last executing test programs:

3.014418164s ago: executing program 4 (id=1380):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
unshare(0x62040200)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50)
listen(r1, 0x9)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x48}}], 0x1, 0x20044000)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000ffdbdf25"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x8, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000040)="f6f4e9a100000000002a8bc686dd", 0x0, 0x4, 0x0, 0x2, 0x0, &(0x7f0000000940)="0102", 0x0}, 0x50)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0)
getsockopt$inet6_tcp_buf(r6, 0x6, 0x12, 0x0, &(0x7f00000000c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000002e00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002120207b1a00fe00000000bfa10000000000000701000078ffffffb702000008000000b70300000000000085000000c700000095"], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)=ANY=[@ANYBLOB="1c0000002c00010000000000000000000400008008001a8004000480"], 0x1c}], 0x1}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000000d40)={0x0, 0x7000003, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001)

2.245154411s ago: executing program 1 (id=1389):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40200000000000061342c000000000085000000ab0000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff006f000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e33, @private=0xa010100}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0xfffffece)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x20008000)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000100)=0x100ca, 0x4)
syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff20000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="350400002f000511d25a80648c63d40d0c0006dd0100002037153e370c040180060410004500c999ee5dbfef762bde19c9cfdc14aff43c923ca263b8a66594bde0b54ec45b6a576503ef9cf190584d3808b5c2e5dd9e18754752b179fd91116e707d7fb3c98c7888393677dab64b8f5c91aa1f279e125d815bcfedc4787c9c0ebe44c8a26113b9223f0a0830c7712f7bb200000000000000000dec58cb14130000973f1c792f4bd920159534990df6f31daa2b02d2659b4237fd73d624a9e12bedef3becc77c7eee414ef18c99232b28132ae2a57fad54f50df9e8505d9577860cd21fa81aceaa92e363a7313a458b78c4", 0xf1}, {&(0x7f0000000600)="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", 0x344}], 0x2}, 0x0)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)}, {0x0}, {&(0x7f0000000480)="4068745fc217775e9fca3477d3c929c1231d710ed7bb68bf2f127cb83703392703f53051ec7ebd4d519a9db1973eaeda928822aaa8d3a9677374a52305e2ad47d5802e", 0x43}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4", 0x28}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c54e708601eae9920000", 0xd1}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf14", 0x44}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1}}], 0x3, 0xc0)
setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)

2.071995203s ago: executing program 3 (id=1391):
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0)=r1, 0x4)
sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000500)={0x2, 0x4e1d, @multicast1}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000600)="6ef8fde7c1", 0x5}], 0x1, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20, 0x60}, 0x0)

2.071395342s ago: executing program 4 (id=1392):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

2.015166318s ago: executing program 2 (id=1393):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x1c, r2, 0x23, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0x4000000)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x10, 0xa7bbfef6286eab18, 0x6, 0x8000, {{0x30, 0x4, 0x1, 0x28, 0xc0, 0x67, 0x0, 0x9, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x82, 0x8, "dd1b2bcf61ff"}, @cipso={0x86, 0x1c, 0x1, [{0x7, 0x6, "d35d4b40"}, {0x0, 0x2}, {0x7, 0x4, "6fa4"}, {0x2, 0x3, "8b"}, {0x2, 0x7, "d8785dcf04"}]}, @timestamp_addr={0x44, 0x4c, 0xf4, 0x1, 0x4, [{@remote, 0x8}, {@rand_addr=0x64010100, 0x5}, {@broadcast, 0x9}, {@dev={0xac, 0x14, 0x14, 0x31}}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0xd}, {@rand_addr=0x64010100, 0x3}, {@private=0xa010100, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@rand_addr=0x64010101, 0x6}]}, @timestamp={0x44, 0x8, 0x4f, 0x0, 0x3, [0x8001]}, @noop, @timestamp_prespec={0x44, 0xc, 0x80, 0x3, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xd5}]}, @lsrr={0x83, 0x27, 0xf6, [@rand_addr=0x64010100, @rand_addr=0x64010102, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010101, @empty, @multicast2, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xe}]}]}}}}}) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000140)={'syztnl2\x00', <r3=>0x0, 0x10, 0xa7bbfef6286eab18, 0x6, 0x8000, {{0x30, 0x4, 0x1, 0x28, 0xc0, 0x67, 0x0, 0x9, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x82, 0x8, "dd1b2bcf61ff"}, @cipso={0x86, 0x1c, 0x1, [{0x7, 0x6, "d35d4b40"}, {0x0, 0x2}, {0x7, 0x4, "6fa4"}, {0x2, 0x3, "8b"}, {0x2, 0x7, "d8785dcf04"}]}, @timestamp_addr={0x44, 0x4c, 0xf4, 0x1, 0x4, [{@remote, 0x8}, {@rand_addr=0x64010100, 0x5}, {@broadcast, 0x9}, {@dev={0xac, 0x14, 0x14, 0x31}}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0xd}, {@rand_addr=0x64010100, 0x3}, {@private=0xa010100, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@rand_addr=0x64010101, 0x6}]}, @timestamp={0x44, 0x8, 0x4f, 0x0, 0x3, [0x8001]}, @noop, @timestamp_prespec={0x44, 0xc, 0x80, 0x3, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xd5}]}, @lsrr={0x83, 0x27, 0xf6, [@rand_addr=0x64010100, @rand_addr=0x64010102, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010101, @empty, @multicast2, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xe}]}]}}}}})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x38, 0x3a, 0x0, @private1, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "0bae2b", 0x0, 0x2f, 0x0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@fragment={0x87}]}}}}}}}, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf4, 0xf4, 0x3, [@func={0xf, 0x0, 0x0, 0xc, 0x3}, @func={0x2, 0x0, 0x0, 0xc, 0x5}, @volatile={0x6}, @struct={0x1, 0x7, 0x0, 0x4, 0x0, 0x400, [{0xd, 0x1, 0x1}, {0xf, 0x4, 0x7}, {0x3, 0x2, 0xfffffc00}, {0x6, 0x2, 0x4}, {0xa, 0x2, 0x8d}, {0x0, 0x4, 0xe}, {0x6, 0x3, 0x4}]}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x8, 0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x7, 0x1}, {0x7}, {0x0, 0x3}]}, @enum={0x10, 0x5, 0x0, 0x6, 0x4, [{0x2, 0xf}, {0x10, 0x5}, {0x6, 0xc}, {0xa, 0x6}, {0x4, 0xb}]}]}, {0x0, [0x30]}}, &(0x7f0000000580)=""/105, 0x10f, 0x69, 0x1, 0x5, 0x0, @void, @value}, 0x28)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e6ef1f00060000007f00000001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400), &(0x7f0000000580), 0x7, r7}, 0x38) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400), &(0x7f0000000580), 0x7, r7}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r7, 0x0, &(0x7f00000002c0)=""/203}, 0x20)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', r3, 0xffffffffffffffff, 0x5, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x1e, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @map_val={0x18, 0x6, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, &(0x7f00000000c0), 0x41100, 0x2, '\x00', r3, 0x0, r6, 0x8, &(0x7f0000000640)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x0, 0x7, 0x8, 0x81}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000740)=[r7, r8, 0xffffffffffffffff], &(0x7f0000000780), 0x10, 0x1, @void, @value}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x1e, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @map_val={0x18, 0x6, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, &(0x7f00000000c0), 0x41100, 0x2, '\x00', r3, 0x0, r6, 0x8, &(0x7f0000000640)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x0, 0x7, 0x8, 0x81}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000740)=[r7, r8, 0xffffffffffffffff], &(0x7f0000000780), 0x10, 0x1, @void, @value}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newnexthop={0x100, 0x68, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x2, 0x0, 0x5}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_DST={0x14, 0x2, @empty}}, @NHA_GROUP={0x4c, 0x2, [{0x2, 0xf6}, {0x2, 0x5}, {0x0, 0x40}, {0x2}, {0x0, 0x5}, {0x2, 0x2d}, {0x2}, {0x0, 0x1}, {0x1, 0xe0}]}, @NHA_GROUP={0x4c, 0x2, [{0x2, 0x8}, {0x1, 0x5}, {0x0, 0x3}, {0x1, 0xe}, {0x0, 0x2}, {0x1}, {0x2, 0x3}, {0x0, 0x5}, {0x1, 0xd}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x5}]}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3}]}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_OIF={0x8, 0x5, r3}]}, 0x100}}, 0x0)
epoll_create1(0x0)

2.014601569s ago: executing program 1 (id=1394):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, <r2=>0xffffffffffffffff}, 0x4)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004980)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="bd978021d68e5da0ad5ba1de3c685f58abe789c57a66a7f8a649f37a8bd0d8fe2da655de6fe989ea4ea60bec9256c5e1245fef34a93dd82d0e90475b8a011d1e91667ed8e6ab38b5473df0ae398e585e66cdc19488b7e537", 0x58}], 0x1, &(0x7f0000000280)=[@assoc={0x18, 0x117, 0x4, 0x10000}], 0x18, 0x20000010}, {0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000440)="bcb453f152b88e317dac859eacf9824eda96686357b7587626a9da7e", 0x1c}], 0x1, &(0x7f0000000500)=[@assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0xa}, @op={0x18}, @iv={0x78, 0x117, 0x2, 0x60, "7784e148b554c05d49f2a774b27a85e12b169c00db0fb06ad863a937d53c166506a14bfb8021f6edd3a49882e14900c3f5953bc62bcf2e841c9e732934d6bac5930d889f4e545a79ea97c9349f3d8e56a33209174185fbece3bd9b5e9d19d183"}], 0xc0, 0x4000000}, {0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000005c0)="ee16d007372023eefd07a87d9a3110b22e321a5fa16132bd75ed206b06b8b1e1353f2fadbf605afc4f177f", 0x2b}, {&(0x7f0000000600)="2a170e4dbdfed0d7cb37b096051a63a0faf03b5b700bb0c822ac451733ba4f328359643b97132e6415a2d67d69e9ed9f4c569d5f027e74fb705fbdc15559b3302927e996323f79cb7e4898486c6957c4e6fea07c32657890a3485e2091cb4c1598455b75e798dccaf6118c", 0x6b}, {&(0x7f0000000680)="32921092bab1dce00b9f5dac875009ddbae2e39587fd13109dbd1f186410f17c6f25b07a3f49fa11b6fa7ec8ff5aeb2761", 0x31}, {&(0x7f00000006c0)}, {&(0x7f0000000700)="8ae803ba5d714ee7bb52797dd5581a81107d506df09219786377c1dcdcce5dc2a05086482f2085f9862f3e0333182d8ae7c4a7064057744ed0f1cf053fb82bf1ae7c33cc99a21ff8aeec060d24072433bb0733ad06cbecf087312e89849502f9cebc2d7b7775456496643de693cb8fccfecbda07b0d706b438ed487f", 0x7c}], 0x5}, {0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000940)="4df273d4998b9be3b1102221d8a8cabd9a7cc75c6378702454cb05585ce4e4f9490b6861464687ee090df5227422095676a6d9b3c5e1c5041c32e2b13d5f3bdbfea65e817986a4f1a4c242a82d6581db48e7dcaee43dc9f3eaf168bc99054c7a68e84f4d7a35c7ecb244b26702f075ae4ae2bd771a1c1e33c81adf62750eb1", 0x7f}, {&(0x7f0000000780)="03c5a5ac2b269905fb754b4a546eda22d51723620a2cdf20f3e2880232b5a5e6dad5ac6a68", 0x25}, {&(0x7f0000000a00)="e2a4cb6623490b3036635f93e83b095443efed65f202c1786a3ba395688821012cb4a4126f93c5714e7cca8b793759dedef84f14bc4d5520466a71c9f7be24d2905071ee3692b8fa41", 0x49}, {&(0x7f0000000880)="d84531e461502a6faedc0fd414d3e124736d2f1801291150755487f5700d06a93dc9", 0x22}, {&(0x7f0000000a80)="c4830a6540aabbe8cd14155aa5638478c5b8b6e03410c820d9cc715e953cc60cc6f93f5ab9ed7cc13c54bfd2015f8d3e927a5f0b80f33160adb4fddf092d3bd5700d43075859b1d1ca4d30936752ed6fddb70964093cbe42037ea35db183e5832b3380390df6b64b143b001abfaffb", 0x6f}, {&(0x7f0000000b00)="18570ff7d0f050da3ef2869b809dd840425be1cd535408a933f5c5ddbb00ff82e6afb905afc494b88f00f04fa25a8061eb7f8759fcaca688100d27840366fae96c2df25cad9fcca0e0b682d39e8c14b75e6fe0e2ad2da0f64860d251daee5b49bc054e67ce84be2b4ea6c61be773e1d6b91d5718b281708f7d55f072bbcc25f830b005515da406a3e6642c9920c77e5ddeea17747fa35c1313ce45ed498877f73111312c9a431afc9e9aefa85d5334f2332e567a755e8417b304292509c5d7a001f031c0a1b4af84d3d81afb517f6b19d1de59736606fa394fe19119505dad19d800a2d5200e3443bd54e8335746cbc19c02", 0xf2}, {&(0x7f0000000c00)="1f8949059266be7907f84e3cd7afb4cf6a11f6010437f191adbcb82ef455b656526ad67e309648dd29cb3dc11ea4c9a90238457227e0b645779a05ce6017a255fc3fc9807cb234010a5c70d699c96a1774c6c2a643d6416466dc099b436c1760724579cb065087cf13d75f0ccd4902b8c4510300743ff345bc775d7b72ab3541a3302893a0350ffe8b3f48f90229874e15e00477b85f45b6abb98aeb32717dbb99489b0b", 0xa4}, {&(0x7f0000000cc0)="c5d56b90cc72af89c2fc6ee88d4a2723cb41d88bb37e67527305b4e4f35dbec239adc42329c5e751bbc6d7a6eff8", 0x2e}, {&(0x7f0000000d00)="5aef464fdeff06d57596d3f8410833fc7b90bb8e26664fe3740ca37718f65d8914e0b87e18ab5ebdee234a9d63b86dab1dfe82a2d01376357eecfaa79bcf2dcb400137a8f6c42c750cbed0c90263c52f24271bc4afe88616040667b6885dd21e4e370e451a77569a734f68d9da79cd25232fa46ad79cd6e5587be227310098b82d3ddda9e39080", 0x87}, {&(0x7f0000000dc0)="c7dd66f2d2c1bd58f460ab3b3c08b14d836b52a1d025a75319bbed9a9d57c06d85f8c652fbf3443f5d0c35785af9d55cbf2883efd86a7eec2ac7815c2633f49df0129f3d63acb09525b8dd8f1e1c883928528d4224bada8ccaffac555cb663f2b6485f9c0212268b959001e535d63230038ab978a6351a847e4180de99d22c5655fce06af2daac5220f7542f5dabdb187c3824da28fa7ad86fa5a69ae6f240882072bc053fe6000b11c9b04546a1d8", 0xaf}], 0xa, &(0x7f0000000f40)=[@assoc={0x18}, @iv={0xc8, 0x117, 0x2, 0xb0, "f84a89d5ba959fffd0c1d9f3a2e10228dab666e0249192a9e4fdb5449b3ef8fa1d224f8d113d564847a2ad2fcb670f0fe7ef9865cfb70dbdc10dd113f1e4cba718ed40f56ea280758df0799fb07b79b459985feac722b1cc1557847f7d7687e9b661918e7388ccb4019b7ffaf0e5153760b7449f8f06e0acd87c98738e4a0dbe24d7cd56389fdc3cdbb7f1e2c6eec3c491eb739afab64434e8e1a2c988b9306924f4f0916101052ea215113891399997"}, @op={0x18, 0x117, 0x3, 0x1}], 0xf8, 0x4010}, {0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001040)="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", 0x1000}], 0x1, 0x0, 0x0, 0x8000}, {0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000002080)="623f247109743c7995667fd66fc45ab6aaa0e9a3a242e977795498fa4c799c2a43307c3d0b31bf6b97f19d875ebac18baf220fa0c5ec6de04fe666e124043346450ce6ab57", 0x45}, {&(0x7f0000002100)="7054fe95eff3d5c0e1732a4c7bdd89ec95a107e7966a7d96ded28beabb3d633b1d5044330f1516a0e1ef3500ad02800fd55d75c9fec2305714bd4c03a9614f0c96e385ae117b56585ffdb685d1664cd6804ca5af", 0x54}, {&(0x7f0000002180)="b16c6d21a4b2216dbfbd4431633f", 0xe}, {&(0x7f00000021c0)="1abd2e3731943ec67ce6b9adf5d09d72e9bf4b224d4f1a561f8dd348b3581de177e392ab578f9259f4cf8235fe686c2f43ef912a9d1e41e94501f0a38f7e946b8f0da1aa487f21add2404682dd3246757471d7a2143277b3ac927cb70cd29c24ca0962a455bda4cc22bb8ede61019270664f808e49bc39d44093284c9f56b6d1d36dc5a095b9eadc748380b78f2801e3fd0d27115c47f3441f5f21105e392361a908c3d35652aa9351a53827f377c6b201", 0xb1}, {&(0x7f0000002280)="0400fa35b3004628e054b69c1d9be77414ea2896f689c0d39c8a086cc8ddbe82cdb7de8537220cc56eec5de3993ca1ac56563f4803a61a8936c00f459197f4be40062c46b9152f5ed0efedbc2898c5c4cb646bc473e7fec2c8e7a699f7c8d2ea2bc34d6624f0b98ddc5d09c9f3caaacd6bfd6bc7bafff389e5ca68b1817bca30d186a9719e2856153f04715968ee8ef5cb64af071978932a0a5f", 0x9a}, {&(0x7f0000002340)="49bb8da75b6ecc5d26e1deb4", 0xc}, {&(0x7f0000002380)="a0ab28565784154d3aed0d74bcb389f355cee58341b0", 0x16}, {&(0x7f00000023c0)="bb99af9a6c33b50d2ff9681ee9490ff33e47e21a16207aaa56cb5ca3ed8e0a533272dd336932c90d021435dc573eb47c583f9f50217e85a0cd7acd4792cc40f9d07ba7eb4e2d7052eb1744dcee7873894cfa92a17c7ffacd99d9f3a5d355c08894101f8e5e15b88fd77d836e3a972d6c9e0331caa232a3ef80e8f897c7aab09c023c0a7c0b80", 0x86}, {0x0}], 0x9, 0x0, 0x0, 0x4004}, {0x0, 0x0, &(0x7f0000004780)=[{&(0x7f0000003600)="c68e7c69336daf7e9891c16b67cc55347cfc8eceeb93f978973ab4bd93d13f66529affe4d716940d51473a7d4065bf71d9f7c6b2d717e093355550dc9642bce0f7eb28d7b9d57dabfc2d7e5294b76d59", 0x50}, {&(0x7f0000003700)="81a7598246a16ba83a924ae17ee0947c9e2f21f14c08ce42d658e7d406059761abaa1fa5a399c990c7680eb6922f4a348589d6ead8f0bc566ddcbeea07e17e7ba7e8a65a5dad310afdb23343c3d4699ff0cd11a9531da794c3e1817218f75f23dc0be6b5fa5039af136e", 0x6a}, {&(0x7f0000003780)="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", 0x1000}], 0x3, &(0x7f00000047c0)=[@iv={0x40, 0x117, 0x2, 0x2c, "8eb935cd1260957dac8f1e3a03c42de43d7b29503e529290f34c5f329ca51308ae6890f6a6712d083a5ca8ab"}, @assoc={0x18, 0x117, 0x4, 0x4}, @assoc={0x18}, @iv={0x18}, @assoc={0x18, 0x117, 0x4, 0x4}, @assoc={0x18, 0x117, 0x4, 0x401}, @iv={0xa0, 0x117, 0x2, 0x85, "c1ad525f6f093811d37866c6c319b7ef42375ec9fe457d611211b7b034ea1dfd80cad4d4ad16b91eb049a88d08f3622255a0ce38dda99e6f6755ce58c416adfa372b3008493248607eaeeaa85c51ad0eb399a73a143e601e45567f4dd5bb3b0eed804e1f6a48e2e90d25c7db29654d762d269afa0c7127fd3a17c3a2b4d70f8dc467c5b810"}], 0x158, 0x8010}], 0x7, 0x2404a050)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000d49d80007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r3}, 0xc)
r4 = socket(0x10, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020)
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000940)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x5, {0x0, 0x0, 0x0, r8, {0x0, 0xfffc}, {}, {0x4, 0x3}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r8}, @TCA_ROUTE4_TO={0x8, 0x2, 0xfe}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc004884}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10)
sendmsg$nl_route(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c00000012005f3fbd7000000000000700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a000100"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x880)
close(0x3)
socket$inet6_tcp(0xa, 0x1, 0x0)

1.972391229s ago: executing program 3 (id=1395):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c400000008000140000000090900010073797a30000000000900020073797a32"], 0x94}}, 0x0) (fail_nth: 2)

1.909081931s ago: executing program 4 (id=1396):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r1=>0x0})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}}, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090200000000000000000f000000050030000000000008000300", @ANYRES32=r1], 0x24}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000026c0)={{r4}, &(0x7f0000002640), &(0x7f0000002680)=r5}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
pipe(&(0x7f0000000080))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}}, 0x0)
unshare(0x6a040000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="090d0000000000f0ff001400000008000300", @ANYRES32=r8, @ANYBLOB="0800051d00000000140006"], 0x58}}, 0x0)

1.834572758s ago: executing program 2 (id=1397):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000d0b00400000010000000300000000ff000008000a"], 0x20}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0, @ANYRES64=r0], &(0x7f0000000040)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xa}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xffffffffffffff71)
socket$unix(0x1, 0x5, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0x0, 0x0, &(0x7f0000000c40), 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50)

1.530456427s ago: executing program 1 (id=1398):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r1=>0x0]}, &(0x7f0000000040)=0x8)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="3504000040000511d25a35400c0002000200002037153e370c04018006041000450000002a560000e7ff00000000", 0x2e}, {&(0x7f0000000a40)="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", 0x407}], 0x2}, 0x10049014)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e21, @multicast2}}}, 0x84)

1.471611443s ago: executing program 3 (id=1399):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="440000001000030400000000fddbdf2500000400", @ANYRES32=r1, @ANYBLOB="60bc010034a705002400128009000100626f6e64000000001400028008000b"], 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x8010)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket(0x10, 0x3, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "100400", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x1, 0x7}, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000700)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "f5fe9c103abe0b65544e0980519f38f54dd5f87ecc377210bd44fe7e1375550831c5f6dd769f5a1d175f47a8b941c8e568ca41e8da841f4f18f1ea6b206d495119ac37c29f4b384d0a9181566cfc4a1b"}, 0xd8)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000140), 0x4)
write(r3, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14)
recvmmsg(r3, &(0x7f0000004e80)=[{{&(0x7f0000000000)=@phonet, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)=""/248, 0xd6}], 0x1, &(0x7f0000000240)=""/81, 0x51}, 0x2}, {{&(0x7f00000002c0)=@ieee802154, 0x80, 0x0}, 0x645}, {{&(0x7f0000000600)=@pppol2tp, 0x80, 0x0, 0x0, &(0x7f0000001800)=""/198, 0xc6}, 0xffffff80}, {{0x0, 0x0, &(0x7f0000004dc0)=[{0x0, 0xffffff82}, {0x0}, {0x0}, {0x0}], 0x4}, 0x6}], 0x4, 0x10122, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "c4"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0)

1.350652318s ago: executing program 2 (id=1400):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8)
bind$vsock_stream(r2, &(0x7f0000000440), 0x10)
listen(r2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1)
listen(r4, 0x401)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r1, 0x1, 0x70bd27, 0x25dfdaff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x11}, 0x40)

1.262416599s ago: executing program 3 (id=1402):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000018c0)=ANY=[], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f00000017c0)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "372a31a11e03279cec094e071cc80f218d360356a936a7e3971a8c35c47e5804", "400100", "fffffffffffffffd"}, 0x38)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0xa, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
writev(r0, &(0x7f0000000080)=[{0x0}], 0x1)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e}, 0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000090000000700000000000008000000000000000015000061"], 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r4, 0x31, &(0x7f00000002c0)}, 0x10)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000380)=0x85, 0x4)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r3)
unshare(0x8040480)
r7 = epoll_create(0x7)
epoll_pwait(r7, &(0x7f0000000440)=[{}], 0x1, 0x1ff, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)={0x138, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0xcc, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_PROTO={0x4}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}]}]}, 0x138}}, 0x4)
sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="e0d0fbffff00", @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000"], 0x14}}, 0x0)

1.191378419s ago: executing program 1 (id=1403):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'tunl0\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000003c40)=@newtaction={0x90, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r3}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020300001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fc010000000000000000000000000000000000000000000004000400000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000aa"], 0xd8}}, 0x0)

994.724663ms ago: executing program 1 (id=1404):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000000901010000000000000000070004010900010063797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x20040094}, 0x800)
r3 = socket$unix(0x1, 0x1, 0x0)
connect$l2tp6(r1, &(0x7f0000000340)={0xa, 0x0, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x39}, 0x20)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="08000500060000000c0017800400070004000600"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x782b855e, 0x2, 0x21c}}}}]}, 0x44}}, 0x8000)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r10, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6)
recvmmsg(r10, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x8a46e000)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
unshare(0x62040200)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000003c0))
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd29, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x3, 0x4}, {0x1, 0x9}, {0xb, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x4044010)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)

905.853574ms ago: executing program 0 (id=1405):
r0 = socket$tipc(0x1e, 0x5, 0x0)
listen(r0, 0x0)
unshare(0x400)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x1, 0xd00}}, 0x1c}}, 0x0)
ppoll(&(0x7f0000000040)=[{r0, 0x1720}], 0x1, &(0x7f0000000100), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x80000000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

787.332468ms ago: executing program 0 (id=1406):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0xfffffffffffffd5f, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
listen(r1, 0x0)
r2 = accept(r1, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000005c0)={'tunl0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x20, 0x80, 0x78b, 0x9c8, {{0x16, 0x4, 0x2, 0x1, 0x58, 0x68, 0x0, 0x8, 0x2f, 0x0, @broadcast, @multicast2, {[@timestamp_prespec={0x44, 0x44, 0xb0, 0x3, 0xe, [{@rand_addr=0x64010102, 0x8}, {@rand_addr=0x64010101, 0xd}, {@multicast1, 0x8805}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9a1}, {@broadcast, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x9}, {@private=0xa010101, 0x9}, {@broadcast, 0x40}]}]}}}}})
sendto$inet6(r2, &(0x7f0000000000)='\x00', 0xfffffffffffffec9, 0x20044800, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000004c0), &(0x7f0000000500)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000280)={'wg0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20}, [@RTA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, @RTA_IIF={0x8, 0x3, r4}, @RTA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x34}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2d8, 0xffffffff, 0xf8, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @loopback, 0x0, 0x0, 'veth0_to_team\x00', 'wlan0\x00', {}, {}, 0x73}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x5}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x338)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x90, 0x10, 0x200, 0x70bd2c, 0x25dfdbfd, {0x1}, [@generic="6d9ed56dbdff893a33e852e56428d263d8ae4e8fe7d75165371712adfe4de150f3653f488ef27c7e56800a340e432226872701bf83b55a7ee3b0d63300e599f619224d09c36fb3f2ae3042e7f14b6a20df8ddf1d8354dc9eb8960e2130777dd610f55451fbcca94b6656975d0e50e9bca7d1e471a70273f1761a"]}, 0x90}, 0x1, 0x0, 0x0, 0x20040011}, 0x24000000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800e00010069703665727370616e000000240002801400050000000081000000000000000000000001040012160002000000000000"], 0x58}}, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x9, 0xc2, 0x0, 0x0, 0x2}}}}}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x10b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000, 0x0, 0xfffffffe}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x68}}, 0x0)

786.852248ms ago: executing program 4 (id=1407):
socket$alg(0x26, 0x5, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
ioctl$FICLONE(r1, 0x40049409, r0)

760.490458ms ago: executing program 0 (id=1408):
unshare(0x22020600)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x358, 0x11, 0x148, 0x358, 0x0, 0x3f0, 0x2a8, 0x2a8, 0x3f0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x358, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x2, 0x0, 0x0, './file0\x00'}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0x8800000000000000}}, {0x28}}}}, 0x4e8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@float={0x1, 0x0, 0x0, 0x10, 0x10}, @typedef={0x1, 0x0, 0x0, 0x8, 0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e]}}, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4, "8eb9b805"}, &(0x7f0000000080)=0x28)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r1], 0x24}}, 0x0)

747.991588ms ago: executing program 2 (id=1409):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c400000008000140000000090900010073797a30000000000900020073797a32"], 0x94}}, 0x0) (fail_nth: 3)

622.144203ms ago: executing program 2 (id=1410):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)={0x2cc, 0x28, 0x10, 0x70bd2b, 0x25dfdbfc, {0xe}, [@nested={0x201, 0x57, 0x0, 0x1, [@typed={0xfe, 0xb1, 0x0, 0x0, @binary="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"}, @typed={0x4, 0x119}, @nested={0x4, 0xf5}, @generic="e342ae0ab37739c6e855c9e66748fa3c69b6c3e69bb996449b490feddb2059297a199295ebb9013f811ad62c6abdbfbe645b80cc17ed0ecd42d2b6bd3eeca6c3b0ef29bad5fd42f81edb7ac7497906da397357d8ed", @nested={0x4, 0x77}, @generic="f68660fb7ca7ecc33f348137b93c0580805f9e6ac56ac79e6dc9c6333b4d921f5c9b36f9b701aa3fba50bfc23cf2f1f6d9e26f02163742926b33cb74260292b9a6a4a8bb59774727fc6dcf21391504b53c47c9be152576f7cddca2c7600f3dee7ca6c55510e3452d2c49b5dbc0335ff6a341628ebab90bd0853a8bf5ea30fdd0a30cfe67f68fe0321a0379eb980f3f554b5de5d9a6f570f1", @nested={0x4, 0x23}]}, @generic="d12cff30cda1287a46abb8140d152a3eb00155c3615442287d7d27a399063688c0548465c6b58a18d05184428caf545b1c30377eced9560017b3d4dcebba05ec0065e35196969c1a5071b6947228ad85e4537a337e47903a02d0be8a11d94353fb473216c36bff97ad0ae7a0a732ee203d1a6411d92023f9c950dd", @generic="a68a7da81aa73a905ac7c559c7da153950b6ff8c5ed4e8450cfd4565ede8ae759faa703f6a7d7cbe8990df0b4770", @typed={0x8, 0x108, 0x0, 0x0, @u32=0xd6ed713}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x801d}, 0x8000)
sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0xd}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x81}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x40}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x20044000) (async)
sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0xd}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x81}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x40}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x20044000)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000540)={@rand_addr, @remote}, &(0x7f0000000580)=0xc) (async)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000540)={@rand_addr, @remote, <r2=>0x0}, &(0x7f0000000580)=0xc)
sendmsg$nl_route_sched(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@newtclass={0x34, 0x28, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x10, 0x10}, {0xfff3, 0xb}, {0x2, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x6, 0xe5}}, @TCA_RATE={0x6, 0x5, {0x8, 0x9}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x20000001)
r3 = socket$inet6(0xa, 0x1, 0x5a7)
sendto$inet6(r3, &(0x7f0000000680)="2134a7c14541aade05223d3a5a6f42652fa9e837347b3e24a61d5225ac58c04e22488c7c32a2ed22c6ae5277d6bbfa4840021e1c29c926316666430a1a36e98ece8868bbbfe7fb4b9e44b3147abf1623a2f0392c6aaaaa1b3cad600aa98773f8bb3863ba6ed13cd5f0d6170fd97a89157ba8a3c35b", 0x75, 0x1, &(0x7f0000000700)={0xa, 0x4e24, 0x2c13, @local, 0x8}, 0x1c)
sendmsg$AUDIT_GET(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x10, 0x3e8, 0x10, 0x70bd2d, 0x25dfdbfb, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4010) (async)
sendmsg$AUDIT_GET(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x10, 0x3e8, 0x10, 0x70bd2d, 0x25dfdbfb, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4010)
r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xcc)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000840)={'wlan1\x00', <r5=>0x0})
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r6, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000980)=0xffffffffffffffff, 0x4)
bpf$LINK_DETACH(0x22, &(0x7f00000009c0)=r7, 0x4)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000a00)={0x7, 'bond_slave_0\x00', {0x80000001}, 0xc})
syz_init_net_socket$llc(0x1a, 0x0, 0x0) (async)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
sendmsg$inet(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000a40)="8b62a8408bb28a0420074703831125d91a86011d79e2c47c8f22260c046eb8df849657418546", 0x26}, {&(0x7f0000000a80)="79e00c052ab2d3669b2c545f3dc04a1b77354ed823939d5cee36ef825c2efa5d8d53979c295fa87c8ac965a8e56af6d94a793f64dc5bb60c2595299e0bc986ece04e7a7fa3befc8db9111f88479baa74fdb4ec39225bd10d2ff7f36c1d70676e65e468ec93d1cb453911e20fb314040c3b14fc25db090e7f64dfdbd1cb1f1ce750962f1598f0c296e4a047140b69a196f3a9cbc788baf7c51441e7e806556c64d72b3d98c4e3f1c1d4972360e14e9c92a8f1", 0xb2}, {&(0x7f0000000b40)="1864850c082a0d5eb9297fc4158a8d9cb58fed31a7d3f788cde26b0274485b37cc86f3846f92ac1243f4ce936baf5969ca2e8ccf6cc2777540588c88c306eb7f5dc41ecd9a7bdd9006676dc84f91b6ae8af48de5a101c9f83f4a1115334edd4200a3aa7eaa06cfe8533bf3be3a9052c7df48a737bd5adbccb6a3fcc0c1d3333ea4fc6e8aeede4b9590a3dbb822f45e2e071eed868c686306101210f7fa287e09a19eab83c070e2f999a585d69bf0a7b85e80d110ceddfefcaf6757bad148bf4229a606a948c6479ef5173d2ea483", 0xce}], 0x3}, 0x4001)
unshare(0x2010000) (async)
unshare(0x2010000)
socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r0)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000dc0)={&(0x7f0000000cc0), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, r8, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x29}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040)
ioctl$BTRFS_IOC_QGROUP_CREATE(r7, 0x4010942a, &(0x7f0000000e00)={0x0, 0x9})
r9 = syz_init_net_socket$llc(0x1a, 0x0, 0x0)
getsockopt$llc_int(r9, 0x10c, 0x9, &(0x7f0000000e40), &(0x7f0000000e80)=0x4) (async)
getsockopt$llc_int(r9, 0x10c, 0x9, &(0x7f0000000e40), &(0x7f0000000e80)=0x4)
socket$igmp(0x2, 0x3, 0x2) (async)
r10 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000f40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x468, 0x228, 0x310, 0xc0, 0x310, 0xc0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x6, &(0x7f0000000ec0), {[{{@ip={@private=0xa010101, @broadcast, 0xff, 0xff, 'batadv0\x00', 'veth0\x00', {0xff}, {}, 0x67, 0x0, 0x48}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0xe6, 0x2}}}, {{@ip={@multicast1, @private=0xa010101, 0xff000000, 0x0, 'syz_tun\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x5c, 0x2, 0x3}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x2, 0x4, 0x5, 0x3], 0x1, 0x2}, {0xffffffffffffffff, [0x4, 0x2, 0x6, 0x4, 0x5, 0x3], 0x1, 0x5}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x21, 0x7, 0x2}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c8)
r11 = gettid()
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001480), &(0x7f00000014c0)=0xc) (async)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001480)={<r12=>0x0}, &(0x7f00000014c0)=0xc)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x68, r8, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x33}, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_PID={0x8, 0x52, r11}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x54}, @NL80211_ATTR_PID={0x8, 0x52, r12}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x37}}]}, 0x68}}, 0x40040)

620.930343ms ago: executing program 4 (id=1411):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000000000000000005000000000000005f5f"], 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r3}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_tracing={0x1a, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000008000000000000ff0300008520000004000000950000000000000018220000", @ANYRES32=r0, @ANYBLOB="167b816a27000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0xd876, 0x34, &(0x7f0000000400)=""/52, 0xc1100, 0x50, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0xc, 0x8000, 0x9}, 0x10, 0xe450, r1, 0x3, &(0x7f0000000600)=[r0], &(0x7f0000000640)=[{0x1, 0x3, 0x8, 0xa}, {0x5, 0x5, 0xd, 0x6}, {0x3, 0x3, 0x10, 0xb}], 0x10, 0x8, @void, @value}, 0x94)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
pselect6(0x40, &(0x7f0000000780)={0x1, 0x80000001, 0x1823, 0x10000, 0x10001, 0x7, 0x5, 0x70}, &(0x7f00000007c0)={0xd7c8, 0x8001, 0xffffffffffff543b, 0xffff, 0x0, 0x9, 0x8, 0x8}, &(0x7f0000000800)={0x1, 0xb, 0x9, 0x4, 0x400, 0x3, 0x0, 0x80}, &(0x7f0000000840)={0x77359400}, &(0x7f0000000900)={&(0x7f0000000880)={[0xeb]}, 0x8})
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_int(r5, &(0x7f00000000c0), 0x12)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@o_path={&(0x7f0000000740)='./file0\x00', r5, 0x4000, r2}, 0x12)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

551.236016ms ago: executing program 0 (id=1412):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="e0", 0x1}], 0x1}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRESDEC=r0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}]}, 0x18}}, 0xc000) (async)
r2 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='-7G'], 0x9)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfff3}, {0x0, 0xfff1}, {0xffe0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000094}, 0x4041000)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000000)={r7, @in={{0x2, 0x0, @empty}}}, 0x90)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r8, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5ee17688a8006c00030100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605007f71174aa9", 0xb8) (async, rerun: 64)
r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x40, 0x8, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 64)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r9, &(0x7f0000001780), 0x0}, 0x20)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000040)={r7, 0x2}, 0x8)

523.722273ms ago: executing program 2 (id=1413):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="800100001000010000000008000000000a0101010000000000000000000000000000000000000000000000000000000000008000000000000000802000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x180}}, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000040)="b5", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x78}}], 0x2, 0x3404c8d4)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d72700900000000000000000000180012800800010070707000"], 0x4c}}, 0x0)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r3, &(0x7f0000000080)={0xa, 0x0, 0x2, @loopback, 0x0, 0x2}, 0x20)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="557b000000000000280012800b00010067656e65766500001800028008000b4000000000060005000000000004000600"], 0x48}}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20)
bind$alg(r5, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58)

460.702511ms ago: executing program 3 (id=1414):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'tunl0\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000003c40)=@newtaction={0x90, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r3}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020300001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fc010000000000000000000000000000000000000000000004000400000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000aa"], 0xd8}}, 0x0)

385.098297ms ago: executing program 4 (id=1415):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6(0xa, 0x3, 0x8)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="61190000000000000cc765da47b9baaefbf4e312fdeacf15d503437b8299e11fa46f2e1b73894392c2365b74ba8ace68dc8b83b087b8c2a2df95b13df1098e975765223069a72506cc6850d85560941cae4a48997d9e9ba019d4de144b8e53fd6eee216ef41e4ede1d4e4fc488b51f3761a3587652989ed748200dd5fcce4e1c2e36c7b7d454925dbd670f6062bbb7b101479fe31650eba6a2e949628f23f65f6e05320d49468999ff083075bbceba7d0590c6852311b5f0b70b7f73a57ee55489c402192376f4d782f4186d9aa500010000000000000000"], 0xd8)
sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000001080)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000040)={0x8, 0x8, 0x4, 0xe, 0x1, 0x7, 0x7fffffff, 0x4e3b, r5}, 0x20)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000000)={r5, 0x4}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000000)={r5, 0x5}, 0x8)
setsockopt(r1, 0x84, 0x80, &(0x7f0000000040)="020000000980ffff", 0x8)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0)
mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r6, 0x913e0000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x681160f014300db1, 0x28011, r7, 0x1000)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r8, 0x1000)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000000240)={<r9=>r5, 0xc8b2}, &(0x7f00000002c0)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000300)={0x0, 0x400, 0x4, 0x1, 0xfff, 0x0, 0x4, 0x100, r9}, 0x20)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r11, 0x0)
ioctl$FS_IOC_RESVSP(r10, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000})

285.464979ms ago: executing program 3 (id=1416):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10, &(0x7f0000001380)}}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000ac0)=@newtaction={0x2a4, 0x30, 0x20, 0x70bd2b, 0x25dfdbff, {}, [{0x290, 0x1, [@m_mirred={0x104, 0x6, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xb, 0x10001, 0x0, 0x3, 0x9}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0xfffffffc, 0x2, 0x639, 0xa}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x5, 0xfffffffffffffffd, 0xb, 0x400}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0xcf6d, 0x5, 0x3, 0x108d}, 0x2}}]}, {0x55, 0x6, "69d23283299e2211998b9dfd147aeb1410b2f39e1ec0affc5bae7dc126706c00756fce7bde468c1aa78c81e053587b9950548a45cfeb302d22ad0a131c4565c9910179a11988577d3ebbcdc113b5d76d65"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x14c, 0x1f, 0x0, 0x0, {{0xd}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0xd, 0x0, 0x1, 0x1}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x9, 0x7, 0xbebe, 0x3}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x4, 0x1, 0xba, 0x7fff}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfbfff3df, 0x6, 0xffffffffffffffff, 0x4, 0x3}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x5, 0x8, 0x4685, 0x7fffdfff}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4a302503, 0x189e, 0x0, 0x800, 0xc}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x9fa, 0x20000000, 0xc299, 0x40009}, 0x79a}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x30, 0x4, 0x4, 0x9, 0x8}, 0x10}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x369c, 0x0, 0x7, 0x80000001, 0x13}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10001, 0x6, 0x10000000, 0x44d9, 0xfffffe01}, 0xe54}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4}}}}, @m_skbedit={0x3c, 0x8, 0x0, 0x0, {{0xc}, {0x4}, {0xd, 0x6, "6a8afd0ce78ed1a3b1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x2a4}}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={'gretap0\x00', <r2=>0x0, 0x7, 0x700, 0xfffffff2, 0xfffffff4, {{0x7, 0x4, 0x3, 0x20, 0x1c, 0x67, 0x0, 0x10, 0x4, 0x0, @loopback, @loopback, {[@generic={0x86, 0x7, "dc809f9328"}]}}}}})
setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f00000000c0)={@private=0xa010100, @private=0xa010100, r2}, 0xc)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
socket$packet(0x11, 0x3, 0x300)

239.560838ms ago: executing program 0 (id=1417):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000020100850000003100000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)

59.953936ms ago: executing program 0 (id=1418):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000380)='tlb_flush\x00', r3}, 0x10) (async, rerun: 64)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async, rerun: 64)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
r5 = socket$igmp6(0xa, 0x3, 0x2)
r6 = socket$kcm(0x2, 0xa, 0x2) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001", @ANYRES8=r5], 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async, rerun: 64)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (rerun: 64)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) (async, rerun: 32)
syz_emit_ethernet(0x86, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts={0x80, 0x1, '\x00', [@ra={0x5, 0x3a}, @ra={0x5, 0x2, 0x6}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) (async, rerun: 32)
write$tun(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)

0s ago: executing program 1 (id=1419):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x210, 0x940c, 0x3002, 0x0, 0x2c0, 0x348, 0x3d8, 0x3d8, 0x348, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x0, {0x0, 0x4000000000000}, [@common=@hl={{0x28}, {0x3, 0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0xc58, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x16, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="180100000000004000000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x1, 0xf0, &(0x7f00000007c0)=""/240, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
socket$inet_mptcp(0x2, 0x1, 0x106)

kernel console output (not intermixed with test programs):

c: adding ib device syz0 with port count 1
[   96.952500][ T6236] smc:    ib device syz0 port 1 has pnetid 
[   96.960629][   T10] lo speed is unknown, defaulting to 1000
[   96.999726][ T6236] lo speed is unknown, defaulting to 1000
[   97.572472][ T6236] lo speed is unknown, defaulting to 1000
[   97.624238][   T52] tipc: Node number set to 1
[   97.977664][ T6282] lo speed is unknown, defaulting to 1000
[   98.095301][ T6284] netlink: 'syz.4.88': attribute type 29 has an invalid length.
[   98.120217][ T6284] netlink: 'syz.4.88': attribute type 29 has an invalid length.
[   98.287883][ T6236] lo speed is unknown, defaulting to 1000
[   98.355409][ T6319] netlink: 'syz.2.96': attribute type 3 has an invalid length.
[   98.445189][ T6322] delete_channel: no stack
[   98.630643][ T6236] lo speed is unknown, defaulting to 1000
[   98.640250][ T6322] delete_channel: no stack
[   98.768494][ T6333] xt_SECMARK: invalid mode: 0
[   98.952062][ T6339] ieee802154 phy0 wpan0: encryption failed: -22
[   99.088845][ T6236] lo speed is unknown, defaulting to 1000
[   99.129887][ T6342] netlink: 'syz.3.104': attribute type 11 has an invalid length.
[   99.439431][ T6236] lo speed is unknown, defaulting to 1000
[   99.477972][ T6356] ipt_ECN: cannot use operation on non-tcp rule
[   99.623023][ T6360] syzkaller0: entered allmulticast mode
[   99.654824][ T6357] syzkaller0 (unregistering): left allmulticast mode
[   99.675559][ T5145] Bluetooth: hci4: command 0x0405 tx timeout
[  100.483927][ T6382] __nla_validate_parse: 5 callbacks suppressed
[  100.483947][ T6382] netlink: 16 bytes leftover after parsing attributes in process `syz.1.117'.
[  100.509724][ T6383] dccp_close: ABORT with 284 bytes unread
[  101.015632][ T6398] netlink: 52 bytes leftover after parsing attributes in process `syz.4.123'.
[  101.103655][ T6404] xt_socket: unknown flags 0x8
[  101.140337][ T6408] netlink: 'syz.2.124': attribute type 126 has an invalid length.
[  101.455635][ T6420] xt_SECMARK: invalid mode: 0
[  102.001961][ T6441] netlink: 16 bytes leftover after parsing attributes in process `syz.2.133'.
[  102.162487][ T6449] netlink: 24 bytes leftover after parsing attributes in process `syz.3.134'.
[  102.563851][ T6475] netlink: 'syz.2.140': attribute type 10 has an invalid length.
[  104.189923][ T6475] 8021q: adding VLAN 0 to HW filter on device team0
[  104.203179][ T6475] bond0: (slave team0): Enslaving as an active interface with an up link
[  104.263079][ T6481] lo speed is unknown, defaulting to 1000
[  104.501840][ T6496] netlink: 21 bytes leftover after parsing attributes in process `syz.1.146'.
[  104.575383][ T6496] gretap0: entered promiscuous mode
[  104.776629][ T6507] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  105.175337][ T6530] netlink: 'syz.3.154': attribute type 10 has an invalid length.
[  105.207583][ T6530] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.215337][ T6530] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.325187][ T6530] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.333366][ T6530] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.340905][ T6530] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.348216][ T6530] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.487201][ T6546] netlink: 'syz.1.157': attribute type 1 has an invalid length.
[  105.509838][ T6530] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  105.654181][ T6546] netlink: 16 bytes leftover after parsing attributes in process `syz.1.157'.
[  105.659281][ T6547] netlink: 'syz.4.158': attribute type 32 has an invalid length.
[  105.717005][ T6547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.158'.
[  105.763617][ T6557] netlink: 'syz.4.158': attribute type 3 has an invalid length.
[  105.775185][ T6554] bond1: (slave gretap1): making interface the new active one
[  105.810696][ T6554] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  105.831060][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.158'.
[  105.837373][ T6547] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  106.387105][ T6564] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.425193][ T6573] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  106.628591][ T6564] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.795771][ T6564] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.013752][ T6564] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.038899][ T6607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.172'.
[  107.105401][ T6610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.172'.
[  107.330517][ T6564] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.361580][ T6618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.174'.
[  107.404136][ T6564] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.441233][ T6564] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.497581][ T6564] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.825989][ T6631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.177'.
[  108.055291][ T6642] netlink: 68 bytes leftover after parsing attributes in process `syz.3.180'.
[  108.197998][ T6648] netlink: 24 bytes leftover after parsing attributes in process `syz.2.181'.
[  108.240001][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.181'.
[  109.121969][ T6659] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.270126][ T6659] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.397173][ T6659] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.549126][ T6659] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.831587][ T6681] xt_CT: No such helper "pptp"
[  109.873324][ T6681] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  110.136325][ T6681] batman_adv: batadv0: Removing interface: batadv_slave_1
[  110.361879][ T6659] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.438276][ T6659] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.525809][ T6659] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.549963][ T6703] lo speed is unknown, defaulting to 1000
[  110.610060][ T6659] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.698061][ T6711] __nla_validate_parse: 3 callbacks suppressed
[  110.698082][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.194'.
[  110.999761][ T6718] netlink: 'syz.3.197': attribute type 12 has an invalid length.
[  111.029983][ T6718] netlink: 132 bytes leftover after parsing attributes in process `syz.3.197'.
[  111.142695][ T6723] sctp: [Deprecated]: syz.1.198 (pid 6723) Use of int in maxseg socket option.
[  111.142695][ T6723] Use struct sctp_assoc_value instead
[  111.372625][ T6730] sch_tbf: peakrate 8 is lower than or equals to rate 12 !
[  111.989721][ T6747] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (14)
[  112.121075][ T6747] netlink: 'syz.0.205': attribute type 1 has an invalid length.
[  112.183688][ T6749] netlink: 'syz.0.205': attribute type 1 has an invalid length.
[  112.225862][ T6747] netlink: 'syz.0.205': attribute type 3 has an invalid length.
[  112.286836][ T6747] netlink: 224 bytes leftover after parsing attributes in process `syz.0.205'.
[  112.332796][ T6747] NCSI netlink: No device for ifindex 246
[  112.901285][ T6773] netlink: 32 bytes leftover after parsing attributes in process `syz.1.213'.
[  112.935223][ T6773] netlink: 32 bytes leftover after parsing attributes in process `syz.1.213'.
[  113.127058][ T6780] netlink: 'syz.1.213': attribute type 303 has an invalid length.
[  113.199530][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.213'.
[  113.285972][ T6776] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  113.296279][ T6776] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  113.324189][ T6784] netlink: 20 bytes leftover after parsing attributes in process `syz.4.215'.
[  113.352897][ T6784] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  113.438206][ T6784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.215'.
[  113.937777][ T6800] team0: Device gtp0 is of different type
[  114.135303][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.220'.
[  114.365960][ T6823] netlink: 20 bytes leftover after parsing attributes in process `syz.1.221'.
[  115.609515][ T6857] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes
[  116.078976][ T6864] lo speed is unknown, defaulting to 1000
[  116.796332][ T6865] lo speed is unknown, defaulting to 1000
[  117.226911][ T6905] __nla_validate_parse: 1 callbacks suppressed
[  117.226935][ T6905] netlink: 736 bytes leftover after parsing attributes in process `syz.2.245'.
[  117.278534][ T6903] pim6reg: entered allmulticast mode
[  117.390520][ T6906] pim6reg: left allmulticast mode
[  117.587182][ T6910] netlink: 40 bytes leftover after parsing attributes in process `syz.4.246'.
[  117.772777][ T6903] lo speed is unknown, defaulting to 1000
[  117.998273][ T6920] bridge_slave_0: left allmulticast mode
[  118.022263][ T6920] bridge_slave_0: left promiscuous mode
[  118.028264][ T6920] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.117707][ T6927] netlink: 48 bytes leftover after parsing attributes in process `syz.2.250'.
[  118.696150][ T6920] bridge_slave_1: left allmulticast mode
[  118.702792][ T6920] bridge_slave_1: left promiscuous mode
[  118.708977][ T6920] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.765204][ T6920] bond0: (slave bond_slave_0): Releasing backup interface
[  118.797149][ T6920] bond0: (slave bond_slave_1): Releasing backup interface
[  118.861834][ T6920] team0: Port device team_slave_0 removed
[  118.878897][ T6920] team0: Port device team_slave_1 removed
[  118.893235][ T6920] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  118.900854][ T6920] batman_adv: batadv0: Removing interface: batadv_slave_0
[  118.911724][ T6920] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  118.919406][ T6920] batman_adv: batadv0: Removing interface: batadv_slave_1
[  118.969878][ T6932] veth1_macvtap: left promiscuous mode
[  119.007832][ T6933] lo speed is unknown, defaulting to 1000
[  119.173305][ T6939] sctp: [Deprecated]: syz.4.254 (pid 6939) Use of int in max_burst socket option.
[  119.173305][ T6939] Use struct sctp_assoc_value instead
[  119.469987][ T6950] netlink: 'syz.2.256': attribute type 1 has an invalid length.
[  119.525646][ T6945] xt_CT: No such helper "pptp"
[  119.530724][ T6950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.256'.
[  119.553550][ T6950] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.585423][ T6950] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.089915][ T6968] netlink: 240 bytes leftover after parsing attributes in process `syz.1.259'.
[  120.115447][ T6968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.259'.
[  120.172444][ T6968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.259'.
[  120.348702][ T6973] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  120.380318][ T6973] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  120.719547][ T6978] set match dimension is over the limit!
[  120.824028][ T6978] netlink: 20 bytes leftover after parsing attributes in process `syz.4.264'.
[  121.400150][ T6990] netlink: 96 bytes leftover after parsing attributes in process `syz.2.269'.
[  121.627876][ T6996] xt_SECMARK: invalid mode: 0
[  121.879750][ T6999] lo speed is unknown, defaulting to 1000
[  121.905629][ T6984] netlink: 44 bytes leftover after parsing attributes in process `syz.0.266'.
[  123.143584][ T7048] xt_SECMARK: invalid mode: 0
[  123.395334][ T7054] netlink: 'syz.0.286': attribute type 1 has an invalid length.
[  123.499094][ T7054] 8021q: adding VLAN 0 to HW filter on device bond1
[  123.622864][ T7061] netlink: 'syz.1.287': attribute type 1 has an invalid length.
[  123.813829][ T7066] netlink: 'syz.4.289': attribute type 1 has an invalid length.
[  124.161938][ T7076] netlink: 68 bytes leftover after parsing attributes in process `syz.4.293'.
[  124.190954][ T7079] netlink: 'syz.1.294': attribute type 27 has an invalid length.
[  124.229584][ T7080] netlink: 'syz.2.295': attribute type 10 has an invalid length.
[  124.386799][ T7086] xt_SECMARK: invalid mode: 0
[  124.550789][ T7088] netlink: 44 bytes leftover after parsing attributes in process `syz.0.297'.
[  125.329778][ T7111] netlink: 'syz.4.304': attribute type 10 has an invalid length.
[  125.647904][ T7126] IPVS: set_ctl: invalid protocol: 135 100.1.1.1:20000
[  125.732486][ T7131] netlink: 68 bytes leftover after parsing attributes in process `syz.4.311'.
[  125.856793][ T7134] Cannot find map_set index 0 as target
[  125.988516][ T7143] netlink: 76 bytes leftover after parsing attributes in process `syz.2.315'.
[  126.044204][ T7144] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  126.601235][ T7156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.320'.
[  126.632725][ T7156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.320'.
[  126.641990][ T7156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.320'.
[  126.669437][ T7160] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  126.674177][ T7161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.320'.
[  126.704277][ T7161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.320'.
[  126.775719][ T7140] dccp_close: ABORT with 36 bytes unread
[  126.909689][ T7168] netlink: 132 bytes leftover after parsing attributes in process `syz.2.323'.
[  127.178605][ T7181] xt_CT: You must specify a L4 protocol and not use inversions on it
[  127.202320][ T7185] netlink: 'syz.1.330': attribute type 1 has an invalid length.
[  127.291463][ T7185] 8021q: adding VLAN 0 to HW filter on device bond2
[  127.462033][ T7196] xt_TCPMSS: Only works on TCP SYN packets
[  127.782347][   T10] IPVS: starting estimator thread 0...
[  127.788270][ T7207] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  127.858722][ T7216] 8021q: adding VLAN 0 to HW filter on device bond3
[  127.869133][ T7216] bond0: (slave bond3): Enslaving as an active interface with an up link
[  127.878293][ T7213] IPVS: using max 24 ests per chain, 57600 per kthread
[  128.685847][ T7257] netlink: 'syz.4.353': attribute type 1 has an invalid length.
[  128.714859][ T7257] 8021q: adding VLAN 0 to HW filter on device bond4
[  128.855781][ T7263] 8021q: adding VLAN 0 to HW filter on device bond4
[  128.887905][ T7263] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  128.935556][ T7263] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  129.057455][ T7269] lo speed is unknown, defaulting to 1000
[  129.189034][ T7283] lo: entered promiscuous mode
[  129.403298][ T7295] __nla_validate_parse: 9 callbacks suppressed
[  129.403320][ T7295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.362'.
[  129.504921][ T7295] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  129.768396][ T7311] netlink: 'syz.2.367': attribute type 1 has an invalid length.
[  129.904664][ T7315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.369'.
[  129.913870][ T7315] netlink: 24 bytes leftover after parsing attributes in process `syz.1.369'.
[  129.983995][ T7319] netlink: 'syz.2.370': attribute type 13 has an invalid length.
[  129.991990][ T7319] macvtap0: entered promiscuous mode
[  130.023820][ T7319] macvtap0: refused to change device tx_queue_len
[  130.051813][ T7321] xt_SECMARK: invalid mode: 0
[  130.145865][ T7326] tap0: tun_chr_ioctl cmd 1074025673
[  130.179847][ T7324] tap0: tun_chr_ioctl cmd 35111
[  130.198978][ T7319] lo speed is unknown, defaulting to 1000
[  130.268470][ T7331] tap0: tun_chr_ioctl cmd 35107
[  130.515461][ T7325] lo speed is unknown, defaulting to 1000
[  130.959654][ T7334] lo speed is unknown, defaulting to 1000
[  131.288906][ T7360] netlink: 28 bytes leftover after parsing attributes in process `syz.0.383'.
[  131.329764][ T7360] netlink: 'syz.0.383': attribute type 7 has an invalid length.
[  131.343766][ T7360] netlink: 'syz.0.383': attribute type 8 has an invalid length.
[  131.378247][ T7360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.383'.
[  131.444435][ T7360] ip6gretap0: entered promiscuous mode
[  131.451184][ T7360] erspan0: entered promiscuous mode
[  131.489283][ T7360] erspan0: left promiscuous mode
[  131.499453][ T7360] ip6gretap0: left promiscuous mode
[  131.537543][ T7367] netlink: 68 bytes leftover after parsing attributes in process `syz.1.385'.
[  131.575445][ T7366] netlink: 68 bytes leftover after parsing attributes in process `syz.4.386'.
[  132.821627][ T7390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.394'.
[  132.864059][ T7390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.394'.
[  132.905047][ T7390] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  132.916794][ T7390] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  132.937564][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.397'.
[  132.961293][ T7395] xt_SECMARK: invalid mode: 0
[  133.008832][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805f722800: rx timeout, send abort
[  133.276730][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  133.285257][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  133.508878][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805f722c00: rx timeout, send abort
[  133.518588][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805f722800: abort rx timeout. Force session deactivation
[  134.017412][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805f722c00: abort rx timeout. Force session deactivation
[  134.158220][ T7422] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  134.401369][ T7429] Driver unsupported XDP return value 0 on prog  (id 154) dev N/A, expect packet loss!
[  134.538628][ T7438] xt_SECMARK: invalid mode: 0
[  135.538120][ T7436] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.551976][ T7436] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.563131][ T7436] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.571684][ T7436] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.645628][ T7442] 8021q: adding VLAN 0 to HW filter on device bond0
[  135.663430][ T7442] 8021q: adding VLAN 0 to HW filter on device team0
[  135.677192][ T7442] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  135.774012][ T7442] syz.4.406 (7442) used greatest stack depth: 18160 bytes left
[  136.263768][ T7480] xt_SECMARK: invalid mode: 0
[  136.668639][ T7499] __nla_validate_parse: 2 callbacks suppressed
[  136.668660][ T7499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.426'.
[  137.167782][ T7520] tun0: tun_chr_ioctl cmd 1074025673
[  137.187688][ T7513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.433'.
[  137.230338][ T7513] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  137.280103][ T7519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.435'.
[  137.289378][ T7519] tipc: Started in network mode
[  137.300675][ T7519] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  137.330428][ T7519] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000
[  137.346070][ T7519] tipc: Enabled bearer <udp:syz1>, priority 10
[  137.818244][ T7535] netlink: 'syz.4.441': attribute type 8 has an invalid length.
[  138.462432][   T10] tipc: Node number set to 1
[  138.466291][ T7556] netlink: 68 bytes leftover after parsing attributes in process `syz.1.447'.
[  138.546310][ T7555] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  138.697464][ T7563] xt_SECMARK: invalid mode: 0
[  138.884295][ T7566] syz_tun: entered allmulticast mode
[  139.025793][ T7570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.454'.
[  139.042425][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.454'.
[  139.208245][ T7575] netlink: 28 bytes leftover after parsing attributes in process `syz.2.457'.
[  139.634560][ T7584] lo speed is unknown, defaulting to 1000
[  139.645035][ T7589] ip6t_srh: unknown srh invflags 4000
[  139.813483][ T7593] netlink: 24 bytes leftover after parsing attributes in process `syz.2.462'.
[  139.831915][ T7593] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  139.869727][ T7564] syz_tun: left allmulticast mode
[  140.186341][ T7596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.464'.
[  140.212983][ T7596] tipc: Started in network mode
[  140.231253][ T7596] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  140.283309][ T7596] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000
[  140.338714][ T7596] tipc: Enabled bearer <udp:syz1>, priority 10
[  140.683051][ T7611] xt_SECMARK: invalid mode: 0
[  140.881915][ T7619] netlink: 68 bytes leftover after parsing attributes in process `syz.3.471'.
[  141.266487][ T7636] tipc: Started in network mode
[  141.271565][ T7636] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  141.281484][ T7636] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  141.402909][ T5837] tipc: Node number set to 1
[  142.016689][ T7671] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  142.047673][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.068214][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.120445][ T7671] __nla_validate_parse: 1 callbacks suppressed
[  142.120467][ T7671] netlink: 64 bytes leftover after parsing attributes in process `syz.3.487'.
[  142.445927][ T7702] netem: incorrect gi model size
[  142.451257][ T7702] netem: change failed
[  142.490704][ T7703] netlink: 24 bytes leftover after parsing attributes in process `syz.1.496'.
[  142.605869][ T7707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.498'.
[  142.631556][ T7710] netlink: 68 bytes leftover after parsing attributes in process `syz.2.499'.
[  142.844120][ T7716] sctp: [Deprecated]: syz.4.502 (pid 7716) Use of int in maxseg socket option.
[  142.844120][ T7716] Use struct sctp_assoc_value instead
[  142.896026][ T5891] IPVS: starting estimator thread 0...
[  142.915092][ T7716] netlink: 28 bytes leftover after parsing attributes in process `syz.4.502'.
[  142.960014][ T7725] netlink: 16 bytes leftover after parsing attributes in process `syz.1.501'.
[  143.042521][ T7720] IPVS: using max 21 ests per chain, 50400 per kthread
[  143.256178][ T7735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.506'.
[  143.304409][ T7735] netlink: 28 bytes leftover after parsing attributes in process `syz.0.506'.
[  143.367363][ T7735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.506'.
[  143.473631][ T7735] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  143.528888][ T7735] netlink: 'syz.0.506': attribute type 10 has an invalid length.
[  143.600950][ T7742] netlink: 76 bytes leftover after parsing attributes in process `syz.3.508'.
[  143.699438][ T7746] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20003
[  143.812728][ T7752] IPv6: Can't replace route, no match found
[  143.917892][ T7756] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  143.968361][ T7758] 8021q: adding VLAN 0 to HW filter on device team0
[  143.985589][ T7758] bond0: (slave team0): Releasing backup interface
[  144.015607][ T7758] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  144.034175][ T7761] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  144.100184][ T7761] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.127742][ T7768] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.168083][ T7765] lo speed is unknown, defaulting to 1000
[  144.258535][ T7752] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.477507][ T7752] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.654146][ T7752] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.714040][ T7782] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ1
[  145.116649][ T7752] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.399176][ T7752] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  145.532281][ T7752] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  145.610153][ T7752] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  145.668914][ T7752] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  145.716973][ T7806] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  146.562518][ T7845] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  146.851002][ T7851] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  146.976478][ T7857] sctp: [Deprecated]: syz.4.551 (pid 7857) Use of int in max_burst socket option.
[  146.976478][ T7857] Use struct sctp_assoc_value instead
[  147.090526][ T7861] Bluetooth: MGMT ver 1.23
[  147.199320][ T7869] __nla_validate_parse: 8 callbacks suppressed
[  147.199350][ T7869] netlink: 24 bytes leftover after parsing attributes in process `syz.2.555'.
[  147.300393][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.555'.
[  147.577183][ T7894] netlink: 68 bytes leftover after parsing attributes in process `syz.4.561'.
[  147.815124][ T7906] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  148.010755][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.564'.
[  148.034141][ T7908] lo speed is unknown, defaulting to 1000
[  148.604040][ T7916] netlink: 'syz.1.568': attribute type 1 has an invalid length.
[  148.626092][ T7916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.568'.
[  148.635133][ T7917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.570'.
[  148.687037][ T7918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  148.747770][ T7921] x_tables: unsorted entry at hook 2
[  149.090729][ T7928] netlink: 'syz.2.573': attribute type 1 has an invalid length.
[  149.230563][ T7930] netlink: 9 bytes leftover after parsing attributes in process `syz.2.573'.
[  149.771190][ T7946] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  149.883976][ T7953] netlink: 20 bytes leftover after parsing attributes in process `syz.4.582'.
[  149.920663][ T7954] netlink: 100 bytes leftover after parsing attributes in process `syz.4.582'.
[  149.936257][ T7954] netlink: 100 bytes leftover after parsing attributes in process `syz.4.582'.
[  150.058625][ T7958] netlink: 'syz.1.584': attribute type 1 has an invalid length.
[  150.097409][ T7958] vlan2: entered promiscuous mode
[  150.104052][ T7958] vlan2: entered allmulticast mode
[  150.241972][ T7958] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.980154][ T8004] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  151.199290][ T8009] netlink: 'syz.0.599': attribute type 2 has an invalid length.
[  152.063265][ T8047] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  152.752763][ T8074] __nla_validate_parse: 5 callbacks suppressed
[  152.752783][ T8074] netlink: 32 bytes leftover after parsing attributes in process `syz.1.621'.
[  152.801295][ T8089] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  152.890320][ T8090] lo speed is unknown, defaulting to 1000
[  152.919454][ T8095] netlink: 56 bytes leftover after parsing attributes in process `syz.3.631'.
[  152.962468][ T8095] netlink: 'syz.3.631': attribute type 2 has an invalid length.
[  153.515308][ T8112] netlink: 'syz.1.638': attribute type 1 has an invalid length.
[  153.703571][ T8120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.642'.
[  153.743368][ T8120] tipc: Started in network mode
[  153.748321][ T8120] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  153.803292][ T8120] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000
[  153.834156][ T8120] tipc: Enabled bearer <udp:syz1>, priority 10
[  153.841647][ T8130] netlink: 'syz.3.644': attribute type 11 has an invalid length.
[  153.864044][ T8130] netlink: 36 bytes leftover after parsing attributes in process `syz.3.644'.
[  153.901077][ T8125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.644'.
[  154.922073][ T8165] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  154.930666][   T26] tipc: Node number set to 1
[  154.948421][ T8159] lo speed is unknown, defaulting to 1000
[  155.177788][ T8178] xt_SECMARK: invalid mode: 0
[  155.205692][ T8175] netlink: 24 bytes leftover after parsing attributes in process `syz.4.660'.
[  155.252300][ T8175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.660'.
[  155.266483][ T8180] netlink: 76 bytes leftover after parsing attributes in process `syz.1.662'.
[  155.298676][ T8175] netlink: 'syz.4.660': attribute type 5 has an invalid length.
[  156.021993][ T8211] FAULT_INJECTION: forcing a failure.
[  156.021993][ T8211] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  156.078584][ T8211] CPU: 0 UID: 0 PID: 8211 Comm: syz.3.675 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0
[  156.078615][ T8211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  156.078632][ T8211] Call Trace:
[  156.078639][ T8211]  <TASK>
[  156.078648][ T8211]  dump_stack_lvl+0x241/0x360
[  156.078686][ T8211]  ? __pfx_dump_stack_lvl+0x10/0x10
[  156.078710][ T8211]  ? __pfx__printk+0x10/0x10
[  156.078738][ T8211]  ? snprintf+0xda/0x120
[  156.078766][ T8211]  should_fail_ex+0x40a/0x550
[  156.078805][ T8211]  _copy_to_user+0x31/0xb0
[  156.078837][ T8211]  simple_read_from_buffer+0xca/0x150
[  156.078870][ T8211]  proc_fail_nth_read+0x1e9/0x250
[  156.078903][ T8211]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  156.078936][ T8211]  ? rw_verify_area+0x243/0x630
[  156.078958][ T8211]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  156.078990][ T8211]  vfs_read+0x1f8/0xb40
[  156.079014][ T8211]  ? fdget_pos+0x254/0x320
[  156.079047][ T8211]  ? __pfx___mutex_lock+0x10/0x10
[  156.079077][ T8211]  ? __pfx_vfs_read+0x10/0x10
[  156.079103][ T8211]  ? __fget_files+0x2a/0x410
[  156.079135][ T8211]  ? __fget_files+0x395/0x410
[  156.079164][ T8211]  ? __fget_files+0x2a/0x410
[  156.079205][ T8211]  ksys_read+0x18f/0x2b0
[  156.079231][ T8211]  ? __pfx_ksys_read+0x10/0x10
[  156.079254][ T8211]  ? do_syscall_64+0x100/0x230
[  156.079289][ T8211]  ? do_syscall_64+0xb6/0x230
[  156.079324][ T8211]  do_syscall_64+0xf3/0x230
[  156.079355][ T8211]  ? clear_bhb_loop+0x35/0x90
[  156.079389][ T8211]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.079428][ T8211] RIP: 0033:0x7fa4d9f8bb7c
[  156.079450][ T8211] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  156.079466][ T8211] RSP: 002b:00007fa4dadc9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  156.079489][ T8211] RAX: ffffffffffffffda RBX: 00007fa4da1a5fa0 RCX: 00007fa4d9f8bb7c
[  156.079504][ T8211] RDX: 000000000000000f RSI: 00007fa4dadc90a0 RDI: 0000000000000013
[  156.079516][ T8211] RBP: 00007fa4dadc9090 R08: 0000000000000000 R09: 0000000000000000
[  156.079543][ T8211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  156.079555][ T8211] R13: 0000000000000000 R14: 00007fa4da1a5fa0 R15: 00007fff1585c2d8
[  156.079591][ T8211]  </TASK>
[  156.123422][ T8215] netlink: 76 bytes leftover after parsing attributes in process `syz.1.677'.
[  156.510438][ T8221] netlink: 20 bytes leftover after parsing attributes in process `syz.2.680'.
[  156.817040][ T8240] ax25_connect(): syz.0.685 uses autobind, please contact jreuter@yaina.de
[  156.831014][ T8238] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.898815][ T8238] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.979711][ T8238] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.058483][ T8238] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.132019][ T8238] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  157.149776][ T8238] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  157.168961][ T8238] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  157.189891][ T8238] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  157.996377][ T8266] lo speed is unknown, defaulting to 1000
[  158.233866][ T8272] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  158.315345][ T8276] xt_SECMARK: invalid mode: 0
[  158.548950][ T8283] __nla_validate_parse: 2 callbacks suppressed
[  158.548973][ T8283] netlink: 68 bytes leftover after parsing attributes in process `syz.4.701'.
[  158.641542][ T8287] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (14)
[  158.672007][ T8287] netlink: 'syz.3.703': attribute type 1 has an invalid length.
[  158.694536][ T8287] netlink: 'syz.3.703': attribute type 3 has an invalid length.
[  158.720812][ T8287] netlink: 224 bytes leftover after parsing attributes in process `syz.3.703'.
[  158.744117][ T8290] netlink: 'syz.3.703': attribute type 1 has an invalid length.
[  158.758255][ T8287] NCSI netlink: No device for ifindex 246
[  159.211624][ T8301] netlink: 108 bytes leftover after parsing attributes in process `syz.2.707'.
[  159.266796][ T8300] SET target dimension over the limit!
[  159.277521][ T8305] sit0: entered promiscuous mode
[  159.336375][ T8305] netlink: 'syz.3.708': attribute type 1 has an invalid length.
[  159.393290][ T8307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.709'.
[  159.422648][ T8305] netlink: 1 bytes leftover after parsing attributes in process `syz.3.708'.
[  159.430115][ T8307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.709'.
[  159.707108][ T8320] xt_SECMARK: invalid mode: 0
[  160.037258][ T8337] netlink: 104 bytes leftover after parsing attributes in process `syz.2.715'.
[  160.420745][ T8348] bond0: entered promiscuous mode
[  160.426302][ T8348] bond_slave_0: entered promiscuous mode
[  160.471280][ T8348] bond_slave_1: entered promiscuous mode
[  160.493049][ T8348] bond3: entered promiscuous mode
[  160.539873][ T8348] bond0: left promiscuous mode
[  160.552645][ T8348] bond_slave_0: left promiscuous mode
[  160.568033][ T8348] bond_slave_1: left promiscuous mode
[  160.574123][ T8348] bond3: left promiscuous mode
[  160.644014][ T8356] netlink: 68 bytes leftover after parsing attributes in process `syz.2.722'.
[  160.755321][ T8358] netlink: 36 bytes leftover after parsing attributes in process `syz.3.721'.
[  160.860797][ T8358] bridge_slave_1: left allmulticast mode
[  160.922476][ T8358] bridge_slave_1: left promiscuous mode
[  160.966108][ T8358] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.986331][ T8368] netlink: 16 bytes leftover after parsing attributes in process `syz.4.723'.
[  161.014276][ T8358] bridge_slave_0: left allmulticast mode
[  161.040435][ T8358] bridge_slave_0: left promiscuous mode
[  161.063286][ T8358] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.161781][ T8358] bond0: (slave bridge0): Releasing backup interface
[  161.288960][ T8372] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  161.297027][ T8377] batadv0: entered promiscuous mode
[  161.331743][ T8377] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  161.384332][ T8377] batadv0: left promiscuous mode
[  161.919183][ T8401] netlink: 'syz.3.740': attribute type 13 has an invalid length.
[  162.089379][ T8412] xt_SECMARK: invalid mode: 0
[  162.163863][ T8401] gretap0: refused to change device tx_queue_len
[  162.182944][ T8401] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  162.204371][ T8403] netem: invalid attributes len -16
[  162.209648][ T8403] netem: change failed
[  162.256786][ T8418] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.336293][ T8418] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.449807][ T8418] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.541317][ T8418] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.749163][ T8418] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  162.798640][ T8418] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  162.841142][ T8437] ax25_connect(): syz.3.752 uses autobind, please contact jreuter@yaina.de
[  162.851427][ T8437] ax25_connect(): syz.3.752 uses autobind, please contact jreuter@yaina.de
[  162.874399][ T8418] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  162.915698][ T8418] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.178294][ T8450] set match dimension is over the limit!
[  163.287301][ T8444] xt_CT: No such helper "pptp"
[  163.590886][ T8473] __nla_validate_parse: 6 callbacks suppressed
[  163.590906][ T8473] netlink: 40 bytes leftover after parsing attributes in process `syz.3.762'.
[  163.805661][ T8482] lo speed is unknown, defaulting to 1000
[  163.894656][ T8490] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  163.910166][ T8491] netlink: 68 bytes leftover after parsing attributes in process `syz.1.768'.
[  163.927515][ T8488] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  164.056165][ T8488] netlink: 'syz.4.766': attribute type 21 has an invalid length.
[  164.065560][ T8488] netlink: 'syz.4.766': attribute type 20 has an invalid length.
[  164.196185][ T8504] netlink: 'syz.0.770': attribute type 2 has an invalid length.
[  164.225031][ T8504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.770'.
[  164.967116][ T8526] netlink: 'syz.0.775': attribute type 7 has an invalid length.
[  165.184149][ T8540] netlink: 68 bytes leftover after parsing attributes in process `syz.0.781'.
[  165.240862][ T8540] geneve2: entered promiscuous mode
[  165.250264][ T8540] geneve2: entered allmulticast mode
[  165.814495][ T5838] cgroup: fork rejected by pids controller in /syz1
[  166.073459][ T8577] netlink: 60 bytes leftover after parsing attributes in process `syz.0.795'.
[  166.207295][ T8575] syzkaller0: entered allmulticast mode
[  166.242748][ T8575] syzkaller0: entered promiscuous mode
[  166.338470][ T8575] syzkaller0 (unregistering): left promiscuous mode
[  166.368724][ T8575] syzkaller0 (unregistering): left allmulticast mode
[  166.441143][ T5908] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.557022][ T8591] netlink: 'syz.0.797': attribute type 58 has an invalid length.
[  166.639194][ T5908] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.771545][ T5908] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.870070][ T5908] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.117720][ T8615] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  167.134932][ T8614] xt_SECMARK: invalid mode: 0
[  167.210002][ T8617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.805'.
[  167.224554][ T5908] bridge_slave_1: left allmulticast mode
[  167.248685][ T5908] bridge_slave_1: left promiscuous mode
[  167.276460][ T5908] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.457776][ T5145] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  167.467417][ T5145] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  167.477311][ T5145] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  167.487001][ T5145] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  167.501065][ T5145] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  167.508722][ T5145] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  167.807948][ T5908] bond1 (unregistering): (slave gretap1): Releasing active interface
[  168.292046][ T5908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  168.326320][ T5908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  168.346113][ T5908] bond0 (unregistering): (slave bond3): Releasing backup interface
[  168.363008][ T5908] bond0 (unregistering): Released all slaves
[  168.382745][ T5908] bond1 (unregistering): Released all slaves
[  168.553279][ T8634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.809'.
[  168.573273][ T8634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.809'.
[  168.582658][ T8635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.809'.
[  168.591491][ T8635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.809'.
[  168.611391][ T5908] bond2 (unregistering): Released all slaves
[  168.809842][ T5908] bond3 (unregistering): Released all slaves
[  168.878235][ T8622] lo speed is unknown, defaulting to 1000
[  168.994009][ T5908] : left promiscuous mode
[  169.170902][ T5908] tipc: Left network mode
[  169.204142][ T8642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.812'.
[  169.255327][ T8642] netlink: 12 bytes leftover after parsing attributes in process `syz.2.812'.
[  169.433158][ T8646] netlink: 24 bytes leftover after parsing attributes in process `syz.3.814'.
[  169.612442][ T5145] Bluetooth: hci2: command tx timeout
[  169.822700][ T8654] syzkaller0: entered promiscuous mode
[  169.842597][ T8654] syzkaller0: entered allmulticast mode
[  171.672345][ T5145] Bluetooth: hci2: command tx timeout
[  173.728216][ T5908] hsr_slave_0: left promiscuous mode
[  173.734336][ T5908] hsr_slave_1: left promiscuous mode
[  173.740289][ T5908] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  173.748405][ T5908] batman_adv: batadv0: Removing interface: batadv_slave_0
[  173.754016][ T5145] Bluetooth: hci2: command tx timeout
[  173.769097][ T5908] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  173.777066][ T5908] batman_adv: batadv0: Removing interface: batadv_slave_1
[  173.806320][ T5908] veth1_macvtap: left promiscuous mode
[  173.814937][ T5908] veth0_macvtap: left promiscuous mode
[  173.820600][ T5908] veth1_vlan: left promiscuous mode
[  173.829969][ T5908] veth0_vlan: left promiscuous mode
[  174.436849][ T5908] team0 (unregistering): Port device team_slave_1 removed
[  174.487939][ T5908] team0 (unregistering): Port device team_slave_0 removed
[  174.901844][ T8673] lo speed is unknown, defaulting to 1000
[  175.183572][ T8622] chnl_net:caif_netlink_parms(): no params data found
[  175.417412][ T8622] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.432609][ T8622] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.439996][ T8622] bridge_slave_0: entered allmulticast mode
[  175.447622][ T8622] bridge_slave_0: entered promiscuous mode
[  175.456423][ T8622] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.456678][ T8707] netlink: 36 bytes leftover after parsing attributes in process `syz.2.831'.
[  175.463753][ T8622] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.481819][ T8707] netlink: 16 bytes leftover after parsing attributes in process `syz.2.831'.
[  175.482819][ T8622] bridge_slave_1: entered allmulticast mode
[  175.491979][ T8707] netlink: 36 bytes leftover after parsing attributes in process `syz.2.831'.
[  175.508737][ T8622] bridge_slave_1: entered promiscuous mode
[  175.514254][ T8707] netlink: 36 bytes leftover after parsing attributes in process `syz.2.831'.
[  175.662861][ T8709] syzkaller0: entered promiscuous mode
[  175.668590][ T8709] syzkaller0: entered allmulticast mode
[  175.762706][ T8701] lo speed is unknown, defaulting to 1000
[  175.791710][ T8622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  175.832305][ T5145] Bluetooth: hci2: command tx timeout
[  177.756662][ T8622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  177.866775][ T8622] team0: Port device team_slave_0 added
[  177.903507][ T8622] team0: Port device team_slave_1 added
[  177.981830][ T8622] batman_adv: batadv0: Adding interface: batadv_slave_0
[  177.990439][ T8622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  178.053416][ T8622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  178.083017][ T8622] batman_adv: batadv0: Adding interface: batadv_slave_1
[  178.090110][ T8622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  178.123449][ T8622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  178.264339][ T8622] hsr_slave_0: entered promiscuous mode
[  178.277393][ T8622] hsr_slave_1: entered promiscuous mode
[  178.283837][ T8622] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  178.292332][ T8622] Cannot create hsr debugfs directory
[  178.493069][ T8726] lo speed is unknown, defaulting to 1000
[  178.532951][ T8727] netlink: 36 bytes leftover after parsing attributes in process `syz.0.839'.
[  179.129184][ T8738] syzkaller0: entered promiscuous mode
[  179.155453][ T8743] xt_SECMARK: invalid mode: 0
[  179.162249][ T8738] syzkaller0: entered allmulticast mode
[  181.433779][ T8780] xt_SECMARK: invalid mode: 0
[  182.489642][ T8622] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  182.516202][ T8622] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  182.690392][ T8622] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  182.702020][ T8803] netlink: 40 bytes leftover after parsing attributes in process `syz.2.866'.
[  182.713925][ T8803] netlink: 40 bytes leftover after parsing attributes in process `syz.2.866'.
[  182.723789][ T8807] netlink: 'syz.0.869': attribute type 1 has an invalid length.
[  182.737245][ T8622] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  182.745637][ T8807] netlink: 28 bytes leftover after parsing attributes in process `syz.0.869'.
[  182.763548][ T8810] netlink: 68 bytes leftover after parsing attributes in process `syz.4.870'.
[  182.792882][ T8807] netlink: 28 bytes leftover after parsing attributes in process `syz.0.869'.
[  182.807733][ T8811] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  182.821660][ T8810] netlink: 76 bytes leftover after parsing attributes in process `syz.4.870'.
[  182.883869][ T8807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.869'.
[  182.923557][ T8622] 8021q: adding VLAN 0 to HW filter on device bond0
[  183.017304][ T8622] 8021q: adding VLAN 0 to HW filter on device team0
[  183.073167][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.080332][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[  183.116421][ T5961] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.123632][ T5961] bridge0: port 2(bridge_slave_1) entered forwarding state
[  183.212433][ T8825] ax25_connect(): syz.2.875 uses autobind, please contact jreuter@yaina.de
[  183.340036][ T8829] FAULT_INJECTION: forcing a failure.
[  183.340036][ T8829] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  183.420164][ T8829] CPU: 0 UID: 0 PID: 8829 Comm: syz.3.876 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0
[  183.420195][ T8829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  183.420208][ T8829] Call Trace:
[  183.420215][ T8829]  <TASK>
[  183.420223][ T8829]  dump_stack_lvl+0x241/0x360
[  183.420263][ T8829]  ? __pfx_dump_stack_lvl+0x10/0x10
[  183.420287][ T8829]  ? __pfx__printk+0x10/0x10
[  183.420310][ T8829]  ? __pfx_lock_release+0x10/0x10
[  183.420350][ T8829]  should_fail_ex+0x40a/0x550
[  183.420387][ T8829]  _copy_from_user+0x2d/0xb0
[  183.420415][ T8829]  do_ip6t_set_ctl+0x73a/0x1270
[  183.420451][ T8829]  ? nf_setsockopt+0x240/0x2c0
[  183.420473][ T8829]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  183.420505][ T8829]  ? rcu_is_watching+0x15/0xb0
[  183.420528][ T8829]  ? trace_contention_end+0x3c/0x120
[  183.420560][ T8829]  ? __mutex_unlock_slowpath+0x227/0x800
[  183.420601][ T8829]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  183.420629][ T8829]  ? aa_sk_perm+0x96d/0xab0
[  183.420666][ T8829]  ? __pfx_aa_sk_perm+0x10/0x10
[  183.420699][ T8829]  nf_setsockopt+0x295/0x2c0
[  183.420725][ T8829]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  183.420757][ T8829]  do_sock_setsockopt+0x3af/0x720
[  183.420788][ T8829]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  183.420816][ T8829]  ? __fget_files+0x395/0x410
[  183.420845][ T8829]  ? __fget_files+0x2a/0x410
[  183.420883][ T8829]  __x64_sys_setsockopt+0x1ee/0x280
[  183.420912][ T8829]  do_syscall_64+0xf3/0x230
[  183.420943][ T8829]  ? clear_bhb_loop+0x35/0x90
[  183.420975][ T8829]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.421002][ T8829] RIP: 0033:0x7fa4d9f8d169
[  183.421025][ T8829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  183.421048][ T8829] RSP: 002b:00007fa4dadc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  183.421077][ T8829] RAX: ffffffffffffffda RBX: 00007fa4da1a5fa0 RCX: 00007fa4d9f8d169
[  183.421092][ T8829] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003
[  183.421104][ T8829] RBP: 00007fa4dadc9090 R08: 0000000000000478 R09: 0000000000000000
[  183.421117][ T8829] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000001
[  183.421128][ T8829] R13: 0000000000000000 R14: 00007fa4da1a5fa0 R15: 00007fff1585c2d8
[  183.421157][ T8829]  </TASK>
[  183.778121][ T8622] 8021q: adding VLAN 0 to HW filter on device batadv0
[  183.813189][ T8622] veth0_vlan: entered promiscuous mode
[  183.824448][ T8622] veth1_vlan: entered promiscuous mode
[  183.864330][ T8844] macsec1: entered promiscuous mode
[  183.869624][ T8844] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[  183.918486][ T8850] netlink: 68 bytes leftover after parsing attributes in process `syz.0.883'.
[  183.918568][ T8844] macsec1: entered allmulticast mode
[  183.930309][ T8850] netlink: 76 bytes leftover after parsing attributes in process `syz.0.883'.
[  183.944509][ T8844] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode
[  183.983206][ T8851] macsec2: entered promiscuous mode
[  183.989425][ T8851] macsec2: entered allmulticast mode
[  183.995753][ T8854] netlink: 'syz.2.884': attribute type 1 has an invalid length.
[  184.058759][ T8622] veth0_macvtap: entered promiscuous mode
[  184.104657][ T8622] veth1_macvtap: entered promiscuous mode
[  184.158647][ T8622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  184.179025][ T8622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.212349][ T8622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  184.238505][ T8860] netlink: 'syz.4.887': attribute type 3 has an invalid length.
[  184.249590][ T8622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.294056][ T8622] batman_adv: batadv0: Interface activated: batadv_slave_0
[  184.326547][ T8622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  184.360589][ T8622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.375315][ T8867] netlink: 44 bytes leftover after parsing attributes in process `syz.0.890'.
[  184.393916][ T8622] batman_adv: batadv0: Interface activated: batadv_slave_1
[  184.455806][ T8622] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  184.478865][ T8622] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  184.498178][ T8622] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  184.519339][ T8622] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  184.712699][ T2976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  184.739044][ T2976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  184.743744][ T8882] FAULT_INJECTION: forcing a failure.
[  184.743744][ T8882] name failslab, interval 1, probability 0, space 0, times 1
[  184.781510][ T8882] CPU: 0 UID: 0 PID: 8882 Comm: syz.2.895 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0
[  184.781538][ T8882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  184.781550][ T8882] Call Trace:
[  184.781557][ T8882]  <TASK>
[  184.781565][ T8882]  dump_stack_lvl+0x241/0x360
[  184.781596][ T8882]  ? __pfx_dump_stack_lvl+0x10/0x10
[  184.781618][ T8882]  ? __pfx__printk+0x10/0x10
[  184.781640][ T8882]  ? __kmalloc_node_noprof+0xb9/0x4d0
[  184.781699][ T8882]  ? __pfx___might_resched+0x10/0x10
[  184.781731][ T8882]  should_fail_ex+0x40a/0x550
[  184.781768][ T8882]  should_failslab+0xac/0x100
[  184.781797][ T8882]  __kmalloc_node_noprof+0xe1/0x4d0
[  184.781825][ T8882]  ? apparmor_capable+0x13b/0x1b0
[  184.781848][ T8882]  ? __kvmalloc_node_noprof+0x72/0x190
[  184.781886][ T8882]  __kvmalloc_node_noprof+0x72/0x190
[  184.781921][ T8882]  xt_alloc_table_info+0x3d/0xa0
[  184.781945][ T8882]  do_ip6t_set_ctl+0xba0/0x1270
[  184.781983][ T8882]  ? nf_setsockopt+0x240/0x2c0
[  184.782005][ T8882]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  184.782037][ T8882]  ? rcu_is_watching+0x15/0xb0
[  184.782061][ T8882]  ? trace_contention_end+0x3c/0x120
[  184.782094][ T8882]  ? __mutex_unlock_slowpath+0x227/0x800
[  184.782137][ T8882]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  184.782167][ T8882]  ? aa_sk_perm+0x96d/0xab0
[  184.782203][ T8882]  ? __pfx_aa_sk_perm+0x10/0x10
[  184.782235][ T8882]  nf_setsockopt+0x295/0x2c0
[  184.782261][ T8882]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  184.782293][ T8882]  do_sock_setsockopt+0x3af/0x720
[  184.782335][ T8882]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  184.782362][ T8882]  ? __fget_files+0x395/0x410
[  184.782390][ T8882]  ? __fget_files+0x2a/0x410
[  184.782445][ T8882]  __x64_sys_setsockopt+0x1ee/0x280
[  184.782477][ T8882]  do_syscall_64+0xf3/0x230
[  184.782508][ T8882]  ? clear_bhb_loop+0x35/0x90
[  184.782540][ T8882]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.782568][ T8882] RIP: 0033:0x7f761a38d169
[  184.782586][ T8882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  184.782602][ T8882] RSP: 002b:00007f761b216038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  184.782623][ T8882] RAX: ffffffffffffffda RBX: 00007f761a5a5fa0 RCX: 00007f761a38d169
[  184.782638][ T8882] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003
[  184.782650][ T8882] RBP: 00007f761b216090 R08: 0000000000000478 R09: 0000000000000000
[  184.782662][ T8882] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000001
[  184.782689][ T8882] R13: 0000000000000000 R14: 00007f761a5a5fa0 R15: 00007fff586ed4d8
[  184.782718][ T8882]  </TASK>
[  184.782715][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.069610][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.107249][ T8891] xt_SECMARK: invalid mode: 0
[  185.367479][ T8898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  185.412545][ T8898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.468853][ T8904] netlink: 'syz.3.901': attribute type 10 has an invalid length.
[  185.499310][ T8898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  185.552258][ T8898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.572578][ T8898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  185.592215][ T8898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.620020][ T8898] batadv_slave_0: entered promiscuous mode
[  185.634227][ T8898] batadv_slave_0: left promiscuous mode
[  185.691433][ T8904] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  185.796310][ T8911] netlink: 'syz.4.903': attribute type 10 has an invalid length.
[  186.030492][ T8918] pim6reg: entered allmulticast mode
[  186.088233][ T8924] pim6reg: left allmulticast mode
[  186.164586][ T8926] batadv_slave_1: entered promiscuous mode
[  186.170976][ T8927] batadv_slave_0: entered promiscuous mode
[  186.295334][ T8930] netlink: 'syz.3.910': attribute type 3 has an invalid length.
[  186.318526][ T8930] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  186.327814][ T8930] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  186.336635][ T8930] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  186.346127][ T8930] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  186.374440][ T8926] batadv_slave_0: left promiscuous mode
[  186.389490][ T8926] batadv_slave_1: left promiscuous mode
[  186.426280][ T8918] lo speed is unknown, defaulting to 1000
[  186.739303][ T8936] xt_SECMARK: invalid mode: 0
[  187.455057][ T8933] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.462709][ T8933] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.052429][ T8933] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  188.078874][ T8933] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  188.367424][ T8906] syz.2.902: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  188.420514][ T8906] CPU: 0 UID: 0 PID: 8906 Comm: syz.2.902 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0
[  188.420554][ T8906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  188.420568][ T8906] Call Trace:
[  188.420577][ T8906]  <TASK>
[  188.420586][ T8906]  dump_stack_lvl+0x241/0x360
[  188.420641][ T8906]  ? __pfx_dump_stack_lvl+0x10/0x10
[  188.420665][ T8906]  ? __pfx__printk+0x10/0x10
[  188.420691][ T8906]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  188.420719][ T8906]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[  188.420749][ T8906]  warn_alloc+0x278/0x410
[  188.420777][ T8906]  ? __pfx_warn_alloc+0x10/0x10
[  188.420805][ T8906]  ? translate_table+0x179/0x2490
[  188.420835][ T8906]  ? __get_vm_area_node+0x1c8/0x2d0
[  188.420867][ T8906]  ? __get_vm_area_node+0x25c/0x2d0
[  188.420907][ T8906]  __vmalloc_node_range_noprof+0x62f/0x1380
[  188.420977][ T8906]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  188.421001][ T8906]  ? rcu_is_watching+0x15/0xb0
[  188.421027][ T8906]  ? trace_kmalloc+0x1f/0xd0
[  188.421055][ T8906]  ? __kmalloc_node_noprof+0x2ad/0x4d0
[  188.421085][ T8906]  ? __kvmalloc_node_noprof+0x72/0x190
[  188.421124][ T8906]  __kvmalloc_node_noprof+0x142/0x190
[  188.421160][ T8906]  ? translate_table+0x179/0x2490
[  188.421195][ T8906]  translate_table+0x179/0x2490
[  188.421257][ T8906]  ? __pfx_translate_table+0x10/0x10
[  188.421290][ T8906]  ? __might_fault+0xaa/0x120
[  188.421312][ T8906]  ? __pfx_lock_release+0x10/0x10
[  188.421353][ T8906]  ? __virt_addr_valid+0x183/0x530
[  188.421377][ T8906]  ? __might_fault+0xaa/0x120
[  188.421398][ T8906]  ? __might_fault+0xc6/0x120
[  188.421425][ T8906]  ? copy_from_sockptr_offset+0x6b/0xb0
[  188.421463][ T8906]  do_ip6t_set_ctl+0xe4c/0x1270
[  188.421503][ T8906]  ? nf_setsockopt+0x240/0x2c0
[  188.421526][ T8906]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  188.421561][ T8906]  ? rcu_is_watching+0x15/0xb0
[  188.421586][ T8906]  ? trace_contention_end+0x3c/0x120
[  188.421641][ T8906]  ? __mutex_unlock_slowpath+0x227/0x800
[  188.421701][ T8906]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  188.421733][ T8906]  ? aa_sk_perm+0x96d/0xab0
[  188.421775][ T8906]  ? __pfx_aa_sk_perm+0x10/0x10
[  188.421816][ T8906]  nf_setsockopt+0x295/0x2c0
[  188.421845][ T8906]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  188.421880][ T8906]  do_sock_setsockopt+0x3af/0x720
[  188.421913][ T8906]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  188.421945][ T8906]  ? __fget_files+0x395/0x410
[  188.421977][ T8906]  ? __fget_files+0x2a/0x410
[  188.422019][ T8906]  __x64_sys_setsockopt+0x1ee/0x280
[  188.422053][ T8906]  do_syscall_64+0xf3/0x230
[  188.422087][ T8906]  ? clear_bhb_loop+0x35/0x90
[  188.422119][ T8906]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.422147][ T8906] RIP: 0033:0x7f761a38d169
[  188.422178][ T8906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  188.422194][ T8906] RSP: 002b:00007f761b216038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  188.422214][ T8906] RAX: ffffffffffffffda RBX: 00007f761a5a5fa0 RCX: 00007f761a38d169
[  188.422229][ T8906] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003
[  188.422240][ T8906] RBP: 00007f761a40e2a0 R08: 0000000000000478 R09: 0000000000000000
[  188.422252][ T8906] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000000
[  188.422264][ T8906] R13: 0000000000000000 R14: 00007f761a5a5fa0 R15: 00007fff586ed4d8
[  188.422293][ T8906]  </TASK>
[  188.779012][ T8933] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  188.790570][ T8906] Mem-Info:
[  188.793994][ T8906] active_anon:9461 inactive_anon:0 isolated_anon:0
[  188.793994][ T8906]  active_file:1570 inactive_file:38346 isolated_file:0
[  188.793994][ T8906]  unevictable:768 dirty:289 writeback:0
[  188.793994][ T8906]  slab_reclaimable:10709 slab_unreclaimable:102831
[  188.793994][ T8906]  mapped:34561 shmem:4314 pagetables:796
[  188.793994][ T8906]  sec_pagetables:0 bounce:0
[  188.793994][ T8906]  kernel_misc_reclaimable:0
[  188.793994][ T8906]  free:1313128 free_pcp:2934 free_cma:0
[  188.840044][ T8933] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  188.860441][ T8933] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  188.880797][ T8933] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  188.978215][ T8906] Node 0 active_anon:37844kB inactive_anon:0kB active_file:6280kB inactive_file:153308kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138244kB dirty:1156kB writeback:0kB shmem:15720kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11628kB pagetables:3184kB sec_pagetables:0kB all_unreclaimable? no
[  189.130577][ T8906] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  189.192363][ T8906] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  189.264693][ T8906] lowmem_reserve[]: 0 2489 2490 2490 2490
[  189.280826][ T8906] Node 0 DMA32 free:1330300kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:37808kB inactive_anon:0kB active_file:6280kB inactive_file:152984kB unevictable:1536kB writepending:1156kB present:3129332kB managed:2549692kB mlocked:0kB bounce:0kB free_pcp:10056kB local_pcp:9584kB free_cma:0kB
[  189.329988][ T8942] 8021q: adding VLAN 0 to HW filter on device bond0
[  189.332877][ T8906] lowmem_reserve[]: 0 0 0 0 0
[  189.341407][ T8906] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[  189.353175][ T8942] 8021q: adding VLAN 0 to HW filter on device team0
[  189.376875][ T8906] lowmem_reserve[]: 0 0 0 0 0
[  189.381767][ T8906] Node 1 Normal free:3909024kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  189.419836][ T8906] lowmem_reserve[]: 0 0 0 0 0
[  189.425700][ T8906] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 
[  189.442418][ T8942] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  189.443182][ T8906] 1*2048kB (M) 3*4096kB (M) = 15360kB
[  189.470980][ T8906] Node 0 DMA32: 21*4kB (UM) 49*8kB (UME) 15*16kB (UME) 68*32kB (UME) 18*64kB (UME) 35*128kB (UME) 14*256kB (UM) 10*512kB (M) 14*1024kB (UM) 10*2048kB (UM) 312*4096kB (UM) = 1329996kB
[  189.497497][ T8906] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  189.510637][ T8906] Node 1 Normal: 230*4kB (UME) 63*8kB (UME) 41*16kB (UME) 181*32kB (UME) 96*64kB (UME) 34*128kB (UME) 16*256kB (UM) 11*512kB (UME) 4*1024kB (UME) 7*2048kB (UE) 943*4096kB (M) = 3909056kB
[  189.538973][ T8906] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  189.550391][ T8906] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  189.610037][ T8906] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  189.650245][ T8906] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  189.672991][ T8906] 44226 total pagecache pages
[  189.682225][ T8906] 0 pages in swap cache
[  189.687710][ T8906] Free swap  = 124996kB
[  189.697638][ T8906] Total swap = 124996kB
[  189.701994][ T8977] __nla_validate_parse: 8 callbacks suppressed
[  189.702014][ T8977] netlink: 60 bytes leftover after parsing attributes in process `syz.1.921'.
[  189.742101][ T8906] 2097051 pages RAM
[  189.751152][ T8977] netlink: 76 bytes leftover after parsing attributes in process `syz.1.921'.
[  189.760244][ T8906] 0 pages HighMem/MovableOnly
[  189.760266][ T8906] 427906 pages reserved
[  189.760277][ T8906] 0 pages cma reserved
[  189.883142][ T8981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.923'.
[  190.101877][ T8992] FAULT_INJECTION: forcing a failure.
[  190.101877][ T8992] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  190.151644][ T8992] CPU: 0 UID: 0 PID: 8992 Comm: syz.3.926 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0
[  190.151679][ T8992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  190.151691][ T8992] Call Trace:
[  190.151717][ T8992]  <TASK>
[  190.151727][ T8992]  dump_stack_lvl+0x241/0x360
[  190.151758][ T8992]  ? __pfx_dump_stack_lvl+0x10/0x10
[  190.151782][ T8992]  ? __pfx__printk+0x10/0x10
[  190.151805][ T8992]  ? __pfx_lock_release+0x10/0x10
[  190.151847][ T8992]  should_fail_ex+0x40a/0x550
[  190.151885][ T8992]  _copy_from_user+0x2d/0xb0
[  190.151916][ T8992]  copy_msghdr_from_user+0xae/0x680
[  190.151955][ T8992]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  190.151985][ T8992]  ? __fget_files+0x2a/0x410
[  190.152019][ T8992]  ? __fget_files+0x2a/0x410
[  190.152059][ T8992]  __sys_sendmsg+0x209/0x350
[  190.152091][ T8992]  ? __pfx___sys_sendmsg+0x10/0x10
[  190.152131][ T8992]  ? do_sys_openat2+0x17a/0x1d0
[  190.152185][ T8992]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  190.152219][ T8992]  ? do_syscall_64+0x100/0x230
[  190.152252][ T8992]  ? do_syscall_64+0xb6/0x230
[  190.152285][ T8992]  do_syscall_64+0xf3/0x230
[  190.152315][ T8992]  ? clear_bhb_loop+0x35/0x90
[  190.152349][ T8992]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.152377][ T8992] RIP: 0033:0x7fa4d9f8d169
[  190.152395][ T8992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  190.152410][ T8992] RSP: 002b:00007fa4dadc9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  190.152431][ T8992] RAX: ffffffffffffffda RBX: 00007fa4da1a5fa0 RCX: 00007fa4d9f8d169
[  190.152445][ T8992] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  190.152463][ T8992] RBP: 00007fa4dadc9090 R08: 0000000000000000 R09: 0000000000000000
[  190.152475][ T8992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  190.152485][ T8992] R13: 0000000000000000 R14: 00007fa4da1a5fa0 R15: 00007fff1585c2d8
[  190.152513][ T8992]  </TASK>
[  190.167996][ T8994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.927'.
[  190.434117][ T8995] netlink: 'syz.1.927': attribute type 1 has an invalid length.
[  190.461135][ T8995] netlink: 132 bytes leftover after parsing attributes in process `syz.1.927'.
[  190.470406][ T8995] netlink: 'syz.1.927': attribute type 1 has an invalid length.
[  190.586331][ T9002] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  190.595049][ T8997] netlink: 44 bytes leftover after parsing attributes in process `syz.4.928'.
[  190.876108][ T9007] netlink: 'syz.1.931': attribute type 1 has an invalid length.
[  190.939646][ T9012] netlink: 60 bytes leftover after parsing attributes in process `syz.4.934'.
[  190.943179][ T9007] netlink: 16179 bytes leftover after parsing attributes in process `syz.1.931'.
[  190.950544][ T9012] netlink: 76 bytes leftover after parsing attributes in process `syz.4.934'.
[  190.976249][ T9013] netlink: 44 bytes leftover after parsing attributes in process `syz.3.933'.
[  191.280581][ T9023] xt_SECMARK: invalid mode: 0
[  192.582798][ T9013] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  193.267509][ T9013] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  193.291902][ T9013] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  193.312057][ T9013] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  193.324829][ T9013] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  193.524028][ T9013] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  193.533503][ T9013] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  193.542528][ T9013] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  193.551440][ T9013] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  193.591897][ T9019] lo: left promiscuous mode
[  193.626846][ T9019] sit0: left promiscuous mode
[  193.678733][ T9019] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.694307][ T9019] 8021q: adding VLAN 0 to HW filter on device team0
[  193.713790][ T9019] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  193.785389][ T9043] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  193.854971][ T9046] FAULT_INJECTION: forcing a failure.
[  193.854971][ T9046] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  193.920396][ T9046] CPU: 1 UID: 0 PID: 9046 Comm: syz.3.944 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0
[  193.920428][ T9046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  193.920440][ T9046] Call Trace:
[  193.920447][ T9046]  <TASK>
[  193.920455][ T9046]  dump_stack_lvl+0x241/0x360
[  193.920485][ T9046]  ? __pfx_dump_stack_lvl+0x10/0x10
[  193.920509][ T9046]  ? __pfx__printk+0x10/0x10
[  193.920532][ T9046]  ? __pfx_lock_release+0x10/0x10
[  193.920571][ T9046]  should_fail_ex+0x40a/0x550
[  193.920608][ T9046]  _copy_from_user+0x2d/0xb0
[  193.920638][ T9046]  move_addr_to_kernel+0x82/0x150
[  193.920671][ T9046]  copy_msghdr_from_user+0x43e/0x680
[  193.920710][ T9046]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  193.920740][ T9046]  ? __fget_files+0x2a/0x410
[  193.920775][ T9046]  ? __fget_files+0x2a/0x410
[  193.920814][ T9046]  __sys_sendmsg+0x209/0x350
[  193.920846][ T9046]  ? __pfx___sys_sendmsg+0x10/0x10
[  193.920885][ T9046]  ? do_sys_openat2+0x17a/0x1d0
[  193.920954][ T9046]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  193.920989][ T9046]  ? do_syscall_64+0x100/0x230
[  193.921025][ T9046]  ? do_syscall_64+0xb6/0x230
[  193.921059][ T9046]  do_syscall_64+0xf3/0x230
[  193.921090][ T9046]  ? clear_bhb_loop+0x35/0x90
[  193.921123][ T9046]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.921152][ T9046] RIP: 0033:0x7fa4d9f8d169
[  193.921170][ T9046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  193.921186][ T9046] RSP: 002b:00007fa4dadc9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  193.921208][ T9046] RAX: ffffffffffffffda RBX: 00007fa4da1a5fa0 RCX: 00007fa4d9f8d169
[  193.921222][ T9046] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  193.921235][ T9046] RBP: 00007fa4dadc9090 R08: 0000000000000000 R09: 0000000000000000
[  193.921246][ T9046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  193.921258][ T9046] R13: 0000000000000000 R14: 00007fa4da1a5fa0 R15: 00007fff1585c2d8
[  193.921286][ T9046]  </TASK>
[  194.130174][ T9048] FAULT_INJECTION: forcing a failure.
[  194.130174][ T9048] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  194.143351][ T9048] CPU: 1 UID: 0 PID: 9048 Comm: syz.1.945 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0
[  194.143378][ T9048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  194.143390][ T9048] Call Trace:
[  194.143397][ T9048]  <TASK>
[  194.143405][ T9048]  dump_stack_lvl+0x241/0x360
[  194.143437][ T9048]  ? __pfx_dump_stack_lvl+0x10/0x10
[  194.143461][ T9048]  ? __pfx__printk+0x10/0x10
[  194.143489][ T9048]  ? snprintf+0xda/0x120
[  194.143517][ T9048]  should_fail_ex+0x40a/0x550
[  194.143555][ T9048]  _copy_to_user+0x31/0xb0
[  194.143587][ T9048]  simple_read_from_buffer+0xca/0x150
[  194.143620][ T9048]  proc_fail_nth_read+0x1e9/0x250
[  194.143653][ T9048]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  194.143687][ T9048]  ? rw_verify_area+0x243/0x630
[  194.143708][ T9048]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  194.143740][ T9048]  vfs_read+0x1f8/0xb40
[  194.143764][ T9048]  ? fdget_pos+0x254/0x320
[  194.143796][ T9048]  ? __pfx___mutex_lock+0x10/0x10
[  194.143828][ T9048]  ? __pfx_vfs_read+0x10/0x10
[  194.143861][ T9048]  ? __fget_files+0x2a/0x410
[  194.143893][ T9048]  ? __fget_files+0x395/0x410
[  194.143922][ T9048]  ? __fget_files+0x2a/0x410
[  194.143963][ T9048]  ksys_read+0x18f/0x2b0
[  194.143988][ T9048]  ? __pfx_ksys_read+0x10/0x10
[  194.144012][ T9048]  ? do_syscall_64+0x100/0x230
[  194.144047][ T9048]  ? do_syscall_64+0xb6/0x230
[  194.144081][ T9048]  do_syscall_64+0xf3/0x230
[  194.144112][ T9048]  ? clear_bhb_loop+0x35/0x90
[  194.144146][ T9048]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.144174][ T9048] RIP: 0033:0x7f3292f8bb7c
[  194.144193][ T9048] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  194.144209][ T9048] RSP: 002b:00007f3293d66030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  194.144230][ T9048] RAX: ffffffffffffffda RBX: 00007f32931a5fa0 RCX: 00007f3292f8bb7c
[  194.144246][ T9048] RDX: 000000000000000f RSI: 00007f3293d660a0 RDI: 0000000000000004
[  194.144258][ T9048] RBP: 00007f3293d66090 R08: 0000000000000000 R09: 0000000000000000
[  194.144271][ T9048] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000001
[  194.144283][ T9048] R13: 0000000000000000 R14: 00007f32931a5fa0 R15: 00007ffebbe00188
[  194.144315][ T9048]  </TASK>
[  194.571844][ T9057] netlink: 'syz.4.947': attribute type 1 has an invalid length.
[  194.721955][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  194.764083][ T9064] __nla_validate_parse: 3 callbacks suppressed
[  194.764105][ T9064] netlink: 68 bytes leftover after parsing attributes in process `syz.4.952'.
[  194.982889][ T9071] netlink: 68 bytes leftover after parsing attributes in process `syz.3.955'.
[  195.032616][ T9071] netlink: 76 bytes leftover after parsing attributes in process `syz.3.955'.
[  195.071168][ T9073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.957'.
[  195.096824][ T9073] tipc: Started in network mode
[  195.110969][ T9073] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  195.151033][ T9073] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000
[  195.179194][ T9073] tipc: Enabled bearer <udp:syz1>, priority 10
[  195.441204][ T9085] FAULT_INJECTION: forcing a failure.
[  195.441204][ T9085] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  195.492975][ T9085] CPU: 0 UID: 0 PID: 9085 Comm: syz.2.962 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0
[  195.493008][ T9085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  195.493021][ T9085] Call Trace:
[  195.493029][ T9085]  <TASK>
[  195.493037][ T9085]  dump_stack_lvl+0x241/0x360
[  195.493080][ T9085]  ? __pfx_dump_stack_lvl+0x10/0x10
[  195.493104][ T9085]  ? __pfx__printk+0x10/0x10
[  195.493127][ T9085]  ? __pfx_lock_release+0x10/0x10
[  195.493169][ T9085]  should_fail_ex+0x40a/0x550
[  195.493206][ T9085]  _copy_from_user+0x2d/0xb0
[  195.493237][ T9085]  ____sys_sendmsg+0x30b/0x860
[  195.493273][ T9085]  ? __pfx_____sys_sendmsg+0x10/0x10
[  195.493297][ T9085]  ? __fget_files+0x2a/0x410
[  195.493330][ T9085]  ? __fget_files+0x2a/0x410
[  195.493370][ T9085]  __sys_sendmsg+0x269/0x350
[  195.493402][ T9085]  ? __pfx___sys_sendmsg+0x10/0x10
[  195.493442][ T9085]  ? do_sys_openat2+0x17a/0x1d0
[  195.493501][ T9085]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  195.493534][ T9085]  ? do_syscall_64+0x100/0x230
[  195.493589][ T9085]  ? do_syscall_64+0xb6/0x230
[  195.493623][ T9085]  do_syscall_64+0xf3/0x230
[  195.493654][ T9085]  ? clear_bhb_loop+0x35/0x90
[  195.493687][ T9085]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.493715][ T9085] RIP: 0033:0x7f761a38d169
[  195.493733][ T9085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  195.493749][ T9085] RSP: 002b:00007f761b216038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  195.493771][ T9085] RAX: ffffffffffffffda RBX: 00007f761a5a5fa0 RCX: 00007f761a38d169
[  195.493786][ T9085] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  195.493799][ T9085] RBP: 00007f761b216090 R08: 0000000000000000 R09: 0000000000000000
[  195.493811][ T9085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  195.493823][ T9085] R13: 0000000000000000 R14: 00007f761a5a5fa0 R15: 00007fff586ed4d8
[  195.493854][ T9085]  </TASK>
[  195.973489][ T9093] netlink: 20 bytes leftover after parsing attributes in process `syz.1.964'.
[  195.993861][ T9098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.965'.
[  196.014140][ T9099] netlink: 'syz.2.963': attribute type 1 has an invalid length.
[  196.021883][ T9099] netlink: 16179 bytes leftover after parsing attributes in process `syz.2.963'.
[  196.065645][ T9098] macvlan3: entered promiscuous mode
[  196.071628][ T9098] bond0: entered promiscuous mode
[  196.096998][ T9098] bond_slave_0: entered promiscuous mode
[  196.111295][ T9103] netlink: 68 bytes leftover after parsing attributes in process `syz.4.968'.
[  196.120652][ T9098] bond_slave_1: entered promiscuous mode
[  196.126589][ T9098] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  196.135713][ T9103] netlink: 76 bytes leftover after parsing attributes in process `syz.4.968'.
[  196.148943][ T9098] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  196.292264][ T3078] tipc: Node number set to 1
[  196.320172][ T9109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.971'.
[  196.327361][ T9110] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  196.503311][ T9118] netlink: 'syz.4.975': attribute type 2 has an invalid length.
[  196.544885][ T9118] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  196.553435][ T9118] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  196.562235][ T9118] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  196.571194][ T9118] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  196.611476][ T9118] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  196.620205][ T9118] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  196.629081][ T9118] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  196.637531][ T9118] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  196.836575][ T9135] FAULT_INJECTION: forcing a failure.
[  196.836575][ T9135] name failslab, interval 1, probability 0, space 0, times 0
[  196.871716][ T9135] CPU: 1 UID: 0 PID: 9135 Comm: syz.3.981 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0
[  196.871747][ T9135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  196.871759][ T9135] Call Trace:
[  196.871767][ T9135]  <TASK>
[  196.871775][ T9135]  dump_stack_lvl+0x241/0x360
[  196.871808][ T9135]  ? __pfx_dump_stack_lvl+0x10/0x10
[  196.871832][ T9135]  ? __pfx__printk+0x10/0x10
[  196.871860][ T9135]  ? __ip_dev_find+0x497/0x570
[  196.871898][ T9135]  should_fail_ex+0x40a/0x550
[  196.871943][ T9135]  should_failslab+0xac/0x100
[  196.871973][ T9135]  ? dst_alloc+0x12b/0x190
[  196.871999][ T9135]  kmem_cache_alloc_noprof+0x70/0x380
[  196.872035][ T9135]  dst_alloc+0x12b/0x190
[  196.872066][ T9135]  ip_route_output_key_hash_rcu+0x1378/0x2290
[  196.872112][ T9135]  ip_route_output_key_hash+0x193/0x2b0
[  196.872137][ T9135]  ? ip_route_output_key_hash+0xdf/0x2b0
[  196.872162][ T9135]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  196.872194][ T9135]  ? ip_cmsg_send+0x9d0/0xa80
[  196.872230][ T9135]  ip_route_output_flow+0x29/0x140
[  196.872255][ T9135]  udp_sendmsg+0x17d2/0x2c90
[  196.872306][ T9135]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  196.872332][ T9135]  ? __pfx_udp_sendmsg+0x10/0x10
[  196.872367][ T9135]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  196.872407][ T9135]  ? __local_bh_enable_ip+0x168/0x200
[  196.872441][ T9135]  ? inet_sendmsg+0x16b/0x390
[  196.872467][ T9135]  ? do_raw_spin_unlock+0x13c/0x8b0
[  196.872505][ T9135]  ? inet_sendmsg+0x2ba/0x390
[  196.872536][ T9135]  __sock_sendmsg+0x1a6/0x270
[  196.872572][ T9135]  ____sys_sendmsg+0x53a/0x860
[  196.872608][ T9135]  ? __pfx_____sys_sendmsg+0x10/0x10
[  196.872632][ T9135]  ? __fget_files+0x2a/0x410
[  196.872667][ T9135]  ? __fget_files+0x2a/0x410
[  196.872708][ T9135]  __sys_sendmsg+0x269/0x350
[  196.872740][ T9135]  ? __pfx___sys_sendmsg+0x10/0x10
[  196.872782][ T9135]  ? do_sys_openat2+0x17a/0x1d0
[  196.872843][ T9135]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  196.872877][ T9135]  ? do_syscall_64+0x100/0x230
[  196.872920][ T9135]  ? do_syscall_64+0xb6/0x230
[  196.872954][ T9135]  do_syscall_64+0xf3/0x230
[  196.872985][ T9135]  ? clear_bhb_loop+0x35/0x90
[  196.873019][ T9135]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.873047][ T9135] RIP: 0033:0x7fa4d9f8d169
[  196.873065][ T9135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  196.873084][ T9135] RSP: 002b:00007fa4dadc9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  196.873107][ T9135] RAX: ffffffffffffffda RBX: 00007fa4da1a5fa0 RCX: 00007fa4d9f8d169
[  196.873122][ T9135] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  196.873135][ T9135] RBP: 00007fa4dadc9090 R08: 0000000000000000 R09: 0000000000000000
[  196.873147][ T9135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  196.873159][ T9135] R13: 0000000000000000 R14: 00007fa4da1a5fa0 R15: 00007fff1585c2d8
[  196.873192][ T9135]  </TASK>
[  200.226949][ T9138] pim6reg: entered allmulticast mode
[  200.237864][ T9140] pim6reg: left allmulticast mode
[  200.314486][ T9158] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  200.348397][ T9141] lo speed is unknown, defaulting to 1000
[  200.526689][ T9168] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  200.930685][ T9178] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  201.288393][ T9199] __nla_validate_parse: 3 callbacks suppressed
[  201.288416][ T9199] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1002'.
[  201.915332][ T5854] Bluetooth: hci1: command 0x0406 tx timeout
[  201.915345][ T5852] Bluetooth: hci3: command 0x0406 tx timeout
[  201.987545][ T9213] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  202.167545][ T9218] xt_SECMARK: invalid mode: 0
[  202.766893][ T9243] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1022'.
[  202.905972][ T9246] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  202.978851][ T9252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1025'.
[  203.188849][ T9256] xt_SECMARK: invalid mode: 0
[  203.339648][ T9260] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1028'.
[  203.939063][ T9284] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  204.257234][ T9292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1040'.
[  204.303139][ T9292] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  204.340298][ T9294] syzkaller0: entered promiscuous mode
[  204.349530][ T9294] syzkaller0: entered allmulticast mode
[  205.966504][ T9310] sctp: [Deprecated]: syz.2.1046 (pid 9310) Use of int in maxseg socket option.
[  205.966504][ T9310] Use struct sctp_assoc_value instead
[  206.999695][ T9319] FAULT_INJECTION: forcing a failure.
[  206.999695][ T9319] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  207.039647][ T9321] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  207.039855][ T9319] CPU: 1 UID: 0 PID: 9319 Comm: syz.1.1050 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0
[  207.039885][ T9319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  207.039900][ T9319] Call Trace:
[  207.039908][ T9319]  <TASK>
[  207.039918][ T9319]  dump_stack_lvl+0x241/0x360
[  207.039952][ T9319]  ? __pfx_dump_stack_lvl+0x10/0x10
[  207.039977][ T9319]  ? __pfx__printk+0x10/0x10
[  207.040004][ T9319]  ? __pfx_lock_release+0x10/0x10
[  207.040036][ T9319]  ? __alloc_skb+0x28f/0x440
[  207.040071][ T9319]  should_fail_ex+0x40a/0x550
[  207.040111][ T9319]  _copy_from_user+0x2d/0xb0
[  207.040144][ T9319]  csum_and_copy_from_iter_full+0x1fa/0x2180
[  207.040175][ T9319]  ? alloc_skb_with_frags+0x77c/0x820
[  207.040212][ T9319]  ? skb_set_owner_w+0x246/0x380
[  207.040247][ T9319]  ? __pfx_csum_and_copy_from_iter_full+0x10/0x10
[  207.040298][ T9319]  ip_generic_getfrag+0x158/0x310
[  207.040325][ T9319]  ? mark_lock+0x9a/0x360
[  207.040349][ T9319]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  207.040376][ T9319]  ? __lock_acquire+0x1397/0x2100
[  207.040410][ T9319]  ? skb_put+0x114/0x1f0
[  207.040442][ T9319]  __ip_append_data+0x1a9a/0x4730
[  207.040494][ T9319]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  207.040545][ T9319]  ? __pfx___ip_append_data+0x10/0x10
[  207.040570][ T9319]  ? __pfx_ipv4_mtu+0x10/0x10
[  207.040595][ T9319]  ? ip_setup_cork+0x580/0x9a0
[  207.040627][ T9319]  ip_make_skb+0x198/0x420
[  207.040661][ T9319]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  207.040689][ T9319]  ? __pfx_ip_make_skb+0x10/0x10
[  207.040745][ T9319]  udp_sendmsg+0x1c77/0x2c90
[  207.040803][ T9319]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  207.040832][ T9319]  ? __pfx_udp_sendmsg+0x10/0x10
[  207.040868][ T9319]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  207.040908][ T9319]  ? __local_bh_enable_ip+0x168/0x200
[  207.040947][ T9319]  ? inet_sendmsg+0x16b/0x390
[  207.040975][ T9319]  ? do_raw_spin_unlock+0x13c/0x8b0
[  207.041016][ T9319]  ? inet_sendmsg+0x2ba/0x390
[  207.041049][ T9319]  __sock_sendmsg+0x1a6/0x270
[  207.041087][ T9319]  ____sys_sendmsg+0x53a/0x860
[  207.041125][ T9319]  ? __pfx_____sys_sendmsg+0x10/0x10
[  207.041151][ T9319]  ? __fget_files+0x2a/0x410
[  207.041189][ T9319]  ? __fget_files+0x2a/0x410
[  207.041235][ T9319]  __sys_sendmsg+0x269/0x350
[  207.041268][ T9319]  ? __pfx___sys_sendmsg+0x10/0x10
[  207.041310][ T9319]  ? do_sys_openat2+0x17a/0x1d0
[  207.041374][ T9319]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  207.041409][ T9319]  ? do_syscall_64+0x100/0x230
[  207.041448][ T9319]  ? do_syscall_64+0xb6/0x230
[  207.041485][ T9319]  do_syscall_64+0xf3/0x230
[  207.041518][ T9319]  ? clear_bhb_loop+0x35/0x90
[  207.041553][ T9319]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  207.041584][ T9319] RIP: 0033:0x7f3292f8d169
[  207.041604][ T9319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  207.041623][ T9319] RSP: 002b:00007f3293d66038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  207.041648][ T9319] RAX: ffffffffffffffda RBX: 00007f32931a5fa0 RCX: 00007f3292f8d169
[  207.041664][ T9319] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  207.041679][ T9319] RBP: 00007f3293d66090 R08: 0000000000000000 R09: 0000000000000000
[  207.041693][ T9319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  207.041705][ T9319] R13: 0000000000000000 R14: 00007f32931a5fa0 R15: 00007ffebbe00188
[  207.041747][ T9319]  </TASK>
[  207.134038][ T9325] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  207.141682][ T9316] lo speed is unknown, defaulting to 1000
[  207.409994][ T9333] netlink: 'syz.3.1053': attribute type 2 has an invalid length.
[  207.721955][ T9341] ªªªªªªo]Uü.ž: renamed from lo (while UP)
[  207.745981][ T9341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1056'.
[  207.802708][ T9347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1056'.
[  207.986073][ T9345] syzkaller0: entered promiscuous mode
[  208.003129][ T9345] syzkaller0: entered allmulticast mode
[  208.153681][ T9361] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1063'.
[  208.236799][ T9365] xt_SECMARK: invalid mode: 0
[  208.338467][ T9370] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1064'.
[  208.361739][ T9370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1064'.
[  210.840501][ T9369] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  210.947388][ T9384] FAULT_INJECTION: forcing a failure.
[  210.947388][ T9384] name failslab, interval 1, probability 0, space 0, times 0
[  211.012232][ T9384] CPU: 0 UID: 0 PID: 9384 Comm: syz.2.1070 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0
[  211.012263][ T9384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  211.012275][ T9384] Call Trace:
[  211.012283][ T9384]  <TASK>
[  211.012291][ T9384]  dump_stack_lvl+0x241/0x360
[  211.012321][ T9384]  ? __pfx_dump_stack_lvl+0x10/0x10
[  211.012344][ T9384]  ? __pfx__printk+0x10/0x10
[  211.012387][ T9384]  should_fail_ex+0x40a/0x550
[  211.012424][ T9384]  should_failslab+0xac/0x100
[  211.012453][ T9384]  ? skb_clone+0x20c/0x390
[  211.012479][ T9384]  kmem_cache_alloc_noprof+0x70/0x380
[  211.012512][ T9384]  skb_clone+0x20c/0x390
[  211.012537][ T9384]  ? ip_mc_output+0x1ea/0x5c0
[  211.012562][ T9384]  ip_mc_output+0x1f7/0x5c0
[  211.012591][ T9384]  ip_send_skb+0x74/0x100
[  211.012618][ T9384]  udp_send_skb+0xac7/0x1640
[  211.012662][ T9384]  udp_sendmsg+0x1cac/0x2c90
[  211.012709][ T9384]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  211.012735][ T9384]  ? __pfx_udp_sendmsg+0x10/0x10
[  211.012768][ T9384]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  211.012805][ T9384]  ? __local_bh_enable_ip+0x168/0x200
[  211.012839][ T9384]  ? inet_sendmsg+0x16b/0x390
[  211.012865][ T9384]  ? do_raw_spin_unlock+0x13c/0x8b0
[  211.012901][ T9384]  ? inet_sendmsg+0x2ba/0x390
[  211.012932][ T9384]  __sock_sendmsg+0x1a6/0x270
[  211.012966][ T9384]  ____sys_sendmsg+0x53a/0x860
[  211.013000][ T9384]  ? __pfx_____sys_sendmsg+0x10/0x10
[  211.013023][ T9384]  ? __fget_files+0x2a/0x410
[  211.013056][ T9384]  ? __fget_files+0x2a/0x410
[  211.013095][ T9384]  __sys_sendmsg+0x269/0x350
[  211.013125][ T9384]  ? __pfx___sys_sendmsg+0x10/0x10
[  211.013164][ T9384]  ? do_sys_openat2+0x17a/0x1d0
[  211.013220][ T9384]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  211.013253][ T9384]  ? do_syscall_64+0x100/0x230
[  211.013286][ T9384]  ? do_syscall_64+0xb6/0x230
[  211.013319][ T9384]  do_syscall_64+0xf3/0x230
[  211.013349][ T9384]  ? clear_bhb_loop+0x35/0x90
[  211.013387][ T9384]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.013414][ T9384] RIP: 0033:0x7f761a38d169
[  211.013431][ T9384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  211.013447][ T9384] RSP: 002b:00007f761b216038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  211.013468][ T9384] RAX: ffffffffffffffda RBX: 00007f761a5a5fa0 RCX: 00007f761a38d169
[  211.013482][ T9384] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  211.013495][ T9384] RBP: 00007f761b216090 R08: 0000000000000000 R09: 0000000000000000
[  211.013507][ T9384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  211.013518][ T9384] R13: 0000000000000000 R14: 00007f761a5a5fa0 R15: 00007fff586ed4d8
[  211.013549][ T9384]  </TASK>
[  211.486504][ T9392] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  211.536065][ T9401] xt_SECMARK: invalid mode: 0
[  211.574286][ T9404] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000
[  211.705615][ T9406] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1079'.
[  211.743477][ T9406] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1079'.
[  211.790183][ T9406] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1079'.
[  211.836828][ T9406] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1079'.
[  211.881258][ T9416] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  211.925490][ T9409] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000
[  212.316079][ T9432] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1088'.
[  212.371227][ T9434] FAULT_INJECTION: forcing a failure.
[  212.371227][ T9434] name failslab, interval 1, probability 0, space 0, times 0
[  212.385677][ T9434] CPU: 0 UID: 0 PID: 9434 Comm: syz.2.1089 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0
[  212.385707][ T9434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  212.385720][ T9434] Call Trace:
[  212.385728][ T9434]  <TASK>
[  212.385736][ T9434]  dump_stack_lvl+0x241/0x360
[  212.385768][ T9434]  ? __pfx_dump_stack_lvl+0x10/0x10
[  212.385792][ T9434]  ? __pfx__printk+0x10/0x10
[  212.385816][ T9434]  ? kmem_cache_alloc_node_noprof+0x4f/0x380
[  212.385848][ T9434]  ? __pfx___might_resched+0x10/0x10
[  212.385889][ T9434]  should_fail_ex+0x40a/0x550
[  212.385927][ T9434]  should_failslab+0xac/0x100
[  212.385957][ T9434]  kmem_cache_alloc_node_noprof+0x77/0x380
[  212.385987][ T9434]  ? __alloc_skb+0x1c3/0x440
[  212.386015][ T9434]  __alloc_skb+0x1c3/0x440
[  212.386044][ T9434]  ? __pfx___alloc_skb+0x10/0x10
[  212.386074][ T9434]  ? __lock_acquire+0x1397/0x2100
[  212.386110][ T9434]  alloc_skb_with_frags+0xc3/0x820
[  212.386151][ T9434]  sock_alloc_send_pskb+0x91a/0xa60
[  212.386199][ T9434]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  212.386238][ T9434]  ? __pfx_validate_chain+0x10/0x10
[  212.386261][ T9434]  ? __pfx_validate_chain+0x10/0x10
[  212.386288][ T9434]  ? dev_get_by_index+0x23/0x2d0
[  212.386323][ T9434]  packet_sendmsg+0x429a/0x6d80
[  212.386403][ T9434]  ? __pfx___might_resched+0x10/0x10
[  212.386448][ T9434]  ? __pfx_packet_sendmsg+0x10/0x10
[  212.386478][ T9434]  ? aa_sk_perm+0x96d/0xab0
[  212.386517][ T9434]  ? __pfx_aa_sk_perm+0x10/0x10
[  212.386547][ T9434]  ? __import_iovec+0x3bf/0x830
[  212.386577][ T9434]  ? aa_sock_msg_perm+0x91/0x160
[  212.386616][ T9434]  ? __pfx_packet_sendmsg+0x10/0x10
[  212.386645][ T9434]  __sock_sendmsg+0x221/0x270
[  212.386680][ T9434]  ____sys_sendmsg+0x53a/0x860
[  212.386716][ T9434]  ? __pfx_____sys_sendmsg+0x10/0x10
[  212.386741][ T9434]  ? __fget_files+0x2a/0x410
[  212.386774][ T9434]  ? __fget_files+0x2a/0x410
[  212.386814][ T9434]  __sys_sendmmsg+0x36a/0x720
[  212.386853][ T9434]  ? __pfx___sys_sendmmsg+0x10/0x10
[  212.386892][ T9434]  ? __pfx_lock_release+0x10/0x10
[  212.386922][ T9434]  ? kstrtouint_from_user+0x128/0x190
[  212.386971][ T9434]  ? ksys_write+0x22a/0x2b0
[  212.386994][ T9434]  ? __pfx_lock_release+0x10/0x10
[  212.387032][ T9434]  ? sb_end_write+0xe9/0x1c0
[  212.387062][ T9434]  ? vfs_write+0x7fa/0xd10
[  212.387098][ T9434]  ? __mutex_unlock_slowpath+0x227/0x800
[  212.387157][ T9434]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  212.387191][ T9434]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  212.387229][ T9434]  ? do_syscall_64+0x100/0x230
[  212.387263][ T9434]  __x64_sys_sendmmsg+0xa0/0xb0
[  212.387290][ T9434]  do_syscall_64+0xf3/0x230
[  212.387320][ T9434]  ? clear_bhb_loop+0x35/0x90
[  212.387353][ T9434]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.387380][ T9434] RIP: 0033:0x7f761a38d169
[  212.387398][ T9434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  212.387414][ T9434] RSP: 002b:00007f761b216038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  212.387436][ T9434] RAX: ffffffffffffffda RBX: 00007f761a5a5fa0 RCX: 00007f761a38d169
[  212.387450][ T9434] RDX: 0000000000000001 RSI: 0000200000005d40 RDI: 0000000000000008
[  212.387463][ T9434] RBP: 00007f761b216090 R08: 0000000000000000 R09: 0000000000000000
[  212.387476][ T9434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  212.387487][ T9434] R13: 0000000000000000 R14: 00007f761a5a5fa0 R15: 00007fff586ed4d8
[  212.387518][ T9434]  </TASK>
[  212.957681][ T9441] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1091'.
[  213.000913][ T9441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1091'.
[  213.018147][ T9445] FAULT_INJECTION: forcing a failure.
[  213.018147][ T9445] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  213.071747][ T9445] CPU: 1 UID: 0 PID: 9445 Comm: syz.3.1093 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0
[  213.071779][ T9445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  213.071793][ T9445] Call Trace:
[  213.071800][ T9445]  <TASK>
[  213.071809][ T9445]  dump_stack_lvl+0x241/0x360
[  213.071842][ T9445]  ? __pfx_dump_stack_lvl+0x10/0x10
[  213.071866][ T9445]  ? __pfx__printk+0x10/0x10
[  213.071891][ T9445]  ? __pfx_lock_release+0x10/0x10
[  213.071924][ T9445]  ? __lock_acquire+0x1397/0x2100
[  213.071965][ T9445]  should_fail_ex+0x40a/0x550
[  213.072005][ T9445]  _copy_from_user+0x2d/0xb0
[  213.072037][ T9445]  kstrtouint_from_user+0xc6/0x190
[  213.072066][ T9445]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  213.072100][ T9445]  ? __pfx_lock_acquire+0x10/0x10
[  213.072141][ T9445]  proc_fail_nth_write+0xaa/0x2d0
[  213.072172][ T9445]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  213.072201][ T9445]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  213.072239][ T9445]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  213.072272][ T9445]  vfs_write+0x29f/0xd10
[  213.072297][ T9445]  ? fdget_pos+0x254/0x320
[  213.072328][ T9445]  ? __mutex_unlock_slowpath+0x227/0x800
[  213.072365][ T9445]  ? __pfx_vfs_write+0x10/0x10
[  213.072393][ T9445]  ? __fget_files+0x2a/0x410
[  213.072433][ T9445]  ? __fget_files+0x395/0x410
[  213.072465][ T9445]  ? __fget_files+0x2a/0x410
[  213.072508][ T9445]  ksys_write+0x18f/0x2b0
[  213.072534][ T9445]  ? __pfx_ksys_write+0x10/0x10
[  213.072559][ T9445]  ? do_syscall_64+0x100/0x230
[  213.072595][ T9445]  ? do_syscall_64+0xb6/0x230
[  213.072630][ T9445]  do_syscall_64+0xf3/0x230
[  213.072663][ T9445]  ? clear_bhb_loop+0x35/0x90
[  213.072698][ T9445]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.072727][ T9445] RIP: 0033:0x7fa4d9f8bc1f
[  213.072745][ T9445] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  213.072764][ T9445] RSP: 002b:00007fa4dadc9030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  213.072786][ T9445] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa4d9f8bc1f
[  213.072801][ T9445] RDX: 0000000000000001 RSI: 00007fa4dadc90a0 RDI: 0000000000000005
[  213.072814][ T9445] RBP: 00007fa4dadc9090 R08: 0000000000000000 R09: 0000000000000000
[  213.072827][ T9445] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[  213.072839][ T9445] R13: 0000000000000000 R14: 00007fa4da1a5fa0 R15: 00007fff1585c2d8
[  213.072873][ T9445]  </TASK>
[  213.322804][ T9450] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1102'.
[  213.332224][ T9450] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1102'.
[  213.361982][ T9450] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1102'.
[  213.371578][ T9450] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1102'.
[  213.422520][ T9443] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000
[  213.961351][ T9469] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000
[  214.044199][ T9477] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1100'.
[  214.074520][ T9477] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1100'.
[  214.112049][ T9477] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1100'.
[  214.147092][ T9477] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1100'.
[  214.158469][ T9485] xt_SECMARK: invalid mode: 0
[  214.505621][ T9498] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  214.666046][ T9506] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000
[  214.921758][ T9517] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  215.078794][ T9526] netlink: 'syz.4.1121': attribute type 1 has an invalid length.
[  215.162581][ T9526] vlan2: entered promiscuous mode
[  215.167875][ T9526] bridge_slave_0: entered promiscuous mode
[  215.199446][ T9526] vlan2: entered allmulticast mode
[  215.225820][ T9526] bridge_slave_0: entered allmulticast mode
[  215.411841][ T9538] vlan2: entered promiscuous mode
[  215.418035][ T9538] vlan2: entered allmulticast mode
[  215.424081][ T9538] hsr_slave_1: entered allmulticast mode
[  215.676571][ T9545] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  216.018313][ T9553] syzkaller0: entered promiscuous mode
[  216.037113][ T9556] xt_SECMARK: invalid mode: 0
[  216.059288][ T9553] syzkaller0: entered allmulticast mode
[  216.117953][ T9560] IPv6: addrconf: prefix option has invalid lifetime
[  216.191648][ T9562] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  216.438480][ T9558] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000
[  218.707773][ T9580] syzkaller0: entered promiscuous mode
[  218.713701][ T9580] syzkaller0: entered allmulticast mode
[  218.743929][ T9565] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000
[  220.973897][ T9598] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  221.270225][ T9607] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000
[  221.402965][ T9616] __nla_validate_parse: 14 callbacks suppressed
[  221.402988][ T9616] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1146'.
[  221.487388][ T9616] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1146'.
[  221.497071][ T9616] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1146'.
[  221.506481][ T9616] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1146'.
[  221.650777][ T9621] syzkaller0: entered promiscuous mode
[  221.688513][ T9621] syzkaller0: entered allmulticast mode
[  224.206725][ T9632] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000
[  224.446722][ T9653] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  224.736999][ T9659] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000
[  224.755920][ T9658] xt_SECMARK: invalid mode: 0
[  224.793185][ T9660] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1161'.
[  224.808721][ T9660] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1161'.
[  224.818329][ T9660] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1161'.
[  224.828030][ T9660] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1161'.
[  225.370493][ T9677] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1165'.
[  225.515345][ T9680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1166'.
[  226.009979][ T9685] syzkaller0: entered promiscuous mode
[  226.025163][ T9685] syzkaller0: entered allmulticast mode
[  226.395513][ T9700] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  226.487314][ T9704] set match dimension is over the limit!
[  226.914610][ T9700] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  226.940905][ T9714] __nla_validate_parse: 2 callbacks suppressed
[  226.940929][ T9714] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1176'.
[  226.963825][ T9714] netlink: 'syz.3.1176': attribute type 9 has an invalid length.
[  226.978989][ T9714] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1176'.
[  228.875936][ T9702] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  228.889056][ T9716] netlink: 'syz.3.1176': attribute type 1 has an invalid length.
[  228.912612][ T9716] netlink: 'syz.3.1176': attribute type 3 has an invalid length.
[  228.920422][ T9716] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1176'.
[  229.108769][ T9721] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  229.151884][ T9723] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000
[  229.155088][ T9721] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  229.254002][ T9729] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1179'.
[  229.278546][ T9729] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1179'.
[  229.332380][ T9729] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1179'.
[  229.371763][ T9729] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1179'.
[  229.415926][ T9735] netlink: 'syz.0.1183': attribute type 10 has an invalid length.
[  229.434305][ T9733] xt_SECMARK: invalid mode: 0
[  229.454969][ T9735] veth0_macvtap: left promiscuous mode
[  229.468792][ T9735] batman_adv: batadv0: Adding interface: macvtap0
[  229.485747][ T9735] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  229.556779][ T9735] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active
[  229.709011][ T9744] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  229.886883][ T9752] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1191'.
[  230.029535][ T9754] netlink: 'syz.0.1190': attribute type 29 has an invalid length.
[  230.263859][ T9754] netlink: 'syz.0.1190': attribute type 29 has an invalid length.
[  230.753464][ T9783] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1196'.
[  230.776551][ T9783] bridge_slave_1: left allmulticast mode
[  230.788785][ T9783] bridge_slave_1: left promiscuous mode
[  230.795284][ T9783] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.806168][ T9783] bridge_slave_0: left allmulticast mode
[  230.811870][ T9783] bridge_slave_0: left promiscuous mode
[  230.834494][ T9783] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.943581][ T9782] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  231.459400][ T9814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1210'.
[  231.731477][ T9824] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  231.983391][ T9832] netlink: 'syz.1.1219': attribute type 6 has an invalid length.
[  232.089664][ T9835] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000
[  232.691299][ T9862] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  232.708324][ T9846] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000
[  233.515003][ T9881] __nla_validate_parse: 3 callbacks suppressed
[  233.515027][ T9881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1237'.
[  233.595495][ T9881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1237'.
[  233.696114][ T9886] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1239'.
[  233.847260][ T9893] netlink: 'syz.2.1240': attribute type 9 has an invalid length.
[  234.400117][ T9910] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  234.840309][ T9933] dccp_v4_rcv: dropped packet with invalid checksum
[  234.901744][ T9937] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1254'.
[  234.964838][ T9937] bridge_slave_0: entered allmulticast mode
[  234.975741][ T9942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1255'.
[  235.215669][ T9951] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1257'.
[  235.227658][ T9953] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1257'.
[  235.451433][ T9955] syzkaller0: entered promiscuous mode
[  235.462604][ T9955] syzkaller0: entered allmulticast mode
[  235.669693][ T9967] IPVS: length: 78 != 8
[  235.778441][ T9969] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1265'.
[  235.803340][ T9969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1265'.
[  237.585677][ T9958] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  237.602398][ T9964] pim6reg0: tun_chr_ioctl cmd 1074025694
[  237.777603][ T9975] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  237.813610][ T9975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1267'.
[  238.216839][ T9999] xt_SECMARK: invalid mode: 0
[  238.226458][ T9997] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000
[  238.714553][T10010] syzkaller0: entered promiscuous mode
[  238.720115][T10010] syzkaller0: entered allmulticast mode
[  239.021487][T10028] netlink: 'syz.0.1283': attribute type 21 has an invalid length.
[  239.048766][T10028] __nla_validate_parse: 5 callbacks suppressed
[  239.048789][T10028] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1283'.
[  239.461741][T10047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1288'.
[  239.471485][T10046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1288'.
[  239.579048][T10051] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1290'.
[  241.867399][T10028] netlink: 'syz.0.1283': attribute type 5 has an invalid length.
[  241.875732][T10028] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1283'.
[  242.083523][T10065] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1292'.
[  242.100258][T10061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1293'.
[  242.425490][T10073] syzkaller0: entered promiscuous mode
[  242.454372][T10073] syzkaller0: entered allmulticast mode
[  242.858496][T10085] ip6gretap0: entered promiscuous mode
[  242.874119][T10085] vlan2: entered promiscuous mode
[  242.999406][T10090] 8021q: adding VLAN 0 to HW filter on device bond2
[  243.027142][T10090] team0: Port device bond2 added
[  243.071992][T10100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1300'.
[  245.607782][T10121] sctp: [Deprecated]: syz.2.1305 (pid 10121) Use of int in max_burst socket option deprecated.
[  245.607782][T10121] Use struct sctp_assoc_value instead
[  245.703772][T10126] netlink: 'syz.0.1306': attribute type 1 has an invalid length.
[  245.726830][T10126] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000
[  245.764660][T10125] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  245.794924][T10125] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  245.819490][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1306'.
[  245.832472][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1306'.
[  245.841585][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1306'.
[  245.971656][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1306'.
[  246.026665][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1306'.
[  246.068208][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1306'.
[  246.089161][T10145] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0
[  246.140347][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1306'.
[  246.172020][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1306'.
[  246.219519][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1306'.
[  246.251969][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1306'.
[  246.361290][T10125] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000
[  246.422946][T10155] syzkaller0: entered promiscuous mode
[  246.429114][T10155] syzkaller0: entered allmulticast mode
[  247.677731][ T5855] Bluetooth: hci2: command 0x0405 tx timeout
[  249.348295][T10181] netlink: 'syz.1.1321': attribute type 11 has an invalid length.
[  249.705563][T10192] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0
[  249.841435][T10196] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  249.885542][T10194] dvmrp1: entered allmulticast mode
[  249.891136][T10196] netlink: 'syz.0.1328': attribute type 2 has an invalid length.
[  250.339831][T10208] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000
[  250.665182][T10239] IPv6: Can't replace route, no match found
[  250.785801][T10236] batadv_slave_1: entered promiscuous mode
[  250.791717][T10236] batadv_slave_1: entered allmulticast mode
[  250.822642][T10236] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check.
[  250.857908][T10244] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0
[  251.725796][T10289] __nla_validate_parse: 51 callbacks suppressed
[  251.725818][T10289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1351'.
[  251.761117][T10291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1351'.
[  251.966534][T10291] hsr_slave_0: left promiscuous mode
[  252.014932][T10291] hsr_slave_1: left promiscuous mode
[  252.053262][T10307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1354'.
[  252.154106][T10312] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1353'.
[  252.212616][T10306] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000
[  252.237476][T10312] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1353'.
[  252.321144][T10312] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1353'.
[  252.393017][T10312] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1353'.
[  252.416589][T10321] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0
[  252.708143][T10334] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1357'.
[  253.210762][T10355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  253.236925][T10355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1364'.
[  253.542646][T10366] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0
[  253.604582][ T8964] IPVS: starting estimator thread 0...
[  253.633193][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  253.652920][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  253.666084][T10370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  253.702346][T10369] IPVS: using max 22 ests per chain, 52800 per kthread
[  253.826919][ T8964] IPVS: starting estimator thread 0...
[  253.828828][T10377] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1371'.
[  253.848276][T10377] (unnamed net_device) (uninitialized): option ad_select: invalid value (47)
[  253.942876][T10381] IPVS: using max 18 ests per chain, 43200 per kthread
[  254.279345][T10400] FAULT_INJECTION: forcing a failure.
[  254.279345][T10400] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  254.345685][T10400] CPU: 1 UID: 0 PID: 10400 Comm: syz.3.1377 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0
[  254.345719][T10400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  254.345733][T10400] Call Trace:
[  254.345741][T10400]  <TASK>
[  254.345749][T10400]  dump_stack_lvl+0x241/0x360
[  254.345783][T10400]  ? __pfx_dump_stack_lvl+0x10/0x10
[  254.345814][T10400]  ? __pfx__printk+0x10/0x10
[  254.345837][T10400]  ? __pfx_lock_release+0x10/0x10
[  254.345878][T10400]  should_fail_ex+0x40a/0x550
[  254.345922][T10400]  _copy_from_user+0x2d/0xb0
[  254.345954][T10400]  copy_msghdr_from_user+0xae/0x680
[  254.345994][T10400]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  254.346018][T10400]  ? __fget_files+0x2a/0x410
[  254.346043][T10400]  ? __fget_files+0x2a/0x410
[  254.346071][T10400]  __sys_sendmsg+0x209/0x350
[  254.346094][T10400]  ? __pfx___sys_sendmsg+0x10/0x10
[  254.346122][T10400]  ? do_sys_openat2+0x17a/0x1d0
[  254.346162][T10400]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  254.346187][T10400]  ? do_syscall_64+0x100/0x230
[  254.346213][T10400]  ? do_syscall_64+0xb6/0x230
[  254.346237][T10400]  do_syscall_64+0xf3/0x230
[  254.346259][T10400]  ? clear_bhb_loop+0x35/0x90
[  254.346283][T10400]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.346304][T10400] RIP: 0033:0x7fa4d9f8d169
[  254.346318][T10400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  254.346330][T10400] RSP: 002b:00007fa4dadc9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  254.346347][T10400] RAX: ffffffffffffffda RBX: 00007fa4da1a5fa0 RCX: 00007fa4d9f8d169
[  254.346359][T10400] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  254.346368][T10400] RBP: 00007fa4dadc9090 R08: 0000000000000000 R09: 0000000000000000
[  254.346382][T10400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  254.346394][T10400] R13: 0000000000000000 R14: 00007fa4da1a5fa0 R15: 00007fff1585c2d8
[  254.346425][T10400]  </TASK>
[  254.361045][T10404] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000
[  254.775711][T10418] bridge2: entered promiscuous mode
[  254.781762][T10418] bridge2: entered allmulticast mode
[  254.788965][T10418] team0: Device bridge2 is up. Set it down before adding it as a team port
[  255.409862][T10453] FAULT_INJECTION: forcing a failure.
[  255.409862][T10453] name failslab, interval 1, probability 0, space 0, times 0
[  255.442297][T10453] CPU: 0 UID: 0 PID: 10453 Comm: syz.3.1395 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0
[  255.442327][T10453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  255.442341][T10453] Call Trace:
[  255.442349][T10453]  <TASK>
[  255.442358][T10453]  dump_stack_lvl+0x241/0x360
[  255.442390][T10453]  ? __pfx_dump_stack_lvl+0x10/0x10
[  255.442413][T10453]  ? __pfx__printk+0x10/0x10
[  255.442435][T10453]  ? kmem_cache_alloc_node_noprof+0x4f/0x380
[  255.442476][T10453]  ? __pfx___might_resched+0x10/0x10
[  255.442502][T10453]  ? aa_label_sk_perm+0x4f3/0x6c0
[  255.442537][T10453]  should_fail_ex+0x40a/0x550
[  255.442571][T10453]  should_failslab+0xac/0x100
[  255.442600][T10453]  kmem_cache_alloc_node_noprof+0x77/0x380
[  255.442631][T10453]  ? __alloc_skb+0x1c3/0x440
[  255.442658][T10453]  __alloc_skb+0x1c3/0x440
[  255.442686][T10453]  ? __pfx___alloc_skb+0x10/0x10
[  255.442720][T10453]  netlink_sendmsg+0x634/0xcb0
[  255.442755][T10453]  ? __pfx_netlink_sendmsg+0x10/0x10
[  255.442781][T10453]  ? aa_sock_msg_perm+0x91/0x160
[  255.442820][T10453]  ? __pfx_netlink_sendmsg+0x10/0x10
[  255.442838][T10453]  __sock_sendmsg+0x221/0x270
[  255.442873][T10453]  ____sys_sendmsg+0x53a/0x860
[  255.442908][T10453]  ? __pfx_____sys_sendmsg+0x10/0x10
[  255.442930][T10453]  ? __fget_files+0x2a/0x410
[  255.442962][T10453]  ? __fget_files+0x2a/0x410
[  255.443000][T10453]  __sys_sendmsg+0x269/0x350
[  255.443032][T10453]  ? __pfx___sys_sendmsg+0x10/0x10
[  255.443072][T10453]  ? do_sys_openat2+0x17a/0x1d0
[  255.443131][T10453]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  255.443165][T10453]  ? do_syscall_64+0x100/0x230
[  255.443199][T10453]  ? do_syscall_64+0xb6/0x230
[  255.443233][T10453]  do_syscall_64+0xf3/0x230
[  255.443264][T10453]  ? clear_bhb_loop+0x35/0x90
[  255.443298][T10453]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.443326][T10453] RIP: 0033:0x7fa4d9f8d169
[  255.443346][T10453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  255.443363][T10453] RSP: 002b:00007fa4dadc9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  255.443385][T10453] RAX: ffffffffffffffda RBX: 00007fa4da1a5fa0 RCX: 00007fa4d9f8d169
[  255.443399][T10453] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  255.443412][T10453] RBP: 00007fa4dadc9090 R08: 0000000000000000 R09: 0000000000000000
[  255.443424][T10453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  255.443435][T10453] R13: 0000000000000000 R14: 00007fa4da1a5fa0 R15: 00007fff1585c2d8
[  255.443473][T10453]  </TASK>
[  255.729639][T10456] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000
[  255.806723][T10455] netlink: 'syz.4.1396': attribute type 11 has an invalid length.
[  255.864309][T10461] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  255.864983][T10463] netlink: zone id is out of range
[  255.892365][T10463] netlink: zone id is out of range
[  255.897674][T10463] netlink: zone id is out of range
[  255.902960][T10463] netlink: zone id is out of range
[  255.908207][T10463] netlink: zone id is out of range
[  255.913647][T10463] netlink: zone id is out of range
[  255.918901][T10463] netlink: zone id is out of range
[  255.924219][T10463] netlink: zone id is out of range
[  255.929444][T10463] netlink: zone id is out of range
[  255.935187][T10463] netlink: zone id is out of range
[  256.155692][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  256.484248][T10487] netlink: 'syz.0.1406': attribute type 5 has an invalid length.
[  256.593353][T10488] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000
[  256.733220][T10498] x_tables: duplicate underflow at hook 1
[  256.808450][T10501] __nla_validate_parse: 12 callbacks suppressed
[  256.808474][T10501] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1412'.
[  256.935538][T10511] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1413'.
[  256.987793][T10511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1413'.
[  257.108807][T10511] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 42202 - 0
[  257.152743][T10511] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 42202 - 0
[  257.161460][T10511] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 42202 - 0
[  257.177551][T10511] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 42202 - 0
[  257.188558][T10511] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 47448 - 0
[  257.232487][T10511] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 47448 - 0
[  257.266641][T10511] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 47448 - 0
[  257.307951][T10511] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 47448 - 0
[  257.372208][T10511] ==================================================================
[  257.380349][T10511] BUG: KASAN: slab-use-after-free in udp_tunnel_update_gro_lookup+0xfe/0x2c0
[  257.389160][T10511] Write of size 8 at addr ffff888011c33d70 by task syz.2.1413/10511
[  257.397170][T10511] 
[  257.399520][T10511] CPU: 1 UID: 0 PID: 10511 Comm: syz.2.1413 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0
[  257.399549][T10511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  257.399564][T10511] Call Trace:
[  257.399572][T10511]  <TASK>
[  257.399582][T10511]  dump_stack_lvl+0x241/0x360
[  257.399611][T10511]  ? __pfx_dump_stack_lvl+0x10/0x10
[  257.399629][T10511]  ? __pfx__printk+0x10/0x10
[  257.399644][T10511]  ? _printk+0xd5/0x120
[  257.399658][T10511]  ? __virt_addr_valid+0x183/0x530
[  257.399673][T10511]  ? __virt_addr_valid+0x183/0x530
[  257.399688][T10511]  print_report+0x16e/0x5b0
[  257.399708][T10511]  ? __virt_addr_valid+0x183/0x530
[  257.399722][T10511]  ? __virt_addr_valid+0x183/0x530
[  257.399735][T10511]  ? __virt_addr_valid+0x45f/0x530
[  257.399748][T10511]  ? __phys_addr+0xba/0x170
[  257.399763][T10511]  ? udp_tunnel_update_gro_lookup+0xfe/0x2c0
[  257.399782][T10511]  kasan_report+0x143/0x180
[  257.399801][T10511]  ? udp_tunnel_update_gro_lookup+0xfe/0x2c0
[  257.399822][T10511]  udp_tunnel_update_gro_lookup+0xfe/0x2c0
[  257.399842][T10511]  geneve_sock_add+0x7d0/0xc40
[  257.399867][T10511]  ? __pfx_geneve_sock_add+0x10/0x10
[  257.399889][T10511]  ? ib_device_get_by_netdev+0x85/0x5e0
[  257.399918][T10511]  ? __pfx_geneve_udp_encap_recv+0x10/0x10
[  257.399940][T10511]  ? __pfx_geneve_udp_encap_err_lookup+0x10/0x10
[  257.399963][T10511]  ? __pfx_geneve_gro_receive+0x10/0x10
[  257.399985][T10511]  ? __pfx_geneve_gro_complete+0x10/0x10
[  257.400006][T10511]  ? ip6_route_dev_notify+0x99/0x600
[  257.400026][T10511]  ? notifier_call_chain+0x15a/0x3f0
[  257.400050][T10511]  ? notifier_call_chain+0x3cc/0x3f0
[  257.400072][T10511]  geneve_open+0xe3/0x160
[  257.400093][T10511]  __dev_open+0x45a/0x8a0
[  257.400121][T10511]  ? __pfx___dev_open+0x10/0x10
[  257.400154][T10511]  ? dev_set_rx_mode+0xb8/0x2e0
[  257.400180][T10511]  __dev_change_flags+0x1e2/0x6f0
[  257.400208][T10511]  ? __pfx___dev_change_flags+0x10/0x10
[  257.400233][T10511]  ? rtnl_create_link+0x95b/0xc90
[  257.400272][T10511]  rtnl_newlink_create+0x5ea/0xbd0
[  257.400294][T10511]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  257.400314][T10511]  ? __pfx___mutex_lock+0x10/0x10
[  257.400341][T10511]  ? ns_capable+0x8a/0xf0
[  257.400360][T10511]  rtnl_newlink+0x167a/0x1d90
[  257.400375][T10511]  ? stack_depot_save_flags+0x37/0x940
[  257.400406][T10511]  ? __pfx_rtnl_newlink+0x10/0x10
[  257.400419][T10511]  ? __netlink_deliver_tap+0x561/0x7f0
[  257.400444][T10511]  ? __pfx_validate_chain+0x10/0x10
[  257.400460][T10511]  ? __sock_sendmsg+0x221/0x270
[  257.400483][T10511]  ? ____sys_sendmsg+0x53a/0x860
[  257.400500][T10511]  ? __sys_sendmsg+0x269/0x350
[  257.400519][T10511]  ? do_syscall_64+0xf3/0x230
[  257.400541][T10511]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.400571][T10511]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  257.400601][T10511]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  257.400639][T10511]  ? mark_lock+0x9a/0x360
[  257.400662][T10511]  ? __lock_acquire+0x1397/0x2100
[  257.400713][T10511]  ? __pfx_lock_release+0x10/0x10
[  257.400754][T10511]  ? __pfx_rtnl_newlink+0x10/0x10
[  257.400770][T10511]  rtnetlink_rcv_msg+0x791/0xcf0
[  257.400794][T10511]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  257.400820][T10511]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  257.400847][T10511]  ? ref_tracker_free+0x643/0x7e0
[  257.400864][T10511]  netlink_rcv_skb+0x206/0x480
[  257.400888][T10511]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  257.400913][T10511]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  257.400946][T10511]  ? netlink_deliver_tap+0x2e/0x1b0
[  257.400971][T10511]  netlink_unicast+0x7f6/0x990
[  257.400996][T10511]  ? __pfx_netlink_unicast+0x10/0x10
[  257.401016][T10511]  ? __virt_addr_valid+0x45f/0x530
[  257.401030][T10511]  ? __phys_addr_symbol+0x2f/0x70
[  257.401044][T10511]  ? __check_object_size+0x47a/0x730
[  257.401067][T10511]  netlink_sendmsg+0x8de/0xcb0
[  257.401086][T10511]  ? __pfx_netlink_sendmsg+0x10/0x10
[  257.401119][T10511]  ? aa_sock_msg_perm+0x91/0x160
[  257.401145][T10511]  ? __pfx_netlink_sendmsg+0x10/0x10
[  257.401159][T10511]  __sock_sendmsg+0x221/0x270
[  257.401183][T10511]  ____sys_sendmsg+0x53a/0x860
[  257.401205][T10511]  ? __pfx_____sys_sendmsg+0x10/0x10
[  257.401223][T10511]  ? __fget_files+0x2a/0x410
[  257.401247][T10511]  ? __fget_files+0x2a/0x410
[  257.401280][T10511]  __sys_sendmsg+0x269/0x350
[  257.401301][T10511]  ? __pfx___sys_sendmsg+0x10/0x10
[  257.401338][T10511]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  257.401362][T10511]  ? do_syscall_64+0x100/0x230
[  257.401386][T10511]  ? do_syscall_64+0xb6/0x230
[  257.401410][T10511]  do_syscall_64+0xf3/0x230
[  257.401432][T10511]  ? clear_bhb_loop+0x35/0x90
[  257.401455][T10511]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.401476][T10511] RIP: 0033:0x7f761a38d169
[  257.401490][T10511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  257.401503][T10511] RSP: 002b:00007f761b216038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  257.401521][T10511] RAX: ffffffffffffffda RBX: 00007f761a5a5fa0 RCX: 00007f761a38d169
[  257.401533][T10511] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[  257.401543][T10511] RBP: 00007f761a40e2a0 R08: 0000000000000000 R09: 0000000000000000
[  257.401553][T10511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  257.401562][T10511] R13: 0000000000000000 R14: 00007f761a5a5fa0 R15: 00007fff586ed4d8
[  257.401580][T10511]  </TASK>
[  257.401585][T10511] 
[  257.923534][T10511] Allocated by task 10283:
[  257.927961][T10511]  kasan_save_track+0x3f/0x80
[  257.932657][T10511]  __kasan_slab_alloc+0x66/0x80
[  257.937525][T10511]  kmem_cache_alloc_noprof+0x1d9/0x380
[  257.942998][T10511]  sk_prot_alloc+0x58/0x210
[  257.947511][T10511]  sk_alloc+0x3e/0x370
[  257.951600][T10511]  inet_create+0x648/0xea0
[  257.956027][T10511]  __sock_create+0x4c0/0xa30
[  257.960630][T10511]  __sys_socket+0x150/0x3c0
[  257.965165][T10511]  __x64_sys_socket+0x7a/0x90
[  257.969851][T10511]  do_syscall_64+0xf3/0x230
[  257.974367][T10511]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.980278][T10511] 
[  257.982607][T10511] Freed by task 10283:
[  257.986690][T10511]  kasan_save_track+0x3f/0x80
[  257.991376][T10511]  kasan_save_free_info+0x40/0x50
[  257.996420][T10511]  __kasan_slab_free+0x59/0x70
[  258.001455][T10511]  kmem_cache_free+0x195/0x410
[  258.006237][T10511]  __sk_destruct+0x4fd/0x690
[  258.010839][T10511]  inet_release+0x17d/0x200
[  258.015351][T10511]  sock_close+0xbc/0x240
[  258.019606][T10511]  __fput+0x3e9/0x9f0
[  258.023604][T10511]  task_work_run+0x24f/0x310
[  258.028208][T10511]  do_exit+0xa2a/0x2940
[  258.032395][T10511]  do_group_exit+0x207/0x2c0
[  258.037037][T10511]  get_signal+0x168c/0x1720
[  258.041561][T10511]  arch_do_signal_or_restart+0x96/0x860
[  258.047128][T10511]  syscall_exit_to_user_mode+0xce/0x340
[  258.052690][T10511]  do_syscall_64+0x100/0x230
[  258.057296][T10511]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.063204][T10511] 
[  258.065530][T10511] The buggy address belongs to the object at ffff888011c33640
[  258.065530][T10511]  which belongs to the cache UDP of size 1856
[  258.078980][T10511] The buggy address is located 1840 bytes inside of
[  258.078980][T10511]  freed 1856-byte region [ffff888011c33640, ffff888011c33d80)
[  258.092974][T10511] 
[  258.095314][T10511] The buggy address belongs to the physical page:
[  258.101741][T10511] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888011c35d00 pfn:0x11c30
[  258.111813][T10511] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  258.120316][T10511] memcg:ffff88802c110701
[  258.124589][T10511] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  258.132149][T10511] page_type: f5(slab)
[  258.136142][T10511] raw: 00fff00000000040 ffff88801fad3dc0 ffffea00006de800 0000000000000002
[  258.144736][T10511] raw: ffff888011c35d00 000000008010000e 00000000f5000000 ffff88802c110701
[  258.153332][T10511] head: 00fff00000000040 ffff88801fad3dc0 ffffea00006de800 0000000000000002
[  258.162026][T10511] head: ffff888011c35d00 000000008010000e 00000000f5000000 ffff88802c110701
[  258.170718][T10511] head: 00fff00000000003 ffffea0000470c01 ffffffffffffffff 0000000000000000
[  258.179398][T10511] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[  258.188068][T10511] page dumped because: kasan: bad access detected
[  258.194492][T10511] page_owner tracks the page as allocated
[  258.200212][T10511] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5834, tgid 5834 (syz-executor), ts 83506484492, free_ts 83483166450
[  258.221592][T10511]  post_alloc_hook+0x1f4/0x240
[  258.226401][T10511]  get_page_from_freelist+0x365c/0x37a0
[  258.231968][T10511]  __alloc_frozen_pages_noprof+0x292/0x710
[  258.237792][T10511]  alloc_pages_mpol+0x311/0x660
[  258.242664][T10511]  allocate_slab+0x8f/0x3a0
[  258.247194][T10511]  ___slab_alloc+0xc27/0x14a0
[  258.251901][T10511]  __slab_alloc+0x58/0xa0
[  258.256243][T10511]  kmem_cache_alloc_noprof+0x268/0x380
[  258.261715][T10511]  sk_prot_alloc+0x58/0x210
[  258.266226][T10511]  sk_alloc+0x3e/0x370
[  258.270299][T10511]  inet_create+0x648/0xea0
[  258.274738][T10511]  __sock_create+0x4c0/0xa30
[  258.279342][T10511]  udp_sock_create4+0xda/0x670
[  258.284118][T10511]  wg_socket_init+0x6c0/0xea0
[  258.288824][T10511]  wg_open+0x255/0x420
[  258.292919][T10511]  __dev_open+0x45a/0x8a0
[  258.297282][T10511] page last free pid 5931 tgid 5927 stack trace:
[  258.303614][T10511]  free_frozen_pages+0xe0d/0x10e0
[  258.308649][T10511]  __slab_free+0x2c2/0x380
[  258.313073][T10511]  qlist_free_all+0x9a/0x140
[  258.317670][T10511]  kasan_quarantine_reduce+0x14f/0x170
[  258.323144][T10511]  __kasan_slab_alloc+0x23/0x80
[  258.328017][T10511]  kmem_cache_alloc_node_noprof+0x1d9/0x380
[  258.333932][T10511]  __alloc_skb+0x1c3/0x440
[  258.338359][T10511]  netlink_sendmsg+0x634/0xcb0
[  258.343149][T10511]  __sock_sendmsg+0x221/0x270
[  258.347840][T10511]  ____sys_sendmsg+0x53a/0x860
[  258.352617][T10511]  __sys_sendmsg+0x269/0x350
[  258.357214][T10511]  do_syscall_64+0xf3/0x230
[  258.361731][T10511]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.367655][T10511] 
[  258.369998][T10511] Memory state around the buggy address:
[  258.375654][T10511]  ffff888011c33c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  258.383824][T10511]  ffff888011c33c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  258.391896][T10511] >ffff888011c33d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  258.399973][T10511]                                                              ^
[  258.407699][T10511]  ffff888011c33d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  258.415765][T10511]  ffff888011c33e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  258.423830][T10511] ==================================================================
[  258.434720][T10511] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  258.441950][T10511] CPU: 1 UID: 0 PID: 10511 Comm: syz.2.1413 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0
[  258.452728][T10511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  258.462802][T10511] Call Trace:
[  258.466090][T10511]  <TASK>
[  258.469033][T10511]  dump_stack_lvl+0x241/0x360
[  258.473755][T10511]  ? __pfx_dump_stack_lvl+0x10/0x10
[  258.478963][T10511]  ? __pfx__printk+0x10/0x10
[  258.483569][T10511]  ? vscnprintf+0x5d/0x90
[  258.487914][T10511]  panic+0x349/0x880
[  258.491817][T10511]  ? check_panic_on_warn+0x21/0xb0
[  258.496949][T10511]  ? __pfx_panic+0x10/0x10
[  258.501371][T10511]  ? mark_lock+0x9a/0x360
[  258.505719][T10511]  ? _raw_spin_unlock_irqrestore+0xd8/0x140
[  258.511624][T10511]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  258.517530][T10511]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  258.523868][T10511]  ? print_report+0x519/0x5b0
[  258.528559][T10511]  check_panic_on_warn+0x86/0xb0
[  258.533534][T10511]  ? udp_tunnel_update_gro_lookup+0xfe/0x2c0
[  258.539534][T10511]  end_report+0x77/0x160
[  258.543802][T10511]  kasan_report+0x154/0x180
[  258.548318][T10511]  ? udp_tunnel_update_gro_lookup+0xfe/0x2c0
[  258.554316][T10511]  udp_tunnel_update_gro_lookup+0xfe/0x2c0
[  258.560138][T10511]  geneve_sock_add+0x7d0/0xc40
[  258.564922][T10511]  ? __pfx_geneve_sock_add+0x10/0x10
[  258.570222][T10511]  ? ib_device_get_by_netdev+0x85/0x5e0
[  258.575804][T10511]  ? __pfx_geneve_udp_encap_recv+0x10/0x10
[  258.581628][T10511]  ? __pfx_geneve_udp_encap_err_lookup+0x10/0x10
[  258.587979][T10511]  ? __pfx_geneve_gro_receive+0x10/0x10
[  258.593547][T10511]  ? __pfx_geneve_gro_complete+0x10/0x10
[  258.599198][T10511]  ? ip6_route_dev_notify+0x99/0x600
[  258.604496][T10511]  ? notifier_call_chain+0x15a/0x3f0
[  258.609797][T10511]  ? notifier_call_chain+0x3cc/0x3f0
[  258.615101][T10511]  geneve_open+0xe3/0x160
[  258.619452][T10511]  __dev_open+0x45a/0x8a0
[  258.623803][T10511]  ? __pfx___dev_open+0x10/0x10
[  258.628672][T10511]  ? dev_set_rx_mode+0xb8/0x2e0
[  258.633537][T10511]  __dev_change_flags+0x1e2/0x6f0
[  258.638579][T10511]  ? __pfx___dev_change_flags+0x10/0x10
[  258.644137][T10511]  ? rtnl_create_link+0x95b/0xc90
[  258.649187][T10511]  rtnl_newlink_create+0x5ea/0xbd0
[  258.654321][T10511]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  258.659968][T10511]  ? __pfx___mutex_lock+0x10/0x10
[  258.665014][T10511]  ? ns_capable+0x8a/0xf0
[  258.669357][T10511]  rtnl_newlink+0x167a/0x1d90
[  258.674050][T10511]  ? stack_depot_save_flags+0x37/0x940
[  258.679536][T10511]  ? __pfx_rtnl_newlink+0x10/0x10
[  258.684569][T10511]  ? __netlink_deliver_tap+0x561/0x7f0
[  258.690051][T10511]  ? __pfx_validate_chain+0x10/0x10
[  258.695265][T10511]  ? __sock_sendmsg+0x221/0x270
[  258.700131][T10511]  ? ____sys_sendmsg+0x53a/0x860
[  258.705082][T10511]  ? __sys_sendmsg+0x269/0x350
[  258.709858][T10511]  ? do_syscall_64+0xf3/0x230
[  258.714556][T10511]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.720653][T10511]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  258.726663][T10511]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  258.733022][T10511]  ? mark_lock+0x9a/0x360
[  258.737370][T10511]  ? __lock_acquire+0x1397/0x2100
[  258.742460][T10511]  ? __pfx_lock_release+0x10/0x10
[  258.747514][T10511]  ? __pfx_rtnl_newlink+0x10/0x10
[  258.752572][T10511]  rtnetlink_rcv_msg+0x791/0xcf0
[  258.757557][T10511]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  258.762701][T10511]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  258.768200][T10511]  ? ref_tracker_free+0x643/0x7e0
[  258.773250][T10511]  netlink_rcv_skb+0x206/0x480
[  258.778068][T10511]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  258.783557][T10511]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  258.788911][T10511]  ? netlink_deliver_tap+0x2e/0x1b0
[  258.794157][T10511]  netlink_unicast+0x7f6/0x990
[  258.798957][T10511]  ? __pfx_netlink_unicast+0x10/0x10
[  258.804291][T10511]  ? __virt_addr_valid+0x45f/0x530
[  258.809459][T10511]  ? __phys_addr_symbol+0x2f/0x70
[  258.814505][T10511]  ? __check_object_size+0x47a/0x730
[  258.819815][T10511]  netlink_sendmsg+0x8de/0xcb0
[  258.824624][T10511]  ? __pfx_netlink_sendmsg+0x10/0x10
[  258.829936][T10511]  ? aa_sock_msg_perm+0x91/0x160
[  258.834905][T10511]  ? __pfx_netlink_sendmsg+0x10/0x10
[  258.840205][T10511]  __sock_sendmsg+0x221/0x270
[  258.844918][T10511]  ____sys_sendmsg+0x53a/0x860
[  258.849713][T10511]  ? __pfx_____sys_sendmsg+0x10/0x10
[  258.855072][T10511]  ? __fget_files+0x2a/0x410
[  258.859688][T10511]  ? __fget_files+0x2a/0x410
[  258.864304][T10511]  __sys_sendmsg+0x269/0x350
[  258.868915][T10511]  ? __pfx___sys_sendmsg+0x10/0x10
[  258.874067][T10511]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  258.880419][T10511]  ? do_syscall_64+0x100/0x230
[  258.885211][T10511]  ? do_syscall_64+0xb6/0x230
[  258.889915][T10511]  do_syscall_64+0xf3/0x230
[  258.894442][T10511]  ? clear_bhb_loop+0x35/0x90
[  258.899145][T10511]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.905061][T10511] RIP: 0033:0x7f761a38d169
[  258.909493][T10511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  258.929117][T10511] RSP: 002b:00007f761b216038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  258.937561][T10511] RAX: ffffffffffffffda RBX: 00007f761a5a5fa0 RCX: 00007f761a38d169
[  258.945554][T10511] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[  258.953539][T10511] RBP: 00007f761a40e2a0 R08: 0000000000000000 R09: 0000000000000000
[  258.961526][T10511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  258.969511][T10511] R13: 0000000000000000 R14: 00007f761a5a5fa0 R15: 00007fff586ed4d8
[  258.977507][T10511]  </TASK>
[  258.980793][T10511] Kernel Offset: disabled
[  258.985132][T10511] Rebooting in 86400 seconds..