last executing test programs:

1m4.2869752s ago: executing program 0 (id=3508):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x803, 0x3, 0x0, 0x3}, 0x8)
sendto$inet(r0, &(0x7f0000000300)="ab", 0x1a000, 0x0, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10)

54.361935795s ago: executing program 0 (id=3508):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x803, 0x3, 0x0, 0x3}, 0x8)
sendto$inet(r0, &(0x7f0000000300)="ab", 0x1a000, 0x0, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10)

41.74487608s ago: executing program 0 (id=3508):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x803, 0x3, 0x0, 0x3}, 0x8)
sendto$inet(r0, &(0x7f0000000300)="ab", 0x1a000, 0x0, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10)

29.950614864s ago: executing program 0 (id=3508):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x803, 0x3, 0x0, 0x3}, 0x8)
sendto$inet(r0, &(0x7f0000000300)="ab", 0x1a000, 0x0, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10)

17.483947583s ago: executing program 0 (id=3508):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x803, 0x3, 0x0, 0x3}, 0x8)
sendto$inet(r0, &(0x7f0000000300)="ab", 0x1a000, 0x0, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10)

6.617324399s ago: executing program 0 (id=3508):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x803, 0x3, 0x0, 0x3}, 0x8)
sendto$inet(r0, &(0x7f0000000300)="ab", 0x1a000, 0x0, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10)

3.173980393s ago: executing program 1 (id=4669):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0)

2.958029989s ago: executing program 3 (id=4671):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000400)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc40206c86df9abc5be93ce0d", 0x70}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631baa83e3daf514c600450374f6d76b8fcf2bc3eca29ce7538f85a", 0x62}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000480)="acc841985992b795542cfc02168702bbeaa47559108de013368744361ae9fce3a400000000000000127afcd0ef8e31b66fe812b7ae70a93dbc94e463f3c6e27bf3762122c4e8a5ab049e37dca0574406f4d0", 0x52}, {0x0}], 0x2}}], 0x2, 0xc0)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)

2.833790291s ago: executing program 1 (id=4673):
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0}, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="1a64829bf8f72508a80cd8d857b57faf39ee3f9eea1eee8a57ed874438f5d4c1071331ca143e3e50586a06bc83689f2a60f917d4a74431cc", 0x38}], 0x1}}], 0x1, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x6c}}, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x19)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, &(0x7f0000000580)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x76, 0x8, 0x0, 0x0}}, 0x10)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000009c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0x54, r0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0xc}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xa6}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x7}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x2}]}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x100000d1}, 0x4000000)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x82, 0xca, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'})
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

2.548454522s ago: executing program 1 (id=4677):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af989023", 0xa2}, {&(0x7f0000000400)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc40206c86df9abc5be93ce0d", 0x70}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631baa83e3daf514c600450374f6d76b8fcf2bc3eca29ce7538f85a", 0x62}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000480)="acc841985992b795542cfc02168702bbeaa47559108de013368744361ae9fce3a400000000000000127afcd0ef8e31b66fe812b7ae70a93dbc94e463f3c6e27bf3762122c4e8a5ab049e37dca0574406f4d08d7a6f4032c1abd9c33fb7", 0x5d}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62", 0xc4}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2d", 0x1d}], 0x3}}], 0x2, 0xc0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)

2.52404373s ago: executing program 4 (id=4678):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340", 0xa3}, {0x0}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631baa83e3daf514c600450374f6d76b8fcf2bc3eca29ce7538f85aa34b2bdcc17ecd080f0850377f771a4e8693703da4e347e0165f00872a2184", 0x81}, {&(0x7f00000006c0)="4068745fc217775e9fca3477d3c929da231d710ed7bb68bf2f127cb83703392703f53051ec7ebd4d519a9db1973eaeda928822aaa8d3a9677374a52305e2ad", 0x3f}], 0x4}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000480)="acc841985992b795542cfc02168702bbeaa47559108de013368744361ae9fce3a400000000000000127afcd0ef8e31b66fe812b7ae70a93dbc94e463f3c6e27bf3762122c4e8a5ab049e37dca0574406f4d08d7a6f4032c1abd9c33fb7", 0x5d}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62", 0xc4}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2d", 0x1d}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)="b5", 0x1}], 0x1}}], 0x3, 0xc0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)

2.396701239s ago: executing program 4 (id=4679):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8)
writev(r0, &(0x7f0000000580)=[{&(0x7f0000000700)='\b', 0x1}], 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000010000001080004000000000004000180080008"], 0x28}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'hsr0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@ipv6_getaddrlabel={0x60, 0x4a, 0x29a88eb4bd248bdb, 0x70bd2b, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, r4, 0x8000}, [@IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x60}, 0x1, 0xba01, 0x0, 0x44005880}, 0x40000000)
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x3c, 0x0, 0x1, 0x70bd30, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000)
r5 = socket(0x15, 0x5, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x80)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x2d}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r7}, 0xc)
connect$netrom(r5, 0x0, 0x0)

2.020369682s ago: executing program 3 (id=4680):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000180)="0b0314002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r1}, 0x14)

1.993289845s ago: executing program 3 (id=4681):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={0x14, 0x15, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfe88, &(0x7f00000001c0)={&(0x7f0000000680)=@updpolicy={0x254, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x400, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x100, 0x0, 0xffffffffffffffff}}, [@mark={0xc, 0x15, {0x35075a, 0x2}}, @sa={0xe4, 0x6, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, @in=@empty, 0x4e24, 0x5, 0x4e22, 0x0, 0x2, 0x20, 0x0, 0x1, 0x0, 0xee00}, {@in=@multicast2, 0x4d6, 0x2b}, @in=@private=0xa010101, {0x400, 0x6, 0x100000001, 0xfffffffffffffff6, 0x0, 0x8, 0x4, 0x5}, {0x3, 0x4, 0x7, 0x2}, {0x7f, 0x5, 0x5}, 0x70bd2c, 0x350b, 0xa, 0x1, 0x2, 0x2}}, @policy={0xac, 0x7, {{@in6=@empty, @in=@loopback, 0x4e23, 0x81, 0x4e21, 0x6, 0xa, 0x80, 0x20, 0x3b}, {0x9, 0xc66, 0x4, 0x6, 0x7, 0x9, 0x8c75, 0x9}, {0x569, 0x7, 0xf4f, 0x400}, 0x80, 0x6e6bb3, 0x0, 0x0, 0x3, 0x2}}]}, 0x254}}, 0x4004)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}}, 0x0)

1.932406387s ago: executing program 3 (id=4682):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340", 0xa3}, {0x0}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631baa83e3daf514c600450374f6d76b8fcf2bc3eca29ce7538f85aa34b2bdcc17ecd080f0850377f771a4e8693703da4e347e0165f00872a2184", 0x81}, {&(0x7f00000006c0)="4068745fc217775e9fca3477d3c929da231d710ed7bb68bf2f127cb83703392703f53051ec7ebd4d519a9db1973eaeda928822aaa8d3a9677374a52305e2ad", 0x3f}], 0x4}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000480)="acc841985992b795542cfc02168702bbeaa47559108de013368744361ae9fce3a400000000000000127afcd0ef8e31b66fe812b7ae70a93dbc94e463f3c6e27bf3762122c4e8a5ab049e37dca0574406f4d08d7a6f4032c1abd9c33fb7", 0x5d}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62", 0xc4}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2d", 0x1d}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)="b5", 0x1}], 0x1}}], 0x3, 0xc0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)

1.837831029s ago: executing program 2 (id=4683):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socket$packet(0x11, 0x2, 0x300)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='br_fdb_add\x00', r1}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x9b}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0ffe0000000000002800128009000100766c616e000000001800028006000100000000000c000300000000000000000008000500", @ANYBLOB='\b\x00\n\x00', @ANYRESDEC=r2], 0x58}, 0x1, 0xba01}, 0x0)

1.584518727s ago: executing program 1 (id=4684):
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfe0f, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010000304000000003f00000000000000", @ANYRES32=0x0, @ANYBLOB="a5ffad88000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r2, @ANYBLOB="080004"], 0x4c}}, 0x80)

1.509619985s ago: executing program 2 (id=4685):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=r0], 0x20)

1.417079122s ago: executing program 2 (id=4686):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000b00)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a11820fffff5bab4e210000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000100224e0000", 0x58}], 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0xd80, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x7}]}, @NFT_MSG_DELRULE={0xf8, 0x8, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x9c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x14}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}]}}}, {0x5c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x22}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x22}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_META_SREG={0x8}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}, {0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88a2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x100, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xa3, 0x6, "8d8c851a8c4b90c1ce881177a5c05e6043891b6dc827e7cb7fc88304e07fb296cd026bd173f9e91556a932108e9f282dfff1018d626cc291d839ce653c5361cca369a115361a941578a9d21df25eb8000361137e0e049e6e99243e4a55e5c01c0eb825a990ce45d7d4840117450af544a587da9636db81a0ef559831b0b4c7470cca7ff839aa767628d54e1a958c86e2a91f0914f2caef65fe4e04a355585e"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x9}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x904, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14}}, 0x2ac}, 0x1, 0x0, 0x0, 0x26000045}, 0x4)

1.393478443s ago: executing program 4 (id=4687):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket(0x10, 0x80002, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$sock_TIOCINQ(r2, 0x541b, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r5, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r5, 0x0)
connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r6 = socket$unix(0x1, 0x1, 0x0)
unshare(0x22020600)
unshare(0x2a020400)
connect$unix(r6, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r5, 0x802)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000005500010e0e0000000000000007000000", @ANYRES8, @ANYBLOB="200001"], 0x38}}, 0x0)
sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0)

1.168571625s ago: executing program 2 (id=4688):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x80)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0xf99a888b46265b1b)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f0000000040))
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="2e00000010008188040f6fec59acbc0435a181003f0000", 0x17}], 0x1}, 0x0)

1.105415542s ago: executing program 2 (id=4689):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340", 0xa3}, {0x0}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631baa83e3daf514c600450374f6d76b8fcf2bc3eca29ce7538f85aa34b2bdcc17ecd080f0850377f771a4e8693703da4e347e0165f00872a2184", 0x81}, {&(0x7f00000006c0)="4068745fc217775e9fca3477d3c929da231d710ed7bb68bf2f127cb83703392703f53051ec7ebd4d519a9db1973eaeda928822aaa8d3a9677374a52305e2ad", 0x3f}], 0x4}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000480)="acc841985992b795542cfc02168702bbeaa47559108de013368744361ae9fce3a400000000000000127afcd0ef8e31b66fe812b7ae70a93dbc94e463f3c6e27bf3762122c4e8a5ab049e37dca0574406f4d08d7a6f4032c1abd9c33fb7", 0x5d}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62", 0xc4}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2d", 0x1d}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)="b5", 0x1}], 0x1}}], 0x3, 0xc0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)

1.028949934s ago: executing program 3 (id=4690):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0x8)
r2 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x9}, 0x10)
sendto$inet6(r2, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r5=>0x0]}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000002c0)={<r6=>r5, 0xf8, 0x4, 0x7f, 0x9, 0xb09b, 0x94, 0x5, {r5, @in={{0x2, 0x4e21, @multicast2}}, 0x1000, 0x3, 0x4, 0x1, 0x5}}, &(0x7f0000000180)=0xb0)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r7}, &(0x7f00000002c0), &(0x7f0000000300)=r8}, 0x20)
setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000001c0)={r6, 0x8d}, 0x8)
sendmsg$inet_sctp(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x209, 0x28, 0x200000b, r5}}], 0x20, 0x6044}, 0x6)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000400)={r5, 0xd}, 0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x7fff, 0x1, 0x6, 0xa, r5}, &(0x7f0000000040)=0x10)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newlink={0x40, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4710c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x4}, @IFLA_LINKMODE={0x5, 0x11, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0)

487.595404ms ago: executing program 1 (id=4691):
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000)="10a560a68b36ea91dd40d81e6412a6cd17", &(0x7f0000000040)=""/100}, 0x20)
r0 = socket$key(0xf, 0x3, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000180)='GPL\x00', 0x5, 0xd8, &(0x7f00000001c0)=""/216, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x8, 0x3}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000380)=[{0x5, 0x4, 0xa}, {0x5, 0x3, 0x0, 0x7}], 0x10, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='fsi_master_rw_result\x00', r1, 0x0, 0x5}, 0x18)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x401, 0x0)
ioctl$PPPIOCDISCONN(r2, 0x7439)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000500)={'virt_wifi0\x00', {0x2, 0x4e20, @rand_addr=0x64010102}})
r3 = socket$caif_seqpacket(0x25, 0x5, 0x3)
close(r3)

464.757252ms ago: executing program 4 (id=4692):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
syz_emit_ethernet(0xfc0, &(0x7f0000000940)={@random="757e938fd660", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0xf8a, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x8, '\x00', @mcast1, [{0x4, 0x1ee, "96fd4a0428d78485059d278ffcf8f231c694a7649146915b3ef652325e71ef0f78640708a7a479a974d15527620128e3090eff30274fe56db9b4620b1d2195bb074f7f372c3c17cfcaa8007684506e16446e71a511027268ad1afa509b3eee3d8b9c2384640cc5ab8a1739113ececf1a2e4dd8442a65e9bb1e3baf0a54c24585430b1c2c12ae4129a24d5666dc342d99cd7974600345a721a756cfda9370b699248ac87076fe50c571752481e395d1991a40930fbbe5dd0cdf54c6e32c857fba75d9cb0272752393253e81c809d6eef8fddae8d38c4bdf2adf673f38be7d26efb065363ef7a789ca242a49ff7ffb133422d792548bd16d728f07a1610c487a566b005deded4c9682f71662cf449dec8dbd0968bf099129a789bc828936d06217d71aad0348bf3b7838481f9eaf3bc378752a9aeac35c5d6cbfaffbcf68a6c4e3303818b3f00679fec5f33866746cb6103a8829bb3a822084c8e9733e8979efc0f05ccfc3b4c3190c477872c85f7f70fcc67bedbb47b5d16428fe6c4c0e6f8ae697a012b11b3ca5acc432f42a25abd8bf862a4f16c51b67469eef5811a2da95284857cc58cfdc089c74860e01ed07c07229f52b24ff70b84600bc0312a557afd3fa19d23a0d1d993839e870340fe001a038f61138d24e1c3058247e260277df7217b0568a81e12fa9beb2965227a4cdb98d13d80b2bb92be77655d8fc100afac587d8edd2512c5b145e78f64059a303d650dcec0fa8f34c4df6ce0048ead5bff44aac10ad2efaee37fc053140be6bc2d390665293a08cbe4b2eea2da0c66a3a72cf0ee5129f64b4f4c2deae01215e2e6d9d7311c1bf679bc09ed389735961bf4d0d848d5193bf082521ef7970377babb55497c06009451f57039aaad13a4f8fe861cd849460c05f45367e26ce4e365393f496d0390001aa5f61263d114cba67df0e06627b53ddea31ee9e65dd6111f0da97b9fcde5b4245b5b76fd6a93fdc444c0e4c799030c51c435e39cd42e07472dd21d35dfda0f6d9b773e9f3c5f6556645ab542324e61477be7daf8b5b5b3011adec8c1059d02802d7008e8d29c3de3df24356834e097b7f9d5d9ad7bb91e1a414051be7a9b82e383a69255c23c6d95d78af1cdf5f84cc87728c7797091ed9cdbdce32809cf80e24ce9e3c3ef0bde45a7238c7a54a3b2a56e27678e9ac9cd99f5c49616270e40cd644fb6340bb4a9cb4996efa61ff0d56e992d700a3cd1146ef7d57754396e3bc6691e1a479af40999283d0029b082045be57a02238590cfdc70413fbb747f0bd2c1ef5324d8f75131a83cb0c4ac1407aff6f539a8cb27e02cba16837c19cfd7361b31a62ddee5651d1e136677cb1a1754e8c2e29373529b0d80ac8fb08c146022a4541ca86dbb26b5b0a7d3385793946a39dea67141971cf14ec6ffa6be9404e5b16add6c12e36f0595905b8e5df36d8c5775e0e8f7b31845067e76f7a83bfc2c27f5960ac7c1340b59f2ed856f5c652667223d9596b03c879966fc154b1ada0fcdf960b9e9981fd4ce56d25bd017d28b7e381358e66948b9ee88511d2d0046711cd384f75f9b7969f26353734b49c402035bdf2a49a5e4d7205765b0909f25aa3df61d7488da2d13a392a67237291d1f3639713e4381a036d23e922953c95de91ed41cdc3fec3476f9713f80e57aba5b2effda3336feda380b7f7ddce0a28dc3b9e43dc0de6133e50d825f589545c059983a394d2156901072678f7c886f6c0cc5127d9fa7284b8993ad84d906881a54761c36899d41205fe4fa04e6d857ae4a504c3277960d4d8ae23f2d176bec62b7f4ab512b3233f26cbf012029740217b8e7ce634b7cf5775d15fb36100ab49dc0520b927a38df1861dd6728bd5f6ec9f09da5b179e50c16a0d24eb93e53bc6255e798f2166f9ca92ab38717d7f8d2a8000b7710e5e5144d17de23e085fdc4c83046f67100b06db5caba4421de0ede2d57b8a5b19156a73bcc6222156ba8ed579cc2f57f8e16767708e096caa031c80b5a0919fd503a21c7575a6eb8f6dd166ecc108652b7a5fd862a4b9f97569f36382e9ae533d5f7d0ba13deeb258dcdc60126f129fe6aa1e2c02bba74e698c6c11c3977b281d4313affc84d7281400e8ccb5186d745f32076f4cbdac3590948026aec43c9311f80ee72c89ca5ceb0fad007a53f99e50d9f7629f79165bb46e743128df9aac93000a74100702578fb339b67008bda51e6ae17f2f80995abc2246ad742246eb3f0255f84c909b0af7050f3c8f3cf3426f300f1fd6567d1f567c2589213b0c5050509cea23ecb0f1565db666eff75ec6008a90d695386551b98c1f9e0e035ed0148d1f4790fbd97d9812a63f49479e63b4841933ec5235e37508682ed259623bf5926265b456fb2e29ac8144389822c62d3b982dbb5dfab7be5f713878b9fa57da2432f67789d9f12e29063384b8a6a0f7d8bdcb7ea7b449bc61ce3604f2d0e9e8744def673be60e71db1d3e04262e8f0c555e161c206efabe5095c65da2593a385ef64edfe3d0a544e74026d99ec2e0c780e5b168e480a82af638893b1997d5ac36ed35b3779f0ce408cb7acbab822e7fa86a0b7b3680f91f15a9fa83c12f96a090ef99186959e6ea25a4ecf5d5e5af8414155af79c31e9787d80f3e294001bbbcf04e8cef9494e95144251086bf11f03738fc3b513ffb288977f31f56cde937ecfe105a7f4ecc65264d6fca32fbc8573a27ea564676e65528ffe454923a2b50205468340113dc9c9b1ce8d8d4be884a2ef5cf510ecc779aeb7d60145f00a30257f8069ab9d9c03179aacf43de7210a63e1008ea11cccf7d11b0cdbae0e13bfb5624b7991a1c80a044a3748023449c8ca4fdbbe7d71a891128d5cd3de96c50392ae72d48cc30bfd678fb78288660884b5983759f299dd460e374ac20f87f10040458c87ef5797d98406564bf94db87d80ca63f0f15ac50898501a8e1146d3a07293576790525f95f908e15f12f0368fc8a7003c57c59fe97b6b4c53b13269f7a793fc42e4c2f91cf9267dfa47db3350f5b332a361e554fdbd0a466b30a318841f0de89fcbb86b8e65c14def3ab212fcfe5f4f1186404fa9e899124a1eea1bfc88c89bcb350072666a62cb8e823d6612e611241cdabd309445ef3af0c99a9c39d43fd97fe1c0dd1dd6641ec6f9a4b60abbb55615a210ef55903639bbf89bb735978228918a7a99640a785b55224d71c844cf9538ccc7843e126c7909a1656f3f5a2db48f14789fd13d93d2946c005df33f2bdc2d31867ac95dd8c82f3b82bee3a9e78eaee3cc8a0b6f146bcf7bb527e8d8fd110b2ea3a0533a533d5b3dc937a0f1cdbacb2cd86837e4b58e1eb440d5e0f5d0aa7487ff4d1de68fcf3f026c2b6eeebff6e020286ae3d0bb9225f1731330788d456426656b231232b0b813deb1df87e2e9e51b01f1390688841116b3d1982c8a1963d64bb18ba40fbcd0b16a48b28deef9687adf273ace8d85071f049aa0119d23936766eaeae3ea55ad23825921e1eafaf215230cc6a88840435cbab9a0ac64028f93e07266b455961332d73834da9cbbfd098fd641b96633ddebb5202bd716278df8f8dfecf309bda579c50374cd8a53d6490a914eefe0f907558aea112eb722c47cdbf14e891495188576318273bf9487cbce8a91640acd06175c8d21c5a9762fcbafc45c277cf01add8e74dd4b2377a2acf7ada59e729b408f879202f0cd8b373cd4697ac540886db47a43688f68a4363792fdb4ad9d1157a50af1e0062518e879fd6f791b1b7ea1ace2745376041534bbbd3eef2a697da906cc5c31aaead2da3fe009898a20179658ea53432b84f2aab635e0ab93856ecec0e7f911598d2a502d1ac9a2a61ae0373988fb41330ddf08556083e41161e59d8956d24ed5148e5bd86a21cad0eff370e6743fd9ad9503cd47fe6ed8280244d0c644d436942aad423e5938bfdaccb051c806b1a9f473e15c8e6b5e4a4ebf9740e2e0d7e986f2a62d947a9ed63d2ad1c3a1f2c3bf50073604855af9c8b2a8da8ebc3c81ec38c9d43797ba231ac89dc5c5a1cf9225a3ed3a01aa6413ced483d212674f57b9ace15c446a3135bf11187c3da5ffc6ed2fa55da0b0dca6a70e98d5f56e126e83936b96d6bdb15c5a8d75cd4cda63ee9ac894d4fbb50409df8d87eaf957d3cb4c51871044d75c11794268c4bb723d6d4dff64b6feb3a818ee3f183fccd62eca4914d5f879aa0353c63a62c5703aeb55e8d14f6e4b7997fe9a5e3840d1ab4cb973cf7972066dc0849616c11af97b3a365931bef9a95cc9a4275355010a23b80d6c64c7f9da19f98912e7e4d2f63a0ff661258d9228226593074d60d3d05562a6c346170649c378564234a36dbac23b01b9d480e5bc51a040475f7d6d2d7e5b9270235397c9e4f8c1ad1d48bb0d66f4705c89f4c6dec66efcdd80fb7ab07ac2fa6a3bca7b33fa8a5007d792284bd86bc3254300b7a54efb7f24a00b1fd2c79011f5a4526ada7ba22a2fbba4b05a6b9f95e14228f362a44743c0645a7be5a96885b3443ec49faa7960305b7da1c888ccb11670c92abc3b8401b0ebdea8544304405e1b8a9cf2d31c23dd2ec886f4461a9759b2b90c2f0ca7b800644bba6b7b2bcc5c0eea38e748e81019b5ddd9ecb41fa03078e4ad2ec4acb0af00946a20c5d76be0440399398a66532e486aec59f477fc38f05672af10faa41d9856b393dd342150ef4fdebf42eb0839222d980d5950a4dad126205baa475c67a31a41f611948ad7cd62dbbd27726b113652ee54a2bd3440052720dec853d0e9b0621882523b2b058636370437fe2ed7a9314d43b72c6befdd1d27099e58d49ec66fd20b2baf554917ea2d4b1fedd2bd4e71cec1c48b4f61fddb56ef34746adcd896326d96ed8ccdab175f8a1dc8610c5e2a201db43c8d28a17f406f04be4734b32d900918e0855ef7cc0d95ee704413c8681c4e530af16f03782a4cce79c4327504bdf406b49d2ac5488fc9e168024676319894cf69c694f1e2e5eeec52c79ea0a0d630c07f6bf1b78829858bd525f318c450dd5e33256a45fa024ce2a25492478736c288bfc0100ee9cf1cb363c0de7f5ec7ed7e331cf2a05d9a57574085667262ff435a12c47353432c8e1c2fdd7328be13bc3047eebb96c70b3886cb9abe67375d120daf299807fe023ad75165b8ce82595391499d5092195f596acb057b387d01a2a55df0b207e367eb81f49b0942332a94472d6929cafda67fec6034313abc9e4c1c56fb73b594a53ae7f522882493a49962074915c272f525f919a6e207d9da9be0afa6c9f31cb23af954c51fc7db796874db05c85eaf725c906d95e41ee83ae4de64ff96c26d52a6eff8a97fd6265e29949b96e053b8aa3410242967a1f11742fc541c0bd3b68290674c82221c42695ffc7195dbbae245640a8c8611d2c01993e19e9140f5e1ecd5690580835bcd7c7ddd1f1972c91b18dcc36c63252a3ac943194b902adcd945e340685a3b434c4eb362fa423c580172f03acddfdd0792ded9949c2833bf2f01959fdaf9e2295391518909e81aee7aae12347c6efe0e81153687b3998ca070d9a1457205"}]}}}}}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x3e, 0x107, 0xfffffffc, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x136}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x15, 0x6, 0x0, 0x0, @str='\x83\n\xc7$S\x9b#U*P\xd7l\x94\x19\x80\x8a\x99'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x70bd2c, 0x25dfdbfd, {0x2}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_FDB={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4402}, 0x100000000000000)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x34, r4, 0x5, 0x71bd27, 0x4, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac02}]]}, 0x34}, 0x1, 0x0, 0x0, 0x85}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r5, @ANYRES32=r5], 0x20)

292.104394ms ago: executing program 1 (id=4693):
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000fcfbffffff0000000000001801000020646c2a00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffbf1f000b7d090008000000b703000000000000850000008a00000095000000000000003aabaa99d22d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @typedef={0x1}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x81000, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0x12, 0x0, &(0x7f0000000240)="5cdd3086ddff0066b3c9bbac88a8862c00df", 0x0, 0x147, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @broadcast, 'bond_slave_1\x00'}}, 0x1e)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c)
setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c)
setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c)
setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="ec000000210001000000000000000000e0000001000000000000000000000000e000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0xec}}, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x84)
r8 = socket(0x10, 0x80002, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'veth1_macvtap\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r9], 0x50}}, 0x800)
sendmmsg$alg(r8, &(0x7f00000000c0), 0x492492492492627, 0x0)
setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8)
close(r7)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880)
connect$pppoe(r4, &(0x7f00000000c0)={0x18, 0x0, {0x3, @random}}, 0x1e)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003b000701000000000ce2aa6602"], 0x2c}}, 0x0)

241.113091ms ago: executing program 4 (id=4694):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7", 0x99}, {&(0x7f0000000400)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc40206c86df9abc5be93ce0d", 0x70}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631baa83e3daf514c600450374f6d76b8fcf2bc3eca29ce7538f8", 0x61}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000480)}, {0x0}], 0x2}}], 0x2, 0xc0)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)

94.535636ms ago: executing program 2 (id=4695):
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0}, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="1a64829bf8f72508a80cd8d857b57faf39ee3f9eea1eee8a57ed874438f5d4c1071331ca143e3e50586a06bc83689f2a60f917d4a74431cc", 0x38}], 0x1}}], 0x1, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x6c}}, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x19)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, &(0x7f0000000580)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x76, 0x8, 0x0, 0x0}}, 0x10)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000009c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0x54, r0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0xc}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xa6}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x7}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x2}]}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x100000d1}, 0x4000000)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x82, 0xca, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'})
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

74.922341ms ago: executing program 3 (id=4696):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000080)='cpuset\x00'}, 0x30)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r0, &(0x7f0000000040)={@val={0x1c, 0xf5}, @val={0x0, 0x0, 0x2}, @mpls}, 0xe)
r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000140)=""/108, 0x6c}], 0x1, 0x3f, 0x0)
preadv(r1, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x1, 0x80000000, 0xfffffffc)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

0s ago: executing program 4 (id=4697):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0xd498, 0x8, 0x100}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f000000a500)=@newtfilter={0x30, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) (fail_nth: 6)

kernel console output (not intermixed with test programs):

attributes in process `syz.4.4092'.
[  493.866854][T16150] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4093'.
[  494.264181][T16164] ip6erspan0: entered promiscuous mode
[  494.388722][ T5843] Bluetooth: hci2: command tx timeout
[  494.419078][T15977] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  494.440030][T15977] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  494.451598][T15977] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  494.472333][T15977] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  494.501225][T16170] netlink: 194488 bytes leftover after parsing attributes in process `syz.2.4103'.
[  494.640766][T15977] 8021q: adding VLAN 0 to HW filter on device bond0
[  494.696510][T15977] 8021q: adding VLAN 0 to HW filter on device team0
[  494.719510][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state
[  494.726981][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state
[  494.776082][ T8432] bridge0: port 2(bridge_slave_1) entered blocking state
[  494.783476][ T8432] bridge0: port 2(bridge_slave_1) entered forwarding state
[  494.796733][ T1109] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  495.377030][T15977] 8021q: adding VLAN 0 to HW filter on device batadv0
[  495.495800][T15977] veth0_vlan: entered promiscuous mode
[  495.539743][T15977] veth1_vlan: entered promiscuous mode
[  495.602351][T15977] veth0_macvtap: entered promiscuous mode
[  495.623072][T15977] veth1_macvtap: entered promiscuous mode
[  495.657532][T15977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  495.699143][T15977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  495.720827][T15977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  495.737682][T15977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  495.757500][T15977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  495.792888][T15977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  495.807698][T15977] batman_adv: batadv0: Interface activated: batadv_slave_0
[  495.874220][T16199] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  495.881910][T15977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  495.920470][ T1109] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  495.948610][T15977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  495.975870][T15977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  496.007599][T15977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  496.025540][T15977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  496.047080][T15977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  496.049231][T16215] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  496.060611][T15977] batman_adv: batadv0: Interface activated: batadv_slave_1
[  496.101101][T15977] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  496.136322][T15977] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  496.151769][T15977] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  496.168782][T15977] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  496.448763][ T8450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  496.459215][ T8450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  496.474255][T16225] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4120'.
[  496.514929][ T8432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  496.535263][ T8432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  496.845047][T16235] netpci0: tun_chr_ioctl cmd 1074025672
[  496.854146][T16235] netpci0: ignored: set checksum disabled
[  496.900093][T16242] netlink: 'syz.2.4127': attribute type 7 has an invalid length.
[  496.908841][T16242] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4127'.
[  497.059354][ T1109] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  497.201736][T16254] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  497.274163][T16255] netlink: 'syz.2.4129': attribute type 1 has an invalid length.
[  497.327771][T16253] bond1: (slave gretap1): making interface the new active one
[  497.354478][T16253] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  497.367367][T16255] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4129'.
[  497.435780][T16259] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4131'.
[  497.462968][T16259] netlink: 'syz.4.4131': attribute type 1 has an invalid length.
[  497.528602][ T8434] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  497.641951][ T8434] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.105258][ T8434] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.200197][ T8439] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  498.248248][ T8434] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.446116][T16264] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4133'.
[  498.541130][ T8434] bridge_slave_1: left allmulticast mode
[  498.578748][ T8434] bridge_slave_1: left promiscuous mode
[  498.587159][ T8434] bridge0: port 2(bridge_slave_1) entered disabled state
[  498.665590][T16272] netlink: 194488 bytes leftover after parsing attributes in process `syz.1.4136'.
[  498.697792][T16274] netlink: 'syz.2.4138': attribute type 7 has an invalid length.
[  498.720467][ T8434] bridge_slave_0: left allmulticast mode
[  498.726845][ T8434] bridge_slave_0: left promiscuous mode
[  498.759004][ T8434] bridge0: port 1(bridge_slave_0) entered disabled state
[  498.977649][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  499.003087][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  499.025473][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  499.036187][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  499.057676][   T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  499.072751][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  499.315108][ T1109] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  499.316136][T16288] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4141'.
[  499.484681][ T8434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  499.500481][ T8434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  499.512301][ T8434] bond0 (unregistering): Released all slaves
[  499.693162][T16291] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  499.864190][T16293] tipc: Failed to obtain node identity
[  499.887348][T16293] tipc: Enabling of bearer <ib:ip6gre0> rejected, failed to enable media
[  499.909018][T16293] netlink: 'syz.4.4143': attribute type 4 has an invalid length.
[  500.172678][ T8434] hsr_slave_0: left promiscuous mode
[  500.204729][ T8434] hsr_slave_1: left promiscuous mode
[  500.233233][ T8434] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  500.242624][ T8434] batman_adv: batadv0: Removing interface: batadv_slave_0
[  500.260661][ T8434] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  500.289901][ T8434] batman_adv: batadv0: Removing interface: batadv_slave_1
[  500.405828][ T8434] veth1_macvtap: left promiscuous mode
[  500.412470][ T8434] veth0_macvtap: left promiscuous mode
[  500.418330][ T8434] veth1_vlan: left promiscuous mode
[  500.424484][ T8434] veth0_vlan: left promiscuous mode
[  500.458974][   T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  500.483743][T16311] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4148'.
[  500.704115][T16316] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  500.886458][T16322] xt_socket: unknown flags 0x8
[  500.982890][T16325] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  501.189468][   T55] Bluetooth: hci2: command tx timeout
[  501.345926][ T8434] team0 (unregistering): Port device team_slave_1 removed
[  501.416414][ T8434] team0 (unregistering): Port device team_slave_0 removed
[  501.618823][ T8432] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  502.034080][T16318] tipc: Started in network mode
[  502.048708][T16318] tipc: Node identity 7, cluster identity 4711
[  502.058979][T16318] tipc: Node number set to 7
[  502.063948][T16318] tipc: Cannot configure node identity twice
[  502.076304][T16284] chnl_net:caif_netlink_parms(): no params data found
[  502.292997][T16334] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  502.394420][T16340] FAULT_INJECTION: forcing a failure.
[  502.394420][T16340] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  502.412165][T16284] bridge0: port 1(bridge_slave_0) entered blocking state
[  502.439973][T16284] bridge0: port 1(bridge_slave_0) entered disabled state
[  502.447410][T16284] bridge_slave_0: entered allmulticast mode
[  502.453947][T16340] CPU: 0 UID: 0 PID: 16340 Comm: syz.4.4157 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0
[  502.453981][T16340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  502.453993][T16340] Call Trace:
[  502.454001][T16340]  <TASK>
[  502.454010][T16340]  dump_stack_lvl+0x241/0x360
[  502.454044][T16340]  ? __pfx_dump_stack_lvl+0x10/0x10
[  502.454065][T16340]  ? __pfx__printk+0x10/0x10
[  502.454093][T16340]  ? snprintf+0xda/0x120
[  502.454117][T16340]  should_fail_ex+0x40a/0x550
[  502.454153][T16340]  _copy_to_user+0x31/0xb0
[  502.454183][T16340]  simple_read_from_buffer+0xca/0x150
[  502.454214][T16340]  proc_fail_nth_read+0x1e9/0x250
[  502.454261][T16340]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  502.454293][T16340]  ? rw_verify_area+0x243/0x630
[  502.454324][T16340]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  502.454354][T16340]  vfs_read+0x1f8/0xb40
[  502.454376][T16340]  ? fdget_pos+0x254/0x320
[  502.454406][T16340]  ? __pfx___mutex_lock+0x10/0x10
[  502.454432][T16340]  ? __pfx_vfs_read+0x10/0x10
[  502.454470][T16340]  ? __fget_files+0x2a/0x410
[  502.454501][T16340]  ? __fget_files+0x395/0x410
[  502.454527][T16340]  ? __fget_files+0x2a/0x410
[  502.454566][T16340]  ksys_read+0x18f/0x2b0
[  502.454598][T16340]  ? __pfx_ksys_read+0x10/0x10
[  502.454620][T16340]  ? do_syscall_64+0x100/0x230
[  502.454647][T16340]  ? do_syscall_64+0xb6/0x230
[  502.454673][T16340]  do_syscall_64+0xf3/0x230
[  502.454696][T16340]  ? clear_bhb_loop+0x35/0x90
[  502.454726][T16340]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  502.454750][T16340] RIP: 0033:0x7f2ed3d8bb7c
[  502.454769][T16340] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  502.454786][T16340] RSP: 002b:00007f2ed4b8d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  502.454810][T16340] RAX: ffffffffffffffda RBX: 00007f2ed3fa5fa0 RCX: 00007f2ed3d8bb7c
[  502.454824][T16340] RDX: 000000000000000f RSI: 00007f2ed4b8d0a0 RDI: 0000000000000004
[  502.454836][T16340] RBP: 00007f2ed4b8d090 R08: 0000000000000000 R09: 0000000000000000
[  502.454848][T16340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  502.454861][T16340] R13: 0000000000000000 R14: 00007f2ed3fa5fa0 R15: 00007ffd270dbf98
[  502.454891][T16340]  </TASK>
[  502.690537][T16284] bridge_slave_0: entered promiscuous mode
[  502.699037][T16284] bridge0: port 2(bridge_slave_1) entered blocking state
[  502.706488][T16284] bridge0: port 2(bridge_slave_1) entered disabled state
[  502.714169][T16284] bridge_slave_1: entered allmulticast mode
[  502.722609][T16284] bridge_slave_1: entered promiscuous mode
[  502.741234][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  502.747910][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  502.828930][ T8450] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  502.866819][T16284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  502.880136][T16284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  503.041124][T16284] team0: Port device team_slave_0 added
[  503.063965][T16284] team0: Port device team_slave_1 added
[  503.260392][T16284] batman_adv: batadv0: Adding interface: batadv_slave_0
[  503.267946][T16284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  503.271527][T16351] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4160'.
[  503.315685][   T55] Bluetooth: hci2: command 0x041b tx timeout
[  503.464682][T16284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  503.478487][T16355] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4161'.
[  503.514599][T16356] ip6erspan0: entered promiscuous mode
[  503.539428][T16284] batman_adv: batadv0: Adding interface: batadv_slave_1
[  503.555669][T16284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  503.615173][T16284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  503.648653][T16349] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4161'.
[  503.742911][T16284] hsr_slave_0: entered promiscuous mode
[  503.757646][T16284] hsr_slave_1: entered promiscuous mode
[  503.767502][T16284] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  503.782753][T16284] Cannot create hsr debugfs directory
[  503.890063][T16365] netlink: 'syz.3.4164': attribute type 4 has an invalid length.
[  503.898089][T16365] netlink: 'syz.3.4164': attribute type 8 has an invalid length.
[  503.958478][T16365] netlink: 236 bytes leftover after parsing attributes in process `syz.3.4164'.
[  503.988936][ T8434] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  504.244390][T16370] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4167'.
[  504.254434][T16374] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4167'.
[  504.465123][T16380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4170'.
[  504.545298][T16380] vlan3: entered allmulticast mode
[  504.552192][T16380] team0: entered allmulticast mode
[  504.557489][T16380] team_slave_0: entered allmulticast mode
[  504.596130][T16380] team_slave_1: entered allmulticast mode
[  504.605066][T16380] team0: left allmulticast mode
[  504.611937][T16380] team_slave_0: left allmulticast mode
[  504.617712][T16380] team_slave_1: left allmulticast mode
[  505.133991][ T8434] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  505.209492][T16284] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  505.223976][T16284] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  505.246107][T16284] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  505.277511][T16284] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  505.348788][ T5843] Bluetooth: hci2: command 0x041b tx timeout
[  505.547722][T16409] netlink: 'syz.3.4181': attribute type 4 has an invalid length.
[  505.561584][T16408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4183'.
[  505.586313][T16408] vlan2: entered allmulticast mode
[  505.591981][T16409] netlink: 'syz.3.4181': attribute type 8 has an invalid length.
[  505.600781][T16408] team0: entered allmulticast mode
[  505.605967][T16408] team_slave_0: entered allmulticast mode
[  505.618663][T16409] netlink: 236 bytes leftover after parsing attributes in process `syz.3.4181'.
[  505.628087][T16408] team_slave_1: entered allmulticast mode
[  505.638365][T16408] team0: left allmulticast mode
[  505.648747][T16408] team_slave_0: left allmulticast mode
[  505.658887][T16408] team_slave_1: left allmulticast mode
[  505.783620][T16284] 8021q: adding VLAN 0 to HW filter on device bond0
[  505.795398][T16411] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4182'.
[  506.177744][T16284] 8021q: adding VLAN 0 to HW filter on device team0
[  506.206900][ T8441] bridge0: port 1(bridge_slave_0) entered blocking state
[  506.214306][ T8441] bridge0: port 1(bridge_slave_0) entered forwarding state
[  506.285381][ T1109] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  506.377189][ T8441] bridge0: port 2(bridge_slave_1) entered blocking state
[  506.384562][ T8441] bridge0: port 2(bridge_slave_1) entered forwarding state
[  506.663492][T16440] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4194'.
[  506.810870][T16449] netlink: 'syz.4.4195': attribute type 13 has an invalid length.
[  506.845543][T16449] macvtap0: refused to change device tx_queue_len
[  507.072989][T16284] 8021q: adding VLAN 0 to HW filter on device batadv0
[  507.203848][T16463] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  507.222189][T16284] veth0_vlan: entered promiscuous mode
[  507.274515][T16284] veth1_vlan: entered promiscuous mode
[  507.292109][T16469] netlink: 'syz.1.4201': attribute type 4 has an invalid length.
[  507.300549][T16469] netlink: 'syz.1.4201': attribute type 8 has an invalid length.
[  507.419302][   T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  507.428761][ T5843] Bluetooth: hci2: command 0x041b tx timeout
[  507.754456][T16284] veth0_macvtap: entered promiscuous mode
[  507.791920][T16284] veth1_macvtap: entered promiscuous mode
[  507.849155][T16284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  507.870698][T16483] netlink: 'syz.2.4209': attribute type 13 has an invalid length.
[  507.878585][T16284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  507.898881][T16284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  507.929157][T16284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  507.958616][T16284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  507.989259][T16284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  508.009937][T16284] batman_adv: batadv0: Interface activated: batadv_slave_0
[  508.044050][T16483] macvtap0: refused to change device tx_queue_len
[  508.069557][T16284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  508.119031][T16284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  508.155114][T16284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  508.178746][T16284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  508.202394][T16284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  508.215756][T16284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  508.232850][T16284] batman_adv: batadv0: Interface activated: batadv_slave_1
[  508.293617][T16284] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  508.319246][T16284] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  508.348761][T16284] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  508.375490][T16284] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  508.558422][ T8439] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  508.649417][ T8439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  508.671743][T16504] __nla_validate_parse: 5 callbacks suppressed
[  508.671767][T16504] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4217'.
[  508.673525][ T8439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  508.724754][ T8439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  508.733796][ T8439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  508.739605][T16509] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4218'.
[  508.761506][T16513] FAULT_INJECTION: forcing a failure.
[  508.761506][T16513] name failslab, interval 1, probability 0, space 0, times 0
[  508.797150][T16513] CPU: 1 UID: 0 PID: 16513 Comm: syz.4.4220 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0
[  508.797190][T16513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  508.797202][T16513] Call Trace:
[  508.797211][T16513]  <TASK>
[  508.797222][T16513]  dump_stack_lvl+0x241/0x360
[  508.797255][T16513]  ? __pfx_dump_stack_lvl+0x10/0x10
[  508.797278][T16513]  ? __pfx__printk+0x10/0x10
[  508.797302][T16513]  ? __kmalloc_noprof+0xb5/0x4c0
[  508.797330][T16513]  ? __pfx___might_resched+0x10/0x10
[  508.797362][T16513]  should_fail_ex+0x40a/0x550
[  508.797398][T16513]  should_failslab+0xac/0x100
[  508.797427][T16513]  __kmalloc_noprof+0xdd/0x4c0
[  508.797452][T16513]  ? netns_bpf_prog_attach+0x2ea/0x450
[  508.797481][T16513]  netns_bpf_prog_attach+0x2ea/0x450
[  508.797504][T16513]  ? bpf_prog_attach_check_attach_type+0x2cb/0x4f0
[  508.797530][T16513]  bpf_prog_attach+0x413/0x6a0
[  508.797564][T16513]  __sys_bpf+0x327/0x820
[  508.797593][T16513]  ? __pfx___sys_bpf+0x10/0x10
[  508.797635][T16513]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  508.797669][T16513]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  508.797699][T16513]  ? do_syscall_64+0x100/0x230
[  508.797731][T16513]  __x64_sys_bpf+0x7c/0x90
[  508.797757][T16513]  do_syscall_64+0xf3/0x230
[  508.797782][T16513]  ? clear_bhb_loop+0x35/0x90
[  508.797826][T16513]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.797852][T16513] RIP: 0033:0x7f2ed3d8d169
[  508.797871][T16513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  508.797888][T16513] RSP: 002b:00007f2ed4b8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  508.797911][T16513] RAX: ffffffffffffffda RBX: 00007f2ed3fa5fa0 RCX: 00007f2ed3d8d169
[  508.797926][T16513] RDX: 0000000000000020 RSI: 00004000000002c0 RDI: 0000000000000008
[  508.797939][T16513] RBP: 00007f2ed4b8d090 R08: 0000000000000000 R09: 0000000000000000
[  508.797951][T16513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  508.797962][T16513] R13: 0000000000000000 R14: 00007f2ed3fa5fa0 R15: 00007ffd270dbf98
[  508.797996][T16513]  </TASK>
[  509.028826][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  509.380621][T16524] netlink: 'syz.2.4222': attribute type 4 has an invalid length.
[  509.388448][T16524] netlink: 'syz.2.4222': attribute type 8 has an invalid length.
[  509.448589][T16524] netlink: 236 bytes leftover after parsing attributes in process `syz.2.4222'.
[  509.509121][ T5843] Bluetooth: hci2: command 0x041b tx timeout
[  509.899545][ T8436] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  509.926997][T16525] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4223'.
[  509.941462][T16526] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4223'.
[  510.747758][ T8439] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  510.839770][ T8439] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  510.915749][ T8439] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  510.998927][ T8439] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  511.019168][ T8450] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  511.081608][ T8439] bridge_slave_1: left allmulticast mode
[  511.087382][ T8439] bridge_slave_1: left promiscuous mode
[  511.093374][ T8439] bridge0: port 2(bridge_slave_1) entered disabled state
[  511.103588][ T8439] bridge_slave_0: left allmulticast mode
[  511.110309][ T8439] bridge_slave_0: left promiscuous mode
[  511.116839][ T8439] bridge0: port 1(bridge_slave_0) entered disabled state
[  511.509402][T16556] netlink: 'syz.3.4233': attribute type 13 has an invalid length.
[  511.748468][T16561] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4236'.
[  511.942842][ T8439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  511.955121][T16561] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4236'.
[  511.968352][ T8439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  511.981388][ T8439] bond0 (unregistering): Released all slaves
[  512.002945][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  512.016403][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  512.032057][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  512.042931][T16556] macvtap0: refused to change device tx_queue_len
[  512.068048][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  512.081657][   T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  512.089415][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  512.099176][T16561] bridge0: port 2(bridge_slave_1) entered disabled state
[  512.148945][ T8450] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  512.257760][T16571] FAULT_INJECTION: forcing a failure.
[  512.257760][T16571] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  512.308713][T16571] CPU: 0 UID: 0 PID: 16571 Comm: syz.3.4237 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0
[  512.308749][T16571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  512.308760][T16571] Call Trace:
[  512.308767][T16571]  <TASK>
[  512.308775][T16571]  dump_stack_lvl+0x241/0x360
[  512.308809][T16571]  ? __pfx_dump_stack_lvl+0x10/0x10
[  512.308828][T16571]  ? __pfx__printk+0x10/0x10
[  512.308860][T16571]  ? __pfx_lock_release+0x10/0x10
[  512.308896][T16571]  should_fail_ex+0x40a/0x550
[  512.308931][T16571]  _copy_from_user+0x2d/0xb0
[  512.308954][T16571]  __sys_bpf+0x1be/0x820
[  512.308981][T16571]  ? __pfx___sys_bpf+0x10/0x10
[  512.309016][T16571]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  512.309044][T16571]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  512.309079][T16571]  ? do_syscall_64+0x100/0x230
[  512.309104][T16571]  __x64_sys_bpf+0x7c/0x90
[  512.309125][T16571]  do_syscall_64+0xf3/0x230
[  512.309147][T16571]  ? clear_bhb_loop+0x35/0x90
[  512.309174][T16571]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  512.309197][T16571] RIP: 0033:0x7fe5c298d169
[  512.309214][T16571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  512.309230][T16571] RSP: 002b:00007fe5c3887038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  512.309252][T16571] RAX: ffffffffffffffda RBX: 00007fe5c2ba5fa0 RCX: 00007fe5c298d169
[  512.309264][T16571] RDX: 0000000000000050 RSI: 0000400000000200 RDI: 000000000000001c
[  512.309275][T16571] RBP: 00007fe5c3887090 R08: 0000000000000000 R09: 0000000000000000
[  512.309287][T16571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  512.309297][T16571] R13: 0000000000000000 R14: 00007fe5c2ba5fa0 R15: 00007fffb2763168
[  512.309326][T16571]  </TASK>
[  512.600522][T16581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4241'.
[  512.732812][T16581] vlan3: entered allmulticast mode
[  512.768122][T16583] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4239'.
[  512.777782][T16577] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4239'.
[  512.955892][T16567] chnl_net:caif_netlink_parms(): no params data found
[  513.170477][ T8439] hsr_slave_0: left promiscuous mode
[  513.218814][ T8439] hsr_slave_1: left promiscuous mode
[  513.228019][ T8439] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  513.236989][ T8439] batman_adv: batadv0: Removing interface: batadv_slave_0
[  513.245743][ T8439] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  513.253841][ T8439] batman_adv: batadv0: Removing interface: batadv_slave_1
[  513.256171][T16607] netlink: 'syz.4.4250': attribute type 13 has an invalid length.
[  513.296608][ T8439] veth1_macvtap: left promiscuous mode
[  513.302518][ T8439] veth0_macvtap: left promiscuous mode
[  513.308994][ T8439] veth1_vlan: left promiscuous mode
[  513.314417][ T8439] veth0_vlan: left promiscuous mode
[  513.437772][ T8450] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  514.017601][ T8439] team0 (unregistering): Port device team_slave_1 removed
[  514.086082][ T8439] team0 (unregistering): Port device team_slave_0 removed
[  514.161271][ T5843] Bluetooth: hci2: command tx timeout
[  514.550090][ T8436] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  514.767945][T16607] macvtap0: refused to change device tx_queue_len
[  514.972031][T16567] bridge0: port 1(bridge_slave_0) entered blocking state
[  514.982763][T16567] bridge0: port 1(bridge_slave_0) entered disabled state
[  514.990521][T16567] bridge_slave_0: entered allmulticast mode
[  515.000600][T16567] bridge_slave_0: entered promiscuous mode
[  515.011930][T16567] bridge0: port 2(bridge_slave_1) entered blocking state
[  515.019859][T16567] bridge0: port 2(bridge_slave_1) entered disabled state
[  515.027558][T16567] bridge_slave_1: entered allmulticast mode
[  515.035886][T16567] bridge_slave_1: entered promiscuous mode
[  515.108046][T16615] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  515.145235][T16614] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4255'.
[  515.155724][T16622] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4255'.
[  515.281576][T16567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  515.323009][T16567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  515.392158][T16631] netlink: 124 bytes leftover after parsing attributes in process `syz.1.4258'.
[  515.469144][T16567] team0: Port device team_slave_0 added
[  515.625524][T16567] team0: Port device team_slave_1 added
[  515.661023][ T1109] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  515.677755][T16637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4259'.
[  515.732042][T16637] vlan2: entered allmulticast mode
[  515.737616][T16637] team0: entered allmulticast mode
[  515.744917][T16637] team_slave_0: entered allmulticast mode
[  515.751574][T16637] team_slave_1: entered allmulticast mode
[  515.761101][T16637] team0: left allmulticast mode
[  515.766318][T16637] team_slave_0: left allmulticast mode
[  515.772576][T16637] team_slave_1: left allmulticast mode
[  515.894162][T16567] batman_adv: batadv0: Adding interface: batadv_slave_0
[  515.912216][T16567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  515.940231][T16567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  515.953249][T16567] batman_adv: batadv0: Adding interface: batadv_slave_1
[  515.960538][T16567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  515.987070][T16567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  516.078428][T16567] hsr_slave_0: entered promiscuous mode
[  516.094096][T16567] hsr_slave_1: entered promiscuous mode
[  516.101061][T16567] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  516.109181][T16567] Cannot create hsr debugfs directory
[  516.228899][ T5843] Bluetooth: hci2: command tx timeout
[  516.372351][T16654] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4265'.
[  516.640074][T16661] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4268'.
[  516.673422][T16661] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4268'.
[  516.810612][ T8434] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  517.010632][T16567] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  517.021443][T16567] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  517.063598][T16567] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  517.102347][T16567] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  517.200102][T16676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4274'.
[  517.245670][T16676] vlan3: entered allmulticast mode
[  517.270640][T16676] dummy0: entered allmulticast mode
[  517.286024][T16676] dummy0: left allmulticast mode
[  517.419239][T16567] 8021q: adding VLAN 0 to HW filter on device bond0
[  517.474845][T16567] 8021q: adding VLAN 0 to HW filter on device team0
[  517.494120][ T8439] bridge0: port 1(bridge_slave_0) entered blocking state
[  517.501523][ T8439] bridge0: port 1(bridge_slave_0) entered forwarding state
[  517.544381][ T8439] bridge0: port 2(bridge_slave_1) entered blocking state
[  517.551787][ T8439] bridge0: port 2(bridge_slave_1) entered forwarding state
[  517.637487][T16690] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4280'.
[  517.664832][T16690] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4280'.
[  517.921515][ T8434] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  517.986010][T16567] 8021q: adding VLAN 0 to HW filter on device batadv0
[  518.182178][T16567] veth0_vlan: entered promiscuous mode
[  518.223534][T16567] veth1_vlan: entered promiscuous mode
[  518.298211][T16567] veth0_macvtap: entered promiscuous mode
[  518.309558][ T5843] Bluetooth: hci2: command tx timeout
[  518.471823][T16567] veth1_macvtap: entered promiscuous mode
[  518.517926][T16567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  518.541459][T16567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  518.569173][T16567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  518.590422][T16567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  518.614336][T16567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  518.625110][T16567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  518.649223][T16567] batman_adv: batadv0: Interface activated: batadv_slave_0
[  518.696606][T16567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  518.745229][T16567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  518.780919][T16567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  518.814250][T16567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  518.838719][T16567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  518.875886][T16567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  518.902797][T16567] batman_adv: batadv0: Interface activated: batadv_slave_1
[  518.923146][T16567] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  518.948344][T16567] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  518.965450][T16567] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  518.975637][T16567] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  519.006842][T16727] veth0_to_batadv: entered promiscuous mode
[  519.019243][T16727] veth0_to_batadv: entered allmulticast mode
[  519.058923][T16738] Bluetooth: MGMT ver 1.23
[  519.068916][ T8436] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  519.343071][ T8436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  519.356110][T16743] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  519.373306][ T8436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  519.415002][T16746] netlink: 'syz.1.4297': attribute type 13 has an invalid length.
[  519.425595][T16746] macvtap0: entered promiscuous mode
[  519.427226][ T8441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  519.444311][T16746] macvtap0: refused to change device tx_queue_len
[  519.460985][ T8441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  520.202053][ T1109] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  520.316754][ T8441] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.693781][ T8441] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.900928][ T8441] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.995943][ T8441] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  521.086308][ T8441] bridge_slave_1: left allmulticast mode
[  521.092536][ T8441] bridge_slave_1: left promiscuous mode
[  521.098302][ T8441] bridge0: port 2(bridge_slave_1) entered disabled state
[  521.109141][ T8441] bridge_slave_0: left allmulticast mode
[  521.114882][ T8441] bridge_slave_0: left promiscuous mode
[  521.125640][ T8441] bridge0: port 1(bridge_slave_0) entered disabled state
[  521.198251][   T55] Bluetooth: hci0: command 0x0406 tx timeout
[  521.205951][ T5843] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  521.368785][ T8434] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  521.488182][T16780] FAULT_INJECTION: forcing a failure.
[  521.488182][T16780] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  521.491732][T16777] __nla_validate_parse: 4 callbacks suppressed
[  521.491755][T16777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4309'.
[  521.547254][T16781] FAULT_INJECTION: forcing a failure.
[  521.547254][T16781] name failslab, interval 1, probability 0, space 0, times 0
[  521.563444][T16781] CPU: 1 UID: 0 PID: 16781 Comm: syz.3.4310 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0
[  521.563475][T16781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  521.563486][T16781] Call Trace:
[  521.563494][T16781]  <TASK>
[  521.563504][T16781]  dump_stack_lvl+0x241/0x360
[  521.563539][T16781]  ? __pfx_dump_stack_lvl+0x10/0x10
[  521.563562][T16781]  ? __pfx__printk+0x10/0x10
[  521.563585][T16781]  ? __kmalloc_noprof+0xb5/0x4c0
[  521.563613][T16781]  ? __pfx___might_resched+0x10/0x10
[  521.563644][T16781]  ? aa_get_newest_label+0xff/0x6f0
[  521.563680][T16781]  should_fail_ex+0x40a/0x550
[  521.563723][T16781]  should_failslab+0xac/0x100
[  521.563747][T16781]  __kmalloc_noprof+0xdd/0x4c0
[  521.563769][T16781]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x290
[  521.563790][T16781]  ? apparmor_capable+0x13b/0x1b0
[  521.563817][T16781]  genl_family_rcv_msg_attrs_parse+0xa3/0x290
[  521.563850][T16781]  genl_rcv_msg+0x80b/0xec0
[  521.563883][T16781]  ? __pfx_genl_rcv_msg+0x10/0x10
[  521.563940][T16781]  ? __pfx_lock_acquire+0x10/0x10
[  521.563968][T16781]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  521.563995][T16781]  ? __pfx_nl80211_join_ibss+0x10/0x10
[  521.564022][T16781]  ? __pfx_nl80211_post_doit+0x10/0x10
[  521.564051][T16781]  ? __pfx___might_resched+0x10/0x10
[  521.564089][T16781]  netlink_rcv_skb+0x206/0x480
[  521.564119][T16781]  ? __pfx_genl_rcv_msg+0x10/0x10
[  521.564143][T16781]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  521.564208][T16781]  genl_rcv+0x28/0x40
[  521.564227][T16781]  netlink_unicast+0x7f6/0x990
[  521.564264][T16781]  ? __pfx_netlink_unicast+0x10/0x10
[  521.564286][T16781]  ? __virt_addr_valid+0x45f/0x530
[  521.564307][T16781]  ? __phys_addr_symbol+0x2f/0x70
[  521.564325][T16781]  ? __check_object_size+0x47a/0x730
[  521.564357][T16781]  netlink_sendmsg+0x8de/0xcb0
[  521.564400][T16781]  ? __pfx_netlink_sendmsg+0x10/0x10
[  521.564434][T16781]  ? aa_sock_msg_perm+0x91/0x160
[  521.564467][T16781]  ? __pfx_netlink_sendmsg+0x10/0x10
[  521.564492][T16781]  __sock_sendmsg+0x221/0x270
[  521.564525][T16781]  ____sys_sendmsg+0x53a/0x860
[  521.564558][T16781]  ? __pfx_____sys_sendmsg+0x10/0x10
[  521.564578][T16781]  ? __fget_files+0x2a/0x410
[  521.564605][T16781]  ? __fget_files+0x2a/0x410
[  521.564639][T16781]  __sys_sendmsg+0x269/0x350
[  521.564666][T16781]  ? __pfx___sys_sendmsg+0x10/0x10
[  521.564696][T16781]  ? do_sys_openat2+0x17a/0x1d0
[  521.564760][T16781]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  521.564787][T16781]  ? do_syscall_64+0x100/0x230
[  521.564815][T16781]  ? do_syscall_64+0xb6/0x230
[  521.564841][T16781]  do_syscall_64+0xf3/0x230
[  521.564861][T16781]  ? clear_bhb_loop+0x35/0x90
[  521.564888][T16781]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  521.564909][T16781] RIP: 0033:0x7fe5c298d169
[  521.564926][T16781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  521.564941][T16781] RSP: 002b:00007fe5c3887038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  521.564963][T16781] RAX: ffffffffffffffda RBX: 00007fe5c2ba5fa0 RCX: 00007fe5c298d169
[  521.564974][T16781] RDX: 0000000000000000 RSI: 0000400000000300 RDI: 0000000000000003
[  521.564985][T16781] RBP: 00007fe5c3887090 R08: 0000000000000000 R09: 0000000000000000
[  521.564996][T16781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  521.565007][T16781] R13: 0000000000000000 R14: 00007fe5c2ba5fa0 R15: 00007fffb2763168
[  521.565036][T16781]  </TASK>
[  521.581397][T16780] CPU: 0 UID: 0 PID: 16780 Comm: syz.4.4311 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0
[  521.581439][T16780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  521.581450][T16780] Call Trace:
[  521.581457][T16780]  <TASK>
[  521.581466][T16780]  dump_stack_lvl+0x241/0x360
[  521.581496][T16780]  ? __pfx_dump_stack_lvl+0x10/0x10
[  521.581516][T16780]  ? __pfx__printk+0x10/0x10
[  521.581535][T16780]  ? __pfx_lock_release+0x10/0x10
[  521.581568][T16780]  should_fail_ex+0x40a/0x550
[  521.581599][T16780]  _copy_from_user+0x2d/0xb0
[  521.581623][T16780]  copy_msghdr_from_user+0xae/0x680
[  521.581654][T16780]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  521.581676][T16780]  ? __fget_files+0x2a/0x410
[  521.581704][T16780]  ? __fget_files+0x2a/0x410
[  521.581735][T16780]  __sys_sendmsg+0x209/0x350
[  521.581761][T16780]  ? __pfx___sys_sendmsg+0x10/0x10
[  521.581807][T16780]  ? do_sys_openat2+0x17a/0x1d0
[  521.581856][T16780]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  521.581881][T16780]  ? do_syscall_64+0x100/0x230
[  521.581906][T16780]  ? do_syscall_64+0xb6/0x230
[  521.581929][T16780]  do_syscall_64+0xf3/0x230
[  521.581950][T16780]  ? clear_bhb_loop+0x35/0x90
[  521.581975][T16780]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  521.581996][T16780] RIP: 0033:0x7f2ed3d8d169
[  521.582013][T16780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  521.582028][T16780] RSP: 002b:00007f2ed4b8d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  521.582048][T16780] RAX: ffffffffffffffda RBX: 00007f2ed3fa5fa0 RCX: 00007f2ed3d8d169
[  521.582060][T16780] RDX: 0000000000000000 RSI: 0000400000001180 RDI: 0000000000000003
[  521.582071][T16780] RBP: 00007f2ed4b8d090 R08: 0000000000000000 R09: 0000000000000000
[  521.582082][T16780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  521.582092][T16780] R13: 0000000000000000 R14: 00007f2ed3fa5fa0 R15: 00007ffd270dbf98
[  521.582119][T16780]  </TASK>
[  522.302244][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  522.317083][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  522.333928][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  522.345244][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  522.356178][ T5843] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  522.367058][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  522.543764][ T8441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  522.556868][ T8441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  522.569601][ T8441] bond0 (unregistering): Released all slaves
[  522.590746][T16777] vlan2: entered allmulticast mode
[  522.595979][T16777] team0: entered allmulticast mode
[  522.601982][T16777] team_slave_0: entered allmulticast mode
[  522.607798][T16777] team_slave_1: entered allmulticast mode
[  522.637026][T16777] team0: left allmulticast mode
[  522.642122][T16777] team_slave_0: left allmulticast mode
[  522.647657][T16777] team_slave_1: left allmulticast mode
[  522.683509][T16775] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4308'.
[  522.713559][T16782] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4308'.
[  522.913770][ T8436] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  523.056675][T16802] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  523.205706][ T8441] hsr_slave_0: left promiscuous mode
[  523.212419][ T8441] hsr_slave_1: left promiscuous mode
[  523.228800][ T8441] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  523.236491][ T8441] batman_adv: batadv0: Removing interface: batadv_slave_0
[  523.248215][ T8441] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  523.309105][ T8441] batman_adv: batadv0: Removing interface: batadv_slave_1
[  523.381828][ T8441] veth1_macvtap: left promiscuous mode
[  523.387453][ T8441] veth0_macvtap: left promiscuous mode
[  523.393529][ T8441] veth1_vlan: left promiscuous mode
[  523.402597][ T8441] veth0_vlan: left promiscuous mode
[  524.078975][ T1109] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  524.239609][T16825] netlink: 'syz.2.4324': attribute type 4 has an invalid length.
[  524.247721][T16825] netlink: 'syz.2.4324': attribute type 8 has an invalid length.
[  524.259233][T16825] netlink: 236 bytes leftover after parsing attributes in process `syz.2.4324'.
[  524.468980][   T55] Bluetooth: hci2: command tx timeout
[  524.532239][ T8441] team0 (unregistering): Port device team_slave_1 removed
[  524.713143][ T8441] team0 (unregistering): Port device team_slave_0 removed
[  525.209014][ T8439] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  525.697621][T16830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4326'.
[  525.797067][T16830] vlan3: entered allmulticast mode
[  525.802696][T16830] team0: entered allmulticast mode
[  525.808126][T16830] team_slave_0: entered allmulticast mode
[  525.815900][T16830] team_slave_1: entered allmulticast mode
[  525.825556][T16830] team0: left allmulticast mode
[  525.832043][T16830] team_slave_0: left allmulticast mode
[  525.837869][T16830] team_slave_1: left allmulticast mode
[  525.924855][T16835] netlink: 'syz.2.4328': attribute type 13 has an invalid length.
[  525.996421][T16835] macvtap0: refused to change device tx_queue_len
[  526.077961][T16785] chnl_net:caif_netlink_parms(): no params data found
[  526.277804][T16785] bridge0: port 1(bridge_slave_0) entered blocking state
[  526.296073][T16785] bridge0: port 1(bridge_slave_0) entered disabled state
[  526.306988][T16785] bridge_slave_0: entered allmulticast mode
[  526.319478][ T8436] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  526.350439][T16785] bridge_slave_0: entered promiscuous mode
[  526.369912][T16785] bridge0: port 2(bridge_slave_1) entered blocking state
[  526.383560][T16785] bridge0: port 2(bridge_slave_1) entered disabled state
[  526.399516][T16785] bridge_slave_1: entered allmulticast mode
[  526.408140][T16785] bridge_slave_1: entered promiscuous mode
[  526.490986][T16785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  526.513398][T16785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  526.544633][T16855] veth0_to_batadv: entered promiscuous mode
[  526.550989][   T55] Bluetooth: hci2: command tx timeout
[  526.558927][T16855] veth0_to_batadv: entered allmulticast mode
[  526.630044][T16785] team0: Port device team_slave_0 added
[  526.645399][T16785] team0: Port device team_slave_1 added
[  526.681928][T16785] batman_adv: batadv0: Adding interface: batadv_slave_0
[  526.689631][T16785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  526.716577][T16785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  526.734227][T16785] batman_adv: batadv0: Adding interface: batadv_slave_1
[  526.741729][T16785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  526.790744][T16785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  526.870819][T16785] hsr_slave_0: entered promiscuous mode
[  526.876688][T16861] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4337'.
[  526.877624][T16785] hsr_slave_1: entered promiscuous mode
[  526.896872][T16785] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  526.905493][T16785] Cannot create hsr debugfs directory
[  527.026664][T16865] netlink: 'syz.1.4338': attribute type 4 has an invalid length.
[  527.063475][T16865] netlink: 'syz.1.4338': attribute type 8 has an invalid length.
[  527.083882][T16865] netlink: 236 bytes leftover after parsing attributes in process `syz.1.4338'.
[  527.285374][T16873] netlink: 'syz.2.4341': attribute type 13 has an invalid length.
[  527.448959][ T8439] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  527.514265][T16870] veth0_to_batadv: entered promiscuous mode
[  527.520751][T16870] veth0_to_batadv: entered allmulticast mode
[  527.603968][T16876] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4342'.
[  527.628923][T16873] macvtap0: refused to change device tx_queue_len
[  527.925049][T16882] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  528.032053][T16887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4347'.
[  528.051107][T16887] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4347'.
[  528.116339][T16887] geneve2: entered promiscuous mode
[  528.129668][T16887] geneve2: entered allmulticast mode
[  528.249617][T16881] tipc: Disabling bearer <eth:syzkaller0>
[  528.407607][T16785] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  528.445271][T16785] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  528.476949][T16785] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  528.500298][T16901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4353'.
[  528.531112][T16901] vlan2: entered allmulticast mode
[  528.536437][T16901] team0: entered allmulticast mode
[  528.552936][T16901] team_slave_0: entered allmulticast mode
[  528.564765][T16901] team_slave_1: entered allmulticast mode
[  528.574091][T16901] team0: left allmulticast mode
[  528.579349][T16901] team_slave_0: left allmulticast mode
[  528.584865][T16901] team_slave_1: left allmulticast mode
[  528.607863][T16785] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  528.615771][ T8439] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  528.629130][   T55] Bluetooth: hci2: command tx timeout
[  528.819902][T16911] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4355'.
[  528.901069][T16785] 8021q: adding VLAN 0 to HW filter on device bond0
[  528.920415][T16915] netlink: 'syz.4.4356': attribute type 4 has an invalid length.
[  528.928268][T16915] netlink: 'syz.4.4356': attribute type 8 has an invalid length.
[  528.963903][T16915] netlink: 236 bytes leftover after parsing attributes in process `syz.4.4356'.
[  528.982139][T16785] 8021q: adding VLAN 0 to HW filter on device team0
[  529.006691][ T8432] bridge0: port 1(bridge_slave_0) entered blocking state
[  529.013984][ T8432] bridge0: port 1(bridge_slave_0) entered forwarding state
[  529.063706][ T8432] bridge0: port 2(bridge_slave_1) entered blocking state
[  529.071416][ T8432] bridge0: port 2(bridge_slave_1) entered forwarding state
[  529.735959][T16785] 8021q: adding VLAN 0 to HW filter on device batadv0
[  529.743315][ T8436] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  529.872230][T16785] veth0_vlan: entered promiscuous mode
[  529.924807][T16785] veth1_vlan: entered promiscuous mode
[  530.021795][T16785] veth0_macvtap: entered promiscuous mode
[  530.052462][T16785] veth1_macvtap: entered promiscuous mode
[  530.087847][T16943] FAULT_INJECTION: forcing a failure.
[  530.087847][T16943] name failslab, interval 1, probability 0, space 0, times 0
[  530.096580][T16785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  530.112206][T16943] CPU: 0 UID: 0 PID: 16943 Comm: syz.1.4364 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0
[  530.112239][T16943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  530.112251][T16943] Call Trace:
[  530.112259][T16943]  <TASK>
[  530.112267][T16943]  dump_stack_lvl+0x241/0x360
[  530.112297][T16943]  ? __pfx_dump_stack_lvl+0x10/0x10
[  530.112317][T16943]  ? __pfx__printk+0x10/0x10
[  530.112337][T16943]  ? kmem_cache_alloc_noprof+0x48/0x380
[  530.112362][T16943]  ? __pfx___might_resched+0x10/0x10
[  530.112391][T16943]  should_fail_ex+0x40a/0x550
[  530.112427][T16943]  should_failslab+0xac/0x100
[  530.112454][T16943]  ? security_file_alloc+0x32/0x310
[  530.112478][T16943]  kmem_cache_alloc_noprof+0x70/0x380
[  530.112509][T16943]  security_file_alloc+0x32/0x310
[  530.112536][T16943]  init_file+0x96/0x2e0
[  530.112579][T16943]  alloc_empty_file+0xb8/0x1d0
[  530.112608][T16943]  alloc_file_pseudo+0x204/0x320
[  530.112634][T16943]  ? rcu_is_watching+0x15/0xb0
[  530.112662][T16943]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  530.112692][T16943]  ? security_inode_alloc+0xd2/0x310
[  530.112723][T16943]  sock_alloc_file+0xb7/0x2e0
[  530.112754][T16943]  do_accept+0x36f/0x6d0
[  530.112779][T16943]  ? __pfx_do_accept+0x10/0x10
[  530.112823][T16943]  __sys_accept4+0x11f/0x1d0
[  530.112845][T16943]  ? __pfx___sys_accept4+0x10/0x10
[  530.112865][T16943]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  530.112896][T16943]  ? do_syscall_64+0x100/0x230
[  530.112927][T16943]  __x64_sys_accept+0x7d/0x90
[  530.112947][T16943]  do_syscall_64+0xf3/0x230
[  530.112971][T16943]  ? clear_bhb_loop+0x35/0x90
[  530.113000][T16943]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.113024][T16943] RIP: 0033:0x7f4fa0b8d169
[  530.113043][T16943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  530.113060][T16943] RSP: 002b:00007f4fa1a89038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b
[  530.113083][T16943] RAX: ffffffffffffffda RBX: 00007f4fa0da5fa0 RCX: 00007f4fa0b8d169
[  530.113097][T16943] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[  530.113109][T16943] RBP: 00007f4fa1a89090 R08: 0000000000000000 R09: 0000000000000000
[  530.113122][T16943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  530.113134][T16943] R13: 0000000000000000 R14: 00007f4fa0da5fa0 R15: 00007ffd12fe1ee8
[  530.113164][T16943]  </TASK>
[  530.125657][T16785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  530.333215][T16950] netlink: 'syz.1.4367': attribute type 13 has an invalid length.
[  530.335979][T16785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  530.392116][T16785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  530.402031][T16785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  530.412723][T16785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  530.424705][T16785] batman_adv: batadv0: Interface activated: batadv_slave_0
[  530.446246][T16950] macvtap0: refused to change device tx_queue_len
[  530.490490][T16785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  530.518723][T16785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  530.558333][T16785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  530.577679][T16785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  530.593970][T16785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  530.623285][T16953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4370'.
[  530.638409][T16785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  530.670290][T16785] batman_adv: batadv0: Interface activated: batadv_slave_1
[  530.703177][T16953] vlan2: entered allmulticast mode
[  530.708467][T16953] dummy0: entered allmulticast mode
[  530.708854][   T55] Bluetooth: hci2: command tx timeout
[  530.735265][T16953] dummy0: left allmulticast mode
[  530.769215][T16958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4371'.
[  530.838153][T16958] vlan3: entered allmulticast mode
[  530.848782][T16958] team0: entered allmulticast mode
[  530.858408][T16958] team_slave_0: entered allmulticast mode
[  530.866667][ T8432] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  530.888884][T16958] team_slave_1: entered allmulticast mode
[  530.902768][T16958] team0: left allmulticast mode
[  530.915707][T16958] team_slave_0: left allmulticast mode
[  530.923945][T16958] team_slave_1: left allmulticast mode
[  530.997685][T16785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  531.008272][T16785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  531.019281][T16965] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  531.031161][T16785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  531.041428][T16785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  531.272324][ T8439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  531.297656][ T8439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  531.355195][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  531.374489][T16976] FAULT_INJECTION: forcing a failure.
[  531.374489][T16976] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  531.403259][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  531.422774][T16979] netlink: 'syz.1.4375': attribute type 4 has an invalid length.
[  531.425808][T16976] CPU: 1 UID: 0 PID: 16976 Comm: syz.2.4377 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0
[  531.425838][T16976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  531.425849][T16976] Call Trace:
[  531.425856][T16976]  <TASK>
[  531.425864][T16976]  dump_stack_lvl+0x241/0x360
[  531.425896][T16976]  ? __pfx_dump_stack_lvl+0x10/0x10
[  531.425915][T16976]  ? __pfx__printk+0x10/0x10
[  531.425934][T16976]  ? __pfx_lock_release+0x10/0x10
[  531.425968][T16976]  should_fail_ex+0x40a/0x550
[  531.425998][T16976]  _copy_from_user+0x2d/0xb0
[  531.426022][T16976]  copy_msghdr_from_user+0xae/0x680
[  531.426053][T16976]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  531.426074][T16976]  ? __fget_files+0x2a/0x410
[  531.426102][T16976]  ? __fget_files+0x2a/0x410
[  531.426133][T16976]  __sys_sendmsg+0x209/0x350
[  531.426158][T16976]  ? __pfx___sys_sendmsg+0x10/0x10
[  531.426189][T16976]  ? do_sys_openat2+0x17a/0x1d0
[  531.426244][T16976]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  531.426269][T16976]  ? do_syscall_64+0x100/0x230
[  531.426294][T16976]  ? do_syscall_64+0xb6/0x230
[  531.426317][T16976]  do_syscall_64+0xf3/0x230
[  531.426338][T16976]  ? clear_bhb_loop+0x35/0x90
[  531.426363][T16976]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  531.426384][T16976] RIP: 0033:0x7f77bd98d169
[  531.426401][T16976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  531.426415][T16976] RSP: 002b:00007f77be76d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  531.426437][T16976] RAX: ffffffffffffffda RBX: 00007f77bdba5fa0 RCX: 00007f77bd98d169
[  531.426449][T16976] RDX: 0000000000000000 RSI: 0000400000000240 RDI: 0000000000000003
[  531.426460][T16976] RBP: 00007f77be76d090 R08: 0000000000000000 R09: 0000000000000000
[  531.426470][T16976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  531.426480][T16976] R13: 0000000000000000 R14: 00007f77bdba5fa0 R15: 00007ffd5378e4a8
[  531.426506][T16976]  </TASK>
[  531.646048][T16979] netlink: 'syz.1.4375': attribute type 8 has an invalid length.
[  531.992659][ T8436] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  532.156186][T16988] netlink: 'syz.3.4379': attribute type 13 has an invalid length.
[  532.191646][T16988] macvtap0: refused to change device tx_queue_len
[  532.395323][T16994] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  532.926251][ T1109] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  533.123219][ T1109] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  533.148930][ T8434] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  533.240084][ T1109] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  533.317915][ T1109] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  533.433937][ T1109] bridge_slave_1: left allmulticast mode
[  533.443348][ T1109] bridge_slave_1: left promiscuous mode
[  533.449425][ T1109] bridge0: port 2(bridge_slave_1) entered disabled state
[  533.465278][ T1109] bridge_slave_0: left allmulticast mode
[  533.472522][ T1109] bridge_slave_0: left promiscuous mode
[  533.478269][ T1109] bridge0: port 1(bridge_slave_0) entered disabled state
[  533.966400][ T1109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  533.977697][ T1109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  533.988202][ T1109] bond0 (unregistering): Released all slaves
[  534.075038][T17010] netlink: 'syz.4.4393': attribute type 13 has an invalid length.
[  534.119244][T17010] macvtap0: refused to change device tx_queue_len
[  534.268812][ T8436] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  534.293896][T17018] netlink: 'syz.2.4391': attribute type 4 has an invalid length.
[  534.343898][T17018] netlink: 'syz.2.4391': attribute type 8 has an invalid length.
[  534.388729][T17018] __nla_validate_parse: 3 callbacks suppressed
[  534.388757][T17018] netlink: 236 bytes leftover after parsing attributes in process `syz.2.4391'.
[  534.708146][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  534.731154][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  534.744846][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  534.753971][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  534.762197][ T5843] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  534.770218][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  534.772205][T17025] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4396'.
[  534.830864][T17025] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4396'.
[  535.365951][ T1109] hsr_slave_0: left promiscuous mode
[  535.372729][ T8450] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  535.445168][ T1109] hsr_slave_1: left promiscuous mode
[  535.466109][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  535.485698][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_0
[  535.516670][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  535.528831][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_1
[  535.588260][ T1109] veth1_macvtap: left promiscuous mode
[  535.601165][ T1109] veth0_macvtap: left promiscuous mode
[  535.609502][ T1109] veth1_vlan: left promiscuous mode
[  535.615183][ T1109] veth0_vlan: left promiscuous mode
[  536.420373][ T1109] team0 (unregistering): Port device team_slave_1 removed
[  536.518831][ T8434] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  536.551723][ T1109] team0 (unregistering): Port device team_slave_0 removed
[  536.877391][   T55] Bluetooth: hci2: command tx timeout
[  537.565482][T17069] netlink: 'syz.2.4409': attribute type 13 has an invalid length.
[  537.655826][ T8450] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  537.685003][T17069] macvtap0: refused to change device tx_queue_len
[  537.726934][T17075] netlink: 'syz.4.4410': attribute type 4 has an invalid length.
[  537.737378][T17075] netlink: 'syz.4.4410': attribute type 8 has an invalid length.
[  537.745475][T17075] netlink: 236 bytes leftover after parsing attributes in process `syz.4.4410'.
[  538.357019][T17029] chnl_net:caif_netlink_parms(): no params data found
[  538.630918][T17029] bridge0: port 1(bridge_slave_0) entered blocking state
[  538.638412][T17029] bridge0: port 1(bridge_slave_0) entered disabled state
[  538.663007][T17029] bridge_slave_0: entered allmulticast mode
[  538.686783][T17029] bridge_slave_0: entered promiscuous mode
[  538.699395][T17100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4418'.
[  538.738038][T17029] bridge0: port 2(bridge_slave_1) entered blocking state
[  538.753926][T17029] bridge0: port 2(bridge_slave_1) entered disabled state
[  538.766806][T17029] bridge_slave_1: entered allmulticast mode
[  538.779116][ T8436] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  538.799619][T17029] bridge_slave_1: entered promiscuous mode
[  538.906090][T17108] FAULT_INJECTION: forcing a failure.
[  538.906090][T17108] name failslab, interval 1, probability 0, space 0, times 0
[  538.920430][T17108] CPU: 0 UID: 0 PID: 17108 Comm: syz.2.4423 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0
[  538.920460][T17108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  538.920472][T17108] Call Trace:
[  538.920481][T17108]  <TASK>
[  538.920490][T17108]  dump_stack_lvl+0x241/0x360
[  538.920523][T17108]  ? __pfx_dump_stack_lvl+0x10/0x10
[  538.920546][T17108]  ? __pfx__printk+0x10/0x10
[  538.920581][T17108]  should_fail_ex+0x40a/0x550
[  538.920616][T17108]  should_failslab+0xac/0x100
[  538.920646][T17108]  ? radix_tree_node_alloc+0x8b/0x3c0
[  538.920667][T17108]  kmem_cache_alloc_noprof+0x70/0x380
[  538.920699][T17108]  radix_tree_node_alloc+0x8b/0x3c0
[  538.920730][T17108]  idr_get_free+0x296/0xab0
[  538.920767][T17108]  idr_alloc_u32+0x195/0x330
[  538.920798][T17108]  ? __pfx_idr_alloc_u32+0x10/0x10
[  538.920827][T17108]  ? __pfx_lock_acquire+0x10/0x10
[  538.920860][T17108]  idr_alloc_cyclic+0x106/0x300
[  538.920889][T17108]  ? __pfx_idr_alloc_cyclic+0x10/0x10
[  538.920910][T17108]  ? __radix_tree_preload+0x80/0x860
[  538.920931][T17108]  ? __radix_tree_preload+0x80/0x860
[  538.920952][T17108]  ? bpf_link_prime+0x4c/0x240
[  538.920982][T17108]  bpf_link_prime+0x6b/0x240
[  538.921009][T17108]  bpf_raw_tp_link_attach+0x465/0x700
[  538.921034][T17108]  ? __pfx_bpf_raw_tp_link_attach+0x10/0x10
[  538.921076][T17108]  ? __fget_files+0x2a/0x410
[  538.921110][T17108]  ? fput+0x21b/0x290
[  538.921142][T17108]  bpf_raw_tracepoint_open+0x177/0x1f0
[  538.921174][T17108]  __sys_bpf+0x3b9/0x820
[  538.921214][T17108]  ? __pfx___sys_bpf+0x10/0x10
[  538.921257][T17108]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  538.921289][T17108]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  538.921318][T17108]  ? do_syscall_64+0x100/0x230
[  538.921350][T17108]  __x64_sys_bpf+0x7c/0x90
[  538.921375][T17108]  do_syscall_64+0xf3/0x230
[  538.921400][T17108]  ? clear_bhb_loop+0x35/0x90
[  538.921430][T17108]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  538.921454][T17108] RIP: 0033:0x7f77bd98d169
[  538.921475][T17108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  538.921492][T17108] RSP: 002b:00007f77be76d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  538.921516][T17108] RAX: ffffffffffffffda RBX: 00007f77bdba5fa0 RCX: 00007f77bd98d169
[  538.921531][T17108] RDX: 0000000000000010 RSI: 0000400000000040 RDI: 0000000000000011
[  538.921543][T17108] RBP: 00007f77be76d090 R08: 0000000000000000 R09: 0000000000000000
[  538.921554][T17108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  538.921565][T17108] R13: 0000000000000000 R14: 00007f77bdba5fa0 R15: 00007ffd5378e4a8
[  538.921598][T17108]  </TASK>
[  539.210836][   T55] Bluetooth: hci2: command tx timeout
[  539.301178][T17029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  539.334077][T17029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  539.371184][T17116] FAULT_INJECTION: forcing a failure.
[  539.371184][T17116] name failslab, interval 1, probability 0, space 0, times 0
[  539.385677][T17116] CPU: 0 UID: 0 PID: 17116 Comm: syz.4.4427 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0
[  539.385710][T17116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  539.385723][T17116] Call Trace:
[  539.385730][T17116]  <TASK>
[  539.385739][T17116]  dump_stack_lvl+0x241/0x360
[  539.385772][T17116]  ? __pfx_dump_stack_lvl+0x10/0x10
[  539.385794][T17116]  ? __pfx__printk+0x10/0x10
[  539.385831][T17116]  should_fail_ex+0x40a/0x550
[  539.385867][T17116]  should_failslab+0xac/0x100
[  539.385894][T17116]  ? skb_clone+0x20c/0x390
[  539.385917][T17116]  kmem_cache_alloc_noprof+0x70/0x380
[  539.385950][T17116]  skb_clone+0x20c/0x390
[  539.385977][T17116]  __netlink_deliver_tap+0x3c4/0x7f0
[  539.386019][T17116]  ? netlink_deliver_tap+0x2e/0x1b0
[  539.386045][T17116]  netlink_deliver_tap+0x19d/0x1b0
[  539.386074][T17116]  netlink_unicast+0x7c4/0x990
[  539.386110][T17116]  ? __pfx_netlink_unicast+0x10/0x10
[  539.386133][T17116]  ? __virt_addr_valid+0x45f/0x530
[  539.386153][T17116]  ? __phys_addr_symbol+0x2f/0x70
[  539.386170][T17116]  ? __check_object_size+0x47a/0x730
[  539.386202][T17116]  netlink_sendmsg+0x8de/0xcb0
[  539.386244][T17116]  ? __pfx_netlink_sendmsg+0x10/0x10
[  539.386271][T17116]  ? aa_sock_msg_perm+0x91/0x160
[  539.386299][T17116]  ? __pfx_netlink_sendmsg+0x10/0x10
[  539.386319][T17116]  __sock_sendmsg+0x221/0x270
[  539.386347][T17116]  ____sys_sendmsg+0x53a/0x860
[  539.386379][T17116]  ? __pfx_____sys_sendmsg+0x10/0x10
[  539.386399][T17116]  ? __fget_files+0x2a/0x410
[  539.386431][T17116]  ? __fget_files+0x2a/0x410
[  539.386469][T17116]  __sys_sendmmsg+0x36a/0x720
[  539.386522][T17116]  ? __pfx___sys_sendmmsg+0x10/0x10
[  539.386560][T17116]  ? __pfx_lock_release+0x10/0x10
[  539.386587][T17116]  ? kstrtouint_from_user+0x128/0x190
[  539.386639][T17116]  ? ksys_write+0x22a/0x2b0
[  539.386660][T17116]  ? __pfx_lock_release+0x10/0x10
[  539.386694][T17116]  ? sb_end_write+0xe9/0x1c0
[  539.386721][T17116]  ? vfs_write+0x7fa/0xd10
[  539.386745][T17116]  ? __mutex_unlock_slowpath+0x227/0x800
[  539.386805][T17116]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  539.386836][T17116]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  539.386866][T17116]  ? do_syscall_64+0x100/0x230
[  539.386896][T17116]  __x64_sys_sendmmsg+0xa0/0xb0
[  539.386922][T17116]  do_syscall_64+0xf3/0x230
[  539.386946][T17116]  ? clear_bhb_loop+0x35/0x90
[  539.386977][T17116]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  539.387002][T17116] RIP: 0033:0x7f2ed3d8d169
[  539.387020][T17116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  539.387037][T17116] RSP: 002b:00007f2ed4b8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  539.387061][T17116] RAX: ffffffffffffffda RBX: 00007f2ed3fa5fa0 RCX: 00007f2ed3d8d169
[  539.387075][T17116] RDX: 0492492492492627 RSI: 00004000000000c0 RDI: 0000000000000003
[  539.387088][T17116] RBP: 00007f2ed4b8d090 R08: 0000000000000000 R09: 0000000000000000
[  539.387101][T17116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  539.387112][T17116] R13: 0000000000000000 R14: 00007f2ed3fa5fa0 R15: 00007ffd270dbf98
[  539.387145][T17116]  </TASK>
[  539.729714][T17029] team0: Port device team_slave_0 added
[  539.744732][T17029] team0: Port device team_slave_1 added
[  539.845118][T17029] batman_adv: batadv0: Adding interface: batadv_slave_0
[  539.855014][T17029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  539.882461][T17029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  539.896515][T17029] batman_adv: batadv0: Adding interface: batadv_slave_1
[  539.903665][T17029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  539.930333][T17029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  539.973315][T17029] hsr_slave_0: entered promiscuous mode
[  539.979955][T17029] hsr_slave_1: entered promiscuous mode
[  539.987245][T17029] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  539.996148][T17029] Cannot create hsr debugfs directory
[  540.425053][ T8434] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  540.480182][T17141] FAULT_INJECTION: forcing a failure.
[  540.480182][T17141] name failslab, interval 1, probability 0, space 0, times 0
[  540.520887][T17137] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4436'.
[  540.532832][T17137] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4436'.
[  540.539488][T17141] CPU: 1 UID: 0 PID: 17141 Comm: syz.2.4437 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0
[  540.539519][T17141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  540.539541][T17141] Call Trace:
[  540.539548][T17141]  <TASK>
[  540.539557][T17141]  dump_stack_lvl+0x241/0x360
[  540.539588][T17141]  ? __pfx_dump_stack_lvl+0x10/0x10
[  540.539607][T17141]  ? __pfx__printk+0x10/0x10
[  540.539627][T17141]  ? __kmalloc_noprof+0xb5/0x4c0
[  540.539652][T17141]  ? __pfx___might_resched+0x10/0x10
[  540.539673][T17141]  ? aa_get_newest_label+0xff/0x6f0
[  540.539704][T17141]  should_fail_ex+0x40a/0x550
[  540.539734][T17141]  should_failslab+0xac/0x100
[  540.539760][T17141]  __kmalloc_noprof+0xdd/0x4c0
[  540.539781][T17141]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x290
[  540.539801][T17141]  ? apparmor_capable+0x13b/0x1b0
[  540.539825][T17141]  genl_family_rcv_msg_attrs_parse+0xa3/0x290
[  540.539852][T17141]  genl_rcv_msg+0x80b/0xec0
[  540.539881][T17141]  ? __pfx_genl_rcv_msg+0x10/0x10
[  540.539927][T17141]  ? __pfx_lock_acquire+0x10/0x10
[  540.539950][T17141]  ? __pfx_netlbl_cipsov4_add+0x10/0x10
[  540.539976][T17141]  ? __pfx___might_resched+0x10/0x10
[  540.540007][T17141]  netlink_rcv_skb+0x206/0x480
[  540.540032][T17141]  ? __pfx_genl_rcv_msg+0x10/0x10
[  540.540053][T17141]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  540.540107][T17141]  genl_rcv+0x28/0x40
[  540.540124][T17141]  netlink_unicast+0x7f6/0x990
[  540.540155][T17141]  ? __pfx_netlink_unicast+0x10/0x10
[  540.540174][T17141]  ? __virt_addr_valid+0x45f/0x530
[  540.540191][T17141]  ? __phys_addr_symbol+0x2f/0x70
[  540.540206][T17141]  ? __check_object_size+0x47a/0x730
[  540.540233][T17141]  netlink_sendmsg+0x8de/0xcb0
[  540.540269][T17141]  ? __pfx_netlink_sendmsg+0x10/0x10
[  540.540297][T17141]  ? aa_sock_msg_perm+0x91/0x160
[  540.540326][T17141]  ? __pfx_netlink_sendmsg+0x10/0x10
[  540.540348][T17141]  __sock_sendmsg+0x221/0x270
[  540.540377][T17141]  ____sys_sendmsg+0x53a/0x860
[  540.540405][T17141]  ? __pfx_____sys_sendmsg+0x10/0x10
[  540.540423][T17141]  ? __fget_files+0x2a/0x410
[  540.540449][T17141]  ? __fget_files+0x2a/0x410
[  540.540481][T17141]  __sys_sendmsg+0x269/0x350
[  540.540505][T17141]  ? __pfx___sys_sendmsg+0x10/0x10
[  540.540550][T17141]  ? do_sys_openat2+0x17a/0x1d0
[  540.540600][T17141]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  540.540625][T17141]  ? do_syscall_64+0x100/0x230
[  540.540650][T17141]  ? do_syscall_64+0xb6/0x230
[  540.540673][T17141]  do_syscall_64+0xf3/0x230
[  540.540694][T17141]  ? clear_bhb_loop+0x35/0x90
[  540.540719][T17141]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  540.540741][T17141] RIP: 0033:0x7f77bd98d169
[  540.540757][T17141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  540.540771][T17141] RSP: 002b:00007f77be76d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  540.540793][T17141] RAX: ffffffffffffffda RBX: 00007f77bdba5fa0 RCX: 00007f77bd98d169
[  540.540805][T17141] RDX: 0000000000000000 RSI: 0000400000000580 RDI: 0000000000000004
[  540.540816][T17141] RBP: 00007f77be76d090 R08: 0000000000000000 R09: 0000000000000000
[  540.540827][T17141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  540.540837][T17141] R13: 0000000000000000 R14: 00007f77bdba5fa0 R15: 00007ffd5378e4a8
[  540.540865][T17141]  </TASK>
[  541.028886][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  541.268889][   T55] Bluetooth: hci2: command tx timeout
[  541.317704][T17161] netlink: 'syz.4.4444': attribute type 29 has an invalid length.
[  541.390871][T17029] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  541.427645][T17029] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  541.454126][T17029] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  541.499771][T17029] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  541.552808][T17175] veth0_to_batadv: entered promiscuous mode
[  541.560795][T17175] veth0_to_batadv: entered allmulticast mode
[  541.579250][ T8432] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  541.595226][T17169] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4446'.
[  541.634432][T17169] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4446'.
[  541.777405][T17180] netlink: 'syz.4.4451': attribute type 4 has an invalid length.
[  541.792664][T17029] 8021q: adding VLAN 0 to HW filter on device bond0
[  541.862929][T17029] 8021q: adding VLAN 0 to HW filter on device team0
[  541.887022][T17186] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  541.913793][T17183] 8021q: adding VLAN 0 to HW filter on device bond0
[  541.922791][T17183] team0: Port device bond0 added
[  541.949946][ T8441] bridge0: port 1(bridge_slave_0) entered blocking state
[  541.957346][ T8441] bridge0: port 1(bridge_slave_0) entered forwarding state
[  541.983361][ T8441] bridge0: port 2(bridge_slave_1) entered blocking state
[  541.990805][ T8441] bridge0: port 2(bridge_slave_1) entered forwarding state
[  542.354810][T17029] 8021q: adding VLAN 0 to HW filter on device batadv0
[  542.454898][T17029] veth0_vlan: entered promiscuous mode
[  542.493092][T17029] veth1_vlan: entered promiscuous mode
[  542.565621][T17029] veth0_macvtap: entered promiscuous mode
[  542.596005][T17029] veth1_macvtap: entered promiscuous mode
[  542.642294][T17029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  542.665354][T17029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  542.676866][T17029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  542.688183][T17029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  542.731028][ T8436] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  542.740176][T17029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  542.752169][T17029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  542.765337][T17029] batman_adv: batadv0: Interface activated: batadv_slave_0
[  542.776638][T17029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  542.791007][T17216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4463'.
[  542.809358][T17029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  542.826274][T17029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  542.847760][T17029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  542.869866][T17029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  542.886730][T17029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  542.899596][T17029] batman_adv: batadv0: Interface activated: batadv_slave_1
[  542.907520][T17213] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4462'.
[  542.917284][T17214] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4462'.
[  542.963822][T17029] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  543.003438][T17029] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  543.018934][T17029] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  543.051848][T17029] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  543.150476][T17218] ipip0: entered promiscuous mode
[  543.333964][ T8439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  543.349117][   T55] Bluetooth: hci2: command tx timeout
[  543.368283][ T8439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  543.425977][T17240] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.4471'.
[  543.454983][T17240] openvswitch: netlink: Message has 44053 unknown bytes.
[  543.489539][ T8441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  543.526074][ T8441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  543.874604][ T1109] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  544.109220][T17263] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  544.189887][T17259] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4476'.
[  544.200264][T17259] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4476'.
[  544.755772][T17279] FAULT_INJECTION: forcing a failure.
[  544.755772][T17279] name failslab, interval 1, probability 0, space 0, times 0
[  544.796801][T17251] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  544.813843][T17279] CPU: 0 UID: 0 PID: 17279 Comm: syz.2.4484 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0
[  544.813880][T17279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  544.813892][T17279] Call Trace:
[  544.813898][T17279]  <TASK>
[  544.813907][T17279]  dump_stack_lvl+0x241/0x360
[  544.813937][T17279]  ? __pfx_dump_stack_lvl+0x10/0x10
[  544.813958][T17279]  ? __pfx__printk+0x10/0x10
[  544.813978][T17279]  ? __kmalloc_noprof+0xb5/0x4c0
[  544.814004][T17279]  ? __pfx___might_resched+0x10/0x10
[  544.814031][T17279]  should_fail_ex+0x40a/0x550
[  544.814063][T17279]  should_failslab+0xac/0x100
[  544.814089][T17279]  __kmalloc_noprof+0xdd/0x4c0
[  544.814113][T17279]  ? bpf_test_init+0xc3/0x160
[  544.814143][T17279]  bpf_test_init+0xc3/0x160
[  544.814170][T17279]  bpf_prog_test_run_skb+0x2bb/0x1830
[  544.814193][T17279]  ? __pfx_lock_release+0x10/0x10
[  544.814226][T17279]  ? __pfx___might_resched+0x10/0x10
[  544.814252][T17279]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  544.814272][T17279]  ? __fget_files+0x2a/0x410
[  544.814300][T17279]  ? fput+0x21b/0x290
[  544.814324][T17279]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  544.814348][T17279]  bpf_prog_test_run+0x2e4/0x360
[  544.814376][T17279]  __sys_bpf+0x487/0x820
[  544.814403][T17279]  ? __pfx___sys_bpf+0x10/0x10
[  544.814459][T17279]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  544.814497][T17279]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  544.814525][T17279]  ? do_syscall_64+0x100/0x230
[  544.814551][T17279]  __x64_sys_bpf+0x7c/0x90
[  544.814583][T17279]  do_syscall_64+0xf3/0x230
[  544.814605][T17279]  ? clear_bhb_loop+0x35/0x90
[  544.814632][T17279]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  544.814654][T17279] RIP: 0033:0x7f77bd98d169
[  544.814681][T17279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  544.814697][T17279] RSP: 002b:00007f77be74c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  544.814720][T17279] RAX: ffffffffffffffda RBX: 00007f77bdba6080 RCX: 00007f77bd98d169
[  544.814733][T17279] RDX: 0000000000000050 RSI: 00004000000005c0 RDI: 000000000000000a
[  544.814746][T17279] RBP: 00007f77be74c090 R08: 0000000000000000 R09: 0000000000000000
[  544.814758][T17279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  544.814769][T17279] R13: 0000000000000000 R14: 00007f77bdba6080 R15: 00007ffd5378e4a8
[  544.814821][T17279]  </TASK>
[  545.169603][ T1109] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  545.587788][T17251] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  545.670306][T17251] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  545.759948][T17251] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  545.876533][T17251] bridge_slave_1: left allmulticast mode
[  545.883009][T17251] bridge_slave_1: left promiscuous mode
[  545.889092][T17251] bridge0: port 2(bridge_slave_1) entered disabled state
[  545.898488][T17251] bridge_slave_0: left allmulticast mode
[  545.904485][T17251] bridge_slave_0: left promiscuous mode
[  545.912845][T17251] bridge0: port 1(bridge_slave_0) entered disabled state
[  546.289652][ T1109] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  546.335256][T17290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  546.510295][T17295] sctp: [Deprecated]: syz.2.4487 (pid 17295) Use of struct sctp_assoc_value in delayed_ack socket option.
[  546.510295][T17295] Use struct sctp_sack_info instead
[  546.555434][T17296] netlink: 'syz.4.4489': attribute type 4 has an invalid length.
[  546.588812][T17296] netlink: 'syz.4.4489': attribute type 8 has an invalid length.
[  546.642259][T17296] __nla_validate_parse: 1 callbacks suppressed
[  546.642287][T17296] netlink: 236 bytes leftover after parsing attributes in process `syz.4.4489'.
[  546.764352][T17300] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  546.879836][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  546.894544][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  546.907078][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  546.919638][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  546.931788][ T5843] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  546.939736][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  547.274366][T17251] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  547.286143][T17251] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  547.296880][T17251] bond0 (unregistering): Released all slaves
[  547.450826][ T8432] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  547.742287][T17310] netlink: 'syz.3.4494': attribute type 13 has an invalid length.
[  547.801992][T17310] macvtap0: refused to change device tx_queue_len
[  547.820462][T17312] trusted_key: syz.1.4496 sent an empty control message without MSG_MORE.
[  547.982548][T17251] hsr_slave_0: left promiscuous mode
[  548.026781][T17251] hsr_slave_1: left promiscuous mode
[  548.040176][T17251] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  548.060256][T17251] batman_adv: batadv0: Removing interface: batadv_slave_0
[  548.071003][T17251] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  548.085392][T17251] batman_adv: batadv0: Removing interface: batadv_slave_1
[  548.114143][T17251] veth1_macvtap: left promiscuous mode
[  548.120108][T17251] veth0_macvtap: left promiscuous mode
[  548.126014][T17251] veth1_vlan: left promiscuous mode
[  548.131575][T17251] veth0_vlan: left promiscuous mode
[  548.139193][T17331] netlink: 21 bytes leftover after parsing attributes in process `syz.1.4501'.
[  548.578849][ T1109] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  548.842435][T17251] team0 (unregistering): Port device team_slave_1 removed
[  548.922580][T17251] team0 (unregistering): Port device team_slave_0 removed
[  549.043044][ T5843] Bluetooth: hci2: command tx timeout
[  549.614336][T17319] netlink: 'syz.4.4500': attribute type 4 has an invalid length.
[  549.660921][T17328] tipc: MTU too low for tipc bearer
[  549.718728][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  549.960121][T17347] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  549.987772][T17347] bridge_slave_0: invalid flags given to default FDB implementation
[  550.031088][T17301] chnl_net:caif_netlink_parms(): no params data found
[  550.386380][T17301] bridge0: port 1(bridge_slave_0) entered blocking state
[  550.421369][T17301] bridge0: port 1(bridge_slave_0) entered disabled state
[  550.426606][T17363] delete_channel: no stack
[  550.454049][T17301] bridge_slave_0: entered allmulticast mode
[  550.491533][T17301] bridge_slave_0: entered promiscuous mode
[  550.500319][T17362] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4514'.
[  550.513165][T17362] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4514'.
[  550.523585][T17301] bridge0: port 2(bridge_slave_1) entered blocking state
[  550.536222][T17301] bridge0: port 2(bridge_slave_1) entered disabled state
[  550.547750][T17301] bridge_slave_1: entered allmulticast mode
[  550.559581][T17301] bridge_slave_1: entered promiscuous mode
[  550.632827][T17301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  550.677637][T17301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  550.849868][T17301] team0: Port device team_slave_0 added
[  550.869264][ T1109] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  550.881252][T17301] team0: Port device team_slave_1 added
[  550.966433][T17301] batman_adv: batadv0: Adding interface: batadv_slave_0
[  550.988723][T17301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  551.023212][T17301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  551.049470][T17301] batman_adv: batadv0: Adding interface: batadv_slave_1
[  551.080266][T17301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  551.116222][ T5843] Bluetooth: hci2: command tx timeout
[  551.117293][T17301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  551.297411][T17393] FAULT_INJECTION: forcing a failure.
[  551.297411][T17393] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  551.323907][T17301] hsr_slave_0: entered promiscuous mode
[  551.340236][T17393] CPU: 0 UID: 0 PID: 17393 Comm: syz.3.4527 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0
[  551.340272][T17393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  551.340284][T17393] Call Trace:
[  551.340292][T17393]  <TASK>
[  551.340301][T17393]  dump_stack_lvl+0x241/0x360
[  551.340334][T17393]  ? __pfx_dump_stack_lvl+0x10/0x10
[  551.340354][T17393]  ? __pfx__printk+0x10/0x10
[  551.340381][T17393]  ? snprintf+0xda/0x120
[  551.340403][T17393]  should_fail_ex+0x40a/0x550
[  551.340438][T17393]  _copy_to_user+0x31/0xb0
[  551.340466][T17393]  simple_read_from_buffer+0xca/0x150
[  551.340496][T17393]  proc_fail_nth_read+0x1e9/0x250
[  551.340525][T17393]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  551.340552][T17393]  ? rw_verify_area+0x243/0x630
[  551.340572][T17393]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  551.340598][T17393]  vfs_read+0x1f8/0xb40
[  551.340620][T17393]  ? fdget_pos+0x254/0x320
[  551.340649][T17393]  ? __pfx___mutex_lock+0x10/0x10
[  551.340675][T17393]  ? __pfx_vfs_read+0x10/0x10
[  551.340692][T17393]  ? do_sys_openat2+0x17a/0x1d0
[  551.340724][T17393]  ? __fget_files+0x2a/0x410
[  551.340751][T17393]  ? __fget_files+0x395/0x410
[  551.340776][T17393]  ? __fget_files+0x2a/0x410
[  551.340813][T17393]  ksys_read+0x18f/0x2b0
[  551.340836][T17393]  ? __pfx_ksys_read+0x10/0x10
[  551.340858][T17393]  ? do_syscall_64+0x100/0x230
[  551.340886][T17393]  ? do_syscall_64+0xb6/0x230
[  551.340913][T17393]  do_syscall_64+0xf3/0x230
[  551.340938][T17393]  ? clear_bhb_loop+0x35/0x90
[  551.340983][T17393]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  551.341022][T17393] RIP: 0033:0x7fe5c298bb7c
[  551.341042][T17393] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  551.341058][T17393] RSP: 002b:00007fe5c3887030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  551.341095][T17393] RAX: ffffffffffffffda RBX: 00007fe5c2ba5fa0 RCX: 00007fe5c298bb7c
[  551.341109][T17393] RDX: 000000000000000f RSI: 00007fe5c38870a0 RDI: 0000000000000006
[  551.341121][T17393] RBP: 00007fe5c3887090 R08: 0000000000000000 R09: 0000000000000000
[  551.341132][T17393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  551.341143][T17393] R13: 0000000000000000 R14: 00007fe5c2ba5fa0 R15: 00007fffb2763168
[  551.341176][T17393]  </TASK>
[  551.366034][T17301] hsr_slave_1: entered promiscuous mode
[  551.606541][T17301] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  551.623153][T17301] Cannot create hsr debugfs directory
[  552.009480][ T1109] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  552.104381][T17416] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  552.774882][T17427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4538'.
[  552.797905][T17427] vlan2: entered allmulticast mode
[  552.803595][T17427] dummy0: entered allmulticast mode
[  552.869832][T17301] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  552.891459][T17301] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  552.922507][T17301] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  552.955104][T17301] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  553.150720][ T1109] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  553.164701][T17442] smc: net device bond0 applied user defined pnetid SYZ2
[  553.200161][ T5843] Bluetooth: hci2: command tx timeout
[  553.262047][T17301] 8021q: adding VLAN 0 to HW filter on device bond0
[  553.287714][T17301] 8021q: adding VLAN 0 to HW filter on device team0
[  553.304128][T17251] bridge0: port 1(bridge_slave_0) entered blocking state
[  553.311478][T17251] bridge0: port 1(bridge_slave_0) entered forwarding state
[  553.362461][T17251] bridge0: port 2(bridge_slave_1) entered blocking state
[  553.369890][T17251] bridge0: port 2(bridge_slave_1) entered forwarding state
[  553.526314][T17452] team0: entered allmulticast mode
[  553.532247][T17452] team_slave_0: entered allmulticast mode
[  553.538082][T17452] team_slave_1: entered allmulticast mode
[  553.680629][T17459] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  553.802793][T17301] 8021q: adding VLAN 0 to HW filter on device batadv0
[  553.888664][T17301] veth0_vlan: entered promiscuous mode
[  553.905869][T17301] veth1_vlan: entered promiscuous mode
[  553.954533][T17301] veth0_macvtap: entered promiscuous mode
[  553.966089][T17301] veth1_macvtap: entered promiscuous mode
[  554.007768][T17301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  554.029355][T17301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  554.058851][T17301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  554.097538][T17301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  554.117924][T17301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  554.132633][T17301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  554.153688][T17301] batman_adv: batadv0: Interface activated: batadv_slave_0
[  554.192124][T17301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  554.208922][T17301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  554.230172][T17301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  554.252346][T17301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  554.266423][T17301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  554.288720][T17250] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  554.288860][T17301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  554.351851][T17301] batman_adv: batadv0: Interface activated: batadv_slave_1
[  554.458071][T17301] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  554.478021][T17301] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  554.490513][T17301] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  554.499595][T17301] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  554.850058][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  554.914116][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  554.960397][T17491] bridge0: entered promiscuous mode
[  554.966980][T17491] macvlan2: entered promiscuous mode
[  554.986974][T17491] bridge0: port 3(macvlan2) entered blocking state
[  555.016469][T17491] bridge0: port 3(macvlan2) entered disabled state
[  555.037111][T17491] macvlan2: entered allmulticast mode
[  555.059644][T17491] bridge0: entered allmulticast mode
[  555.081672][T17491] macvlan2: left allmulticast mode
[  555.091530][T17491] bridge0: left allmulticast mode
[  555.111964][T17491] bridge0: left promiscuous mode
[  555.207332][T17252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  555.229254][T17500] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4565'.
[  555.239369][T17252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  555.253527][T17500] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4565'.
[  555.269375][ T5843] Bluetooth: hci2: command tx timeout
[  555.398824][T17251] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  555.617015][T17512] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  555.809731][T17512] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  555.909984][T17512] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  555.987757][T17512] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  556.102120][T17512] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  556.122054][T17512] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  556.138262][T17512] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  556.155005][T17512] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  556.267332][T17539] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4579'.
[  556.289537][T17539] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4579'.
[  556.429063][T17546] Cannot find set identified by id 0 to match
[  556.498988][T17252] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  557.480872][T17252] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  557.574298][T17252] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  557.629287][ T1109] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  557.677224][T17252] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  557.756519][T17252] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  557.852029][T17252] bridge_slave_1: left allmulticast mode
[  557.857810][T17252] bridge_slave_1: left promiscuous mode
[  557.864228][T17252] bridge0: port 2(bridge_slave_1) entered disabled state
[  557.874063][T17252] bridge_slave_0: left allmulticast mode
[  557.880449][T17252] bridge_slave_0: left promiscuous mode
[  557.886245][T17252] bridge0: port 1(bridge_slave_0) entered disabled state
[  558.377681][T17252] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  558.394289][T17252] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  558.404743][T17252] bond0 (unregistering): Released all slaves
[  558.728808][T17250] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  558.747867][T17252] hsr_slave_0: left promiscuous mode
[  558.759035][T17252] hsr_slave_1: left promiscuous mode
[  558.768374][T17252] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  558.777324][T17252] batman_adv: batadv0: Removing interface: batadv_slave_0
[  558.785864][T17252] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  558.797116][T17252] batman_adv: batadv0: Removing interface: batadv_slave_1
[  558.866227][T17252] veth1_macvtap: left promiscuous mode
[  558.878226][T17252] veth0_macvtap: left promiscuous mode
[  558.891823][T17252] veth1_vlan: left promiscuous mode
[  558.904761][T17252] veth0_vlan: left promiscuous mode
[  559.257446][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  559.274138][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  559.288888][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  559.301001][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  559.313117][   T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  559.321425][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  559.858938][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  560.175228][T17252] team0 (unregistering): Port device team_slave_1 removed
[  560.246145][T17252] team0 (unregistering): Port device team_slave_0 removed
[  560.887253][T17580] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4595'.
[  560.900078][T17586] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4595'.
[  560.989754][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  561.375406][T17606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4604'.
[  561.428717][ T5843] Bluetooth: hci2: command tx timeout
[  561.491853][T17614] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  561.541244][T17590] chnl_net:caif_netlink_parms(): no params data found
[  561.626396][T17590] bridge0: port 1(bridge_slave_0) entered blocking state
[  561.634121][T17590] bridge0: port 1(bridge_slave_0) entered disabled state
[  561.641919][T17590] bridge_slave_0: entered allmulticast mode
[  561.649356][T17590] bridge_slave_0: entered promiscuous mode
[  561.657701][T17590] bridge0: port 2(bridge_slave_1) entered blocking state
[  561.665915][T17590] bridge0: port 2(bridge_slave_1) entered disabled state
[  561.777782][T17590] bridge_slave_1: entered allmulticast mode
[  561.785537][T17590] bridge_slave_1: entered promiscuous mode
[  561.944611][T17590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  562.009779][T17590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  562.179041][ T8450] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  562.208221][T17590] team0: Port device team_slave_0 added
[  562.282783][T17590] team0: Port device team_slave_1 added
[  562.404933][T17590] batman_adv: batadv0: Adding interface: batadv_slave_0
[  562.412274][T17590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  562.474705][T17590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  562.507013][T17590] batman_adv: batadv0: Adding interface: batadv_slave_1
[  562.527718][T17590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  562.570195][T17630] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  562.595784][T17590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  562.614563][T17631] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4611'.
[  562.633306][T17631] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4611'.
[  562.778244][T17590] hsr_slave_0: entered promiscuous mode
[  562.790343][T17590] hsr_slave_1: entered promiscuous mode
[  562.798220][T17590] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  562.813272][T17590] Cannot create hsr debugfs directory
[  563.052126][T17637] FAULT_INJECTION: forcing a failure.
[  563.052126][T17637] name failslab, interval 1, probability 0, space 0, times 0
[  563.095750][T17637] CPU: 0 UID: 0 PID: 17637 Comm: syz.2.4614 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0
[  563.095790][T17637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  563.095831][T17637] Call Trace:
[  563.095840][T17637]  <TASK>
[  563.095850][T17637]  dump_stack_lvl+0x241/0x360
[  563.095887][T17637]  ? __pfx_dump_stack_lvl+0x10/0x10
[  563.095910][T17637]  ? __pfx__printk+0x10/0x10
[  563.095933][T17637]  ? __kmalloc_cache_noprof+0x48/0x390
[  563.095964][T17637]  ? __pfx___might_resched+0x10/0x10
[  563.096005][T17637]  should_fail_ex+0x40a/0x550
[  563.096042][T17637]  should_failslab+0xac/0x100
[  563.096072][T17637]  __kmalloc_cache_noprof+0x70/0x390
[  563.096097][T17637]  ? genl_start+0x1cb/0x6d0
[  563.096127][T17637]  genl_start+0x1cb/0x6d0
[  563.096160][T17637]  __netlink_dump_start+0x45c/0x790
[  563.096200][T17637]  genl_rcv_msg+0x894/0xec0
[  563.096234][T17637]  ? __pfx_genl_rcv_msg+0x10/0x10
[  563.096263][T17637]  ? __pfx_genl_start+0x10/0x10
[  563.096283][T17637]  ? __pfx_genl_dumpit+0x10/0x10
[  563.096304][T17637]  ? __pfx_genl_done+0x10/0x10
[  563.096348][T17637]  ? __pfx_lock_acquire+0x10/0x10
[  563.096377][T17637]  ? __pfx_nl802154_dump_llsec_key+0x10/0x10
[  563.096402][T17637]  ? __pfx___might_resched+0x10/0x10
[  563.096440][T17637]  netlink_rcv_skb+0x206/0x480
[  563.096469][T17637]  ? __pfx_genl_rcv_msg+0x10/0x10
[  563.096495][T17637]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  563.096561][T17637]  genl_rcv+0x28/0x40
[  563.096581][T17637]  netlink_unicast+0x7f6/0x990
[  563.096619][T17637]  ? __pfx_netlink_unicast+0x10/0x10
[  563.096643][T17637]  ? __virt_addr_valid+0x45f/0x530
[  563.096665][T17637]  ? __phys_addr_symbol+0x2f/0x70
[  563.096683][T17637]  ? __check_object_size+0x47a/0x730
[  563.096716][T17637]  netlink_sendmsg+0x8de/0xcb0
[  563.096757][T17637]  ? __pfx_netlink_sendmsg+0x10/0x10
[  563.096785][T17637]  ? aa_sock_msg_perm+0x91/0x160
[  563.096817][T17637]  ? __pfx_netlink_sendmsg+0x10/0x10
[  563.096841][T17637]  __sock_sendmsg+0x221/0x270
[  563.096873][T17637]  ____sys_sendmsg+0x53a/0x860
[  563.096907][T17637]  ? __pfx_____sys_sendmsg+0x10/0x10
[  563.096929][T17637]  ? __fget_files+0x2a/0x410
[  563.096958][T17637]  ? __fget_files+0x2a/0x410
[  563.097002][T17637]  __sys_sendmsg+0x269/0x350
[  563.097032][T17637]  ? __pfx___sys_sendmsg+0x10/0x10
[  563.097072][T17637]  ? do_sys_openat2+0x17a/0x1d0
[  563.097135][T17637]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  563.097166][T17637]  ? do_syscall_64+0x100/0x230
[  563.097196][T17637]  ? do_syscall_64+0xb6/0x230
[  563.097225][T17637]  do_syscall_64+0xf3/0x230
[  563.097248][T17637]  ? clear_bhb_loop+0x35/0x90
[  563.097279][T17637]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  563.097305][T17637] RIP: 0033:0x7f77bd98d169
[  563.097325][T17637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  563.097343][T17637] RSP: 002b:00007f77be76d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  563.097368][T17637] RAX: ffffffffffffffda RBX: 00007f77bdba5fa0 RCX: 00007f77bd98d169
[  563.097384][T17637] RDX: 0000000000008004 RSI: 0000400000000900 RDI: 0000000000000004
[  563.097398][T17637] RBP: 00007f77be76d090 R08: 0000000000000000 R09: 0000000000000000
[  563.097410][T17637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  563.097423][T17637] R13: 0000000000000000 R14: 00007f77bdba5fa0 R15: 00007ffd5378e4a8
[  563.097457][T17637]  </TASK>
[  563.518665][ T5843] Bluetooth: hci2: command tx timeout
[  563.566702][T17251] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  563.611596][T17641] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  564.006475][T17654] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4622'.
[  564.020519][T17590] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  564.034524][T17654] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4622'.
[  564.045166][T17590] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  564.067451][T17590] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  564.083063][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  564.090234][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  564.101784][T17590] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  564.307365][T17590] 8021q: adding VLAN 0 to HW filter on device bond0
[  564.332483][T17590] 8021q: adding VLAN 0 to HW filter on device team0
[  564.356994][T17251] bridge0: port 1(bridge_slave_0) entered blocking state
[  564.364798][T17251] bridge0: port 1(bridge_slave_0) entered forwarding state
[  564.414176][ T8450] bridge0: port 2(bridge_slave_1) entered blocking state
[  564.421484][ T8450] bridge0: port 2(bridge_slave_1) entered forwarding state
[  564.637842][T17672] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4630'.
[  564.719636][T17252] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  565.014507][T17590] 8021q: adding VLAN 0 to HW filter on device batadv0
[  565.152468][T17590] veth0_vlan: entered promiscuous mode
[  565.175425][T17590] veth1_vlan: entered promiscuous mode
[  565.259892][T17590] veth0_macvtap: entered promiscuous mode
[  565.295867][T17590] veth1_macvtap: entered promiscuous mode
[  565.337105][T17590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  565.359948][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  565.376309][T17590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  565.387852][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  565.398936][T17590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  565.409736][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  565.426526][T17590] batman_adv: batadv0: Interface activated: batadv_slave_0
[  565.444986][T17590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  565.456384][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  565.467524][T17590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  565.479165][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  565.490919][T17590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  565.502700][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  565.559654][T17590] batman_adv: batadv0: Interface activated: batadv_slave_1
[  565.599391][ T5843] Bluetooth: hci2: command tx timeout
[  565.840598][T17252] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  566.245325][T17590] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  566.264778][T17590] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  566.278646][T17590] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  566.287712][T17590] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  566.440091][T17724] netlink: 312 bytes leftover after parsing attributes in process `syz.1.4649'.
[  566.450025][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  566.463312][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  566.496920][T17250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  566.514559][T17250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  566.958877][T17251] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  567.113916][T17748] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  567.152062][T17748] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  567.220547][T17750] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  567.250546][T17749] tipc: Resetting bearer <eth:syzkaller0>
[  567.264934][T17749] tipc: Resetting bearer <eth:syzkaller0>
[  567.328976][T17754] FAULT_INJECTION: forcing a failure.
[  567.328976][T17754] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  567.343125][T17754] CPU: 1 UID: 0 PID: 17754 Comm: syz.4.4661 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0
[  567.343159][T17754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  567.343170][T17754] Call Trace:
[  567.343178][T17754]  <TASK>
[  567.343187][T17754]  dump_stack_lvl+0x241/0x360
[  567.343232][T17754]  ? __pfx_dump_stack_lvl+0x10/0x10
[  567.343251][T17754]  ? __pfx__printk+0x10/0x10
[  567.343270][T17754]  ? __pfx_lock_release+0x10/0x10
[  567.343304][T17754]  should_fail_ex+0x40a/0x550
[  567.343335][T17754]  _copy_from_user+0x2d/0xb0
[  567.343362][T17754]  copy_msghdr_from_user+0xae/0x680
[  567.343390][T17754]  ? __pfx___might_resched+0x10/0x10
[  567.343419][T17754]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  567.343451][T17754]  ? do_recvmmsg+0x44e/0xab0
[  567.343474][T17754]  ? __might_fault+0xaa/0x120
[  567.343498][T17754]  do_recvmmsg+0x3bd/0xab0
[  567.343530][T17754]  ? __pfx_do_recvmmsg+0x10/0x10
[  567.343573][T17754]  ? ksys_write+0x22a/0x2b0
[  567.343595][T17754]  ? __pfx_lock_release+0x10/0x10
[  567.343628][T17754]  ? sb_end_write+0xe9/0x1c0
[  567.343655][T17754]  ? vfs_write+0x7fa/0xd10
[  567.343677][T17754]  ? __mutex_unlock_slowpath+0x227/0x800
[  567.343711][T17754]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  567.343734][T17754]  ? __fget_files+0x2a/0x410
[  567.343776][T17754]  __x64_sys_recvmmsg+0x199/0x250
[  567.343802][T17754]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  567.343827][T17754]  ? do_syscall_64+0x100/0x230
[  567.343854][T17754]  ? do_syscall_64+0xb6/0x230
[  567.343880][T17754]  do_syscall_64+0xf3/0x230
[  567.343904][T17754]  ? clear_bhb_loop+0x35/0x90
[  567.343933][T17754]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  567.343957][T17754] RIP: 0033:0x7f2ed3d8d169
[  567.343977][T17754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  567.343993][T17754] RSP: 002b:00007f2ed4b6c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  567.344015][T17754] RAX: ffffffffffffffda RBX: 00007f2ed3fa6080 RCX: 00007f2ed3d8d169
[  567.344029][T17754] RDX: 0000000004000169 RSI: 0000400000005000 RDI: 0000000000000003
[  567.344042][T17754] RBP: 00007f2ed4b6c090 R08: 0000000000000000 R09: 0000000000000000
[  567.344052][T17754] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000002
[  567.344062][T17754] R13: 0000000000000000 R14: 00007f2ed3fa6080 R15: 00007ffd270dbf98
[  567.344087][T17754]  </TASK>
[  568.288807][T17251] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  569.409637][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  569.921531][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  569.934447][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  569.945402][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  569.990791][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  570.039000][   T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  570.049013][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  570.540895][ T8439] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  571.450212][T17749] tipc: Disabling bearer <eth:syzkaller0>
[  571.470753][T17758] vlan3: entered promiscuous mode
[  571.476057][T17758] team0: entered promiscuous mode
[  571.481702][T17758] team_slave_0: entered promiscuous mode
[  571.487526][T17758] team_slave_1: entered promiscuous mode
[  571.498955][T17758] bond0: entered promiscuous mode
[  571.504101][T17758] bond_slave_0: entered promiscuous mode
[  571.522086][T17758] bond_slave_1: entered promiscuous mode
[  571.534868][T17758] vlan3: entered allmulticast mode
[  571.544909][T17758] team0: entered allmulticast mode
[  571.554310][T17758] team_slave_0: entered allmulticast mode
[  571.566244][T17758] team_slave_1: entered allmulticast mode
[  571.578818][T17758] bond0: entered allmulticast mode
[  571.588715][T17758] bond_slave_0: entered allmulticast mode
[  571.602954][T17758] bond_slave_1: entered allmulticast mode
[  571.650238][T17251] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  571.681015][T17785] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  571.842962][ T8432] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  572.068756][   T55] Bluetooth: hci2: command tx timeout
[  572.156251][T17771] chnl_net:caif_netlink_parms(): no params data found
[  572.240859][ T8432] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  572.363320][T17771] bridge0: port 1(bridge_slave_0) entered blocking state
[  572.370772][T17771] bridge0: port 1(bridge_slave_0) entered disabled state
[  572.378400][T17771] bridge_slave_0: entered allmulticast mode
[  572.385470][T17771] bridge_slave_0: entered promiscuous mode
[  572.414132][ T8432] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  572.431901][T17771] bridge0: port 2(bridge_slave_1) entered blocking state
[  572.440085][T17771] bridge0: port 2(bridge_slave_1) entered disabled state
[  572.448265][T17771] bridge_slave_1: entered allmulticast mode
[  572.470115][T17771] bridge_slave_1: entered promiscuous mode
[  572.553985][ T8432] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  572.669728][T17771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  572.679368][T17815] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  572.694799][T17771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  572.770097][ T1109] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  572.811100][T17771] team0: Port device team_slave_0 added
[  572.825197][T17817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4683'.
[  572.834578][T17771] team0: Port device team_slave_1 added
[  572.842192][T17817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4683'.
[  572.912151][T17771] batman_adv: batadv0: Adding interface: batadv_slave_0
[  572.929881][T17771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  572.966220][T17771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  572.980127][ T8432] bridge_slave_1: left allmulticast mode
[  572.985895][ T8432] bridge_slave_1: left promiscuous mode
[  572.994432][ T8432] bridge0: port 2(bridge_slave_1) entered disabled state
[  573.004566][ T8432] bridge_slave_0: left allmulticast mode
[  573.011320][ T8432] bridge_slave_0: left promiscuous mode
[  573.017336][ T8432] bridge0: port 1(bridge_slave_0) entered disabled state
[  573.761204][ T8432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  573.775399][ T8432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  573.786621][ T8432] bond0 (unregistering): Released all slaves
[  573.798230][T17771] batman_adv: batadv0: Adding interface: batadv_slave_1
[  573.805907][T17771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  573.833766][T17771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  573.909212][ T1109] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  573.938360][T17819] vlan2: entered promiscuous mode
[  573.944823][T17819] team0: entered promiscuous mode
[  573.952268][T17819] team_slave_0: entered promiscuous mode
[  573.958309][T17819] team_slave_1: entered promiscuous mode
[  573.967186][T17819] vlan2: entered allmulticast mode
[  573.975051][T17819] team0: entered allmulticast mode
[  573.982894][T17819] team_slave_0: entered allmulticast mode
[  573.989889][T17819] team_slave_1: entered allmulticast mode
[  573.999322][T17825] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4687'.
[  574.009428][T17826] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4687'.
[  574.019312][T17833] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  574.149117][   T55] Bluetooth: hci2: command tx timeout
[  574.169872][T17771] hsr_slave_0: entered promiscuous mode
[  574.176786][T17771] hsr_slave_1: entered promiscuous mode
[  574.184317][T17771] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  574.192357][T17771] Cannot create hsr debugfs directory
[  574.362449][T17840] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4693'.
[  574.414192][T17841] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4693'.
[  574.524536][T17840] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4693'.
[  574.534933][ T8432] hsr_slave_0: left promiscuous mode
[  574.543745][ T8432] hsr_slave_1: left promiscuous mode
[  574.560257][ T8432] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  574.574769][ T8432] batman_adv: batadv0: Removing interface: batadv_slave_0
[  574.581861][T17851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4697'.
[  574.592252][ T8432] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  574.605500][ T8432] batman_adv: batadv0: Removing interface: batadv_slave_1
[  574.637519][ T8432] veth1_macvtap: left promiscuous mode
[  574.646785][ T8432] veth0_macvtap: left promiscuous mode
[  574.655827][ T8432] veth1_vlan: left promiscuous mode
[  574.665542][ T8432] veth0_vlan: left promiscuous mode
[  575.067305][T17251] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  575.407993][ T8432] team0 (unregistering): Port device team_slave_1 removed
[  575.473261][ T8432] team0 (unregistering): Port device team_slave_0 removed
[  576.156914][T17845] 
[  576.159352][T17845] ======================================================
[  576.166476][T17845] WARNING: possible circular locking dependency detected
[  576.173690][T17845] 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 Not tainted
[  576.180928][T17845] ------------------------------------------------------
[  576.188159][T17845] syz.1.4693/17845 is trying to acquire lock:
[  576.194410][T17845] ffff8880585c8d28 (&dev_instance_lock_key#12){+.+.}-{4:4}, at: dev_set_mac_address+0x2a/0x50
[  576.204984][T17845] 
[  576.204984][T17845] but task is already holding lock:
[  576.212401][T17845] ffff88807f738d28 (&dev_instance_lock_key#2){+.+.}-{4:4}, at: do_setlink+0xa94/0x40f0
[  576.222365][T17845] 
[  576.222365][T17845] which lock already depends on the new lock.
[  576.222365][T17845] 
[  576.233332][T17845] 
[  576.233332][T17845] the existing dependency chain (in reverse order) is:
[  576.242800][T17845] 
[  576.242800][T17845] -> #2 (&dev_instance_lock_key#2){+.+.}-{4:4}:
[  576.251356][T17845]        lock_acquire+0x1ed/0x550
[  576.256499][T17845]        __mutex_lock+0x19c/0x1010
[  576.261993][T17845]        __dev_open+0x5cb/0x8a0
[  576.267026][T17845]        netif_open+0xae/0x1b0
[  576.271821][T17845]        dev_open+0x13e/0x260
[  576.276563][T17845]        team_add_slave+0xabe/0x28a0
[  576.282142][T17845]        do_set_master+0x579/0x730
[  576.287475][T17845]        do_setlink+0xfee/0x40f0
[  576.292442][T17845]        rtnl_newlink+0x15a6/0x1d90
[  576.297691][T17845]        rtnetlink_rcv_msg+0x791/0xcf0
[  576.303355][T17845]        netlink_rcv_skb+0x206/0x480
[  576.308753][T17845]        netlink_unicast+0x7f6/0x990
[  576.314195][T17845]        netlink_sendmsg+0x8de/0xcb0
[  576.319518][T17845]        __sock_sendmsg+0x221/0x270
[  576.324799][T17845]        ____sys_sendmsg+0x53a/0x860
[  576.330125][T17845]        __sys_sendmsg+0x269/0x350
[  576.335455][T17845]        do_syscall_64+0xf3/0x230
[  576.340737][T17845]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.347436][T17845] 
[  576.347436][T17845] -> #1 (team->team_lock_key#9){+.+.}-{4:4}:
[  576.355955][T17845]        lock_acquire+0x1ed/0x550
[  576.361354][T17845]        __mutex_lock+0x19c/0x1010
[  576.366483][T17845]        team_set_mac_address+0x122/0x280
[  576.372307][T17845]        netif_set_mac_address+0x327/0x510
[  576.378213][T17845]        do_setlink+0xaa6/0x40f0
[  576.383390][T17845]        rtnl_newlink+0x15a6/0x1d90
[  576.388723][T17845]        rtnetlink_rcv_msg+0x791/0xcf0
[  576.394362][T17845]        netlink_rcv_skb+0x206/0x480
[  576.399670][T17845]        netlink_unicast+0x7f6/0x990
[  576.405151][T17845]        netlink_sendmsg+0x8de/0xcb0
[  576.410456][T17845]        __sock_sendmsg+0x221/0x270
[  576.415750][T17845]        __sys_sendto+0x363/0x4c0
[  576.420836][T17845]        __x64_sys_sendto+0xde/0x100
[  576.426253][T17845]        do_syscall_64+0xf3/0x230
[  576.431382][T17845]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.438151][T17845] 
[  576.438151][T17845] -> #0 (&dev_instance_lock_key#12){+.+.}-{4:4}:
[  576.447003][T17845]        validate_chain+0x18ef/0x5920
[  576.452762][T17845]        __lock_acquire+0x1397/0x2100
[  576.458255][T17845]        lock_acquire+0x1ed/0x550
[  576.463434][T17845]        __mutex_lock+0x19c/0x1010
[  576.468566][T17845]        dev_set_mac_address+0x2a/0x50
[  576.474130][T17845]        bond_set_mac_address+0x28e/0x830
[  576.479953][T17845]        netif_set_mac_address+0x327/0x510
[  576.485791][T17845]        do_setlink+0xaa6/0x40f0
[  576.490748][T17845]        rtnl_newlink+0x15a6/0x1d90
[  576.496109][T17845]        rtnetlink_rcv_msg+0x791/0xcf0
[  576.501739][T17845]        netlink_rcv_skb+0x206/0x480
[  576.507154][T17845]        netlink_unicast+0x7f6/0x990
[  576.512461][T17845]        netlink_sendmsg+0x8de/0xcb0
[  576.518293][T17845]        __sock_sendmsg+0x221/0x270
[  576.523774][T17845]        ____sys_sendmsg+0x53a/0x860
[  576.529212][T17845]        __sys_sendmsg+0x269/0x350
[  576.534849][T17845]        do_syscall_64+0xf3/0x230
[  576.540536][T17845]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.547508][T17845] 
[  576.547508][T17845] other info that might help us debug this:
[  576.547508][T17845] 
[  576.558494][T17845] Chain exists of:
[  576.558494][T17845]   &dev_instance_lock_key#12 --> team->team_lock_key#9 --> &dev_instance_lock_key#2
[  576.558494][T17845] 
[  576.574202][T17845]  Possible unsafe locking scenario:
[  576.574202][T17845] 
[  576.582007][T17845]        CPU0                    CPU1
[  576.587497][T17845]        ----                    ----
[  576.593054][T17845]   lock(&dev_instance_lock_key#2);
[  576.598565][T17845]                                lock(team->team_lock_key#9);
[  576.606420][T17845]                                lock(&dev_instance_lock_key#2);
[  576.614263][T17845]   lock(&dev_instance_lock_key#12);
[  576.619657][T17845] 
[  576.619657][T17845]  *** DEADLOCK ***
[  576.619657][T17845] 
[  576.627827][T17845] 2 locks held by syz.1.4693/17845:
[  576.633552][T17845]  #0: ffffffff8fed6e08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc4c/0x1d90
[  576.642853][T17845]  #1: ffff88807f738d28 (&dev_instance_lock_key#2){+.+.}-{4:4}, at: do_setlink+0xa94/0x40f0
[  576.653327][T17845] 
[  576.653327][T17845] stack backtrace:
[  576.659316][T17845] CPU: 0 UID: 0 PID: 17845 Comm: syz.1.4693 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0
[  576.659337][T17845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  576.659349][T17845] Call Trace:
[  576.659356][T17845]  <TASK>
[  576.659366][T17845]  dump_stack_lvl+0x241/0x360
[  576.659389][T17845]  ? __pfx_dump_stack_lvl+0x10/0x10
[  576.659406][T17845]  ? __pfx__printk+0x10/0x10
[  576.659424][T17845]  print_circular_bug+0x13a/0x1b0
[  576.659444][T17845]  check_noncircular+0x36a/0x4a0
[  576.659464][T17845]  ? __pfx_check_noncircular+0x10/0x10
[  576.659481][T17845]  ? lockdep_lock+0x123/0x2b0
[  576.659506][T17845]  validate_chain+0x18ef/0x5920
[  576.659529][T17845]  ? __pfx_validate_chain+0x10/0x10
[  576.659545][T17845]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  576.659569][T17845]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[  576.659587][T17845]  ? lockdep_hardirqs_on+0x99/0x150
[  576.659607][T17845]  ? mark_lock+0x9a/0x360
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  576.659622][T17845]  ? __lock_acquire+0x1397/0x2100
[  576.659647][T17845]  ? mark_lock+0x9a/0x360
[  576.659662][T17845]  __lock_acquire+0x1397/0x2100
[  576.659688][T17845]  lock_acquire+0x1ed/0x550
[  576.659709][T17845]  ? dev_set_mac_address+0x2a/0x50
[  576.659728][T17845]  ? __pfx_lock_acquire+0x10/0x10
[  576.659750][T17845]  ? __pfx___might_resched+0x10/0x10
[  576.659772][T17845]  ? dev_set_mac_address+0x42/0x50
[  576.659788][T17845]  ? __pfx_lock_release+0x10/0x10
[  576.659811][T17845]  __mutex_lock+0x19c/0x1010
[  576.659830][T17845]  ? dev_set_mac_address+0x2a/0x50
[  576.659846][T17845]  ? notifier_call_chain+0x3cc/0x3f0
[  576.659868][T17845]  ? __mutex_unlock_slowpath+0x227/0x800
[  576.659888][T17845]  ? dev_set_mac_address+0x2a/0x50
[  576.659904][T17845]  ? __pfx___mutex_lock+0x10/0x10
[  576.659923][T17845]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  576.659944][T17845]  ? net_generic+0x1f/0x240
[  576.659963][T17845]  ? net_generic+0x1f0/0x240
[  576.659982][T17845]  dev_set_mac_address+0x2a/0x50
[  576.659998][T17845]  bond_set_mac_address+0x28e/0x830
[  576.660021][T17845]  ? __pfx_bond_set_mac_address+0x10/0x10
[  576.660050][T17845]  ? hsr_netdev_notify+0x295/0xb50
[  576.660074][T17845]  ? notifier_call_chain+0x15a/0x3f0
[  576.660095][T17845]  ? notifier_call_chain+0x3cc/0x3f0
[  576.660116][T17845]  netif_set_mac_address+0x327/0x510
[  576.660136][T17845]  ? __pfx_netif_set_mac_address+0x10/0x10
[  576.660154][T17845]  ? rcu_is_watching+0x15/0xb0
[  576.660171][T17845]  ? trace_kmalloc+0x1f/0xd0
[  576.660191][T17845]  ? do_setlink+0x7a7/0x40f0
[  576.660208][T17845]  do_setlink+0xaa6/0x40f0
[  576.660229][T17845]  ? mark_lock+0x9a/0x360
[  576.660244][T17845]  ? __pfx_do_setlink+0x10/0x10
[  576.660258][T17845]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  576.660281][T17845]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  576.660305][T17845]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[  576.660321][T17845]  ? lockdep_hardirqs_on+0x99/0x150
[  576.660340][T17845]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  576.660356][T17845]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  576.660375][T17845]  ? rcu_is_watching+0x15/0xb0
[  576.660392][T17845]  ? __mutex_lock+0xba3/0x1010
[  576.660411][T17845]  ? __mutex_lock+0x602/0x1010
[  576.660432][T17845]  ? rtnl_newlink+0xc4c/0x1d90
[  576.660455][T17845]  ? __pfx___mutex_lock+0x10/0x10
[  576.660477][T17845]  ? ns_capable+0x8a/0xf0
[  576.660496][T17845]  ? rtnl_link_get_net_capable+0x168/0x340
[  576.660513][T17845]  rtnl_newlink+0x15a6/0x1d90
[  576.660535][T17845]  ? stack_depot_save_flags+0x37/0x940
[  576.660563][T17845]  ? __pfx_rtnl_newlink+0x10/0x10
[  576.660584][T17845]  ? __netlink_deliver_tap+0x561/0x7f0
[  576.660607][T17845]  ? __pfx_validate_chain+0x10/0x10
[  576.660623][T17845]  ? __sock_sendmsg+0x221/0x270
[  576.660644][T17845]  ? ____sys_sendmsg+0x53a/0x860
[  576.660660][T17845]  ? __sys_sendmsg+0x269/0x350
[  576.660676][T17845]  ? do_syscall_64+0xf3/0x230
[  576.660695][T17845]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.660724][T17845]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  576.660746][T17845]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  576.660771][T17845]  ? mark_lock+0x9a/0x360
[  576.660786][T17845]  ? __lock_acquire+0x1397/0x2100
[  576.660817][T17845]  ? __pfx_lock_release+0x10/0x10
[  576.660842][T17845]  ? __pfx_rtnl_newlink+0x10/0x10
[  576.660864][T17845]  rtnetlink_rcv_msg+0x791/0xcf0
[  576.660886][T17845]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  576.660909][T17845]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  576.660933][T17845]  ? ref_tracker_free+0x643/0x7e0
[  576.660950][T17845]  netlink_rcv_skb+0x206/0x480
[  576.660972][T17845]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  576.660995][T17845]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  576.661022][T17845]  ? netlink_deliver_tap+0x2e/0x1b0
[  576.661053][T17845]  netlink_unicast+0x7f6/0x990
[  576.661076][T17845]  ? __pfx_netlink_unicast+0x10/0x10
[  576.661094][T17845]  ? __virt_addr_valid+0x45f/0x530
[  576.661110][T17845]  ? __phys_addr_symbol+0x2f/0x70
[  576.661123][T17845]  ? __check_object_size+0x47a/0x730
[  576.661145][T17845]  netlink_sendmsg+0x8de/0xcb0
[  576.661171][T17845]  ? __pfx_netlink_sendmsg+0x10/0x10
[  576.661194][T17845]  ? aa_sock_msg_perm+0x91/0x160
[  576.661219][T17845]  ? __pfx_netlink_sendmsg+0x10/0x10
[  576.661239][T17845]  __sock_sendmsg+0x221/0x270
[  576.661262][T17845]  ____sys_sendmsg+0x53a/0x860
[  576.661282][T17845]  ? __pfx_____sys_sendmsg+0x10/0x10
[  576.661298][T17845]  ? __fget_files+0x2a/0x410
[  576.661321][T17845]  ? __fget_files+0x2a/0x410
[  576.661344][T17845]  __sys_sendmsg+0x269/0x350
[  576.661362][T17845]  ? __pfx___sys_sendmsg+0x10/0x10
[  576.661393][T17845]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  576.661414][T17845]  ? do_syscall_64+0x100/0x230
[  576.661434][T17845]  ? do_syscall_64+0xb6/0x230
[  576.661454][T17845]  do_syscall_64+0xf3/0x230
[  576.661473][T17845]  ? clear_bhb_loop+0x35/0x90
[  576.661494][T17845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.661515][T17845] RIP: 0033:0x7f4fa0b8d169
[  576.661531][T17845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  576.661545][T17845] RSP: 002b:00007f4fa1a47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  576.661563][T17845] RAX: ffffffffffffffda RBX: 00007f4fa0da6160 RCX: 00007f4fa0b8d169
[  576.661574][T17845] RDX: 0000000000040880 RSI: 0000400000000000 RDI: 0000000000000009
[  576.661585][T17845] RBP: 00007f4fa0c0e2a0 R08: 0000000000000000 R09: 0000000000000000
[  576.661595][T17845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  576.661605][T17845] R13: 0000000000000000 R14: 00007f4fa0da6160 R15: 00007ffd12fe1ee8
[  576.661621][T17845]  </TASK>
[  576.662146][T17251] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  576.684578][   T55] Bluetooth: hci2: command tx timeout
[  576.693835][T17845] bond0: entered promiscuous mode
[  577.340523][T17845] bond_slave_0: entered promiscuous mode
[  577.346681][T17845] bond_slave_1: entered promiscuous mode
[  577.430098][T17853] FAULT_INJECTION: forcing a failure.
[  577.430098][T17853] name failslab, interval 1, probability 0, space 0, times 0
[  577.447714][T17853] CPU: 1 UID: 0 PID: 17853 Comm: syz.4.4697 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0
[  577.447754][T17853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  577.447766][T17853] Call Trace:
[  577.447774][T17853]  <TASK>
[  577.447783][T17853]  dump_stack_lvl+0x241/0x360
[  577.447814][T17853]  ? __pfx_dump_stack_lvl+0x10/0x10
[  577.447835][T17853]  ? __pfx__printk+0x10/0x10
[  577.447856][T17853]  ? __pfx___might_resched+0x10/0x10
[  577.447884][T17853]  should_fail_ex+0x40a/0x550
[  577.447912][T17853]  should_failslab+0xac/0x100
[  577.447938][T17853]  kmem_cache_alloc_node_noprof+0x77/0x380
[  577.447965][T17853]  ? __alloc_skb+0x1c3/0x440
[  577.447988][T17853]  __alloc_skb+0x1c3/0x440
[  577.448010][T17853]  ? __pfx___alloc_skb+0x10/0x10
[  577.448032][T17853]  ? netlink_ack_tlv_len+0x6e/0x200
[  577.448060][T17853]  netlink_ack+0x145/0xa60
[  577.448085][T17853]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  577.448116][T17853]  ? ref_tracker_free+0x643/0x7e0
[  577.448138][T17853]  netlink_rcv_skb+0x294/0x480
[  577.448175][T17853]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  577.448203][T17853]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  577.448238][T17853]  ? netlink_deliver_tap+0x2e/0x1b0
[  577.448265][T17853]  netlink_unicast+0x7f6/0x990
[  577.448293][T17853]  ? __pfx_netlink_unicast+0x10/0x10
[  577.448316][T17853]  ? __virt_addr_valid+0x45f/0x530
[  577.448335][T17853]  ? __phys_addr_symbol+0x2f/0x70
[  577.448352][T17853]  ? __check_object_size+0x47a/0x730
[  577.448378][T17853]  netlink_sendmsg+0x8de/0xcb0
[  577.448410][T17853]  ? __pfx_netlink_sendmsg+0x10/0x10
[  577.448438][T17853]  ? aa_sock_msg_perm+0x91/0x160
[  577.448469][T17853]  ? __pfx_netlink_sendmsg+0x10/0x10
[  577.448498][T17853]  __sock_sendmsg+0x221/0x270
[  577.448523][T17853]  ____sys_sendmsg+0x53a/0x860
[  577.448546][T17853]  ? __pfx_____sys_sendmsg+0x10/0x10
[  577.448564][T17853]  ? __fget_files+0x2a/0x410
[  577.448590][T17853]  ? __fget_files+0x2a/0x410
[  577.448617][T17853]  __sys_sendmsg+0x269/0x350
[  577.448640][T17853]  ? __pfx___sys_sendmsg+0x10/0x10
[  577.448666][T17853]  ? do_sys_openat2+0x17a/0x1d0
[  577.448703][T17853]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  577.448729][T17853]  ? do_syscall_64+0x100/0x230
[  577.448753][T17853]  ? do_syscall_64+0xb6/0x230
[  577.448777][T17853]  do_syscall_64+0xf3/0x230
[  577.448799][T17853]  ? clear_bhb_loop+0x35/0x90
[  577.448825][T17853]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  577.448850][T17853] RIP: 0033:0x7f2ed3d8d169
[  577.448867][T17853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  577.448885][T17853] RSP: 002b:00007f2ed4b4b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  577.448908][T17853] RAX: ffffffffffffffda RBX: 00007f2ed3fa6160 RCX: 00007f2ed3d8d169
[  577.448922][T17853] RDX: 0000000000000000 RSI: 0000400000000140 RDI: 0000000000000003
[  577.448934][T17853] RBP: 00007f2ed4b4b090 R08: 0000000000000000 R09: 0000000000000000
[  577.448946][T17853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  577.448957][T17853] R13: 0000000000000001 R14: 00007f2ed3fa6160 R15: 00007ffd270dbf98
[  577.448978][T17853]  </TASK>
[  578.202594][ T8450] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  578.356123][ T8432] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.432660][ T8432] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.472317][ T8432] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.541455][ T8432] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.606184][ T8432] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  578.662178][ T8432] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  578.721977][ T8432] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  578.782600][ T8432] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  578.824024][ T8432] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.861986][ T8432] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.921663][ T8432] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.972354][ T8432] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  579.035685][ T8432] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  579.091860][ T8432] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  579.133136][ T8432] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  579.181095][ T8432] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  579.235479][ T8432] bridge_slave_1: left promiscuous mode
[  579.241766][ T8432] bridge0: port 2(bridge_slave_1) entered disabled state
[  579.250511][ T8432] bridge_slave_0: left allmulticast mode
[  579.256424][ T8432] bridge_slave_0: left promiscuous mode
[  579.263848][ T8432] bridge0: port 1(bridge_slave_0) entered disabled state
[  579.273703][ T8432] vlan2: left allmulticast mode
[  579.278920][ T8432] vlan2: left promiscuous mode
[  579.284050][ T8432] bridge0: port 3(vlan2) entered disabled state
[  579.291773][ T8432] bridge_slave_1: left allmulticast mode
[  579.297725][ T8432] bridge_slave_1: left promiscuous mode
[  579.303736][ T8432] bridge0: port 2(bridge_slave_1) entered disabled state
[  579.313010][ T8432] bridge_slave_0: left allmulticast mode
[  579.318990][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  579.319004][ T8432] bridge_slave_0: left promiscuous mode
[  579.332929][ T8432] bridge0: port 1(bridge_slave_0) entered disabled state
[  579.341987][ T8432] bridge_slave_1: left allmulticast mode
[  579.347665][ T8432] bridge_slave_1: left promiscuous mode
[  579.353972][ T8432] bridge0: port 2(bridge_slave_1) entered disabled state
[  579.364252][ T8432] bridge_slave_0: left allmulticast mode
[  579.370230][ T8432] bridge_slave_0: left promiscuous mode
[  579.376269][ T8432] bridge0: port 1(bridge_slave_0) entered disabled state
[  579.386191][ T8432] bridge_slave_1: left promiscuous mode
[  579.392170][ T8432] bridge0: port 2(bridge_slave_1) entered disabled state
[  579.400846][ T8432] bridge_slave_0: left allmulticast mode
[  579.406632][ T8432] bridge_slave_0: left promiscuous mode
[  579.412526][ T8432] bridge0: port 1(bridge_slave_0) entered disabled state
[  579.422306][ T8432] bridge_slave_1: left allmulticast mode
[  579.428175][ T8432] bridge_slave_1: left promiscuous mode
[  579.434631][ T8432] bridge0: port 2(bridge_slave_1) entered disabled state
[  579.444008][ T8432] bridge_slave_0: left allmulticast mode
[  579.450126][ T8432] bridge_slave_0: left promiscuous mode
[  579.456014][ T8432] bridge0: port 1(bridge_slave_0) entered disabled state
[  579.635132][ T8432] bond1 (unregistering): (slave ip6gretap1): Releasing active interface
[  579.813762][ T8432] bond1 (unregistering): (slave gretap1): Releasing active interface
[  579.897773][ T8432] bond1 (unregistering): (slave geneve2): Releasing active interface
[  580.231904][ T8432] bridge0 (unregistering): left promiscuous mode
[  580.385948][ T8432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  580.396484][ T8432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  580.406617][ T8432] bond0 (unregistering): Released all slaves
[  580.563377][ T8432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  580.573330][ T8432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  580.583284][ T8432] bond0 (unregistering): (slave team0): Releasing backup interface
[  580.592086][ T8432] bond0 (unregistering): Released all slaves
[  580.603807][ T8432] bond1 (unregistering): Released all slaves
[  580.613396][ T8432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  580.623567][ T8432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  580.634718][ T8432] bond0 (unregistering): Released all slaves
[  580.793235][ T8432] bond0 (unregistering): left promiscuous mode
[  580.799672][ T8432] bond_slave_0: left promiscuous mode
[  580.805300][ T8432] bond_slave_1: left promiscuous mode
[  580.810906][ T8432] bond0 (unregistering): left allmulticast mode
[  580.817254][ T8432] bond_slave_0: left allmulticast mode
[  580.822935][ T8432] bond_slave_1: left allmulticast mode
[  580.830064][ T8432] team0: Port device bond0 removed
[  580.836620][ T8432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  580.848398][ T8432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  580.858994][ T8432] bond0 (unregistering): Released all slaves
[  580.870164][ T8432] bond1 (unregistering): Released all slaves
[  580.883708][ T8432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  580.893266][ T8432] bond_slave_0: left promiscuous mode
[  580.900206][ T8432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  580.912765][ T8432] bond_slave_1: left promiscuous mode
[  580.919995][ T8432] bond0 (unregistering): (slave team0): Releasing backup interface
[  580.929837][ T8432] team0: left allmulticast mode
[  580.934911][ T8432] team_slave_0: left allmulticast mode
[  580.940610][ T8432] team_slave_1: left allmulticast mode
[  580.946215][ T8432] team0: left promiscuous mode
[  580.951543][ T8432] team_slave_0: left promiscuous mode
[  580.957076][ T8432] team_slave_1: left promiscuous mode
[  580.963829][ T8432] bond0 (unregistering): Released all slaves
[  580.975528][ T8432] bond1 (unregistering): Released all slaves
[  581.137885][ T8432] bond2 (unregistering): Released all slaves
[  581.147135][ T8432] bond3 (unregistering): Released all slaves
[  581.226980][ T8432] tipc: Left network mode
[  581.266198][ T8432] tipc: Left network mode
[  581.836102][ T8432] hsr_slave_0: left promiscuous mode
[  581.842057][ T8432] hsr_slave_1: left promiscuous mode
[  581.847759][ T8432] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  581.855518][ T8432] batman_adv: batadv0: Removing interface: batadv_slave_0
[  581.863663][ T8432] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  581.872507][ T8432] batman_adv: batadv0: Removing interface: batadv_slave_1
[  581.882664][ T8432] hsr_slave_0: left promiscuous mode
[  581.888401][ T8432] hsr_slave_1: left promiscuous mode
[  581.894456][ T8432] batman_adv: batadv0: Removing interface: batadv_slave_0
[  581.902688][ T8432] batman_adv: batadv0: Removing interface: batadv_slave_1
[  581.912654][ T8432] hsr_slave_0: left promiscuous mode
[  581.918434][ T8432] hsr_slave_1: left promiscuous mode
[  581.924696][ T8432] batman_adv: batadv0: Removing interface: batadv_slave_0
[  581.932803][ T8432] batman_adv: batadv0: Removing interface: batadv_slave_1
[  581.943171][ T8432] hsr_slave_0: left promiscuous mode
[  581.949797][ T8432] hsr_slave_1: left promiscuous mode
[  581.955393][ T8432] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  581.962934][ T8432] batman_adv: batadv0: Removing interface: batadv_slave_0
[  581.970819][ T8432] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  581.978326][ T8432] batman_adv: batadv0: Removing interface: batadv_slave_1
[  581.988188][ T8432] hsr_slave_0: left promiscuous mode
[  581.994964][ T8432] hsr_slave_1: left promiscuous mode
[  582.000690][ T8432] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  582.008124][ T8432] batman_adv: batadv0: Removing interface: batadv_slave_0
[  582.016743][ T8432] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  582.024671][ T8432] batman_adv: batadv0: Removing interface: batadv_slave_1
[  582.035983][ T8432] veth0_macvtap: left promiscuous mode
[  582.041729][ T8432] veth1_vlan: left promiscuous mode
[  582.047782][ T8432] team0: left allmulticast mode
[  582.052815][ T8432] team_slave_0: left allmulticast mode
[  582.058410][ T8432] team_slave_1: left allmulticast mode
[  582.064129][ T8432] team0: left promiscuous mode
[  582.069214][ T8432] team_slave_0: left promiscuous mode
[  582.074839][ T8432] team_slave_1: left promiscuous mode
[  582.080791][ T8432] dummy0: left allmulticast mode
[  582.085902][ T8432] veth1_macvtap: left promiscuous mode
[  582.091587][ T8432] veth0_macvtap: left promiscuous mode
[  582.097117][ T8432] veth1_vlan: left promiscuous mode
[  582.102500][ T8432] veth0_vlan: left promiscuous mode
[  582.109125][ T8432] veth1_macvtap: left promiscuous mode
[  582.114885][ T8432] veth0_macvtap: left promiscuous mode
[  582.120555][ T8432] veth1_vlan: left promiscuous mode
[  582.126041][ T8432] veth0_vlan: left promiscuous mode
[  582.391723][ T8432] team_slave_1 (unregistering): left allmulticast mode
[  582.399318][ T8432] team0 (unregistering): Port device team_slave_1 removed
[  582.410811][ T8432] team_slave_0 (unregistering): left allmulticast mode
[  582.421887][ T8432] team0 (unregistering): Port device team_slave_0 removed
[  583.110486][ T8432] team0 (unregistering): Port device team_slave_1 removed
[  583.158775][ T8432] team0 (unregistering): Port device team_slave_0 removed
[  583.562019][ T8432] team0 (unregistering): Port device team_slave_1 removed
[  583.591970][ T8432] team0 (unregistering): Port device team_slave_0 removed
[  583.806282][ T8432] team0 (unregistering): Port device team_slave_1 removed
[  583.817573][ T8432] team0 (unregistering): Port device team_slave_0 removed
[  584.125534][ T8432] team0 (unregistering): Port device team_slave_1 removed
[  584.159152][ T8432] team0 (unregistering): Port device team_slave_0 removed
[  585.431419][ T8432] IPVS: stop unused estimator thread 0...
[  585.438035][ T8432] IPVS: stop unused estimator thread 0...