last executing test programs:

3.473916111s ago: executing program 2 (id=1567):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)=@newtfilter={0x38, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r3, {0xd, 0x9}, {0x6}, {0x3, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}}, 0x4000)

3.226554128s ago: executing program 2 (id=1573):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000011000000180100002020702500000000602020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @cgroup_sock_addr=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)

3.058062202s ago: executing program 2 (id=1577):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffa19}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f0000000200)=0x21, 0x4)
sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c)

2.877098209s ago: executing program 2 (id=1581):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
connect$inet6(r1, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x5}, 0x80)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="b000000000010104000000000000000002000000240001801400018008000100ac1e010108000200ac1414bb0c0002800500010000000000240002801400018008000100ac1414bb08000200e00000010c000280050001000000000008000740000000024c000e80140001"], 0xb0}}, 0x0)
write(r1, &(0x7f00000000c0), 0x0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32=r0], 0x78}, 0x1, 0xffffffff00000003}, 0x8804)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r1}, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0100000001000000040000190000000000000020058932860353bc980c22365cfa00"/43], 0x50)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f40)={r4, 0x609, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="54010000100033060000000000000000ffffffff000000000000000000000000e000000200000000000000040000000000000000000000000200000000000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000000003200fffeac14141a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000400720000000000000048000200656362286369706865725f6e756c6c29"], 0x154}}, 0x0)

2.561055735s ago: executing program 2 (id=1585):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)={{0x14, 0x3eb}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x305, 0x0, 0x0, {0x5, 0x0, 0xa}}], {0x14, 0x3f5}}, 0x3c}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x0)
sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008855}, 0x4049090)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000001240)={0x4, {{0x2, 0x0, @multicast1}}}, 0xfd74)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000f600000000000c00000000000000000000000900000000000000000000000900000000000000000000000902000000000000000000"], 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r5, 0x0, 0x0}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="2f01002928000031000000002d484468b927a8c6e8e69a5e268e5944a9e35fdf8d9a21a998373e28a03e0e0fce8b73197fd651bded199c631ba0fe65c4414472b95cbbbb218487c5e665fa6301bdfb4d242b8ea27c0a73f302a3f4d905fc2f42ea636fd2c0b64ad2b9f5c68738e6e52864fd89c764383c2203bc53665345ee", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@fallback=r7, r8, 0x2f, 0x2030, 0x4, @void, @void, @value}, 0x20)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100))
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r10 = socket(0x10, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400020000000000000000000000ffff000000000800080081eaa9070000"], 0x34}}, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x1, 0x100000001, 0x10000, 0x1, 0x106e}, 0x1c)
sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='5\x00'}]}, 0x1c}}, 0x20000080)

2.4818518s ago: executing program 2 (id=1587):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}]}}}]}, 0x40}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) (async)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
recvmmsg(r2, &(0x7f0000006200)=[{{&(0x7f00000004c0)=@l2, 0x0, &(0x7f0000000380)=[{&(0x7f0000000540)=""/104}, {&(0x7f0000000680)=""/163}], 0x0, &(0x7f0000000800)=""/177}, 0x4}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000c80)=""/4096}, {&(0x7f00000040c0)=""/4096}, {&(0x7f0000002c80)=""/4096}], 0x0, &(0x7f00000005c0)=""/30}, 0x3}, {{&(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x0, &(0x7f0000000980)=[{&(0x7f00000008c0)=""/155}], 0x0, &(0x7f00000009c0)=""/87}, 0x400}, {{&(0x7f0000000a40)=@caif=@util, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000ac0)=""/183}, {&(0x7f0000000b80)=""/176}, {&(0x7f0000003c80)=""/9}, {&(0x7f0000003cc0)=""/199}, {&(0x7f0000003dc0)=""/3}]}, 0x7f}, {{&(0x7f0000003e80)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x0, &(0x7f0000004000)=[{&(0x7f0000003f00)=""/23}, {&(0x7f0000003f40)=""/142}], 0x0, &(0x7f0000004040)=""/113}}, {{0x0, 0x0, &(0x7f00000050c0), 0x0, &(0x7f0000005100)=""/43}, 0x9}, {{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000005140)=""/93}], 0x0, &(0x7f0000005200)=""/4096}, 0x2}], 0x4000044, 0x10022, 0x0)

1.609421337s ago: executing program 0 (id=1592):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}, 0x1, 0x0, 0x2000000000000000}, 0x0)

1.449218085s ago: executing program 4 (id=1594):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)=@newtfilter={0x38, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r3, {0xd, 0x9}, {0x6}, {0x3, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}}, 0x4000)

1.440313101s ago: executing program 0 (id=1595):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x8, 0x0, 0x0}}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00deff000000000014001a8010"], 0x34}, 0x1, 0x0, 0x0, 0x200000d1}, 0x60040050)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback={0xe0}}]}}}]}, 0x48}}, 0x0)

1.251786278s ago: executing program 0 (id=1597):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ff0000850000003900000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @cgroup_sock_addr=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)

1.249936581s ago: executing program 4 (id=1598):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, 0x1, 0x3, 0x101}, 0x14}}, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0xeb, "0b10c9b629b4ed458980ad0b3476d08cca22c37ae4ec8d749efde4f35481519e1b0d7620d265777fc5cd832c0baf54ab996011f5ac0a127a80840a1deb6266c9297760a14dc476ddbe5b7514914ea97815f1ad1ff852dbe54801cfbb0eac66a1dec9de96d3282291af88266217ae4fc13ef8d6e1f9158f972af8558e48d26bff903af55b6b9d5b17bec7b7bf236220b61f61bcc06ad9cd916b1314861a26270b944cf8915048964d83514cbd25a2dae7f2f47f470cac8dcb9775af91ad2ade07430e89166f03227a0ff9c708f296af8fb65d5232d6e2dbca1e086326698a2c90e9599177c1dec0cd068733"}, &(0x7f0000000140)=0x10f)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508)

1.144744453s ago: executing program 3 (id=1600):
syz_emit_ethernet(0x3a, &(0x7f00000011c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@ra={0x94, 0x4}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0x863, 0x0, 0x10}}}}}}, 0x0) (async, rerun: 64)
r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) (async, rerun: 64)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fbdbdf2d070000000a0004007770616e3400000008000508020000000c0006000000000000000008000300", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080080)

1.073334075s ago: executing program 4 (id=1601):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmmsg$sock(r0, &(0x7f0000002e80)=[{{&(0x7f00000017c0)=@nl=@kern={0x10, 0x0, 0x0, 0x2000}, 0x80, 0x0}}, {{&(0x7f0000001980)=@ax25={{0x3, @default}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, 0x0}}], 0x2, 0x40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800040000000000000000000000000071182f00000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)

1.00523s ago: executing program 0 (id=1602):
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0, 0x97}}], 0x1, 0x4004000)

1.004047273s ago: executing program 1 (id=1603):
r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000080)="c602c964ac21cae122b7cd184c29a1cc21902d8e72b70e599c1db4f2fc6ebf2a514eba66c094df68e5b729518410d11986b9d83ca495dc2034784f424a085fdf1b76226225975a33fa3f19050c82174591069786d8cf687d43e83ef603833c553647bd81e20c6fb936d5aeacdd04ff0e", &(0x7f0000000100)}, 0x20) (async)
r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e) (async)
r2 = gettid() (async)
r3 = getgid() (async)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001a40)=<r4=>0x0) (async)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001a80)={{{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0, <r6=>0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000001b80)=0xe8) (async)
r7 = getgid() (async)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001bc0)=<r8=>0x0) (async)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001c00)=<r9=>0x0) (async)
r10 = getgid()
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001c40)={r0, <r11=>0xffffffffffffffff}, 0x4) (async)
r12 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000001c80), 0x800) (async)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001cc0)=<r13=>0x0)
r14 = getgid() (async)
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = getpid() (async)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001d00)={{{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r17=>0x0, <r18=>0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000001e00)=0xe8) (async)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001e40)={0x0, 0x0, <r19=>0x0}, &(0x7f0000001e80)=0xc)
r20 = gettid() (async)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001ec0)={{{@in6=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r21=>0x0}}, {{@in=@dev}, 0x0, @in=@private}}, &(0x7f0000001fc0)=0xe8) (async)
r22 = getgid()
sendmmsg$unix(r1, &(0x7f0000002100)=[{{&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000300)=[{&(0x7f00000002c0)="e25dc467bb62fa71b70429b4e5c965091371a8344b09e3da24992a047f640861e14d1b9f10b204d8e7c007d5", 0x2c}], 0x1, 0x0, 0x0, 0x4004}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)="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", 0xfa}, {&(0x7f0000000440)="be86dcb131fa57cee94fd4149a138db9e10ba41186e113101974f27f3929dc6f60792c4bd7b89fd5f4e5a3413588658a840bb50671b393214677e68dec05db29ed03a98deac7fb6299f34a0288032cca5951540d71795f5e275225b31e11480a14a6603c3bf8d1f89147b95439edff66ea7afcdd1707b81410e52ef282d238efa1dbdf79e8e0031e2948a5f167d905cc4492e190004309ad550676af0059a09e9c29e60f610fea7fb456a32e75552ec3f3f53f2f57ea8fcff027f2d19f1a647b6f74a6394296f18c8eb324bb519d9ce815f30d94bb2d1afc3a89abb2de4dccef70d579", 0xe3}, {&(0x7f0000000540)="1822d5f1ec43a7ab80c3fa828cc98d1f26597e093ab81da6894467d6298b6f613a0df4659237d3", 0x27}, {&(0x7f0000000580)}], 0x4, &(0x7f0000000600)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee01, r3}}}], 0x20, 0x4840}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)="aa27c9f721c11732aaeecdf614497c6187b087449c7e979f41260fe47d9db6bf5ad4bce678d45781e8180cf30be06b840987a3278e935b688a36969c525358441a7ead21549829e9321d279ef997d14670b8713a31aaa4f10901d33b5ce9b458cf386ed7c8bc4a5f556fed887dbb0ab89bc5ffd15acb9a435f47254b8e418461a22b4389d797d1cee14a8542ab5e5217b71c480fa91811ee07a237128886ddaf3033b35528e7c18da6f00f632172db7f343027311a3656531d71a82e", 0xbc}, {&(0x7f0000001700)="e1a2459b66803e0ffd2daf37d30384f511677e84304d5e1db8eb109f3ba578452e1feef7b4237a64ecdb046f0b6dfd564ec7f949e622907b3cb09b6f619496f8efead342c525b8e6b64e7fdf1a0326673b1f83975536e7b71815a59b10a40ef514519f0de66d7ffcc3fe9c2d80cdadcb6d9c12b50d2fad8c8c5b3c4176ae5b37e53f77e057ef99161f31c5", 0x8b}, {&(0x7f00000017c0)="0c227ddc79186abfc99a9198e7af86ec85b543a848ef1074650dc7f931ff5199e5a1fe3184e61f76d34e2febf457b6c801389053bcf08cb2865cec76d107007a282921423e7f3bd1124e318f0bb8065fec12cd8d6e9bebafb6bdebfab1b2753f9df30bc24ca0e323b29906467f0e9f62c60895bfad91771078dd824366fcb25dc51f8fe46660d6966306d840ec2587207fc3b7792bac1a8875328ee2d258cd08", 0xa0}, {&(0x7f0000001880)="eec9d4af287b0ee2b8c1b23b082e65703cc643f507531c8d0ff2b3eb367cbdf45e3e1b6550b92e7e80075cad69134c5db25cf61898b4e67d3b9f7668998eeab92ee89f50d904964471d4eb9291383427df0808a813dad7812bc738cbd13cede9442cccfb296bfbf5a4", 0x69}, {&(0x7f0000001900)="6a8ac9cca5a670392cd7fc447f66dec3cf68e73df3308d8c8f0b054fee08157cee4fa5fbd2ee6a5ef4cd543648f7e8639734864218f6e47e200eefe6230d6e5953d26c439fef60d3d3fbfc814eb7aab19e30338286fea8cc9553a8c7edceed0e5ff3f5c3433123699f6d11ef7633088c5b6d7ea45abf7eeb43abbc3dca69b28af3e126c2bb27f0376d6831e723c62fd1e572967bd3c13b5632996339311ae5e153e5ca729da21ffc96ea09", 0xab}], 0x6, &(0x7f0000002000)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @rights={{0x28, 0x1, 0x1, [r0, r11, r0, r0, r12, r0]}}, @cred={{0x1c, 0x1, 0x2, {r13, 0xee00, r14}}}, @rights={{0x18, 0x1, 0x1, [r0, r15]}}, @cred={{0x1c, 0x1, 0x2, {r16, r18, r19}}}, @cred={{0x1c, 0x1, 0x2, {r20, r21, r22}}}], 0x100, 0x50}}], 0x3, 0x20000000) (async)
r23 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r23, &(0x7f0000002400)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002200)={0x184, 0x3f, 0x400, 0x70bd2b, 0x25dfdbfc, {0x4}, [@nested={0x16f, 0x82, 0x0, 0x1, [@typed={0x4, 0x9b}, @generic="1ef77d551c267ad0865f491fbd8a15d8ed42abe28ea151d13144e11e2f78454655945b07602bb161840f10bc7eaa207c50f0ffa1d040d8d7ae1a1b5ee29c4a15300f74e3018577ac5540d4abb85ef285f4763f142bd2e0767fb0992f42f5f02df286f799", @generic="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", @nested={0x4, 0xb3}, @nested={0x4, 0x42}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x894}, 0x2000c000)
getgid() (async)
r24 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r24, 0x89f2, &(0x7f00000024c0)={'ip_vti0\x00', &(0x7f0000002440)={'gretap0\x00', <r25=>r5, 0x10, 0x40, 0x3, 0x7, {{0x18, 0x4, 0x1, 0x9, 0x60, 0x67, 0x0, 0x3, 0x2f, 0x0, @remote, @private=0xa010102, {[@timestamp={0x44, 0x18, 0x2e, 0x0, 0x9, [0x30, 0x5a5c, 0xf, 0x1, 0x9]}, @ssrr={0x89, 0xf, 0x7f, [@rand_addr=0x64010102, @multicast2, @empty]}, @end, @timestamp_addr={0x44, 0xc, 0x3e, 0x1, 0x7, [{@local, 0x8}]}, @generic={0x88, 0xa, "a5827ff44e9a4614"}, @rr={0x7, 0xb, 0xe8, [@remote, @multicast1]}, @end]}}}}})
r26 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002900)={0x18, 0x4, &(0x7f0000002700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x49}, [@alu={0x7, 0x1, 0xd, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000002740)='syzkaller\x00', 0x2, 0x8f, &(0x7f0000002780)=""/143, 0x41100, 0x0, '\x00', r25, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002840)={0x5, 0x2, 0x1, 0xe}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000002880)=[r0], &(0x7f00000028c0)=[{0x3, 0x2, 0xf, 0x7}], 0x10, 0xf38, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000002a80)={0xb, 0xe, &(0x7f0000002500)=@raw=[@map_idx={0x18, 0x6, 0x5, 0x0, 0xf}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ldst={0x3, 0x2, 0x4, 0x0, 0x5, 0x50, 0xffffffffffffffff}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffd}], &(0x7f0000002580)='GPL\x00', 0x7, 0x9c, &(0x7f00000025c0)=""/156, 0x41100, 0x26, '\x00', r17, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000002680)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000026c0)={0x4, 0xe, 0x0, 0xffff}, 0x10, 0xffffffffffffffff, r26, 0xa, 0x0, &(0x7f00000029c0)=[{0x3, 0x1, 0xf, 0xb}, {0x0, 0x3, 0x9, 0x1}, {0x0, 0x4, 0x7, 0x7}, {0x2, 0x1, 0xf, 0x1}, {0x0, 0xff, 0x9, 0x8}, {0x1, 0x2, 0x9, 0x3}, {0x3, 0x1, 0x3, 0x2}, {0x2, 0x3, 0xc, 0x2}, {0x3, 0x4, 0x10}, {0x0, 0x5, 0xd, 0xf20b9ef911297d65}], 0x10, 0x7fffffff, @void, @value}, 0x94)

908.52899ms ago: executing program 0 (id=1604):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x84)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x800)
sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001040)="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", 0x5c9}, {&(0x7f0000000300)="77729a2d3c", 0x5}, {&(0x7f00000005c0)="79dfe4263f037de282e588f3c773eca5f0c383e7425d1573aa90a44223bfeced3ff85afe9d0c0b3b5a7ed7fcdb96a3934fe7af73ee25d5d36ba42e2a858c3d134299abc0393e031db435ae156e55eb2b2b2e2300e0706dfc5c4ec73ba929ffe8a7bb7ce55d95fb6e58560c45d96a58a13aa944b98c481a82925ec071b272b4592616116116527fd2dbc0dfd58c572f714f6852063afc8358fb33ccb8a95460b32b4e26bea604e534d8983790b5e2a180fed88108b0f5a499d5f80b4e4047d9ecc03d2185ddfa9098d327d9559e82fceb2b1b1c0000000000000000009755895856100181468e5208cd5c31a2e885eebb4da150c11d2990a3eb022220ddf0b04e6ad32e1d510de77db5fb58e37663e67ee6ebbde332", 0x115}, {&(0x7f00000003c0)="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", 0x14f}, {&(0x7f0000000700)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9eed83eee86f35f2c0adf50a04296e99c0f709fb3990aa5d0e74a125971357630b6f3eb4fb4064c42c2b2519a1c77824df6f0653fb116149fcb5c7e46fce32b1de7f511951d4b1ae47781250afdb11680684c1d2854810a90d", 0xe8}, {&(0x7f0000000800)="3a0846cacd7448e2015cc9a09c5f5608265e1e0fe02aa9077d7ddd960ba112fe1c64f57cba71e7ad8bbdc06a3299398e39498fc459bc1745e3d21a7ca987a4f4b774fe331d20dab2e846a721ff43b049", 0x50}, {&(0x7f0000000dc0)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d623cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f00000000", 0xda}], 0x7, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x20}, 0x0)

896.597981ms ago: executing program 4 (id=1605):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20}, 0x0)

836.862381ms ago: executing program 1 (id=1606):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_freezer_state(r1, &(0x7f00000000c0), 0x2, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000180), 0x12)
write$cgroup_freezer_state(r2, &(0x7f0000000200)='THAWED\x00', 0x7)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0)
socket$kcm(0x1e, 0x5, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0, <r4=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@map_val={0x18, 0x3, 0x2, 0x0, r4}, @call={0x85, 0x0, 0x0, 0x1c}, @map_idx_val={0x18, 0xb94c13823db956cb, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xa}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

835.962578ms ago: executing program 3 (id=1607):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x13, &(0x7f0000000100)=@raw=[@map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xffffffffffffffff}, @cb_func={0x18, 0xf, 0x4, 0x0, 0xfffffffffffffffb}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f00000001c0)='syzkaller\x00', 0xfff, 0xcc, &(0x7f0000000200)=""/204, 0x40f00, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0, <r2=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000440)=r1}, 0x20)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000004c0)=0x5, 0x4)
r3 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, &(0x7f0000000500), &(0x7f0000000580)=0x80)
shutdown(r3, 0x1)
r4 = accept4$rose(r3, &(0x7f00000005c0)=@full={0xb, @remote, @null, 0x0, [@bcast, @netrom, @null, @netrom, @netrom, @bcast]}, &(0x7f0000000600)=0x40, 0x800)
ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000640)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x9, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={'rose', 0x0}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]})
openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x200, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000740)={'dvmrp1\x00', &(0x7f0000000700)=@ethtool_rxfh_indir={0x38, 0x8, [0xf, 0x9, 0x3, 0x0, 0x80000000, 0x5, 0x5, 0x4]}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'syztnl0\x00', <r5=>0x0, 0x2f, 0xd, 0x9, 0x0, 0x42, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, 0x40, 0x8000, 0x9f5, 0x9}})
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x6, 0x1, 0x6, 0x2, 0x1, r2, 0x7, '\x00', r5, r6, 0x3, 0x4, 0x3, 0x0, @void, @value, @void, @value}, 0x50)
r7 = accept4(r3, &(0x7f0000000900)=@nfc_llcp, &(0x7f0000000980)=0x80, 0x80800)
socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000ac0)={@ifindex=r5, 0x32, 0x1, 0x6, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000a00)=[0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0]}, 0x40)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000b40), r7)
sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r9, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4001080)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c40)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x7, '\x00', 0x0, r11, 0x4, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r7)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000d80)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r7, &(0x7f0000000ec0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x84, r12, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0xb79f, 0x7f}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "229e64e3c428aa133934cfeea9"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x40000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f80)={{r2, <r14=>0xffffffffffffffff}, &(0x7f0000000f00), &(0x7f0000000f40)=r1}, 0x20)
r15 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001140)={&(0x7f0000000fc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x100, 0x100, 0x7, [@const={0x10, 0x0, 0x0, 0xa, 0x2}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc}, {0x4, 0x5}, {0x4}]}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x3, 0x5}, @struct={0x4, 0x8, 0x0, 0x4, 0x1, 0x0, [{0xe, 0x0, 0x7}, {0x8, 0x4, 0x578}, {0x8, 0x4, 0x8}, {0x10, 0x2, 0x2}, {0x4, 0x1}, {0x2, 0x0, 0x8}, {0x4, 0x2, 0x6}, {0xa, 0x2, 0x5}]}, @const={0xa, 0x0, 0x0, 0xa, 0x1}, @volatile={0x5, 0x0, 0x0, 0x9, 0x4}, @fwd={0xe}, @const={0x10}, @const={0x2, 0x0, 0x0, 0xa, 0x3}, @enum64={0x4, 0x1, 0x0, 0x13, 0x1, 0x5, [{0xc, 0x800, 0x9}]}]}, {0x0, [0x61, 0x0, 0x30, 0x0, 0x0]}}, &(0x7f0000001100)=""/25, 0x11f, 0x19, 0x0, 0x8, 0x10000, @value=r8}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000001180)=@base={0x1, 0x31d4, 0xd1, 0x0, 0x201, r14, 0x7, '\x00', r5, r15, 0x4, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50)

768.871375ms ago: executing program 4 (id=1608):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0xb, 0x2, 0xb, 0x8c, 0xf, 0x4, 0x1, 0x6, 0xa, 0xf, 0x10, 0x2, 0xd, 0x8, 0x5, 0x9], 0x1, [0x809, 0x67ef, 0x2, 0x4, 0x4, 0x8, 0x3, 0xfff9, 0x9, 0xd4e8, 0x6, 0x200, 0x10, 0x0, 0xc73, 0x5], [0x800, 0x1, 0x4, 0x3d3e, 0xff, 0x4, 0x2, 0x50ad, 0x81, 0xc5, 0x8000, 0xc, 0x3, 0x7, 0x8, 0xce]}}}}]}, 0x88}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', <r5=>0x0})
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r6, 0x29, 0xcf, &(0x7f0000000180)=0x5, 0x4)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan3\x00', <r7=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r4, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x2}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xf5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x41}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8808}, 0x20008000)

736.237977ms ago: executing program 0 (id=1609):
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', <r2=>0x0})
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x3000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', <r7=>0x0})
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4)
bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10)
bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)

705.211344ms ago: executing program 3 (id=1610):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000580)=ANY=[@ANYBLOB="6c010000170001030000000000000000ffffffff0000000000000000000000000000000000000000fe8000"/52, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000044000500000000"], 0x16c}}, 0x0)

703.895011ms ago: executing program 1 (id=1611):
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', <r1=>0x0})
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000240)=0x3bc0, 0x4) (async)
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) (async)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x30008881)
r2 = socket$inet_udplite(0x2, 0x2, 0x88) (async)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r4 = socket$inet(0x2, 0x2, 0x1)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000803}, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r7, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r7], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r9 = socket(0x10, 0x3, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) (async)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x30, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r10, {0xd, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="421c0000000000000800250000000000140003007866726d300000000000000000000000640cef6cec99df0caf578f1e7b2ee9e51e22d5f2f153988e7b0bc914e69b826794c08ff850dde6749b315411267538d4d56c0d953c8322d538da95643d08f1daee3f8946c81cb68ac7d2a58b2ed8714eb681b968719aa18ee203f11087da7772174dd2f7cdba28a3ca8095d30d84d7b0830185"], 0x3c}}, 0x0) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001580)=ANY=[@ANYBLOB="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"/510, @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0xc00) (async)
sendmsg$inet(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x24, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x5a}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000004)
getsockopt$inet6_int(r3, 0x29, 0xcb, 0x0, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', <r12=>0x0})
sendto$packet(r0, &(0x7f0000000580)="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", 0x1000, 0x80, 0x0, 0x0) (async)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0xa280, 0x4) (async)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={r12, 0x11, 0x6}, 0x10)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r12}}, 0x24}}, 0x0)

582.880239ms ago: executing program 4 (id=1612):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r1, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=<r4=>0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000040)='cgroup\x00'}, 0x30)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f00000005c0)='cgroup.freeze\x00', 0x275a, 0x0)
sendfile(r3, r6, 0x0, 0xffffffff002)
close(r2)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r7, 0x0)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
r9 = epoll_create1(0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
close(r10)
socket$inet6_sctp(0xa, 0x5, 0x84)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r11}, 0x10)
setsockopt$sock_int(r10, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000100)={0xa0028000})
ioctl$sock_netdev_private(r2, 0x89ff, &(0x7f00000000c0)="8788a37d1c47cf6719f45e41772381b9712d79864719dbc69077d90895efbaf88f05ca7d96f188c35349c41c54c74a49fd8a6585be91c5f61a0772d06a8103fa323c95752e4da102efc799c5687a1b6134ff7dc76750b2227dc6c1990da1184946d60ffaf41ffb4f32eb05a37158f8576f016a75690a7785700d134f04daa8a06b4460")
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00', @ANYRES16=r13, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044855}, 0x2000c094)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="7cffffff00000000379b487cf87016bb7ec2e60caa86928043ae34cc37596e82dc50d6f31376d7dfd71e93bee3a8a2df16b746632c2caecfd07f42cdb7bae795dd78e84f52b4015692ebd5ec58397977572d1056bfc26d5ef839685a07eda48a87cfc43dde7ad6a83c9a47b00499601a6971d347ed8305fac2ba04550c1c3c7315bc54182c11a7d4ebe20084bc598e921a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)

582.228203ms ago: executing program 3 (id=1613):
socket$xdp(0x2c, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000a00)=@deltaction={0x1a8, 0x31, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb9}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff3ba9}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x90, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000000}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x74, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3d2}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40000}, 0x48014)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
r3 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r3, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)
recvmsg(r3, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x40000002)

389.160685ms ago: executing program 3 (id=1614):
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0, 0xf5}}], 0x1, 0x4004000)

373.508439ms ago: executing program 1 (id=1615):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000002070250000000000202020631af8ff00000000bfa100000000000007010000dbffffffb70200000000ff00b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

265.890237ms ago: executing program 3 (id=1616):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r2, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x800, 0x3}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x10000}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffff105}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x20040011)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r4, &(0x7f0000000800)}, 0x20)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010110104fe9e48f7"], 0x48}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'lo\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9, 0x7, 0x8, 0x9, 0x5, 0x8, 0x2, 0x1ff}})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000001a0069ae00000000000000001c"], 0x1c}}, 0x0)
ioctl$SIOCX25CALLACCPTAPPRV(r5, 0x89e8)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x7c5341, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1000})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r7)
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000180)={@empty, @empty, @val, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @link_local, "", @remote}}}}, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[], 0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@can_newroute={0x14, 0x18, 0x100, 0x70bd25, 0x25dfdbfe, {0x1d, 0x1, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0xfff, 0x9, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r10}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)

155.656804ms ago: executing program 1 (id=1617):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0)
recvmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}, 0xffffffe1}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/159, 0x9f}, {&(0x7f0000001500)=""/155, 0x9b}, {&(0x7f0000000200)=""/149, 0x95}, {&(0x7f0000000340)=""/98, 0x62}, {&(0x7f00000017c0)=""/193, 0xc1}, {&(0x7f0000001680)=""/100, 0x64}], 0x7}, 0x9}, {{0x0, 0x0, 0x0}, 0x9}], 0x3, 0x2000, 0x0)
syz_emit_ethernet(0x5a, &(0x7f0000000680)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0xaa, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "9234fba73f0324d7d80284224a8765f8"}, @md5sig={0x1d, 0x12, "91d785d58954605c802acf9f965fe399"}]}}}}}}}, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f00000001c0)=0xe6)
bind$802154_raw(r1, &(0x7f0000001440)={0x24, @short={0x2, 0x2, 0xffff}}, 0x8)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="58000000020601080000000000000000000000001400078008001140000000000500020097000000050005000a000000050001000700000005000400000000000900020073797a31000000000c000300686173683a5686069569c82e432cb3d7b86be8b30f63a3a1f3cbf107820b697000"], 0x58}}, 0x4004010)
r3 = socket(0xa, 0x801, 0x0)
getsockopt(r3, 0x1, 0x8, &(0x7f0000000200)=""/91, &(0x7f0000001ffc)=0x5b)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f40)={0x6, 0x7, &(0x7f0000000e00)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x2}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], &(0x7f0000000e40)='GPL\x00', 0x7, 0x22, &(0x7f0000000e80)=""/34, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1900404}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x34, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)

0s ago: executing program 1 (id=1618):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000011000000180100002020702500ffffff802020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @cgroup_sock_addr=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)

kernel console output (not intermixed with test programs):

p6tnl1 xmit: Local address not yet configured!
[  155.636367][ T5887] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  156.251468][ T7692] netlink: 'syz.3.533': attribute type 13 has an invalid length.
[  156.278489][ T7692] netlink: 'syz.3.533': attribute type 1 has an invalid length.
[  156.397066][   T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  156.422335][ T7701] FAULT_INJECTION: forcing a failure.
[  156.422335][ T7701] name failslab, interval 1, probability 0, space 0, times 0
[  156.435390][ T7701] CPU: 1 UID: 0 PID: 7701 Comm: syz.1.538 Not tainted 6.15.0-rc1-syzkaller-00374-gac1df712442c #0 PREEMPT(full) 
[  156.435420][ T7701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  156.435433][ T7701] Call Trace:
[  156.435441][ T7701]  <TASK>
[  156.435450][ T7701]  dump_stack_lvl+0x241/0x360
[  156.435487][ T7701]  ? __pfx_dump_stack_lvl+0x10/0x10
[  156.435516][ T7701]  ? __pfx__printk+0x10/0x10
[  156.435549][ T7701]  ? __pfx___might_resched+0x10/0x10
[  156.435587][ T7701]  should_fail_ex+0x424/0x570
[  156.435618][ T7701]  should_failslab+0xac/0x100
[  156.435648][ T7701]  kmem_cache_alloc_node_noprof+0x7d/0x3b0
[  156.435677][ T7701]  ? __alloc_skb+0x1c2/0x480
[  156.435705][ T7701]  __alloc_skb+0x1c2/0x480
[  156.435734][ T7701]  ? __pfx___alloc_skb+0x10/0x10
[  156.435759][ T7701]  ? netlink_autobind+0xd6/0x2f0
[  156.435780][ T7701]  ? netlink_autobind+0x2b0/0x2f0
[  156.435807][ T7701]  netlink_sendmsg+0x638/0xcd0
[  156.435842][ T7701]  ? __pfx_netlink_sendmsg+0x10/0x10
[  156.435869][ T7701]  ? aa_sock_msg_perm+0x91/0x160
[  156.435903][ T7701]  ? __pfx_netlink_sendmsg+0x10/0x10
[  156.435923][ T7701]  __sock_sendmsg+0x221/0x270
[  156.435962][ T7701]  ____sys_sendmsg+0x523/0x860
[  156.435998][ T7701]  ? __pfx_____sys_sendmsg+0x10/0x10
[  156.436021][ T7701]  ? __fget_files+0x2a/0x420
[  156.436054][ T7701]  ? __fget_files+0x2a/0x420
[  156.436094][ T7701]  __sys_sendmsg+0x271/0x360
[  156.436125][ T7701]  ? __pfx___sys_sendmsg+0x10/0x10
[  156.436209][ T7701]  ? do_syscall_64+0xb6/0x230
[  156.436236][ T7701]  do_syscall_64+0xf3/0x230
[  156.436260][ T7701]  ? clear_bhb_loop+0x45/0xa0
[  156.436284][ T7701]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.436304][ T7701] RIP: 0033:0x7fd0ca78e169
[  156.436324][ T7701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  156.436341][ T7701] RSP: 002b:00007fd0cb523038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  156.436365][ T7701] RAX: ffffffffffffffda RBX: 00007fd0ca9b5fa0 RCX: 00007fd0ca78e169
[  156.436381][ T7701] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004
[  156.436394][ T7701] RBP: 00007fd0cb523090 R08: 0000000000000000 R09: 0000000000000000
[  156.436407][ T7701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  156.436419][ T7701] R13: 0000000000000000 R14: 00007fd0ca9b5fa0 R15: 00007ffe1e6eca08
[  156.436451][ T7701]  </TASK>
[  156.686402][   T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  156.850450][ T7716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.540'.
[  156.941977][ T7719] netlink: 28 bytes leftover after parsing attributes in process `syz.3.544'.
[  157.117679][ T7729] FAULT_INJECTION: forcing a failure.
[  157.117679][ T7729] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  157.153260][ T7729] CPU: 1 UID: 0 PID: 7729 Comm: syz.2.548 Not tainted 6.15.0-rc1-syzkaller-00374-gac1df712442c #0 PREEMPT(full) 
[  157.153292][ T7729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  157.153304][ T7729] Call Trace:
[  157.153312][ T7729]  <TASK>
[  157.153321][ T7729]  dump_stack_lvl+0x241/0x360
[  157.153357][ T7729]  ? __pfx_dump_stack_lvl+0x10/0x10
[  157.153389][ T7729]  ? __pfx__printk+0x10/0x10
[  157.153424][ T7729]  should_fail_ex+0x424/0x570
[  157.153465][ T7729]  _copy_to_user+0x31/0xb0
[  157.153489][ T7729]  simple_read_from_buffer+0xc4/0x170
[  157.153520][ T7729]  proc_fail_nth_read+0x1ef/0x260
[  157.153542][ T7729]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  157.153565][ T7729]  ? rw_verify_area+0x246/0x630
[  157.153583][ T7729]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  157.153604][ T7729]  vfs_read+0x21f/0xb90
[  157.153629][ T7729]  ? __pfx___mutex_lock+0x10/0x10
[  157.153653][ T7729]  ? __pfx_vfs_read+0x10/0x10
[  157.153676][ T7729]  ? __fget_files+0x2a/0x420
[  157.153706][ T7729]  ? __fget_files+0x39d/0x420
[  157.153732][ T7729]  ? __fget_files+0x2a/0x420
[  157.153769][ T7729]  ksys_read+0x19d/0x2d0
[  157.153793][ T7729]  ? __pfx_ksys_read+0x10/0x10
[  157.153820][ T7729]  ? do_syscall_64+0xb6/0x230
[  157.153845][ T7729]  do_syscall_64+0xf3/0x230
[  157.153867][ T7729]  ? clear_bhb_loop+0x45/0xa0
[  157.153890][ T7729]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.153909][ T7729] RIP: 0033:0x7f8996f8cb7c
[  157.153927][ T7729] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  157.153943][ T7729] RSP: 002b:00007f8997ee1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  157.153964][ T7729] RAX: ffffffffffffffda RBX: 00007f89971b5fa0 RCX: 00007f8996f8cb7c
[  157.153979][ T7729] RDX: 000000000000000f RSI: 00007f8997ee10a0 RDI: 0000000000000007
[  157.153990][ T7729] RBP: 00007f8997ee1090 R08: 0000000000000000 R09: 0000000000000000
[  157.154002][ T7729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  157.154013][ T7729] R13: 0000000000000000 R14: 00007f89971b5fa0 R15: 00007ffe07da70e8
[  157.154044][ T7729]  </TASK>
[  157.695058][ T7745] batadv0: entered promiscuous mode
[  157.700502][ T7745] macsec1: entered promiscuous mode
[  157.713921][ T7745] batadv0: left promiscuous mode
[  157.763592][   T10] IPVS: starting estimator thread 0...
[  157.764956][ T7742] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  157.866087][ T7751] IPVS: using max 29 ests per chain, 69600 per kthread
[  157.988157][ T7760] netlink: 72 bytes leftover after parsing attributes in process `syz.1.560'.
[  158.007976][ T7763] netlink: 52 bytes leftover after parsing attributes in process `syz.0.562'.
[  158.026279][ T7763] netlink: 16 bytes leftover after parsing attributes in process `syz.0.562'.
[  158.045609][ T7763] netlink: 28 bytes leftover after parsing attributes in process `syz.0.562'.
[  158.070202][ T7760] netlink: 'syz.1.560': attribute type 1 has an invalid length.
[  158.300850][ T7777] netlink: 'syz.1.565': attribute type 10 has an invalid length.
[  158.326776][ T7777] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  158.335726][ T5887] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  158.359631][ T5887] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  158.386880][ T7779] netlink: 'syz.0.566': attribute type 10 has an invalid length.
[  158.506433][   T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  158.518525][ T7771] netlink: 120 bytes leftover after parsing attributes in process `syz.1.565'.
[  158.530607][ T7783] netlink: 120 bytes leftover after parsing attributes in process `syz.0.566'.
[  158.623389][ T7775] bond0: (slave wlan1): Releasing backup interface
[  158.762118][ T7786] netlink: 'syz.3.568': attribute type 10 has an invalid length.
[  158.876488][ T5901] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  158.907482][ T7775] bond1: (slave bridge7): Releasing backup interface
[  159.021643][ T7775] bridge7: left promiscuous mode
[  159.181196][ T7792] netlink: 'syz.2.569': attribute type 1 has an invalid length.
[  159.256560][ T7794] netlink: 3 bytes leftover after parsing attributes in process `syz.2.569'.
[  159.270714][ T7792] bond1: entered promiscuous mode
[  159.279565][ T7792] 8021q: adding VLAN 0 to HW filter on device bond1
[  159.292285][ T7779] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  159.318923][ T5901] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  159.362807][ T7794] batadv1: entered promiscuous mode
[  159.368204][ T7794] batadv1: entered allmulticast mode
[  159.375673][ T7794] 8021q: adding VLAN 0 to HW filter on device batadv1
[  159.386780][ T7794] bond1: (slave batadv1): making interface the new active one
[  159.403241][ T7794] bond1: (slave batadv1): Enslaving as an active interface with an up link
[  159.412186][ T7799] netlink: 'syz.4.570': attribute type 10 has an invalid length.
[  159.488141][ T7801] netlink: 120 bytes leftover after parsing attributes in process `syz.4.570'.
[  159.521821][ T7796] bond0: (slave wlan1): Releasing backup interface
[  159.604557][ T7799] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  159.994541][ T7819] netlink: 'syz.1.577': attribute type 1 has an invalid length.
[  160.185232][ T7820] tipc: Started in network mode
[  160.201173][ T7820] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711
[  160.211619][ T7820] tipc: Enabled bearer <eth:batadv0>, priority 10
[  160.240750][ T7824] ip6tnl2: entered promiscuous mode
[  160.258732][ T7824] ip6tnl2: entered allmulticast mode
[  160.622668][ T7841] FAULT_INJECTION: forcing a failure.
[  160.622668][ T7841] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  160.646011][ T7841] CPU: 0 UID: 0 PID: 7841 Comm: syz.4.583 Not tainted 6.15.0-rc1-syzkaller-00374-gac1df712442c #0 PREEMPT(full) 
[  160.646044][ T7841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  160.646057][ T7841] Call Trace:
[  160.646065][ T7841]  <TASK>
[  160.646073][ T7841]  dump_stack_lvl+0x241/0x360
[  160.646112][ T7841]  ? __pfx_dump_stack_lvl+0x10/0x10
[  160.646141][ T7841]  ? __pfx__printk+0x10/0x10
[  160.646185][ T7841]  should_fail_ex+0x424/0x570
[  160.646216][ T7841]  _copy_from_user+0x2d/0xb0
[  160.646239][ T7841]  core_sys_select+0x68d/0xab0
[  160.646280][ T7841]  ? __pfx_core_sys_select+0x10/0x10
[  160.646304][ T7841]  ? rcu_read_lock_any_held+0xbb/0x160
[  160.646338][ T7841]  ? vfs_write+0xb29/0xd10
[  160.646387][ T7841]  ? __pfx_set_user_sigmask+0x10/0x10
[  160.646410][ T7841]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  160.646433][ T7841]  ? __fget_files+0x2a/0x420
[  160.646469][ T7841]  __se_sys_pselect6+0x356/0x3e0
[  160.646501][ T7841]  ? fput+0x9b/0xd0
[  160.646534][ T7841]  ? __pfx___se_sys_pselect6+0x10/0x10
[  160.646571][ T7841]  ? __x64_sys_pselect6+0x21/0xf0
[  160.646600][ T7841]  do_syscall_64+0xf3/0x230
[  160.646623][ T7841]  ? clear_bhb_loop+0x45/0xa0
[  160.646648][ T7841]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.646668][ T7841] RIP: 0033:0x7f3c9db8e169
[  160.646686][ T7841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  160.646703][ T7841] RSP: 002b:00007f3c9ea05038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[  160.646725][ T7841] RAX: ffffffffffffffda RBX: 00007f3c9ddb6080 RCX: 00007f3c9db8e169
[  160.646740][ T7841] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040
[  160.646753][ T7841] RBP: 00007f3c9ea05090 R08: 0000000000000000 R09: 0000000000000000
[  160.646766][ T7841] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001
[  160.646779][ T7841] R13: 0000000000000001 R14: 00007f3c9ddb6080 R15: 00007fffde4cab78
[  160.646810][ T7841]  </TASK>
[  160.875312][   T62] ip6_tnl_xmit_ctl: 4 callbacks suppressed
[  160.875334][   T62] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  160.889521][   T62] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  160.898085][ T5887] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  161.168491][ T7854] netlink: 'syz.2.587': attribute type 7 has an invalid length.
[  161.273177][ T7858] bond0: (slave wlan1): Releasing backup interface
[  161.290669][ T7858] bond1: (slave batadv1): Releasing active interface
[  161.311032][ T7858] netlink: 'syz.2.589': attribute type 10 has an invalid length.
[  161.320499][  T977] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  161.336470][  T977] tipc: Node number set to 8432298
[  161.345364][ T7858] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  161.396437][    T9] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  161.601989][ T7868] tipc: Started in network mode
[  161.636179][ T7868] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711
[  161.643783][ T7868] tipc: Enabled bearer <eth:batadv0>, priority 10
[  161.756249][   T10] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  161.876796][ T5901] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  161.976850][ T7878] netlink: 'syz.4.595': attribute type 10 has an invalid length.
[  161.999538][ T7880] ip6tnl1: entered promiscuous mode
[  162.004930][ T7880] ip6tnl1: entered allmulticast mode
[  162.462207][ T7894] __nla_validate_parse: 6 callbacks suppressed
[  162.462235][ T7894] netlink: 120 bytes leftover after parsing attributes in process `syz.3.601'.
[  162.477937][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  162.560480][ T7892] bond0: (slave wlan1): Releasing backup interface
[  162.756260][ T5901] tipc: Node number set to 8432298
[  163.062362][   T53] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  163.109329][ T5901] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  163.214382][ T7909] ip6tnl2: entered promiscuous mode
[  163.237466][ T7909] ip6tnl2: entered allmulticast mode
[  163.518701][ T7919] bpq0: entered promiscuous mode
[  163.544368][ T7919] bpq0: entered allmulticast mode
[  163.579348][ T7925] tipc: Started in network mode
[  163.584308][ T7925] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711
[  163.668947][ T7925] tipc: Enabled bearer <eth:batadv0>, priority 10
[  163.960704][ T7935] validate_nla: 1 callbacks suppressed
[  163.960733][ T7935] netlink: 'syz.0.614': attribute type 10 has an invalid length.
[  164.641150][ T7951] netlink: 'syz.4.618': attribute type 10 has an invalid length.
[  164.803925][    T9] tipc: Node number set to 8432298
[  165.563027][ T7971] netlink: 'syz.2.629': attribute type 10 has an invalid length.
[  165.586454][ T7971] veth1_macvtap: left promiscuous mode
[  165.618279][ T7971] team0: Device veth1_macvtap failed to register rx_handler
[  165.645103][ T7976] netlink: 'syz.2.629': attribute type 11 has an invalid length.
[  165.666344][ T7976] netlink: 224 bytes leftover after parsing attributes in process `syz.2.629'.
[  165.759190][ T7980] bpq0: left promiscuous mode
[  165.764002][ T7980] bpq0: left allmulticast mode
[  166.164492][ T7996] netlink: 'syz.2.636': attribute type 10 has an invalid length.
[  166.295822][ T8002] netlink: 'syz.0.639': attribute type 1 has an invalid length.
[  166.956973][    C1] ip6_tnl_xmit_ctl: 10 callbacks suppressed
[  166.957037][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  167.059649][ T8023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.646'.
[  167.432613][ T8038] netlink: 'syz.3.653': attribute type 10 has an invalid length.
[  167.440841][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  167.521081][ T8043] netlink: 'syz.3.653': attribute type 11 has an invalid length.
[  167.542314][ T8038] team0: Device veth1_macvtap failed to register rx_handler
[  167.564699][ T8043] netlink: 224 bytes leftover after parsing attributes in process `syz.3.653'.
[  167.578388][ T8046] netlink: 9 bytes leftover after parsing attributes in process `syz.4.654'.
[  167.596194][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  167.620074][ T8046] gretap0: entered promiscuous mode
[  167.634831][ T8042] netlink: 5 bytes leftover after parsing attributes in process `syz.4.654'.
[  167.675573][ T8042] 0�X��D: renamed from gretap0
[  167.719561][ T8042] 0�X��D: left promiscuous mode
[  167.724809][ T8042] 0�X��D: entered allmulticast mode
[  167.749735][ T8042] A link change request failed with some changes committed already. Interface 
30�X��D may have been left with an inconsistent configuration, please check.
[  168.356774][ T8074] netlink: 16 bytes leftover after parsing attributes in process `syz.3.660'.
[  168.567580][ T8076] netlink: 52 bytes leftover after parsing attributes in process `syz.0.665'.
[  168.651169][ T8076] netlink: 16 bytes leftover after parsing attributes in process `syz.0.665'.
[  168.683224][ T8081] netlink: 28 bytes leftover after parsing attributes in process `syz.0.665'.
[  168.964068][ T8090] netlink: 'syz.4.670': attribute type 1 has an invalid length.
[  168.987250][ T8090] netlink: 224 bytes leftover after parsing attributes in process `syz.4.670'.
[  169.152707][ T8096] netlink: 9 bytes leftover after parsing attributes in process `syz.0.673'.
[  169.195703][ T8094] netlink: 'syz.1.671': attribute type 10 has an invalid length.
[  169.249704][ T8100] netlink: 'syz.1.671': attribute type 11 has an invalid length.
[  169.268665][ T8100] netlink: 224 bytes leftover after parsing attributes in process `syz.1.671'.
[  169.466399][ T8096] gretap0: entered promiscuous mode
[  169.544146][ T8094] team0: Device veth1_macvtap failed to register rx_handler
[  170.009836][ T8119] netlink: 'syz.3.679': attribute type 10 has an invalid length.
[  170.156128][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  170.735039][ T8142] netlink: 'syz.4.689': attribute type 10 has an invalid length.
[  172.440255][ T8205] netlink: 'syz.2.714': attribute type 1 has an invalid length.
[  172.538958][ T8209] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  172.570683][ T8209] gretap1: entered promiscuous mode
[  172.591019][ T8209] gretap1: entered allmulticast mode
[  172.728970][ T8217] __nla_validate_parse: 7 callbacks suppressed
[  172.728993][ T8217] netlink: 16 bytes leftover after parsing attributes in process `syz.3.720'.
[  172.784748][ T8218] netlink: 16 bytes leftover after parsing attributes in process `syz.3.720'.
[  172.846869][ T8226] FAULT_INJECTION: forcing a failure.
[  172.846869][ T8226] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  172.918924][ T8226] CPU: 1 UID: 0 PID: 8226 Comm: syz.2.721 Not tainted 6.15.0-rc1-syzkaller-00374-gac1df712442c #0 PREEMPT(full) 
[  172.918970][ T8226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  172.918988][ T8226] Call Trace:
[  172.918999][ T8226]  <TASK>
[  172.919010][ T8226]  dump_stack_lvl+0x241/0x360
[  172.919074][ T8226]  ? __pfx_dump_stack_lvl+0x10/0x10
[  172.919103][ T8226]  ? __pfx__printk+0x10/0x10
[  172.919145][ T8226]  should_fail_ex+0x424/0x570
[  172.919177][ T8226]  _copy_from_user+0x2d/0xb0
[  172.919200][ T8226]  kstrtouint_from_user+0xce/0x1a0
[  172.919230][ T8226]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  172.919262][ T8226]  ? __lock_acquire+0xad5/0xd80
[  172.919292][ T8226]  proc_fail_nth_write+0xac/0x2d0
[  172.919313][ T8226]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  172.919340][ T8226]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  172.919365][ T8226]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  172.919385][ T8226]  vfs_write+0x2bc/0xd10
[  172.919412][ T8226]  ? fdget_pos+0x247/0x310
[  172.919445][ T8226]  ? __pfx_vfs_write+0x10/0x10
[  172.919469][ T8226]  ? __fget_files+0x2a/0x420
[  172.919498][ T8226]  ? __fget_files+0x39d/0x420
[  172.919527][ T8226]  ? __fget_files+0x2a/0x420
[  172.919566][ T8226]  ksys_write+0x19d/0x2d0
[  172.919589][ T8226]  ? __pfx_ksys_write+0x10/0x10
[  172.919617][ T8226]  ? do_syscall_64+0xb6/0x230
[  172.919663][ T8226]  do_syscall_64+0xf3/0x230
[  172.919685][ T8226]  ? clear_bhb_loop+0x45/0xa0
[  172.919708][ T8226]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.919728][ T8226] RIP: 0033:0x7f8996f8cc1f
[  172.919747][ T8226] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  172.919765][ T8226] RSP: 002b:00007f8997ec0030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  172.919786][ T8226] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8996f8cc1f
[  172.919801][ T8226] RDX: 0000000000000001 RSI: 00007f8997ec00a0 RDI: 0000000000000005
[  172.919813][ T8226] RBP: 00007f8997ec0090 R08: 0000000000000000 R09: 0000000000000000
[  172.919825][ T8226] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  172.919836][ T8226] R13: 0000000000000001 R14: 00007f89971b6080 R15: 00007ffe07da70e8
[  172.919867][ T8226]  </TASK>
[  173.174665][ T8232] netlink: 52 bytes leftover after parsing attributes in process `syz.4.724'.
[  173.197181][ T8232] netlink: 16 bytes leftover after parsing attributes in process `syz.4.724'.
[  173.227672][ T8232] netlink: 28 bytes leftover after parsing attributes in process `syz.4.724'.
[  173.366171][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  173.385923][ T8246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.728'.
[  173.686987][ T8259] netlink: 16 bytes leftover after parsing attributes in process `syz.2.732'.
[  173.691280][ T8261] netlink: 52 bytes leftover after parsing attributes in process `syz.4.734'.
[  173.710281][ T8261] netlink: 16 bytes leftover after parsing attributes in process `syz.4.734'.
[  173.742562][ T8261] netlink: 28 bytes leftover after parsing attributes in process `syz.4.734'.
[  174.636195][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  174.646224][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  174.908651][ T8299] IPVS: Scheduler module ip_vs_sip not found
[  174.915400][ T8303] IPVS: length: 24 != 16106127384
[  175.115370][ T8316] netlink: 'syz.4.753': attribute type 1 has an invalid length.
[  175.167914][ T8316] bond1: entered promiscuous mode
[  175.173706][ T8316] 8021q: adding VLAN 0 to HW filter on device bond1
[  175.916256][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  175.977536][ T8359] FAULT_INJECTION: forcing a failure.
[  175.977536][ T8359] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  176.012243][ T8359] CPU: 0 UID: 0 PID: 8359 Comm: syz.4.767 Not tainted 6.15.0-rc1-syzkaller-00374-gac1df712442c #0 PREEMPT(full) 
[  176.012274][ T8359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  176.012287][ T8359] Call Trace:
[  176.012294][ T8359]  <TASK>
[  176.012303][ T8359]  dump_stack_lvl+0x241/0x360
[  176.012339][ T8359]  ? __pfx_dump_stack_lvl+0x10/0x10
[  176.012365][ T8359]  ? __pfx__printk+0x10/0x10
[  176.012404][ T8359]  should_fail_ex+0x424/0x570
[  176.012432][ T8359]  _copy_from_user+0x2d/0xb0
[  176.012454][ T8359]  copy_msghdr_from_user+0xb3/0x580
[  176.012490][ T8359]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  176.012517][ T8359]  ? __fget_files+0x2a/0x420
[  176.012549][ T8359]  ? __fget_files+0x2a/0x420
[  176.012585][ T8359]  __sys_sendmmsg+0x361/0x7b0
[  176.012625][ T8359]  ? __pfx___sys_sendmmsg+0x10/0x10
[  176.012685][ T8359]  ? rcu_read_lock_any_held+0xbb/0x160
[  176.012711][ T8359]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  176.012739][ T8359]  ? vfs_write+0xb29/0xd10
[  176.012770][ T8359]  ? ksys_write+0x24e/0x2d0
[  176.012809][ T8359]  ? __mutex_unlock_slowpath+0x229/0x800
[  176.012862][ T8359]  ? ksys_write+0x275/0x2d0
[  176.012895][ T8359]  __x64_sys_sendmmsg+0xa0/0xb0
[  176.012921][ T8359]  do_syscall_64+0xf3/0x230
[  176.012942][ T8359]  ? clear_bhb_loop+0x45/0xa0
[  176.012964][ T8359]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.012983][ T8359] RIP: 0033:0x7f3c9db8e169
[  176.013000][ T8359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  176.013016][ T8359] RSP: 002b:00007f3c9ea26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  176.013036][ T8359] RAX: ffffffffffffffda RBX: 00007f3c9ddb5fa0 RCX: 00007f3c9db8e169
[  176.013050][ T8359] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003
[  176.013063][ T8359] RBP: 00007f3c9ea26090 R08: 0000000000000000 R09: 0000000000000000
[  176.013074][ T8359] R10: 0000000004004000 R11: 0000000000000246 R12: 0000000000000001
[  176.013086][ T8359] R13: 0000000000000000 R14: 00007f3c9ddb5fa0 R15: 00007fffde4cab78
[  176.013115][ T8359]  </TASK>
[  176.432734][ T8371] netlink: 'syz.4.771': attribute type 10 has an invalid length.
[  176.594683][ T8377] FAULT_INJECTION: forcing a failure.
[  176.594683][ T8377] name failslab, interval 1, probability 0, space 0, times 0
[  176.626300][ T8377] CPU: 1 UID: 0 PID: 8377 Comm: syz.3.773 Not tainted 6.15.0-rc1-syzkaller-00374-gac1df712442c #0 PREEMPT(full) 
[  176.626335][ T8377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  176.626349][ T8377] Call Trace:
[  176.626357][ T8377]  <TASK>
[  176.626366][ T8377]  dump_stack_lvl+0x241/0x360
[  176.626405][ T8377]  ? __pfx_dump_stack_lvl+0x10/0x10
[  176.626434][ T8377]  ? __pfx__printk+0x10/0x10
[  176.626462][ T8377]  ? __lock_acquire+0xad5/0xd80
[  176.626506][ T8377]  should_fail_ex+0x424/0x570
[  176.626538][ T8377]  should_failslab+0xac/0x100
[  176.626571][ T8377]  kmem_cache_alloc_noprof+0x78/0x390
[  176.626609][ T8377]  ? skb_clone+0x20c/0x390
[  176.626643][ T8377]  skb_clone+0x20c/0x390
[  176.626673][ T8377]  __netlink_deliver_tap+0x3c4/0x7f0
[  176.626708][ T8377]  ? netlink_deliver_tap+0x2e/0x1b0
[  176.626727][ T8377]  netlink_deliver_tap+0x19d/0x1b0
[  176.626750][ T8377]  netlink_unicast+0x7c6/0x9a0
[  176.626791][ T8377]  ? __pfx_netlink_unicast+0x10/0x10
[  176.626824][ T8377]  ? skb_put+0x114/0x1f0
[  176.626851][ T8377]  netlink_sendmsg+0x8c3/0xcd0
[  176.626886][ T8377]  ? __pfx_netlink_sendmsg+0x10/0x10
[  176.626910][ T8377]  ? aa_sock_msg_perm+0x91/0x160
[  176.626961][ T8377]  ? __pfx_netlink_sendmsg+0x10/0x10
[  176.626979][ T8377]  __sock_sendmsg+0x221/0x270
[  176.627013][ T8377]  ____sys_sendmsg+0x523/0x860
[  176.627045][ T8377]  ? __pfx_____sys_sendmsg+0x10/0x10
[  176.627067][ T8377]  ? __fget_files+0x2a/0x420
[  176.627101][ T8377]  ? __fget_files+0x2a/0x420
[  176.627137][ T8377]  __sys_sendmsg+0x271/0x360
[  176.627166][ T8377]  ? __pfx___sys_sendmsg+0x10/0x10
[  176.627237][ T8377]  ? do_syscall_64+0xb6/0x230
[  176.627263][ T8377]  do_syscall_64+0xf3/0x230
[  176.627285][ T8377]  ? clear_bhb_loop+0x45/0xa0
[  176.627310][ T8377]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.627331][ T8377] RIP: 0033:0x7f4225d8e169
[  176.627349][ T8377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  176.627366][ T8377] RSP: 002b:00007f4226b8b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  176.627390][ T8377] RAX: ffffffffffffffda RBX: 00007f4225fb5fa0 RCX: 00007f4225d8e169
[  176.627404][ T8377] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004
[  176.627416][ T8377] RBP: 00007f4226b8b090 R08: 0000000000000000 R09: 0000000000000000
[  176.627429][ T8377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  176.627441][ T8377] R13: 0000000000000000 R14: 00007f4225fb5fa0 R15: 00007ffc47bdf248
[  176.627472][ T8377]  </TASK>
[  178.271394][ T8427] ip6tnl3: entered promiscuous mode
[  178.282391][ T8427] ip6tnl3: entered allmulticast mode
[  178.294004][  T729] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  178.314640][  T729] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  178.322978][    T9] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  178.486375][    T9] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  178.539250][    T9] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  178.566968][ T8439] netlink: 'syz.3.797': attribute type 1 has an invalid length.
[  178.574786][ T8439] __nla_validate_parse: 3 callbacks suppressed
[  178.574805][ T8439] netlink: 224 bytes leftover after parsing attributes in process `syz.3.797'.
[  178.640817][ T8437] netlink: 'syz.2.793': attribute type 10 has an invalid length.
[  178.879126][ T8454] netlink: 101 bytes leftover after parsing attributes in process `syz.0.802'.
[  179.004731][ T8459] netlink: 136 bytes leftover after parsing attributes in process `syz.4.804'.
[  179.110801][ T8462] netlink: 36 bytes leftover after parsing attributes in process `syz.1.806'.
[  179.259608][ T8469] bpq0: entered promiscuous mode
[  179.265742][ T8469] bpq0: entered allmulticast mode
[  179.289394][ T8474] netlink: 'syz.4.810': attribute type 1 has an invalid length.
[  179.444849][ T8481] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  179.466835][ T8480] IPVS: set_ctl: invalid protocol: 4598 10.1.1.1:20002
[  179.479964][ T8483] bpq0: left promiscuous mode
[  179.484951][ T8483] bpq0: left allmulticast mode
[  179.519460][ T8485] netlink: 52 bytes leftover after parsing attributes in process `syz.4.814'.
[  179.531312][ T8485] netlink: 16 bytes leftover after parsing attributes in process `syz.4.814'.
[  179.543913][ T8485] netlink: 28 bytes leftover after parsing attributes in process `syz.4.814'.
[  179.642807][ T8490] FAULT_INJECTION: forcing a failure.
[  179.642807][ T8490] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  179.663639][ T8490] CPU: 0 UID: 0 PID: 8490 Comm: syz.3.815 Not tainted 6.15.0-rc1-syzkaller-00374-gac1df712442c #0 PREEMPT(full) 
[  179.663674][ T8490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  179.663687][ T8490] Call Trace:
[  179.663695][ T8490]  <TASK>
[  179.663704][ T8490]  dump_stack_lvl+0x241/0x360
[  179.663753][ T8490]  ? __pfx_dump_stack_lvl+0x10/0x10
[  179.663782][ T8490]  ? __pfx__printk+0x10/0x10
[  179.663822][ T8490]  should_fail_ex+0x424/0x570
[  179.663854][ T8490]  _copy_from_user+0x2d/0xb0
[  179.663876][ T8490]  move_addr_to_kernel+0x7f/0x170
[  179.663909][ T8490]  copy_msghdr_from_user+0x477/0x580
[  179.663947][ T8490]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  179.663976][ T8490]  ? __fget_files+0x2a/0x420
[  179.664009][ T8490]  ? __fget_files+0x2a/0x420
[  179.664049][ T8490]  __sys_sendmmsg+0x361/0x7b0
[  179.664095][ T8490]  ? __pfx___sys_sendmmsg+0x10/0x10
[  179.664178][ T8490]  ? rcu_read_lock_any_held+0xbb/0x160
[  179.664206][ T8490]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  179.664238][ T8490]  ? vfs_write+0xb29/0xd10
[  179.664272][ T8490]  ? ksys_write+0x24e/0x2d0
[  179.664298][ T8490]  ? __mutex_unlock_slowpath+0x229/0x800
[  179.664356][ T8490]  ? ksys_write+0x275/0x2d0
[  179.664392][ T8490]  __x64_sys_sendmmsg+0xa0/0xb0
[  179.664420][ T8490]  do_syscall_64+0xf3/0x230
[  179.664445][ T8490]  ? clear_bhb_loop+0x45/0xa0
[  179.664479][ T8490]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.664500][ T8490] RIP: 0033:0x7f4225d8e169
[  179.664524][ T8490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  179.664542][ T8490] RSP: 002b:00007f4226b8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  179.664572][ T8490] RAX: ffffffffffffffda RBX: 00007f4225fb5fa0 RCX: 00007f4225d8e169
[  179.664587][ T8490] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003
[  179.664601][ T8490] RBP: 00007f4226b8b090 R08: 0000000000000000 R09: 0000000000000000
[  179.664613][ T8490] R10: 0000000004004000 R11: 0000000000000246 R12: 0000000000000001
[  179.664626][ T8490] R13: 0000000000000000 R14: 00007f4225fb5fa0 R15: 00007ffc47bdf248
[  179.664658][ T8490]  </TASK>
[  180.037711][ T8497] FAULT_INJECTION: forcing a failure.
[  180.037711][ T8497] name failslab, interval 1, probability 0, space 0, times 0
[  180.050860][ T8497] CPU: 0 UID: 0 PID: 8497 Comm: syz.3.819 Not tainted 6.15.0-rc1-syzkaller-00374-gac1df712442c #0 PREEMPT(full) 
[  180.050890][ T8497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  180.050903][ T8497] Call Trace:
[  180.050931][ T8497]  <TASK>
[  180.050941][ T8497]  dump_stack_lvl+0x241/0x360
[  180.050980][ T8497]  ? __pfx_dump_stack_lvl+0x10/0x10
[  180.051011][ T8497]  ? __pfx__printk+0x10/0x10
[  180.051045][ T8497]  ? __pfx___might_resched+0x10/0x10
[  180.051078][ T8497]  should_fail_ex+0x424/0x570
[  180.051111][ T8497]  should_failslab+0xac/0x100
[  180.051143][ T8497]  __kmalloc_cache_noprof+0x73/0x370
[  180.051171][ T8497]  ? ip_set_create+0x338/0x1960
[  180.051203][ T8497]  ip_set_create+0x338/0x1960
[  180.051233][ T8497]  ? rcu_needs_cpu+0xb0/0xb0
[  180.051260][ T8497]  ? trace_contention_end+0x3c/0x120
[  180.051290][ T8497]  ? __pfx_ip_set_create+0x10/0x10
[  180.051354][ T8497]  ? nfnetlink_rcv_msg+0x227/0x1190
[  180.051383][ T8497]  nfnetlink_rcv_msg+0xbf7/0x1190
[  180.051411][ T8497]  ? nfnetlink_rcv_msg+0x227/0x1190
[  180.051471][ T8497]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  180.051496][ T8497]  ? stack_trace_save+0x11a/0x1d0
[  180.051555][ T8497]  ? kmem_cache_free+0x197/0x410
[  180.051581][ T8497]  ? nlmon_xmit+0xaf/0x100
[  180.051602][ T8497]  ? dev_hard_start_xmit+0x2d9/0x830
[  180.051627][ T8497]  ? __dev_queue_xmit+0x1b80/0x3f60
[  180.051653][ T8497]  ? __netlink_deliver_tap+0x561/0x7f0
[  180.051672][ T8497]  ? netlink_deliver_tap+0x19d/0x1b0
[  180.051692][ T8497]  ? netlink_unicast+0x7c6/0x9a0
[  180.051720][ T8497]  ? netlink_sendmsg+0x8c3/0xcd0
[  180.051739][ T8497]  ? __sock_sendmsg+0x221/0x270
[  180.051788][ T8497]  netlink_rcv_skb+0x208/0x480
[  180.051811][ T8497]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  180.051840][ T8497]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  180.051883][ T8497]  ? apparmor_capable+0x13b/0x1b0
[  180.051907][ T8497]  ? bpf_lsm_capable+0x9/0x10
[  180.051930][ T8497]  ? security_capable+0x7e/0x2d0
[  180.051966][ T8497]  nfnetlink_rcv+0x296/0x28f0
[  180.051998][ T8497]  ? __dev_queue_xmit+0x2f9/0x3f60
[  180.052025][ T8497]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  180.052051][ T8497]  ? __dev_queue_xmit+0x2f9/0x3f60
[  180.052079][ T8497]  ? __dev_queue_xmit+0x2f9/0x3f60
[  180.052111][ T8497]  ? __dev_queue_xmit+0x1780/0x3f60
[  180.052136][ T8497]  ? kasan_save_track+0x3f/0x80
[  180.052157][ T8497]  ? __kasan_slab_alloc+0x66/0x80
[  180.052188][ T8497]  ? do_syscall_64+0xf3/0x230
[  180.052216][ T8497]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  180.052242][ T8497]  ? __dev_queue_xmit+0x2f9/0x3f60
[  180.052275][ T8497]  ? __pfx___dev_queue_xmit+0x10/0x10
[  180.052323][ T8497]  ? ref_tracker_free+0x63e/0x7e0
[  180.052352][ T8497]  ? __asan_memcpy+0x40/0x70
[  180.052373][ T8497]  ? __pfx_ref_tracker_free+0x10/0x10
[  180.052421][ T8497]  ? skb_clone+0x240/0x390
[  180.052469][ T8497]  ? netlink_deliver_tap+0x2e/0x1b0
[  180.052494][ T8497]  ? netlink_deliver_tap+0x2e/0x1b0
[  180.052519][ T8497]  netlink_unicast+0x7f8/0x9a0
[  180.052561][ T8497]  ? __pfx_netlink_unicast+0x10/0x10
[  180.052596][ T8497]  ? skb_put+0x114/0x1f0
[  180.052625][ T8497]  netlink_sendmsg+0x8c3/0xcd0
[  180.052662][ T8497]  ? __pfx_netlink_sendmsg+0x10/0x10
[  180.052690][ T8497]  ? aa_sock_msg_perm+0x91/0x160
[  180.052725][ T8497]  ? __pfx_netlink_sendmsg+0x10/0x10
[  180.052745][ T8497]  __sock_sendmsg+0x221/0x270
[  180.052781][ T8497]  ____sys_sendmsg+0x523/0x860
[  180.052818][ T8497]  ? __pfx_____sys_sendmsg+0x10/0x10
[  180.052842][ T8497]  ? __fget_files+0x2a/0x420
[  180.052878][ T8497]  ? __fget_files+0x2a/0x420
[  180.052920][ T8497]  __sys_sendmsg+0x271/0x360
[  180.052953][ T8497]  ? __pfx___sys_sendmsg+0x10/0x10
[  180.053042][ T8497]  ? do_syscall_64+0xb6/0x230
[  180.053069][ T8497]  do_syscall_64+0xf3/0x230
[  180.053093][ T8497]  ? clear_bhb_loop+0x45/0xa0
[  180.053119][ T8497]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.053140][ T8497] RIP: 0033:0x7f4225d8e169
[  180.053161][ T8497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  180.053178][ T8497] RSP: 002b:00007f4226b8b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  180.053202][ T8497] RAX: ffffffffffffffda RBX: 00007f4225fb5fa0 RCX: 00007f4225d8e169
[  180.053218][ T8497] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004
[  180.053231][ T8497] RBP: 00007f4226b8b090 R08: 0000000000000000 R09: 0000000000000000
[  180.053244][ T8497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  180.053256][ T8497] R13: 0000000000000000 R14: 00007f4225fb5fa0 R15: 00007ffc47bdf248
[  180.053289][ T8497]  </TASK>
[  180.524442][ T8502] netlink: 52 bytes leftover after parsing attributes in process `syz.0.820'.
[  180.533540][ T8502] netlink: 16 bytes leftover after parsing attributes in process `syz.0.820'.
[  180.544430][ T8502] netlink: 28 bytes leftover after parsing attributes in process `syz.0.820'.
[  180.683815][ T8504] bpq0: entered promiscuous mode
[  180.688993][ T8504] bpq0: entered allmulticast mode
[  180.902372][ T8521] netlink: 'syz.0.826': attribute type 3 has an invalid length.
[  180.926100][ T8521] netlink: 'syz.0.826': attribute type 3 has an invalid length.
[  181.046611][ T8525] bpq0: left promiscuous mode
[  181.051368][ T8525] bpq0: left allmulticast mode
[  181.212125][ T8533] netlink: 'syz.4.833': attribute type 10 has an invalid length.
[  181.313830][ T8536] batadv0: entered promiscuous mode
[  181.328478][ T8536] macsec1: entered promiscuous mode
[  181.354127][ T8536] batadv0: left promiscuous mode
[  181.589834][ T8542] bpq0: entered promiscuous mode
[  181.594975][ T8542] bpq0: entered allmulticast mode
[  181.773748][ T8550] ip6tnl2: entered promiscuous mode
[  181.788032][ T8550] ip6tnl2: entered allmulticast mode
[  181.808796][  T729] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  181.827782][ T5836] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  181.837067][  T729] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  182.126406][ T5901] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  182.510578][ T8581] bpq0: left promiscuous mode
[  182.515633][ T8581] bpq0: left allmulticast mode
[  182.621981][ T8587] netlink: 'syz.2.857': attribute type 1 has an invalid length.
[  182.716229][ T5901] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  182.796179][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  183.165886][ T8611] netlink: 'syz.1.863': attribute type 1 has an invalid length.
[  183.213536][ T8609] bpq0: entered promiscuous mode
[  183.218981][ T8609] bpq0: entered allmulticast mode
[  183.255826][ T8611] veth3: entered promiscuous mode
[  183.388147][ T8622] FAULT_INJECTION: forcing a failure.
[  183.388147][ T8622] name failslab, interval 1, probability 0, space 0, times 0
[  183.401821][ T8622] CPU: 0 UID: 0 PID: 8622 Comm: syz.3.868 Not tainted 6.15.0-rc1-syzkaller-00374-gac1df712442c #0 PREEMPT(full) 
[  183.401854][ T8622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  183.401867][ T8622] Call Trace:
[  183.401875][ T8622]  <TASK>
[  183.401884][ T8622]  dump_stack_lvl+0x241/0x360
[  183.401932][ T8622]  ? __pfx_dump_stack_lvl+0x10/0x10
[  183.401961][ T8622]  ? __pfx__printk+0x10/0x10
[  183.401991][ T8622]  ? nfnetlink_rcv_msg+0xbf7/0x1190
[  183.402020][ T8622]  ? __pfx___might_resched+0x10/0x10
[  183.402052][ T8622]  should_fail_ex+0x424/0x570
[  183.402084][ T8622]  should_failslab+0xac/0x100
[  183.402115][ T8622]  __kmalloc_cache_noprof+0x73/0x370
[  183.402143][ T8622]  ? hash_netnet_create+0x7a3/0x1710
[  183.402178][ T8622]  hash_netnet_create+0x7a3/0x1710
[  183.402226][ T8622]  ? __pfx_hash_netnet_create+0x10/0x10
[  183.402259][ T8622]  ? __nla_parse+0x40/0x60
[  183.402289][ T8622]  ? __pfx_hash_netnet_create+0x10/0x10
[  183.402320][ T8622]  ip_set_create+0xa7d/0x1960
[  183.402351][ T8622]  ? ip_set_create+0x48c/0x1960
[  183.402384][ T8622]  ? __pfx_ip_set_create+0x10/0x10
[  183.402447][ T8622]  ? nfnetlink_rcv_msg+0x227/0x1190
[  183.402474][ T8622]  nfnetlink_rcv_msg+0xbf7/0x1190
[  183.402505][ T8622]  ? nfnetlink_rcv_msg+0x227/0x1190
[  183.402558][ T8622]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  183.402583][ T8622]  ? stack_trace_save+0x11a/0x1d0
[  183.402639][ T8622]  ? kmem_cache_free+0x197/0x410
[  183.402665][ T8622]  ? nlmon_xmit+0xaf/0x100
[  183.402685][ T8622]  ? dev_hard_start_xmit+0x2d9/0x830
[  183.402710][ T8622]  ? __dev_queue_xmit+0x1b80/0x3f60
[  183.402736][ T8622]  ? __netlink_deliver_tap+0x561/0x7f0
[  183.402755][ T8622]  ? netlink_deliver_tap+0x19d/0x1b0
[  183.402774][ T8622]  ? netlink_unicast+0x7c6/0x9a0
[  183.402802][ T8622]  ? netlink_sendmsg+0x8c3/0xcd0
[  183.402822][ T8622]  ? __sock_sendmsg+0x221/0x270
[  183.402871][ T8622]  netlink_rcv_skb+0x208/0x480
[  183.402893][ T8622]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  183.402929][ T8622]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  183.402967][ T8622]  ? apparmor_capable+0x13b/0x1b0
[  183.402991][ T8622]  ? bpf_lsm_capable+0x9/0x10
[  183.403014][ T8622]  ? security_capable+0x7e/0x2d0
[  183.403049][ T8622]  nfnetlink_rcv+0x296/0x28f0
[  183.403079][ T8622]  ? __dev_queue_xmit+0x2f9/0x3f60
[  183.403105][ T8622]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  183.403129][ T8622]  ? __dev_queue_xmit+0x2f9/0x3f60
[  183.403154][ T8622]  ? __dev_queue_xmit+0x2f9/0x3f60
[  183.403181][ T8622]  ? __dev_queue_xmit+0x1780/0x3f60
[  183.403203][ T8622]  ? kasan_save_track+0x3f/0x80
[  183.403224][ T8622]  ? __kasan_slab_alloc+0x66/0x80
[  183.403254][ T8622]  ? do_syscall_64+0xf3/0x230
[  183.403282][ T8622]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  183.403307][ T8622]  ? __dev_queue_xmit+0x2f9/0x3f60
[  183.403340][ T8622]  ? __pfx___dev_queue_xmit+0x10/0x10
[  183.403387][ T8622]  ? ref_tracker_free+0x63e/0x7e0
[  183.403416][ T8622]  ? __asan_memcpy+0x40/0x70
[  183.403436][ T8622]  ? __pfx_ref_tracker_free+0x10/0x10
[  183.403483][ T8622]  ? skb_clone+0x240/0x390
[  183.403524][ T8622]  ? netlink_deliver_tap+0x2e/0x1b0
[  183.403549][ T8622]  ? netlink_deliver_tap+0x2e/0x1b0
[  183.403573][ T8622]  netlink_unicast+0x7f8/0x9a0
[  183.403614][ T8622]  ? __pfx_netlink_unicast+0x10/0x10
[  183.403649][ T8622]  ? skb_put+0x114/0x1f0
[  183.403678][ T8622]  netlink_sendmsg+0x8c3/0xcd0
[  183.403714][ T8622]  ? __pfx_netlink_sendmsg+0x10/0x10
[  183.403740][ T8622]  ? aa_sock_msg_perm+0x91/0x160
[  183.403775][ T8622]  ? __pfx_netlink_sendmsg+0x10/0x10
[  183.403794][ T8622]  __sock_sendmsg+0x221/0x270
[  183.403831][ T8622]  ____sys_sendmsg+0x523/0x860
[  183.403867][ T8622]  ? __pfx_____sys_sendmsg+0x10/0x10
[  183.403890][ T8622]  ? __fget_files+0x2a/0x420
[  183.403933][ T8622]  ? __fget_files+0x2a/0x420
[  183.403974][ T8622]  __sys_sendmsg+0x271/0x360
[  183.404007][ T8622]  ? __pfx___sys_sendmsg+0x10/0x10
[  183.404099][ T8622]  ? do_syscall_64+0xb6/0x230
[  183.404126][ T8622]  do_syscall_64+0xf3/0x230
[  183.404150][ T8622]  ? clear_bhb_loop+0x45/0xa0
[  183.404179][ T8622]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.404200][ T8622] RIP: 0033:0x7f4225d8e169
[  183.404220][ T8622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  183.404238][ T8622] RSP: 002b:00007f4226b8b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  183.404261][ T8622] RAX: ffffffffffffffda RBX: 00007f4225fb5fa0 RCX: 00007f4225d8e169
[  183.404276][ T8622] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004
[  183.404290][ T8622] RBP: 00007f4226b8b090 R08: 0000000000000000 R09: 0000000000000000
[  183.404303][ T8622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  183.404315][ T8622] R13: 0000000000000000 R14: 00007f4225fb5fa0 R15: 00007ffc47bdf248
[  183.404348][ T8622]  </TASK>
[  183.599646][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  184.300408][ T8637] __nla_validate_parse: 3 callbacks suppressed
[  184.300436][ T8637] netlink: 68 bytes leftover after parsing attributes in process `syz.0.870'.
[  184.868896][ T8653] bpq0: left promiscuous mode
[  184.887423][ T8653] bpq0: left allmulticast mode
[  185.184702][ T8667] netlink: 'syz.4.884': attribute type 1 has an invalid length.
[  185.372594][ T8671] netlink: 68 bytes leftover after parsing attributes in process `syz.3.885'.
[  185.625685][ T8680] bpq0: entered promiscuous mode
[  185.639210][ T8680] bpq0: entered allmulticast mode
[  185.682985][ T8687] netlink: 52 bytes leftover after parsing attributes in process `syz.4.891'.
[  185.717495][ T8687] netlink: 16 bytes leftover after parsing attributes in process `syz.4.891'.
[  185.748066][ T8692] netlink: 28 bytes leftover after parsing attributes in process `syz.4.891'.
[  185.787998][ T8694] netlink: 52 bytes leftover after parsing attributes in process `syz.1.893'.
[  185.805044][ T8694] netlink: 16 bytes leftover after parsing attributes in process `syz.1.893'.
[  185.822077][ T8694] netlink: 28 bytes leftover after parsing attributes in process `syz.1.893'.
[  185.836176][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  186.062269][ T8709] netlink: 68 bytes leftover after parsing attributes in process `syz.0.898'.
[  186.232864][ T8719] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  186.373212][ T8724] netlink: 'syz.4.905': attribute type 11 has an invalid length.
[  186.385304][ T8724] netlink: 224 bytes leftover after parsing attributes in process `syz.4.905'.
[  186.419999][ T8727] netlink: 'syz.2.906': attribute type 1 has an invalid length.
[  186.551838][ T8730] netlink: 'syz.0.907': attribute type 1 has an invalid length.
[  187.028541][ T8756] netlink: 'syz.0.914': attribute type 10 has an invalid length.
[  187.109805][ T8762] netlink: 'syz.3.916': attribute type 10 has an invalid length.
[  187.971853][ T8788] netlink: 'syz.4.924': attribute type 1 has an invalid length.
[  188.087704][ T8790] netdevsim netdevsim2: Firmware load for './cgroup/../file0' refused, path contains '..' component
[  188.111950][ T8795] netlink: 'syz.0.925': attribute type 1 has an invalid length.
[  188.791226][ T8835] netlink: 'syz.2.936': attribute type 10 has an invalid length.
[  188.953967][ T8841] netlink: 'syz.4.938': attribute type 1 has an invalid length.
[  189.356169][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  189.570135][ T8846] tipc: Resetting bearer <eth:batadv0>
[  189.976852][ T8846] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  189.985781][ T8846] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  190.006284][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  190.034676][ T8846] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  190.043784][ T8846] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  190.179916][ T8846] ip6tnl1: left promiscuous mode
[  190.184959][ T8846] ip6tnl1: left allmulticast mode
[  190.208270][ T8846] ip6tnl2: left promiscuous mode
[  190.213300][ T8846] ip6tnl2: left allmulticast mode
[  190.238293][ T8846] gretap1: left promiscuous mode
[  190.243321][ T8846] gretap1: left allmulticast mode
[  190.276604][ T8846] veth3: left promiscuous mode
[  190.629170][ T8887] ip6tnl4: entered promiscuous mode
[  190.643163][ T8887] ip6tnl4: entered allmulticast mode
[  190.759471][ T8895] tc_dump_action: action bad kind
[  190.790545][ T5909] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  190.826298][ T5909] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  190.828421][ T5910] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  190.904478][ T8903] __nla_validate_parse: 8 callbacks suppressed
[  190.904502][ T8903] netlink: 52 bytes leftover after parsing attributes in process `syz.2.954'.
[  190.926599][ T8900] xt_hashlimit: size too large, truncated to 1048576
[  190.956090][ T8903] netlink: 16 bytes leftover after parsing attributes in process `syz.2.954'.
[  191.009452][ T8903] netlink: 28 bytes leftover after parsing attributes in process `syz.2.954'.
[  191.276251][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  191.469349][ T8921] netlink: 'syz.2.959': attribute type 10 has an invalid length.
[  191.549416][ T8923] batadv0: entered promiscuous mode
[  191.555072][ T8923] macsec1: entered promiscuous mode
[  191.573014][ T8923] batadv0: left promiscuous mode
[  191.596418][ T8872] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  191.808036][ T8926] netlink: 'syz.3.961': attribute type 1 has an invalid length.
[  191.820545][ T8926] netlink: 224 bytes leftover after parsing attributes in process `syz.3.961'.
[  191.841717][ T5910] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  192.383502][ T8944] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  192.468062][ T8948] netlink: 10 bytes leftover after parsing attributes in process `syz.3.972'.
[  192.549004][ T8953] netlink: 52 bytes leftover after parsing attributes in process `syz.2.973'.
[  192.595271][ T8953] netlink: 16 bytes leftover after parsing attributes in process `syz.2.973'.
[  192.646941][ T8953] netlink: 28 bytes leftover after parsing attributes in process `syz.2.973'.
[  192.963833][ T8974] netlink: 'syz.0.978': attribute type 10 has an invalid length.
[  193.692616][ T8997] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  193.710897][ T8997] infiniband s9z1: RDMA CMA: cma_listen_on_dev, error -98
[  193.836165][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  193.836651][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  193.996873][ T9007] netlink: 52 bytes leftover after parsing attributes in process `syz.0.991'.
[  194.005861][ T9007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.991'.
[  194.214711][ T9016] IPVS: Error joining to the multicast group
[  194.265082][ T9019] bpq0: left promiscuous mode
[  194.280711][ T9019] bpq0: left allmulticast mode
[  194.428424][ T5846] Bluetooth: hci4: link tx timeout
[  194.434677][ T5846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  194.444465][   T55] Bluetooth: hci4: link tx timeout
[  194.450140][   T55] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  194.466554][   T55] Bluetooth: hci4: link tx timeout
[  194.471894][   T55] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  194.481334][   T55] Bluetooth: hci4: link tx timeout
[  194.482682][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  194.486791][   T55] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  194.501178][   T55] Bluetooth: hci4: link tx timeout
[  194.506569][   T55] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  194.515639][   T55] Bluetooth: hci4: link tx timeout
[  194.521049][   T55] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  194.529137][   T55] Bluetooth: hci4: link tx timeout
[  194.534400][   T55] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  194.556454][   T55] Bluetooth: hci4: link tx timeout
[  194.561641][   T55] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  194.796454][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  194.805406][ T9033] netlink: 'syz.1.1002': attribute type 10 has an invalid length.
[  195.276384][ T9040] netlink: 'syz.0.1003': attribute type 10 has an invalid length.
[  195.391797][ T9043] bpq0: entered promiscuous mode
[  195.399644][ T9043] bpq0: entered allmulticast mode
[  195.863892][ T9061] netlink: 'syz.2.1021': attribute type 1 has an invalid length.
[  195.879828][ T9065] ip6tnl3: entered promiscuous mode
[  195.893487][ T9065] ip6tnl3: entered allmulticast mode
[  195.906288][   T13] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  195.934418][ T8872] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  195.948367][   T13] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  195.986423][ T8872] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  196.052047][ T9067] netlink: 'syz.3.1011': attribute type 10 has an invalid length.
[  196.368175][ T8872] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  196.476635][   T55] Bluetooth: hci4: command 0x0406 tx timeout
[  196.510151][ T9078] __nla_validate_parse: 3 callbacks suppressed
[  196.510176][ T9078] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1017'.
[  196.556330][ T9078] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1017'.
[  196.572578][ T9082] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1017'.
[  196.671174][ T9086] bpq0: left promiscuous mode
[  196.676479][ T9086] bpq0: left allmulticast mode
[  196.685144][ T9087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1019'.
[  196.945145][ T9095] batadv0: entered promiscuous mode
[  196.959021][ T9095] macsec1: entered promiscuous mode
[  196.983110][ T9095] batadv0: left promiscuous mode
[  197.014934][ T9097] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1023'.
[  197.239015][ T9105] netlink: 'syz.0.1024': attribute type 1 has an invalid length.
[  197.247917][ T9105] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1024'.
[  197.596398][ T5910] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  197.612402][ T9112] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1028'.
[  197.640591][ T9112] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1028'.
[  197.662632][ T9112] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1028'.
[  197.837342][ T9118] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1031'.
[  198.171095][ T9143] sctp: [Deprecated]: syz.2.1036 (pid 9143) Use of int in max_burst socket option.
[  198.171095][ T9143] Use struct sctp_assoc_value instead
[  198.403465][ T5885] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  198.618262][ T9165] gtp0: entered promiscuous mode
[  198.623959][ T9165] gtp0: entered allmulticast mode
[  198.638662][ T9167] netlink: 'syz.0.1049': attribute type 1 has an invalid length.
[  198.739170][ T9176] netlink: 'syz.3.1051': attribute type 1 has an invalid length.
[  199.205548][ T9191] xt_CT: No such helper "snmp"
[  199.410162][ T9185] ip6tnl3: entered promiscuous mode
[  199.415881][ T9185] ip6tnl3: entered allmulticast mode
[  199.423508][ T1145] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  199.436230][ T1145] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  199.459325][ T9205] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0
[  199.815668][ T9223] Cannot find del_set index 286 as target
[  199.869121][ T9217] Cannot find del_set index 286 as target
[  199.950834][ T9231] ip6_tnl_xmit_ctl: 2 callbacks suppressed
[  199.950857][ T9231] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  200.031215][ T9234] ip6tnl5: entered promiscuous mode
[  200.045260][ T9234] ip6tnl5: entered allmulticast mode
[  200.156244][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  200.255312][ T9238] tipc: Resetting bearer <eth:batadv0>
[  200.365380][ T9238] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  200.375506][ T9238] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  200.384557][ T9238] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  200.394158][ T9238] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  200.403595][ T5887] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  200.435551][ T9238] ip6tnl1: left promiscuous mode
[  200.440790][ T9238] ip6tnl1: left allmulticast mode
[  200.450261][ T9238] ip6tnl2: left promiscuous mode
[  200.455411][ T9238] ip6tnl2: left allmulticast mode
[  200.465137][ T9238] gtp0: left promiscuous mode
[  200.470049][ T9238] gtp0: left allmulticast mode
[  200.479285][ T9238] ip6tnl3: left promiscuous mode
[  200.484330][ T9238] ip6tnl3: left allmulticast mode
[  200.696352][ T9258] netlink: 'syz.1.1081': attribute type 1 has an invalid length.
[  200.800688][ T9262] syz.2.1083 uses old SIOCAX25GETINFO
[  200.870786][ T9268] netlink: 'syz.2.1083': attribute type 1 has an invalid length.
[  201.257820][   T13] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  201.269131][   T13] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  201.286215][   T50] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  201.294072][ T9282] netlink: 'syz.0.1088': attribute type 10 has an invalid length.
[  201.406868][   T50] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  201.924846][ T9296] netlink: 'syz.1.1091': attribute type 10 has an invalid length.
[  201.996202][ T9298] bond0: (slave wlan1): Releasing backup interface
[  202.066967][ T5901] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  202.115717][ T5901] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  202.226845][ T5885] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  202.489207][ T9306] __nla_validate_parse: 23 callbacks suppressed
[  202.489234][ T9306] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1096'.
[  202.539236][ T9306] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1096'.
[  202.580646][ T9306] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1096'.
[  202.869913][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1103'.
[  202.879495][   T55] Bluetooth: hci4: command 0x0406 tx timeout
[  203.141970][ T9339] netlink: 'syz.2.1106': attribute type 12 has an invalid length.
[  203.176133][ T9339] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1106'.
[  203.231189][ T9342] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1108'.
[  203.455629][ T9357] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1112'.
[  203.465820][ T9357] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1112'.
[  203.477316][ T9357] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1112'.
[  203.498699][ T9360] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  203.977051][ T9379] pim6reg1: entered promiscuous mode
[  203.989672][ T9379] pim6reg1: entered allmulticast mode
[  204.031161][ T9387] x_tables: duplicate underflow at hook 3
[  204.233128][ T9398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1124'.
[  204.273688][ T9398] netlink: 'syz.4.1124': attribute type 20 has an invalid length.
[  204.495318][ T9405] syzkaller0: entered promiscuous mode
[  204.506455][ T9405] syzkaller0: entered allmulticast mode
[  205.676143][    C1] ip6_tnl_xmit_ctl: 1 callbacks suppressed
[  205.676163][    C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  206.314022][ T9440] veth0: entered promiscuous mode
[  206.339287][ T9442] veth0: left promiscuous mode
[  206.705585][ T9463] tipc: Enabling <eth:lo> not permitted
[  206.711446][ T9463] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  207.554018][ T9478] sctp: [Deprecated]: syz.2.1150 (pid 9478) Use of struct sctp_assoc_value in delayed_ack socket option.
[  207.554018][ T9478] Use struct sctp_sack_info instead
[  207.692874][ T9483] sctp: [Deprecated]: syz.2.1150 (pid 9483) Use of int in max_burst socket option deprecated.
[  207.692874][ T9483] Use struct sctp_assoc_value instead
[  207.841840][ T9478] __nla_validate_parse: 15 callbacks suppressed
[  207.841865][ T9478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1150'.
[  208.170673][ T9503] netlink: 'syz.1.1158': attribute type 7 has an invalid length.
[  208.556116][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  208.728576][ T9518] macsec1: entered promiscuous mode
[  208.734053][ T9518] batadv0: entered promiscuous mode
[  208.743627][ T9518] batadv0: left promiscuous mode
[  208.895071][ T9520] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1164'.
[  208.974489][ T9521] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1164'.
[  209.003193][ T9520] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1164'.
[  209.196147][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  209.206108][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  209.785998][ T9565] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1177'.
[  209.903689][ T9568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1179'.
[  209.916284][ T9568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1179'.
[  209.952899][ T9568] netlink: 'syz.3.1179': attribute type 18 has an invalid length.
[  210.214391][ T9576] ip6tnl4: entered promiscuous mode
[  210.229300][ T9576] ip6tnl4: entered allmulticast mode
[  210.256270][   T13] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  210.274485][   T13] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  210.332756][   T10] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  210.371838][ T9587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1186'.
[  210.546614][ T9596] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  210.864547][ T5887] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  210.970674][ T9611] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  211.024302][ T9616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1191'.
[  211.052840][ T9616] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1191'.
[  211.067939][ T9611] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  211.196331][   T10] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  211.801346][ T9652] trusted_key: syz.4.1204 sent an empty control message without MSG_MORE.
[  211.931454][ T5841] Bluetooth: hci2: command 0x0406 tx timeout
[  211.942217][ T5841] Bluetooth: hci1: command 0x0406 tx timeout
[  211.951372][ T5838] Bluetooth: hci3: command 0x0406 tx timeout
[  211.962329][ T5838] Bluetooth: hci0: command 0x0406 tx timeout
[  212.216475][ T9666] netlink: 'syz.3.1208': attribute type 11 has an invalid length.
[  212.267746][ T9666] netlink: 'syz.3.1208': attribute type 2 has an invalid length.
[  213.011856][ T9702] __nla_validate_parse: 2 callbacks suppressed
[  213.011875][ T9702] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1214'.
[  213.100097][ T9717] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1221'.
[  213.113924][ T9717] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1221'.
[  213.239197][ T9727] ip6tnl6: entered promiscuous mode
[  213.244602][ T9727] ip6tnl6: entered allmulticast mode
[  213.252407][   T13] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[  213.260847][   T13] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[  213.286352][ T8872] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[  213.590580][ T8872] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[  213.661240][ T9740] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1228'.
[  213.671574][ T9740] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1228'.
[  213.703181][ T9740] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1228'.
[  213.838532][ T9745] netlink: 'syz.2.1230': attribute type 1 has an invalid length.
[  213.866593][ T8872] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[  213.927329][ T9745] 8021q: adding VLAN 0 to HW filter on device bond2
[  214.074632][ T9751] batadv0: entered promiscuous mode
[  214.093330][ T9751] macsec1: entered promiscuous mode
[  214.108203][ T9751] batadv0: left promiscuous mode
[  214.156266][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  214.301772][ T9766] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1236'.
[  214.545533][ T9781] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1244'.
[  214.568858][ T9781] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1244'.
[  214.585456][ T9781] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1244'.
[  214.652822][ T9787] IPv6: sit2: Disabled Multicast RS
[  214.662459][ T9787] sit2: entered allmulticast mode
[  214.681206][ T9790] FAULT_INJECTION: forcing a failure.
[  214.681206][ T9790] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  214.694607][ T9790] CPU: 1 UID: 0 PID: 9790 Comm: syz.3.1246 Not tainted 6.15.0-rc1-syzkaller-00374-gac1df712442c #0 PREEMPT(full) 
[  214.694636][ T9790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  214.694649][ T9790] Call Trace:
[  214.694657][ T9790]  <TASK>
[  214.694666][ T9790]  dump_stack_lvl+0x241/0x360
[  214.694704][ T9790]  ? __pfx_dump_stack_lvl+0x10/0x10
[  214.694734][ T9790]  ? __pfx__printk+0x10/0x10
[  214.694777][ T9790]  should_fail_ex+0x424/0x570
[  214.694808][ T9790]  _copy_from_user+0x2d/0xb0
[  214.694831][ T9790]  copy_msghdr_from_user+0xb3/0x580
[  214.694870][ T9790]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  214.694899][ T9790]  ? __fget_files+0x2a/0x420
[  214.694934][ T9790]  ? __fget_files+0x2a/0x420
[  214.694975][ T9790]  __sys_sendmmsg+0x361/0x7b0
[  214.695014][ T9790]  ? __pfx___sys_sendmmsg+0x10/0x10
[  214.695089][ T9790]  ? rcu_read_lock_any_held+0xbb/0x160
[  214.695117][ T9790]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  214.695148][ T9790]  ? vfs_write+0xb29/0xd10
[  214.695182][ T9790]  ? ksys_write+0x24e/0x2d0
[  214.695209][ T9790]  ? __mutex_unlock_slowpath+0x229/0x800
[  214.695267][ T9790]  ? ksys_write+0x275/0x2d0
[  214.695302][ T9790]  __x64_sys_sendmmsg+0xa0/0xb0
[  214.695343][ T9790]  do_syscall_64+0xf3/0x230
[  214.695364][ T9790]  ? clear_bhb_loop+0x45/0xa0
[  214.695397][ T9790]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.695414][ T9790] RIP: 0033:0x7f4225d8e169
[  214.695430][ T9790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  214.695445][ T9790] RSP: 002b:00007f4226b6a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  214.695465][ T9790] RAX: ffffffffffffffda RBX: 00007f4225fb6080 RCX: 00007f4225d8e169
[  214.695478][ T9790] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003
[  214.695490][ T9790] RBP: 00007f4226b6a090 R08: 0000000000000000 R09: 0000000000000000
[  214.695501][ T9790] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000001
[  214.695512][ T9790] R13: 0000000000000001 R14: 00007f4225fb6080 R15: 00007ffc47bdf248
[  214.695540][ T9790]  </TASK>
[  214.957397][    C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  215.063622][ T9800] netlink: 'syz.2.1250': attribute type 13 has an invalid length.
[  215.072286][ T9800] syz_tun: refused to change device tx_queue_len
[  215.078909][ T9800] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  215.256405][ T9804] FAULT_INJECTION: forcing a failure.
[  215.256405][ T9804] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  215.277227][ T9804] CPU: 0 UID: 0 PID: 9804 Comm: syz.2.1252 Not tainted 6.15.0-rc1-syzkaller-00374-gac1df712442c #0 PREEMPT(full) 
[  215.277257][ T9804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  215.277269][ T9804] Call Trace:
[  215.277278][ T9804]  <TASK>
[  215.277287][ T9804]  dump_stack_lvl+0x241/0x360
[  215.277324][ T9804]  ? __pfx_dump_stack_lvl+0x10/0x10
[  215.277353][ T9804]  ? __pfx__printk+0x10/0x10
[  215.277395][ T9804]  should_fail_ex+0x424/0x570
[  215.277426][ T9804]  _copy_from_user+0x2d/0xb0
[  215.277449][ T9804]  __sys_bpf+0x1c5/0x8b0
[  215.277472][ T9804]  ? __pfx___sys_bpf+0x10/0x10
[  215.277506][ T9804]  ? ksys_write+0x275/0x2d0
[  215.277543][ T9804]  __x64_sys_bpf+0x7c/0x90
[  215.277575][ T9804]  do_syscall_64+0xf3/0x230
[  215.277604][ T9804]  ? clear_bhb_loop+0x45/0xa0
[  215.277629][ T9804]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.277649][ T9804] RIP: 0033:0x7f8996f8e169
[  215.277667][ T9804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  215.277685][ T9804] RSP: 002b:00007f8997ee1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  215.277706][ T9804] RAX: ffffffffffffffda RBX: 00007f89971b5fa0 RCX: 00007f8996f8e169
[  215.277721][ T9804] RDX: 0000000000000070 RSI: 00002000000000c0 RDI: 0000000000000005
[  215.277734][ T9804] RBP: 00007f8997ee1090 R08: 0000000000000000 R09: 0000000000000000
[  215.277747][ T9804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  215.277759][ T9804] R13: 0000000000000000 R14: 00007f89971b5fa0 R15: 00007ffe07da70e8
[  215.277791][ T9804]  </TASK>
[  215.596152][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  215.681069][ T9818] ip6tnl4: entered promiscuous mode
[  215.689687][ T9816] netlink: 'syz.2.1254': attribute type 10 has an invalid length.
[  215.704033][ T9818] ip6tnl4: entered allmulticast mode
[  215.756924][ T9820] netlink: 'syz.0.1256': attribute type 10 has an invalid length.
[  216.028445][ T9828] FAULT_INJECTION: forcing a failure.
[  216.028445][ T9828] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  216.083869][ T9828] CPU: 0 UID: 0 PID: 9828 Comm: syz.3.1261 Not tainted 6.15.0-rc1-syzkaller-00374-gac1df712442c #0 PREEMPT(full) 
[  216.083903][ T9828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  216.083915][ T9828] Call Trace:
[  216.083922][ T9828]  <TASK>
[  216.083938][ T9828]  dump_stack_lvl+0x241/0x360
[  216.083971][ T9828]  ? __pfx_dump_stack_lvl+0x10/0x10
[  216.083997][ T9828]  ? __pfx__printk+0x10/0x10
[  216.084033][ T9828]  should_fail_ex+0x424/0x570
[  216.084062][ T9828]  _copy_from_user+0x2d/0xb0
[  216.084081][ T9828]  move_addr_to_kernel+0x7f/0x170
[  216.084115][ T9828]  copy_msghdr_from_user+0x477/0x580
[  216.084149][ T9828]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  216.084190][ T9828]  ? __fget_files+0x2a/0x420
[  216.084226][ T9828]  ? __fget_files+0x2a/0x420
[  216.084268][ T9828]  __sys_sendmmsg+0x361/0x7b0
[  216.084309][ T9828]  ? __pfx___sys_sendmmsg+0x10/0x10
[  216.084376][ T9828]  ? rcu_read_lock_any_held+0xbb/0x160
[  216.084404][ T9828]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  216.084436][ T9828]  ? vfs_write+0xb29/0xd10
[  216.084470][ T9828]  ? ksys_write+0x24e/0x2d0
[  216.084498][ T9828]  ? __mutex_unlock_slowpath+0x229/0x800
[  216.084556][ T9828]  ? ksys_write+0x275/0x2d0
[  216.084593][ T9828]  __x64_sys_sendmmsg+0xa0/0xb0
[  216.084623][ T9828]  do_syscall_64+0xf3/0x230
[  216.084647][ T9828]  ? clear_bhb_loop+0x45/0xa0
[  216.084673][ T9828]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.084693][ T9828] RIP: 0033:0x7f4225d8e169
[  216.084711][ T9828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  216.084729][ T9828] RSP: 002b:00007f4226b8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  216.084752][ T9828] RAX: ffffffffffffffda RBX: 00007f4225fb5fa0 RCX: 00007f4225d8e169
[  216.084767][ T9828] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 000000000000000a
[  216.084781][ T9828] RBP: 00007f4226b8b090 R08: 0000000000000000 R09: 0000000000000000
[  216.084795][ T9828] R10: 0000000004004000 R11: 0000000000000246 R12: 0000000000000001
[  216.084808][ T9828] R13: 0000000000000000 R14: 00007f4225fb5fa0 R15: 00007ffc47bdf248
[  216.084841][ T9828]  </TASK>
[  216.474053][ T9840] xt_SECMARK: invalid mode: 0
[  216.587493][ T5909] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  216.616486][ T5909] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  216.624236][   T50] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  216.710009][ T9852] FAULT_INJECTION: forcing a failure.
[  216.710009][ T9852] name failslab, interval 1, probability 0, space 0, times 0
[  216.729055][ T9852] CPU: 1 UID: 0 PID: 9852 Comm: syz.0.1269 Not tainted 6.15.0-rc1-syzkaller-00374-gac1df712442c #0 PREEMPT(full) 
[  216.729082][ T9852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  216.729093][ T9852] Call Trace:
[  216.729101][ T9852]  <TASK>
[  216.729108][ T9852]  dump_stack_lvl+0x241/0x360
[  216.729147][ T9852]  ? __pfx_dump_stack_lvl+0x10/0x10
[  216.729172][ T9852]  ? __pfx__printk+0x10/0x10
[  216.729194][ T9852]  ? handle_pte_fault+0x3ba2/0x61c0
[  216.729217][ T9852]  ? __pfx___might_resched+0x10/0x10
[  216.729242][ T9852]  should_fail_ex+0x424/0x570
[  216.729269][ T9852]  should_failslab+0xac/0x100
[  216.729294][ T9852]  kmem_cache_alloc_node_noprof+0x7d/0x3b0
[  216.729319][ T9852]  ? __alloc_skb+0x1c2/0x480
[  216.729343][ T9852]  __alloc_skb+0x1c2/0x480
[  216.729363][ T9852]  ? __count_memcg_events+0x1e1/0x3d0
[  216.729392][ T9852]  ? __pfx___alloc_skb+0x10/0x10
[  216.729415][ T9852]  ? count_memcg_event_mm+0x96/0x440
[  216.729439][ T9852]  ? count_memcg_event_mm+0x96/0x440
[  216.729464][ T9852]  alloc_skb_with_frags+0xc3/0x830
[  216.729488][ T9852]  ? __pfx_count_memcg_event_mm+0x10/0x10
[  216.729512][ T9852]  ? mtree_range_walk+0x700/0x8e0
[  216.729537][ T9852]  sock_alloc_send_pskb+0x91c/0xa70
[  216.729578][ T9852]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  216.729619][ T9852]  unix_dgram_sendmsg+0x6d4/0x1ea0
[  216.729642][ T9852]  ? __up_read+0x2c4/0x6b0
[  216.729673][ T9852]  ? aa_sk_perm+0x96f/0xac0
[  216.729700][ T9852]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[  216.729722][ T9852]  ? __import_iovec+0x3c2/0x830
[  216.729742][ T9852]  ? aa_sock_msg_perm+0x91/0x160
[  216.729767][ T9852]  ? unix_seqpacket_sendmsg+0x110/0x1e0
[  216.729789][ T9852]  ? __pfx_unix_seqpacket_sendmsg+0x10/0x10
[  216.729807][ T9852]  __sock_sendmsg+0x221/0x270
[  216.729837][ T9852]  ____sys_sendmsg+0x523/0x860
[  216.729867][ T9852]  ? __pfx_____sys_sendmsg+0x10/0x10
[  216.729887][ T9852]  ? __fget_files+0x2a/0x420
[  216.729916][ T9852]  ? __fget_files+0x2a/0x420
[  216.729950][ T9852]  __sys_sendmmsg+0x3a0/0x7b0
[  216.729983][ T9852]  ? __pfx___sys_sendmmsg+0x10/0x10
[  216.730037][ T9852]  ? rcu_read_lock_any_held+0xbb/0x160
[  216.730062][ T9852]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  216.730088][ T9852]  ? vfs_write+0xb29/0xd10
[  216.730116][ T9852]  ? ksys_write+0x24e/0x2d0
[  216.730145][ T9852]  ? __mutex_unlock_slowpath+0x229/0x800
[  216.730193][ T9852]  ? ksys_write+0x275/0x2d0
[  216.730224][ T9852]  __x64_sys_sendmmsg+0xa0/0xb0
[  216.730248][ T9852]  do_syscall_64+0xf3/0x230
[  216.730268][ T9852]  ? clear_bhb_loop+0x45/0xa0
[  216.730288][ T9852]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.730306][ T9852] RIP: 0033:0x7f9a49d8e169
[  216.730321][ T9852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  216.730336][ T9852] RSP: 002b:00007f9a4ab1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  216.730356][ T9852] RAX: ffffffffffffffda RBX: 00007f9a49fb6080 RCX: 00007f9a49d8e169
[  216.730370][ T9852] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003
[  216.730381][ T9852] RBP: 00007f9a4ab1e090 R08: 0000000000000000 R09: 0000000000000000
[  216.730392][ T9852] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000001
[  216.730403][ T9852] R13: 0000000000000001 R14: 00007f9a49fb6080 R15: 00007ffe640c1b68
[  216.730430][ T9852]  </TASK>
[  217.062613][   T50] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  217.116158][    C0] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[  217.215199][ T9866] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  217.236259][   T10] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  217.246117][ T5901] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  217.280168][ T9872] FAULT_INJECTION: forcing a failure.
[  217.280168][ T9872] name failslab, interval 1, probability 0, space 0, times 0
[  217.297022][ T8872] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  217.297650][ T9872] CPU: 1 UID: 0 PID: 9872 Comm: syz.4.1278 Not tainted 6.15.0-rc1-syzkaller-00374-gac1df712442c #0 PREEMPT(full) 
[  217.297676][ T9872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  217.297689][ T9872] Call Trace:
[  217.297696][ T9872]  <TASK>
[  217.297705][ T9872]  dump_stack_lvl+0x241/0x360
[  217.297740][ T9872]  ? __pfx_dump_stack_lvl+0x10/0x10
[  217.297766][ T9872]  ? __pfx__printk+0x10/0x10
[  217.297797][ T9872]  ? __pfx___might_resched+0x10/0x10
[  217.297830][ T9872]  should_fail_ex+0x424/0x570
[  217.297860][ T9872]  should_failslab+0xac/0x100
[  217.297887][ T9872]  kmem_cache_alloc_node_noprof+0x7d/0x3b0
[  217.297913][ T9872]  ? __alloc_skb+0x1c2/0x480
[  217.297940][ T9872]  __alloc_skb+0x1c2/0x480
[  217.297961][ T9872]  ? fib6_table_lookup+0xb98/0xbf0
[  217.297991][ T9872]  ? __pfx___alloc_skb+0x10/0x10
[  217.298025][ T9872]  alloc_skb_with_frags+0xc3/0x830
[  217.298054][ T9872]  ? __lock_acquire+0xad5/0xd80
[  217.298080][ T9872]  sock_alloc_send_pskb+0x91c/0xa70
[  217.298125][ T9872]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  217.298151][ T9872]  ? ipv6_get_saddr_eval+0xbce/0xf50
[  217.298193][ T9872]  __ip6_append_data+0x2c4f/0x41b0
[  217.298229][ T9872]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  217.298273][ T9872]  ? ip6_mtu+0x81/0x3f0
[  217.298300][ T9872]  ? __pfx___ip6_append_data+0x10/0x10
[  217.298322][ T9872]  ? ip6_setup_cork+0xaaf/0x11c0
[  217.298340][ T9872]  ? __pfx_ip6_dst_lookup_tail+0x10/0x10
[  217.298363][ T9872]  ip6_make_skb+0x31d/0x440
[  217.298387][ T9872]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  217.298413][ T9872]  ? __pfx_ip6_make_skb+0x10/0x10
[  217.298433][ T9872]  ? ip6_sk_dst_lookup_flow+0x8e8/0xab0
[  217.298463][ T9872]  ? __pfx_ip6_sk_dst_lookup_flow+0x10/0x10
[  217.298482][ T9872]  ? register_lock_class+0x54/0x330
[  217.298501][ T9872]  ? udpv6_sendmsg+0x1a95/0x3070
[  217.298534][ T9872]  udpv6_sendmsg+0x216b/0x3070
[  217.298574][ T9872]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  217.298612][ T9872]  ? __pfx_udpv6_sendmsg+0x10/0x10
[  217.298649][ T9872]  ? __lock_acquire+0xad5/0xd80
[  217.298685][ T9872]  ? inet_send_prepare+0x1b7/0x260
[  217.298726][ T9872]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  217.298743][ T9872]  ? inet_send_prepare+0x1b7/0x260
[  217.298767][ T9872]  ? do_raw_spin_unlock+0x13c/0x8b0
[  217.298803][ T9872]  ? inet_send_prepare+0x1b7/0x260
[  217.298843][ T9872]  __sock_sendmsg+0xef/0x270
[  217.298876][ T9872]  ____sys_sendmsg+0x523/0x860
[  217.298909][ T9872]  ? __pfx_____sys_sendmsg+0x10/0x10
[  217.298931][ T9872]  ? __fget_files+0x2a/0x420
[  217.298962][ T9872]  ? __fget_files+0x2a/0x420
[  217.298999][ T9872]  __sys_sendmmsg+0x3a0/0x7b0
[  217.299035][ T9872]  ? __pfx___sys_sendmmsg+0x10/0x10
[  217.299094][ T9872]  ? rcu_read_lock_any_held+0xbb/0x160
[  217.299119][ T9872]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  217.299147][ T9872]  ? vfs_write+0xb29/0xd10
[  217.299177][ T9872]  ? ksys_write+0x24e/0x2d0
[  217.299200][ T9872]  ? __mutex_unlock_slowpath+0x229/0x800
[  217.299251][ T9872]  ? ksys_write+0x275/0x2d0
[  217.299283][ T9872]  __x64_sys_sendmmsg+0xa0/0xb0
[  217.299309][ T9872]  do_syscall_64+0xf3/0x230
[  217.299331][ T9872]  ? clear_bhb_loop+0x45/0xa0
[  217.299354][ T9872]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.299372][ T9872] RIP: 0033:0x7f3c9db8e169
[  217.299389][ T9872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  217.299405][ T9872] RSP: 002b:00007f3c9ea26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  217.299425][ T9872] RAX: ffffffffffffffda RBX: 00007f3c9ddb5fa0 RCX: 00007f3c9db8e169
[  217.299439][ T9872] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 000000000000000a
[  217.299451][ T9872] RBP: 00007f3c9ea26090 R08: 0000000000000000 R09: 0000000000000000
[  217.299463][ T9872] R10: 0000000004004000 R11: 0000000000000246 R12: 0000000000000001
[  217.299475][ T9872] R13: 0000000000000000 R14: 00007f3c9ddb5fa0 R15: 00007fffde4cab78
[  217.299504][ T9872]  </TASK>
[  218.064817][ T9887] pimreg0: tun_chr_ioctl cmd 35108
[  218.083077][   T10] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  219.859150][ T9974] FAULT_INJECTION: forcing a failure.
[  219.859150][ T9974] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  219.905895][ T9974] CPU: 1 UID: 0 PID: 9974 Comm: syz.2.1312 Not tainted 6.15.0-rc1-syzkaller-00374-gac1df712442c #0 PREEMPT(full) 
[  219.905927][ T9974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  219.905939][ T9974] Call Trace:
[  219.905946][ T9974]  <TASK>
[  219.905953][ T9974]  dump_stack_lvl+0x241/0x360
[  219.905985][ T9974]  ? __pfx_dump_stack_lvl+0x10/0x10
[  219.906009][ T9974]  ? __pfx__printk+0x10/0x10
[  219.906045][ T9974]  should_fail_ex+0x424/0x570
[  219.906071][ T9974]  _copy_from_user+0x2d/0xb0
[  219.906092][ T9974]  copy_msghdr_from_user+0xb3/0x580
[  219.906125][ T9974]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  219.906151][ T9974]  ? __fget_files+0x2a/0x420
[  219.906180][ T9974]  ? __fget_files+0x2a/0x420
[  219.906216][ T9974]  __sys_sendmsg+0x20a/0x360
[  219.906243][ T9974]  ? __pfx___sys_sendmsg+0x10/0x10
[  219.906315][ T9974]  ? do_syscall_64+0xb6/0x230
[  219.906338][ T9974]  do_syscall_64+0xf3/0x230
[  219.906358][ T9974]  ? clear_bhb_loop+0x45/0xa0
[  219.906380][ T9974]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.906397][ T9974] RIP: 0033:0x7f8996f8e169
[  219.906413][ T9974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  219.906428][ T9974] RSP: 002b:00007f8997ee1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  219.906449][ T9974] RAX: ffffffffffffffda RBX: 00007f89971b5fa0 RCX: 00007f8996f8e169
[  219.906462][ T9974] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  219.906473][ T9974] RBP: 00007f8997ee1090 R08: 0000000000000000 R09: 0000000000000000
[  219.906484][ T9974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  219.906494][ T9974] R13: 0000000000000000 R14: 00007f89971b5fa0 R15: 00007ffe07da70e8
[  219.906522][ T9974]  </TASK>
[  220.344373][ T9982] 8021q: VLANs not supported on vxcan1
[  220.360002][ T9986] ip6tnl8: entered promiscuous mode
[  220.365434][ T9986] ip6tnl8: entered allmulticast mode
[  220.756473][T10004] __nla_validate_parse: 11 callbacks suppressed
[  220.756494][T10004] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1324'.
[  220.773901][T10004] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1324'.
[  220.784802][T10004] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1324'.
[  220.897837][T10009] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1326'.
[  221.162533][T10017] netlink: 'syz.0.1329': attribute type 2 has an invalid length.
[  221.199946][T10017] : entered promiscuous mode
[  221.311869][T10024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1332'.
[  221.357462][T10024] netlink: 'syz.0.1332': attribute type 2 has an invalid length.
[  221.789206][T10048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1336'.
[  221.819137][T10050] FAULT_INJECTION: forcing a failure.
[  221.819137][T10050] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  221.886017][T10050] CPU: 1 UID: 0 PID: 10050 Comm: syz.4.1337 Not tainted 6.15.0-rc1-syzkaller-00374-gac1df712442c #0 PREEMPT(full) 
[  221.886045][T10050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  221.886057][T10050] Call Trace:
[  221.886064][T10050]  <TASK>
[  221.886072][T10050]  dump_stack_lvl+0x241/0x360
[  221.886105][T10050]  ? __pfx_dump_stack_lvl+0x10/0x10
[  221.886130][T10050]  ? __pfx__printk+0x10/0x10
[  221.886164][T10050]  should_fail_ex+0x424/0x570
[  221.886192][T10050]  _copy_to_user+0x31/0xb0
[  221.886214][T10050]  simple_read_from_buffer+0xc4/0x170
[  221.886244][T10050]  proc_fail_nth_read+0x1ef/0x260
[  221.886265][T10050]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  221.886287][T10050]  ? rw_verify_area+0x246/0x630
[  221.886304][T10050]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  221.886324][T10050]  vfs_read+0x21f/0xb90
[  221.886348][T10050]  ? __pfx___mutex_lock+0x10/0x10
[  221.886369][T10050]  ? __pfx_vfs_read+0x10/0x10
[  221.886391][T10050]  ? __fget_files+0x2a/0x420
[  221.886429][T10050]  ? __fget_files+0x39d/0x420
[  221.886454][T10050]  ? __fget_files+0x2a/0x420
[  221.886489][T10050]  ksys_read+0x19d/0x2d0
[  221.886510][T10050]  ? __pfx_ksys_read+0x10/0x10
[  221.886536][T10050]  ? do_syscall_64+0xb6/0x230
[  221.886560][T10050]  do_syscall_64+0xf3/0x230
[  221.886580][T10050]  ? clear_bhb_loop+0x45/0xa0
[  221.886601][T10050]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.886618][T10050] RIP: 0033:0x7f3c9db8cb7c
[  221.886634][T10050] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  221.886649][T10050] RSP: 002b:00007f3c9ea26030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  221.886668][T10050] RAX: ffffffffffffffda RBX: 00007f3c9ddb5fa0 RCX: 00007f3c9db8cb7c
[  221.886682][T10050] RDX: 000000000000000f RSI: 00007f3c9ea260a0 RDI: 000000000000000b
[  221.886696][T10050] RBP: 00007f3c9ea26090 R08: 0000000000000000 R09: 0000000000000000
[  221.886707][T10050] R10: 0000000004004000 R11: 0000000000000246 R12: 0000000000000001
[  221.886718][T10050] R13: 0000000000000000 R14: 00007f3c9ddb5fa0 R15: 00007fffde4cab78
[  221.886746][T10050]  </TASK>
[  221.996201][    C0] ip6_tnl_xmit_ctl: 9 callbacks suppressed
[  221.996222][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  222.002253][T10051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1336'.
[  222.006055][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  222.166843][T10054] sctp: [Deprecated]: syz.2.1338 (pid 10054) Use of int in maxseg socket option.
[  222.166843][T10054] Use struct sctp_assoc_value instead
[  222.363786][T10060] batadv0: entered promiscuous mode
[  222.381967][T10060] macsec1: entered promiscuous mode
[  222.442363][T10060] batadv0: left promiscuous mode
[  222.792356][T10074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1346'.
[  222.850818][T10074] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1346'.
[  222.902361][T10081] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1349'.
[  223.007701][T10074] xt_CT: No such helper "snmp"
[  223.456195][T10094] netlink: 'syz.3.1348': attribute type 10 has an invalid length.
[  224.006568][T10090] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  224.586083][T10126] FAULT_INJECTION: forcing a failure.
[  224.586083][T10126] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  224.600331][T10126] CPU: 1 UID: 0 PID: 10126 Comm: syz.0.1358 Not tainted 6.15.0-rc1-syzkaller-00374-gac1df712442c #0 PREEMPT(full) 
[  224.600365][T10126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  224.600379][T10126] Call Trace:
[  224.600388][T10126]  <TASK>
[  224.600397][T10126]  dump_stack_lvl+0x241/0x360
[  224.600437][T10126]  ? __pfx_dump_stack_lvl+0x10/0x10
[  224.600466][T10126]  ? __pfx__printk+0x10/0x10
[  224.600509][T10126]  should_fail_ex+0x424/0x570
[  224.600541][T10126]  _copy_from_iter+0x211/0x1c70
[  224.600580][T10126]  ? __build_skb_around+0x247/0x3d0
[  224.600609][T10126]  ? __alloc_skb+0x298/0x480
[  224.600632][T10126]  ? __pfx__copy_from_iter+0x10/0x10
[  224.600667][T10126]  ? __pfx___alloc_skb+0x10/0x10
[  224.600693][T10126]  ? skb_put+0x114/0x1f0
[  224.600721][T10126]  netlink_sendmsg+0x73c/0xcd0
[  224.600758][T10126]  ? __pfx_netlink_sendmsg+0x10/0x10
[  224.600785][T10126]  ? aa_sock_msg_perm+0x91/0x160
[  224.600821][T10126]  ? __pfx_netlink_sendmsg+0x10/0x10
[  224.600841][T10126]  __sock_sendmsg+0x221/0x270
[  224.600876][T10126]  ____sys_sendmsg+0x523/0x860
[  224.600911][T10126]  ? __pfx_____sys_sendmsg+0x10/0x10
[  224.600936][T10126]  ? __fget_files+0x2a/0x420
[  224.600977][T10126]  ? __fget_files+0x2a/0x420
[  224.601018][T10126]  __sys_sendmsg+0x271/0x360
[  224.601050][T10126]  ? __pfx___sys_sendmsg+0x10/0x10
[  224.601136][T10126]  ? do_syscall_64+0xb6/0x230
[  224.601171][T10126]  do_syscall_64+0xf3/0x230
[  224.601194][T10126]  ? clear_bhb_loop+0x45/0xa0
[  224.601220][T10126]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.601241][T10126] RIP: 0033:0x7f9a49d8e169
[  224.601261][T10126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  224.601279][T10126] RSP: 002b:00007f9a4ab3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  224.601301][T10126] RAX: ffffffffffffffda RBX: 00007f9a49fb5fa0 RCX: 00007f9a49d8e169
[  224.601316][T10126] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  224.601328][T10126] RBP: 00007f9a4ab3f090 R08: 0000000000000000 R09: 0000000000000000
[  224.601341][T10126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  224.601352][T10126] R13: 0000000000000000 R14: 00007f9a49fb5fa0 R15: 00007ffe640c1b68
[  224.601384][T10126]  </TASK>
[  224.832100][    C1] ip6_tunnel: ip6tnl8 xmit: Local address not yet configured!
[  225.023050][T10122] ip6tnl9: entered promiscuous mode
[  225.034881][T10122] ip6tnl9: entered allmulticast mode
[  225.042946][   T13] ip6_tunnel: ip6tnl9 xmit: Local address not yet configured!
[  225.076245][   T50] ip6_tunnel: ip6tnl9 xmit: Local address not yet configured!
[  225.081006][   T13] ip6_tunnel: ip6tnl9 xmit: Local address not yet configured!
[  225.176321][   T10] ip6_tunnel: ip6tnl9 xmit: Local address not yet configured!
[  225.198142][    C0] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[  225.254218][T10127] syz.2.1354: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  225.278959][T10127] CPU: 0 UID: 0 PID: 10127 Comm: syz.2.1354 Not tainted 6.15.0-rc1-syzkaller-00374-gac1df712442c #0 PREEMPT(full) 
[  225.278997][T10127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  225.279012][T10127] Call Trace:
[  225.279021][T10127]  <TASK>
[  225.279031][T10127]  dump_stack_lvl+0x241/0x360
[  225.279073][T10127]  ? __pfx_dump_stack_lvl+0x10/0x10
[  225.279103][T10127]  ? __pfx__printk+0x10/0x10
[  225.279131][T10127]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  225.279165][T10127]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  225.279196][T10127]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[  225.279230][T10127]  warn_alloc+0x27c/0x410
[  225.279258][T10127]  ? __pfx_warn_alloc+0x10/0x10
[  225.279288][T10127]  ? xp_alloc_tx_descs+0x67/0xc0
[  225.279309][T10127]  ? __get_vm_area_node+0x1c8/0x2d0
[  225.279339][T10127]  ? __get_vm_area_node+0x25c/0x2d0
[  225.279375][T10127]  __vmalloc_node_range_noprof+0x634/0x1390
[  225.279450][T10127]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  225.279483][T10127]  ? __kasan_kmalloc_large+0x1a/0xa0
[  225.279516][T10127]  ? xp_alloc_tx_descs+0x67/0xc0
[  225.279540][T10127]  __kvmalloc_node_noprof+0x3b2/0x5a0
[  225.279572][T10127]  ? xp_alloc_tx_descs+0x67/0xc0
[  225.279592][T10127]  ? xp_alloc_tx_descs+0x67/0xc0
[  225.279622][T10127]  xp_alloc_tx_descs+0x67/0xc0
[  225.279646][T10127]  xsk_bind+0xcf2/0xfb0
[  225.279689][T10127]  __sys_bind+0x1de/0x290
[  225.279715][T10127]  ? __pfx___sys_bind+0x10/0x10
[  225.279766][T10127]  __x64_sys_bind+0x7a/0x90
[  225.279789][T10127]  do_syscall_64+0xf3/0x230
[  225.279814][T10127]  ? clear_bhb_loop+0x45/0xa0
[  225.279842][T10127]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.279863][T10127] RIP: 0033:0x7f8996f8e169
[  225.279883][T10127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  225.279902][T10127] RSP: 002b:00007f8997e9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  225.279927][T10127] RAX: ffffffffffffffda RBX: 00007f89971b6160 RCX: 00007f8996f8e169
[  225.279942][T10127] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000004
[  225.279956][T10127] RBP: 00007f8997010a68 R08: 0000000000000000 R09: 0000000000000000
[  225.279969][T10127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  225.279982][T10127] R13: 0000000000000000 R14: 00007f89971b6160 R15: 00007ffe07da70e8
[  225.280016][T10127]  </TASK>
[  225.280025][T10127] Mem-Info:
[  225.533001][T10127] active_anon:4842 inactive_anon:0 isolated_anon:0
[  225.533001][T10127]  active_file:2272 inactive_file:38364 isolated_file:0
[  225.533001][T10127]  unevictable:768 dirty:312 writeback:0
[  225.533001][T10127]  slab_reclaimable:10589 slab_unreclaimable:100173
[  225.533001][T10127]  mapped:32358 shmem:1430 pagetables:828
[  225.533001][T10127]  sec_pagetables:0 bounce:0
[  225.533001][T10127]  kernel_misc_reclaimable:0
[  225.533001][T10127]  free:1341960 free_pcp:1201 free_cma:0
[  225.578320][T10127] Node 0 active_anon:19368kB inactive_anon:0kB active_file:9088kB inactive_file:153384kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129432kB dirty:1244kB writeback:0kB shmem:4184kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11796kB pagetables:3312kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  225.611821][T10127] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  225.643709][T10127] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  225.644033][T10148] netlink: 'syz.3.1366': attribute type 10 has an invalid length.
[  225.678340][T10127] lowmem_reserve[]: 0 2487 2487 2487 2487
[  225.685606][T10127] Node 0 DMA32 free:1437984kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:19360kB inactive_anon:0kB active_file:9088kB inactive_file:153292kB unevictable:1536kB writepending:1244kB present:3129332kB managed:2547412kB mlocked:0kB bounce:0kB free_pcp:4648kB local_pcp:3660kB free_cma:0kB
[  225.716744][T10127] lowmem_reserve[]: 0 0 0 0 0
[  225.721645][T10127] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  225.749007][T10127] lowmem_reserve[]: 0 0 0 0 0
[  225.753986][T10127] Node 1 Normal free:3914496kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  225.784896][T10127] lowmem_reserve[]: 0 0 0 0 0
[  225.795447][T10127] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  225.815444][T10127] Node 0 DMA32: 1*4kB (E) 184*8kB (U) 278*16kB (UME) 733*32kB (UME) 841*64kB (UME) 442*128kB (UM) 286*256kB (UME) 191*512kB (UM) 126*1024kB (UME) 15*2048kB (UME) 236*4096kB (UM) = 1437188kB
[  225.844127][T10127] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  225.862271][T10127] Node 1 Normal: 248*4kB (U) 66*8kB (UME) 45*16kB (UME) 198*32kB (UME) 100*64kB (UME) 41*128kB (UME) 22*256kB (UME) 7*512kB (UME) 4*1024kB (UME) 3*2048kB (UE) 946*4096kB (M) = 3914496kB
[  225.881733][T10127] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  225.892141][T10127] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  225.901795][T10127] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  225.911827][T10127] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  225.921517][T10127] 42066 total pagecache pages
[  225.926701][T10127] 0 pages in swap cache
[  225.931420][T10127] Free swap  = 124996kB
[  225.935893][T10127] Total swap = 124996kB
[  225.944960][T10127] 2097051 pages RAM
[  225.950425][T10127] 0 pages HighMem/MovableOnly
[  225.955273][T10127] 428540 pages reserved
[  225.966782][T10127] 0 pages cma reserved
[  226.017212][T10140] batadv0: entered promiscuous mode
[  226.022608][T10140] macsec1: entered promiscuous mode
[  226.075140][T10140] batadv0: left promiscuous mode
[  226.080977][ T5901] ip6_tunnel: ip6tnl9 xmit: Local address not yet configured!
[  226.225638][T10156] __nla_validate_parse: 5 callbacks suppressed
[  226.225666][T10156] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1368'.
[  226.639349][T10179] netlink: 'syz.3.1372': attribute type 13 has an invalid length.
[  226.839090][T10194] ipt_ECN: cannot use operation on non-tcp rule
[  226.881060][T10197] x_tables: ip_tables: osf match: only valid for protocol 6
[  227.139694][T10203] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1379'.
[  227.223874][T10208] FAULT_INJECTION: forcing a failure.
[  227.223874][T10208] name failslab, interval 1, probability 0, space 0, times 0
[  227.224938][T10209] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1380'.
[  227.237242][T10208] CPU: 0 UID: 0 PID: 10208 Comm: syz.0.1381 Not tainted 6.15.0-rc1-syzkaller-00374-gac1df712442c #0 PREEMPT(full) 
[  227.237278][T10208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  227.237293][T10208] Call Trace:
[  227.237302][T10208]  <TASK>
[  227.237312][T10208]  dump_stack_lvl+0x241/0x360
[  227.237372][T10208]  ? __pfx_dump_stack_lvl+0x10/0x10
[  227.237405][T10208]  ? __pfx__printk+0x10/0x10
[  227.237441][T10208]  ? __pfx___might_resched+0x10/0x10
[  227.237475][T10208]  should_fail_ex+0x424/0x570
[  227.237510][T10208]  should_failslab+0xac/0x100
[  227.237542][T10208]  kmem_cache_alloc_node_noprof+0x7d/0x3b0
[  227.237576][T10208]  ? __alloc_skb+0x1c2/0x480
[  227.237608][T10208]  __alloc_skb+0x1c2/0x480
[  227.237639][T10208]  ? __pfx___alloc_skb+0x10/0x10
[  227.237665][T10208]  ? delegate_show+0x500/0x510
[  227.237697][T10208]  ? __pfx_handle_pte_fault+0x10/0x10
[  227.237725][T10208]  alloc_skb_with_frags+0xc3/0x830
[  227.237759][T10208]  ? rcu_is_watching+0x15/0xb0
[  227.237788][T10208]  ? __count_memcg_events+0x1e1/0x3d0
[  227.237851][T10208]  sock_alloc_send_pskb+0x91c/0xa70
[  227.237905][T10208]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  227.237964][T10208]  unix_dgram_sendmsg+0x6d4/0x1ea0
[  227.238010][T10208]  ? aa_sk_perm+0x96f/0xac0
[  227.238046][T10208]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[  227.238075][T10208]  ? __import_iovec+0x3c2/0x830
[  227.238101][T10208]  ? aa_sock_msg_perm+0x91/0x160
[  227.238133][T10208]  ? unix_seqpacket_sendmsg+0x110/0x1e0
[  227.238161][T10208]  ? __pfx_unix_seqpacket_sendmsg+0x10/0x10
[  227.238184][T10208]  __sock_sendmsg+0x221/0x270
[  227.238230][T10208]  ____sys_sendmsg+0x523/0x860
[  227.238269][T10208]  ? __pfx_____sys_sendmsg+0x10/0x10
[  227.238318][T10208]  __sys_sendmmsg+0x3a0/0x7b0
[  227.238363][T10208]  ? __pfx___sys_sendmmsg+0x10/0x10
[  227.238434][T10208]  ? rcu_read_lock_any_held+0xbb/0x160
[  227.238462][T10208]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  227.238496][T10208]  ? vfs_write+0xb29/0xd10
[  227.238532][T10208]  ? ksys_write+0x24e/0x2d0
[  227.238561][T10208]  ? __mutex_unlock_slowpath+0x229/0x800
[  227.238621][T10208]  ? ksys_write+0x275/0x2d0
[  227.238660][T10208]  __x64_sys_sendmmsg+0xa0/0xb0
[  227.238691][T10208]  do_syscall_64+0xf3/0x230
[  227.238718][T10208]  ? clear_bhb_loop+0x45/0xa0
[  227.238744][T10208]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.238766][T10208] RIP: 0033:0x7f9a49d8e169
[  227.238787][T10208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  227.238807][T10208] RSP: 002b:00007f9a4ab1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  227.238832][T10208] RAX: ffffffffffffffda RBX: 00007f9a49fb6080 RCX: 00007f9a49d8e169
[  227.238849][T10208] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003
[  227.238865][T10208] RBP: 00007f9a4ab1e090 R08: 0000000000000000 R09: 0000000000000000
[  227.238879][T10208] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000001
[  227.238893][T10208] R13: 0000000000000001 R14: 00007f9a49fb6080 R15: 00007ffe640c1b68
[  227.238927][T10208]  </TASK>
[  227.388756][T10205] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1380'.
[  227.410402][T10209] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1380'.
[  227.490509][T10211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1383'.
[  227.724456][T10215] netlink: 'syz.2.1382': attribute type 10 has an invalid length.
[  227.756197][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  227.858057][T10227] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1387'.
[  228.020356][T10231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1388'.
[  228.056841][T10231] vlan2: entered promiscuous mode
[  228.064908][T10231] hsr0: entered promiscuous mode
[  228.607679][T10233] IPVS: Error connecting to the multicast addr
[  228.796240][    C0] ip6_tunnel: ip6tnl9 xmit: Local address not yet configured!
[  229.039789][T10250] ip6tnl3: entered promiscuous mode
[  229.061328][T10250] ip6tnl3: entered allmulticast mode
[  229.199327][T10256] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1397'.
[  229.216621][T10256] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1397'.
[  229.304250][T10264] FAULT_INJECTION: forcing a failure.
[  229.304250][T10264] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  229.395645][T10264] CPU: 0 UID: 0 PID: 10264 Comm: syz.4.1393 Not tainted 6.15.0-rc1-syzkaller-00374-gac1df712442c #0 PREEMPT(full) 
[  229.395681][T10264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  229.395694][T10264] Call Trace:
[  229.395702][T10264]  <TASK>
[  229.395712][T10264]  dump_stack_lvl+0x241/0x360
[  229.395749][T10264]  ? __pfx_dump_stack_lvl+0x10/0x10
[  229.395778][T10264]  ? __pfx__printk+0x10/0x10
[  229.395819][T10264]  should_fail_ex+0x424/0x570
[  229.395850][T10264]  _copy_from_user+0x2d/0xb0
[  229.395873][T10264]  copy_msghdr_from_user+0xb3/0x580
[  229.395915][T10264]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  229.395961][T10264]  __sys_sendmmsg+0x361/0x7b0
[  229.396000][T10264]  ? __pfx___sys_sendmmsg+0x10/0x10
[  229.396070][T10264]  ? rcu_read_lock_any_held+0xbb/0x160
[  229.396097][T10264]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  229.396127][T10264]  ? vfs_write+0xb29/0xd10
[  229.396159][T10264]  ? ksys_write+0x24e/0x2d0
[  229.396184][T10264]  ? __mutex_unlock_slowpath+0x229/0x800
[  229.396238][T10264]  ? ksys_write+0x275/0x2d0
[  229.396272][T10264]  __x64_sys_sendmmsg+0xa0/0xb0
[  229.396301][T10264]  do_syscall_64+0xf3/0x230
[  229.396325][T10264]  ? clear_bhb_loop+0x45/0xa0
[  229.396349][T10264]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.396368][T10264] RIP: 0033:0x7f3c9db8e169
[  229.396387][T10264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  229.396404][T10264] RSP: 002b:00007f3c9ea05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  229.396426][T10264] RAX: ffffffffffffffda RBX: 00007f3c9ddb6080 RCX: 00007f3c9db8e169
[  229.396441][T10264] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003
[  229.396455][T10264] RBP: 00007f3c9ea05090 R08: 0000000000000000 R09: 0000000000000000
[  229.396468][T10264] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000001
[  229.396480][T10264] R13: 0000000000000001 R14: 00007f3c9ddb6080 R15: 00007fffde4cab78
[  229.396511][T10264]  </TASK>
[  229.798034][T10274] netlink: 'syz.2.1402': attribute type 10 has an invalid length.
[  229.917088][ T5909] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  229.924945][ T5909] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  229.946962][ T5887] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  229.994407][T10280] netlink: 'syz.0.1404': attribute type 11 has an invalid length.
[  230.036630][   T10] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  230.326600][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  230.636737][   T10] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  230.681190][T10315] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 1, id = 0
[  230.714149][T10318] FAULT_INJECTION: forcing a failure.
[  230.714149][T10318] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  230.751601][T10318] CPU: 0 UID: 0 PID: 10318 Comm: syz.3.1415 Not tainted 6.15.0-rc1-syzkaller-00374-gac1df712442c #0 PREEMPT(full) 
[  230.751634][T10318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  230.751645][T10318] Call Trace:
[  230.751652][T10318]  <TASK>
[  230.751660][T10318]  dump_stack_lvl+0x241/0x360
[  230.751709][T10318]  ? __pfx_dump_stack_lvl+0x10/0x10
[  230.751736][T10318]  ? __pfx__printk+0x10/0x10
[  230.751773][T10318]  should_fail_ex+0x424/0x570
[  230.751803][T10318]  _copy_from_user+0x2d/0xb0
[  230.751825][T10318]  copy_msghdr_from_user+0xb3/0x580
[  230.751861][T10318]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  230.751907][T10318]  __sys_sendmmsg+0x361/0x7b0
[  230.751951][T10318]  ? __pfx___sys_sendmmsg+0x10/0x10
[  230.752011][T10318]  ? rcu_read_lock_any_held+0xbb/0x160
[  230.752038][T10318]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  230.752065][T10318]  ? vfs_write+0xb29/0xd10
[  230.752107][T10318]  ? ksys_write+0x24e/0x2d0
[  230.752130][T10318]  ? __mutex_unlock_slowpath+0x229/0x800
[  230.752179][T10318]  ? ksys_write+0x275/0x2d0
[  230.752209][T10318]  __x64_sys_sendmmsg+0xa0/0xb0
[  230.752234][T10318]  do_syscall_64+0xf3/0x230
[  230.752255][T10318]  ? clear_bhb_loop+0x45/0xa0
[  230.752276][T10318]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.752294][T10318] RIP: 0033:0x7f4225d8e169
[  230.752310][T10318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  230.752326][T10318] RSP: 002b:00007f4226b6a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  230.752345][T10318] RAX: ffffffffffffffda RBX: 00007f4225fb6080 RCX: 00007f4225d8e169
[  230.752359][T10318] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003
[  230.752372][T10318] RBP: 00007f4226b6a090 R08: 0000000000000000 R09: 0000000000000000
[  230.752383][T10318] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000001
[  230.752393][T10318] R13: 0000000000000001 R14: 00007f4225fb6080 R15: 00007ffc47bdf248
[  230.752420][T10318]  </TASK>
[  231.146704][T10331] netlink: 'syz.2.1420': attribute type 10 has an invalid length.
[  231.154776][T10331] macvlan0: entered promiscuous mode
[  231.191727][T10331] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  231.261666][T10334] x_tables: duplicate underflow at hook 1
[  231.581830][T10352] netlink: 'syz.4.1427': attribute type 11 has an invalid length.
[  231.590141][T10352] __nla_validate_parse: 3 callbacks suppressed
[  231.590160][T10352] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1427'.
[  231.647391][T10350] netlink: 'syz.3.1426': attribute type 9 has an invalid length.
[  231.661323][T10355] ip6tnl10: entered promiscuous mode
[  231.667328][T10355] ip6tnl10: entered allmulticast mode
[  231.674821][ T5909] ip6_tunnel: ip6tnl10 xmit: Local address not yet configured!
[  231.716184][T10350] netlink: 203172 bytes leftover after parsing attributes in process `syz.3.1426'.
[  231.735064][ T5901] ip6_tunnel: ip6tnl10 xmit: Local address not yet configured!
[  232.329985][T10377] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1433'.
[  232.339475][T10377] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1433'.
[  232.362394][T10377] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1433'.
[  232.563572][T10379] pim6reg: entered allmulticast mode
[  232.599786][T10379] pim6reg: left allmulticast mode
[  232.691208][T10383] IPVS: Scheduler module ip_vs_sip not found
[  232.789109][T10389] syz_tun: entered allmulticast mode
[  232.833701][T10393] ip6tnl5: entered promiscuous mode
[  232.845902][T10393] ip6tnl5: entered allmulticast mode
[  232.886743][T10389] syz_tun: left allmulticast mode
[  233.013760][T10404] bridge0: entered allmulticast mode
[  233.247028][ T1145] ip6_tnl_xmit_ctl: 4 callbacks suppressed
[  233.247052][ T1145] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  233.274914][ T1145] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  233.285324][ T5887] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  233.438486][   T10] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  233.462610][T10419] FAULT_INJECTION: forcing a failure.
[  233.462610][T10419] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  233.513064][T10419] CPU: 1 UID: 0 PID: 10419 Comm: syz.0.1448 Not tainted 6.15.0-rc1-syzkaller-00374-gac1df712442c #0 PREEMPT(full) 
[  233.513099][T10419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  233.513113][T10419] Call Trace:
[  233.513122][T10419]  <TASK>
[  233.513131][T10419]  dump_stack_lvl+0x241/0x360
[  233.513172][T10419]  ? __pfx_dump_stack_lvl+0x10/0x10
[  233.513203][T10419]  ? __pfx__printk+0x10/0x10
[  233.513246][T10419]  should_fail_ex+0x424/0x570
[  233.513279][T10419]  _copy_from_user+0x2d/0xb0
[  233.513303][T10419]  copy_msghdr_from_user+0xb3/0x580
[  233.513344][T10419]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  233.513403][T10419]  __sys_sendmmsg+0x361/0x7b0
[  233.513443][T10419]  ? __pfx___sys_sendmmsg+0x10/0x10
[  233.513509][T10419]  ? rcu_read_lock_any_held+0xbb/0x160
[  233.513538][T10419]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  233.513569][T10419]  ? vfs_write+0xb29/0xd10
[  233.513603][T10419]  ? ksys_write+0x24e/0x2d0
[  233.513630][T10419]  ? __mutex_unlock_slowpath+0x229/0x800
[  233.513688][T10419]  ? ksys_write+0x275/0x2d0
[  233.513726][T10419]  __x64_sys_sendmmsg+0xa0/0xb0
[  233.513755][T10419]  do_syscall_64+0xf3/0x230
[  233.513779][T10419]  ? clear_bhb_loop+0x45/0xa0
[  233.513804][T10419]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.513824][T10419] RIP: 0033:0x7f9a49d8e169
[  233.513843][T10419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  233.513861][T10419] RSP: 002b:00007f9a4ab1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  233.513883][T10419] RAX: ffffffffffffffda RBX: 00007f9a49fb6080 RCX: 00007f9a49d8e169
[  233.513899][T10419] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003
[  233.513913][T10419] RBP: 00007f9a4ab1e090 R08: 0000000000000000 R09: 0000000000000000
[  233.513927][T10419] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002
[  233.513940][T10419] R13: 0000000000000001 R14: 00007f9a49fb6080 R15: 00007ffe640c1b68
[  233.513973][T10419]  </TASK>
[  233.836448][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  233.996245][T10431] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1452'.
[  234.013013][T10433] ip6tnl3: entered promiscuous mode
[  234.039842][T10433] ip6tnl3: entered allmulticast mode
[  234.089608][   T10] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  234.156165][    C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  234.228524][ T8811] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  234.266421][ T5887] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  234.276262][ T8811] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  234.539862][T10457] FAULT_INJECTION: forcing a failure.
[  234.539862][T10457] name failslab, interval 1, probability 0, space 0, times 0
[  234.562824][T10457] CPU: 0 UID: 0 PID: 10457 Comm: syz.0.1461 Not tainted 6.15.0-rc1-syzkaller-00374-gac1df712442c #0 PREEMPT(full) 
[  234.562854][T10457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  234.562864][T10457] Call Trace:
[  234.562871][T10457]  <TASK>
[  234.562879][T10457]  dump_stack_lvl+0x241/0x360
[  234.562910][T10457]  ? __pfx_dump_stack_lvl+0x10/0x10
[  234.562933][T10457]  ? __pfx__printk+0x10/0x10
[  234.562959][T10457]  ? __pfx___might_resched+0x10/0x10
[  234.562982][T10457]  should_fail_ex+0x424/0x570
[  234.563007][T10457]  should_failslab+0xac/0x100
[  234.563031][T10457]  kmem_cache_alloc_node_noprof+0x7d/0x3b0
[  234.563055][T10457]  ? __alloc_skb+0x1c2/0x480
[  234.563077][T10457]  __alloc_skb+0x1c2/0x480
[  234.563100][T10457]  ? __pfx___alloc_skb+0x10/0x10
[  234.563118][T10457]  ? delegate_show+0x500/0x510
[  234.563141][T10457]  ? __pfx_handle_pte_fault+0x10/0x10
[  234.563161][T10457]  alloc_skb_with_frags+0xc3/0x830
[  234.563181][T10457]  ? __lock_acquire+0xad5/0xd80
[  234.563201][T10457]  ? __lock_acquire+0xad5/0xd80
[  234.563222][T10457]  sock_alloc_send_pskb+0x91c/0xa70
[  234.563260][T10457]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  234.563296][T10457]  unix_dgram_sendmsg+0x6d4/0x1ea0
[  234.563330][T10457]  ? aa_sk_perm+0x96f/0xac0
[  234.563355][T10457]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[  234.563375][T10457]  ? __import_iovec+0x3c2/0x830
[  234.563393][T10457]  ? aa_sock_msg_perm+0x91/0x160
[  234.563416][T10457]  ? unix_seqpacket_sendmsg+0x110/0x1e0
[  234.563436][T10457]  ? __pfx_unix_seqpacket_sendmsg+0x10/0x10
[  234.563453][T10457]  __sock_sendmsg+0x221/0x270
[  234.563481][T10457]  ____sys_sendmsg+0x523/0x860
[  234.563509][T10457]  ? __pfx_____sys_sendmsg+0x10/0x10
[  234.563543][T10457]  __sys_sendmmsg+0x3a0/0x7b0
[  234.563579][T10457]  ? __pfx___sys_sendmmsg+0x10/0x10
[  234.563628][T10457]  ? rcu_read_lock_any_held+0xbb/0x160
[  234.563650][T10457]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  234.563674][T10457]  ? vfs_write+0xb29/0xd10
[  234.563700][T10457]  ? ksys_write+0x24e/0x2d0
[  234.563720][T10457]  ? __mutex_unlock_slowpath+0x229/0x800
[  234.563762][T10457]  ? ksys_write+0x275/0x2d0
[  234.563790][T10457]  __x64_sys_sendmmsg+0xa0/0xb0
[  234.563812][T10457]  do_syscall_64+0xf3/0x230
[  234.563831][T10457]  ? clear_bhb_loop+0x45/0xa0
[  234.563851][T10457]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.563866][T10457] RIP: 0033:0x7f9a49d8e169
[  234.563894][T10457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  234.563907][T10457] RSP: 002b:00007f9a4ab1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  234.563924][T10457] RAX: ffffffffffffffda RBX: 00007f9a49fb6080 RCX: 00007f9a49d8e169
[  234.563936][T10457] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003
[  234.563946][T10457] RBP: 00007f9a4ab1e090 R08: 0000000000000000 R09: 0000000000000000
[  234.563956][T10457] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002
[  234.563965][T10457] R13: 0000000000000001 R14: 00007f9a49fb6080 R15: 00007ffe640c1b68
[  234.563988][T10457]  </TASK>
[  234.949100][T10463] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1465'.
[  235.101473][T10462] bond2: entered promiscuous mode
[  235.106668][T10462] bond2: entered allmulticast mode
[  235.112376][T10462] 8021q: adding VLAN 0 to HW filter on device bond2
[  235.294950][T10471] ip6tnl4: entered promiscuous mode
[  235.324133][T10471] ip6tnl4: entered allmulticast mode
[  236.094712][T10498] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1477'.
[  236.207894][T10501] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20002
[  236.235228][T10505] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1478'.
[  236.489573][T10508] 8021q: adding VLAN 0 to HW filter on device bond2
[  236.575816][T10508] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1479'.
[  236.659737][T10520] netlink: 'syz.2.1480': attribute type 10 has an invalid length.
[  236.782623][T10529] netlink: 'syz.1.1485': attribute type 10 has an invalid length.
[  236.849120][T10529] tipc: Resetting bearer <eth:batadv0>
[  236.887955][T10529] 8021q: adding VLAN 0 to HW filter on device batadv0
[  236.899689][T10529] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  236.932112][T10533] tipc: Resetting bearer <eth:batadv0>
[  236.952626][T10533] bond0: entered promiscuous mode
[  236.954282][T10517] netlink: 'syz.4.1481': attribute type 10 has an invalid length.
[  236.958449][T10533] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  236.973641][T10533] batadv0: entered promiscuous mode
[  237.135216][T10549] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1488'.
[  237.372826][T10535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  237.442648][T10562] netlink: 'syz.3.1490': attribute type 1 has an invalid length.
[  237.456159][T10562] netlink: 'syz.3.1490': attribute type 3 has an invalid length.
[  237.463965][T10562] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1490'.
[  237.525762][T10565] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1492'.
[  237.668961][T10572] xt_ecn: cannot match TCP bits for non-tcp packets
[  237.875741][T10584] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1500'.
[  237.900853][T10584] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1500'.
[  237.916364][T10584] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1500'.
[  238.111698][T10588] netlink: 'syz.3.1501': attribute type 10 has an invalid length.
[  238.256165][T10601] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1506'.
[  238.476164][    C0] ip6_tnl_xmit_ctl: 30 callbacks suppressed
[  238.476193][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  238.627094][T10613] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1512'.
[  238.639044][T10613] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1512'.
[  238.654447][T10613] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1512'.
[  238.750050][T10618] bond3: entered promiscuous mode
[  238.755744][T10618] 8021q: adding VLAN 0 to HW filter on device bond3
[  238.813934][T10618] veth3: entered promiscuous mode
[  238.820327][T10618] bond3: (slave veth3): Enslaving as an active interface with an up link
[  238.913228][T10618] geneve2: entered promiscuous mode
[  239.406773][T10641] xt_nat: multiple ranges no longer supported
[  239.498213][T10648] FAULT_INJECTION: forcing a failure.
[  239.498213][T10648] name failslab, interval 1, probability 0, space 0, times 0
[  239.526081][T10648] CPU: 0 UID: 0 PID: 10648 Comm: syz.4.1522 Not tainted 6.15.0-rc1-syzkaller-00374-gac1df712442c #0 PREEMPT(full) 
[  239.526118][T10648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  239.526132][T10648] Call Trace:
[  239.526141][T10648]  <TASK>
[  239.526151][T10648]  dump_stack_lvl+0x241/0x360
[  239.526190][T10648]  ? __pfx_dump_stack_lvl+0x10/0x10
[  239.526220][T10648]  ? __pfx__printk+0x10/0x10
[  239.526253][T10648]  ? __pfx___might_resched+0x10/0x10
[  239.526283][T10648]  should_fail_ex+0x424/0x570
[  239.526313][T10648]  should_failslab+0xac/0x100
[  239.526344][T10648]  kmem_cache_alloc_node_noprof+0x7d/0x3b0
[  239.526394][T10648]  ? __alloc_skb+0x1c2/0x480
[  239.526421][T10648]  __alloc_skb+0x1c2/0x480
[  239.526450][T10648]  ? __pfx___alloc_skb+0x10/0x10
[  239.526472][T10648]  ? delegate_show+0x500/0x510
[  239.526494][T10648]  ? _raw_spin_unlock_irqrestore+0xde/0x140
[  239.526527][T10648]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  239.526560][T10648]  ? __pfx_handle_pte_fault+0x10/0x10
[  239.526584][T10648]  alloc_skb_with_frags+0xc3/0x830
[  239.526610][T10648]  ? __lock_acquire+0xad5/0xd80
[  239.526635][T10648]  ? __lock_acquire+0xad5/0xd80
[  239.526661][T10648]  sock_alloc_send_pskb+0x91c/0xa70
[  239.526709][T10648]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  239.526755][T10648]  unix_dgram_sendmsg+0x6d4/0x1ea0
[  239.526796][T10648]  ? aa_sk_perm+0x96f/0xac0
[  239.526835][T10648]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[  239.526861][T10648]  ? __import_iovec+0x3c2/0x830
[  239.526884][T10648]  ? aa_sock_msg_perm+0x91/0x160
[  239.526912][T10648]  ? unix_seqpacket_sendmsg+0x110/0x1e0
[  239.526938][T10648]  ? __pfx_unix_seqpacket_sendmsg+0x10/0x10
[  239.526958][T10648]  __sock_sendmsg+0x221/0x270
[  239.526994][T10648]  ____sys_sendmsg+0x523/0x860
[  239.527029][T10648]  ? __pfx_____sys_sendmsg+0x10/0x10
[  239.527072][T10648]  __sys_sendmmsg+0x3a0/0x7b0
[  239.527111][T10648]  ? __pfx___sys_sendmmsg+0x10/0x10
[  239.527174][T10648]  ? rcu_read_lock_any_held+0xbb/0x160
[  239.527201][T10648]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  239.527230][T10648]  ? vfs_write+0xb29/0xd10
[  239.527263][T10648]  ? ksys_write+0x24e/0x2d0
[  239.527288][T10648]  ? __mutex_unlock_slowpath+0x229/0x800
[  239.527342][T10648]  ? ksys_write+0x275/0x2d0
[  239.527377][T10648]  __x64_sys_sendmmsg+0xa0/0xb0
[  239.527405][T10648]  do_syscall_64+0xf3/0x230
[  239.527428][T10648]  ? clear_bhb_loop+0x45/0xa0
[  239.527452][T10648]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.527472][T10648] RIP: 0033:0x7f3c9db8e169
[  239.527492][T10648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  239.527510][T10648] RSP: 002b:00007f3c9ea05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  239.527532][T10648] RAX: ffffffffffffffda RBX: 00007f3c9ddb6080 RCX: 00007f3c9db8e169
[  239.527547][T10648] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003
[  239.527561][T10648] RBP: 00007f3c9ea05090 R08: 0000000000000000 R09: 0000000000000000
[  239.527573][T10648] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002
[  239.527586][T10648] R13: 0000000000000001 R14: 00007f3c9ddb6080 R15: 00007fffde4cab78
[  239.527616][T10648]  </TASK>
[  239.806628][   T50] IPVS: starting estimator thread 0...
[  239.816021][T10653] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  239.891119][T10663] sctp: [Deprecated]: syz.3.1525 (pid 10663) Use of int in maxseg socket option.
[  239.891119][T10663] Use struct sctp_assoc_value instead
[  239.916240][    C0] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[  239.981186][T10661] IPVS: using max 24 ests per chain, 57600 per kthread
[  240.371930][T10678] IPv6: sit1: Disabled Multicast RS
[  240.396308][    C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  240.448780][T10678] gtp0: entered promiscuous mode
[  240.466615][T10678] gtp0: entered allmulticast mode
[  240.535520][T10683] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  241.836286][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  242.244859][T10743] pim6reg: entered allmulticast mode
[  242.333772][T10746] __nla_validate_parse: 3 callbacks suppressed
[  242.333798][T10746] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1552'.
[  242.367020][T10746] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1552'.
[  242.380701][T10746] netlink: 'syz.1.1552': attribute type 4 has an invalid length.
[  242.456963][T10744] netlink: 'syz.0.1549': attribute type 10 has an invalid length.
[  242.651644][T10757] IPVS: set_ctl: invalid protocol: 103 0.0.0.0:20000
[  243.446579][T10799] netlink: 356 bytes leftover after parsing attributes in process `syz.3.1569'.
[  243.457068][T10799] netlink: 356 bytes leftover after parsing attributes in process `syz.3.1569'.
[  243.590618][T10805] IPVS: length: 221 != 24
[  243.595607][T10803] macsec1: entered promiscuous mode
[  243.638489][T10803] batadv0: entered promiscuous mode
[  243.689102][T10803] batadv0: left promiscuous mode
[  243.966560][T10826] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1581'.
[  244.006230][T10823] netlink: 'syz.3.1580': attribute type 1 has an invalid length.
[  244.014483][T10823] netlink: 'syz.3.1580': attribute type 2 has an invalid length.
[  244.023256][T10826] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1581'.
[  244.066196][T10823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1580'.
[  244.089930][T10826] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1581'.
[  244.406176][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  245.046117][    C1] ip6_tunnel: ip6tnl10 xmit: Local address not yet configured!
[  245.057701][T10867] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1591'.
[  245.365784][T10873] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1594'.
[  245.676910][    C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
Connection to 10.128.1.55 closed by remote host.
[  246.956190][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  247.596288][    C1] ip6_tunnel: ip6tnl8 xmit: Local address not yet configured!
[  248.729605][ T1145] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  248.818778][ T1145] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  248.870711][ T1145] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  248.886166][    C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  248.930312][ T1145] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  250.046679][ T1145] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  250.060910][ T1145] bond0 (unregistering): Released all slaves
[  250.181449][ T1145] bond1 (unregistering): Released all slaves
[  250.306926][ T1145] bond2 (unregistering): Released all slaves
[  250.396085][ T1145] tipc: Disabling bearer <eth:batadv0>
[  250.409057][ T1145] tipc: Left network mode
[  250.435554][ T1145] IPVS: stopping backup sync thread 9205 ...
[  250.577163][ T1145] hsr_slave_0: left promiscuous mode
[  250.583215][ T1145] hsr_slave_1: left promiscuous mode
[  250.590330][ T1145] 
[  250.592688][ T1145] ======================================================
[  250.599720][ T1145] WARNING: possible circular locking dependency detected
[  250.606750][ T1145] 6.15.0-rc1-syzkaller-00374-gac1df712442c #0 Not tainted
[  250.613856][ T1145] ------------------------------------------------------
[  250.620904][ T1145] kworker/u8:6/1145 is trying to acquire lock:
[  250.627065][ T1145] ffff888027bb2768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_netdev_notifier_call+0x1b3/0x1430
[  250.637711][ T1145] 
[  250.637711][ T1145] but task is already holding lock:
[  250.645082][ T1145] ffff888079564d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2500
[  250.656677][ T1145] 
[  250.656677][ T1145] which lock already depends on the new lock.
[  250.656677][ T1145] 
[  250.667095][ T1145] 
[  250.667095][ T1145] the existing dependency chain (in reverse order) is:
[  250.676121][ T1145] 
[  250.676121][ T1145] -> #3 (&dev_instance_lock_key#3){+.+.}-{4:4}:
[  250.684577][ T1145]        lock_acquire+0x116/0x2f0
[  250.689600][ T1145]        __mutex_lock+0x1a5/0x10c0
[  250.694706][ T1145]        xsk_bind+0x2fd/0xfb0
[  250.699409][ T1145]        __sys_bind+0x1de/0x290
[  250.704267][ T1145]        __x64_sys_bind+0x7a/0x90
[  250.709290][ T1145]        do_syscall_64+0xf3/0x230
[  250.714318][ T1145]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.720737][ T1145] 
[  250.720737][ T1145] -> #2 (&xs->mutex){+.+.}-{4:4}:
[  250.727951][ T1145]        lock_acquire+0x116/0x2f0
[  250.732969][ T1145]        __mutex_lock+0x1a5/0x10c0
[  250.738080][ T1145]        xsk_notifier+0xcf/0x230
[  250.743035][ T1145]        notifier_call_chain+0x1a5/0x3f0
[  250.748684][ T1145]        unregister_netdevice_many_notify+0x1572/0x2500
[  250.755659][ T1145]        rtnl_newlink_create+0x90b/0xc30
[  250.761423][ T1145]        rtnl_newlink+0x18b0/0x1fe0
[  250.766647][ T1145]        rtnetlink_rcv_msg+0x80f/0xd70
[  250.772125][ T1145]        netlink_rcv_skb+0x208/0x480
[  250.777431][ T1145]        netlink_unicast+0x7f8/0x9a0
[  250.782742][ T1145]        netlink_sendmsg+0x8c3/0xcd0
[  250.788028][ T1145]        __sock_sendmsg+0x221/0x270
[  250.793235][ T1145]        ____sys_sendmsg+0x523/0x860
[  250.798543][ T1145]        __sys_sendmsg+0x271/0x360
[  250.803692][ T1145]        do_syscall_64+0xf3/0x230
[  250.808720][ T1145]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.815156][ T1145] 
[  250.815156][ T1145] -> #1 (&net->xdp.lock){+.+.}-{4:4}:
[  250.822767][ T1145]        lock_acquire+0x116/0x2f0
[  250.827818][ T1145]        __mutex_lock+0x1a5/0x10c0
[  250.832939][ T1145]        xsk_notifier+0x8b/0x230
[  250.837872][ T1145]        notifier_call_chain+0x1a5/0x3f0
[  250.843510][ T1145]        unregister_netdevice_many_notify+0x1572/0x2500
[  250.850473][ T1145]        unregister_netdevice_queue+0x383/0x400
[  250.856731][ T1145]        _cfg80211_unregister_wdev+0x163/0x590
[  250.862918][ T1145]        ieee80211_remove_interfaces+0x4f1/0x700
[  250.869251][ T1145]        ieee80211_unregister_hw+0x5d/0x2c0
[  250.875144][ T1145]        mac80211_hwsim_del_radio+0x2c6/0x4c0
[  250.881217][ T1145]        hwsim_exit_net+0x5c3/0x670
[  250.886416][ T1145]        ops_undo_list+0x3f6/0x8b0
[  250.891525][ T1145]        cleanup_net+0x530/0x940
[  250.896477][ T1145]        process_scheduled_works+0xac3/0x18e0
[  250.902605][ T1145]        worker_thread+0x870/0xd50
[  250.907745][ T1145]        kthread+0x7b7/0x940
[  250.912339][ T1145]        ret_from_fork+0x4b/0x80
[  250.917275][ T1145]        ret_from_fork_asm+0x1a/0x30
[  250.922560][ T1145] 
[  250.922560][ T1145] -> #0 (&rdev->wiphy.mtx){+.+.}-{4:4}:
[  250.930294][ T1145]        validate_chain+0xa69/0x24e0
[  250.935608][ T1145]        __lock_acquire+0xad5/0xd80
[  250.940807][ T1145]        lock_acquire+0x116/0x2f0
[  250.945873][ T1145]        __mutex_lock+0x1a5/0x10c0
[  250.951047][ T1145]        cfg80211_netdev_notifier_call+0x1b3/0x1430
[  250.957657][ T1145]        notifier_call_chain+0x1a5/0x3f0
[  250.963317][ T1145]        __dev_close_many+0x15d/0x760
[  250.968706][ T1145]        dev_close_many+0x250/0x4c0
[  250.973902][ T1145]        unregister_netdevice_many_notify+0x628/0x2500
[  250.980764][ T1145]        default_device_exit_batch+0x7ff/0x880
[  250.986917][ T1145]        ops_undo_list+0x47f/0x8b0
[  250.992022][ T1145]        cleanup_net+0x530/0x940
[  250.996968][ T1145]        process_scheduled_works+0xac3/0x18e0
[  251.003059][ T1145]        worker_thread+0x870/0xd50
[  251.008176][ T1145]        kthread+0x7b7/0x940
[  251.012802][ T1145]        ret_from_fork+0x4b/0x80
[  251.017752][ T1145]        ret_from_fork_asm+0x1a/0x30
[  251.023044][ T1145] 
[  251.023044][ T1145] other info that might help us debug this:
[  251.023044][ T1145] 
[  251.033290][ T1145] Chain exists of:
[  251.033290][ T1145]   &rdev->wiphy.mtx --> &xs->mutex --> &dev_instance_lock_key#3
[  251.033290][ T1145] 
[  251.046811][ T1145]  Possible unsafe locking scenario:
[  251.046811][ T1145] 
[  251.054403][ T1145]        CPU0                    CPU1
[  251.059793][ T1145]        ----                    ----
[  251.065157][ T1145]   lock(&dev_instance_lock_key#3);
[  251.070455][ T1145]                                lock(&xs->mutex);
[  251.076959][ T1145]                                lock(&dev_instance_lock_key#3);
[  251.084705][ T1145]   lock(&rdev->wiphy.mtx);
[  251.089211][ T1145] 
[  251.089211][ T1145]  *** DEADLOCK ***
[  251.089211][ T1145] 
[  251.097367][ T1145] 5 locks held by kworker/u8:6/1145:
[  251.102713][ T1145]  #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0
[  251.113715][ T1145]  #1: ffffc90003bc7c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0
[  251.124275][ T1145]  #2: ffffffff900f1b50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x100/0x940
[  251.133683][ T1145]  #3: ffffffff900fe688 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xde/0x880
[  251.143694][ T1145]  #4: ffff888079564d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2500
[  251.155754][ T1145] 
[  251.155754][ T1145] stack backtrace:
[  251.161646][ T1145] CPU: 1 UID: 0 PID: 1145 Comm: kworker/u8:6 Not tainted 6.15.0-rc1-syzkaller-00374-gac1df712442c #0 PREEMPT(full) 
[  251.161668][ T1145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  251.161679][ T1145] Workqueue: netns cleanup_net
[  251.161712][ T1145] Call Trace:
[  251.161720][ T1145]  <TASK>
[  251.161727][ T1145]  dump_stack_lvl+0x241/0x360
[  251.161751][ T1145]  ? __pfx_dump_stack_lvl+0x10/0x10
[  251.161770][ T1145]  ? __pfx__printk+0x10/0x10
[  251.161791][ T1145]  ? print_lock+0x171/0x1a0
[  251.161809][ T1145]  print_circular_bug+0x2e1/0x300
[  251.161829][ T1145]  check_noncircular+0x142/0x160
[  251.161850][ T1145]  validate_chain+0xa69/0x24e0
[  251.161881][ T1145]  __lock_acquire+0xad5/0xd80
[  251.161899][ T1145]  lock_acquire+0x116/0x2f0
[  251.161912][ T1145]  ? cfg80211_netdev_notifier_call+0x1b3/0x1430
[  251.161939][ T1145]  __mutex_lock+0x1a5/0x10c0
[  251.161955][ T1145]  ? cfg80211_netdev_notifier_call+0x1b3/0x1430
[  251.161977][ T1145]  ? validate_chain+0x8a7/0x24e0
[  251.161997][ T1145]  ? cfg80211_netdev_notifier_call+0x1b3/0x1430
[  251.162018][ T1145]  ? __pfx___mutex_lock+0x10/0x10
[  251.162041][ T1145]  cfg80211_netdev_notifier_call+0x1b3/0x1430
[  251.162066][ T1145]  ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10
[  251.162090][ T1145]  ? __lock_acquire+0xad5/0xd80
[  251.162104][ T1145]  ? do_raw_spin_lock+0x151/0x370
[  251.162133][ T1145]  ? inetdev_event+0x4fb/0x1740
[  251.162153][ T1145]  ? igmp_netdev_event+0x7c/0x770
[  251.162172][ T1145]  notifier_call_chain+0x1a5/0x3f0
[  251.162193][ T1145]  __dev_close_many+0x15d/0x760
[  251.162206][ T1145]  ? __mutex_lock+0x380/0x10c0
[  251.162221][ T1145]  ? kthread+0x7b7/0x940
[  251.162240][ T1145]  ? __pfx___dev_close_many+0x10/0x10
[  251.162257][ T1145]  dev_close_many+0x250/0x4c0
[  251.162272][ T1145]  ? __pfx_dev_close_many+0x10/0x10
[  251.162284][ T1145]  ? __lock_acquire+0xad5/0xd80
[  251.162301][ T1145]  unregister_netdevice_many_notify+0x628/0x2500
[  251.162325][ T1145]  ? lockdep_hardirqs_on+0x9d/0x150
[  251.162340][ T1145]  ? __local_bh_enable_ip+0x168/0x200
[  251.162354][ T1145]  ? batadv_tt_local_remove+0x119/0x230
[  251.162377][ T1145]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  251.162390][ T1145]  ? batadv_tt_local_remove+0x119/0x230
[  251.162412][ T1145]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  251.162437][ T1145]  ? unregister_netdevice_queue+0x2c4/0x400
[  251.162459][ T1145]  ? batadv_meshif_destroy_netlink+0x1e6/0x270
[  251.162480][ T1145]  default_device_exit_batch+0x7ff/0x880
[  251.162499][ T1145]  ? __pfx_default_device_exit_batch+0x10/0x10
[  251.162515][ T1145]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[  251.162539][ T1145]  ? cfg802154_pernet_exit+0xc3/0xe0
[  251.162561][ T1145]  ? __pfx_default_device_exit_batch+0x10/0x10
[  251.162576][ T1145]  ops_undo_list+0x47f/0x8b0
[  251.162593][ T1145]  ? __pfx_ops_undo_list+0x10/0x10
[  251.162626][ T1145]  cleanup_net+0x530/0x940
[  251.162641][ T1145]  ? __pfx_cleanup_net+0x10/0x10
[  251.162658][ T1145]  ? process_scheduled_works+0x9cb/0x18e0
[  251.162674][ T1145]  process_scheduled_works+0xac3/0x18e0
[  251.162698][ T1145]  ? __pfx_process_scheduled_works+0x10/0x10
[  251.162717][ T1145]  ? assign_work+0x367/0x3d0
[  251.162732][ T1145]  worker_thread+0x870/0xd50
[  251.162753][ T1145]  ? __kthread_parkme+0x1a8/0x200
[  251.162770][ T1145]  ? __pfx_worker_thread+0x10/0x10
[  251.162786][ T1145]  kthread+0x7b7/0x940
[  251.162805][ T1145]  ? __pfx_worker_thread+0x10/0x10
[  251.162820][ T1145]  ? __pfx_kthread+0x10/0x10
[  251.162838][ T1145]  ? __pfx_kthread+0x10/0x10
[  251.162855][ T1145]  ? __pfx_kthread+0x10/0x10
[  251.162878][ T1145]  ? __pfx_kthread+0x10/0x10
[  251.162896][ T1145]  ? _raw_spin_unlock_irq+0x23/0x50
[  251.162916][ T1145]  ? lockdep_hardirqs_on+0x9d/0x150
[  251.162930][ T1145]  ? __pfx_kthread+0x10/0x10
[  251.162948][ T1145]  ret_from_fork+0x4b/0x80
[  251.162962][ T1145]  ? __pfx_kthread+0x10/0x10
[  251.162980][ T1145]  ret_from_fork_asm+0x1a/0x30
[  251.162998][ T1145]  </TASK>
[  251.466270][    C0] ip6_tunnel: ip6tnl9 xmit: Local address not yet configured!
[  251.550964][ T1145] pim6reg (unregistering): left allmulticast mode
[  253.356386][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  255.916220][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  255.919263][ T1299] ieee802154 phy1 wpan1: encryption failed: -22