INJECTION: forcing a failure.
[  300.688541][T11571] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  300.756882][T11571] CPU: 0 UID: 0 PID: 11571 Comm: syz.4.1834 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) 
[  300.756915][T11571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  300.756929][T11571] Call Trace:
[  300.756938][T11571]  <TASK>
[  300.756947][T11571]  dump_stack_lvl+0x189/0x250
[  300.756980][T11571]  ? __pfx____ratelimit+0x10/0x10
[  300.757007][T11571]  ? __pfx_dump_stack_lvl+0x10/0x10
[  300.757035][T11571]  ? __pfx__printk+0x10/0x10
[  300.757070][T11571]  ? __might_fault+0xb0/0x130
[  300.757114][T11571]  should_fail_ex+0x414/0x560
[  300.757145][T11571]  _copy_from_user+0x2d/0xb0
[  300.757167][T11571]  __sys_bpf+0x1ed/0x870
[  300.757200][T11571]  ? __pfx___sys_bpf+0x10/0x10
[  300.757244][T11571]  ? ksys_write+0x22a/0x250
[  300.757276][T11571]  ? __pfx_ksys_write+0x10/0x10
[  300.757315][T11571]  __x64_sys_bpf+0x7c/0x90
[  300.757342][T11571]  do_syscall_64+0xfa/0x3b0
[  300.757370][T11571]  ? lockdep_hardirqs_on+0x9c/0x150
[  300.757397][T11571]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.757419][T11571]  ? clear_bhb_loop+0x60/0xb0
[  300.757456][T11571]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.757478][T11571] RIP: 0033:0x7ffa10f8ebe9
[  300.757498][T11571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  300.757518][T11571] RSP: 002b:00007ffa0f1ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  300.757540][T11571] RAX: ffffffffffffffda RBX: 00007ffa111b5fa0 RCX: 00007ffa10f8ebe9
[  300.757556][T11571] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005
[  300.757570][T11571] RBP: 00007ffa0f1ee090 R08: 0000000000000000 R09: 0000000000000000
[  300.757583][T11571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  300.757596][T11571] R13: 00007ffa111b6038 R14: 00007ffa111b5fa0 R15: 00007fffd5823918
[  300.757630][T11571]  </TASK>
[  300.989733][T11574] FAULT_INJECTION: forcing a failure.
[  300.989733][T11574] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  301.004091][T11574] CPU: 0 UID: 0 PID: 11574 Comm: syz.0.1836 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) 
[  301.004123][T11574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  301.004137][T11574] Call Trace:
[  301.004145][T11574]  <TASK>
[  301.004155][T11574]  dump_stack_lvl+0x189/0x250
[  301.004188][T11574]  ? __pfx____ratelimit+0x10/0x10
[  301.004216][T11574]  ? __pfx_dump_stack_lvl+0x10/0x10
[  301.004243][T11574]  ? __pfx__printk+0x10/0x10
[  301.004290][T11574]  should_fail_ex+0x414/0x560
[  301.004321][T11574]  _copy_to_user+0x31/0xb0
[  301.004354][T11574]  ipv6_flowlabel_opt+0x1fe6/0x23a0
[  301.004398][T11574]  ? __pfx_ipv6_flowlabel_opt+0x10/0x10
[  301.004429][T11574]  ? register_lock_class+0x51/0x320
[  301.004468][T11574]  ? __lock_acquire+0xab9/0xd20
[  301.004516][T11574]  ? __local_bh_enable_ip+0x12d/0x1c0
[  301.004538][T11574]  ? lockdep_hardirqs_on+0x9c/0x150
[  301.004566][T11574]  ? __local_bh_enable_ip+0x12d/0x1c0
[  301.004602][T11574]  do_ipv6_setsockopt+0xdb0/0x2eb0
[  301.004641][T11574]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[  301.004668][T11574]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  301.004712][T11574]  ? vfs_write+0x8d8/0xa90
[  301.004745][T11574]  ? __pfx___might_resched+0x10/0x10
[  301.004778][T11574]  ? __lock_acquire+0xab9/0xd20
[  301.004816][T11574]  ? aa_sk_perm+0x81e/0x950
[  301.004850][T11574]  ? __pfx_aa_sk_perm+0x10/0x10
[  301.004881][T11574]  ? __fget_files+0x2a/0x420
[  301.004912][T11574]  ? aa_sock_opt_perm+0xff/0x1b0
[  301.004947][T11574]  ipv6_setsockopt+0x59/0x170
[  301.004972][T11574]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  301.005003][T11574]  do_sock_setsockopt+0x17c/0x1b0
[  301.005039][T11574]  __x64_sys_setsockopt+0x13f/0x1b0
[  301.005077][T11574]  do_syscall_64+0xfa/0x3b0
[  301.005104][T11574]  ? lockdep_hardirqs_on+0x9c/0x150
[  301.005130][T11574]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.005152][T11574]  ? clear_bhb_loop+0x60/0xb0
[  301.005179][T11574]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.005201][T11574] RIP: 0033:0x7f3d56f8ebe9
[  301.005221][T11574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  301.005242][T11574] RSP: 002b:00007f3d57df3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  301.005265][T11574] RAX: ffffffffffffffda RBX: 00007f3d571b5fa0 RCX: 00007f3d56f8ebe9
[  301.005280][T11574] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003
[  301.005293][T11574] RBP: 00007f3d57df3090 R08: 0000000000000020 R09: 0000000000000000
[  301.005306][T11574] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001
[  301.005320][T11574] R13: 00007f3d571b6038 R14: 00007f3d571b5fa0 R15: 00007ffedf761978
[  301.005362][T11574]  </TASK>
[  301.482958][T11584] IPVS: stopping backup sync thread 6056 ...
[  301.625828][T11597] FAULT_INJECTION: forcing a failure.
[  301.625828][T11597] name failslab, interval 1, probability 0, space 0, times 0
[  301.647042][T11597] CPU: 0 UID: 0 PID: 11597 Comm: syz.1.1842 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) 
[  301.647075][T11597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  301.647097][T11597] Call Trace:
[  301.647106][T11597]  <TASK>
[  301.647115][T11597]  dump_stack_lvl+0x189/0x250
[  301.647147][T11597]  ? __pfx____ratelimit+0x10/0x10
[  301.647176][T11597]  ? __pfx_dump_stack_lvl+0x10/0x10
[  301.647203][T11597]  ? __pfx__printk+0x10/0x10
[  301.647241][T11597]  ? __pfx___might_resched+0x10/0x10
[  301.647261][T11597]  ? fs_reclaim_acquire+0x7d/0x100
[  301.647301][T11597]  should_fail_ex+0x414/0x560
[  301.647331][T11597]  ? __pfx_sock_alloc_inode+0x10/0x10
[  301.647356][T11597]  should_failslab+0xa8/0x100
[  301.647441][T11597]  ? __pfx_sock_alloc_inode+0x10/0x10
[  301.647463][T11597]  kmem_cache_alloc_lru_noprof+0x78/0x3d0
[  301.647497][T11597]  ? sock_alloc_inode+0x28/0xc0
[  301.647524][T11597]  ? __pfx_sock_alloc_inode+0x10/0x10
[  301.647547][T11597]  sock_alloc_inode+0x28/0xc0
[  301.647569][T11597]  alloc_inode+0x6a/0x1b0
[  301.647602][T11597]  __sock_create+0x12d/0x9f0
[  301.647650][T11597]  __sys_socket+0xd7/0x1b0
[  301.647682][T11597]  __x64_sys_socket+0x7a/0x90
[  301.647710][T11597]  do_syscall_64+0xfa/0x3b0
[  301.647738][T11597]  ? lockdep_hardirqs_on+0x9c/0x150
[  301.647766][T11597]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.647788][T11597]  ? clear_bhb_loop+0x60/0xb0
[  301.647817][T11597]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.647839][T11597] RIP: 0033:0x7f389098ebe9
[  301.647860][T11597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  301.647880][T11597] RSP: 002b:00007f3891795038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  301.647903][T11597] RAX: ffffffffffffffda RBX: 00007f3890bb6180 RCX: 00007f389098ebe9
[  301.647919][T11597] RDX: 0000000000000001 RSI: 0000000000000002 RDI: 0000000000000002
[  301.647932][T11597] RBP: 00007f3891795090 R08: 0000000000000000 R09: 0000000000000000
[  301.647945][T11597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  301.647962][T11597] R13: 00007f3890bb6218 R14: 00007f3890bb6180 R15: 00007ffe94ad9238
[  301.647997][T11597]  </TASK>
[  301.648260][T11597] socket: no more sockets
[  301.947384][T11595] lo speed is unknown, defaulting to 1000
[  302.076848][T11603] __nla_validate_parse: 3 callbacks suppressed
[  302.076871][T11603] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1843'.
[  302.163968][T11605] sctp: [Deprecated]: syz.4.1845 (pid 11605) Use of struct sctp_assoc_value in delayed_ack socket option.
[  302.163968][T11605] Use struct sctp_sack_info instead
[  302.168538][T11603] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1843'.
[  302.225280][ T5873] block nbd0: Receive control failed (result -107)
[  302.234726][T11603] block nbd0: reconnected socket
[  302.308380][T11605] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  302.338166][T11605] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1845'.
[  302.371844][T11605] unsupported nlmsg_type 40
[  302.590075][T11620] FAULT_INJECTION: forcing a failure.
[  302.590075][T11620] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  302.676151][T11620] CPU: 1 UID: 0 PID: 11620 Comm: syz.4.1849 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) 
[  302.676184][T11620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  302.676208][T11620] Call Trace:
[  302.676217][T11620]  <TASK>
[  302.676228][T11620]  dump_stack_lvl+0x189/0x250
[  302.676261][T11620]  ? __pfx____ratelimit+0x10/0x10
[  302.676287][T11620]  ? __pfx_dump_stack_lvl+0x10/0x10
[  302.676313][T11620]  ? __pfx__printk+0x10/0x10
[  302.676356][T11620]  should_fail_ex+0x414/0x560
[  302.676388][T11620]  _copy_to_user+0x31/0xb0
[  302.676412][T11620]  simple_read_from_buffer+0xe1/0x170
[  302.676450][T11620]  proc_fail_nth_read+0x1b3/0x220
[  302.676479][T11620]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  302.676508][T11620]  ? rw_verify_area+0x2a6/0x4d0
[  302.676536][T11620]  ? __lock_acquire+0xab9/0xd20
[  302.676567][T11620]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  302.676594][T11620]  vfs_read+0x200/0x980
[  302.676621][T11620]  ? fdget_pos+0x247/0x320
[  302.676645][T11620]  ? __pfx___mutex_lock+0x10/0x10
[  302.676675][T11620]  ? __pfx_vfs_read+0x10/0x10
[  302.676705][T11620]  ? __fget_files+0x2a/0x420
[  302.676743][T11620]  ? __fget_files+0x3a0/0x420
[  302.676781][T11620]  ? __fget_files+0x2a/0x420
[  302.676834][T11620]  ksys_read+0x145/0x250
[  302.676866][T11620]  ? __pfx_ksys_read+0x10/0x10
[  302.676902][T11620]  ? do_syscall_64+0xbe/0x3b0
[  302.676936][T11620]  do_syscall_64+0xfa/0x3b0
[  302.676963][T11620]  ? lockdep_hardirqs_on+0x9c/0x150
[  302.676990][T11620]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.677012][T11620]  ? clear_bhb_loop+0x60/0xb0
[  302.677039][T11620]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.677061][T11620] RIP: 0033:0x7ffa10f8d5fc
[  302.677082][T11620] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  302.677101][T11620] RSP: 002b:00007ffa0f1ee030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  302.677124][T11620] RAX: ffffffffffffffda RBX: 00007ffa111b5fa0 RCX: 00007ffa10f8d5fc
[  302.677140][T11620] RDX: 000000000000000f RSI: 00007ffa0f1ee0a0 RDI: 0000000000000004
[  302.677153][T11620] RBP: 00007ffa0f1ee090 R08: 0000000000000000 R09: 0000000000000000
[  302.677166][T11620] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001
[  302.677179][T11620] R13: 00007ffa111b6038 R14: 00007ffa111b5fa0 R15: 00007fffd5823918
[  302.677221][T11620]  </TASK>
[  303.111393][T11628] FAULT_INJECTION: forcing a failure.
[  303.111393][T11628] name failslab, interval 1, probability 0, space 0, times 0
[  303.125268][T11628] CPU: 1 UID: 0 PID: 11628 Comm: syz.0.1851 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) 
[  303.125301][T11628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  303.125315][T11628] Call Trace:
[  303.125323][T11628]  <TASK>
[  303.125331][T11628]  dump_stack_lvl+0x189/0x250
[  303.125364][T11628]  ? __pfx____ratelimit+0x10/0x10
[  303.125391][T11628]  ? __pfx_dump_stack_lvl+0x10/0x10
[  303.125417][T11628]  ? __pfx__printk+0x10/0x10
[  303.125463][T11628]  ? __pfx___might_resched+0x10/0x10
[  303.125491][T11628]  should_fail_ex+0x414/0x560
[  303.125520][T11628]  should_failslab+0xa8/0x100
[  303.125553][T11628]  __kmalloc_cache_node_noprof+0x73/0x3d0
[  303.125585][T11628]  ? __get_vm_area_node+0x13f/0x300
[  303.125618][T11628]  __get_vm_area_node+0x13f/0x300
[  303.125654][T11628]  __vmalloc_node_range_noprof+0x301/0x12f0
[  303.125687][T11628]  ? bpf_prog_alloc_no_stats+0x4a/0x4b0
[  303.125718][T11628]  ? __lock_acquire+0xab9/0xd20
[  303.125778][T11628]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  303.125809][T11628]  ? __might_fault+0xb0/0x130
[  303.125841][T11628]  ? _parse_integer_limit+0x1ae/0x1f0
[  303.125874][T11628]  ? bpf_prog_alloc_no_stats+0x4a/0x4b0
[  303.125903][T11628]  __vmalloc_noprof+0xb1/0xf0
[  303.125933][T11628]  ? bpf_prog_alloc_no_stats+0x4a/0x4b0
[  303.125967][T11628]  bpf_prog_alloc_no_stats+0x4a/0x4b0
[  303.126003][T11628]  bpf_prog_alloc+0x3c/0x1a0
[  303.126036][T11628]  bpf_prog_load+0x735/0x1930
[  303.126080][T11628]  ? __pfx_bpf_prog_load+0x10/0x10
[  303.126135][T11628]  ? bpf_lsm_bpf+0x9/0x20
[  303.126160][T11628]  ? security_bpf+0x7e/0x300
[  303.126189][T11628]  __sys_bpf+0x528/0x870
[  303.126220][T11628]  ? __pfx___sys_bpf+0x10/0x10
[  303.126263][T11628]  ? ksys_write+0x22a/0x250
[  303.126294][T11628]  ? __pfx_ksys_write+0x10/0x10
[  303.126331][T11628]  __x64_sys_bpf+0x7c/0x90
[  303.126357][T11628]  do_syscall_64+0xfa/0x3b0
[  303.126384][T11628]  ? lockdep_hardirqs_on+0x9c/0x150
[  303.126410][T11628]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.126432][T11628]  ? clear_bhb_loop+0x60/0xb0
[  303.126466][T11628]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.126488][T11628] RIP: 0033:0x7f3d56f8ebe9
[  303.126507][T11628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  303.126526][T11628] RSP: 002b:00007f3d57df3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  303.126548][T11628] RAX: ffffffffffffffda RBX: 00007f3d571b5fa0 RCX: 00007f3d56f8ebe9
[  303.126564][T11628] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005
[  303.126577][T11628] RBP: 00007f3d57df3090 R08: 0000000000000000 R09: 0000000000000000
[  303.126590][T11628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  303.126602][T11628] R13: 00007f3d571b6038 R14: 00007f3d571b5fa0 R15: 00007ffedf761978
[  303.126635][T11628]  </TASK>
[  303.126836][T11628] syz.0.1851: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  303.450129][T11628] CPU: 1 UID: 0 PID: 11628 Comm: syz.0.1851 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) 
[  303.450160][T11628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  303.450173][T11628] Call Trace:
[  303.450190][T11628]  <TASK>
[  303.450199][T11628]  dump_stack_lvl+0x189/0x250
[  303.450235][T11628]  ? __pfx_dump_stack_lvl+0x10/0x10
[  303.450263][T11628]  ? __pfx__printk+0x10/0x10
[  303.450295][T11628]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  303.450321][T11628]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  303.450348][T11628]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  303.450376][T11628]  warn_alloc+0x214/0x310
[  303.450421][T11628]  ? __pfx_warn_alloc+0x10/0x10
[  303.450457][T11628]  ? __get_vm_area_node+0x13f/0x300
[  303.450491][T11628]  ? __get_vm_area_node+0x2b5/0x300
[  303.450529][T11628]  __vmalloc_node_range_noprof+0x326/0x12f0
[  303.450562][T11628]  ? __lock_acquire+0xab9/0xd20
[  303.450625][T11628]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  303.450657][T11628]  ? __might_fault+0xb0/0x130
[  303.450688][T11628]  ? _parse_integer_limit+0x1ae/0x1f0
[  303.450721][T11628]  ? bpf_prog_alloc_no_stats+0x4a/0x4b0
[  303.450750][T11628]  __vmalloc_noprof+0xb1/0xf0
[  303.450779][T11628]  ? bpf_prog_alloc_no_stats+0x4a/0x4b0
[  303.450813][T11628]  bpf_prog_alloc_no_stats+0x4a/0x4b0
[  303.450856][T11628]  bpf_prog_alloc+0x3c/0x1a0
[  303.450888][T11628]  bpf_prog_load+0x735/0x1930
[  303.450932][T11628]  ? __pfx_bpf_prog_load+0x10/0x10
[  303.450986][T11628]  ? bpf_lsm_bpf+0x9/0x20
[  303.451012][T11628]  ? security_bpf+0x7e/0x300
[  303.451042][T11628]  __sys_bpf+0x528/0x870
[  303.451073][T11628]  ? __pfx___sys_bpf+0x10/0x10
[  303.451116][T11628]  ? ksys_write+0x22a/0x250
[  303.451147][T11628]  ? __pfx_ksys_write+0x10/0x10
[  303.451195][T11628]  __x64_sys_bpf+0x7c/0x90
[  303.451222][T11628]  do_syscall_64+0xfa/0x3b0
[  303.451250][T11628]  ? lockdep_hardirqs_on+0x9c/0x150
[  303.451277][T11628]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.451300][T11628]  ? clear_bhb_loop+0x60/0xb0
[  303.451327][T11628]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.451349][T11628] RIP: 0033:0x7f3d56f8ebe9
[  303.451369][T11628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  303.451388][T11628] RSP: 002b:00007f3d57df3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  303.451410][T11628] RAX: ffffffffffffffda RBX: 00007f3d571b5fa0 RCX: 00007f3d56f8ebe9
[  303.451426][T11628] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005
[  303.451439][T11628] RBP: 00007f3d57df3090 R08: 0000000000000000 R09: 0000000000000000
[  303.451452][T11628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  303.451465][T11628] R13: 00007f3d571b6038 R14: 00007f3d571b5fa0 R15: 00007ffedf761978
[  303.451497][T11628]  </TASK>
[  303.451518][T11628] Mem-Info:
[  303.558112][T11638] FAULT_INJECTION: forcing a failure.
[  303.558112][T11638] name failslab, interval 1, probability 0, space 0, times 0
[  303.589650][T11628] active_anon:3570 inactive_anon:0 isolated_anon:0
[  303.589650][T11628]  active_file:1769 inactive_file:39912 isolated_file:0
[  303.589650][T11628]  unevictable:768 dirty:299 writeback:0
[  303.589650][T11628]  slab_reclaimable:12002 slab_unreclaimable:105184
[  303.589650][T11628]  mapped:29308 shmem:1356 pagetables:909
[  303.589650][T11628]  sec_pagetables:0 bounce:0
[  303.589650][T11628]  kernel_misc_reclaimable:0
[  303.589650][T11628]  free:1325472 free_pcp:14962 free_cma:0
[  303.594800][T11638] CPU: 0 UID: 0 PID: 11638 Comm: syz.4.1856 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) 
[  303.594833][T11638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  303.594849][T11638] Call Trace:
[  303.594860][T11638]  <TASK>
[  303.594870][T11638]  dump_stack_lvl+0x189/0x250
[  303.594907][T11638]  ? __pfx____ratelimit+0x10/0x10
[  303.594940][T11638]  ? __pfx_dump_stack_lvl+0x10/0x10
[  303.594970][T11638]  ? __pfx__printk+0x10/0x10
[  303.595010][T11638]  ? __lock_acquire+0xab9/0xd20
[  303.595059][T11638]  should_fail_ex+0x414/0x560
[  303.595094][T11638]  should_failslab+0xa8/0x100
[  303.595134][T11638]  __kmalloc_cache_noprof+0x70/0x3d0
[  303.595166][T11638]  ? instance_create+0xd0/0x360
[  303.595203][T11638]  instance_create+0xd0/0x360
[  303.595238][T11638]  nfqnl_recv_config+0x6cc/0xae0
[  303.595272][T11638]  ? nfqnl_recv_config+0x1d2/0xae0
[  303.595307][T11638]  nfnetlink_rcv_msg+0xb4d/0x1130
[  303.595336][T11638]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  303.595388][T11638]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  303.595420][T11638]  ? kasan_save_free_info+0x46/0x50
[  303.595512][T11638]  netlink_rcv_skb+0x208/0x470
[  303.595547][T11638]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  303.595576][T11638]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  303.595624][T11638]  ? bpf_lsm_capable+0x9/0x20
[  303.595658][T11638]  ? security_capable+0x7e/0x2e0
[  303.595700][T11638]  nfnetlink_rcv+0x26a/0x2520
[  303.595733][T11638]  ? __dev_queue_xmit+0x1d79/0x3b50
[  303.595773][T11638]  ? __dev_queue_xmit+0x27b/0x3b50
[  303.595814][T11638]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  303.595840][T11638]  ? __pfx___dev_queue_xmit+0x10/0x10
[  303.595883][T11638]  ? ref_tracker_free+0x63a/0x7d0
[  303.595916][T11638]  ? __asan_memcpy+0x40/0x70
[  303.595944][T11638]  ? __pfx_ref_tracker_free+0x10/0x10
[  303.595994][T11638]  ? skb_clone+0x246/0x3a0
[  303.596022][T11638]  ? __netlink_deliver_tap+0x807/0x850
[  303.596055][T11638]  ? netlink_deliver_tap+0x2e/0x1b0
[  303.596095][T11638]  ? netlink_deliver_tap+0x2e/0x1b0
[  303.596138][T11638]  netlink_unicast+0x82c/0x9e0
[  303.596178][T11638]  ? __pfx_netlink_unicast+0x10/0x10
[  303.596209][T11638]  ? netlink_sendmsg+0x642/0xb30
[  303.596240][T11638]  ? skb_put+0x11b/0x210
[  303.596278][T11638]  netlink_sendmsg+0x805/0xb30
[  303.596323][T11638]  ? __pfx_netlink_sendmsg+0x10/0x10
[  303.596361][T11638]  ? aa_sock_msg_perm+0xf1/0x1d0
[  303.596399][T11638]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  303.596434][T11638]  ? __pfx_netlink_sendmsg+0x10/0x10
[  303.596467][T11638]  __sock_sendmsg+0x21c/0x270
[  303.596501][T11638]  ____sys_sendmsg+0x505/0x830
[  303.596546][T11638]  ? __pfx_____sys_sendmsg+0x10/0x10
[  303.596596][T11638]  ? import_iovec+0x74/0xa0
[  303.596625][T11638]  ___sys_sendmsg+0x21f/0x2a0
[  303.596665][T11638]  ? __pfx____sys_sendmsg+0x10/0x10
[  303.596750][T11638]  ? __fget_files+0x2a/0x420
[  303.596785][T11638]  ? __fget_files+0x3a0/0x420
[  303.596838][T11638]  __x64_sys_sendmsg+0x19b/0x260
[  303.596880][T11638]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  303.596929][T11638]  ? __pfx_ksys_write+0x10/0x10
[  303.596961][T11638]  ? rcu_is_watching+0x15/0xb0
[  303.596992][T11638]  ? do_syscall_64+0xbe/0x3b0
[  303.597030][T11638]  do_syscall_64+0xfa/0x3b0
[  303.597062][T11638]  ? lockdep_hardirqs_on+0x9c/0x150
[  303.597094][T11638]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.597119][T11638]  ? clear_bhb_loop+0x60/0xb0
[  303.597151][T11638]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.597176][T11638] RIP: 0033:0x7ffa10f8ebe9
[  303.597200][T11638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  303.597222][T11638] RSP: 002b:00007ffa0f1ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  303.597249][T11638] RAX: ffffffffffffffda RBX: 00007ffa111b5fa0 RCX: 00007ffa10f8ebe9
[  303.597268][T11638] RDX: 0000000000000060 RSI: 0000200000000200 RDI: 0000000000000003
[  303.597284][T11638] RBP: 00007ffa0f1ee090 R08: 0000000000000000 R09: 0000000000000000
[  303.597298][T11638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  303.597313][T11638] R13: 00007ffa111b6038 R14: 00007ffa111b5fa0 R15: 00007fffd5823918
[  303.597352][T11638]  </TASK>
[  304.215132][T11628] Node 0 active_anon:16044kB inactive_anon:0kB active_file:7076kB inactive_file:159448kB unevictable:2988kB isolated(anon):0kB isolated(file):0kB mapped:133704kB dirty:1200kB writeback:0kB shmem:5328kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12276kB pagetables:3896kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  304.247488][T11628] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  304.277622][T11628] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  304.287886][    C0] ------------[ cut here ]------------
[  304.306623][T11628] lowmem_reserve[]: 0
[  304.312105][    C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  304.312121][T11628]  2497
[  304.313565][    C0] WARNING: CPU: 0 PID: 0 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820
[  304.316327][T11628]  2499
[  304.325955][    C0] Modules linked in:
[  304.328741][T11628]  2499 2499
[  304.338507][    C0] 
[  304.338538][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) 
[  304.338566][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  304.338581][    C0] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  304.338622][    C0] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 60 60 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 62 14 94 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  304.341592][T11628] 
[  304.345360][    C0] RSP: 0018:ffffc90000007758 EFLAGS: 00010246
[  304.345390][    C0] RAX: facdc76c1b7c2100 RBX: 000000000000000c RCX: ffffffff8de95100
[  304.348739][T11628] Node 0 
[  304.350932][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  304.350954][    C0] RBP: dffffc0000000000 R08: ffffffff8fa34737 R09: 1ffffffff1f468e6
[  304.350975][    C0] R10: dffffc0000000000 R11: fffffbfff1f468e7 R12: ffff88803096d7a8
[  304.363227][T11628] DMA32 free:1398928kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15996kB inactive_anon:0kB active_file:7076kB inactive_file:157892kB unevictable:2988kB writepending:1200kB present:3129332kB managed:2557520kB mlocked:1452kB bounce:0kB free_pcp:35884kB local_pcp:20476kB free_cma:0kB
[  304.373034][    C0] R13: 0000000000000000 R14: ffff88807a5f8e40 R15: ffff88807a5fb0d8
[  304.373058][    C0] FS:  0000000000000000(0000) GS:ffff888125c21000(0000) knlGS:0000000000000000
[  304.373077][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  304.373094][    C0] CR2: 000000110c347d2c CR3: 0000000077d96000 CR4: 00000000003526f0
[  304.380263][T11628] lowmem_reserve[]:
[  304.399389][    C0] Call Trace:
[  304.399413][    C0]  <IRQ>
[  304.399443][    C0]  rate_control_send_low+0x194/0x7a0
[  304.399490][    C0]  rate_control_get_rate+0x20b/0x5d0
[  304.399533][    C0]  ieee80211_beacon_get_finish+0x39a/0x6c0
[  304.399570][    C0]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  304.402299][T11628]  0
[  304.408047][    C0]  ? __pfx___netdev_alloc_skb+0x10/0x10
[  304.408097][    C0]  ? __ieee80211_beacon_get+0xce1/0x1880
[  304.416515][T11628]  0
[  304.419124][    C0]  __ieee80211_beacon_get+0xd3d/0x1880
[  304.427883][T11628]  1
[  304.435374][    C0]  ? __ieee80211_beacon_get+0x36/0x1880
[  304.443578][T11628]  1
[  304.475292][    C0]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  304.475353][    C0]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  304.475404][    C0]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  304.475443][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  304.475484][    C0]  __iterate_interfaces+0x2a8/0x590
[  304.484152][T11628]  1
[  304.492872][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  304.499848][T11628] 
[  304.507542][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  304.507592][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  304.511736][T11628] Node 0 
[  304.514742][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  304.517753][T11628] Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1556kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB
[  304.522973][    C0]  mac80211_hwsim_beacon+0xbb/0x1c0
[  304.523016][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  304.528684][T11628] lowmem_reserve[]:
[  304.534210][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  304.534269][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  304.534292][    C0]  ? read_tsc+0x9/0x20
[  304.541055][T11628]  0
[  304.543212][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  304.543257][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  304.548960][T11628]  0
[  304.554500][    C0]  handle_softirqs+0x283/0x870
[  304.554541][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  304.554573][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  304.557382][T11628]  0
[  304.562679][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  304.565339][T11628]  0
[  304.570754][    C0]  __irq_exit_rcu+0xca/0x1f0
[  304.570788][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  304.570824][    C0]  irq_exit_rcu+0x9/0x30
[  304.573590][T11628]  0
[  304.578831][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  304.578877][    C0]  </IRQ>
[  304.578888][    C0]  <TASK>
[  304.578900][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  304.585777][T11628] 
[  304.590637][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  304.590678][    C0] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 77 0f 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  304.598193][T11628] Node 1 
[  304.603148][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2
[  304.603178][    C0] RAX: facdc76c1b7c2100 RBX: ffffffff81968308 RCX: facdc76c1b7c2100
[  304.603195][    C0] RDX: 0000000000000001 RSI: ffffffff8d9b4943 RDI: ffffffff8be32680
[  304.603212][    C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3
[  304.603232][    C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa34730
[  304.606410][T11628] Normal free:3887448kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19524kB local_pcp:9312kB free_cma:0kB
[  304.611813][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  304.611841][    C0]  ? do_idle+0x1e8/0x510
[  304.611881][    C0]  default_idle+0x13/0x20
[  304.616802][T11628] lowmem_reserve[]:
[  304.621476][    C0]  default_idle_call+0x74/0xb0
[  304.627928][T11628]  0
[  304.630656][    C0]  do_idle+0x1e8/0x510
[  304.630697][    C0]  ? __pfx_do_idle+0x10/0x10
[  304.638212][T11628]  0
[  304.666308][    C0]  cpu_startup_entry+0x44/0x60
[  304.666383][    C0]  rest_init+0x2de/0x300
[  304.671915][T11628]  0
[  304.677541][    C0]  start_kernel+0x3a9/0x410
[  304.681505][T11628]  0
[  304.687059][    C0]  x86_64_start_reservations+0x24/0x30
[  304.687110][    C0]  x86_64_start_kernel+0x143/0x1c0
[  304.687147][    C0]  common_startup_64+0x13e/0x147
[  304.693287][T11628]  0
[  304.697012][    C0]  </TASK>
[  304.697042][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  304.697063][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) 
[  304.697091][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  304.697109][    C0] Call Trace:
[  304.697124][    C0]  <IRQ>
[  304.697135][    C0]  dump_stack_lvl+0x99/0x250
[  304.697177][    C0]  ? __asan_memcpy+0x40/0x70
[  304.697208][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  304.697241][    C0]  ? __pfx__printk+0x10/0x10
[  304.697294][    C0]  vpanic+0x281/0x750
[  304.697326][    C0]  ? __pfx__printk+0x10/0x10
[  304.697362][    C0]  ? __pfx_vpanic+0x10/0x10
[  304.697392][    C0]  ? is_bpf_text_address+0x292/0x2b0
[  304.697447][    C0]  panic+0xb9/0xc0
[  304.697477][    C0]  ? __pfx_panic+0x10/0x10
[  304.697528][    C0]  __warn+0x31b/0x4b0
[  304.697556][    C0]  ? __rate_control_send_low+0x5df/0x820
[  304.697598][    C0]  ? __rate_control_send_low+0x5df/0x820
[  304.697634][    C0]  report_bug+0x2be/0x4f0
[  304.697664][    C0]  ? __rate_control_send_low+0x5df/0x820
[  304.697701][    C0]  ? __rate_control_send_low+0x5df/0x820
[  304.697737][    C0]  ? __rate_control_send_low+0x5e1/0x820
[  304.697774][    C0]  handle_bug+0x84/0x160
[  304.697812][    C0]  exc_invalid_op+0x1a/0x50
[  304.697848][    C0]  asm_exc_invalid_op+0x1a/0x20
[  304.697875][    C0] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  304.697913][    C0] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 60 60 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 62 14 94 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  304.697937][    C0] RSP: 0018:ffffc90000007758 EFLAGS: 00010246
[  304.697961][    C0] RAX: facdc76c1b7c2100 RBX: 000000000000000c RCX: ffffffff8de95100
[  304.697982][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  304.697997][    C0] RBP: dffffc0000000000 R08: ffffffff8fa34737 R09: 1ffffffff1f468e6
[  304.698017][    C0] R10: dffffc0000000000 R11: fffffbfff1f468e7 R12: ffff88803096d7a8
[  304.698060][    C0] R13: 0000000000000000 R14: ffff88807a5f8e40 R15: ffff88807a5fb0d8
[  304.698099][    C0]  ? __rate_control_send_low+0x5de/0x820
[  304.698154][    C0]  rate_control_send_low+0x194/0x7a0
[  304.698199][    C0]  rate_control_get_rate+0x20b/0x5d0
[  304.698246][    C0]  ieee80211_beacon_get_finish+0x39a/0x6c0
[  304.698286][    C0]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  304.698327][    C0]  ? __pfx___netdev_alloc_skb+0x10/0x10
[  304.698369][    C0]  ? __ieee80211_beacon_get+0xce1/0x1880
[  304.698416][    C0]  __ieee80211_beacon_get+0xd3d/0x1880
[  304.698460][    C0]  ? __ieee80211_beacon_get+0x36/0x1880
[  304.698515][    C0]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  304.698565][    C0]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  304.698622][    C0]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  304.698667][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  304.698716][    C0]  __iterate_interfaces+0x2a8/0x590
[  304.698754][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  304.698794][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  304.698838][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  304.698877][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  304.698922][    C0]  mac80211_hwsim_beacon+0xbb/0x1c0
[  304.698957][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  304.698989][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  304.699050][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  304.699075][    C0]  ? read_tsc+0x9/0x20
[  304.699114][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  304.699152][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  304.699186][    C0]  handle_softirqs+0x283/0x870
[  304.699218][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  304.699253][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  304.699285][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  304.699323][    C0]  __irq_exit_rcu+0xca/0x1f0
[  304.699350][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  304.699388][    C0]  irq_exit_rcu+0x9/0x30
[  304.699412][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  304.699444][    C0]  </IRQ>
[  304.699453][    C0]  <TASK>
[  304.699466][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  304.699494][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  304.699525][    C0] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 77 0f 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  304.699548][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2
[  305.378911][    C0] RAX: facdc76c1b7c2100 RBX: ffffffff81968308 RCX: facdc76c1b7c2100
[  305.386895][    C0] RDX: 0000000000000001 RSI: ffffffff8d9b4943 RDI: ffffffff8be32680
[  305.394878][    C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3
[  305.402870][    C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa34730
[  305.410856][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  305.418853][    C0]  ? do_idle+0x1e8/0x510
[  305.423214][    C0]  default_idle+0x13/0x20
[  305.427564][    C0]  default_idle_call+0x74/0xb0
[  305.432442][    C0]  do_idle+0x1e8/0x510
[  305.436548][    C0]  ? __pfx_do_idle+0x10/0x10
[  305.441173][    C0]  cpu_startup_entry+0x44/0x60
[  305.445957][    C0]  rest_init+0x2de/0x300
[  305.450229][    C0]  start_kernel+0x3a9/0x410
[  305.454749][    C0]  x86_64_start_reservations+0x24/0x30
[  305.460227][    C0]  x86_64_start_kernel+0x143/0x1c0
[  305.465359][    C0]  common_startup_64+0x13e/0x147
[  305.470348][    C0]  </TASK>
[  305.473690][    C0] Kernel Offset: disabled
[  305.478050][    C0] Rebooting in 86400 seconds..