last executing test programs:

8.315761305s ago: executing program 2 (id=2829):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x60, r3, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x60}}, 0x800)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_blackhole={0xe}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x0, 0x0, 0x7}}, {0x4}}]}]}, 0x58}}, 0x0)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x1, 0xb, 0x5, @vifc_lcl_ifindex=r4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x12}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

8.103941819s ago: executing program 2 (id=2832):
socket$l2tp(0x2, 0x2, 0x73)
r0 = socket$l2tp(0x2, 0x2, 0x73)
close(r0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0xf, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x703283d8d4b5ce77}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ppoll(&(0x7f0000000900)=[{r2}], 0x1, &(0x7f0000000940)={0x77359400}, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000011c0)={&(0x7f0000000040)='hrtimer_init\x00', r3}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
unshare(0x22020400)
r6 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r6, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)

7.044336949s ago: executing program 2 (id=2841):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e00)={0x44c, 0x19, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x77, 0x7, 0x1, 0x0, "2117a3a0ca6bead4b2affca81cb36d623843a09caac7c60cc10db68f9bd1302e297a212d278947f6c5f84380ea54538713c854eca55bc10a4cbb5c3dc9bde47d5b40f3a48f7f76ed821b47bfbf5ce8d41300b68af5acb031c11fbbadd121be33fad0718050f676454bed7aee1101e5e42c1945"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x38c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x9}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x6}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, {0x64, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x800}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x5}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_HASH_TYPE={0x8}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x400}]}}}, {0x2a4, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x294, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x280, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3b, 0x1, "bd93bb696909a1f0e79425a13fa96f6bffdcd69f2c096342b65ba1f3e57b0aabb7bd805761eb2d5b1f5f853ca60b83c462199290b26272"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xec, 0x1, "583ecddef460379091079a68f7c8e774126f889e2dc5a12d8f577da9a40e4711728d9916d58d3f59085ec828025c0847c5047b5966a3603055243f326bc685072532d4c5e60f35b360c12bfc2c5ce236db91b56b690304e28e3a7466397425968562a96b535a3f90c87f39190cbe61501f0b0f4570eff809c862705a4cd579ed3217d185844a24e91f9c6b9e141cc9ab7f47342e847a20de62dd1360a212925decebac25e18aaccc820d42abe477e89d35dcb0adcf1aa726cba6af46731b533aa4ec2004237c2601fb4ab63ede7591919ffeb4bffe99125e2f00c2df96e5b05758fc8fdac0aac5a6"}, @NFTA_DATA_VALUE={0x3f, 0x1, "2c1c05dbce890025dc9d41dc53cd453fef09750aa440b81aa16eb655d37bd6919d99ecd5cf04f417bab86cb16a933e83942d0df5ef7c38b2811e46"}, @NFTA_DATA_VALUE={0x30, 0x1, "23c6f65742969be15ef9549d09f591150e54fbc2287b2064bfe292822bb7c23572db7b5ff3ba8c83daa38fc2"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x62, 0x1, "6e8e38cf062b1b46f03b405ecd57601d1cc8bd5e83ecb76ef7150722d542169d2c9fc9e2abac68e0ba0a8a474b78287738c38f0a0ecf828ae8eab05d8bb4a029266dddddd72ae302c42c52da0b721c03ebbc1ffcbc3b44fcc4d201331e27"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RANGE_SREG={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x44c}}, 0x0)
unshare(0x62040200)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010100}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x0, 0x2, 0x3, 0x0, 0x2}, 0x9c)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r3, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
writev(r4, &(0x7f0000000480)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000180)="050000000e80006558", 0x9}, {&(0x7f0000000280)="4cdabfd01f55", 0x6}], 0x3)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0)
close(0xffffffffffffffff)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310)
socket$netlink(0x10, 0x3, 0x2)
r6 = socket$kcm(0x11, 0x200000000000002, 0x300)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB], &(0x7f0000000300)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000000)=r7, 0x4)
r8 = socket$netlink(0x10, 0x3, 0x4)
write(r8, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

5.83041926s ago: executing program 2 (id=2850):
r0 = socket$l2tp(0x2, 0x2, 0x73)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="180200000000000000000000000003f385000000170000ff0700000007000000d65c321f20e8e6b9afb4fa4dd103f2fe83a94250bc9a891e1cba87bb0cfb910f1dfe66f766f57360f7d9c3216c4f4c1284b632e6c55cb049547452c737feba4b55d1d70e0723ede142514534a24a04f30bcafd38518ccc0591a8df4687a4dc0affce04e8d620913cbb64754248b55375fb273400ac867d920eb8d8b4c9d2b4c294d38e5169339a216526803aec7730dfd3b95ef9f2a3aa9f"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000002000000000000000000000000000000000000004e48e75a8c10dd256f14ad38499ce48d007f24191dc71401f475bd19f0f7391bdd8858dfafa7879c4a7c3fbb8b5738c9de402b301e54ea21b3e80d46cc91524e6929d261c6aff97fce5fb3e420b24e425e817387b816c8345e4e46b30033c11d01e69e78a7096e34e46f13b4637fcbf977ec99508aee57bccb0ae1cbc66f21"], 0x48)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r3, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800060000000000080005"], 0xac}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe40, 0x0, 0x0, 0x0}, 0x48)
r4 = socket$l2tp(0x2, 0x2, 0x73)
close(r4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000007e", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0001000008000000b702000014000000b7030000000000008500000083000000bf090000000000df46090100000000009500000000000000bf91000000000000b702000077ceb5d48500000084000000b70000000000000095000000000000009ee883a3b43b76b9040699d7597ecc8280fe84cd869d0014c066c3acab62961ec8"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = accept4$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000200)=0x10, 0x80800)
ppoll(&(0x7f0000000900)=[{r6}], 0x1, &(0x7f0000000940)={0x77359400}, 0x0, 0x0)
ioctl$SIOCGETSGCNT_IN6(r8, 0x89e1, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @broadcast}, @loopback})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000011c0)={&(0x7f0000000040)='hrtimer_init\x00', r7}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000a00)=ANY=[@ANYBLOB="0000000018110000643b39d652abd1c5e5ffffff1df6d17c67d4654b853fd0f00f289d9c3e188d73a035c97172ea571c8ca6eddcdf86b7432ec0ad94177ce9fd914191b172a766d94178a95dbb", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10)
unshare(0x22020400)
r11 = socket(0x40000000015, 0x5, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r11, 0x0, 0x0)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x10)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
ppoll(&(0x7f0000000500)=[{r9}], 0x1, 0x0, 0x0, 0x0)

5.62384674s ago: executing program 1 (id=2854):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000012c0)={0x2, 'bond0\x00', 0x3}, 0x18) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, 0x0, &(0x7f00000000c0)=0xff8d) (async)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0)
sendfile(r3, r3, 0x0, 0x1) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f00000001c0), 0x12)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

5.448301254s ago: executing program 1 (id=2855):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x7, 0xf}}]}}]}, 0x3c}}, 0x0)

5.448035849s ago: executing program 3 (id=2856):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x23d}}, 0x0) (fail_nth: 6)

5.033317403s ago: executing program 1 (id=2857):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r1, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_mreqn(r3, 0x0, 0xb, &(0x7f0000000000)={@multicast2, @multicast2}, &(0x7f0000000040)=0x1)
sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1, 0x0, 0x0, 0x801}, 0x4000045)
accept4(r1, 0x0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a0f22b0e9c3a5f92e3902463142907fbcbf23dc58204011cdbf7b14c75f60ddf161e61b23c10c01ca929948a410f1fef115184baa2177b1b52a64938827906b8d296dcee30a52dedf9", @ANYRES32=0x0], 0x18}}, 0x4004)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xc}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
socket(0x3, 0x2, 0x100)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2000001, 0x30, r0, 0x65cb000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000001000000300000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000024736100000000000020e04d800b00010062726964676500fa100002805a0000000000000000000000b51c50abedf5cb31d40459b747f47c40914682481b1d67dc39951c2a2700f06f9e48153c4d8708457ff8cd5f46db7fddcb525a324c0000cb530000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000700)={'bond0\x00'})
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0x13, 0x2, 0x3, 0x2c, 0x0, 0x70bd29, 0x25dfdbff, [@sadb_lifetime={0x4, 0x4, 0xffffffff, 0x80000001, 0xfe, 0x3}, @sadb_sa={0x2, 0x1, 0x4d6, 0x24, 0x1, 0x5f, 0x1, 0x1}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e22}, @sadb_x_sec_ctx={0x21, 0x18, 0x10, 0xc, 0xfa, "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"}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e23}]}, 0x160}}, 0x20000)
r8 = openat$cgroup(r4, &(0x7f0000000580)='syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r8, &(0x7f0000000600)='memory.stat\x00', 0x0, 0x0)
sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d800000018007bf6e00212ba0d8105040a000000000f040b067c55a1bc0009001e0006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a288747f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d345ef464095cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3099ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)

4.8439267s ago: executing program 3 (id=2859):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'veth0\x00', <r1=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="180800000000000000000000000000001812", @ANYRES32, @ANYBLOB="0000000000000000b7030000ffffffc0850000000c000000b7070000000000009500df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce2200000000"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r3 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r3, &(0x7f0000000040)="d0b4163e1a0a0000000000000000f9", 0xf, 0x40010, &(0x7f0000000000)={0x11, 0x7, r1, 0x1, 0x70, 0x6, @local}, 0x14)

4.843602531s ago: executing program 2 (id=2860):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r0, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x77}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000004}, 0x800)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010040000000000002034400000003000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0)

4.508973629s ago: executing program 2 (id=2861):
socket$packet(0x11, 0x3, 0x300)
socket$tipc(0x1e, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, 0x0, 0x0) (async)
bind$inet6(r0, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffbffaf, &(0x7f0000000040)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) (async)
sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffbffaf, &(0x7f0000000040)={0xa, 0x4e20, 0x8, @loopback}, 0x1c)
ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) (async)
ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r1 = socket$packet(0x11, 0x3, 0x300)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async)
syz_init_net_socket$ax25(0x3, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0) (async)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r3, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
unshare(0x42000000)
mmap(&(0x7f0000164000/0x2000)=nil, 0x2000, 0x1000005, 0x10, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x769f00b363895638, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
socket(0x40000000015, 0x5, 0x0) (async)
r4 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
socket$kcm(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000001000000002000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a0000000500010006"], 0x64}}, 0x24002800) (async)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a0000000500010006"], 0x64}}, 0x24002800)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', <r5=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000280)={r5, 0x11, 0x6}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)

4.49834321s ago: executing program 3 (id=2862):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_opts(r2, 0x29, 0x40, 0x0, 0x68)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
socket$unix(0x1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffff7f, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xc, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0xfffffffa, 0x10000, 0x2, 0x1d, 0xd, 0x16, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x0)

4.231859578s ago: executing program 3 (id=2865):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4000)
recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000840)=""/232, 0xe8}, {&(0x7f00000006c0)=""/84, 0x54}, {&(0x7f0000000940)=""/4077, 0xfed}, {&(0x7f0000000240)=""/103, 0x67}, {&(0x7f0000000000)=""/187, 0xbb}, {&(0x7f00000001c0)=""/16, 0x10}], 0x6}, 0x80000000}], 0x4, 0x102, 0x0)

4.180827047s ago: executing program 3 (id=2866):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001000000000000600000030100800c0000000000000900000000000000000100000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d9769ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c00"], 0x114}], 0x1}, 0x0)

4.070826133s ago: executing program 1 (id=2868):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x7, 0xf}}]}}]}, 0x3c}}, 0x0) (fail_nth: 2)

3.795027437s ago: executing program 3 (id=2869):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6c30ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88372091cd397b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca00000000000000000000007925d0f1256330b9e2aa9a18cea8e009116f63c6c7d8f7f95bf0f6731e5eb1dcdc534f357b9f08e7a9a3aebeca145d695053b5bef004ca24e6c57ed10f01488d38b8b0b68d93e3cf630837915d518fde2115e66615786fe7b9216de958119cf762cac77ac829a02f48e72c0d2841880b2c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x20e, 0x1a, 0x0, &(0x7f00000004c0)="b9180bb76003070c009e40f086dd1fff290000003b0020010010", 0x0, 0x1, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xf45, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x10, 0x3, 0x9, 0x5, 0x200, r3, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="700000001200030200"/56, @ANYRES32=0x0, @ANYBLOB="814b00000000000000000000000000002100010008081c000a"], 0x70}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
close(0x3)

3.694262792s ago: executing program 1 (id=2870):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x7, 0x4, 0x300, 0xfffffffe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000180)=@ccm_128={{0x304}, "c57d8f71bafe2001", "d1fff8ed4a27bbec63cd607039138725", "f51daa38", "1a73a6c4c5c95edf"}, 0x28)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x5)
sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r7}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtaction={0x7c, 0x30, 0xffff, 0x70bd29, 0x0, {0x0, 0x0, 0x1300}, [{0x68, 0x1, [@m_mirred={0x64, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0x7}, 0x2}}]}, {0x17, 0x6, "2d61a11fb979b7fae1ab1ace67d7d64b5f1b46"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x7c}}, 0x0)

3.104198791s ago: executing program 1 (id=2874):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000003240))
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r2, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000180)={0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c)
sendto$inet6(r2, &(0x7f00000003c0)="d4d3ba", 0x3, 0x40000, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c)
shutdown(r2, 0x1)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000011c0)={0x0, 0x5, 0x7fff}, 0x8)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x40}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
unshare(0x68040200)
bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xf, 0x9, &(0x7f0000000400)=ANY=[@ANYBLOB="1874f620edca58e04d15066f080000000000000000000000000000851000000500000085000000bb000000a700000000000000180000e9ffffff000000000000000000950000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmmsg$unix(r3, &(0x7f00000000c0), 0x3f, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r3, 0x2, 0x1, 0xffffffff, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0]}, 0x40)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000020}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000280)={<r7=>r4, 0x53, 0xd, 0x9})
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)=ANY=[@ANYRES32=r5, @ANYRES32=r5, @ANYBLOB="4f5d2b881d2493004d2904c788d0dae2d878eca1a999f8d30000000000000084f14565755c8a380a912794e525d2adf2152d0954befc11165c70cda7ed0a408d649ff15d88f18f46e6000000000000000000276b00000000006f45449b5a32b37f770b3b162a31e0e0697be60ffcdb507d2e705991d07e19307d22fe8691230813842c718c247da6205e0848d0055b3dd08caa001235e6b19abbfa8be12a3934563897e6b10db54f3e08590c5200d4913eb470c0aead7c2c7b3e5e04d4dcfa7ca4fc99bce377e4261d94b5f97d007ea10000", @ANYRES32=r7, @ANYBLOB], 0x20)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0)

2.243938879s ago: executing program 4 (id=2877):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001a00010000002000000000000a000000", @ANYRES32=0x0, @ANYBLOB="000000001400030004000000000000000000000000000000140001000d"], 0x44}}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x12, &(0x7f0000000080)=0xfffffffe, 0x4)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r3 = accept4(r1, 0x0, 0x0, 0x0)
recvmmsg$unix(r3, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/15, 0xf}], 0x1}}], 0x1, 0x40010025, 0x0)

1.887889471s ago: executing program 4 (id=2878):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r1, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_mreqn(r3, 0x0, 0xb, &(0x7f0000000000)={@multicast2, @multicast2}, &(0x7f0000000040)=0x1)
sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1, 0x0, 0x0, 0x801}, 0x4000045)
accept4(r1, 0x0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a0f22b0e9c3a5f92e3902463142907fbcbf23dc58204011cdbf7b14c75f60ddf161e61b23c10c01ca929948a410f1fef115184baa2177b1b52a64938827906b8d296dcee30a52dedf9", @ANYRES32=0x0], 0x18}}, 0x4004)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xc}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
socket(0x3, 0x2, 0x100)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2000001, 0x30, r0, 0x65cb000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000001000000300000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000024736100000000000020e04d800b00010062726964676500fa100002805a0000000000000000000000b51c50abedf5cb31d40459b747f47c40914682481b1d67dc39951c2a2700f06f9e48153c4d8708457ff8cd5f46db7fddcb525a324c0000cb530000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000700)={'bond0\x00'})
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0x13, 0x2, 0x3, 0x2c, 0x0, 0x70bd29, 0x25dfdbff, [@sadb_lifetime={0x4, 0x4, 0xffffffff, 0x80000001, 0xfe, 0x3}, @sadb_sa={0x2, 0x1, 0x4d6, 0x24, 0x1, 0x5f, 0x1, 0x1}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e22}, @sadb_x_sec_ctx={0x21, 0x18, 0x10, 0xc, 0xfa, "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"}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e23}]}, 0x160}}, 0x20000)
r8 = openat$cgroup(r4, &(0x7f0000000580)='syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r8, &(0x7f0000000600)='memory.stat\x00', 0x0, 0x0)
sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d800000018007bf6e00212ba0d8105040a000000000f040b067c55a1bc0009001e0006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a288747f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d345ef464095cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3099ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)

1.837762282s ago: executing program 0 (id=2879):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000081286dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)

1.649510904s ago: executing program 0 (id=2880):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 64)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) (async)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
listen(r3, 0x0) (async, rerun: 64)
r4 = socket$unix(0x1, 0x1, 0x0) (rerun: 64)
connect$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
connect$unix(r4, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x25) (async)
accept4(r3, 0x0, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='afs_call_done\x00', r1, 0x0, 0x7}, 0x18) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f00000016c0)=""/4098, 0x1002}, {&(0x7f0000003540)=""/4102, 0x1006}, {&(0x7f0000000a00)=""/154, 0x9a}, {&(0x7f0000000140)=""/159, 0x9f}, {&(0x7f0000000380)=""/138, 0x8a}], 0x6}, 0x10000)

1.483847256s ago: executing program 0 (id=2881):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1)
sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[], 0x30}}, 0x0)

1.383490917s ago: executing program 0 (id=2882):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="f7f5e9e4fa75e98b04b447075061f4ae31c9fe9741a5f2405ab7671f87eaf610ec0180f86c12808b43a72b2d2067dfb0bb7327e70ef08b20cfd28e3cd70dd69dd8812ed9a1303c717e3217697d333851875bad0fd8da090db64e972b49385a4c08f1eca32a0e1e3130dd220f5c31ab7739960219566623a3d7a2ac56fb5e01b7f47e51ec8d12b12d5e280d860ce1213b8896ab9a098610", 0x97}, {&(0x7f0000000200)="4028d0d6ae0efdf2972e6e6d4e3af2dc71a104b62c63974b17827ff5a8d6a3978a6c3098e04a38b230cc3cc2e59931206dc85ba94010472a62a4e908c804e8f9451b423f90e2176b31c751b45f3ecb8279a273d784132f8cb49212470cdcb07d963ee7afe22f2b9fa4a06e3afb4e4d8d7cae2ff646c7738e5480e8bbd625db65550506c25b2091aa478167011754d43c48ae419a3a1294b2f29ad76d8a17a90340ea7a9c87c19dbf0211d96254f27dd6e5be31916b69b42d1575bd4f110db7532ee5", 0xc2}, {&(0x7f0000000300)="ebd0b3beda4e0381cc7fdd0bfdb69676540a8bf02b16e39a3d5dcdafd32d5d3722df8726343276cf23eef0845cd00fd72ed6a08652151c4e7a2bff588c4168c6f1aeb437a524873ec066482aee0a434c6ee053cebc5768783ab7a8c0e0652f14edf0de118edc4e46d53783ad0f25a5e704f4cbee714e21ac6ec6e5a4348cb8452fd16a2788426dc103620bcb1843bb81c695fa9895cee03760a6af66c64c855b3de7034daccfbf6c13ec133da0dfb4c4b278d19719a0f5f805add789b2e0ef37274f430f9b2bd6ea84b1baf3", 0xcc}, {&(0x7f00000004c0)="891a13fb274229a7cd36b9f11574cd3d5abf0abc3ad62227a18b09570774abc58e478a2529625e9d110feaa6db16c1fe5a7e47dc3b54a5ec00809ac42c2a6a25fad6ed77dd6cde8bf522a9f7df4e331c58364a79ed1941d7ba3c4dc342af59b4700a83a5c0c671b236713f13a054d39ebb925087cbb35a059c1a42d0fe6403cfd16ebf990d6e3a16", 0x88}, {&(0x7f0000000400)="6b9f1130f0cbb39924b1f13fc3fabb9638c881bde4aeaf376c85d8ac0000000009fcb3b8983252f3fcf75a03cea94e446f125ffd6247b229cf0188d60a36d29763c33efb7d48cc7a040000000000", 0x4e}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001a00)="8b0fdb03bbdb2f5afcc202e5dd0ce841925f332f01ed00f985e300e8c752f74f569b9477d103c62004b9684bf9ba5503301918b24b6cdf7243a41903805a250d6272505970572a148e58c18eacd0fce63bf4a96263b2a0c0258c3abe3c13e72483c30b94faaad3a5f5a3a1c4a2487c580cdd17eb960906bfb3b0a8c7935dab4a050a68df0721c4940b3a06429465c0a115bff383867bf17e9deef5de1c2d56a395e12e164b59c6bb0d55f4e6eaec6fa7db5a622a42fcfda37974a0064cd3cecf69baa76796b17829b214c485207fd742a68be74946b4cd6ca000", 0xda}, {&(0x7f00000020c0)="69c4d1bb956f9cac315109a3b52ca9ed4731ecb9a8d1c3f75e9a771c634713ffed270d66c0e0dcd622f8d6435ac9fd4da108e9318d8fa68316a2380018db97190f4ad623cc88f3f91a98559de6f656e831fd21fbeb19b356af14f9598362d6401adf6f6f9ed9d00c07ce8a3603e767e9033e3264c30db9261038521c0430bbf43222094718b957eb44cb921404ca31befc2e3ce494a41767b9ea1fec0ebfe55aee7ce1", 0xa3}, {&(0x7f0000001040)="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", 0x103}, {&(0x7f0000001cc0)="1b2ed9efd95459b99faff1adfa54be7956726b087de3e6ceced9f47e86d27216e8662f63b760930cb931ced15105e9b3ad0bcb7801", 0x35}], 0x4, &(0x7f0000002080)=ANY=[], 0x2f0}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f00000028c0)="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", 0x584}], 0x1, &(0x7f0000004a40)=ANY=[], 0x1450}}], 0x3, 0x0)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040), 0x4)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
shutdown(r0, 0x1)

963.788944ms ago: executing program 4 (id=2883):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000070000000300000001000085980000000500000003ef00000000000000303061302e"], &(0x7f0000000f40)=""/4082, 0x37, 0xff2, 0x8, 0xbf81, 0x0, @void, @value}, 0x28) (fail_nth: 20)

279.99532ms ago: executing program 4 (id=2884):
socket(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'})
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xfffffffd, 0x1, 0x0, 0x0, 0x94, 0xfffffc00, 0xfd}, 0x9c)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000300)=@ccm_128={{0x303}, "b05c84be2e0c1f7d", "2af9f8c3730598f1aeeb7c5f1ffd95b6", "612883b6", "77dfa06c7938a7a6"}, 0x28)
sendto$inet6(r0, &(0x7f00000001c0), 0xffffffffffffff90, 0x0, 0x0, 0x3000137)

279.483128ms ago: executing program 0 (id=2885):
socket$netlink(0x10, 0x3, 0x15)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x16, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r5=>0x0})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r6)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14007100", @ANYRES16=r7, @ANYBLOB="07ef00400000fbdbdf2508000000"], 0xffffffffffffff7b}, 0x1, 0x0, 0x0, 0x4000044}, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4050)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0b06000000000000000030000000050036000000000008000200", @ANYRES32=r5, @ANYBLOB="050035005500000005003300030000000500340000000000acd4198a1515b4d1cd4cf73fa850ec87f3effdcddb5d3b5dd3648a911bac5440e9e99b2aca5fb911f62825409caa177a491779059be05f6bbd554277433a3545f994d792105cbb031a0fea079a4c82d19f1367b6d9aa2138b4ce27652ed8b54f8e7bd5c892bcdc"], 0x3c}}, 0x0)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x1c}, 0x1, 0x3000000, 0x0, 0x10}, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), r9)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0)

174.045055ms ago: executing program 0 (id=2886):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4000)
recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000840)=""/232, 0xe8}, {0x0}, {&(0x7f00000006c0)=""/84, 0x54}, {&(0x7f0000000940)=""/4077, 0xfed}, {&(0x7f0000000240)=""/103, 0x67}, {&(0x7f0000000000)=""/187, 0xbb}, {&(0x7f00000001c0)=""/16, 0x10}], 0x7}, 0x80000000}], 0x4, 0x102, 0x0)

151.898473ms ago: executing program 4 (id=2887):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e)
connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x0, @broadcast, 'veth1_to_hsr\x00'}}, 0x1e) (async)
connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x0, @broadcast, 'veth1_to_hsr\x00'}}, 0x1e)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) (async)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0x1, 0x4)
r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000))
openat$cgroup_ro(r2, &(0x7f0000001300)='memory.swap.events\x00', 0x26e1, 0x0)

0s ago: executing program 4 (id=2888):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x54, r2, 0x801, 0xcac0f00, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x54}}, 0x0)

kernel console output (not intermixed with test programs):

1657'.
[  253.416314][T11068] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1657'.
[  253.425406][T11068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1657'.
[  253.753482][T11085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1661'.
[  253.827744][T11085] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1661'.
[  254.159575][T11094] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.218150][T11094] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.229511][T11097] FAULT_INJECTION: forcing a failure.
[  254.229511][T11097] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  254.259273][T11097] CPU: 1 UID: 0 PID: 11097 Comm: syz.4.1665 Not tainted 6.14.0-rc2-syzkaller-00428-g7a7e0197133d #0
[  254.259306][T11097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  254.259319][T11097] Call Trace:
[  254.259326][T11097]  <TASK>
[  254.259336][T11097]  dump_stack_lvl+0x241/0x360
[  254.259367][T11097]  ? __pfx_dump_stack_lvl+0x10/0x10
[  254.259391][T11097]  ? __pfx__printk+0x10/0x10
[  254.259414][T11097]  ? __pfx_lock_release+0x10/0x10
[  254.259454][T11097]  should_fail_ex+0x40a/0x550
[  254.259488][T11097]  _copy_from_iter+0x1df/0x1c40
[  254.259511][T11097]  ? __virt_addr_valid+0x183/0x530
[  254.259545][T11097]  ? __pfx_lock_release+0x10/0x10
[  254.259583][T11097]  ? __alloc_skb+0x28f/0x440
[  254.259610][T11097]  ? __pfx__copy_from_iter+0x10/0x10
[  254.259634][T11097]  ? __virt_addr_valid+0x183/0x530
[  254.259673][T11097]  ? __virt_addr_valid+0x183/0x530
[  254.259704][T11097]  ? __virt_addr_valid+0x45f/0x530
[  254.259737][T11097]  ? __phys_addr_symbol+0x2f/0x70
[  254.259768][T11097]  ? __check_object_size+0x47a/0x730
[  254.259801][T11097]  netlink_sendmsg+0x742/0xcb0
[  254.259845][T11097]  ? __pfx_netlink_sendmsg+0x10/0x10
[  254.259869][T11097]  ? aa_sock_msg_perm+0x91/0x160
[  254.259903][T11097]  ? __pfx_netlink_sendmsg+0x10/0x10
[  254.259922][T11097]  __sock_sendmsg+0x221/0x270
[  254.259947][T11097]  ____sys_sendmsg+0x53a/0x860
[  254.259984][T11097]  ? __pfx_____sys_sendmsg+0x10/0x10
[  254.260010][T11097]  ? __fget_files+0x2a/0x410
[  254.260041][T11097]  ? __fget_files+0x2a/0x410
[  254.260078][T11097]  __sys_sendmsg+0x269/0x350
[  254.260112][T11097]  ? __pfx___sys_sendmsg+0x10/0x10
[  254.260173][T11097]  ? do_sys_openat2+0x17a/0x1d0
[  254.260229][T11097]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  254.260267][T11097]  ? do_syscall_64+0x100/0x230
[  254.260297][T11097]  ? do_syscall_64+0xb6/0x230
[  254.260326][T11097]  do_syscall_64+0xf3/0x230
[  254.260352][T11097]  ? clear_bhb_loop+0x35/0x90
[  254.260385][T11097]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.260414][T11097] RIP: 0033:0x7f23b2b8cde9
[  254.260433][T11097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  254.260450][T11097] RSP: 002b:00007f23b3918038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  254.260473][T11097] RAX: ffffffffffffffda RBX: 00007f23b2da5fa0 RCX: 00007f23b2b8cde9
[  254.260488][T11097] RDX: 00000000000000c0 RSI: 00004000000003c0 RDI: 0000000000000006
[  254.260502][T11097] RBP: 00007f23b3918090 R08: 0000000000000000 R09: 0000000000000000
[  254.260515][T11097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  254.260528][T11097] R13: 0000000000000000 R14: 00007f23b2da5fa0 R15: 00007fffa0818438
[  254.260558][T11097]  </TASK>
[  254.657186][T11094] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.740539][T11094] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.844711][T11094] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  254.860264][T11094] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  254.908447][T11094] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  254.946821][T11094] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  254.982640][T11095] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.014812][T11101] erspan0 speed is unknown, defaulting to 1000
[  255.029717][T11101] lo speed is unknown, defaulting to 1000
[  255.068319][T11095] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.132589][T11095] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.208404][T11116] netlink: 'syz.0.1672': attribute type 21 has an invalid length.
[  255.243816][T11095] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.392135][T11118] tipc: Bearer <udp:syz1>: already 2 bearers with priority 10
[  255.406241][T11118] tipc: Bearer <udp:syz1>: trying with adjusted priority
[  255.413332][T11118] tipc: Enabling of bearer <udp:syz1> rejected, max 3 bearers permitted
[  255.659767][T11129] openvswitch: netlink: Message has 8 unknown bytes.
[  255.672742][T11129] __nla_validate_parse: 1 callbacks suppressed
[  255.672762][T11129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1678'.
[  255.693066][T11129] netlink: 'syz.2.1678': attribute type 12 has an invalid length.
[  256.256380][T11139] openvswitch: netlink: EtherType 50a is less than min 600
[  256.383390][T11143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1683'.
[  256.407550][T11143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1683'.
[  256.423300][T11143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1683'.
[  256.595500][T10747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  256.608620][T11152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1685'.
[  256.624316][T10747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  256.690910][T11157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1688'.
[  256.922109][T11167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1691'.
[  257.244555][T11180] netlink: 'syz.0.1698': attribute type 1 has an invalid length.
[  257.310379][T11185] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  257.374685][T11189] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1698'.
[  257.844931][T11095] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  257.863984][T11095] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  257.880103][T11095] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  257.894753][T11095] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  258.333997][T11210] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1705'.
[  258.356087][T11210] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1705'.
[  258.430583][T11213] pimreg: left allmulticast mode
[  258.542697][T11221] Unsupported ieee802154 address type: 0
[  259.415413][T11262] FAULT_INJECTION: forcing a failure.
[  259.415413][T11262] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  259.443478][T11262] CPU: 1 UID: 0 PID: 11262 Comm: syz.4.1727 Not tainted 6.14.0-rc2-syzkaller-00428-g7a7e0197133d #0
[  259.443508][T11262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  259.443522][T11262] Call Trace:
[  259.443528][T11262]  <TASK>
[  259.443537][T11262]  dump_stack_lvl+0x241/0x360
[  259.443568][T11262]  ? __pfx_dump_stack_lvl+0x10/0x10
[  259.443590][T11262]  ? __pfx__printk+0x10/0x10
[  259.443613][T11262]  ? __pfx_lock_release+0x10/0x10
[  259.443652][T11262]  should_fail_ex+0x40a/0x550
[  259.443685][T11262]  _copy_from_iter+0x1df/0x1c40
[  259.443708][T11262]  ? __virt_addr_valid+0x183/0x530
[  259.443740][T11262]  ? __pfx_lock_release+0x10/0x10
[  259.443777][T11262]  ? lockdep_hardirqs_on+0x99/0x150
[  259.443804][T11262]  ? __pfx__copy_from_iter+0x10/0x10
[  259.443828][T11262]  ? __virt_addr_valid+0x183/0x530
[  259.443860][T11262]  ? __virt_addr_valid+0x183/0x530
[  259.443891][T11262]  ? __virt_addr_valid+0x45f/0x530
[  259.443924][T11262]  ? __phys_addr_symbol+0x2f/0x70
[  259.443956][T11262]  ? __check_object_size+0x47a/0x730
[  259.443988][T11262]  tipc_msg_build+0x846/0x1040
[  259.444029][T11262]  ? __pfx_tipc_msg_build+0x10/0x10
[  259.444051][T11262]  ? tipc_group_bc_cong+0x1d0/0x290
[  259.444096][T11262]  tipc_send_group_bcast+0x889/0xbd0
[  259.444139][T11262]  ? __pfx_tipc_send_group_bcast+0x10/0x10
[  259.444180][T11262]  ? __pfx_woken_wake_function+0x10/0x10
[  259.444239][T11262]  __tipc_sendmsg+0x363/0x35d0
[  259.444279][T11262]  ? validate_chain+0x11e/0x5920
[  259.444307][T11262]  ? __pfx___tipc_sendmsg+0x10/0x10
[  259.444327][T11262]  ? validate_chain+0x11e/0x5920
[  259.444359][T11262]  ? __pfx_validate_chain+0x10/0x10
[  259.444387][T11262]  ? mark_lock+0x9a/0x360
[  259.444412][T11262]  ? __lock_acquire+0x1397/0x2100
[  259.444470][T11262]  ? mark_lock+0x9a/0x360
[  259.444494][T11262]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  259.444528][T11262]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  259.444572][T11262]  ? __local_bh_enable_ip+0x168/0x200
[  259.444598][T11262]  ? tipc_sendmsg+0x47/0x70
[  259.444620][T11262]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  259.444643][T11262]  ? do_raw_spin_unlock+0x13c/0x8b0
[  259.444679][T11262]  ? __pfx_tipc_sendmsg+0x10/0x10
[  259.444700][T11262]  tipc_sendmsg+0x55/0x70
[  259.444724][T11262]  __sock_sendmsg+0x221/0x270
[  259.444751][T11262]  ____sys_sendmsg+0x53a/0x860
[  259.444791][T11262]  ? __pfx_____sys_sendmsg+0x10/0x10
[  259.444819][T11262]  ? __fget_files+0x2a/0x410
[  259.444852][T11262]  ? __fget_files+0x2a/0x410
[  259.444891][T11262]  __sys_sendmmsg+0x36a/0x720
[  259.444933][T11262]  ? __pfx___sys_sendmmsg+0x10/0x10
[  259.444978][T11262]  ? __pfx_lock_release+0x10/0x10
[  259.445007][T11262]  ? kstrtouint_from_user+0x128/0x190
[  259.445067][T11262]  ? ksys_write+0x22a/0x2b0
[  259.445089][T11262]  ? __pfx_lock_release+0x10/0x10
[  259.445127][T11262]  ? sb_end_write+0xe9/0x1c0
[  259.445156][T11262]  ? vfs_write+0x7fa/0xd10
[  259.445180][T11262]  ? __mutex_unlock_slowpath+0x227/0x800
[  259.445247][T11262]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  259.445281][T11262]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  259.445314][T11262]  ? do_syscall_64+0x100/0x230
[  259.445345][T11262]  __x64_sys_sendmmsg+0xa0/0xb0
[  259.445378][T11262]  do_syscall_64+0xf3/0x230
[  259.445404][T11262]  ? clear_bhb_loop+0x35/0x90
[  259.445438][T11262]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.445466][T11262] RIP: 0033:0x7f23b2b8cde9
[  259.445485][T11262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  259.445503][T11262] RSP: 002b:00007f23b3918038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  259.445526][T11262] RAX: ffffffffffffffda RBX: 00007f23b2da5fa0 RCX: 00007f23b2b8cde9
[  259.445541][T11262] RDX: 0400000000000181 RSI: 00004000000030c0 RDI: 0000000000000003
[  259.445555][T11262] RBP: 00007f23b3918090 R08: 0000000000000000 R09: 0000000000000000
[  259.445568][T11262] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000002
[  259.445581][T11262] R13: 0000000000000000 R14: 00007f23b2da5fa0 R15: 00007fffa0818438
[  259.445614][T11262]  </TASK>
[  259.917960][T11270] netlink: 'syz.4.1729': attribute type 10 has an invalid length.
[  259.929110][T11264] bridge0: port 1(ipvlan2) entered blocking state
[  259.949531][T11264] bridge0: port 1(ipvlan2) entered disabled state
[  259.962623][T11264] ipvlan2: entered allmulticast mode
[  259.999801][T11264] bridge0: entered allmulticast mode
[  260.031475][T11264] ipvlan2: left allmulticast mode
[  260.052580][T11272] netlink: 'syz.0.1730': attribute type 1 has an invalid length.
[  260.063709][T11264] bridge0: left allmulticast mode
[  260.079859][T11270] team0: Port device virt_wifi0 added
[  260.103387][T11272] 8021q: adding VLAN 0 to HW filter on device bond1
[  260.136381][T11274] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  260.189444][T11277] netlink: 'syz.3.1731': attribute type 2 has an invalid length.
[  260.228296][T11276] bond1: (slave ip6gretap1): making interface the new active one
[  260.280302][T11276] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  260.303720][T11276] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  260.314502][T11276] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  260.346903][ T9909] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  260.351518][T11281] erspan0 speed is unknown, defaulting to 1000
[  260.359410][ T1142] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  260.389961][T11281] lo speed is unknown, defaulting to 1000
[  260.479081][T11289] erspan0 speed is unknown, defaulting to 1000
[  260.596243][ T9909] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  260.689937][T11289] lo speed is unknown, defaulting to 1000
[  260.758398][ T1142] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  261.357603][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  261.471944][T11325] ipvlan2: entered promiscuous mode
[  261.750484][T11331] erspan0 speed is unknown, defaulting to 1000
[  261.780114][T11337] __nla_validate_parse: 11 callbacks suppressed
[  261.780134][T11337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1748'.
[  261.908934][T11342] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  261.928143][T10747] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  261.969785][T10747] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  262.017172][T11346] netlink: 'syz.2.1751': attribute type 1 has an invalid length.
[  262.035863][T11331] lo speed is unknown, defaulting to 1000
[  262.190929][T11346] bridge1: entered promiscuous mode
[  262.535906][ T1142] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  262.634239][T11362] netlink: 'syz.2.1756': attribute type 1 has an invalid length.
[  262.847684][T11365] erspan0 speed is unknown, defaulting to 1000
[  262.865502][T11365] lo speed is unknown, defaulting to 1000
[  263.037581][T11377] FAULT_INJECTION: forcing a failure.
[  263.037581][T11377] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  263.082281][T11377] CPU: 1 UID: 0 PID: 11377 Comm: syz.1.1759 Not tainted 6.14.0-rc2-syzkaller-00428-g7a7e0197133d #0
[  263.082313][T11377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  263.082326][T11377] Call Trace:
[  263.082334][T11377]  <TASK>
[  263.082342][T11377]  dump_stack_lvl+0x241/0x360
[  263.082374][T11377]  ? __pfx_dump_stack_lvl+0x10/0x10
[  263.082398][T11377]  ? __pfx__printk+0x10/0x10
[  263.082425][T11377]  ? snprintf+0xda/0x120
[  263.082460][T11377]  should_fail_ex+0x40a/0x550
[  263.082495][T11377]  _copy_to_user+0x31/0xb0
[  263.082524][T11377]  simple_read_from_buffer+0xca/0x150
[  263.082555][T11377]  proc_fail_nth_read+0x1e9/0x250
[  263.082587][T11377]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  263.082619][T11377]  ? rw_verify_area+0x243/0x630
[  263.082652][T11377]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  263.082681][T11377]  vfs_read+0x1f8/0xb40
[  263.082703][T11377]  ? fdget_pos+0x254/0x320
[  263.082734][T11377]  ? __pfx___mutex_lock+0x10/0x10
[  263.082761][T11377]  ? __pfx_vfs_read+0x10/0x10
[  263.082792][T11377]  ? __fget_files+0x2a/0x410
[  263.082849][T11377]  ? __fget_files+0x395/0x410
[  263.082877][T11377]  ? __fget_files+0x2a/0x410
[  263.082915][T11377]  ksys_read+0x18f/0x2b0
[  263.082939][T11377]  ? __pfx_ksys_read+0x10/0x10
[  263.082960][T11377]  ? do_syscall_64+0x100/0x230
[  263.082991][T11377]  ? do_syscall_64+0xb6/0x230
[  263.083020][T11377]  do_syscall_64+0xf3/0x230
[  263.083046][T11377]  ? clear_bhb_loop+0x35/0x90
[  263.083080][T11377]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.083108][T11377] RIP: 0033:0x7f365318b7fc
[  263.083126][T11377] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  263.083144][T11377] RSP: 002b:00007f3653f81030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  263.083167][T11377] RAX: ffffffffffffffda RBX: 00007f36533a6080 RCX: 00007f365318b7fc
[  263.083182][T11377] RDX: 000000000000000f RSI: 00007f3653f810a0 RDI: 0000000000000005
[  263.083194][T11377] RBP: 00007f3653f81090 R08: 0000000000000000 R09: 0000000000000000
[  263.083207][T11377] R10: 0000400000000180 R11: 0000000000000246 R12: 0000000000000001
[  263.083225][T11377] R13: 0000000000000000 R14: 00007f36533a6080 R15: 00007fff46753ba8
[  263.083258][T11377]  </TASK>
[  263.613504][T11384] erspan0 speed is unknown, defaulting to 1000
[  263.632066][T11384] lo speed is unknown, defaulting to 1000
[  264.023082][T11394] erspan0 speed is unknown, defaulting to 1000
[  264.164354][T11400] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1768'.
[  264.214710][T11394] lo speed is unknown, defaulting to 1000
[  264.931543][T11398] siw: device registration error -23
[  264.964548][T11421] erspan0 speed is unknown, defaulting to 1000
[  265.067015][T11421] lo speed is unknown, defaulting to 1000
[  265.070546][T11426] FAULT_INJECTION: forcing a failure.
[  265.070546][T11426] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  265.093486][T11426] CPU: 1 UID: 0 PID: 11426 Comm: syz.3.1776 Not tainted 6.14.0-rc2-syzkaller-00428-g7a7e0197133d #0
[  265.093517][T11426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  265.093530][T11426] Call Trace:
[  265.093537][T11426]  <TASK>
[  265.093546][T11426]  dump_stack_lvl+0x241/0x360
[  265.093578][T11426]  ? __pfx_dump_stack_lvl+0x10/0x10
[  265.093602][T11426]  ? __pfx__printk+0x10/0x10
[  265.093635][T11426]  should_fail_ex+0x40a/0x550
[  265.093669][T11426]  prepare_alloc_pages+0x1da/0x5b0
[  265.093701][T11426]  __alloc_frozen_pages_noprof+0x16f/0x710
[  265.093728][T11426]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  265.093773][T11426]  alloc_pages_mpol+0x311/0x660
[  265.093806][T11426]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  265.093849][T11426]  alloc_pages_noprof+0x121/0x190
[  265.093880][T11426]  get_free_pages_noprof+0xc/0x30
[  265.093900][T11426]  kasan_populate_vmalloc_pte+0x38/0xe0
[  265.093925][T11426]  __apply_to_page_range+0x806/0xde0
[  265.093962][T11426]  ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10
[  265.093991][T11426]  ? __pfx___apply_to_page_range+0x10/0x10
[  265.094023][T11426]  ? do_raw_spin_unlock+0x13c/0x8b0
[  265.094050][T11426]  ? trace_kmem_cache_alloc+0x1f/0xc0
[  265.094083][T11426]  alloc_vmap_area+0x1d4e/0x2400
[  265.094135][T11426]  ? __pfx_alloc_vmap_area+0x10/0x10
[  265.094167][T11426]  ? __kasan_kmalloc+0x98/0xb0
[  265.094193][T11426]  ? __kmalloc_cache_node_noprof+0x25d/0x3a0
[  265.094222][T11426]  ? __get_vm_area_node+0x132/0x2d0
[  265.094255][T11426]  ? sock_map_alloc+0x1b0/0x2c0
[  265.094276][T11426]  __get_vm_area_node+0x1c8/0x2d0
[  265.094313][T11426]  __vmalloc_node_range_noprof+0x344/0x1380
[  265.094346][T11426]  ? sock_map_alloc+0x1b0/0x2c0
[  265.094393][T11426]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  265.094428][T11426]  ? __kmalloc_node_noprof+0x2ad/0x4d0
[  265.094455][T11426]  ? bpf_map_area_alloc+0x64/0x120
[  265.094489][T11426]  bpf_map_area_alloc+0xfc/0x120
[  265.094523][T11426]  ? sock_map_alloc+0x1b0/0x2c0
[  265.094544][T11426]  sock_map_alloc+0x1b0/0x2c0
[  265.094568][T11426]  map_create+0x946/0x11c0
[  265.094605][T11426]  __sys_bpf+0x6d3/0x820
[  265.094637][T11426]  ? __pfx___sys_bpf+0x10/0x10
[  265.094685][T11426]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  265.094720][T11426]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  265.094754][T11426]  ? do_syscall_64+0x100/0x230
[  265.094786][T11426]  __x64_sys_bpf+0x7c/0x90
[  265.094813][T11426]  do_syscall_64+0xf3/0x230
[  265.094845][T11426]  ? clear_bhb_loop+0x35/0x90
[  265.094878][T11426]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.094906][T11426] RIP: 0033:0x7f065f18cde9
[  265.094925][T11426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  265.094942][T11426] RSP: 002b:00007f0660029038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  265.094965][T11426] RAX: ffffffffffffffda RBX: 00007f065f3a5fa0 RCX: 00007f065f18cde9
[  265.094980][T11426] RDX: 0000000000000050 RSI: 0000400000000280 RDI: 0000000000000000
[  265.094993][T11426] RBP: 00007f0660029090 R08: 0000000000000000 R09: 0000000000000000
[  265.095006][T11426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  265.095018][T11426] R13: 0000000000000001 R14: 00007f065f3a5fa0 R15: 00007ffd3c67f0d8
[  265.095048][T11426]  </TASK>
[  265.745912][    C1] ip6_tnl_xmit_ctl: 3 callbacks suppressed
[  265.745933][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  266.090125][T11450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1785'.
[  266.125325][T11444] erspan0 speed is unknown, defaulting to 1000
[  266.229365][T11444] lo speed is unknown, defaulting to 1000
[  266.349329][   T64] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  266.397358][T11458] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1786'.
[  266.529411][T11457] erspan0 speed is unknown, defaulting to 1000
[  266.547131][T11457] lo speed is unknown, defaulting to 1000
[  266.803615][T11468] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1791'.
[  266.895872][T11470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1792'.
[  266.981420][T11475] netlink: 332 bytes leftover after parsing attributes in process `syz.4.1794'.
[  266.995469][T11475] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1794'.
[  267.008798][T11475] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1794'.
[  267.156178][T11479] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1796'.
[  267.190944][T11483] netlink: 'syz.3.1798': attribute type 1 has an invalid length.
[  267.315220][T11485] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1799'.
[  267.367646][T11485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1799'.
[  267.497136][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  267.882153][T11503] openvswitch: netlink: nsh attribute has 65504 unknown bytes.
[  267.906065][T11502] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1807'.
[  267.915951][T11501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1805'.
[  267.925512][T11503] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  268.538232][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  268.553873][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  268.846982][T11532] tipc: Enabling of bearer <eth:hsr0> rejected, already enabled
[  268.869079][T10747] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  269.165312][T11542] FAULT_INJECTION: forcing a failure.
[  269.165312][T11542] name failslab, interval 1, probability 0, space 0, times 0
[  269.190376][T11542] CPU: 1 UID: 0 PID: 11542 Comm: syz.1.1821 Not tainted 6.14.0-rc2-syzkaller-00428-g7a7e0197133d #0
[  269.190408][T11542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  269.190422][T11542] Call Trace:
[  269.190429][T11542]  <TASK>
[  269.190437][T11542]  dump_stack_lvl+0x241/0x360
[  269.190475][T11542]  ? __pfx_dump_stack_lvl+0x10/0x10
[  269.190498][T11542]  ? __pfx__printk+0x10/0x10
[  269.190533][T11542]  should_fail_ex+0x40a/0x550
[  269.190566][T11542]  should_failslab+0xac/0x100
[  269.190595][T11542]  __kmalloc_cache_noprof+0x70/0x390
[  269.190622][T11542]  ? sctp_add_bind_addr+0x89/0x3a0
[  269.190652][T11542]  sctp_add_bind_addr+0x89/0x3a0
[  269.190683][T11542]  sctp_copy_local_addr_list+0x311/0x500
[  269.190712][T11542]  ? sctp_copy_local_addr_list+0xab/0x500
[  269.190740][T11542]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  269.190769][T11542]  ? sctp_v6_is_any+0x60/0x70
[  269.190798][T11542]  ? sctp_copy_one_addr+0x94/0x360
[  269.190829][T11542]  sctp_bind_addr_copy+0xad/0x3b0
[  269.190855][T11542]  ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190
[  269.190883][T11542]  sctp_connect_new_asoc+0x2f3/0x6c0
[  269.190917][T11542]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  269.190948][T11542]  ? sctp_sendmsg+0xf1a/0x35d0
[  269.190985][T11542]  ? sctp_endpoint_lookup_assoc+0xc9/0x250
[  269.191016][T11542]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  269.191045][T11542]  sctp_sendmsg+0x1f64/0x35d0
[  269.191093][T11542]  ? __pfx_sctp_sendmsg+0x10/0x10
[  269.191125][T11542]  ? aa_sk_perm+0x96d/0xab0
[  269.191169][T11542]  ? inet_sendmsg+0x330/0x390
[  269.191200][T11542]  __sock_sendmsg+0x1a6/0x270
[  269.191226][T11542]  __sys_sendto+0x363/0x4c0
[  269.191259][T11542]  ? __pfx___sys_sendto+0x10/0x10
[  269.191300][T11542]  ? __fget_files+0x2a/0x410
[  269.191338][T11542]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  269.191372][T11542]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  269.191413][T11542]  __x64_sys_sendto+0xde/0x100
[  269.191444][T11542]  do_syscall_64+0xf3/0x230
[  269.191477][T11542]  ? clear_bhb_loop+0x35/0x90
[  269.191510][T11542]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.191538][T11542] RIP: 0033:0x7f365318cde9
[  269.191556][T11542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  269.191574][T11542] RSP: 002b:00007f3653fa2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  269.191597][T11542] RAX: ffffffffffffffda RBX: 00007f36533a5fa0 RCX: 00007f365318cde9
[  269.191612][T11542] RDX: 0000000000000001 RSI: 00004000000002c0 RDI: 0000000000000003
[  269.191625][T11542] RBP: 00007f3653fa2090 R08: 0000400000000100 R09: 000000000000001c
[  269.191638][T11542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  269.191651][T11542] R13: 0000000000000000 R14: 00007f36533a5fa0 R15: 00007fff46753ba8
[  269.191682][T11542]  </TASK>
[  269.790236][T11555] erspan0 speed is unknown, defaulting to 1000
[  269.797713][T11555] lo speed is unknown, defaulting to 1000
[  269.902279][T11560] netlink: 'syz.4.1829': attribute type 12 has an invalid length.
[  270.084557][T11566] batman_adv: batadv0: Adding interface: dummy0
[  270.131635][T11566] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  270.270562][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  271.026611][T11601] nbd: device at index 64 is going down
[  271.044402][T11603] netlink: 'syz.0.1844': attribute type 9 has an invalid length.
[  271.086179][T11603] netlink: 'syz.0.1844': attribute type 6 has an invalid length.
[  271.141748][T11608] syzkaller1: entered promiscuous mode
[  271.156114][T11608] syzkaller1: entered allmulticast mode
[  271.419544][T10747] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  271.617382][T11629] netlink: 'syz.2.1854': attribute type 1 has an invalid length.
[  271.626774][T11627] bond1: left promiscuous mode
[  271.645894][T11627] bond1: left allmulticast mode
[  271.668381][T11627] macsec2: left promiscuous mode
[  271.683703][T11627] macsec2: left allmulticast mode
[  271.709926][T11627] bond3: left promiscuous mode
[  271.714902][T11627] bond3: left allmulticast mode
[  271.736556][T11627] macvtap1: left promiscuous mode
[  271.759821][T11627] macvtap1: left allmulticast mode
[  272.046301][T11646] erspan0 speed is unknown, defaulting to 1000
[  272.070933][T11646] lo speed is unknown, defaulting to 1000
[  272.566000][   T64] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  272.625888][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  273.037096][T11671] FAULT_INJECTION: forcing a failure.
[  273.037096][T11671] name failslab, interval 1, probability 0, space 0, times 0
[  273.065926][T11671] CPU: 0 UID: 0 PID: 11671 Comm: syz.0.1867 Not tainted 6.14.0-rc2-syzkaller-00428-g7a7e0197133d #0
[  273.065959][T11671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  273.065973][T11671] Call Trace:
[  273.065980][T11671]  <TASK>
[  273.065989][T11671]  dump_stack_lvl+0x241/0x360
[  273.066019][T11671]  ? __pfx_dump_stack_lvl+0x10/0x10
[  273.066041][T11671]  ? __pfx__printk+0x10/0x10
[  273.066064][T11671]  ? kmem_cache_alloc_noprof+0x48/0x380
[  273.066093][T11671]  ? __pfx___might_resched+0x10/0x10
[  273.066126][T11671]  should_fail_ex+0x40a/0x550
[  273.066161][T11671]  should_failslab+0xac/0x100
[  273.066189][T11671]  ? vm_area_alloc+0x24/0x1d0
[  273.066208][T11671]  kmem_cache_alloc_noprof+0x70/0x380
[  273.066242][T11671]  vm_area_alloc+0x24/0x1d0
[  273.066265][T11671]  mmap_region+0x1b04/0x2fa0
[  273.066330][T11671]  ? __pfx_mmap_region+0x10/0x10
[  273.066432][T11671]  ? mm_get_unmapped_area_vmflags+0xb9/0xf0
[  273.066472][T11671]  ? hugetlb_get_unmapped_area+0x1fd/0x2a0
[  273.066502][T11671]  ? cap_mmap_addr+0xaa/0xf0
[  273.066528][T11671]  ? bpf_lsm_mmap_addr+0x9/0x10
[  273.066555][T11671]  ? security_mmap_addr+0x6f/0x250
[  273.066584][T11671]  ? shmem_mapping+0xd/0x50
[  273.066618][T11671]  do_mmap+0xecc/0x13a0
[  273.066662][T11671]  ? __pfx_do_mmap+0x10/0x10
[  273.066690][T11671]  ? down_write_killable+0x19e/0x260
[  273.066720][T11671]  ? vm_mmap_pgoff+0x171/0x430
[  273.066753][T11671]  ? __pfx_down_write_killable+0x10/0x10
[  273.066780][T11671]  ? common_file_perm+0x1a6/0x210
[  273.066812][T11671]  ? rcu_is_watching+0x15/0xb0
[  273.066839][T11671]  vm_mmap_pgoff+0x214/0x430
[  273.066884][T11671]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  273.066945][T11671]  ? hugetlb_file_setup+0x3dc/0x5c0
[  273.066974][T11671]  ksys_mmap_pgoff+0x53e/0x720
[  273.067014][T11671]  do_syscall_64+0xf3/0x230
[  273.067040][T11671]  ? clear_bhb_loop+0x35/0x90
[  273.067074][T11671]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.067102][T11671] RIP: 0033:0x7fdd7538cde9
[  273.067120][T11671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  273.067138][T11671] RSP: 002b:00007fdd7610b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  273.067161][T11671] RAX: ffffffffffffffda RBX: 00007fdd755a5fa0 RCX: 00007fdd7538cde9
[  273.067176][T11671] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000400000200000
[  273.067189][T11671] RBP: 00007fdd7610b090 R08: ffffffffffffffff R09: 0000000000000000
[  273.067203][T11671] R10: 000200000006c832 R11: 0000000000000246 R12: 0000000000000002
[  273.067217][T11671] R13: 0000000000000000 R14: 00007fdd755a5fa0 R15: 00007fff829671e8
[  273.067248][T11671]  </TASK>
[  273.430521][T11682] __nla_validate_parse: 11 callbacks suppressed
[  273.430540][T11682] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1867'.
[  273.791538][T11693] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1877'.
[  273.800902][T11699] netlink: 'syz.1.1876': attribute type 1 has an invalid length.
[  273.857325][T11700] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1878'.
[  273.905917][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  273.979476][ T1142] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  274.153452][T11705] bond4: entered promiscuous mode
[  274.158852][T11705] bond4: entered allmulticast mode
[  274.165207][T11705] 8021q: adding VLAN 0 to HW filter on device bond4
[  274.531873][T11729] bridge1: entered promiscuous mode
[  274.541772][T11729] bridge1: entered allmulticast mode
[  275.106156][T10747] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  275.204999][T11743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1895'.
[  275.232438][T11749] netlink: 'syz.3.1897': attribute type 3 has an invalid length.
[  275.435187][T11759] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1899'.
[  275.591845][T11767] gretap0: left promiscuous mode
[  275.898932][T11767] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  275.925854][T11767] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  275.934465][T11767] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  275.943239][T11767] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  275.968628][T11767] bond0: left promiscuous mode
[  275.973886][T11767] vlan2: left promiscuous mode
[  275.983671][T11767] bond1: left promiscuous mode
[  275.998918][T11767] bond1: left allmulticast mode
[  276.007119][T11767] tipc: Resetting bearer <eth:syzkaller0>
[  276.013662][T11767] syzkaller0: left promiscuous mode
[  276.019385][T11767] syzkaller0: left allmulticast mode
[  276.041546][T11767] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  276.053218][T11767] macvtap1: left promiscuous mode
[  276.067638][T11767] macvtap1: left allmulticast mode
[  276.217360][T10747] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  276.800198][T11810] Bluetooth: MGMT ver 1.23
[  276.943753][T11820] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  277.219225][T11830] netlink: 'syz.2.1928': attribute type 1 has an invalid length.
[  277.237024][T11830] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1928'.
[  277.269013][T11828] IPVS: length: 143 != 752698032
[  277.274741][T11830] FAULT_INJECTION: forcing a failure.
[  277.274741][T11830] name failslab, interval 1, probability 0, space 0, times 0
[  277.298475][T11830] CPU: 0 UID: 0 PID: 11830 Comm: syz.2.1928 Not tainted 6.14.0-rc2-syzkaller-00428-g7a7e0197133d #0
[  277.298506][T11830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  277.298519][T11830] Call Trace:
[  277.298527][T11830]  <TASK>
[  277.298536][T11830]  dump_stack_lvl+0x241/0x360
[  277.298567][T11830]  ? __pfx_dump_stack_lvl+0x10/0x10
[  277.298591][T11830]  ? __pfx__printk+0x10/0x10
[  277.298615][T11830]  ? kmem_cache_alloc_node_noprof+0x4f/0x380
[  277.298646][T11830]  ? __pfx___might_resched+0x10/0x10
[  277.298679][T11830]  should_fail_ex+0x40a/0x550
[  277.298712][T11830]  should_failslab+0xac/0x100
[  277.298740][T11830]  kmem_cache_alloc_node_noprof+0x77/0x380
[  277.298768][T11830]  ? __alloc_skb+0x1c3/0x440
[  277.298799][T11830]  __alloc_skb+0x1c3/0x440
[  277.298831][T11830]  ? __pfx___alloc_skb+0x10/0x10
[  277.298865][T11830]  ? netlink_ack_tlv_len+0x6e/0x200
[  277.298901][T11830]  netlink_ack+0x145/0xa60
[  277.298930][T11830]  ? __pfx_lock_acquire+0x10/0x10
[  277.298960][T11830]  ? __pfx_hwsim_get_radio_nl+0x10/0x10
[  277.298987][T11830]  ? __pfx___might_resched+0x10/0x10
[  277.299025][T11830]  netlink_rcv_skb+0x294/0x480
[  277.299060][T11830]  ? __pfx_genl_rcv_msg+0x10/0x10
[  277.299087][T11830]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  277.299152][T11830]  genl_rcv+0x28/0x40
[  277.299175][T11830]  netlink_unicast+0x7f6/0x990
[  277.299225][T11830]  ? __pfx_netlink_unicast+0x10/0x10
[  277.299251][T11830]  ? __virt_addr_valid+0x45f/0x530
[  277.299284][T11830]  ? __phys_addr_symbol+0x2f/0x70
[  277.299314][T11830]  ? __check_object_size+0x47a/0x730
[  277.299345][T11830]  netlink_sendmsg+0x8de/0xcb0
[  277.299379][T11830]  ? __pfx_netlink_sendmsg+0x10/0x10
[  277.299404][T11830]  ? aa_sock_msg_perm+0x91/0x160
[  277.299448][T11830]  ? __pfx_netlink_sendmsg+0x10/0x10
[  277.299467][T11830]  __sock_sendmsg+0x221/0x270
[  277.299496][T11830]  ____sys_sendmsg+0x53a/0x860
[  277.299535][T11830]  ? __pfx_____sys_sendmsg+0x10/0x10
[  277.299562][T11830]  ? __fget_files+0x2a/0x410
[  277.299594][T11830]  ? __fget_files+0x2a/0x410
[  277.299632][T11830]  __sys_sendmsg+0x269/0x350
[  277.299667][T11830]  ? __pfx___sys_sendmsg+0x10/0x10
[  277.299712][T11830]  ? do_sys_openat2+0x17a/0x1d0
[  277.299768][T11830]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  277.299801][T11830]  ? do_syscall_64+0x100/0x230
[  277.299831][T11830]  ? do_syscall_64+0xb6/0x230
[  277.299859][T11830]  do_syscall_64+0xf3/0x230
[  277.299883][T11830]  ? clear_bhb_loop+0x35/0x90
[  277.299915][T11830]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.299941][T11830] RIP: 0033:0x7f645298cde9
[  277.299960][T11830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  277.299976][T11830] RSP: 002b:00007f645377f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  277.299998][T11830] RAX: ffffffffffffffda RBX: 00007f6452ba5fa0 RCX: 00007f645298cde9
[  277.300012][T11830] RDX: 0000000000000000 RSI: 00004000000003c0 RDI: 0000000000000004
[  277.300025][T11830] RBP: 00007f645377f090 R08: 0000000000000000 R09: 0000000000000000
[  277.300037][T11830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  277.300049][T11830] R13: 0000000000000000 R14: 00007f6452ba5fa0 R15: 00007fff3e767fc8
[  277.300080][T11830]  </TASK>
[  277.367560][   T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  277.543464][T11833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1930'.
[  277.556809][T11841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1931'.
[  277.655539][T11841] 8021q: adding VLAN 0 to HW filter on device batadv1
[  277.663167][T11841] bridge0: port 1(batadv1) entered blocking state
[  277.669948][T11841] bridge0: port 1(batadv1) entered disabled state
[  277.676662][T11841] batadv1: entered allmulticast mode
[  277.683183][T11841] batadv1: entered promiscuous mode
[  277.689404][T11841] bridge0: port 1(batadv1) entered blocking state
[  277.697168][T11841] bridge0: port 1(batadv1) entered forwarding state
[  277.867960][T11846] sctp: [Deprecated]: syz.4.1933 (pid 11846) Use of int in maxseg socket option.
[  277.867960][T11846] Use struct sctp_assoc_value instead
[  277.882812][T11846] netlink: 'syz.4.1933': attribute type 10 has an invalid length.
[  277.895941][T11848] netlink: 'syz.4.1933': attribute type 10 has an invalid length.
[  277.903814][T11848] vlan0: entered allmulticast mode
[  278.178656][   T11] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  278.188018][   T11] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  278.210413][T11861] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1939'.
[  278.263008][T11861] erspan0 speed is unknown, defaulting to 1000
[  278.279847][T11861] lo speed is unknown, defaulting to 1000
[  278.796825][   T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  278.892492][T11872] sit0: left promiscuous mode
[  279.081323][T11872] bridge0: port 1(batadv1) entered disabled state
[  279.222559][T11865] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1939'.
[  279.267875][T11865] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1939'.
[  279.271777][T11888] netlink: 'syz.1.1948': attribute type 1 has an invalid length.
[  279.293836][T11888] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1948'.
[  279.620753][T11893] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1950'.
[  279.675144][T11895] IPv6: NLM_F_CREATE should be specified when creating new route
[  280.232761][   T53] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  280.460966][T11928] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1964'.
[  280.477157][T11928] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1964'.
[  280.514269][T11928] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1964'.
[  280.530824][T11932] FAULT_INJECTION: forcing a failure.
[  280.530824][T11932] name failslab, interval 1, probability 0, space 0, times 0
[  280.557445][T11932] CPU: 0 UID: 0 PID: 11932 Comm: syz.0.1966 Not tainted 6.14.0-rc2-syzkaller-00428-g7a7e0197133d #0
[  280.557479][T11932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  280.557493][T11932] Call Trace:
[  280.557500][T11932]  <TASK>
[  280.557509][T11932]  dump_stack_lvl+0x241/0x360
[  280.557541][T11932]  ? __pfx_dump_stack_lvl+0x10/0x10
[  280.557565][T11932]  ? __pfx__printk+0x10/0x10
[  280.557588][T11932]  ? __kmalloc_node_track_caller_noprof+0xb4/0x4c0
[  280.557621][T11932]  ? __pfx___might_resched+0x10/0x10
[  280.557652][T11932]  should_fail_ex+0x40a/0x550
[  280.557687][T11932]  should_failslab+0xac/0x100
[  280.557717][T11932]  __kmalloc_node_track_caller_noprof+0xdc/0x4c0
[  280.557747][T11932]  ? ethnl_default_set_doit+0x3e3/0xa00
[  280.557776][T11932]  kmemdup_noprof+0x2b/0x70
[  280.557810][T11932]  ethnl_default_set_doit+0x3e3/0xa00
[  280.557843][T11932]  ? __pfx_ethnl_default_set_doit+0x10/0x10
[  280.557871][T11932]  ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290
[  280.557909][T11932]  genl_rcv_msg+0xb1f/0xec0
[  280.557944][T11932]  ? __pfx_genl_rcv_msg+0x10/0x10
[  280.558003][T11932]  ? __pfx_lock_acquire+0x10/0x10
[  280.558034][T11932]  ? __pfx_ethnl_default_set_doit+0x10/0x10
[  280.558058][T11932]  ? __pfx___might_resched+0x10/0x10
[  280.558118][T11932]  netlink_rcv_skb+0x206/0x480
[  280.558153][T11932]  ? __pfx_genl_rcv_msg+0x10/0x10
[  280.558181][T11932]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  280.558249][T11932]  genl_rcv+0x28/0x40
[  280.558272][T11932]  netlink_unicast+0x7f6/0x990
[  280.558313][T11932]  ? __pfx_netlink_unicast+0x10/0x10
[  280.558341][T11932]  ? __virt_addr_valid+0x45f/0x530
[  280.558375][T11932]  ? __phys_addr_symbol+0x2f/0x70
[  280.558416][T11932]  ? __check_object_size+0x47a/0x730
[  280.558449][T11932]  netlink_sendmsg+0x8de/0xcb0
[  280.558483][T11932]  ? __pfx_netlink_sendmsg+0x10/0x10
[  280.558509][T11932]  ? aa_sock_msg_perm+0x91/0x160
[  280.558545][T11932]  ? __pfx_netlink_sendmsg+0x10/0x10
[  280.558563][T11932]  __sock_sendmsg+0x221/0x270
[  280.558590][T11932]  ____sys_sendmsg+0x53a/0x860
[  280.558630][T11932]  ? __pfx_____sys_sendmsg+0x10/0x10
[  280.558656][T11932]  ? __fget_files+0x2a/0x410
[  280.558688][T11932]  ? __fget_files+0x2a/0x410
[  280.558727][T11932]  __sys_sendmsg+0x269/0x350
[  280.558763][T11932]  ? __pfx___sys_sendmsg+0x10/0x10
[  280.558825][T11932]  ? __pfx_sched_clock_cpu+0x10/0x10
[  280.558850][T11932]  ? kvm_sched_clock_read+0x11/0x20
[  280.558872][T11932]  ? sched_clock+0x4a/0x70
[  280.558906][T11932]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  280.558938][T11932]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  280.558966][T11932]  ? __irq_exit_rcu+0x105/0x220
[  280.558993][T11932]  ? do_syscall_64+0xb6/0x230
[  280.559022][T11932]  do_syscall_64+0xf3/0x230
[  280.559047][T11932]  ? clear_bhb_loop+0x35/0x90
[  280.559081][T11932]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.559109][T11932] RIP: 0033:0x7fdd7538cde9
[  280.559129][T11932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  280.559148][T11932] RSP: 002b:00007fdd7610b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  280.559170][T11932] RAX: ffffffffffffffda RBX: 00007fdd755a5fa0 RCX: 00007fdd7538cde9
[  280.559185][T11932] RDX: 0000000000000000 RSI: 0000400000000240 RDI: 0000000000000004
[  280.559198][T11932] RBP: 00007fdd7610b090 R08: 0000000000000000 R09: 0000000000000000
[  280.559212][T11932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  280.559224][T11932] R13: 0000000000000000 R14: 00007fdd755a5fa0 R15: 00007fff829671e8
[  280.559268][T11932]  </TASK>
[  281.102827][T11944] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1971'.
[  281.552719][T11966] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  281.751127][T11973] FAULT_INJECTION: forcing a failure.
[  281.751127][T11973] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  281.772201][T11973] CPU: 1 UID: 0 PID: 11973 Comm: syz.2.1984 Not tainted 6.14.0-rc2-syzkaller-00428-g7a7e0197133d #0
[  281.772231][T11973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  281.772245][T11973] Call Trace:
[  281.772252][T11973]  <TASK>
[  281.772261][T11973]  dump_stack_lvl+0x241/0x360
[  281.772291][T11973]  ? __pfx_dump_stack_lvl+0x10/0x10
[  281.772312][T11973]  ? __pfx__printk+0x10/0x10
[  281.772336][T11973]  ? __pfx_lock_release+0x10/0x10
[  281.772376][T11973]  should_fail_ex+0x40a/0x550
[  281.772410][T11973]  _copy_from_user+0x2d/0xb0
[  281.772436][T11973]  get_timespec64+0x97/0x280
[  281.772470][T11973]  ? __pfx_get_timespec64+0x10/0x10
[  281.772499][T11973]  ? __fget_files+0x2a/0x410
[  281.772538][T11973]  __se_sys_ppoll+0xd1/0x330
[  281.772569][T11973]  ? __pfx___se_sys_ppoll+0x10/0x10
[  281.772595][T11973]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  281.772629][T11973]  ? do_syscall_64+0x100/0x230
[  281.772658][T11973]  ? __x64_sys_ppoll+0x20/0xc0
[  281.772686][T11973]  do_syscall_64+0xf3/0x230
[  281.772712][T11973]  ? clear_bhb_loop+0x35/0x90
[  281.772744][T11973]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.772772][T11973] RIP: 0033:0x7f645298cde9
[  281.772789][T11973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  281.772806][T11973] RSP: 002b:00007f645377f038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f
[  281.772828][T11973] RAX: ffffffffffffffda RBX: 00007f6452ba5fa0 RCX: 00007f645298cde9
[  281.772842][T11973] RDX: 0000400000000940 RSI: 0000000000000001 RDI: 0000400000000900
[  281.772856][T11973] RBP: 00007f645377f090 R08: 0000000000000000 R09: 0000000000000000
[  281.772869][T11973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  281.772881][T11973] R13: 0000000000000000 R14: 00007f6452ba5fa0 R15: 00007fff3e767fc8
[  281.772912][T11973]  </TASK>
[  282.787947][T11991] ip6gretap1: entered promiscuous mode
[  282.817459][T11991] ip6gretap1: entered allmulticast mode
[  282.912309][T12006] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1992'.
[  283.249887][T12020] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1998'.
[  283.540466][T12034] FAULT_INJECTION: forcing a failure.
[  283.540466][T12034] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  283.577834][T12034] CPU: 1 UID: 0 PID: 12034 Comm: syz.0.2003 Not tainted 6.14.0-rc2-syzkaller-00428-g7a7e0197133d #0
[  283.577868][T12034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  283.577881][T12034] Call Trace:
[  283.577889][T12034]  <TASK>
[  283.577898][T12034]  dump_stack_lvl+0x241/0x360
[  283.577930][T12034]  ? __pfx_dump_stack_lvl+0x10/0x10
[  283.577954][T12034]  ? __pfx__printk+0x10/0x10
[  283.577979][T12034]  ? __pfx_lock_release+0x10/0x10
[  283.578020][T12034]  should_fail_ex+0x40a/0x550
[  283.578054][T12034]  _copy_from_user+0x2d/0xb0
[  283.578080][T12034]  copy_msghdr_from_user+0xae/0x680
[  283.578110][T12034]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  283.578136][T12034]  ? __fget_files+0x2a/0x410
[  283.578170][T12034]  ? __fget_files+0x2a/0x410
[  283.578208][T12034]  __sys_sendmsg+0x209/0x350
[  283.578244][T12034]  ? __pfx___sys_sendmsg+0x10/0x10
[  283.578287][T12034]  ? do_sys_openat2+0x17a/0x1d0
[  283.578344][T12034]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  283.578377][T12034]  ? do_syscall_64+0x100/0x230
[  283.578407][T12034]  ? do_syscall_64+0xb6/0x230
[  283.578436][T12034]  do_syscall_64+0xf3/0x230
[  283.578462][T12034]  ? clear_bhb_loop+0x35/0x90
[  283.578494][T12034]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.578523][T12034] RIP: 0033:0x7fdd7538cde9
[  283.578541][T12034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  283.578559][T12034] RSP: 002b:00007fdd7610b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  283.578581][T12034] RAX: ffffffffffffffda RBX: 00007fdd755a5fa0 RCX: 00007fdd7538cde9
[  283.578597][T12034] RDX: 0000000000000000 RSI: 00004000000012c0 RDI: 0000000000000004
[  283.578610][T12034] RBP: 00007fdd7610b090 R08: 0000000000000000 R09: 0000000000000000
[  283.578623][T12034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  283.578635][T12034] R13: 0000000000000000 R14: 00007fdd755a5fa0 R15: 00007fff829671e8
[  283.578666][T12034]  </TASK>
[  283.777734][T12027] 8021q: adding VLAN 0 to HW filter on device bond0
[  283.792521][T12027] 8021q: adding VLAN 0 to HW filter on device team0
[  283.804337][T12027] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  284.389925][T12054] FAULT_INJECTION: forcing a failure.
[  284.389925][T12054] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  284.420951][T12054] CPU: 0 UID: 0 PID: 12054 Comm: syz.0.2012 Not tainted 6.14.0-rc2-syzkaller-00428-g7a7e0197133d #0
[  284.420982][T12054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  284.420994][T12054] Call Trace:
[  284.421002][T12054]  <TASK>
[  284.421010][T12054]  dump_stack_lvl+0x241/0x360
[  284.421041][T12054]  ? __pfx_dump_stack_lvl+0x10/0x10
[  284.421063][T12054]  ? __pfx__printk+0x10/0x10
[  284.421088][T12054]  ? snprintf+0xda/0x120
[  284.421122][T12054]  should_fail_ex+0x40a/0x550
[  284.421156][T12054]  _copy_to_user+0x31/0xb0
[  284.421183][T12054]  simple_read_from_buffer+0xca/0x150
[  284.421214][T12054]  proc_fail_nth_read+0x1e9/0x250
[  284.421245][T12054]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  284.421276][T12054]  ? rw_verify_area+0x243/0x630
[  284.421308][T12054]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  284.421337][T12054]  vfs_read+0x1f8/0xb40
[  284.421358][T12054]  ? fdget_pos+0x254/0x320
[  284.421387][T12054]  ? __pfx___mutex_lock+0x10/0x10
[  284.421414][T12054]  ? __pfx_vfs_read+0x10/0x10
[  284.421437][T12054]  ? __fget_files+0x2a/0x410
[  284.421467][T12054]  ? __fget_files+0x395/0x410
[  284.421493][T12054]  ? __fget_files+0x2a/0x410
[  284.421531][T12054]  ksys_read+0x18f/0x2b0
[  284.421553][T12054]  ? __pfx_ksys_read+0x10/0x10
[  284.421575][T12054]  ? do_syscall_64+0x100/0x230
[  284.421604][T12054]  ? do_syscall_64+0xb6/0x230
[  284.421631][T12054]  do_syscall_64+0xf3/0x230
[  284.421657][T12054]  ? clear_bhb_loop+0x35/0x90
[  284.421707][T12054]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.421736][T12054] RIP: 0033:0x7fdd7538b7fc
[  284.421754][T12054] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  284.421772][T12054] RSP: 002b:00007fdd7610b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  284.421795][T12054] RAX: ffffffffffffffda RBX: 00007fdd755a5fa0 RCX: 00007fdd7538b7fc
[  284.421810][T12054] RDX: 000000000000000f RSI: 00007fdd7610b0a0 RDI: 0000000000000005
[  284.421831][T12054] RBP: 00007fdd7610b090 R08: 0000000000000000 R09: 0000000003000137
[  284.421844][T12054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  284.421856][T12054] R13: 0000000000000000 R14: 00007fdd755a5fa0 R15: 00007fff829671e8
[  284.421889][T12054]  </TASK>
[  284.805141][ T5930] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  284.994123][T12066] FAULT_INJECTION: forcing a failure.
[  284.994123][T12066] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  285.009074][T12066] CPU: 0 UID: 0 PID: 12066 Comm: syz.1.2015 Not tainted 6.14.0-rc2-syzkaller-00428-g7a7e0197133d #0
[  285.009104][T12066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  285.009117][T12066] Call Trace:
[  285.009125][T12066]  <TASK>
[  285.009133][T12066]  dump_stack_lvl+0x241/0x360
[  285.009163][T12066]  ? __pfx_dump_stack_lvl+0x10/0x10
[  285.009187][T12066]  ? __pfx__printk+0x10/0x10
[  285.009215][T12066]  ? snprintf+0xda/0x120
[  285.009263][T12066]  should_fail_ex+0x40a/0x550
[  285.009296][T12066]  _copy_to_user+0x31/0xb0
[  285.009324][T12066]  simple_read_from_buffer+0xca/0x150
[  285.009353][T12066]  proc_fail_nth_read+0x1e9/0x250
[  285.009383][T12066]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  285.009414][T12066]  ? rw_verify_area+0x243/0x630
[  285.009446][T12066]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  285.009475][T12066]  vfs_read+0x1f8/0xb40
[  285.009496][T12066]  ? fdget_pos+0x254/0x320
[  285.009525][T12066]  ? __pfx___mutex_lock+0x10/0x10
[  285.009551][T12066]  ? __pfx_vfs_read+0x10/0x10
[  285.009575][T12066]  ? __fget_files+0x2a/0x410
[  285.009604][T12066]  ? __fget_files+0x395/0x410
[  285.009630][T12066]  ? __fget_files+0x2a/0x410
[  285.009668][T12066]  ksys_read+0x18f/0x2b0
[  285.009690][T12066]  ? __pfx_ksys_read+0x10/0x10
[  285.009721][T12066]  ? do_syscall_64+0x100/0x230
[  285.009749][T12066]  ? do_syscall_64+0xb6/0x230
[  285.009777][T12066]  do_syscall_64+0xf3/0x230
[  285.009802][T12066]  ? clear_bhb_loop+0x35/0x90
[  285.009834][T12066]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.009862][T12066] RIP: 0033:0x7f365318b7fc
[  285.009879][T12066] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  285.009896][T12066] RSP: 002b:00007f3653fa2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  285.009917][T12066] RAX: ffffffffffffffda RBX: 00007f36533a5fa0 RCX: 00007f365318b7fc
[  285.009932][T12066] RDX: 000000000000000f RSI: 00007f3653fa20a0 RDI: 0000000000000005
[  285.009944][T12066] RBP: 00007f3653fa2090 R08: 0000000000000000 R09: 0000000000000000
[  285.009957][T12066] R10: 0000400000000180 R11: 0000000000000246 R12: 0000000000000001
[  285.009969][T12066] R13: 0000000000000000 R14: 00007f36533a5fa0 R15: 00007fff46753ba8
[  285.010001][T12066]  </TASK>
[  285.087161][ T5930] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  285.357862][T12074] __nla_validate_parse: 2 callbacks suppressed
[  285.357889][T12074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2018'.
[  285.382473][T12074] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2018'.
[  287.386405][ T1142] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  287.499490][T12098] FAULT_INJECTION: forcing a failure.
[  287.499490][T12098] name failslab, interval 1, probability 0, space 0, times 0
[  287.512646][T12098] CPU: 0 UID: 0 PID: 12098 Comm: syz.3.2026 Not tainted 6.14.0-rc2-syzkaller-00428-g7a7e0197133d #0
[  287.512673][T12098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  287.512687][T12098] Call Trace:
[  287.512693][T12098]  <TASK>
[  287.512702][T12098]  dump_stack_lvl+0x241/0x360
[  287.512733][T12098]  ? __pfx_dump_stack_lvl+0x10/0x10
[  287.512764][T12098]  ? __pfx__printk+0x10/0x10
[  287.512788][T12098]  ? __kmalloc_cache_noprof+0x48/0x390
[  287.512818][T12098]  ? __pfx___might_resched+0x10/0x10
[  287.512849][T12098]  should_fail_ex+0x40a/0x550
[  287.512882][T12098]  should_failslab+0xac/0x100
[  287.512910][T12098]  __kmalloc_cache_noprof+0x70/0x390
[  287.512936][T12098]  ? call_usermodehelper_setup+0x8e/0x270
[  287.512961][T12098]  ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0
[  287.512995][T12098]  call_usermodehelper_setup+0x8e/0x270
[  287.513019][T12098]  ? __pfx_free_modprobe_argv+0x10/0x10
[  287.513056][T12098]  __request_module+0x3cd/0x640
[  287.513095][T12098]  ? __pfx___request_module+0x10/0x10
[  287.513129][T12098]  ? do_raw_spin_lock+0x14f/0x370
[  287.513163][T12098]  ? do_raw_spin_unlock+0x13c/0x8b0
[  287.513198][T12098]  ppp_set_compress+0x33a/0x9a0
[  287.513237][T12098]  ? __pfx_ppp_set_compress+0x10/0x10
[  287.513271][T12098]  ? __might_fault+0xaa/0x120
[  287.513311][T12098]  ppp_ioctl+0x16f4/0x1cd0
[  287.513346][T12098]  ? __pfx_ppp_ioctl+0x10/0x10
[  287.513379][T12098]  ? __fget_files+0x2a/0x410
[  287.513411][T12098]  ? __fget_files+0x2a/0x410
[  287.513443][T12098]  ? __pfx_ppp_ioctl+0x10/0x10
[  287.513474][T12098]  __se_sys_ioctl+0xf5/0x170
[  287.513497][T12098]  do_syscall_64+0xf3/0x230
[  287.513524][T12098]  ? clear_bhb_loop+0x35/0x90
[  287.513556][T12098]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.513584][T12098] RIP: 0033:0x7f065f18cde9
[  287.513602][T12098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  287.513619][T12098] RSP: 002b:00007f0660029038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  287.513640][T12098] RAX: ffffffffffffffda RBX: 00007f065f3a5fa0 RCX: 00007f065f18cde9
[  287.513656][T12098] RDX: 0000400000000080 RSI: 000000004010744d RDI: 0000000000000003
[  287.513668][T12098] RBP: 00007f0660029090 R08: 0000000000000000 R09: 0000000000000000
[  287.513681][T12098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  287.513693][T12098] R13: 0000000000000000 R14: 00007f065f3a5fa0 R15: 00007ffd3c67f0d8
[  287.513725][T12098]  </TASK>
[  287.780384][T12100] FAULT_INJECTION: forcing a failure.
[  287.780384][T12100] name failslab, interval 1, probability 0, space 0, times 0
[  287.793736][T12100] CPU: 0 UID: 0 PID: 12100 Comm: syz.1.2027 Not tainted 6.14.0-rc2-syzkaller-00428-g7a7e0197133d #0
[  287.793763][T12100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  287.793775][T12100] Call Trace:
[  287.793783][T12100]  <TASK>
[  287.793791][T12100]  dump_stack_lvl+0x241/0x360
[  287.793820][T12100]  ? __pfx_dump_stack_lvl+0x10/0x10
[  287.793842][T12100]  ? __pfx__printk+0x10/0x10
[  287.793864][T12100]  ? kmem_cache_alloc_node_noprof+0x4f/0x380
[  287.793895][T12100]  ? __pfx___might_resched+0x10/0x10
[  287.793927][T12100]  should_fail_ex+0x40a/0x550
[  287.793959][T12100]  should_failslab+0xac/0x100
[  287.793987][T12100]  kmem_cache_alloc_node_noprof+0x77/0x380
[  287.794014][T12100]  ? __alloc_skb+0x1c3/0x440
[  287.794045][T12100]  __alloc_skb+0x1c3/0x440
[  287.794075][T12100]  ? __pfx___alloc_skb+0x10/0x10
[  287.794103][T12100]  ? netlink_autobind+0xd6/0x2f0
[  287.794122][T12100]  ? netlink_autobind+0x2b0/0x2f0
[  287.794147][T12100]  netlink_sendmsg+0x634/0xcb0
[  287.794178][T12100]  ? __pfx_netlink_sendmsg+0x10/0x10
[  287.794202][T12100]  ? aa_sock_msg_perm+0x91/0x160
[  287.794236][T12100]  ? __pfx_netlink_sendmsg+0x10/0x10
[  287.794253][T12100]  __sock_sendmsg+0x221/0x270
[  287.794277][T12100]  ____sys_sendmsg+0x53a/0x860
[  287.794314][T12100]  ? __pfx_____sys_sendmsg+0x10/0x10
[  287.794340][T12100]  ? __fget_files+0x2a/0x410
[  287.794370][T12100]  ? __fget_files+0x2a/0x410
[  287.794406][T12100]  __sys_sendmsg+0x269/0x350
[  287.794440][T12100]  ? __pfx___sys_sendmsg+0x10/0x10
[  287.794489][T12100]  ? do_sys_openat2+0x17a/0x1d0
[  287.794560][T12100]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  287.794593][T12100]  ? do_syscall_64+0x100/0x230
[  287.794624][T12100]  ? do_syscall_64+0xb6/0x230
[  287.794653][T12100]  do_syscall_64+0xf3/0x230
[  287.794679][T12100]  ? clear_bhb_loop+0x35/0x90
[  287.794712][T12100]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.794747][T12100] RIP: 0033:0x7f365318cde9
[  287.794766][T12100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  287.794784][T12100] RSP: 002b:00007f3653fa2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  287.794807][T12100] RAX: ffffffffffffffda RBX: 00007f36533a5fa0 RCX: 00007f365318cde9
[  287.794822][T12100] RDX: 0000000000000000 RSI: 0000400000000600 RDI: 000000000000000d
[  287.794835][T12100] RBP: 00007f3653fa2090 R08: 0000000000000000 R09: 0000000000000000
[  287.794848][T12100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  287.794861][T12100] R13: 0000000000000000 R14: 00007f36533a5fa0 R15: 00007fff46753ba8
[  287.794891][T12100]  </TASK>
[  288.476135][ T1142] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  288.484450][ T1142] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  288.745516][T12136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2038'.
[  288.754647][T12136] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2038'.
[  289.346166][ T5930] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  289.794917][T12172] IPv6: Can't replace route, no match found
[  289.893746][T12174] erspan0 speed is unknown, defaulting to 1000
[  289.901290][T12174] lo speed is unknown, defaulting to 1000
[  290.223641][ T5930] IPVS: starting estimator thread 0...
[  290.376236][T12183] IPVS: using max 25 ests per chain, 60000 per kthread
[  290.733601][T12176] tipc: Bearer <udp:s>: already 2 bearers with priority 10
[  290.742482][T12201] netlink: 'syz.4.2061': attribute type 11 has an invalid length.
[  290.745854][T12176] tipc: Bearer <udp:s>: trying with adjusted priority
[  290.773757][T12176] tipc: Enabling of bearer <udp:s> rejected, max 3 bearers permitted
[  290.877868][T12205] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2063'.
[  290.988220][T12209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2064'.
[  291.143994][T12215] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2066'.
[  291.551670][T12237] pim6reg1: entered promiscuous mode
[  291.560819][T12237] pim6reg1: entered allmulticast mode
[  291.576695][T12235] erspan0 speed is unknown, defaulting to 1000
[  291.621653][T12235] lo speed is unknown, defaulting to 1000
[  291.629789][T12240] bond0: (slave netdevsim0): Releasing backup interface
[  291.761934][T12246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2075'.
[  291.795077][T12240] bond1: (slave ip6gretap1): Releasing active interface
[  291.804810][T12240] batadv1: left allmulticast mode
[  291.810059][T12240] batadv1: left promiscuous mode
[  291.815270][T12240] bridge0: port 1(batadv1) entered disabled state
[  292.044837][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  292.069956][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  292.626058][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  292.735660][T12277] netlink: 'syz.4.2086': attribute type 10 has an invalid length.
[  292.786093][T12277] macvlan0: entered allmulticast mode
[  292.822751][T12277] veth1_vlan: entered allmulticast mode
[  292.859752][T12277] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  292.980532][T12281] erspan0 speed is unknown, defaulting to 1000
[  293.018014][T12281] lo speed is unknown, defaulting to 1000
[  293.354525][T12301] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2094'.
[  293.405198][T12305] netlink: 'syz.4.2095': attribute type 21 has an invalid length.
[  293.483361][T12305] netlink: 'syz.4.2095': attribute type 21 has an invalid length.
[  293.615671][T12305] netlink: 'syz.4.2095': attribute type 21 has an invalid length.
[  293.624505][T12305] netlink: 'syz.4.2095': attribute type 21 has an invalid length.
[  293.637129][T12305] netlink: 'syz.4.2095': attribute type 21 has an invalid length.
[  293.673467][T12305] netlink: 'syz.4.2095': attribute type 21 has an invalid length.
[  293.687005][T12305] netlink: 'syz.4.2095': attribute type 21 has an invalid length.
[  293.716385][T12305] netlink: 'syz.4.2095': attribute type 21 has an invalid length.
[  293.724367][T12305] netlink: 'syz.4.2095': attribute type 21 has an invalid length.
[  293.912607][T12315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2099'.
[  294.095310][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  294.103591][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  294.456899][T12336] erspan0 speed is unknown, defaulting to 1000
[  294.483880][T12336] lo speed is unknown, defaulting to 1000
[  294.560316][T12341] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2110'.
[  294.694993][T12346] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2112'.
[  295.372654][T12372] batman_adv: batadv0: Removing interface: dummy0
[  295.430135][T12369] erspan0 speed is unknown, defaulting to 1000
[  295.451222][T12369] lo speed is unknown, defaulting to 1000
[  295.477149][T12375] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2122'.
[  296.319157][T12397] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2130'.
[  296.331234][T12393] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2128'.
[  296.431755][T12401] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2128'.
[  296.697407][T12405] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2134'.
[  296.700083][T12410] x_tables: duplicate underflow at hook 1
[  296.714125][T12403] erspan0 speed is unknown, defaulting to 1000
[  296.756033][T12403] lo speed is unknown, defaulting to 1000
[  297.080331][T12419] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  297.168114][T12419] erspan0 speed is unknown, defaulting to 1000
[  297.198355][T12419] lo speed is unknown, defaulting to 1000
[  297.254196][T12423] syzkaller0: entered promiscuous mode
[  297.266806][T12423] syzkaller0: entered allmulticast mode
[  297.300808][T12423] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  297.310583][T12423] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  297.877781][T12443] validate_nla: 27 callbacks suppressed
[  297.877801][T12443] netlink: 'syz.3.2147': attribute type 1 has an invalid length.
[  297.916197][T12443] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2147'.
[  297.971982][T12447] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2150'.
[  300.063892][T12461] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  300.361809][T12469] erspan0 speed is unknown, defaulting to 1000
[  300.554301][T12469] lo speed is unknown, defaulting to 1000
[  300.842809][T12483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2161'.
[  301.001385][T12489] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  301.021013][T12489] batman_adv: batadv0: Adding interface: gretap1
[  301.033162][T12489] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  301.065066][T12493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2165'.
[  301.068158][T12489] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[  301.122696][T12493] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2165'.
[  301.425851][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  301.554544][T12508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2171'.
[  302.320971][T12531] netlink: 'syz.0.2180': attribute type 1 has an invalid length.
[  302.329238][T12531] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2180'.
[  302.428329][T12533] netlink: 'syz.1.2181': attribute type 1 has an invalid length.
[  302.459485][T12533] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2181'.
[  302.655170][T12551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2188'.
[  302.727857][T12554] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  303.433860][T12577] netlink: 'syz.2.2195': attribute type 1 has an invalid length.
[  303.441843][T12577] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2195'.
[  303.609039][T12587] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2199'.
[  303.674236][T12589] netem: incorrect ge model size
[  303.680046][T12589] netem: change failed
[  304.019625][T12608] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2208'.
[  304.084078][T12608] vlan3: entered promiscuous mode
[  304.916833][T12646] erspan0 speed is unknown, defaulting to 1000
[  304.926985][T12646] lo speed is unknown, defaulting to 1000
[  304.946165][T12651] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2224'.
[  304.966580][T12651] nbd: must specify at least one socket
[  304.978176][T12648] erspan0 speed is unknown, defaulting to 1000
[  305.101257][T12661] netlink: 'syz.2.2227': attribute type 1 has an invalid length.
[  305.114002][T12661] NCSI netlink: No device for ifindex 0
[  305.172913][T12661] netlink: 'syz.2.2227': attribute type 1 has an invalid length.
[  305.192060][T12661] NCSI netlink: No device for ifindex 0
[  305.232487][T12648] lo speed is unknown, defaulting to 1000
[  305.343307][T12665] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2228'.
[  305.369007][T12665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2228'.
[  305.551072][T12671] veth0_to_bridge: entered promiscuous mode
[  305.560821][T12670] veth0_to_bridge: left promiscuous mode
[  306.078991][T12691] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  306.241792][T12693] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  306.528577][T12705] erspan0 speed is unknown, defaulting to 1000
[  306.558119][T12705] lo speed is unknown, defaulting to 1000
[  306.617488][T12708] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  307.017869][T12724] erspan0 speed is unknown, defaulting to 1000
[  307.083031][T12732] Cannot find add_set index 0 as target
[  307.202451][T12724] lo speed is unknown, defaulting to 1000
[  308.083056][T12763] netlink: 'syz.3.2265': attribute type 1 has an invalid length.
[  308.083329][T12761] __nla_validate_parse: 4 callbacks suppressed
[  308.083347][T12761] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2262'.
[  308.102262][T12763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2265'.
[  308.154488][T12761] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  308.182236][T12766] erspan0 speed is unknown, defaulting to 1000
[  308.195369][T12766] lo speed is unknown, defaulting to 1000
[  308.201816][T12764] netlink: 'syz.4.2262': attribute type 2 has an invalid length.
[  308.229607][T12770] netlink: 'syz.2.2267': attribute type 12 has an invalid length.
[  308.268585][T12772] netlink: 512 bytes leftover after parsing attributes in process `syz.3.2268'.
[  308.447746][T12778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2266'.
[  308.507406][T12778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2266'.
[  308.592292][T12784] netlink: 'syz.3.2272': attribute type 19 has an invalid length.
[  308.772832][T12787] xt_CT: No such helper "snmp"
[  308.792846][T12787] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2274'.
[  309.082532][T12809] netlink: 'syz.3.2279': attribute type 72 has an invalid length.
[  309.109302][T12809] netlink: 480 bytes leftover after parsing attributes in process `syz.3.2279'.
[  309.245987][T12816] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  309.283929][T12815] FAULT_INJECTION: forcing a failure.
[  309.283929][T12815] name failslab, interval 1, probability 0, space 0, times 0
[  309.309250][T12815] CPU: 0 UID: 0 PID: 12815 Comm: syz.0.2282 Not tainted 6.14.0-rc2-syzkaller-00428-g7a7e0197133d #0
[  309.309284][T12815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  309.309308][T12815] Call Trace:
[  309.309316][T12815]  <TASK>
[  309.309331][T12815]  dump_stack_lvl+0x241/0x360
[  309.309363][T12815]  ? __pfx_dump_stack_lvl+0x10/0x10
[  309.309386][T12815]  ? __pfx__printk+0x10/0x10
[  309.309409][T12815]  ? __kmalloc_node_track_caller_noprof+0xb4/0x4c0
[  309.309441][T12815]  ? __pfx___might_resched+0x10/0x10
[  309.309472][T12815]  should_fail_ex+0x40a/0x550
[  309.309506][T12815]  should_failslab+0xac/0x100
[  309.309535][T12815]  __kmalloc_node_track_caller_noprof+0xdc/0x4c0
[  309.309564][T12815]  ? ethnl_default_set_doit+0x3e3/0xa00
[  309.309592][T12815]  kmemdup_noprof+0x2b/0x70
[  309.309624][T12815]  ethnl_default_set_doit+0x3e3/0xa00
[  309.309656][T12815]  ? __pfx_ethnl_default_set_doit+0x10/0x10
[  309.309683][T12815]  ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290
[  309.309719][T12815]  genl_rcv_msg+0xb1f/0xec0
[  309.309753][T12815]  ? __pfx_genl_rcv_msg+0x10/0x10
[  309.309809][T12815]  ? __pfx_lock_acquire+0x10/0x10
[  309.309838][T12815]  ? __pfx_ethnl_default_set_doit+0x10/0x10
[  309.309862][T12815]  ? __pfx___might_resched+0x10/0x10
[  309.309899][T12815]  netlink_rcv_skb+0x206/0x480
[  309.309932][T12815]  ? __pfx_genl_rcv_msg+0x10/0x10
[  309.309959][T12815]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  309.310044][T12815]  genl_rcv+0x28/0x40
[  309.310067][T12815]  netlink_unicast+0x7f6/0x990
[  309.310107][T12815]  ? __pfx_netlink_unicast+0x10/0x10
[  309.310135][T12815]  ? __virt_addr_valid+0x45f/0x530
[  309.310171][T12815]  ? __phys_addr_symbol+0x2f/0x70
[  309.310202][T12815]  ? __check_object_size+0x47a/0x730
[  309.310234][T12815]  netlink_sendmsg+0x8de/0xcb0
[  309.310273][T12815]  ? __pfx_netlink_sendmsg+0x10/0x10
[  309.310299][T12815]  ? aa_sock_msg_perm+0x91/0x160
[  309.310342][T12815]  ? __pfx_netlink_sendmsg+0x10/0x10
[  309.310361][T12815]  __sock_sendmsg+0x221/0x270
[  309.310388][T12815]  ____sys_sendmsg+0x53a/0x860
[  309.310428][T12815]  ? __pfx_____sys_sendmsg+0x10/0x10
[  309.310457][T12815]  ? __fget_files+0x2a/0x410
[  309.310489][T12815]  ? __fget_files+0x2a/0x410
[  309.310522][T12815]  __sys_sendmsg+0x269/0x350
[  309.310551][T12815]  ? __pfx___sys_sendmsg+0x10/0x10
[  309.310587][T12815]  ? do_sys_openat2+0x17a/0x1d0
[  309.310632][T12815]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  309.310658][T12815]  ? do_syscall_64+0x100/0x230
[  309.310683][T12815]  ? do_syscall_64+0xb6/0x230
[  309.310705][T12815]  do_syscall_64+0xf3/0x230
[  309.310726][T12815]  ? clear_bhb_loop+0x35/0x90
[  309.310752][T12815]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.310775][T12815] RIP: 0033:0x7fdd7538cde9
[  309.310800][T12815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  309.310814][T12815] RSP: 002b:00007fdd7610b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  309.310833][T12815] RAX: ffffffffffffffda RBX: 00007fdd755a5fa0 RCX: 00007fdd7538cde9
[  309.310845][T12815] RDX: 0000000000000000 RSI: 0000400000000240 RDI: 0000000000000003
[  309.310856][T12815] RBP: 00007fdd7610b090 R08: 0000000000000000 R09: 0000000000000000
[  309.310866][T12815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  309.310876][T12815] R13: 0000000000000000 R14: 00007fdd755a5fa0 R15: 00007fff829671e8
[  309.310901][T12815]  </TASK>
[  309.672357][T12821] netlink: 'syz.3.2286': attribute type 19 has an invalid length.
[  309.741728][T12817] erspan0 speed is unknown, defaulting to 1000
[  309.782388][T12817] lo speed is unknown, defaulting to 1000
[  311.146140][T12867] erspan0 speed is unknown, defaulting to 1000
[  311.153857][T12867] lo speed is unknown, defaulting to 1000
[  311.155365][T12869] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  311.290781][T12878] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2305'.
[  311.499292][T12880] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2306'.
[  311.550227][T12880] x_tables: duplicate underflow at hook 2
[  311.793223][T12885] erspan0 speed is unknown, defaulting to 1000
[  311.849117][T12885] lo speed is unknown, defaulting to 1000
[  312.590325][T12908] erspan0 speed is unknown, defaulting to 1000
[  312.642712][T12908] lo speed is unknown, defaulting to 1000
[  312.837217][ T5886] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  312.882207][ T5886] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  313.651781][T12937] netlink: 'syz.1.2328': attribute type 1 has an invalid length.
[  313.660064][T12937] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2328'.
[  313.941303][T12940] erspan0 speed is unknown, defaulting to 1000
[  314.006544][T12947] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2332'.
[  314.055975][T12947] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  314.063277][T12947] IPv6: NLM_F_CREATE should be set when creating new route
[  314.070700][T12947] IPv6: NLM_F_CREATE should be set when creating new route
[  314.160416][T12940] lo speed is unknown, defaulting to 1000
[  314.737101][T12961] batman_adv: batadv0: Removing interface: gretap1
[  314.838934][T12959] erspan0 speed is unknown, defaulting to 1000
[  314.848333][T12959] lo speed is unknown, defaulting to 1000
[  315.465881][T12976] vlan1: default FDB implementation only supports local addresses
[  316.170861][T12990] erspan0 speed is unknown, defaulting to 1000
[  316.200048][T12990] lo speed is unknown, defaulting to 1000
[  317.465191][T13038] team0: Port device virt_wifi0 removed
[  317.507408][T13038] bond0: (slave macvlan0): Releasing backup interface
[  317.550699][T13038] veth1_vlan: left allmulticast mode
[  317.585339][T13031] erspan0 speed is unknown, defaulting to 1000
[  317.606011][T13031] lo speed is unknown, defaulting to 1000
[  317.894379][T13050] netlink: 332 bytes leftover after parsing attributes in process `syz.0.2367'.
[  317.903754][T13050] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2367'.
[  317.933997][T13050] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2367'.
[  317.967399][T13048] IPv6: sit1: Disabled Multicast RS
[  318.223224][T13057] erspan0 speed is unknown, defaulting to 1000
[  318.314759][T13057] lo speed is unknown, defaulting to 1000
[  318.315636][T13066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2372'.
[  318.355838][T13066] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2372'.
[  318.705953][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  321.002610][T13105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2387'.
[  321.018452][T13105] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  321.035593][T13105] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2387'.
[  321.067181][T13105] lo: MTU too low for tipc bearer
[  321.072492][T13105] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  321.112176][T13105] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2387'.
[  321.344482][T13117] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2392'.
[  322.042624][T13147] erspan0 speed is unknown, defaulting to 1000
[  322.050287][T13147] lo speed is unknown, defaulting to 1000
[  322.396119][T13164] bond0: entered promiscuous mode
[  322.545196][T13171] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2411'.
[  322.584266][T13173] netlink: 252 bytes leftover after parsing attributes in process `syz.3.2413'.
[  322.742262][T13177] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2415'.
[  322.770507][T13177] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2415'.
[  322.800817][T13176] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2414'.
[  323.351657][T13198] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2424'.
[  323.694165][T13216] FAULT_INJECTION: forcing a failure.
[  323.694165][T13216] name failslab, interval 1, probability 0, space 0, times 0
[  323.724676][T13214] erspan0 speed is unknown, defaulting to 1000
[  323.757934][T13214] lo speed is unknown, defaulting to 1000
[  323.765807][T13216] CPU: 1 UID: 0 PID: 13216 Comm: syz.0.2429 Not tainted 6.14.0-rc2-syzkaller-00428-g7a7e0197133d #0
[  323.765839][T13216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  323.765852][T13216] Call Trace:
[  323.765860][T13216]  <TASK>
[  323.765868][T13216]  dump_stack_lvl+0x241/0x360
[  323.765901][T13216]  ? __pfx_dump_stack_lvl+0x10/0x10
[  323.765924][T13216]  ? __pfx__printk+0x10/0x10
[  323.765959][T13216]  should_fail_ex+0x40a/0x550
[  323.765995][T13216]  should_failslab+0xac/0x100
[  323.766025][T13216]  __kmalloc_cache_noprof+0x70/0x390
[  323.766054][T13216]  ? sctp_add_bind_addr+0x89/0x3a0
[  323.766084][T13216]  sctp_add_bind_addr+0x89/0x3a0
[  323.766115][T13216]  sctp_copy_local_addr_list+0x311/0x500
[  323.766144][T13216]  ? sctp_copy_local_addr_list+0xab/0x500
[  323.766171][T13216]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  323.766202][T13216]  ? sctp_v6_is_any+0x60/0x70
[  323.766241][T13216]  ? sctp_copy_one_addr+0x94/0x360
[  323.766271][T13216]  sctp_bind_addr_copy+0xad/0x3b0
[  323.766298][T13216]  ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190
[  323.766324][T13216]  sctp_connect_new_asoc+0x2f3/0x6c0
[  323.766360][T13216]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  323.766390][T13216]  ? sctp_sendmsg+0xf1a/0x35d0
[  323.766428][T13216]  ? sctp_endpoint_lookup_assoc+0xc9/0x250
[  323.766467][T13216]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  323.766501][T13216]  sctp_sendmsg+0x1f64/0x35d0
[  323.766553][T13216]  ? __pfx_sctp_sendmsg+0x10/0x10
[  323.766588][T13216]  ? aa_sk_perm+0x96d/0xab0
[  323.766634][T13216]  ? inet_sendmsg+0x330/0x390
[  323.766665][T13216]  __sock_sendmsg+0x1a6/0x270
[  323.766693][T13216]  __sys_sendto+0x363/0x4c0
[  323.766727][T13216]  ? __pfx___sys_sendto+0x10/0x10
[  323.766769][T13216]  ? __fget_files+0x2a/0x410
[  323.766809][T13216]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  323.766845][T13216]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  323.766883][T13216]  __x64_sys_sendto+0xde/0x100
[  323.766919][T13216]  do_syscall_64+0xf3/0x230
[  323.766946][T13216]  ? clear_bhb_loop+0x35/0x90
[  323.766979][T13216]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.767008][T13216] RIP: 0033:0x7fdd7538cde9
[  323.767027][T13216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  323.767045][T13216] RSP: 002b:00007fdd7610b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  323.767067][T13216] RAX: ffffffffffffffda RBX: 00007fdd755a5fa0 RCX: 00007fdd7538cde9
[  323.767082][T13216] RDX: 0000000000000001 RSI: 00004000000002c0 RDI: 0000000000000003
[  323.767094][T13216] RBP: 00007fdd7610b090 R08: 0000400000000100 R09: 000000000000001c
[  323.767107][T13216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  323.767119][T13216] R13: 0000000000000000 R14: 00007fdd755a5fa0 R15: 00007fff829671e8
[  323.767151][T13216]  </TASK>
[  324.114600][T10747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.129243][T10747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  324.514674][T13235] erspan0 speed is unknown, defaulting to 1000
[  324.537174][T13235] lo speed is unknown, defaulting to 1000
[  324.710196][T13248] netlink: 'syz.2.2439': attribute type 1 has an invalid length.
[  325.239331][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  325.256108][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  325.795614][T13279] erspan0 speed is unknown, defaulting to 1000
[  325.821345][T13279] lo speed is unknown, defaulting to 1000
[  325.896160][T13287] netlink: 'syz.0.2452': attribute type 1 has an invalid length.
[  326.069671][T13293] __nla_validate_parse: 8 callbacks suppressed
[  326.069693][T13293] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2453'.
[  326.095166][T13293] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2453'.
[  326.276183][T13298] netlink: 'syz.1.2456': attribute type 29 has an invalid length.
[  326.285941][T13298] netlink: 'syz.1.2456': attribute type 29 has an invalid length.
[  326.295344][T13298] netlink: 508 bytes leftover after parsing attributes in process `syz.1.2456'.
[  326.440001][T13305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2458'.
[  326.625954][ T5835] Bluetooth: hci3: command 0x0405 tx timeout
[  326.653761][T13309] erspan0 speed is unknown, defaulting to 1000
[  326.668348][T13309] lo speed is unknown, defaulting to 1000
[  326.810785][T13318] netlink: 'syz.2.2462': attribute type 1 has an invalid length.
[  326.971571][T13320] netlink: 'syz.4.2463': attribute type 1 has an invalid length.
[  326.979816][T13320] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2463'.
[  327.318815][T13330] netlink: 'syz.2.2467': attribute type 3 has an invalid length.
[  327.336480][T13330] netlink: 'syz.2.2467': attribute type 3 has an invalid length.
[  327.417320][T13330] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2467'.
[  327.428099][T13335] netlink: 'syz.2.2467': attribute type 3 has an invalid length.
[  327.442595][T13335] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2467'.
[  327.655569][T13344] erspan0 speed is unknown, defaulting to 1000
[  327.658472][T13347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2472'.
[  327.681159][T13347] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2472'.
[  327.709481][T13344] lo speed is unknown, defaulting to 1000
[  327.956821][T13355] netlink: 'syz.2.2475': attribute type 1 has an invalid length.
[  327.964950][T13355] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2475'.
[  328.562553][T13382] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes
[  329.229192][T13408] erspan0 speed is unknown, defaulting to 1000
[  329.274445][T13408] lo speed is unknown, defaulting to 1000
[  329.296193][ T7944] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  329.376459][T13416] erspan0 speed is unknown, defaulting to 1000
[  329.486441][T13416] lo speed is unknown, defaulting to 1000
[  330.146073][ T5930] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  330.175302][T13434] validate_nla: 2 callbacks suppressed
[  330.175324][T13434] netlink: 'syz.4.2501': attribute type 1 has an invalid length.
[  330.912358][T13467] set match dimension is over the limit!
[  331.578568][T13475] netlink: 'syz.3.2516': attribute type 1 has an invalid length.
[  331.586528][T13475] __nla_validate_parse: 7 callbacks suppressed
[  331.586547][T13475] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2516'.
[  331.750779][T13477] erspan0 speed is unknown, defaulting to 1000
[  331.782714][T13477] lo speed is unknown, defaulting to 1000
[  332.121064][T13495] netlink: 'syz.2.2522': attribute type 1 has an invalid length.
[  332.123085][T13503] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2526'.
[  332.290557][T13510] erspan0 speed is unknown, defaulting to 1000
[  332.321545][T13510] lo speed is unknown, defaulting to 1000
[  332.636051][T13521] netlink: 'syz.0.2531': attribute type 1 has an invalid length.
[  332.644204][T13521] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2531'.
[  333.826563][T13553] erspan0 speed is unknown, defaulting to 1000
[  333.849459][T13562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2540'.
[  333.977740][T13553] lo speed is unknown, defaulting to 1000
[  334.066856][T13562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2540'.
[  334.249879][T13567] netlink: 'syz.4.2544': attribute type 1 has an invalid length.
[  334.258249][T13567] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2544'.
[  334.353297][T13572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2545'.
[  334.955207][T13591] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  334.962567][T13591] IPv6: NLM_F_CREATE should be set when creating new route
[  334.969877][T13591] IPv6: NLM_F_CREATE should be set when creating new route
[  335.204676][T13597] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2555'.
[  335.548652][T13610] bond3: entered promiscuous mode
[  335.553761][T13610] bond3: entered allmulticast mode
[  335.569939][T13610] 8021q: adding VLAN 0 to HW filter on device bond3
[  335.596936][T13610] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  335.783776][T13621] Cannot find del_set index 4 as target
[  335.803579][T13621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2563'.
[  335.861295][T13624] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2563'.
[  336.468688][T13640] erspan0 speed is unknown, defaulting to 1000
[  336.488247][T13640] lo speed is unknown, defaulting to 1000
[  336.670829][T13650] __nla_validate_parse: 1 callbacks suppressed
[  336.670852][T13650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2572'.
[  336.924252][T13659] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2574'.
[  337.410077][T13671] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2579'.
[  337.993274][T13682] syzkaller1: entered promiscuous mode
[  338.001109][T13682] syzkaller1: entered allmulticast mode
[  338.178457][T13687] tipc: Failed to obtain node identity
[  338.196817][T13687] tipc: Enabling of bearer <ib:xfrm0> rejected, failed to enable media
[  338.701600][T13704] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2591'.
[  339.661155][T13716] erspan0 speed is unknown, defaulting to 1000
[  339.699545][T13716] lo speed is unknown, defaulting to 1000
[  339.864791][T13724] netlink: 'syz.1.2597': attribute type 5 has an invalid length.
[  340.802563][T13739] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2602'.
[  340.932875][T13742] netlink: 'syz.3.2601': attribute type 1 has an invalid length.
[  340.951488][T13742] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2601'.
[  341.758939][T13762] erspan0 speed is unknown, defaulting to 1000
[  341.766669][T13762] lo speed is unknown, defaulting to 1000
[  341.836211][ T5930] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  341.965635][T13767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2612'.
[  341.985885][ T5835] Bluetooth: hci3: command 0x0405 tx timeout
[  342.184897][T13774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2614'.
[  342.218827][T13770] erspan0 speed is unknown, defaulting to 1000
[  342.226189][T13773] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2615'.
[  342.260540][T13770] lo speed is unknown, defaulting to 1000
[  342.415968][ T5930] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  342.439050][T13780] netlink: 'syz.1.2617': attribute type 29 has an invalid length.
[  342.551477][T13782] netlink: 'syz.3.2618': attribute type 1 has an invalid length.
[  342.565839][T13782] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2618'.
[  342.914942][T13789] erspan0 speed is unknown, defaulting to 1000
[  342.937012][T13789] lo speed is unknown, defaulting to 1000
[  342.943651][T13800] erspan0 speed is unknown, defaulting to 1000
[  343.125375][T13800] lo speed is unknown, defaulting to 1000
[  343.529029][T13807] erspan0 speed is unknown, defaulting to 1000
[  343.537418][T13807] lo speed is unknown, defaulting to 1000
[  343.661811][T13813] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2627'.
[  343.768176][T13817] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2628'.
[  344.172734][T13824] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2631'.
[  344.253379][T13824] netlink: 'syz.3.2631': attribute type 10 has an invalid length.
[  344.498311][T13833] netlink: 'syz.4.2633': attribute type 1 has an invalid length.
[  344.509983][T13833] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2633'.
[  344.819573][T13824] infiniband syz1: set down
[  344.824536][T13824] infiniband syz1: added team_slave_0
[  344.883855][   T29] audit: type=1800 audit(1739552505.177:5): pid=13840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2636" name="memory.events" dev="tmpfs" ino=2649 res=0 errno=0
[  344.920527][   T29] audit: type=1804 audit(1739552505.227:6): pid=13840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2636" name="memory.events" dev="tmpfs" ino=2649 res=1 errno=0
[  344.962042][T13824] RDS/IB: syz1: added
[  344.972261][T13824] smc: adding ib device syz1 with port count 1
[  344.978903][T13824] smc:    ib device syz1 port 1 has pnetid 
[  345.221441][T13849] erspan0 speed is unknown, defaulting to 1000
[  345.224003][T13852] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2641'.
[  345.238126][T13849] lo speed is unknown, defaulting to 1000
[  345.316446][ T5886] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  345.397639][T13856] erspan0 speed is unknown, defaulting to 1000
[  345.436897][T13856] lo speed is unknown, defaulting to 1000
[  345.966065][ T5886] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  346.157233][T13864] netlink: 'syz.1.2644': attribute type 1 has an invalid length.
[  346.165209][T13864] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2644'.
[  346.777156][T13883] openvswitch: netlink: IP tunnel dst address not specified
[  346.904099][T13886] netlink: 'syz.2.2652': attribute type 19 has an invalid length.
[  347.251445][T13897] __nla_validate_parse: 1 callbacks suppressed
[  347.251465][T13897] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2657'.
[  347.290387][T13895] netlink: 'syz.1.2656': attribute type 1 has an invalid length.
[  347.301535][T13895] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2656'.
[  348.132530][T13923] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2664'.
[  348.174175][T13923] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2664'.
[  348.342497][T13934] netlink: 'syz.2.2669': attribute type 1 has an invalid length.
[  348.343593][T13931] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  348.350402][T13934] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2669'.
[  348.381122][ T5930] IPVS: starting estimator thread 0...
[  348.486067][T13937] IPVS: using max 21 ests per chain, 50400 per kthread
[  348.943527][T13965] netlink: 'syz.2.2682': attribute type 1 has an invalid length.
[  348.957060][T13965] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2682'.
[  349.064203][T13971] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2684'.
[  349.367707][T13991] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2688'.
[  349.388677][T13988] netlink: 'syz.2.2698': attribute type 4 has an invalid length.
[  349.622454][T14009] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2692'.
[  349.632524][T14012] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  349.669668][T14013] FAULT_INJECTION: forcing a failure.
[  349.669668][T14013] name failslab, interval 1, probability 0, space 0, times 0
[  349.687449][T14013] CPU: 0 UID: 0 PID: 14013 Comm: syz.4.2693 Not tainted 6.14.0-rc2-syzkaller-00428-g7a7e0197133d #0
[  349.687482][T14013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  349.687494][T14013] Call Trace:
[  349.687501][T14013]  <TASK>
[  349.687509][T14013]  dump_stack_lvl+0x241/0x360
[  349.687541][T14013]  ? __pfx_dump_stack_lvl+0x10/0x10
[  349.687565][T14013]  ? __pfx__printk+0x10/0x10
[  349.687600][T14013]  should_fail_ex+0x40a/0x550
[  349.687634][T14013]  should_failslab+0xac/0x100
[  349.687669][T14013]  __kmalloc_cache_noprof+0x70/0x390
[  349.687695][T14013]  ? sctp_add_bind_addr+0x89/0x3a0
[  349.687726][T14013]  sctp_add_bind_addr+0x89/0x3a0
[  349.687756][T14013]  sctp_copy_local_addr_list+0x311/0x500
[  349.687785][T14013]  ? sctp_copy_local_addr_list+0xab/0x500
[  349.687810][T14013]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  349.687838][T14013]  ? sctp_v6_is_any+0x60/0x70
[  349.687866][T14013]  ? sctp_copy_one_addr+0x94/0x360
[  349.687896][T14013]  sctp_bind_addr_copy+0xad/0x3b0
[  349.687922][T14013]  ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190
[  349.687947][T14013]  sctp_connect_new_asoc+0x2f3/0x6c0
[  349.687981][T14013]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  349.688010][T14013]  ? sctp_sendmsg+0xf1a/0x35d0
[  349.688046][T14013]  ? sctp_endpoint_lookup_assoc+0xc9/0x250
[  349.688077][T14013]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  349.688109][T14013]  sctp_sendmsg+0x1f64/0x35d0
[  349.688160][T14013]  ? __pfx_sctp_sendmsg+0x10/0x10
[  349.688197][T14013]  ? aa_sk_perm+0x96d/0xab0
[  349.688242][T14013]  ? inet_sendmsg+0x330/0x390
[  349.688274][T14013]  __sock_sendmsg+0x1a6/0x270
[  349.688302][T14013]  ____sys_sendmsg+0x53a/0x860
[  349.688343][T14013]  ? __pfx_____sys_sendmsg+0x10/0x10
[  349.688371][T14013]  ? __fget_files+0x2a/0x410
[  349.688404][T14013]  ? __fget_files+0x2a/0x410
[  349.688466][T14013]  __sys_sendmmsg+0x36a/0x720
[  349.688510][T14013]  ? __pfx___sys_sendmmsg+0x10/0x10
[  349.688555][T14013]  ? __pfx_lock_release+0x10/0x10
[  349.688585][T14013]  ? kstrtouint_from_user+0x128/0x190
[  349.688647][T14013]  ? ksys_write+0x22a/0x2b0
[  349.688668][T14013]  ? __pfx_lock_release+0x10/0x10
[  349.688706][T14013]  ? sb_end_write+0xe9/0x1c0
[  349.688734][T14013]  ? vfs_write+0x7fa/0xd10
[  349.688755][T14013]  ? __mutex_unlock_slowpath+0x227/0x800
[  349.688811][T14013]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  349.688844][T14013]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  349.688876][T14013]  ? do_syscall_64+0x100/0x230
[  349.688906][T14013]  __x64_sys_sendmmsg+0xa0/0xb0
[  349.688940][T14013]  do_syscall_64+0xf3/0x230
[  349.688966][T14013]  ? clear_bhb_loop+0x35/0x90
[  349.689000][T14013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  349.689028][T14013] RIP: 0033:0x7f23b2b8cde9
[  349.689047][T14013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  349.689065][T14013] RSP: 002b:00007f23b09f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  349.689087][T14013] RAX: ffffffffffffffda RBX: 00007f23b2da6080 RCX: 00007f23b2b8cde9
[  349.689101][T14013] RDX: 0000000000000001 RSI: 0000400000003a00 RDI: 0000000000000006
[  349.689113][T14013] RBP: 00007f23b09f6090 R08: 0000000000000000 R09: 0000000000000000
[  349.689125][T14013] R10: 000000000004c040 R11: 0000000000000246 R12: 0000000000000002
[  349.689137][T14013] R13: 0000000000000000 R14: 00007f23b2da6080 R15: 00007fffa0818438
[  349.689170][T14013]  </TASK>
[  350.073804][T14017] netlink: 'syz.2.2695': attribute type 1 has an invalid length.
[  350.094214][T14017] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2695'.
[  350.255286][T14024] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  350.757019][T14050] netlink: 'syz.2.2709': attribute type 1 has an invalid length.
[  351.876004][T14092] netlink: 'syz.3.2724': attribute type 1 has an invalid length.
[  352.450660][T14130] __nla_validate_parse: 8 callbacks suppressed
[  352.450682][T14130] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2736'.
[  352.622319][T14138] netlink: 'syz.1.2739': attribute type 1 has an invalid length.
[  352.631192][T14138] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2739'.
[  352.796562][T14147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2744'.
[  352.828009][T14147] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  353.087444][T14162] syzkaller0: Caught tx_queue_len zero misconfig
[  353.108961][T14164] ipt_REJECT: TCP_RESET invalid for non-tcp
[  353.133105][T14165] ipt_REJECT: TCP_RESET invalid for non-tcp
[  353.254888][T14172] netlink: 'syz.0.2752': attribute type 1 has an invalid length.
[  353.265948][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  353.298679][T14172] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2752'.
[  353.460139][T14176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2754'.
[  353.996240][T14188] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  354.318020][T14199] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2765'.
[  354.330265][T14199] netlink: 'syz.3.2765': attribute type 1 has an invalid length.
[  354.338233][T14199] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2765'.
[  354.576875][T14210] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2767'.
[  354.586648][T14210] FAULT_INJECTION: forcing a failure.
[  354.586648][T14210] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  354.600888][T14210] CPU: 0 UID: 0 PID: 14210 Comm: syz.3.2767 Not tainted 6.14.0-rc2-syzkaller-00428-g7a7e0197133d #0
[  354.600920][T14210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  354.600932][T14210] Call Trace:
[  354.600940][T14210]  <TASK>
[  354.600949][T14210]  dump_stack_lvl+0x241/0x360
[  354.600980][T14210]  ? __pfx_dump_stack_lvl+0x10/0x10
[  354.601003][T14210]  ? __pfx__printk+0x10/0x10
[  354.601032][T14210]  ? snprintf+0xda/0x120
[  354.601067][T14210]  should_fail_ex+0x40a/0x550
[  354.601112][T14210]  _copy_to_user+0x31/0xb0
[  354.601139][T14210]  simple_read_from_buffer+0xca/0x150
[  354.601170][T14210]  proc_fail_nth_read+0x1e9/0x250
[  354.601201][T14210]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  354.601233][T14210]  ? rw_verify_area+0x243/0x630
[  354.601265][T14210]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  354.601300][T14210]  vfs_read+0x1f8/0xb40
[  354.601321][T14210]  ? fdget_pos+0x254/0x320
[  354.601353][T14210]  ? __pfx___mutex_lock+0x10/0x10
[  354.601379][T14210]  ? __pfx_vfs_read+0x10/0x10
[  354.601397][T14210]  ? do_sys_openat2+0x17a/0x1d0
[  354.601430][T14210]  ? __fget_files+0x2a/0x410
[  354.601461][T14210]  ? __fget_files+0x395/0x410
[  354.601488][T14210]  ? __fget_files+0x2a/0x410
[  354.601527][T14210]  ksys_read+0x18f/0x2b0
[  354.601550][T14210]  ? __pfx_ksys_read+0x10/0x10
[  354.601572][T14210]  ? do_syscall_64+0x100/0x230
[  354.601602][T14210]  ? do_syscall_64+0xb6/0x230
[  354.601631][T14210]  do_syscall_64+0xf3/0x230
[  354.601657][T14210]  ? clear_bhb_loop+0x35/0x90
[  354.601691][T14210]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.601718][T14210] RIP: 0033:0x7f065f18b7fc
[  354.601738][T14210] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  354.601756][T14210] RSP: 002b:00007f0660029030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  354.601778][T14210] RAX: ffffffffffffffda RBX: 00007f065f3a5fa0 RCX: 00007f065f18b7fc
[  354.601793][T14210] RDX: 000000000000000f RSI: 00007f06600290a0 RDI: 0000000000000004
[  354.601806][T14210] RBP: 00007f0660029090 R08: 0000000000000000 R09: 0000000000000000
[  354.601818][T14210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  354.601830][T14210] R13: 0000000000000000 R14: 00007f065f3a5fa0 R15: 00007ffd3c67f0d8
[  354.601862][T14210]  </TASK>
[  355.135243][T14219] vlan5: entered promiscuous mode
[  355.169823][T14219] team0: entered promiscuous mode
[  355.196866][T14219] vlan5: entered allmulticast mode
[  355.220757][T14219] team0: entered allmulticast mode
[  355.294353][T14226] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2771'.
[  355.357377][T14224] netlink: 'syz.0.2772': attribute type 2 has an invalid length.
[  355.386411][T14221] netem: incorrect gi model size
[  355.391783][T14221] netem: change failed
[  355.470489][T14234] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2776'.
[  355.511508][T14234] netlink: 'syz.4.2776': attribute type 1 has an invalid length.
[  355.685938][T14241] erspan0 speed is unknown, defaulting to 1000
[  355.693556][T14241] lo speed is unknown, defaulting to 1000
[  355.786763][T14253] FAULT_INJECTION: forcing a failure.
[  355.786763][T14253] name failslab, interval 1, probability 0, space 0, times 0
[  355.851752][T14253] CPU: 0 UID: 0 PID: 14253 Comm: syz.2.2782 Not tainted 6.14.0-rc2-syzkaller-00428-g7a7e0197133d #0
[  355.851785][T14253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  355.851798][T14253] Call Trace:
[  355.851806][T14253]  <TASK>
[  355.851815][T14253]  dump_stack_lvl+0x241/0x360
[  355.851847][T14253]  ? __pfx_dump_stack_lvl+0x10/0x10
[  355.851871][T14253]  ? __pfx__printk+0x10/0x10
[  355.851895][T14253]  ? kmem_cache_alloc_node_noprof+0x4f/0x380
[  355.851926][T14253]  ? __pfx___might_resched+0x10/0x10
[  355.851967][T14253]  should_fail_ex+0x40a/0x550
[  355.852002][T14253]  should_failslab+0xac/0x100
[  355.852031][T14253]  kmem_cache_alloc_node_noprof+0x77/0x380
[  355.852060][T14253]  ? __alloc_skb+0x1c3/0x440
[  355.852092][T14253]  __alloc_skb+0x1c3/0x440
[  355.852125][T14253]  ? __pfx___alloc_skb+0x10/0x10
[  355.852160][T14253]  ? netlink_ack_tlv_len+0x6e/0x200
[  355.852196][T14253]  netlink_ack+0x145/0xa60
[  355.852226][T14253]  ? __pfx_lock_acquire+0x10/0x10
[  355.852257][T14253]  ? __pfx_ethnl_default_set_doit+0x10/0x10
[  355.852282][T14253]  ? __pfx___might_resched+0x10/0x10
[  355.852321][T14253]  netlink_rcv_skb+0x294/0x480
[  355.852354][T14253]  ? __pfx_genl_rcv_msg+0x10/0x10
[  355.852382][T14253]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  355.852449][T14253]  genl_rcv+0x28/0x40
[  355.852472][T14253]  netlink_unicast+0x7f6/0x990
[  355.852511][T14253]  ? __pfx_netlink_unicast+0x10/0x10
[  355.852538][T14253]  ? __virt_addr_valid+0x45f/0x530
[  355.852573][T14253]  ? __phys_addr_symbol+0x2f/0x70
[  355.852604][T14253]  ? __check_object_size+0x47a/0x730
[  355.852637][T14253]  netlink_sendmsg+0x8de/0xcb0
[  355.852672][T14253]  ? __pfx_netlink_sendmsg+0x10/0x10
[  355.852702][T14253]  ? aa_sock_msg_perm+0x91/0x160
[  355.852739][T14253]  ? __pfx_netlink_sendmsg+0x10/0x10
[  355.852758][T14253]  __sock_sendmsg+0x221/0x270
[  355.852785][T14253]  ____sys_sendmsg+0x53a/0x860
[  355.852825][T14253]  ? __pfx_____sys_sendmsg+0x10/0x10
[  355.852853][T14253]  ? __fget_files+0x2a/0x410
[  355.852886][T14253]  ? __fget_files+0x2a/0x410
[  355.852926][T14253]  __sys_sendmsg+0x269/0x350
[  355.852974][T14253]  ? __pfx___sys_sendmsg+0x10/0x10
[  355.853020][T14253]  ? do_sys_openat2+0x17a/0x1d0
[  355.853079][T14253]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  355.853113][T14253]  ? do_syscall_64+0x100/0x230
[  355.853144][T14253]  ? do_syscall_64+0xb6/0x230
[  355.853174][T14253]  do_syscall_64+0xf3/0x230
[  355.853200][T14253]  ? clear_bhb_loop+0x35/0x90
[  355.853234][T14253]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.853263][T14253] RIP: 0033:0x7f645298cde9
[  355.853281][T14253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  355.853299][T14253] RSP: 002b:00007f645377f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  355.853322][T14253] RAX: ffffffffffffffda RBX: 00007f6452ba5fa0 RCX: 00007f645298cde9
[  355.853338][T14253] RDX: 0000000000000000 RSI: 0000400000000240 RDI: 0000000000000004
[  355.853351][T14253] RBP: 00007f645377f090 R08: 0000000000000000 R09: 0000000000000000
[  355.853364][T14253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  355.853376][T14253] R13: 0000000000000000 R14: 00007f6452ba5fa0 R15: 00007fff3e767fc8
[  355.853409][T14253]  </TASK>
[  356.205225][ T5848] Bluetooth: hci0: command tx timeout
[  356.304930][T14261] vlan4: entered promiscuous mode
[  356.334411][T14261] hsr0: entered promiscuous mode
[  356.365101][T14261] hsr0: left promiscuous mode
[  356.794520][T14275] netlink: 'syz.0.2791': attribute type 1 has an invalid length.
[  357.531613][T14308] __nla_validate_parse: 6 callbacks suppressed
[  357.531636][T14308] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2804'.
[  357.549797][ T5930] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  357.616078][T14308] netlink: 'syz.0.2804': attribute type 1 has an invalid length.
[  357.642048][T14308] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2804'.
[  357.994378][T14322] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2809'.
[  358.108841][ T5930] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  358.325866][T14336] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2814'.
[  358.373829][T14339] xt_TCPMSS: Only works on TCP SYN packets
[  358.423405][T14341] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2814'.
[  358.522596][T14348] tc_dump_action: action bad kind
[  358.530446][T14348] netlink: 'syz.0.2818': attribute type 2 has an invalid length.
[  358.596061][T14350] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2817'.
[  358.620566][T14350] netlink: 'syz.2.2817': attribute type 1 has an invalid length.
[  358.646829][T14350] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2817'.
[  358.910630][T14364] netlink: 'syz.2.2821': attribute type 4 has an invalid length.
[  358.918791][T14364] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2821'.
[  359.240616][T14380] dvmrp0: entered allmulticast mode
[  359.266476][T14376] erspan0 speed is unknown, defaulting to 1000
[  359.274009][T14376] lo speed is unknown, defaulting to 1000
[  359.417521][T14389] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2831'.
[  359.520031][T14389] netlink: 'syz.4.2831': attribute type 1 has an invalid length.
[  359.572807][T14389] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2831'.
[  360.683522][T14413] erspan0 speed is unknown, defaulting to 1000
[  360.696476][T14419] netlink: 'syz.4.2842': attribute type 1 has an invalid length.
[  360.792005][T14413] lo speed is unknown, defaulting to 1000
[  361.540807][T14445] erspan0 speed is unknown, defaulting to 1000
[  361.565864][T14445] lo speed is unknown, defaulting to 1000
[  361.917635][T14462] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 3, id = 0
[  362.068353][T14468] FAULT_INJECTION: forcing a failure.
[  362.068353][T14468] name failslab, interval 1, probability 0, space 0, times 0
[  362.105968][T14468] CPU: 1 UID: 0 PID: 14468 Comm: syz.3.2856 Not tainted 6.14.0-rc2-syzkaller-00428-g7a7e0197133d #0
[  362.106002][T14468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  362.106016][T14468] Call Trace:
[  362.106024][T14468]  <TASK>
[  362.106032][T14468]  dump_stack_lvl+0x241/0x360
[  362.106064][T14468]  ? __pfx_dump_stack_lvl+0x10/0x10
[  362.106087][T14468]  ? __pfx__printk+0x10/0x10
[  362.106111][T14468]  ? __kmalloc_cache_noprof+0x48/0x390
[  362.106141][T14468]  ? __pfx___might_resched+0x10/0x10
[  362.106172][T14468]  should_fail_ex+0x40a/0x550
[  362.106206][T14468]  should_failslab+0xac/0x100
[  362.106236][T14468]  __kmalloc_cache_noprof+0x70/0x390
[  362.106264][T14468]  ? nfnetlink_rcv+0x1265/0x2ab0
[  362.106295][T14468]  nfnetlink_rcv+0x1265/0x2ab0
[  362.106320][T14468]  ? __pfx_validate_chain+0x10/0x10
[  362.106378][T14468]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  362.106417][T14468]  ? __lock_acquire+0x1397/0x2100
[  362.106489][T14468]  ? netlink_deliver_tap+0x2e/0x1b0
[  362.106522][T14468]  ? __pfx_lock_release+0x10/0x10
[  362.106570][T14468]  ? netlink_deliver_tap+0x2e/0x1b0
[  362.106615][T14468]  netlink_unicast+0x7f6/0x990
[  362.106655][T14468]  ? __pfx_netlink_unicast+0x10/0x10
[  362.106683][T14468]  ? __virt_addr_valid+0x45f/0x530
[  362.106717][T14468]  ? __phys_addr_symbol+0x2f/0x70
[  362.106749][T14468]  ? __check_object_size+0x47a/0x730
[  362.106782][T14468]  netlink_sendmsg+0x8de/0xcb0
[  362.106817][T14468]  ? __pfx_netlink_sendmsg+0x10/0x10
[  362.106843][T14468]  ? aa_sock_msg_perm+0x91/0x160
[  362.106880][T14468]  ? __pfx_netlink_sendmsg+0x10/0x10
[  362.106899][T14468]  __sock_sendmsg+0x221/0x270
[  362.106926][T14468]  ____sys_sendmsg+0x53a/0x860
[  362.106967][T14468]  ? __pfx_____sys_sendmsg+0x10/0x10
[  362.106994][T14468]  ? __fget_files+0x2a/0x410
[  362.107026][T14468]  ? __fget_files+0x2a/0x410
[  362.107065][T14468]  __sys_sendmsg+0x269/0x350
[  362.107102][T14468]  ? __pfx___sys_sendmsg+0x10/0x10
[  362.107147][T14468]  ? do_sys_openat2+0x17a/0x1d0
[  362.107207][T14468]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  362.107239][T14468]  ? do_syscall_64+0x100/0x230
[  362.107270][T14468]  ? do_syscall_64+0xb6/0x230
[  362.107300][T14468]  do_syscall_64+0xf3/0x230
[  362.107327][T14468]  ? clear_bhb_loop+0x35/0x90
[  362.107361][T14468]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  362.107399][T14468] RIP: 0033:0x7f065f18cde9
[  362.107419][T14468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  362.107436][T14468] RSP: 002b:00007f0660029038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  362.107459][T14468] RAX: ffffffffffffffda RBX: 00007f065f3a5fa0 RCX: 00007f065f18cde9
[  362.107474][T14468] RDX: 0000000000000000 RSI: 0000400000000080 RDI: 0000000000000003
[  362.107486][T14468] RBP: 00007f0660029090 R08: 0000000000000000 R09: 0000000000000000
[  362.107499][T14468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  362.107510][T14468] R13: 0000000000000000 R14: 00007f065f3a5fa0 R15: 00007ffd3c67f0d8
[  362.107542][T14468]  </TASK>
[  362.600372][T14474] __nla_validate_parse: 4 callbacks suppressed
[  362.600393][T14474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2857'.
[  362.665804][T14474] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2857'.
[  362.779969][T14481] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2860'.
[  362.834938][T14484] netlink: 'syz.4.2858': attribute type 1 has an invalid length.
[  362.851497][T14484] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2858'.
[  363.089638][T14488] erspan0 speed is unknown, defaulting to 1000
[  363.168034][T14488] lo speed is unknown, defaulting to 1000
[  363.317319][T14498] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2866'.
[  363.455054][T14504] FAULT_INJECTION: forcing a failure.
[  363.455054][T14504] name failslab, interval 1, probability 0, space 0, times 0
[  363.469421][T14504] CPU: 0 UID: 0 PID: 14504 Comm: syz.1.2868 Not tainted 6.14.0-rc2-syzkaller-00428-g7a7e0197133d #0
[  363.469451][T14504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  363.469465][T14504] Call Trace:
[  363.469481][T14504]  <TASK>
[  363.469490][T14504]  dump_stack_lvl+0x241/0x360
[  363.469524][T14504]  ? __pfx_dump_stack_lvl+0x10/0x10
[  363.469548][T14504]  ? __pfx__printk+0x10/0x10
[  363.469573][T14504]  ? kmem_cache_alloc_node_noprof+0x4f/0x380
[  363.469604][T14504]  ? __pfx___might_resched+0x10/0x10
[  363.469635][T14504]  should_fail_ex+0x40a/0x550
[  363.469670][T14504]  should_failslab+0xac/0x100
[  363.469711][T14504]  kmem_cache_alloc_node_noprof+0x77/0x380
[  363.469743][T14504]  ? __alloc_skb+0x1c3/0x440
[  363.469776][T14504]  __alloc_skb+0x1c3/0x440
[  363.469809][T14504]  ? __pfx___alloc_skb+0x10/0x10
[  363.469839][T14504]  ? netlink_autobind+0xd6/0x2f0
[  363.469859][T14504]  ? netlink_autobind+0x2b0/0x2f0
[  363.469886][T14504]  netlink_sendmsg+0x634/0xcb0
[  363.469919][T14504]  ? __pfx_netlink_sendmsg+0x10/0x10
[  363.469946][T14504]  ? aa_sock_msg_perm+0x91/0x160
[  363.469984][T14504]  ? __pfx_netlink_sendmsg+0x10/0x10
[  363.470003][T14504]  __sock_sendmsg+0x221/0x270
[  363.470031][T14504]  ____sys_sendmsg+0x53a/0x860
[  363.470070][T14504]  ? __pfx_____sys_sendmsg+0x10/0x10
[  363.470123][T14504]  ? __fget_files+0x2a/0x410
[  363.470157][T14504]  ? __fget_files+0x2a/0x410
[  363.470197][T14504]  __sys_sendmsg+0x269/0x350
[  363.470235][T14504]  ? __pfx___sys_sendmsg+0x10/0x10
[  363.470281][T14504]  ? do_sys_openat2+0x17a/0x1d0
[  363.470340][T14504]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  363.470384][T14504]  ? do_syscall_64+0x100/0x230
[  363.470416][T14504]  ? do_syscall_64+0xb6/0x230
[  363.470447][T14504]  do_syscall_64+0xf3/0x230
[  363.470483][T14504]  ? clear_bhb_loop+0x35/0x90
[  363.470519][T14504]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  363.470549][T14504] RIP: 0033:0x7f365318cde9
[  363.470569][T14504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  363.470589][T14504] RSP: 002b:00007f3653fa2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  363.470613][T14504] RAX: ffffffffffffffda RBX: 00007f36533a5fa0 RCX: 00007f365318cde9
[  363.470629][T14504] RDX: 0000000000000000 RSI: 00004000000012c0 RDI: 0000000000000004
[  363.470643][T14504] RBP: 00007f3653fa2090 R08: 0000000000000000 R09: 0000000000000000
[  363.470657][T14504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  363.470670][T14504] R13: 0000000000000000 R14: 00007f36533a5fa0 R15: 00007fff46753ba8
[  363.470703][T14504]  </TASK>
[  363.885575][T14509] FAULT_INJECTION: forcing a failure.
[  363.885575][T14509] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  364.025987][T14509] CPU: 0 UID: 0 PID: 14509 Comm: syz.4.2871 Not tainted 6.14.0-rc2-syzkaller-00428-g7a7e0197133d #0
[  364.026020][T14509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  364.026033][T14509] Call Trace:
[  364.026040][T14509]  <TASK>
[  364.026048][T14509]  dump_stack_lvl+0x241/0x360
[  364.026078][T14509]  ? __pfx_dump_stack_lvl+0x10/0x10
[  364.026101][T14509]  ? __pfx__printk+0x10/0x10
[  364.026129][T14509]  ? snprintf+0xda/0x120
[  364.026164][T14509]  should_fail_ex+0x40a/0x550
[  364.026199][T14509]  _copy_to_user+0x31/0xb0
[  364.026226][T14509]  simple_read_from_buffer+0xca/0x150
[  364.026255][T14509]  proc_fail_nth_read+0x1e9/0x250
[  364.026286][T14509]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  364.026317][T14509]  ? rw_verify_area+0x243/0x630
[  364.026350][T14509]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  364.026380][T14509]  vfs_read+0x1f8/0xb40
[  364.026411][T14509]  ? fdget_pos+0x254/0x320
[  364.026442][T14509]  ? __pfx___mutex_lock+0x10/0x10
[  364.026469][T14509]  ? __pfx_vfs_read+0x10/0x10
[  364.026495][T14509]  ? __fget_files+0x2a/0x410
[  364.026526][T14509]  ? __fget_files+0x395/0x410
[  364.026553][T14509]  ? __fget_files+0x2a/0x410
[  364.026592][T14509]  ksys_read+0x18f/0x2b0
[  364.026615][T14509]  ? __pfx_ksys_read+0x10/0x10
[  364.026638][T14509]  ? do_syscall_64+0x100/0x230
[  364.026667][T14509]  ? do_syscall_64+0xb6/0x230
[  364.026697][T14509]  do_syscall_64+0xf3/0x230
[  364.026722][T14509]  ? clear_bhb_loop+0x35/0x90
[  364.026757][T14509]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.026785][T14509] RIP: 0033:0x7f23b2b8b7fc
[  364.026804][T14509] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  364.026822][T14509] RSP: 002b:00007f23b3918030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  364.026844][T14509] RAX: ffffffffffffffda RBX: 00007f23b2da5fa0 RCX: 00007f23b2b8b7fc
[  364.026860][T14509] RDX: 000000000000000f RSI: 00007f23b39180a0 RDI: 0000000000000004
[  364.026874][T14509] RBP: 00007f23b3918090 R08: 0000000000000000 R09: 0000000000000000
[  364.026886][T14509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  364.026898][T14509] R13: 0000000000000000 R14: 00007f23b2da5fa0 R15: 00007fffa0818438
[  364.026930][T14509]  </TASK>
[  364.622871][ T5147] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  364.633791][ T5147] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  364.643212][ T5147] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  364.652711][ T5147] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  364.668269][ T5147] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  364.682720][ T5147] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  364.716261][ T7935] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  364.721888][T14517] erspan0 speed is unknown, defaulting to 1000
[  364.755025][T14522] netlink: 'syz.4.2875': attribute type 1 has an invalid length.
[  364.763179][T14522] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2875'.
[  364.809916][T14517] lo speed is unknown, defaulting to 1000
[  364.814607][T14518] erspan0 speed is unknown, defaulting to 1000
[  364.867422][T14523] erspan0 speed is unknown, defaulting to 1000
[  364.948732][T14518] lo speed is unknown, defaulting to 1000
[  365.036118][ T7935] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  365.305895][T14529] netlink: 'syz.4.2877': attribute type 3 has an invalid length.
[  365.568296][T14523] lo speed is unknown, defaulting to 1000
[  365.655121][T14536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2878'.
[  365.686263][T14536] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2878'.
[  366.557770][T14556] FAULT_INJECTION: forcing a failure.
[  366.557770][T14556] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  366.572309][T14556] CPU: 0 UID: 0 PID: 14556 Comm: syz.4.2883 Not tainted 6.14.0-rc2-syzkaller-00428-g7a7e0197133d #0
[  366.572338][T14556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  366.572351][T14556] Call Trace:
[  366.572358][T14556]  <TASK>
[  366.572366][T14556]  dump_stack_lvl+0x241/0x360
[  366.572398][T14556]  ? __pfx_dump_stack_lvl+0x10/0x10
[  366.572422][T14556]  ? __pfx__printk+0x10/0x10
[  366.572456][T14556]  should_fail_ex+0x40a/0x550
[  366.572490][T14556]  prepare_alloc_pages+0x1da/0x5b0
[  366.572521][T14556]  __alloc_frozen_pages_noprof+0x16f/0x710
[  366.572550][T14556]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  366.572588][T14556]  ? __pfx_lock_acquire+0x10/0x10
[  366.572624][T14556]  alloc_pages_mpol+0x311/0x660
[  366.572658][T14556]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  366.572696][T14556]  vma_alloc_folio_noprof+0x12b/0x260
[  366.572727][T14556]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  366.572758][T14556]  ? look_up_lock_class+0x77/0x170
[  366.572788][T14556]  folio_prealloc+0x2e/0x170
[  366.572811][T14556]  __handle_mm_fault+0x3e4b/0x70f0
[  366.572923][T14556]  ? __pfx___handle_mm_fault+0x10/0x10
[  366.572969][T14556]  ? mt_find+0x2a9/0x920
[  366.572996][T14556]  ? __pfx_lock_release+0x10/0x10
[  366.573040][T14556]  ? mt_find+0x2a9/0x920
[  366.573067][T14556]  ? mt_find+0x6c8/0x920
[  366.573101][T14556]  ? __pfx_mt_find+0x10/0x10
[  366.573149][T14556]  ? find_vma+0xf9/0x170
[  366.573180][T14556]  ? __pfx_find_vma+0x10/0x10
[  366.573214][T14556]  handle_mm_fault+0x3e5/0x8d0
[  366.573257][T14556]  exc_page_fault+0x2b9/0x8b0
[  366.573282][T14556]  ? __might_fault+0xaa/0x120
[  366.573327][T14556]  asm_exc_page_fault+0x26/0x30
[  366.573356][T14556] RIP: 0010:rep_movs_alternative+0x15/0x70
[  366.573389][T14556] Code: cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84
[  366.573407][T14556] RSP: 0018:ffffc9000feb7768 EFLAGS: 00050202
[  366.573426][T14556] RAX: ffffffff84f53000 RBX: 0000400000001001 RCX: 0000000000000001
[  366.573441][T14556] RDX: 0000000000000000 RSI: ffff8880279d4235 RDI: 0000400000001000
[  366.573456][T14556] RBP: 0000400000000fff R08: ffff8880279d4235 R09: 1ffff11004f3a846
[  366.573471][T14556] R10: dffffc0000000000 R11: ffffed1004f3a847 R12: 0000000000000002
[  366.573485][T14556] R13: 00007ffffffff000 R14: ffff8880279d4234 R15: 0000400000000fff
[  366.573509][T14556]  ? __pfx__copy_to_user+0x10/0x10
[  366.573543][T14556]  _copy_to_user+0x8b/0xb0
[  366.573572][T14556]  bpf_verifier_vlog+0x46d/0x860
[  366.573608][T14556]  __btf_verifier_log+0xd5/0x120
[  366.573637][T14556]  ? bpf_verifier_vlog+0x47a/0x860
[  366.573662][T14556]  ? bpf_verifier_vlog+0x47a/0x860
[  366.573687][T14556]  ? __pfx___btf_verifier_log+0x10/0x10
[  366.573730][T14556]  btf_verifier_log_member+0x5ac/0x7b0
[  366.573766][T14556]  ? btf_struct_check_meta+0x90e/0xcf0
[  366.573795][T14556]  ? btf_struct_check_meta+0x6d9/0xcf0
[  366.573825][T14556]  ? __pfx_btf_verifier_log_member+0x10/0x10
[  366.573882][T14556]  btf_struct_check_meta+0x92f/0xcf0
[  366.573926][T14556]  btf_parse_type_sec+0x4d5/0x2650
[  366.573955][T14556]  ? bpf_verifier_vlog+0x47a/0x860
[  366.573989][T14556]  ? btf_check_sec_info+0x379/0x4f0
[  366.574013][T14556]  ? __pfx_btf_parse_type_sec+0x10/0x10
[  366.574040][T14556]  ? btf_parse_str_sec+0x21f/0x2b0
[  366.574065][T14556]  btf_new_fd+0x7dd/0xca0
[  366.574087][T14556]  ? apparmor_capable+0x13b/0x1b0
[  366.574127][T14556]  ? __pfx_btf_new_fd+0x10/0x10
[  366.574156][T14556]  ? bpf_btf_load+0xcf/0x1a0
[  366.574191][T14556]  __sys_bpf+0x6f2/0x820
[  366.574223][T14556]  ? __pfx___sys_bpf+0x10/0x10
[  366.574266][T14556]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  366.574301][T14556]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  366.574336][T14556]  ? do_syscall_64+0x100/0x230
[  366.574368][T14556]  __x64_sys_bpf+0x7c/0x90
[  366.574396][T14556]  do_syscall_64+0xf3/0x230
[  366.574422][T14556]  ? clear_bhb_loop+0x35/0x90
[  366.574455][T14556]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  366.574484][T14556] RIP: 0033:0x7f23b2b8cde9
[  366.574507][T14556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  366.574525][T14556] RSP: 002b:00007f23b3918038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  366.574546][T14556] RAX: ffffffffffffffda RBX: 00007f23b2da5fa0 RCX: 00007f23b2b8cde9
[  366.574561][T14556] RDX: 0000000000000028 RSI: 00004000000000c0 RDI: 0000000000000012
[  366.574576][T14556] RBP: 00007f23b3918090 R08: 0000000000000000 R09: 0000000000000000
[  366.574589][T14556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  366.574602][T14556] R13: 0000000000000001 R14: 00007f23b2da5fa0 R15: 00007fffa0818438
[  366.574634][T14556]  </TASK>
[  367.050468][ T5848] Bluetooth: hci5: command tx timeout
[  367.227718][T14560] netlink: 'syz.0.2885': attribute type 1 has an invalid length.
[  367.235607][T14560] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2885'.
[  367.980151][T10747] bond0 (unregistering): Error: No native XDP support for the current bonding mode
[  367.992979][T10747] ------------[ cut here ]------------
[  367.998615][T10747] WARNING: CPU: 1 PID: 10747 at net/core/dev.c:9832 unregister_netdevice_many_notify+0x1b5c/0x2070
[  368.009863][T10747] Modules linked in:
[  368.013836][T10747] CPU: 1 UID: 0 PID: 10747 Comm: kworker/u8:10 Not tainted 6.14.0-rc2-syzkaller-00428-g7a7e0197133d #0
[  368.024964][T10747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  368.035166][T10747] Workqueue: netns cleanup_net
[  368.040044][T10747] RIP: 0010:unregister_netdevice_many_notify+0x1b5c/0x2070
[  368.047365][T10747] Code: f5 f7 90 0f 0b 90 e9 49 ff ff ff e8 2e 16 f5 f7 90 0f 0b 90 eb 97 e8 23 16 f5 f7 90 0f 0b 90 e9 99 f0 ff ff e8 15 16 f5 f7 90 <0f> 0b 90 e9 09 f2 ff ff e8 07 16 f5 f7 90 0f 0b 90 e9 71 f3 ff ff
[  368.067616][T10747] RSP: 0018:ffffc900040e7820 EFLAGS: 00010293
[  368.073913][T10747] RAX: ffffffff89cca14b RBX: 00000000ffffffa1 RCX: ffff888071449e00
[  368.082051][T10747] RDX: 0000000000000000 RSI: 00000000ffffffa1 RDI: 0000000000000000
[  368.090303][T10747] RBP: ffffc900040e7a10 R08: ffffffff89cc9350 R09: fffffbfff1d3a614
[  368.098462][T10747] R10: dffffc0000000000 R11: fffffbfff1d3a614 R12: ffffc9000c199000
[  368.106571][T10747] R13: 1ffff1100e6e3186 R14: ffff888073718c30 R15: ffff888073718c28
[  368.114597][T10747] FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  368.123653][T10747] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  368.130424][T10747] CR2: 000055555f00f5c8 CR3: 000000006117a000 CR4: 00000000003526f0
[  368.138557][T10747] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  368.146721][T10747] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  368.154773][T10747] Call Trace:
[  368.158141][T10747]  <TASK>
[  368.161098][T10747]  ? __warn+0x165/0x4d0
[  368.165295][T10747]  ? unregister_netdevice_many_notify+0x1b5c/0x2070
[  368.172065][T10747]  ? report_bug+0x2b3/0x500
[  368.176674][T10747]  ? unregister_netdevice_many_notify+0x1b5c/0x2070
[  368.183345][T10747]  ? handle_bug+0x60/0x90
[  368.187829][T10747]  ? exc_invalid_op+0x1a/0x50
[  368.192558][T10747]  ? asm_exc_invalid_op+0x1a/0x20
[  368.197722][T10747]  ? unregister_netdevice_many_notify+0xd60/0x2070
[  368.204260][T10747]  ? unregister_netdevice_many_notify+0x1b5b/0x2070
[  368.210992][T10747]  ? unregister_netdevice_many_notify+0x1b5c/0x2070
[  368.217744][T10747]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  368.224565][T10747]  ? unregister_netdevice_queue+0x26b/0x370
[  368.230581][T10747]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  368.237073][T10747]  ? nexthop_net_exit_batch_rtnl+0x100/0x150
[  368.243194][T10747]  cleanup_net+0x76d/0xd60
[  368.247726][T10747]  ? __pfx_cleanup_net+0x10/0x10
[  368.252747][T10747]  ? process_scheduled_works+0x9c6/0x18e0
[  368.258618][T10747]  process_scheduled_works+0xabe/0x18e0
[  368.264240][T10747]  ? __pfx_process_scheduled_works+0x10/0x10
[  368.270375][T10747]  ? assign_work+0x364/0x3d0
[  368.275132][T10747]  worker_thread+0x870/0xd30
[  368.279881][T10747]  ? __kthread_parkme+0x169/0x1d0
[  368.284955][T10747]  ? __pfx_worker_thread+0x10/0x10
[  368.290222][T10747]  kthread+0x7a9/0x920
[  368.294365][T10747]  ? __pfx_kthread+0x10/0x10
[  368.299092][T10747]  ? __pfx_worker_thread+0x10/0x10
[  368.304246][T10747]  ? __pfx_kthread+0x10/0x10
[  368.308947][T10747]  ? __pfx_kthread+0x10/0x10
[  368.313604][T10747]  ? __pfx_kthread+0x10/0x10
[  368.318345][T10747]  ? _raw_spin_unlock_irq+0x23/0x50
[  368.323576][T10747]  ? lockdep_hardirqs_on+0x99/0x150
[  368.328902][T10747]  ? __pfx_kthread+0x10/0x10
[  368.333566][T10747]  ret_from_fork+0x4b/0x80
[  368.338059][T10747]  ? __pfx_kthread+0x10/0x10
[  368.342675][T10747]  ret_from_fork_asm+0x1a/0x30
[  368.347570][T10747]  </TASK>
[  368.350634][T10747] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  368.357943][T10747] CPU: 1 UID: 0 PID: 10747 Comm: kworker/u8:10 Not tainted 6.14.0-rc2-syzkaller-00428-g7a7e0197133d #0
[  368.368993][T10747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  368.379072][T10747] Workqueue: netns cleanup_net
[  368.383865][T10747] Call Trace:
[  368.387153][T10747]  <TASK>
[  368.390090][T10747]  dump_stack_lvl+0x241/0x360
[  368.394783][T10747]  ? __pfx_dump_stack_lvl+0x10/0x10
[  368.399991][T10747]  ? __pfx__printk+0x10/0x10
[  368.404589][T10747]  ? _printk+0xd5/0x120
[  368.408768][T10747]  ? __init_begin+0x41000/0x41000
[  368.413820][T10747]  ? vscnprintf+0x5d/0x90
[  368.418171][T10747]  panic+0x349/0x880
[  368.422088][T10747]  ? __warn+0x174/0x4d0
[  368.426259][T10747]  ? __pfx_panic+0x10/0x10
[  368.430701][T10747]  ? ret_from_fork_asm+0x1a/0x30
[  368.435676][T10747]  __warn+0x344/0x4d0
[  368.439675][T10747]  ? unregister_netdevice_many_notify+0x1b5c/0x2070
[  368.446285][T10747]  report_bug+0x2b3/0x500
[  368.450624][T10747]  ? unregister_netdevice_many_notify+0x1b5c/0x2070
[  368.457236][T10747]  handle_bug+0x60/0x90
[  368.461406][T10747]  exc_invalid_op+0x1a/0x50
[  368.465924][T10747]  asm_exc_invalid_op+0x1a/0x20
[  368.470794][T10747] RIP: 0010:unregister_netdevice_many_notify+0x1b5c/0x2070
[  368.478018][T10747] Code: f5 f7 90 0f 0b 90 e9 49 ff ff ff e8 2e 16 f5 f7 90 0f 0b 90 eb 97 e8 23 16 f5 f7 90 0f 0b 90 e9 99 f0 ff ff e8 15 16 f5 f7 90 <0f> 0b 90 e9 09 f2 ff ff e8 07 16 f5 f7 90 0f 0b 90 e9 71 f3 ff ff
[  368.497641][T10747] RSP: 0018:ffffc900040e7820 EFLAGS: 00010293
[  368.503726][T10747] RAX: ffffffff89cca14b RBX: 00000000ffffffa1 RCX: ffff888071449e00
[  368.511713][T10747] RDX: 0000000000000000 RSI: 00000000ffffffa1 RDI: 0000000000000000
[  368.519700][T10747] RBP: ffffc900040e7a10 R08: ffffffff89cc9350 R09: fffffbfff1d3a614
[  368.527686][T10747] R10: dffffc0000000000 R11: fffffbfff1d3a614 R12: ffffc9000c199000
[  368.535673][T10747] R13: 1ffff1100e6e3186 R14: ffff888073718c30 R15: ffff888073718c28
[  368.543665][T10747]  ? unregister_netdevice_many_notify+0xd60/0x2070
[  368.550189][T10747]  ? unregister_netdevice_many_notify+0x1b5b/0x2070
[  368.556824][T10747]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  368.563612][T10747]  ? unregister_netdevice_queue+0x26b/0x370
[  368.569528][T10747]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  368.575886][T10747]  ? nexthop_net_exit_batch_rtnl+0x100/0x150
[  368.581880][T10747]  cleanup_net+0x76d/0xd60
[  368.586316][T10747]  ? __pfx_cleanup_net+0x10/0x10
[  368.591398][T10747]  ? process_scheduled_works+0x9c6/0x18e0
[  368.597134][T10747]  process_scheduled_works+0xabe/0x18e0
[  368.602714][T10747]  ? __pfx_process_scheduled_works+0x10/0x10
[  368.608719][T10747]  ? assign_work+0x364/0x3d0
[  368.613336][T10747]  worker_thread+0x870/0xd30
[  368.617954][T10747]  ? __kthread_parkme+0x169/0x1d0
[  368.623086][T10747]  ? __pfx_worker_thread+0x10/0x10
[  368.628248][T10747]  kthread+0x7a9/0x920
[  368.632337][T10747]  ? __pfx_kthread+0x10/0x10
[  368.636947][T10747]  ? __pfx_worker_thread+0x10/0x10
[  368.642073][T10747]  ? __pfx_kthread+0x10/0x10
[  368.646681][T10747]  ? __pfx_kthread+0x10/0x10
[  368.651294][T10747]  ? __pfx_kthread+0x10/0x10
[  368.655904][T10747]  ? _raw_spin_unlock_irq+0x23/0x50
[  368.661129][T10747]  ? lockdep_hardirqs_on+0x99/0x150
[  368.666340][T10747]  ? __pfx_kthread+0x10/0x10
[  368.670950][T10747]  ret_from_fork+0x4b/0x80
[  368.675382][T10747]  ? __pfx_kthread+0x10/0x10
[  368.680013][T10747]  ret_from_fork_asm+0x1a/0x30
[  368.684832][T10747]  </TASK>
[  368.688246][T10747] Kernel Offset: disabled
[  368.692686][T10747] Rebooting in 86400 seconds..