last executing test programs:

5m45.595927592s ago: executing program 4 (id=615):
r0 = socket$kcm(0x10, 0x2, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000000))
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791647f00e4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x1, @remote}, 0xa}}, 0x26)
sendmmsg$inet(r3, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040)
r4 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x9, 0x3, 0x478, 0x0, 0xffffffff, 0xffffffff, 0x140, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, &(0x7f0000000100), {[{{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@eui64={{0x28}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0xa, {0x6}}}}, {{@uncond, 0x0, 0x228, 0x268, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@remote, [0x0, 0xffffffff, 0x0, 0xffffff00], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff, 0xff000000, 0xff000000, 0xff000000], 0x4d2, 0x0, 0x1, 0x1, 0x10, 0x1c}, {@ipv4=@loopback, [0xff000000, 0xff000000, 0xff000000, 0xffffff00], @ipv6=@empty, [0x0, 0xffffff00, 0x0, 0xff000000], 0x4d4, 0x3507, 0x2e, 0x1, 0x1, 0x8}, {@ipv4=@empty, [0xffffff00, 0x4098f83b9032c130, 0xffffff00, 0xffffff00], @ipv4=@empty, [0x0, 0xffffff00, 0x0, 0xff], 0x4d4, 0x3506, 0xc, 0x1, 0x4, 0x3}, {@ipv6=@loopback, [0xffffffff, 0xff, 0x101000000], @ipv4=@loopback, [0xffffffff, 0xffffffff, 0xffffff00, 0xff], 0x4d4, 0x3505, 0x3b, 0x1, 0x2}], 0x0, 0x2}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x28, "99b01c13a460d5a83c47ee146fb355bfa80ccc9b8a4cc8ec17d7012df59c"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0xfffffffffffffffc, 0x0)

5m44.935928368s ago: executing program 4 (id=619):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00'})
socket$igmp(0x2, 0x3, 0x2) (async)
r1 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1_macvtap\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1_macvtap\x00', <r2=>0x0})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0xfffffffffffffd75, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0xfffffffffffffd75, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000050000000200000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000200)=0x2, 0x4) (async)
setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000200)=0x2, 0x4)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000240)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "bc83ca56398d2173b9c829f1e763032cbd2f2e8401cdcc355269ac18ce4ecb98", "b7ee6817cd5aaa7211905899d695b38a03376e9619b3bf7a0faf0bc344ab90318f4a4fc2db09dc479b7ab402cdc24ed3", "89e68fd457071e106ae4140a81194e386a99ef6420ff7f40e3ae2038", {"85741e4c4e5caddb27d6701516430a9f", "e90b7e08bb1aad85ddb2226d2bbdd108"}}}}}}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r7 = openat$cgroup_netprio_ifpriomap(r6, &(0x7f0000000080), 0x2, 0x0)
writev(r7, &(0x7f0000000200)=[{&(0x7f0000000300)="5f50c974e163ca517d12d93c33d188bfe595", 0x12}], 0x1) (async)
writev(r7, &(0x7f0000000200)=[{&(0x7f0000000300)="5f50c974e163ca517d12d93c33d188bfe595", 0x12}], 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000000c0)={@rand_addr=0x64010100, @empty, r8}, 0xc) (async)
setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000000c0)={@rand_addr=0x64010100, @empty, r8}, 0xc)
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x20}}, 0x0)

5m44.764600545s ago: executing program 4 (id=630):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40090}, 0x8008000) (async)
sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40090}, 0x8008000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0x1, 0x0, 0x0}, 0x10)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)
r4 = socket$kcm(0xa, 0x2, 0x73)
socket$netlink(0x10, 0x3, 0x9) (async)
r5 = socket$netlink(0x10, 0x3, 0x9)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a40)={0x1b, 0x0, 0x0, 0x90, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) (async)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a40)={0x1b, 0x0, 0x0, 0x90, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000042c0"], 0x50) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000042c0"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x102}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001b00)=@bpf_ext={0x1c, 0x8, &(0x7f0000001680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7ff}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1ff}, @generic={0xf4, 0x2, 0x7, 0xfff8, 0x6}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6a19}]}, &(0x7f00000016c0)='syzkaller\x00', 0x3, 0xe, &(0x7f0000001700)=""/14, 0x41100, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001940)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000001980)={0x5, 0xf, 0xa, 0x4}, 0x10, 0x18127, 0xffffffffffffffff, 0x0, &(0x7f0000001ac0)=[0xffffffffffffffff, r6, r7], 0x0, 0x10, 0x6, @void, @value}, 0x94)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001140)=ANY=[@ANYBLOB="14000000ea9f850518b0b239e303010010deff00000300000a000000000000000000000000004ce6c12e8f1f41070000"], 0x28}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x20, 0x90, 0x0, 0xfc, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0xfffffffffffffe4d, 0x16, 0x0, 0x1, @SEG6_LOCAL_NH6={0x0, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, 0x38}}, 0x8000)
sendmsg$inet(r4, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xfff}, {&(0x7f00000010c0)="9d7fcf3efc63f4a6a555ba8b4726d74caf8a207140e69cfac4377876021d7131b838059f96bd206d4776368ed2a90600000071b79884ffdc6ded61efc7d56d0620452136486dbd7a2ce402000000000000002663a69f11c79104433f41dc1cc4a310527fe6ee", 0x33}], 0x2, &(0x7f00000011c0)=[@ip_retopts={{0x0, 0x0, 0x7, {[@lsrr={0x83, 0x0, 0x50, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x12}, @dev={0xac, 0x14, 0x14, 0x36}, @multicast1, @broadcast, @empty, @loopback, @local, @private=0xa010100]}]}}}, @ip_tos_u8={{0xffffff6a, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000008300), r0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001240), &(0x7f0000001280)=0xc) (async)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001240)={<r11=>0x0}, &(0x7f0000001280)=0xc)
r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r14=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r13, 0x7, 0x0, 0x0, {{0x8}, {@void, @val={0x8, 0x3, r14}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r5, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x28, r13, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x40040851) (async)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r5, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x28, r13, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x40040851)
sendmsg$nl_generic(r5, &(0x7f00000014c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001480)={&(0x7f0000001740)={0xf8, 0x25, 0x200, 0x70bd28, 0x25dfdbff, {0x19}, [@nested={0x20, 0xb2, 0x0, 0x1, [@nested={0x4, 0xf8}, @typed={0x8, 0x10f, 0x0, 0x0, @ipv4=@loopback}, @nested={0x4, 0xf2}, @nested={0x4, 0x3e}, @typed={0x8, 0x118, 0x0, 0x0, @pid=r11}]}, @typed={0x14, 0x56, 0x0, 0x0, @ipv6=@remote}, @typed={0x8c, 0x1f, 0x0, 0x0, @binary="142b3e2ea37f56e87e8dbe9e9cd9e14ed47b5f2d0182b12bf1aa3d49a9a0a765c991330d555c2f68e270374fb8e332a2c9fd919a8383c0750cf06a5f7f5f462229e3a8ae3eb2c099342ec670e4c4ee1679457406fef0ea9b69a804792348bc542efc0cbf71d669281f097f2e8a525bb7c57619b84608e594982e591d7cb4558668d9683959ab2cc8"}, @typed={0x8, 0x1f, 0x0, 0x0, @ipv4=@empty}, @generic="0230c342", @nested={0x10, 0x77, 0x0, 0x1, [@nested={0x4, 0xbe}, @typed={0x8, 0x46, 0x0, 0x0, @u32=0x1}]}, @typed={0x8, 0xda, 0x0, 0x0, @uid}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000080}, 0x40000)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000008440)={0x0, 0x0, &(0x7f0000008400)={&(0x7f0000000000)={0x6c, r10, 0x9, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x22}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:crack_db_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000008440)={0x0, 0x0, &(0x7f0000008400)={&(0x7f0000000000)={0x6c, r10, 0x9, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x22}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:crack_db_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

5m44.146385257s ago: executing program 4 (id=625):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x15, 0x0, &(0x7f0000000100)="ffffffffffffffff85c575ea3f6e929537ca378651", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

5m43.897811534s ago: executing program 4 (id=627):
socket$unix(0x1, 0x1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x3, @loopback, 0xf}, 0x1c)
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x800000008ec0, 0xa)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x24040044}, 0x4004811)
setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000100)=@hopopts={0x29, 0x4, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @hao={0xc9, 0x10, @remote}, @enc_lim={0x4, 0x1, 0x4}, @pad1, @pad1, @pad1, @pad1, @pad1]}, 0x30)

5m40.763244608s ago: executing program 4 (id=659):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1f0000000c20000000000000", @ANYRES32, @ANYBLOB="ac178b39377bd51ce49d61b03d630860c3b50619800f1185f5dbf368fba640d66eaf1dc31279a3e110afb1798863a885f352c26d2c0e46f8b3c24136aee9a08fed63012dba7b2510891cfd8f13d3e9a6ef6b47d5af35b4128c7fa30f39821972e7079276bc6b410bc5", @ANYRES64=0x0], 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_emit_ethernet(0x12e, &(0x7f0000000640)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0xf, 0x4, 0x3, 0x3, 0x120, 0x66, 0x0, 0x8, 0x1, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xf, 0xfa, [@empty, @remote, @remote]}, @ssrr={0x89, 0x17, 0x4d, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @empty]}, @noop]}}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x37, 0x4, 0x1, 0x6, 0xecec, 0x67, 0x80, 0xe, 0x6c, 0x7, @remote, @local, {[@timestamp_addr={0x44, 0x3c, 0x27, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0xfffffff8}, {@loopback, 0x8}, {@remote, 0xd888}, {@rand_addr=0x64010101, 0x2}, {@dev={0xac, 0x14, 0x14, 0x30}, 0xfffeffff}, {@multicast1, 0xfffffffd}, {@loopback, 0xff}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x40, 0x3, [{0x2, 0x4, "10a6"}, {0x1, 0x3, 'z'}, {0x5, 0xb, "1524370b5a910e21e9"}, {0x1, 0x2}, {0x5, 0xb, "74328d1f46406b6e76"}, {0x7, 0xd, "d1edc503ed93888b6c579f"}, {0x5, 0xe, "d89aca32c90150c64382820f"}]}, @cipso={0x86, 0x44, 0x1, [{0x5, 0x3, 'q'}, {0x0, 0xe, "e6309a07fef0deefd836e120"}, {0x5, 0x8, "3b8ad2ce8478"}, {0x0, 0x2}, {0x0, 0x12, "d82ff8d6a19562db08be9f1b32faa94a"}, {0x6, 0x11, "962547f821184a5663071a0eb3d5d3"}]}, @end]}}}}}}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4)
syz_emit_ethernet(0x2e, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200000ee43f6642531e0800450000200000e00002119078000000000000000000004e20000c907861100000f0d4e6efac9b8597bddfb8d6e772482dd121ee72d3f35bb19684ccda70a3b34f3078b111f5953d649b23ecb022a04669ce46e08d0f2d9056e2a9755f4cae7622"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r5, 0x0, 0x1}, 0x18)
r6 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r7=>0x0})
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x18, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="851000000404000095000b00000000001820000087000000000000000000899eeeeb7ec91617d473e323d09fc6fd759407f92bffc4ef7b064731ab460402a332272e9d1ab29fb4043a1c0000000000e40000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0xfe2d, 0x0, 0x0, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
close(r8)
bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r7, 0x2}, 0x18)
sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@deltclass={0x24, 0x29, 0x100, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xb, 0xa}, {0x4, 0x9}, {0xb, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x4e000)
syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r6)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, 0x0, 0x0)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0xfffffffffffffea6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)

5m25.518566061s ago: executing program 32 (id=659):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1f0000000c20000000000000", @ANYRES32, @ANYBLOB="ac178b39377bd51ce49d61b03d630860c3b50619800f1185f5dbf368fba640d66eaf1dc31279a3e110afb1798863a885f352c26d2c0e46f8b3c24136aee9a08fed63012dba7b2510891cfd8f13d3e9a6ef6b47d5af35b4128c7fa30f39821972e7079276bc6b410bc5", @ANYRES64=0x0], 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_emit_ethernet(0x12e, &(0x7f0000000640)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0xf, 0x4, 0x3, 0x3, 0x120, 0x66, 0x0, 0x8, 0x1, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xf, 0xfa, [@empty, @remote, @remote]}, @ssrr={0x89, 0x17, 0x4d, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @empty]}, @noop]}}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x37, 0x4, 0x1, 0x6, 0xecec, 0x67, 0x80, 0xe, 0x6c, 0x7, @remote, @local, {[@timestamp_addr={0x44, 0x3c, 0x27, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0xfffffff8}, {@loopback, 0x8}, {@remote, 0xd888}, {@rand_addr=0x64010101, 0x2}, {@dev={0xac, 0x14, 0x14, 0x30}, 0xfffeffff}, {@multicast1, 0xfffffffd}, {@loopback, 0xff}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x40, 0x3, [{0x2, 0x4, "10a6"}, {0x1, 0x3, 'z'}, {0x5, 0xb, "1524370b5a910e21e9"}, {0x1, 0x2}, {0x5, 0xb, "74328d1f46406b6e76"}, {0x7, 0xd, "d1edc503ed93888b6c579f"}, {0x5, 0xe, "d89aca32c90150c64382820f"}]}, @cipso={0x86, 0x44, 0x1, [{0x5, 0x3, 'q'}, {0x0, 0xe, "e6309a07fef0deefd836e120"}, {0x5, 0x8, "3b8ad2ce8478"}, {0x0, 0x2}, {0x0, 0x12, "d82ff8d6a19562db08be9f1b32faa94a"}, {0x6, 0x11, "962547f821184a5663071a0eb3d5d3"}]}, @end]}}}}}}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4)
syz_emit_ethernet(0x2e, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200000ee43f6642531e0800450000200000e00002119078000000000000000000004e20000c907861100000f0d4e6efac9b8597bddfb8d6e772482dd121ee72d3f35bb19684ccda70a3b34f3078b111f5953d649b23ecb022a04669ce46e08d0f2d9056e2a9755f4cae7622"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r5, 0x0, 0x1}, 0x18)
r6 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r7=>0x0})
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x18, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="851000000404000095000b00000000001820000087000000000000000000899eeeeb7ec91617d473e323d09fc6fd759407f92bffc4ef7b064731ab460402a332272e9d1ab29fb4043a1c0000000000e40000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0xfe2d, 0x0, 0x0, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
close(r8)
bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r7, 0x2}, 0x18)
sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@deltclass={0x24, 0x29, 0x100, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xb, 0xa}, {0x4, 0x9}, {0xb, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x4e000)
syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r6)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, 0x0, 0x0)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0xfffffffffffffea6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)

4.367927368s ago: executing program 1 (id=1896):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0x400000008000f28, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xc7, &(0x7f0000000b80)=""/199, 0x40f00, 0x19, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x168013, r3, 0x83db2000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r4, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x0, 0x0, 0x2, 0x2, 0x0, 0x2}, 0x20)
ioctl(0xffffffffffffffff, 0x8b2a, &(0x7f0000000040))
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x648, 0x0, 0x3d0, 0xd0, 0xd0, 0xd0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3d0}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0100000000000000000017000000b45981c4fb947c537fe47db966ee7f2864368511d61287012bc9721c7cbab2506a6ba8c60ba6e72e47f77175b4dbb435636731ea4f7d760372a481f977871bb6906ed55a51121baf9f9f89a57271321b5639c2a60039984aadb70922226d63361a1d88800ca4dd33d8da33a482dd1e608369a9a8d9f22865c99fd1066b495c2b38493a2a4b32ada3fb61daccadcff1aab17e29d4a45dc1cfa42fc1a9bce5d4f0039ee4b782738a878a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000840))
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0)
r6 = socket(0x10, 0x803, 0x0)
getsockname$packet(r6, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a00)={'sit0\x00', &(0x7f0000000900)={'syztnl2\x00', 0x0, 0x7, 0x20, 0x34d, 0xfff, {{0x19, 0x4, 0x0, 0x1d, 0x64, 0x68, 0x0, 0x2, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x4, 0x82, 0x1, 0x7}, @lsrr={0x83, 0x1b, 0x51, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2, @local, @multicast1]}, @timestamp_addr={0x44, 0x14, 0xc, 0x1, 0x7, [{@multicast2, 0x3}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x68}]}, @rr={0x7, 0x7, 0x6e, [@empty]}, @generic={0x82, 0x2}, @timestamp_addr={0x44, 0x14, 0x89, 0x1, 0x8, [{@private=0xa010102, 0x1}, {@multicast1, 0x3}]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000ac0)={'syztnl0\x00', &(0x7f0000000a40)={'syztnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x6, 0x40, @private1, @empty, 0x8, 0x91bca711c1a080bb, 0x1, 0x9}})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000b00)={0x0, @multicast1}, &(0x7f0000000b40)=0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0)

2.935183992s ago: executing program 0 (id=1919):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff2}, {0x2, 0xfffc}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x3a}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0xc090)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0xe0000000}, 0x4000000)

2.779567371s ago: executing program 0 (id=1921):
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) (async, rerun: 64)
socket$alg(0x26, 0x5, 0x0) (rerun: 64)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'pim6reg\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, 0x8500, 0x2}}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@gettfilter={0x44, 0x2e, 0x2, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x9}, {0x0, 0xb}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x24004c45) (async)
r6 = socket$kcm(0x29, 0x5, 0x0) (async)
r7 = socket$inet6(0xa, 0x3, 0xff) (async)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) (async, rerun: 32)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (rerun: 32)
connect$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r9 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNADD(r9, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r8])
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$inet6(r7, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000100)="daffc38b69363a52fe8000000000000021845a91f64fddcf51f405595faeea41974e5559ea91f7", 0x27}, {&(0x7f00000001c0)='\x00', 0x1}], 0x2}, 0xb00)
r10 = epoll_create(0x7)
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x20000004})
pipe(&(0x7f0000000140)) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x1a, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x101}, [@map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @generic={0xa, 0x9, 0x8, 0x8, 0x5}, @map_idx={0x18, 0x2}, @ldst={0x1, 0x3, 0x8, 0x1, 0xb, 0x30, 0xffffffffffffffff}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000400)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000440)=""/4096, 0x40f00, 0x62, '\x00', r5, @tracing=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000002540)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000002580)={0x0, 0x10, 0x7, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x9, &(0x7f0000002600)=[r2, 0xffffffffffffffff, r2, r2, r2, r2], &(0x7f0000002640)=[{0x0, 0x2, 0x2, 0x8}, {0x2, 0x2, 0x10}, {0x1, 0x4, 0x10, 0x4}, {0x4, 0x1, 0x2, 0x1}, {0x3, 0x4, 0x7, 0x3}, {0x2, 0x1, 0xf, 0x1}, {0x3, 0x10000004, 0xd, 0x5}, {0x0, 0x1, 0x5, 0x4}, {0x4, 0x1, 0xf, 0x7}], 0x10, 0x0, @void, @value}, 0x94) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=ANY=[@ANYBLOB="40000000100003050000000000000000008f00001ffc176dd01f923e7d0a029cdbddaf2bd453c092155b2b8518396db811d87967e800a0940c759046a1d03c764d7d47dfdb9f3fa5be258a9485195645b9f872a8069b8d82d8f9767ca76468adc5c079b4dbb74b6686cb08bfd8", @ANYRES32=0x0, @ANYRES16=0x0], 0x40}}, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0)
getsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, 0x0, 0x20000007)

2.439398456s ago: executing program 2 (id=1923):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r2, &(0x7f0000000140)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x80000009}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4004081}, 0x20000000)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x7, @any, 0x4}, 0xe)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000f10000000000000000000218010000202070250000000000202020db1a0c0001000000bfa100000000000007010000f8ffffffb702000008000000b70300002000000085000000ca00000095"], &(0x7f0000000300)='GPL\x00', 0x1, 0xe0, &(0x7f0000000440)=""/224, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

2.152262804s ago: executing program 2 (id=1927):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000050a6c52f6bfb17b00"/28], 0x50)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%-5lx  \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r2}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r3}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180))
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000002c0)={0x2, &(0x7f0000000040)=[{0x30, 0x4, 0x0, 0xfffff02c}, {0x6, 0x8}]}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff9, &(0x7f00000014c0)=""/4089, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

2.051728615s ago: executing program 3 (id=1929):
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64)
r2 = socket(0x10, 0x3, 0x0)
sendto$packet(r2, &(0x7f0000000280)="0f30", 0x2, 0x0, 0x0, 0x0) (async, rerun: 64)
getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (rerun: 64)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xfffffeb6, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf17, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff1, 0xffff}, {0x0, 0xfff1}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x88)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x6}, {0x0, 0xffff}}}, 0x24}}, 0x0) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, r5, 0x607}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x24044884) (async)
r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x6)
ioctl$SIOCAX25GETINFOOLD(r6, 0x89e9, &(0x7f0000000340))
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r7, 0x6, 0x4, &(0x7f0000000180)=0x1, 0x4) (async, rerun: 64)
getsockopt$inet6_tcp_int(r7, 0x6, 0x4, 0x0, &(0x7f0000000040)) (async, rerun: 64)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async)
ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x37, 0x0, 0x1, 0x20}, {0x4d, 0x0, 0x7f, 0x5c4c}, {0x6, 0x0, 0x0, 0x3}]})

1.911264957s ago: executing program 2 (id=1931):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff2}, {0x2, 0xfffc}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x3a}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0xc090)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0xe000000000000000}, 0x4000000)

1.836017823s ago: executing program 2 (id=1932):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}}, 0x4)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth1_macvtap\x00', <r3=>0x0})
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={<r5=>0x0, @in6={{0xa, 0x4e20, 0x7fff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}, 0x5, 0x7, 0xea5, 0xffffffff, 0x40, 0x8, 0xf0}, &(0x7f0000000280)=0x9c)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0)={<r6=>0x0, 0xb}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000340)={r5, 0x3, 0x101, 0x5, 0x400, 0xf, 0x1, 0xfffffff8, {<r7=>r6, @in={{0x2, 0x4e22, @multicast2}}, 0x3ff, 0x6, 0x2, 0x4596e59c, 0x9}}, &(0x7f0000000400)=0xb0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000580)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/51, 0x33, 0x0, &(0x7f0000000480)=""/215, 0xd7}, &(0x7f00000005c0)=0x40)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008085}, 0x10)
socket$kcm(0x29, 0x1, 0x0) (async)
r8 = socket$kcm(0x29, 0x1, 0x0)
sendmsg$kcm(r8, &(0x7f0000000ac0)={&(0x7f0000000740)=@ll={0x11, 0x11, r3, 0x1, 0x2, 0x6, @remote}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000007c0)="84d84bacc7d0d8b81f908696c69d166660769b077c144ff42ee5a0e9b19f4f265ca46ce626613aa2b078f1e0ec66283ede47fcb13e569866cfd940a14ca4d7ae012b3b48b219f1a5693bc5f6639834488e5e46119603a0d67f6647e5e91c058259084781170cd8e0f0cfb0b6adad505dc1d88a527756862d8cd5b6600679f6e46285729d27a31e1d3cb6bab4147c08c3351e1861ae4a15ac7c0e7106aea567f2188c84cad95a7a6a9b351f2e8c6c251f66edff69e833c2c9c77f4e0b6c2806c0a11099805910736b466e2117cf136409893c7755e2b0eb76b4985f4090c247ce5e7f0a53ad", 0xe5}], 0x1, &(0x7f0000000900)=[{0x90, 0x107, 0x498dac59, "1415a7ca536b5d69239728ea38bc57c6318648a6df1506579e0f9cd2828dadba1eed46478823772cf618deb3acd35d2270072c05f987ffd8b4ed3a24835fece257f23dcdef7351e8c27806dbe542ad55752ea4c1645029bd80f5a3536177072987029f9a1a4b84dc2fe678bcf37c55b401a3ce09ea16e7dfcccb97"}, {0xb8, 0x1, 0x9, "3aea2870ed4c69b0051f08c156727e39aea6fc372507c1828caa1106bc6d98056c1458da071179a0d482d9524153936943fbf4c06cc6deb7a3a21c844bd7984ecdf91ed608c5d2fb8b6c9dcbc470128b938ecd041cbc7860ec888c4b9f27503427cc6348906d88b55b87ff0b8c084eb273fff7fd177058670359031a5dd8c959911ceb7e3c9e92ea70d9fb156f5ad7522f7be8da7c1aebfa7b4065ab6a9f2eb776b2"}, {0x68, 0x206, 0x0, "738d0ba2cd08003b828d4cd6976e1d7da76a4f870459301e4ea204ceefff2947e0e1a6922630e0e89a42905c13c36f91a4a92f886ef39cb537052970034922f6468f313bd9ea8fa112674f34481bee5cb76f9030b2208553"}], 0x1b0}, 0x5)
accept4(r4, &(0x7f0000000b00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000b80)=0x80, 0x0) (async)
r9 = accept4(r4, &(0x7f0000000b00)=@pppol2tpin6={0x18, 0x1, {0x0, <r10=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000b80)=0x80, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r10, 0x400448c8, &(0x7f0000000c00)={r2, r8, 0x8, 0x24, &(0x7f0000000bc0)="73e2f2cb58992772910d84b166a12f15888fa7aa8756e10449a3d5277eae86ea64a69dab", 0x4, 0x9, 0x35, 0x3, 0xb0, 0x2, 0x7, 'syz1\x00'})
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000cc0)={r6, @in={{0x2, 0x4e20, @empty}}, 0x0, 0x5}, &(0x7f0000000d80)=0x90)
r11 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r10) (async)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x2c, r12, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x60607927}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x40080) (async)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x2c, r12, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x60607927}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x40080)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000f40), r0) (async)
r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f40), r0)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x44, r13, 0x108, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xec}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000040) (async)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x44, r13, 0x108, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xec}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000040)
getsockopt$MRT6(r9, 0x29, 0xd0, &(0x7f0000001080), &(0x7f00000010c0)=0x4)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000001100)={r7, 0x2, 0x30}, &(0x7f0000001140)=0xc) (async)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000001100)={<r14=>r7, 0x2, 0x30}, &(0x7f0000001140)=0xc)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r10, 0x84, 0x1, &(0x7f0000001180)={r14, 0xfffc, 0x8, 0x9, 0x4, 0x3}, &(0x7f00000011c0)=0x14)
connect$pppl2tp(r9, &(0x7f0000001200)=@pppol2tpin6={0x18, 0x1, {0x0, r11, 0x3, 0x0, 0x4, 0x4, {0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x200}}}, 0x32) (async)
connect$pppl2tp(r9, &(0x7f0000001200)=@pppol2tpin6={0x18, 0x1, {0x0, r11, 0x3, 0x0, 0x4, 0x4, {0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x200}}}, 0x32)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$FOU_CMD_ADD(r9, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x30, 0x0, 0x380, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_AF={0x5, 0x2, 0xe}]}, 0x30}, 0x1, 0x0, 0x0, 0xc001}, 0x20008050) (async)
sendmsg$FOU_CMD_ADD(r9, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x30, 0x0, 0x380, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_AF={0x5, 0x2, 0xe}]}, 0x30}, 0x1, 0x0, 0x0, 0xc001}, 0x20008050)
r15 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001380), r10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000001480)={&(0x7f0000001340), 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x6c, r15, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_vlan\x00'}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r9}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010102}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv0\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004040}, 0x4000)

1.798479054s ago: executing program 3 (id=1933):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'})
ioctl(r1, 0x8b22, &(0x7f0000000040))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000000206011e0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a300000000020000780050003001c0000000c0001800800014008000000050014002000000005000500020000000500010006"], 0x68}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, 0x0, 0x0)
ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8000, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x101, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]})
sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x4c, 0x4, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8090}, 0x80)
r8 = socket$packet(0x11, 0x2, 0x300)
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="100000001b1401"], 0x10}}, 0x0)
setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4)
setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r2, &(0x7f00000005c0)=ANY=[], 0xfdef)

1.748047627s ago: executing program 5 (id=1934):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000080)=0xf, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x200002, 0x0)
bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xfff5, 0x1}, 0x6)
getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000040)={@loopback}, &(0x7f0000000240)=0x14)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x80000)
sendmmsg$unix(r4, &(0x7f00000020c0)=[{{&(0x7f00000050c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x44081}}, {{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x117, 0x2, [r4]}}], 0x18, 0x850}}], 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4e0, 0x0, 0x11, 0x148, 0x0, 0x0, 0x448, 0x2a8, 0x2a8, 0x448, 0x2a8, 0x3, 0x0, {[{{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x12}, 0xffffff00, 0x0, 'ipvlan0\x00', 'pimreg1\x00', {}, {0xff}, 0x89, 0x3}, 0x0, 0x2f8, 0x358, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x21, 0x0, [{0x0, 0x0, 0x80, 0x7}, {}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1df3}, {0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {0x0, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {0x8000}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {0x3ff}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {}, {0xf}]}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x4e22, 0x4e23, 0x4e20, 0x4e22, 0x48bd, 0x6, 0x2, 0x7, 0x10}}}, {{@ip={@multicast2, @empty, 0xffffffff, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540)
socket$nl_route(0x10, 0x3, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r5 = socket$l2tp(0x2, 0x2, 0x73)
getsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, 0x0, &(0x7f0000000040))

1.607064407s ago: executing program 5 (id=1935):
socket$pppl2tp(0x18, 0x1, 0x1)
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@delneigh={0x28, 0x1a, 0x1, 0x70bd25, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x84}, [@NDA_DST_MAC={0xa, 0x1, @remote}]}, 0x28}}, 0x0)
socket$kcm(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
socket(0x1e, 0x805, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r1], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

1.523997592s ago: executing program 2 (id=1936):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x100000000)
r2 = socket(0x28, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000100)={<r3=>0x0, 0x100, 0x1, [0x4]}, &(0x7f0000000200)=0xa)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000003c0)={r3, @in6={{0xa, 0x4e20, 0x0, @private0}}, 0x9, 0x6}, 0x90)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = socket(0x15, 0x5, 0x0)
connect$l2tp6(r5, &(0x7f0000000180)={0xa, 0x0, 0x2, @empty, 0x0, 0x4}, 0xffffffffffffff90)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r7 = accept4(r6, 0x0, 0x0, 0x80800)
sendmmsg$alg(r7, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="e946df71a31a6f129c0f02e796f20c05bce5147b", 0x14}], 0x1, &(0x7f0000000300)=[@assoc={0x18, 0x117, 0x4, 0x1}], 0x18, 0x2000084}], 0x1, 0x4040803)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f00000004c0)={r3, 0x8, 0x84f, 0x3}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x38, 0x0, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffffa}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x53c809d4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

1.472301798s ago: executing program 3 (id=1937):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed300000000000000000000000000000000000000000000020010"], 0xb8}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x18, 0x24, 0x301, 0x0, 0x80, {0x11}, [@nested={0x4, 0x12b}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0)

1.388252084s ago: executing program 3 (id=1938):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="b400000002000000660000000000000073018f000000000095000000000000004bb5eea0a6ec9fcd4b0a008a8443f22702000000e63bde9e4a0587536a966992ae7011d6e6c03175717e9912e0dd1a59541f7cbb1548ee5bd627f5b0b8ec77bd6d5f7b543f9aafaabe53339b12fbbe7decc4aa61b8aad0359083bdd61543fbeee8d560bb4b5925fae801f4c91e31674b124a1b38000000bc4da4a9b3d5cc9e0000f6a7a729009973ff07000000000000ac79e5d84abbec7d96629490727375b853f6308a980fba61fbe0131f3c7a026d8f000008000000000000000b20d7ac2df89d7989bf53bec908213d396edf24e9fc3cc004a1097fddc65c1b1b328277ff85ed56b9261eb7bcee28ec2d3616689ab3f31f849eebce6f21e6302003c0467844e000000000db0700bd694a09b253a1c6c7c138b3ec6ee9b83edcc55d3403acd5c50e2740a7ab7069790da79b7ab45184caffff00009bab066bf7a4ab148d44c7e2e4d219cdd7ebeb51511d9df85a648b1b85f93cb6cd21f93d5ea3da2b31657c065d052d9b9ee00320def97ebac25b929b3c15e33be6e7d54e622b427ee8d181d2f18d772fb5c58a936620ba1f5fbb48703ab211f442697edc165b449db2e3c221fbf270a6db414516949b97c200000096a1cbe81a38a23f03bd741a3e60c2e294f828e06f1b2cb70328f151f949e369efed52a28b87aae9d7d2800c8eff7f93c05adc9086d3f143a7b87d06838c6525cafdc01820a8912a131ff1f6acb9439f2d95a746291641b38333ce1c84b0d9d033edc9da00c8a2b42e8adfeff69fce7a35f79748e3e5b235269310988a05bf7c4e4cef3d1aa550c83d6328eb000000044a6458c31431d58973c93f5e9452258a7098bc3d014afe638a40948498fa9561213bc20845526e054d6b3ba5ca8f357df67c41acc28edacb31d38994544c3511ea1e8a448e66039425cfb03efb5d5eb81a306746adb8809ef969187763c00085e2dc401325327e54cbfceb400c2663466cd4a79c94b62c9882626499a8a29c564464f2a7aee6a929f831c93d23005787d272b5eaf0c6e11a7f0f1f39f68df44f6bf2d9b51d99c89e327b4bf7b96ad33abbd3a8b5814b5e7f85d1a47ee604ccef20bda53c9ce06910568fc200eee12fc6ef2734a6e9af5132f0c507e277fd97f9b48c840697289d38e454467f4d2f94b2f76d06edd083dafefd76deb251b5818de9c27d0df6e7b8862fe42f6c453f551f35b6d76395a1d205f276ae628fbdb8081905a1d7c2805532d3387b88f2997e8ce41c5dca83659cfb7f3a1c7b2bec8a7575dc4241dde6c680ee9a27b197739f4ad86f3bad3e42d4954bef864586ad02c27858d63efc495bcfb6ed49a5ca8987b0f2a8b14054e30f30fedf536d63769a196fc3b472195d0a1a13ecf803136d751cefb0edb5794cab8681214b39f86d88f3aebea4d465ef05f975b09f264d6c8d8e3bb6ea7d21c6602bcc8f76f2546cccc074f55c22aa8b502968040000000000000047c8a50036dd268a1aeff951f5090492b5e941feb1d3785aafe1655876e5a36c40fb5afcfd1eb28952662782097836a4d1aa3de0c06bb7dc27cf1a546b6aa6ce9932f3c6a013bc3791da4d8a33680ba8f1334d75a43e991ebd4582d786ec05cdd3152d52ab15fc7595cbd339f730d2ec8e37e6c500c4c30280a6af986f62a22d9c5c275e7798c165545abfcd304243274db15924a136a0896d56576ed7de90b1bda90f4024b9a0b3b33f688db8e38f784ae3942aba874f95d10c47e2405ceb0438cc272133fac718a6553710e4ca97df646b21d02652c54eade2e99344e11a2671cf274d397650fba8fcfb7e51a926e37b3980a1732111175dd99b9d979042b3ea411a7b4f9081ae9b82974d5eb6fd4e4bcd95e4f897dfba4e44777e6d02a896b650a66d9139696b926c36a33eb3bdc092bf4586bfab34002f802bbfe6a7679cec20cc25e01f129bbe92a65961fac7bffa3d8feda2ac927743d2bce57ee39b671948576337535180aa754e035421cf1709bc1b5e46c35515fb1fcda637a6405e9b216d2ca09795c5d2f27665da5b17bcf0f387e6dd58202a3a1148e46e55ac7ea027eb3022eee4a000ca543ab566921e5db4f741a762e5705f942855a9fa30b912045f78ab1e3fdeada84bc8ac36cc1223901e56f6ecbabbc3263098c9c47a1f505a8299b5715a455e834ddddc430f387cafa07bf915522f9a42e34eea5169b796320e892d27924045bcf56135684ca96ada82749371d5766c0d0cae8772f140eef001ca39dc28aef8a5236393fce29b0531cbd3265c209761ed41a2e473fbd84ca9b67e3ceb58a4b774ee127628faba8702c0a73f8311d269429aaadf74c439404fc9f864e69807dfe257c0c4a26c60bfa77f89bae2bd4c498a10d4e17dddb1f7539bfeb392e22e7b93d0ecf66cd253a4062bbc8a437f8924ee7a89ab73dd7c11be13707482c369f02d7b6f242599f95dbfcb55bea158665231f8fe04ed2a8c407fed1a8702e2486386f2ae6347231128be789186ff5651208c80781f85d3fb51bd28b939a8bc88a471c36fa17fd04c3fbdbd3f7bf144b1466014a77c582aa0380e612cd101d557dd1e5b7bae3da3ea2659f66a3641eaa3b008b9788a63c8f7009f9149fd9c740eddd300000000000000000000e620e3657ac82a5bd27dfa4f2add31a402346571e87b2644edb73d4affdcbbe2b8e2539b44554c10dc0ac8ba67ab9901c8e9564b4c26a87cf59b11978a86d4938ca4db01a9d8426aed32eb0d0d1dd894bbf3197f3b5744b5a4f813fd7330"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000001400)={{r1}, "1c45346ff42486688e62f106bb60ba5c309af6201684179c6d9b04cb5106e2c56b7b039c350f13436e5e92e031282a361518ee9ce7cd3fc6364c01adeb3d6e4cae21d0217ffeda7a6df8d6c564b5a0212d5f8b38911ef156200e4ff5ad80895bfb1ba3be844a2a0b093f01891643b739828b68434a5ddf8291b5f762a84f4a0f730900bf8d52c6b1dcea0fdc12b9c0d37ba06573604934f2e374afc49fcb7db527bebcce2110e3168f56c12fccbf02e5eca9951e3bb0d0af034e1629e3c9603395f0771ecdbef89779f0101d5caa8cf0ca573689d568ae4bc9ad9efa97e8efdfdf0e3c7379c301821dc6a16ca68d6c027b13fdc7466bec39397e27897f85689db2bafb4a7a4c264f5f05481807aff5ee671d078a623063496a226263de95babf3aa9e7212e055777ca8b785694cda9f5094f4de974dffbb5ae47fcfa244fc47d6254f45a146735109c801d3248461ba5c84d47915e1dcf063821c8354c58f8328cdc0365f7748cadd905d6ccc759fe69d25c3c8162e04712ea36f1742b06497dd19305faad8264517527e826e2c447ea84f2f5e8f414952abd43029054bf2bcc1dab2807bda07c44da0c608e832abf73b9c06755bd884d02038d5c743c35fdbb9bf7eaf0733ef2e44b5070876c9f180a14f7a262206e7757b25521a292c47f04457b8a4eaef6ea1639e9e7ac5d45e5ea71b5b6899e0ddfa9d9af5ab8ad0c2d07ba5c8439c70bd9faa5bf323ca673af04f3c0c98c78b51765b2ad801fe41836c31b4a1d00647a118e5203cbd8b32e1b3988a5469b5f060006d4f034b2464d54fdb8a7c8f0f48a0dc633256f2c6f6eb181d8b180fc8938cbd557466da8748dca37ebfdbd3cb6e5865e692927849606b529cc82fd1ae90e11fa49ddd127d2aa1f69e4d6f971917524b5717d16239d563c5f96bf30ecc8ec489a9e77d5d3645011f60b551375e7ce8e022393096645f4e1582ba8e3b925aff69c532a020e0f0c86bb8e5c7fec9fe7945741041672b7f46f8047043a354e53c1849a42b218d6b7af8b1315b72fb4e61f5441c231345c5297fba4aaeeeb98e3e8cd8ae9ae8678dbfa0ca92e84d89a81236f009bde2777b0f119b04f7ac0ea97bbdd49bce8160507a645f56bdf964a714c9156c3cbdcca7009011b51d3f26812c5da3bf0fe62c0a30efb47c518c05f60891ecd765cdb3fb24fcf11b66e0e5be1c346445bafefb1d70c643bd3fbfb48af882adb9f5e75576a7c3255f2881f6d192ef180cc8d061a50c5f0d2b4a32b1f4185dc85c13466f57c9f29b832c06d508d2ad2fd6d773b7362d39eb48b1a4454fdfce51bbba91d1a80f6da4353e67292b7d5c724ebc955bf3e276d342f0ddb2eb25ccfa229f6c9680d755917cbdee1cde7fa7e8d33794278017140144cffe8b7b2a436ab826994dc1ea1347d08feac444911dd98445285f3871eb4a7ccb2ac8b1428c3daeb7731b1374eb4cd10834160e88326fc5d0f1b5c756c8d119b40eefedc7c062db94355b51e11bb3d98cd0005c2c8ffe677655da14a754e7ca5a082e95329ffc4229d5ca8a58e80b0fd4eb7cd3f0a63cd272f0ae76cb9092c96f0351935dc69067698566261dc0025045f74b060153ad85bbe428e8e2d977d72f3ed997ea780f54ca44135358a4e951850033220475accb9737ab3497a58d08022b4f75e535ef86c9ae7a924e3ab503487a37d1fd3542c89641eabe4b7e1d7018f9d5719153ff14c705f5c7467f3f03249f6e93fada5ad7451c97388765a2f103c6f56f19d6bfba4571798b46007004439c7d4004d42ad8056cee5ed14ad89917de57ad24c3470a1ab987ad4df4a5c8b86d75b82b17ceedcfa873e37f2dd104cfd2329f53fc52b13cfc70fcbf6b3914cd18e41bf611649e0d1190d64aa25d0f5c881e625160ac118abc2b0394519f86b903866d220b4e972a91537a2b238af35d6e838f0ae0afeac4fa7bad8866a59a656dacdd5132525ee8c9e5d09a7d26b059baae5fcf26bfea33889b3979048e851655c005f59e371f3af65e44331d113aed8af63bc3e14d12994b22c02198b0e3f8f7d96bba597baa75c4cbeb5891f7e4c30d053064aaef38afebc8827170cd45f20fcb6850b960b7e528bb022643aa8935d69386f1c3266e2da464613b12f8cef7e8dfc80c49bd973dfca796b5314921b898ec4d1e668fe579e704edbc758016f03109c509970203af76ad6a14214796a66b58ab75253a5e4a66294b4900aa8ee2eca0b2374cdf8a55548c8810c0a0090348941e5f60c98b374ae38ae98272ecea10ccbf802ae4e139e9f49cfedede6aa181c4d8f95fb9f61a45a4d86578048327636d1bc17ab670dc8ab1c266698069a9455b649db40df684342bc6fc4e46a3805a06daefcd9e36301dad328e50dee88d34faf295e1d050e4f570a73c4e2cf6265a6ef6d1f0c3c00337b1fe60c4521fe75a9b37224ab0e52fdbead9bb6ae23dec0e0306941220ab2cd8c4bb6be957fc74dba7b5e0601e3afbf88c03a71fa52f89790897fc9e8ecd95c8e8fc06c82b0aea476eb50dfbc08735a88ef5d16a3491abf07ae972512f16375495505bd9f59900d5b2ab28f8abc909a54de3d953246c26050f4375cffc8f6ae19eb0b0ec01be55e84bca98e6f714fbdedfd29880c4f3a5708898e28a48dee815a9b4c5c22b9abb31cdf172c7350f9ac187329194a786c82739efe0b83d79ae8e292406467cd46569f2c108142bf37d4d87712daf8e4d729d515175f2520b08251a6669494d933baebc583b9bdf18e25b1131842de797fc13a21d0dd4790af2487fabdab7317a54b9e969e781db98ca7ee54a65165ec78d9427ec6974a9a9bf05bc8546d21b3bf89a6dd22d53fc6433b8024dcffa7e6e5234d19d44177f49214a4ccf10c85a82ba8fa4cc8949a11818c8991a94c7bc13f2c3a3190e7996464c0193e787c95ef79ea130df846189def20fd716c1291ff7a8dc4e036499b080f1b4a7742773dc6a42c98bf106ac3e2a33df52d9c3b9aaf99725a05804468e3511a3759503d1b27d9c91cd970f726fc2b5ecf3663a55d92bcbc506d78884cad486482b9b63d92b4df210d2af152b0687dfd7c96224a0c56fb1062c3a0de79e8157f9d59841ddb8819606abb0b24f8d8955ebbff3f8ec2627b4086e4c73207d18f2d6f8000062889919c0fc9b7cb7da8340a710e513df4a68ddc1c5aad49df2b8238c315bb3e57ff80cd908c590777b3deddadcb8c39d85ab85ff655d9fcb8a2c71d0ea90ae9ed30ba34d37778f2478644e91f1790d4dce70ed197686cd4d19a45fdab709dee6e7a36e8e0ac563cf6ec62236db4f427a073b05a1a7c4e1b51ca6a7c6bb32f0292584c340822e7372c4bc897dc85e83dca365d34b51888f9569c3f31cdb6991eeb49540f5daae43d4cdb3eda09946ff38735e7e077b4fe82e8897175b3d5f302feee9f17e703fc0345dd479d42c04ee88455152f164487f01aa71797e888a5e365f2b47fcd0b52104fc9a5037cc6e2906d15e021eaf9e3b0b1e659f0fa075c61476e16981f9e103b83017da8a1989a4b7e950c043a0dd43ba31891179cb172b90a3afc2d082ddbf00916005aafd6efb3232e2856e2a8eb7f2728362f84136021130b14a4257a0e96ed47c8793026ece8626df2f456a355bf82f7aacbe4dcc303eb8233ac6835e08a8e5d41335152c102dae6537967a644a0d691dcbeebc22116db5ffd56373d528ee19405eba047b3d7e8777c9a4ddd645f2bbe606c63ce926de6f6de58817ead220bd829c8c2760214e02b758e41ee927ea2b09b5718821105e30120faee70fb171fd8a96fe620e88502787c63f81d4c970c54f9921485388caf2981aeee27af4ad3bee50dc584c33f92ff640f854d4fbaf3a1e3dc5ccc04feb846dffdfb5af00aacdd4429265eadbaf3042b670597265de8cc65006158d52d005eb6192f2b6085a421150dadbffc7f0f054b5ef0a80b55d91e969eb434f4cb3b3d8e9312eecce357bd87f12fc4a223848e4b9a89edad16687d7537fa312d1472f30901bd0d6fd368b7011cda3519b7a9795f4f07167fbfb5109505490c9118025bb4e305c1aebb54b46f898977fcfa7094bff3ac11390a31a9b21494aa31a007a2ac5011c5cface570a87f84f3a26f55f4c876c0ed527fbd50d5d5396064718f1714563b972a896a04d3090c0daab279935c3b763d8b4ce28a55152316227add4eac8486e05479e2d4ecd618fcc202c20c5d37c7772006e712efb2c35fa3ae89e70ec1ba6a8b9b95327bec71ccc08c34a02756b1faddd9941e52f8fe1a60aba8931c126b019b6c3b3069a8c0b0405a82158dcd5eb61c7b2dbcb8fd9553a26271c485186a43b95b1e7e22126496c462e01c5e798cf69f7ecab1ad81f98b26e9929b276b3899283018e52517cf947daba97ef8440f924812ebf9ce9dce4cef24f2a6a6687de20789d6b66a45dc38c0b5472bb1978bf140d6e38ae4f39de9980f058439e56ebaa72751f923e23b8093940ef99602f4668552a3903c8d5c48f68ef188a131aca077e0ddff842727fa633f57e2907bfd8038001a47c3becc2d23851276ea9379c8cb6de1e875f65dd6ed0bf15ae8fa61eb3f803742414fa5ab6aa9f9a164dfb5759a2cde10dbb228c57484daff7550af4de92d4c318a936f82d1a38d549a16c7ac11fdb13e8e3919e69f632424f61530b899a7c134c37d2ef83cef8304c47cf40d01f03912c97e8258923562d5d30b66b9fdacfc015b7edf69947da8bf195ad37c004c5b0fdad4dfa6461aeebd022c025ff711fd7ee5876fa5c17d0a609727706f17ed3400077c5ccacbff2a3e0597118838e0a86c541e79d103fbf2d6bec48557d597936a7b13b73f0d1c9e511fc2d21bd00fa5c7311d146895058817fa540f6339ee09a5ac16c376ffa00751d8a8472b5f2df17305cd34b913659a0cc5953cab3b8cb58ad14c36c8289319d16a96a5b3d3fc1793fc0aa08e77f4ad9daafac0319725f0e0c2c643471abf9dc11724cc08f4587cb3e514128d36039bee55b1e7dad65332203b96a119354a36e98f115352f9f4870753b14f3c607db1d1a97df585317c7bad0bdc7af1fbfffce13c8bf41513e80229c48cdd25071c1c70978e75f15593df77eecc4aa0f5c91dd016ca55b156946aae08d8ef4052efad0ad06e2e9dcb32416626a637af004493982df6de8cea44a9edfd9dcfff2d3dc3af576fdacae4565fca7fb9b53e33e418514f4aba24d69f4941ec759fde299fb7c5bd585cfa4ce8f5cbde01b191143f84805b09e6587624e8d8427b62b29af246adb9558b4fb536e35cb9e206f46e5a904ca350877c811f17997d6e36cfd82d1853b6d8504cda25f63a76378b342285ee44a09e6145833bb52c6d1e0e3ad50c483ff2c4c544e9d15701da0d0f75cc8ee52c6a523120dbf19bf5df08c4c49e47c0207d08da1ec0dadcfcfdb0883c4752d89acb0b68350569bfbdfdb087e59af4a060c0f2008e41f2f9dddbed5251aae21b92c147db5e1ea2c4690b5d4f1c44831db8e6dd7766af07d3f9e721bf8fa37614a41f0026c7458d6705e4559e749f834957152203df7c2357726b7ff662348f1397babd28d777e158ba485e224abcdca431ab23c7ba7031af2316cc1be5f8185cbaf1bfb7530b4967db524da7730f1ea01ca8cb79fd46aa25ef559f462eb1c4304b45cadec4305da2387a33b30af060304e1028a85c14158a92ad35ae43ec767f381589f4215c80ec27578b9f203aaa9de898af029b348de0624330940edadd5d20e83aef2571da45"})

1.305680945s ago: executing program 5 (id=1939):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000002000000000000000000"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001a00010029bd00000008000200ac14149300"/36], 0x24}}, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000180)=0x200007ff, 0x4)
setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f0000000080)=0x2, 0x4)
r4 = socket$netlink(0x10, 0x3, 0x4)
write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000280)="432275e2065074ef2415f73227b2", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r5 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback, 0xfffffffc}, 0x1c)
r6 = socket$inet(0x2, 0x3, 0x7f)
setsockopt$inet_int(r6, 0x0, 0x14, &(0x7f00000001c0)=0xc, 0x3)
sendto$inet6(r5, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r8, 0xfffffff8)
r9 = socket$netlink(0x10, 0x3, 0x8000000004)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000002c00000018000180140002"], 0x2c}}, 0x0)
writev(r9, &(0x7f0000001700)=[{&(0x7f0000000380)="58000000140019234017908a840da2560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffee09000000fff5f20000000800030006010000418e01400004fce3", 0x58}], 0x1)
r12 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x2c8, 0xffffffff, 0xffffffff, 0x2c8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0xff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}, 0x6c}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, [0xffffff00], [], 'dvmrp0\x00', 'gre0\x00', {}, {}, 0x3a, 0x0, 0x0, 0x8}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xffffffff, 'system_u:object_r:mount_tmp_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3d0)
socket$inet6_dccp(0xa, 0x6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000001c0000000000000000791009000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$rose(r7, 0x104, 0x6, &(0x7f0000000000)=0x43, 0x4)
sendmmsg$inet6(r5, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000007c0)='H', 0x1}], 0x1}}], 0x2, 0x90)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000b9a000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x1, 0x0}, &(0x7f0000000200)=0x5f)

1.196046681s ago: executing program 1 (id=1940):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000feffffff85000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000400)=r3, 0x4)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x50)
r6 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000b40)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x2}, {&(0x7f0000000300)='l3', 0x2}], 0x3}, {0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000780)="d33270171fed598a56696b8ff8f641c813f820cce41d1054ccffbe1d57c8adae2d34540e1a45d0f14e54b3a964851311b3dc10865e169dacabdf67f3cecb1d84de5a929aebf4efb0012c6653f9d20982ee24db2a4fd58bc1045a1c560366303be0f1501743ab259b24a2a21f788b3f280aeae91472", 0x75}, {&(0x7f0000002680)="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", 0x1000}, {&(0x7f0000000800)="35a57e4631875ee52ba780ac99ba1f07471b4fbbf507e408ce3b5f7bf17954e72db66cf67da8cca32bc120616b8f17bccab10882753d907a05a5efae0b83bed37369686029e0575752d90a6ecf40f5", 0x4f}, {&(0x7f0000000880)="041be61ac4f767d30619ea74743aa63252f197d147440c2c22080ba721e7d5cf6e0441384ef2c837da2b0904fa6ea6576a382e728731d4fd8f642071210a1c13788bf2d3bfbf4b0e03dfef7a1bae1f3366f83217a4ffd58b03492e2136b700f8cbc774ed1fc6a89ae9a8e514e3a454a5b74d524f1d", 0x75}, {&(0x7f0000000900)="860879f697472a1bdd2ca8e7df7412dc38119e6edfac29ea94a8547451a7401c026ec0a686143dd84554085877886fe437d71518daa1", 0x36}, {&(0x7f0000000940)="98040cf222943e4dd4ecc8569d1972d4f38f5838f59930e154873af6b38f3a0b4e041757dae253a04499f3c4b7c2191dd1c37da3f570559e5f9d5fd098e4ea54a5e51208ad83fb68e9e25631073a5eff5ff02bd5e92c3f2cf1b82191c5476b021ac041f161b6202d1f0a46a0bd37cb0451d394c61cc2288fe36c68ce82a592b2d663c852b03e04fdee7fb8e314080cdddec3fee3c976894579283a7d1d9059185007fe", 0xa3}, {&(0x7f0000000a00)="542344675fc485afa2f34818a7785c410fa2a86442819ea806d11912629b49372a02e7f607f49f", 0x27}, {&(0x7f0000000a40)="3a7ece799f36c215461866c2c414d5b8f256ce5c9b8a5c3d810a1bc1ea4b329d0d0dc5115c23060d2a15ff719dca0470062accf0480737a2b9ebd9bcc7926de9c41f4339b7b77983953dc146e2bc43a5d354c4958c80989705c717f5a5d101df38b8f1c6ec8e44be5481a801", 0x6c}], 0x8, 0x0, 0x0, 0x240408c4}], 0x2, 0x20000000)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[], 0x14}}, 0x8018)
accept4(r6, 0x0, 0x0, 0x0)
getsockname(r2, &(0x7f0000000440)=@tipc=@id, &(0x7f00000002c0)=0x80)
sendmmsg$alg(r6, &(0x7f0000009740)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}], 0x1, 0x8010)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0xc, 0x4, 0x0, 0x1, 0xfffffffa, 0x1, 0x4, 0x3, <r7=>0x0}, &(0x7f0000000240)=0x20)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, 0x9, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x80}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffff7}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x41054}, 0x20000801)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000280)={r7, 0x4}, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r9 = openat$cgroup_devices(r8, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB='b 75:*\tmww'], 0xa)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r10 = accept4(r1, 0x0, 0x0, 0x80000)
sendmsg$alg(r10, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmsg(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12041)

1.194023329s ago: executing program 0 (id=1941):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = epoll_create(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000000)={0x90000000})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x170bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xf, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x40020)

1.192572169s ago: executing program 3 (id=1942):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x2000000000000021, 0x2, 0x10000000000002)
bind$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
listen(r0, 0x1)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt(r2, 0x61, 0xfffffffe, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, 0x0, &(0x7f0000000700)}, 0x20)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
syz_emit_ethernet(0x76, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x15, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@remove_addr={0x1e, 0x3d, 0x0, 0x0, "23f12f4860a44b0bc15ba15ff24af6985862903ebeb97f2918c713975bf95aefc56dc0c47215146671a0c2baf90fa3de0356cd9d9628d4a62674"}]}}}}}}}, 0x0)
sendto$inet6(r3, &(0x7f0000000080)="80", 0x1, 0x10, &(0x7f00000012c0)={0xa, 0x0, 0x0, @private0, 0x2000000}, 0x1c)
r4 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r4, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044858)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000010c0)=ANY=[@ANYBLOB="18000000000000000000f43c5f390000a1baf08793f1414e45f9000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000019000100000000000000000002"], 0x2c}}, 0x0)
sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000001400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$sock(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x20000c00)
shutdown(r3, 0x1)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r9=>0x0]}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000080)={r9, 0x8001}, 0x8)
getsockopt$bt_hci(r8, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001080)=0xfd9)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000700)=@assoc_value, &(0x7f0000000740)=0x8)
r10 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00'})

986.630687ms ago: executing program 1 (id=1943):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=@ipv6_newnexthop={0x18, 0x68, 0x1, 0x70bd27, 0x255fdbfe, {0x2, 0x0, 0x4, 0x0, 0x4}}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x48004)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f0000001700)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010009bd7000f9dbdf255500000008000300", @ANYRES32=r4, @ANYBLOB="0c00990004000000490000006868802cc2833f71414915dcc14a42ccd028f9830058e4d268cc0524ef0c7a0f168b9fe049e6e1c905ec3ac36bbcd153059225a57afe9e0ab16ec3477305cdb68d59a3847eb4bb7be6dcfd59aac288ccc3961234e32bac84da01d835f56111a98e9935aa944bf1ac960ba419115d0983d230cda2e3293ac0f4784fb1f9c1726b259d0cd0cb5d94a27c8965c0561ceb9f4f8fa6864ba859a3ab0ac831e0970fb34b19ff4ef2753274ec11d300c550ee4651"], 0x28}, 0x1, 0x0, 0x0, 0x40000a0}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002c00010324bd7002f9dbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x40)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000002c00010025bd7000fcdbdf2504"], 0x1c}, 0x1, 0x0, 0x0, 0x4000c}, 0x20000000)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0)
sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r2, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="afb3789b963e"}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x800, 0x3, 0x1, 0x0, {0x6, 0xe81, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8, 0x7, 0x80}}, @NL80211_ATTR_MAC={0xa, 0x6, @random="370ddc34fc4a"}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x81)

930.447795ms ago: executing program 0 (id=1944):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x8c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x80004}, [@IFLA_LINKINFO={0x6c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x5c, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x3, 0x11}}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8000, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x4}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0x4}}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x200}}]}]}}}]}, 0x8c}}, 0x0)

808.051811ms ago: executing program 1 (id=1945):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x2b, 0x0, 0xfff3)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x3c, r3, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080080)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd2c, 0x0, {}, [@RTA_DPORT={0x6, 0x1d, 0xfffe}, @RTA_SPORT={0x6, 0x1c, 0x4e24}]}, 0x2c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_getnetconf={0x14, 0x52, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)

807.780952ms ago: executing program 0 (id=1946):
socket$packet(0x11, 0x2, 0x300) (async)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10)
syz_emit_ethernet(0x219, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0400", 0x1e3, 0x6, 0x0, @remote, @local, {[@hopopts={0x1d, 0x4, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}, @hopopts={0x5e, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x2000000}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x28}}]}, @srh={0x36, 0xa, 0x4, 0x5, 0x2, 0x8, 0x81, [@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @remote, @private2]}, @fragment={0x4, 0x0, 0x4f, 0x0, 0x0, 0x4, 0x66}], {{0xfffc, 0x4e02, 0x41424344, 0x41424344, 0x0, 0x0, 0x3d, 0x0, 0xffff, 0x0, 0x2, {[@md5sig={0x1d, 0x12, "fb6ba0cd8f4e22c7624e2ada29619d18"}, @mptcp=@remove_addr={0x1e, 0xce, 0x3, 0x0, "f0041711e1a99d72d929a89610868a2e3f1c56b543b0fa59956e13b3142990a9fa6b041fecadbcea6a7f531507f4d13a08a00bb43e6bb956fb163e6a7fb5a038498c7998b9d6204afdbeacfb4aa149bb4810bc71fa265e0de850475afe122649cdff931d8fc1cf20b8c1764750b2262a1b88e85c965e1a4a8b7defb4ab85b9a1e544d7ce9a8722dfa49a678f91def7716d0e79fa8749b478f82b9df4a8b4890b87dd7e2924621dc48e8d694f649b5f463eeb3498cf0cb65cc74f460baf5cfe993746fdf628ec1065c35bcd"}]}}, {"5bf7c9bad35f1d3f6a50fd5b7b0e469f5b390d99309a4cd7b4072a70bcdb6b4b40aa112717080af32f6f19292217588fa1e7bb024ed3e73b1e90a523d8ece7fcbb93d48e5bbd06"}}}}}}}, 0x0)

624.56997ms ago: executing program 0 (id=1947):
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="04000000", @ANYRES16=0x0, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="35000e0080000000ffffffffffff08021100000050505050505040000000000000000000640007100006020202020202250300ab4b00000005ff7f00000602020202020204002a0008000c000001000008000d"], 0x74}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000500000000000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000240)="354da925f340a56cd9bd738d6055", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
r2 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280ff0414"], 0x528}}, 0xc000)
r3 = socket(0x1e, 0x5, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
listen(r3, 0x0)
r4 = socket(0x1e, 0x805, 0x0)
r5 = socket$caif_stream(0x25, 0x1, 0x4)
sendmsg$inet(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x1)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000400"/20, @ANYRES32=r6, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x9, r7, 0x8000000}, 0x38)
sendmsg$tipc(r4, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c)
accept4$inet6(r3, &(0x7f0000000000), 0x0, 0x800)
sendmsg$tipc(r4, &(0x7f0000000640)={&(0x7f0000000300), 0x60, &(0x7f0000000500)=[{&(0x7f0000000340), 0x1}], 0x1}, 0x0)

569.344962ms ago: executing program 2 (id=1948):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000), 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000400000000000000000000000850000001000000095"], &(0x7f0000000140)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@ipv6_delrule={0x4c, 0x21, 0x1, 0x70bd28, 0x25dfdbfd, {0xa, 0x10, 0x14, 0x7, 0x4, 0x0, 0x0, 0x2, 0x10}, [@FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FRA_SRC={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0xc4}]}, 0x4c}}, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)='%pK    \x00'}, 0x20)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x500000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000780)="1d0467bc7aa4829d859d1d94d566bc6492f2bc2027ff3d7b720757a313d295e582fb668430b24b2ccd33efc9eb8133b1b569e942496dfd60451ffa07a624851a849935b87ab42cab85", 0x49}], 0x1)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1, <r7=>0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r1}, 0x20)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x2a012, r8, 0x0)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ppoll(&(0x7f0000000200)=[{r9}], 0x1, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x0, &(0x7f0000000040), &(0x7f0000000080)='GPL\x00', 0x1, 0xbc, &(0x7f0000000180)=""/188, 0x41000, 0x0, '\x00', r2, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0xe, 0x40, 0x2}, 0x10, 0x0, r1, 0x5, &(0x7f0000000580)=[r4, r5, r6, r7, r8, 0xffffffffffffffff, r9], &(0x7f00000005c0)=[{0x2, 0x3, 0x10, 0x5}, {0x2, 0x3, 0xa, 0x7}, {0x3, 0x4, 0xd, 0x3}, {0x0, 0x4, 0x10, 0x6}, {0x5, 0x3, 0xf, 0xc}], 0x10, 0x7, @void, @value}, 0x94)

320.890221ms ago: executing program 5 (id=1949):
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='memory.events\x00', 0x275a, 0x0)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="ff", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010000100"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0016801800018014000b00ffdfffff00000008c10600000000000008000d"], 0x4c}}, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x80000d9}, 0x8)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
listen(r4, 0x7)
socket$inet6_sctp(0xa, 0x1, 0x84)
listen(r3, 0xf53c)
r5 = socket$inet(0xa, 0x801, 0x84)
listen(r5, 0x1)
r6 = socket$inet6(0xa, 0x1, 0x8010000000000084)
listen(r6, 0x7)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
listen(r7, 0x100)
r8 = socket$inet(0xa, 0x2, 0x84)
listen(r8, 0x8)
r9 = socket$netlink(0x10, 0x3, 0x4)
writev(r9, &(0x7f0000000100), 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r9)
shutdown(r3, 0x0)
getsockopt$inet_int(r0, 0x10d, 0x90, &(0x7f0000000000), &(0x7f0000000280)=0x4)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x40)
r10 = socket(0x1e, 0x3, 0x3a)
sendmmsg$unix(r10, &(0x7f0000003a80), 0x0, 0x20008811)
socket$inet_sctp(0x2, 0x1, 0x84)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)

231.937359ms ago: executing program 1 (id=1950):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@getchain={0x2c, 0x66, 0x8, 0x3, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x2}}, [{0x8, 0xb, 0x9}]}, 0x2c}}, 0x400c0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10)
r3 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x6, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10)
write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904008100000000030000000000000800040006020000", 0x24)
accept4$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x9c, 0x10, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, 0x2500}, [@IFLA_LINKINFO={0x7c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x6c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x9}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2b}}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0xfffffff5}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x14}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}]}}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090)
socket(0x10, 0x803, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@getchain={0x2c, 0x66, 0x8, 0x3, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x2}}, [{0x8, 0xb, 0x9}]}, 0x2c}}, 0x400c0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) (async)
gettid() (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x6, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async)
getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) (async)
socket(0x10, 0x3, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) (async)
write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904008100000000030000000000000800040006020000", 0x24) (async)
accept4$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x9c, 0x10, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, 0x2500}, [@IFLA_LINKINFO={0x7c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x6c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x9}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2b}}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0xfffffff5}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x14}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}]}}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) (async)

181.036896ms ago: executing program 5 (id=1951):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xd, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @random="1553ff41cf11", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dda00", 0x18, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x13, 0x2}, @generic={0x4, 0x2}]}}}}}}}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r5=>0x0})
r6 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_buf(r6, 0x29, 0x2a, &(0x7f0000000240)="175e26167405710d9190d80b2bd52a3c733b5a0221e59a514c997b6aa833b4526636c8a687669f68266ca7ce51a435ddba0c08d961b3dde56e06dceb0e2e550caa336cc0e57e140c63453bb70b155ebe4ce9b4e2bac62cd965f3ccb5e438410aae6dca70e98ea9269073de266a0b5f1f25242208b9128569ace0b3d3db33958df7c1220972f4d522", 0x88)
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000580)={0x68, r4, 0xd55319eec59dfa33, 0xfffffffd, 0x80000003, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "525ef6c50012220c90484494f68cf0b03ab8d1cf5550e7bf"}]]}, 0x68}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRESHEX=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OFFSET={0x8}]}}}]}]}], {0x14}}, 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x807, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWCHAIN={0x220, 0x3, 0xa, 0x802, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_USERDATA={0x9e, 0xc, "0b0ca3586c84dae007b3625724fd27500ff38c9d2c2d5f8c3be1a466c1db031973a00e56f19b67297fe66405591bca07f1e3fa4375f6ff01fee7a2d6ffe214c5f195619a357467825f2ac589c29048106f646c79475aea0af2ce0b7f590d347a49bec8dc4f8d78247655ca182a653e17cf5efdef52101c23ccd301c422439ebaca7bd0d808e1bbb53c596aba1f06db529ff8004728a66aae743b"}, @NFTA_CHAIN_COUNTERS={0x64, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xa3a3}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xbe4f}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_USERDATA={0xdc, 0xc, "7daefdeca0d17fed333e05a887f378d5cc079f9b61e512b72b07e3b24737002bf36b11313f45e6635c7ebe104f8f3e3baa060441d004b52806f4b79a57cc83e1df228d01ed8f6d7d5488ead6628670b8e850a7fdbf41c614462453101ff271ed2c9de4f667a41aeacfd0ec87ea575c557792bcbe111a9ce7bd3289447b9a322e50fccd81498571c08b8b02a89f6b91e7047404d31e5fad7db2f4bccd4afdc7976c7c7c11c07dd60cc749b50de57ca232216c63fabc1b8be46485bcca8d8a941e661f5139b899b867fa5ba5dab11e47bdee03f4e922fa687a"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x64, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, @NFT_MSG_NEWTABLE={0xf4, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x98, 0x6, "165b6d2b04e6c3d7fccb6fa51746a3c24160c561fbfebbf072e092e0ae7db02209a559f31b55716255db658c69be7de8796be9c28dc70cd5a4d736c1e44a209a54fb851af03775a130bcb74be711971d7f12f3afbab1913deec7abb2a423b125ddb82f12862c7e72411841bd6ac307ab4bf4323865ad8057243dad54988e3c9aba113d8eba27d125f3592bd5472be1242921dbc7"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x464}, 0x1, 0x0, 0x0, 0x4080000}, 0x80)

174.889125ms ago: executing program 3 (id=1952):
recvmmsg(0xffffffffffffffff, &(0x7f000000a1c0)=[{{0x0, 0x0, &(0x7f000000a0c0)=[{0x0}, {&(0x7f0000005c00)=""/203, 0xcb}], 0x2}, 0x1}], 0x1, 0x2, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
socket(0x1, 0x3, 0x5)
r2 = socket$inet6(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x8, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0xffff93d3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r6, 0x58, &(0x7f0000000300)}, 0x10)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a30000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a00010071756575650000001c000280060002400ffe009b06000140faff"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_FLOW={0x8}]}, 0x2c}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3b74679f0414010028c5b14d854961c5195e3e0d77bd7000"], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x8044)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
getsockopt$netlink(r3, 0x10e, 0x3, &(0x7f0000000140)=""/170, &(0x7f0000000200)=0xaa)
socket$alg(0x26, 0x5, 0x0)
getsockopt$bt_hci(r2, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000005000000080000004000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000ac200"/28], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r9}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r9, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @rand_addr=0x64010100}, 0xb}}, 0x26)
sendmmsg$inet(r1, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040)

64.2178ms ago: executing program 1 (id=1953):
socket$netlink(0x10, 0x3, 0x14)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$tipc(0x1e, 0x4, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x4000042, 0x83f}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734000f800800024000000b8608000340000047510800034000000003080001"], 0xdc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

0s ago: executing program 5 (id=1954):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b8100"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
unshare(0x28000600)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000d00)=@filter={'filter\x00', 0x42, 0x4, 0x460, 0xffffffff, 0x2a8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x3c8, 0x3c8, 0x3c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'rose0\x00', 'wg2\x00'}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x1e8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x9, 0x1000}}}, @common=@socket0={{0x20}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x10}}, @common=@socket0={{0x20}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000740)={"8c3ef01be86258108b331b07f91efab2", 0x0, 0x0, {0x6, 0x40}, {0x3, 0x1}, 0x6, [0x3, 0x5, 0x9, 0x7, 0x7, 0x5, 0x10, 0x953, 0x1, 0x4, 0x8, 0x9000000000000000, 0x2, 0x4, 0x2, 0x5]})
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000004000000ff0f0000070000"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xf, 0x200000005c832, 0xffffffffffffffff, 0x0)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000480), 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r0, 0x0, 0x5}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)

kernel console output (not intermixed with test programs):

 netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  145.393460][ T7628] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  145.427297][ T7628] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  145.464323][ T7628] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  145.549289][ T7667] syzkaller0: entered promiscuous mode
[  145.564085][ T7667] syzkaller0: entered allmulticast mode
[  145.584599][ T6120] syzkaller0: tun_net_xmit 48
[  145.604696][ T7667] syzkaller0: create flow: hash 3865014262 index 1
[  145.652781][ T7674] can: request_module (can-proto-0) failed.
[  145.789837][ T7677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.501'.
[  145.833747][ T7666] syzkaller0: delete flow: hash 3865014262 index 1
[  148.196590][ T7680] lo: entered promiscuous mode
[  149.127640][ T7730] syzkaller0: entered promiscuous mode
[  149.133467][ T7730] syzkaller0: entered allmulticast mode
[  149.149130][ T6117] syzkaller0: tun_net_xmit 48
[  149.154860][ T7732] net_ratelimit: 20 callbacks suppressed
[  149.154874][ T7732] netlink: zone id is out of range
[  149.174419][ T7732] netlink: zone id is out of range
[  149.180377][ T7730] syzkaller0: create flow: hash 3865014262 index 1
[  149.191495][ T7732] netlink: zone id is out of range
[  149.206693][ T7732] netlink: zone id is out of range
[  149.222177][ T7732] netlink: zone id is out of range
[  149.236583][ T7732] netlink: zone id is out of range
[  149.252804][ T7732] netlink: zone id is out of range
[  149.283252][ T7732] netlink: zone id is out of range
[  149.293403][ T7732] netlink: zone id is out of range
[  149.324211][ T7732] netlink: set zone limit has 8 unknown bytes
[  149.388269][ T7729] syzkaller0: delete flow: hash 3865014262 index 1
[  149.543405][ T7741] netlink: 24 bytes leftover after parsing attributes in process `syz.2.520'.
[  151.162177][ T7751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.520'.
[  151.191051][ T7758] veth0_to_bridge: entered promiscuous mode
[  151.244937][ T7761] veth0_to_bridge: left promiscuous mode
[  151.347358][ T7766] netlink: 172 bytes leftover after parsing attributes in process `syz.2.528'.
[  151.659690][ T7783] FAULT_INJECTION: forcing a failure.
[  151.659690][ T7783] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  151.708332][ T7783] CPU: 1 UID: 0 PID: 7783 Comm: syz.2.531 Not tainted 6.14.0-rc7-syzkaller-01413-gd9917c7d533c #0
[  151.708362][ T7783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  151.708374][ T7783] Call Trace:
[  151.708381][ T7783]  <TASK>
[  151.708390][ T7783]  dump_stack_lvl+0x241/0x360
[  151.708422][ T7783]  ? __pfx_dump_stack_lvl+0x10/0x10
[  151.708446][ T7783]  ? __pfx__printk+0x10/0x10
[  151.708474][ T7783]  ? snprintf+0xda/0x120
[  151.708501][ T7783]  should_fail_ex+0x40a/0x550
[  151.708539][ T7783]  _copy_to_user+0x31/0xb0
[  151.708571][ T7783]  simple_read_from_buffer+0xca/0x150
[  151.708604][ T7783]  proc_fail_nth_read+0x1e9/0x250
[  151.708638][ T7783]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  151.708671][ T7783]  ? rw_verify_area+0x243/0x630
[  151.708693][ T7783]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  151.708725][ T7783]  vfs_read+0x1f8/0xb40
[  151.708748][ T7783]  ? fdget_pos+0x254/0x320
[  151.708780][ T7783]  ? __pfx___mutex_lock+0x10/0x10
[  151.708811][ T7783]  ? __pfx_vfs_read+0x10/0x10
[  151.708837][ T7783]  ? __fget_files+0x2a/0x410
[  151.708870][ T7783]  ? __fget_files+0x395/0x410
[  151.708899][ T7783]  ? __fget_files+0x2a/0x410
[  151.708939][ T7783]  ksys_read+0x18f/0x2b0
[  151.708964][ T7783]  ? __pfx_ksys_read+0x10/0x10
[  151.708987][ T7783]  ? do_syscall_64+0x100/0x230
[  151.709028][ T7783]  ? do_syscall_64+0xb6/0x230
[  151.709062][ T7783]  do_syscall_64+0xf3/0x230
[  151.709097][ T7783]  ? clear_bhb_loop+0x35/0x90
[  151.709130][ T7783]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.709158][ T7783] RIP: 0033:0x7f953338bb7c
[  151.709176][ T7783] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  151.709192][ T7783] RSP: 002b:00007f953413f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  151.709214][ T7783] RAX: ffffffffffffffda RBX: 00007f95335a6080 RCX: 00007f953338bb7c
[  151.709229][ T7783] RDX: 000000000000000f RSI: 00007f953413f0a0 RDI: 000000000000000d
[  151.709241][ T7783] RBP: 00007f953413f090 R08: 0000000000000000 R09: 0000000000000000
[  151.709253][ T7783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  151.709266][ T7783] R13: 0000000000000000 R14: 00007f95335a6080 R15: 00007ffdbd55e028
[  151.709297][ T7783]  </TASK>
[  152.461094][ T7798] syzkaller0: entered promiscuous mode
[  152.477200][ T7798] syzkaller0: entered allmulticast mode
[  152.556930][   T63] syzkaller0: tun_net_xmit 48
[  152.557043][ T7798] syzkaller0: create flow: hash 3865014262 index 1
[  152.780276][ T7797] syzkaller0: delete flow: hash 3865014262 index 1
[  152.941466][ T7821] netlink: 'syz.0.543': attribute type 3 has an invalid length.
[  152.949730][ T7821] netlink: 16 bytes leftover after parsing attributes in process `syz.0.543'.
[  152.959011][ T7821] netlink: 'syz.0.543': attribute type 3 has an invalid length.
[  152.977981][ T7821] netlink: 16 bytes leftover after parsing attributes in process `syz.0.543'.
[  153.456834][ T7828] netlink: 16 bytes leftover after parsing attributes in process `syz.3.546'.
[  154.879526][ T7819] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  155.050906][ T7840] net_ratelimit: 41 callbacks suppressed
[  155.050925][ T7840] netlink: zone id is out of range
[  155.075305][ T7840] netlink: zone id is out of range
[  155.081930][ T7840] netlink: zone id is out of range
[  155.087905][ T7840] netlink: zone id is out of range
[  155.093543][ T7840] netlink: zone id is out of range
[  155.120849][ T7840] netlink: zone id is out of range
[  155.156531][ T7840] netlink: zone id is out of range
[  155.173343][ T7840] netlink: zone id is out of range
[  155.189760][ T7846] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  155.238743][ T7840] netlink: zone id is out of range
[  155.254626][ T7847] netlink: 'syz.3.553': attribute type 11 has an invalid length.
[  155.264695][ T7847] netlink: 60 bytes leftover after parsing attributes in process `syz.3.553'.
[  155.275367][ T7840] netlink: set zone limit has 8 unknown bytes
[  155.327850][ T7846] netlink: 48 bytes leftover after parsing attributes in process `syz.3.553'.
[  155.592524][ T7855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.555'.
[  155.732567][ T7855] netlink: 28 bytes leftover after parsing attributes in process `syz.4.555'.
[  155.805998][ T7856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.555'.
[  156.128356][ T7891] netlink: 'syz.1.560': attribute type 10 has an invalid length.
[  156.192652][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.563'.
[  156.212720][ T7895] netlink: 16 bytes leftover after parsing attributes in process `syz.0.563'.
[  156.234154][ T7856] team0 (unregistering): Port device team_slave_0 removed
[  156.258724][ T7856] team0 (unregistering): Port device team_slave_1 removed
[  156.344425][ T7891] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  156.417083][ T7895] netlink: 16 bytes leftover after parsing attributes in process `syz.0.563'.
[  156.443432][ T7895] netlink: 16 bytes leftover after parsing attributes in process `syz.0.563'.
[  156.469993][ T7897] syzkaller0: entered promiscuous mode
[  156.475622][ T7897] syzkaller0: entered allmulticast mode
[  156.523141][ T7895] netlink: 16 bytes leftover after parsing attributes in process `syz.0.563'.
[  156.557125][ T5847] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  156.626611][ T5847] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  156.666718][ T5847] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  156.883001][ T7912] can: request_module (can-proto-4) failed.
[  156.897074][ T5881] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  158.456797][ T5847] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  158.589841][   T26] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  158.659004][ T5847] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  159.456237][ T7979] FAULT_INJECTION: forcing a failure.
[  159.456237][ T7979] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  159.506508][ T7979] CPU: 0 UID: 0 PID: 7979 Comm: syz.2.590 Not tainted 6.14.0-rc7-syzkaller-01413-gd9917c7d533c #0
[  159.506541][ T7979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  159.506554][ T7979] Call Trace:
[  159.506562][ T7979]  <TASK>
[  159.506569][ T7979]  dump_stack_lvl+0x241/0x360
[  159.506603][ T7979]  ? __pfx_dump_stack_lvl+0x10/0x10
[  159.506625][ T7979]  ? __pfx__printk+0x10/0x10
[  159.506658][ T7979]  ? __pfx_lock_release+0x10/0x10
[  159.506698][ T7979]  should_fail_ex+0x40a/0x550
[  159.506736][ T7979]  _copy_from_user+0x2d/0xb0
[  159.506766][ T7979]  copy_msghdr_from_user+0xae/0x680
[  159.506804][ T7979]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  159.506832][ T7979]  ? __fget_files+0x2a/0x410
[  159.506866][ T7979]  ? __fget_files+0x2a/0x410
[  159.506904][ T7979]  __sys_sendmsg+0x209/0x350
[  159.506934][ T7979]  ? __pfx___sys_sendmsg+0x10/0x10
[  159.506972][ T7979]  ? do_sys_openat2+0x17a/0x1d0
[  159.507030][ T7979]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  159.507064][ T7979]  ? do_syscall_64+0x100/0x230
[  159.507099][ T7979]  ? do_syscall_64+0xb6/0x230
[  159.507133][ T7979]  do_syscall_64+0xf3/0x230
[  159.507164][ T7979]  ? clear_bhb_loop+0x35/0x90
[  159.507198][ T7979]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.507225][ T7979] RIP: 0033:0x7f953338d169
[  159.507243][ T7979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  159.507259][ T7979] RSP: 002b:00007f9534160038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  159.507280][ T7979] RAX: ffffffffffffffda RBX: 00007f95335a5fa0 RCX: 00007f953338d169
[  159.507294][ T7979] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003
[  159.507306][ T7979] RBP: 00007f9534160090 R08: 0000000000000000 R09: 0000000000000000
[  159.507318][ T7979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  159.507330][ T7979] R13: 0000000000000000 R14: 00007f95335a5fa0 R15: 00007ffdbd55e028
[  159.507357][ T7979]  </TASK>
[  159.745720][ T5847] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  160.044601][ T8008] netlink: 'syz.0.597': attribute type 10 has an invalid length.
[  160.084544][ T8008] netlink: 'syz.0.597': attribute type 10 has an invalid length.
[  162.059671][ T8072] IPv6: NLM_F_CREATE should be specified when creating new route
[  162.215597][ T8072] __nla_validate_parse: 15 callbacks suppressed
[  162.215620][ T8072] netlink: 1 bytes leftover after parsing attributes in process `syz.4.615'.
[  162.597174][ T8081] netlink: 40 bytes leftover after parsing attributes in process `syz.0.618'.
[  162.639657][ T8081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.618'.
[  162.858377][ T8090] netlink: 24 bytes leftover after parsing attributes in process `syz.4.630'.
[  162.939749][ T8090] netlink: 24 bytes leftover after parsing attributes in process `syz.4.630'.
[  162.983785][ T8090] netlink: 20 bytes leftover after parsing attributes in process `syz.4.630'.
[  163.115561][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.621'.
[  163.267324][ T8095] netlink: 28 bytes leftover after parsing attributes in process `syz.0.621'.
[  163.345917][ T8099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.621'.
[  163.869800][ T8141] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  163.991303][ T8099] team0 (unregistering): Port device team_slave_0 removed
[  164.022038][ T8099] team0 (unregistering): Port device team_slave_1 removed
[  164.250905][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.631'.
[  164.302754][ T8155] tipc: Started in network mode
[  164.312924][ T8155] tipc: Node identity 724d29d6, cluster identity 4711
[  164.336616][ T8155] tipc: Node number set to 1917659606
[  164.435362][ T8162] net_ratelimit: 17 callbacks suppressed
[  164.435386][ T8162] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  165.155081][ T8196] syzkaller1: entered promiscuous mode
[  165.185203][ T8196] syzkaller1: entered allmulticast mode
[  165.926659][ T5146] Bluetooth: hci4: command 0x0405 tx timeout
[  166.128291][ T8234] netlink: 'syz.3.652': attribute type 1 has an invalid length.
[  166.153659][ T8234] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.169996][ T8234] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.177177][ T8234] bond0: (slave vcan0): The slave device specified does not support setting the MAC address
[  166.188938][ T8234] bond0: (slave vcan0): Error -95 calling set_mac_address
[  166.508608][   T14] bond0 (unregistering): Released all slaves
[  167.048821][ T8262] syzkaller0: entered promiscuous mode
[  167.076602][ T8262] syzkaller0: entered allmulticast mode
[  167.092645][ T6110] syzkaller0: tun_net_xmit 48
[  167.111480][ T8262] syzkaller0: create flow: hash 3865014262 index 1
[  167.228025][ T8260] syzkaller0: delete flow: hash 3865014262 index 1
[  167.602282][ T8288] af_packet: tpacket_rcv: packet too big, clamped from 3698 to 4294967272. macoff=96
[  169.197044][ T8294] tipc: Started in network mode
[  169.201968][ T8294] tipc: Node identity 6, cluster identity 4711
[  169.216558][ T8294] tipc: Node number set to 6
[  169.869643][ T8340] sctp: [Deprecated]: syz.3.678 (pid 8340) Use of struct sctp_assoc_value in delayed_ack socket option.
[  169.869643][ T8340] Use struct sctp_sack_info instead
[  169.973591][ T8344] syzkaller1: entered promiscuous mode
[  169.983666][ T8344] syzkaller1: entered allmulticast mode
[  170.478541][ T8354] netlink: 'syz.2.681': attribute type 1 has an invalid length.
[  171.677510][ T8352] __nla_validate_parse: 8 callbacks suppressed
[  171.677529][ T8352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.681'.
[  171.699781][ T8356] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check.
[  171.906314][ T8363] netlink: 16 bytes leftover after parsing attributes in process `syz.0.683'.
[  171.923526][ T8363] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  171.947175][ T8367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.687'.
[  171.971447][ T8367] tap0: tun_chr_ioctl cmd 1074025677
[  171.977643][ T8367] tap0: linktype set to 768
[  171.992004][ T8367] netlink: 24 bytes leftover after parsing attributes in process `syz.1.687'.
[  172.068853][ T8371] netlink: 16 bytes leftover after parsing attributes in process `syz.0.688'.
[  172.084170][ T8371] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  172.129118][ T8373] xt_TCPMSS: Only works on TCP SYN packets
[  172.238535][ T8380] geneve2: entered promiscuous mode
[  172.474051][ T8384] netlink: 60 bytes leftover after parsing attributes in process `syz.0.693'.
[  172.683223][ T8402] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  172.748899][ T8404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.698'.
[  172.771127][ T8411] netlink: 3 bytes leftover after parsing attributes in process `syz.3.701'.
[  172.821105][ T8411] batadv1: entered promiscuous mode
[  172.832274][ T8411] batadv1: entered allmulticast mode
[  172.892200][ T8413] xt_TCPMSS: Only works on TCP SYN packets
[  172.929810][ T8414] netlink: 48 bytes leftover after parsing attributes in process `syz.3.701'.
[  173.021119][ T8417] bond0: option arp_interval: invalid value (18446744072034198015)
[  173.053378][ T8417] bond0: option arp_interval: allowed values 0 - 2147483647
[  173.169277][ T8425] netlink: 40 bytes leftover after parsing attributes in process `syz.3.706'.
[  173.730965][ T8453] ipvlan2: entered promiscuous mode
[  173.737806][ T8453] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  173.745349][ T8453] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  174.106074][ T8466] netlink: 'syz.1.720': attribute type 7 has an invalid length.
[  174.129873][ T8466] netlink: 'syz.1.720': attribute type 8 has an invalid length.
[  174.362984][ T8479] netlink: 'syz.3.723': attribute type 5 has an invalid length.
[  174.951447][ T8510] sctp: [Deprecated]: syz.3.731 (pid 8510) Use of struct sctp_assoc_value in delayed_ack socket option.
[  174.951447][ T8510] Use struct sctp_sack_info instead
[  175.118097][ T8515] No such timeout policy "syz0"
[  175.684594][ T8500] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  175.697671][ T8500] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  175.707412][ T8500] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  175.717138][ T8500] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  175.844361][ T8546] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.938349][ T8552] netlink: 'syz.1.744': attribute type 13 has an invalid length.
[  176.029302][ T8546] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.130425][ T8552] syz_tun: refused to change device tx_queue_len
[  176.147242][ T8552] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  176.263551][ T8546] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.540527][ T8546] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.572268][ T8583] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4.
[  176.716263][ T8546] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  176.786600][ T8546] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  176.798638][ T8590] __nla_validate_parse: 26 callbacks suppressed
[  176.798657][ T8590] netlink: 16 bytes leftover after parsing attributes in process `syz.3.753'.
[  176.821560][ T8546] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  176.853149][ T8546] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  176.973707][ T8597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.754'.
[  177.264320][ T8608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.757'.
[  177.521140][ T8600] : entered promiscuous mode
[  178.313771][ T8644] netlink: 'syz.3.765': attribute type 1 has an invalid length.
[  178.346190][ T8644] bond1: entered promiscuous mode
[  178.351673][ T8644] 8021q: adding VLAN 0 to HW filter on device bond1
[  178.363124][ T8644] netlink: 3 bytes leftover after parsing attributes in process `syz.3.765'.
[  178.398149][ T8644] batadv1: entered promiscuous mode
[  178.403553][ T8644] batadv1: entered allmulticast mode
[  178.468673][ T8649] netlink: 48 bytes leftover after parsing attributes in process `syz.3.765'.
[  178.479650][ T8649] netlink: 16 bytes leftover after parsing attributes in process `syz.3.765'.
[  178.885822][ T8665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.770'.
[  179.943878][ T8678] hsr0: entered promiscuous mode
[  179.949157][ T8678] hsr0: entered allmulticast mode
[  179.954300][ T8678] hsr_slave_0: entered allmulticast mode
[  179.960934][ T8678] hsr_slave_1: entered allmulticast mode
[  179.971507][ T8678] sit0: entered promiscuous mode
[  179.981606][ T8678] netlink: 'syz.3.774': attribute type 1 has an invalid length.
[  179.989720][ T8678] netlink: 1 bytes leftover after parsing attributes in process `syz.3.774'.
[  180.715211][ T8689] netlink: 'syz.1.777': attribute type 1 has an invalid length.
[  181.210500][ T8700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.781'.
[  181.376810][ T8709] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  181.890940][ T8725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.790'.
[  182.078635][ T8728] IPv6: sit3: Disabled Multicast RS
[  182.262860][ T8730] netlink: 24 bytes leftover after parsing attributes in process `syz.0.793'.
[  182.535471][ T8719] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  182.547061][ T8719] netlink: 830 bytes leftover after parsing attributes in process `syz.1.788'.
[  182.610444][ T5146] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  182.626638][ T5146] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  182.671180][ T5146] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  182.687820][ T5146] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  182.696627][ T5146] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  182.706540][ T5146] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  183.160567][ T8754] lo: entered allmulticast mode
[  183.173885][ T8754] lo: left allmulticast mode
[  183.313469][ T8774] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  183.418875][ T8741] chnl_net:caif_netlink_parms(): no params data found
[  183.430558][ T8780] netlink: 16 bytes leftover after parsing attributes in process `syz.0.807'.
[  183.453475][ T8780] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  183.454982][ T8781] netlink: 16 bytes leftover after parsing attributes in process `syz.1.806'.
[  183.480891][ T8782] netlink: 16 bytes leftover after parsing attributes in process `syz.3.804'.
[  183.508047][ T8781] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  183.530731][ T8781] FAULT_INJECTION: forcing a failure.
[  183.530731][ T8781] name failslab, interval 1, probability 0, space 0, times 0
[  183.554745][ T8781] CPU: 0 UID: 0 PID: 8781 Comm: syz.1.806 Not tainted 6.14.0-rc7-syzkaller-01413-gd9917c7d533c #0
[  183.554773][ T8781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  183.554786][ T8781] Call Trace:
[  183.554793][ T8781]  <TASK>
[  183.554801][ T8781]  dump_stack_lvl+0x241/0x360
[  183.554842][ T8781]  ? __pfx_dump_stack_lvl+0x10/0x10
[  183.554864][ T8781]  ? __pfx__printk+0x10/0x10
[  183.554887][ T8781]  ? kmem_cache_alloc_node_noprof+0x4f/0x380
[  183.554917][ T8781]  ? __pfx___might_resched+0x10/0x10
[  183.554948][ T8781]  should_fail_ex+0x40a/0x550
[  183.554985][ T8781]  should_failslab+0xac/0x100
[  183.555014][ T8781]  kmem_cache_alloc_node_noprof+0x77/0x380
[  183.555044][ T8781]  ? __alloc_skb+0x1c3/0x440
[  183.555072][ T8781]  __alloc_skb+0x1c3/0x440
[  183.555096][ T8781]  ? ____sys_sendmsg+0x53a/0x860
[  183.555125][ T8781]  ? __pfx___alloc_skb+0x10/0x10
[  183.555155][ T8781]  ? netlink_ack_tlv_len+0x6e/0x200
[  183.555190][ T8781]  netlink_ack+0x145/0xa60
[  183.555219][ T8781]  ? __pfx_lock_acquire+0x10/0x10
[  183.555250][ T8781]  ? __pfx_ovs_flow_cmd_new+0x10/0x10
[  183.555279][ T8781]  ? __pfx___might_resched+0x10/0x10
[  183.555318][ T8781]  netlink_rcv_skb+0x294/0x480
[  183.555351][ T8781]  ? __pfx_genl_rcv_msg+0x10/0x10
[  183.555379][ T8781]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  183.555426][ T8781]  ? __netlink_deliver_tap+0x7b0/0x7f0
[  183.555483][ T8781]  genl_rcv+0x28/0x40
[  183.555506][ T8781]  netlink_unicast+0x7f6/0x990
[  183.555545][ T8781]  ? __pfx_netlink_unicast+0x10/0x10
[  183.555572][ T8781]  ? __virt_addr_valid+0x45f/0x530
[  183.555594][ T8781]  ? __phys_addr_symbol+0x2f/0x70
[  183.555613][ T8781]  ? __check_object_size+0x47a/0x730
[  183.555647][ T8781]  netlink_sendmsg+0x8de/0xcb0
[  183.555680][ T8781]  ? __pfx_netlink_sendmsg+0x10/0x10
[  183.555705][ T8781]  ? aa_sock_msg_perm+0x91/0x160
[  183.555744][ T8781]  ? __pfx_netlink_sendmsg+0x10/0x10
[  183.555763][ T8781]  __sock_sendmsg+0x221/0x270
[  183.555798][ T8781]  ____sys_sendmsg+0x53a/0x860
[  183.555833][ T8781]  ? __pfx_____sys_sendmsg+0x10/0x10
[  183.555869][ T8781]  ? __fget_files+0x2a/0x410
[  183.555902][ T8781]  ? __fget_files+0x2a/0x410
[  183.555941][ T8781]  __sys_sendmsg+0x269/0x350
[  183.555972][ T8781]  ? __pfx___sys_sendmsg+0x10/0x10
[  183.556010][ T8781]  ? do_sys_openat2+0x17a/0x1d0
[  183.556086][ T8781]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  183.556120][ T8781]  ? do_syscall_64+0x100/0x230
[  183.556155][ T8781]  ? do_syscall_64+0xb6/0x230
[  183.556189][ T8781]  do_syscall_64+0xf3/0x230
[  183.556219][ T8781]  ? clear_bhb_loop+0x35/0x90
[  183.556253][ T8781]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.556281][ T8781] RIP: 0033:0x7f7cdd18d169
[  183.556306][ T8781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  183.556327][ T8781] RSP: 002b:00007f7cddfb8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  183.556356][ T8781] RAX: ffffffffffffffda RBX: 00007f7cdd3a5fa0 RCX: 00007f7cdd18d169
[  183.556371][ T8781] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003
[  183.556383][ T8781] RBP: 00007f7cddfb8090 R08: 0000000000000000 R09: 0000000000000000
[  183.556395][ T8781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  183.556406][ T8781] R13: 0000000000000000 R14: 00007f7cdd3a5fa0 R15: 00007fff369ff3b8
[  183.556436][ T8781]  </TASK>
[  184.011064][ T8741] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.038413][ T8741] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.086771][ T8741] bridge_slave_0: entered allmulticast mode
[  184.116171][ T8741] bridge_slave_0: entered promiscuous mode
[  184.163268][ T8741] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.195364][ T8741] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.202855][ T8741] bridge_slave_1: entered allmulticast mode
[  184.210075][ T8741] bridge_slave_1: entered promiscuous mode
[  184.287638][ T8741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  184.310042][ T8741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  184.446309][ T8811] netlink: 'syz.0.811': attribute type 1 has an invalid length.
[  184.449623][ T8741] team0: Port device team_slave_0 added
[  184.485869][ T8741] team0: Port device team_slave_1 added
[  184.512096][ T8811] netlink: 'syz.0.811': attribute type 1 has an invalid length.
[  184.670577][ T8741] batman_adv: batadv0: Adding interface: batadv_slave_0
[  184.698473][ T8741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  184.783405][ T8741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  184.815611][ T5146] Bluetooth: hci5: command tx timeout
[  184.835017][ T8741] batman_adv: batadv0: Adding interface: batadv_slave_1
[  184.843766][ T8741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  184.876862][ T8823] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  184.878841][ T8741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  185.089712][ T8741] hsr_slave_0: entered promiscuous mode
[  185.107509][ T8741] hsr_slave_1: entered promiscuous mode
[  185.136748][ T8741] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  185.144435][ T8741] Cannot create hsr debugfs directory
[  185.208528][   T30] audit: type=1800 audit(1742611050.816:3): pid=8816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.811" name="memory.events" dev="tmpfs" ino=991 res=0 errno=0
[  185.285664][ T8829] netlink: 16 bytes leftover after parsing attributes in process `syz.2.818'.
[  185.309083][ T8829] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  185.329477][ T8830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.820'.
[  185.363442][ T8830] netlink: 16 bytes leftover after parsing attributes in process `syz.3.820'.
[  185.413557][ T8830] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  185.586148][   T30] audit: type=1804 audit(1742611051.196:4): pid=8837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.823" name="/newroot/181/cgroup.controllers" dev="tmpfs" ino=941 res=1 errno=0
[  185.623919][ T8838] netlink: 36 bytes leftover after parsing attributes in process `syz.1.821'.
[  185.643843][   T30] audit: type=1800 audit(1742611051.196:5): pid=8837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.823" name="cgroup.controllers" dev="tmpfs" ino=941 res=0 errno=0
[  185.841649][ T8741] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  185.927662][ T8741] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  185.987632][ T8741] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  186.031517][ T8741] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  186.084421][ T8852] IPVS: Error connecting to the multicast addr
[  186.160716][ T8858] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  186.576874][ T8872] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  186.683631][ T8741] 8021q: adding VLAN 0 to HW filter on device bond0
[  186.886580][ T5146] Bluetooth: hci5: command tx timeout
[  186.928753][ T8741] 8021q: adding VLAN 0 to HW filter on device team0
[  186.954845][   T14] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.962126][   T14] bridge0: port 1(bridge_slave_0) entered forwarding state
[  187.050196][   T14] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.057434][   T14] bridge0: port 2(bridge_slave_1) entered forwarding state
[  187.312261][ T8891] __nla_validate_parse: 4 callbacks suppressed
[  187.312281][ T8891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.839'.
[  187.344184][ T8892] sctp: [Deprecated]: syz.2.840 (pid 8892) Use of struct sctp_assoc_value in delayed_ack socket option.
[  187.344184][ T8892] Use struct sctp_sack_info instead
[  187.408639][ T8741] 8021q: adding VLAN 0 to HW filter on device batadv0
[  187.492136][ T8896] syzkaller1: entered promiscuous mode
[  187.516544][ T8896] syzkaller1: entered allmulticast mode
[  187.608859][ T8912] netlink: 16 bytes leftover after parsing attributes in process `syz.3.844'.
[  187.645390][ T8912] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  188.007939][ T8927] netlink: 16 bytes leftover after parsing attributes in process `syz.3.849'.
[  188.020867][ T8741] veth0_vlan: entered promiscuous mode
[  188.026675][ T8927] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  188.045171][ T8927] FAULT_INJECTION: forcing a failure.
[  188.045171][ T8927] name failslab, interval 1, probability 0, space 0, times 0
[  188.062063][ T8741] veth1_vlan: entered promiscuous mode
[  188.090205][ T8927] CPU: 1 UID: 0 PID: 8927 Comm: syz.3.849 Not tainted 6.14.0-rc7-syzkaller-01413-gd9917c7d533c #0
[  188.090231][ T8927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  188.090243][ T8927] Call Trace:
[  188.090250][ T8927]  <TASK>
[  188.090259][ T8927]  dump_stack_lvl+0x241/0x360
[  188.090288][ T8927]  ? __pfx_dump_stack_lvl+0x10/0x10
[  188.090311][ T8927]  ? __pfx__printk+0x10/0x10
[  188.090339][ T8927]  ? ref_tracker_alloc+0x332/0x490
[  188.090364][ T8927]  should_fail_ex+0x40a/0x550
[  188.090400][ T8927]  should_failslab+0xac/0x100
[  188.090429][ T8927]  ? skb_clone+0x20c/0x390
[  188.090454][ T8927]  kmem_cache_alloc_noprof+0x70/0x380
[  188.090488][ T8927]  skb_clone+0x20c/0x390
[  188.090517][ T8927]  __netlink_deliver_tap+0x3c4/0x7f0
[  188.090561][ T8927]  ? netlink_deliver_tap+0x2e/0x1b0
[  188.090592][ T8927]  netlink_deliver_tap+0x19d/0x1b0
[  188.090625][ T8927]  netlink_sendskb+0x68/0x140
[  188.090655][ T8927]  netlink_unicast+0x39d/0x990
[  188.090682][ T8927]  ? __asan_memcpy+0x40/0x70
[  188.090710][ T8927]  ? __pfx_netlink_unicast+0x10/0x10
[  188.090750][ T8927]  netlink_rcv_skb+0x294/0x480
[  188.090782][ T8927]  ? __pfx_genl_rcv_msg+0x10/0x10
[  188.090809][ T8927]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  188.090853][ T8927]  ? __netlink_deliver_tap+0x7b0/0x7f0
[  188.090899][ T8927]  genl_rcv+0x28/0x40
[  188.090921][ T8927]  netlink_unicast+0x7f6/0x990
[  188.090958][ T8927]  ? __pfx_netlink_unicast+0x10/0x10
[  188.090984][ T8927]  ? __virt_addr_valid+0x45f/0x530
[  188.091005][ T8927]  ? __phys_addr_symbol+0x2f/0x70
[  188.091023][ T8927]  ? __check_object_size+0x47a/0x730
[  188.091054][ T8927]  netlink_sendmsg+0x8de/0xcb0
[  188.091087][ T8927]  ? __pfx_netlink_sendmsg+0x10/0x10
[  188.091109][ T8927]  ? aa_sock_msg_perm+0x91/0x160
[  188.091155][ T8927]  ? __pfx_netlink_sendmsg+0x10/0x10
[  188.091190][ T8927]  __sock_sendmsg+0x221/0x270
[  188.091226][ T8927]  ____sys_sendmsg+0x53a/0x860
[  188.091267][ T8927]  ? __pfx_____sys_sendmsg+0x10/0x10
[  188.091291][ T8927]  ? __fget_files+0x2a/0x410
[  188.091325][ T8927]  ? __fget_files+0x2a/0x410
[  188.091366][ T8927]  __sys_sendmsg+0x269/0x350
[  188.091398][ T8927]  ? __pfx___sys_sendmsg+0x10/0x10
[  188.091439][ T8927]  ? do_sys_openat2+0x17a/0x1d0
[  188.091499][ T8927]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  188.091534][ T8927]  ? do_syscall_64+0x100/0x230
[  188.091569][ T8927]  ? do_syscall_64+0xb6/0x230
[  188.091602][ T8927]  do_syscall_64+0xf3/0x230
[  188.091633][ T8927]  ? clear_bhb_loop+0x35/0x90
[  188.091667][ T8927]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.091696][ T8927] RIP: 0033:0x7fb660f8d169
[  188.091714][ T8927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  188.091731][ T8927] RSP: 002b:00007fb661d36038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  188.091753][ T8927] RAX: ffffffffffffffda RBX: 00007fb6611a5fa0 RCX: 00007fb660f8d169
[  188.091768][ T8927] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003
[  188.091781][ T8927] RBP: 00007fb661d36090 R08: 0000000000000000 R09: 0000000000000000
[  188.091794][ T8927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  188.091805][ T8927] R13: 0000000000000000 R14: 00007fb6611a5fa0 R15: 00007ffcd2bd70d8
[  188.091836][ T8927]  </TASK>
[  188.110943][ T8933] netlink: 248 bytes leftover after parsing attributes in process `syz.2.851'.
[  188.177625][ T8936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.852'.
[  188.275439][ T8741] veth0_macvtap: entered promiscuous mode
[  188.509062][ T8741] veth1_macvtap: entered promiscuous mode
[  188.567736][ T8741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  188.612460][ T8944] netlink: 48 bytes leftover after parsing attributes in process `syz.3.853'.
[  188.614119][ T8741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.669696][ T8741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  188.692634][ T8950] sctp: [Deprecated]: syz.0.854 (pid 8950) Use of int in max_burst socket option.
[  188.692634][ T8950] Use struct sctp_assoc_value instead
[  188.702503][ T8741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.725109][ T8741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  188.736120][ T8741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.778514][ T8741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  188.903278][ T8956] openvswitch: netlink: Message has 8 unknown bytes.
[  188.983203][ T5146] Bluetooth: hci5: command tx timeout
[  188.994991][ T8741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.017890][ T8741] batman_adv: batadv0: Interface activated: batadv_slave_0
[  189.106114][ T8741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  189.228219][ T8959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.858'.
[  189.249478][ T8959] netlink: 20 bytes leftover after parsing attributes in process `syz.1.858'.
[  189.261147][ T8741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.271607][ T8741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  189.286591][ T8741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.316505][ T8741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  189.336439][ T8741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.352294][ T8741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  189.403818][ T8741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.445704][ T8741] batman_adv: batadv0: Interface activated: batadv_slave_1
[  189.469628][ T8741] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  189.488839][ T8741] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  189.512330][ T8741] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  189.533820][ T8741] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  189.598823][ T8967] syzkaller0: entered promiscuous mode
[  189.604445][ T8967] syzkaller0: entered allmulticast mode
[  189.771594][ T8979] netlink: 16 bytes leftover after parsing attributes in process `syz.3.862'.
[  189.780853][ T8979] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  189.791427][ T8979] FAULT_INJECTION: forcing a failure.
[  189.791427][ T8979] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  189.814181][ T8979] CPU: 1 UID: 0 PID: 8979 Comm: syz.3.862 Not tainted 6.14.0-rc7-syzkaller-01413-gd9917c7d533c #0
[  189.814209][ T8979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  189.814232][ T8979] Call Trace:
[  189.814240][ T8979]  <TASK>
[  189.814249][ T8979]  dump_stack_lvl+0x241/0x360
[  189.814279][ T8979]  ? __pfx_dump_stack_lvl+0x10/0x10
[  189.814302][ T8979]  ? __pfx__printk+0x10/0x10
[  189.814330][ T8979]  ? snprintf+0xda/0x120
[  189.814358][ T8979]  should_fail_ex+0x40a/0x550
[  189.814396][ T8979]  _copy_to_user+0x31/0xb0
[  189.814428][ T8979]  simple_read_from_buffer+0xca/0x150
[  189.814461][ T8979]  proc_fail_nth_read+0x1e9/0x250
[  189.814495][ T8979]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  189.814528][ T8979]  ? rw_verify_area+0x243/0x630
[  189.814550][ T8979]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  189.814582][ T8979]  vfs_read+0x1f8/0xb40
[  189.814605][ T8979]  ? fdget_pos+0x254/0x320
[  189.814637][ T8979]  ? __pfx___mutex_lock+0x10/0x10
[  189.814669][ T8979]  ? __pfx_vfs_read+0x10/0x10
[  189.814688][ T8979]  ? do_sys_openat2+0x17a/0x1d0
[  189.814721][ T8979]  ? __fget_files+0x2a/0x410
[  189.814754][ T8979]  ? __fget_files+0x395/0x410
[  189.814784][ T8979]  ? __fget_files+0x2a/0x410
[  189.814824][ T8979]  ksys_read+0x18f/0x2b0
[  189.814849][ T8979]  ? __pfx_ksys_read+0x10/0x10
[  189.814872][ T8979]  ? do_syscall_64+0x100/0x230
[  189.814906][ T8979]  ? do_syscall_64+0xb6/0x230
[  189.814941][ T8979]  do_syscall_64+0xf3/0x230
[  189.814972][ T8979]  ? clear_bhb_loop+0x35/0x90
[  189.815010][ T8979]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.815038][ T8979] RIP: 0033:0x7fb660f8bb7c
[  189.815056][ T8979] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  189.815073][ T8979] RSP: 002b:00007fb661d36030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  189.815094][ T8979] RAX: ffffffffffffffda RBX: 00007fb6611a5fa0 RCX: 00007fb660f8bb7c
[  189.815108][ T8979] RDX: 000000000000000f RSI: 00007fb661d360a0 RDI: 0000000000000004
[  189.815120][ T8979] RBP: 00007fb661d36090 R08: 0000000000000000 R09: 0000000000000000
[  189.815133][ T8979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  189.815144][ T8979] R13: 0000000000000000 R14: 00007fb6611a5fa0 R15: 00007ffcd2bd70d8
[  189.815174][ T8979]  </TASK>
[  191.050409][ T5146] Bluetooth: hci5: command tx timeout
[  192.016509][ T6110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.024411][ T6110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.100006][ T9009] netlink: 32 bytes leftover after parsing attributes in process `syz.0.867'.
[  192.118223][ T6110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.139715][ T6110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.153915][ T9009] netlink: 'syz.0.867': attribute type 44 has an invalid length.
[  192.391869][ T9022] ipip0: entered promiscuous mode
[  192.455704][ T9025] __nla_validate_parse: 1 callbacks suppressed
[  192.455725][ T9025] netlink: 36 bytes leftover after parsing attributes in process `syz.2.872'.
[  192.508556][ T9028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.871'.
[  192.594813][ T9028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.871'.
[  192.755586][ T9035] openvswitch: netlink: Key 22 has unexpected len 2 expected 4
[  192.911318][ T9038] syzkaller0: entered promiscuous mode
[  192.927026][ T9038] syzkaller0: entered allmulticast mode
[  192.952444][ T6110] syzkaller0: tun_net_xmit 48
[  192.983014][ T9038] syzkaller0: tun_net_xmit 200
[  193.012673][ T9038] syzkaller0: create flow: hash 3203551541 index 1
[  193.242564][ T9036] syzkaller0: delete flow: hash 3203551541 index 1
[  193.275158][ T9050] netlink: 44 bytes leftover after parsing attributes in process `syz.5.879'.
[  193.410197][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.878'.
[  194.572114][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  194.579835][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  194.997595][ T9060] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  195.328963][ T9067] netlink: 16 bytes leftover after parsing attributes in process `syz.3.883'.
[  195.357170][ T9080] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  195.422848][ T9067] batadv0: entered promiscuous mode
[  195.434183][ T9067] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  195.456791][ T9067] batadv0: left promiscuous mode
[  195.485304][ T9084] netlink: 'syz.2.887': attribute type 46 has an invalid length.
[  195.566653][ T9090] netlink: 16 bytes leftover after parsing attributes in process `syz.0.889'.
[  195.598645][ T9090] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.801888][ T9102] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma?
[  195.947265][ T9109] IPv6: addrconf: prefix option has invalid lifetime
[  196.300721][ T9126] syz_tun: entered allmulticast mode
[  196.375722][ T9126] syz_tun: left allmulticast mode
[  196.542241][ T9145] netlink: zone id is out of range
[  196.557563][ T9145] netlink: zone id is out of range
[  196.565891][ T9145] netlink: zone id is out of range
[  196.579828][ T9145] netlink: zone id is out of range
[  196.586107][ T9145] netlink: zone id is out of range
[  196.605005][ T9145] netlink: zone id is out of range
[  196.624859][ T9145] netlink: zone id is out of range
[  196.660069][ T9153] netlink: 260 bytes leftover after parsing attributes in process `syz.1.908'.
[  196.686440][ T9153] netlink: 260 bytes leftover after parsing attributes in process `syz.1.908'.
[  196.739423][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.908'.
[  196.751488][ T9158] ieee802154 phy0 wpan0: encryption failed: -22
[  196.953315][ T9166] netlink: 'syz.0.911': attribute type 10 has an invalid length.
[  197.183439][ T9180] ipt_ECN: cannot use operation on non-tcp rule
[  197.230561][ T9156] IPv6: NLM_F_CREATE should be specified when creating new route
[  197.239034][ T9156] IPv6: Can't replace route, no match found
[  197.251813][ T9166] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  197.411884][ T9184] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (4)
[  197.437471][ T9186] netlink: 'syz.2.916': attribute type 1 has an invalid length.
[  197.468869][ T9191] netlink: 'syz.0.917': attribute type 3 has an invalid length.
[  197.579755][ T9199] __nla_validate_parse: 2 callbacks suppressed
[  197.579775][ T9199] netlink: 28 bytes leftover after parsing attributes in process `syz.3.919'.
[  197.964013][ T9212] netlink: 12 bytes leftover after parsing attributes in process `syz.2.923'.
[  198.270242][ T9220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.926'.
[  198.387823][ T9222] netlink: 16 bytes leftover after parsing attributes in process `syz.3.927'.
[  198.438391][ T9226] netlink: 20 bytes leftover after parsing attributes in process `syz.5.928'.
[  198.459342][ T9222] wg1: entered promiscuous mode
[  198.464286][ T9222] wg1: entered allmulticast mode
[  198.562585][ T9231] batadv1: entered promiscuous mode
[  198.618197][ T9231] batadv1: entered allmulticast mode
[  198.647100][ T9231] 8021q: adding VLAN 0 to HW filter on device batadv1
[  198.690130][ T9233] netlink: 'syz.1.932': attribute type 10 has an invalid length.
[  198.884325][ T9246] netlink: 192 bytes leftover after parsing attributes in process `syz.0.936'.
[  199.203489][ T9267] netlink: 188 bytes leftover after parsing attributes in process `syz.0.938'.
[  199.325965][ T9267] netlink: 60 bytes leftover after parsing attributes in process `syz.0.938'.
[  199.417296][ T9268] xt_l2tp: v2 tid > 0xffff: 4294967295
[  199.465411][ T9276] netlink: 152 bytes leftover after parsing attributes in process `syz.3.939'.
[  199.574654][ T9280] netlink: 8 bytes leftover after parsing attributes in process `syz.5.942'.
[  199.592522][ T9280] netlink: 'syz.5.942': attribute type 1 has an invalid length.
[  199.642366][ T9284] bond0: entered promiscuous mode
[  199.657604][ T9280] nbd: socks must be embedded in a SOCK_ITEM attr
[  199.659994][ T9282] netlink: 'syz.1.943': attribute type 4 has an invalid length.
[  199.668425][ T9280] block nbd0: shutting down sockets
[  199.674827][ T9284] batadv0: entered promiscuous mode
[  199.714824][ T9284] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  199.726521][ T9284] Cannot create hsr debugfs directory
[  199.735901][ T9282] netlink: 'syz.1.943': attribute type 11 has an invalid length.
[  199.744182][ T9284] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  199.796048][ T9284] 8021q: adding VLAN 0 to HW filter on device hsr1
[  199.867148][ T9284] sctp: [Deprecated]: syz.2.941 (pid 9284) Use of int in max_burst socket option.
[  199.867148][ T9284] Use struct sctp_assoc_value instead
[  200.139961][ T9269] delete_channel: no stack
[  200.185478][   T30] audit: type=1804 audit(1742611065.796:6): pid=9304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.949" name="/newroot/189/cgroup.controllers" dev="tmpfs" ino=985 res=1 errno=0
[  200.296652][   T30] audit: type=1800 audit(1742611065.796:7): pid=9304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.949" name="cgroup.controllers" dev="tmpfs" ino=985 res=0 errno=0
[  200.367405][ T9310] xt_TPROXY: Can be used only with -p tcp or -p udp
[  200.855765][ T9329] net_ratelimit: 15 callbacks suppressed
[  200.855787][ T9329] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  201.359784][ T9354] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  201.414809][ T9352] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma?
[  201.770000][ T5838] Bluetooth: hci1: command 0x0406 tx timeout
[  201.770014][ T5843] Bluetooth: hci3: command 0x0406 tx timeout
[  202.386968][ T9400] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  202.819488][ T9413] __nla_validate_parse: 8 callbacks suppressed
[  202.819509][ T9413] netlink: 168 bytes leftover after parsing attributes in process `syz.2.982'.
[  202.981585][ T9427] netlink: 44 bytes leftover after parsing attributes in process `syz.5.985'.
[  203.019156][ T9425] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode
[  203.032992][ T9425] macvtap0: entered promiscuous mode
[  203.038934][ T9425] macvtap0: entered allmulticast mode
[  203.044619][ T9425] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode
[  203.067239][ T9425] mac80211_hwsim hwsim17 wlan1: left allmulticast mode
[  203.074751][ T9425] mac80211_hwsim hwsim17 wlan1: left promiscuous mode
[  203.654929][ T9460] bond_slave_0: entered promiscuous mode
[  203.661003][ T9460] bond_slave_1: entered promiscuous mode
[  203.680425][ T9460] vlan0: entered promiscuous mode
[  203.685512][ T9460] bond0: entered promiscuous mode
[  203.694238][ T9460] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  203.819595][ T9465] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.998'.
[  203.837057][ T9465] openvswitch: netlink: Flow actions attr not present in new flow.
[  203.939261][ T9474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1000'.
[  203.975815][ T9468] veth1_macvtap: left promiscuous mode
[  203.990960][ T9468] macsec0: entered promiscuous mode
[  204.407149][ T9491] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1003'.
[  204.421145][ T9485] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1003'.
[  204.680126][ T9504] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.1010'.
[  204.719707][ T9504] openvswitch: netlink: Flow actions attr not present in new flow.
[  204.763900][ T9513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1009'.
[  205.063183][ T9527] xt_TPROXY: Can be used only with -p tcp or -p udp
[  205.216961][ T6120] wlan1: Trigger new scan to find an IBSS to join
[  205.429238][ T9537] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1018'.
[  205.623219][ T9542] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1021'.
[  205.632619][ T9542] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  205.728734][ T9548] netlink: 'syz.5.1024': attribute type 4 has an invalid length.
[  205.749398][ T9549] bond0: (slave bond_slave_0): Releasing backup interface
[  205.767967][ T9549] bond_slave_0: left promiscuous mode
[  205.784240][ T9553] netlink: 'syz.5.1024': attribute type 4 has an invalid length.
[  205.815347][ T9549] bond0: (slave bond_slave_1): Releasing backup interface
[  205.827352][ T9549] bond_slave_1: left promiscuous mode
[  205.906534][ T9549] team0: Port device team_slave_0 removed
[  205.937680][ T9549] team0: Port device team_slave_1 removed
[  205.954933][ T9549] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  205.979964][ T9549] batman_adv: batadv0: Removing interface: batadv_slave_0
[  205.994112][ T9549] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  206.007139][ T9549] batman_adv: batadv0: Removing interface: batadv_slave_1
[  206.025319][ T9549] bond0: (slave wlan1): Releasing backup interface
[  206.058714][ T9559] xt_TPROXY: Can be used only with -p tcp or -p udp
[  206.067983][ T9549] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  206.150190][ T9561] netlink: 'syz.2.1028': attribute type 10 has an invalid length.
[  206.201928][ T9562] netlink: 'syz.2.1028': attribute type 10 has an invalid length.
[  206.249832][ T9561] batman_adv: batadv0: Adding interface: team0
[  206.256058][ T9561] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.345133][ T9561] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  206.357025][ T9562] team0: entered promiscuous mode
[  206.365714][ T9562] 8021q: adding VLAN 0 to HW filter on device team0
[  206.374577][ T9562] batman_adv: batadv0: Interface activated: team0
[  206.382893][ T9562] batman_adv: batadv0: Interface deactivated: team0
[  206.391107][ T9562] batman_adv: batadv0: Removing interface: team0
[  206.682731][ T9586] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  206.693476][ T9586] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  206.702576][ T9586] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  206.712352][ T9586] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  207.263069][ T9600] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  207.621954][ T9610] xt_TPROXY: Can be used only with -p tcp or -p udp
[  207.792965][ T9603] dvmrp0: entered allmulticast mode
[  208.289206][ T9621] __nla_validate_parse: 7 callbacks suppressed
[  208.289228][ T9621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1046'.
[  208.367766][ T9622] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1047'.
[  208.428689][ T9622] bridge_slave_1: left allmulticast mode
[  208.460864][ T9622] bridge_slave_1: left promiscuous mode
[  208.487506][ T9622] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.860259][ T9622] bridge_slave_0: left allmulticast mode
[  208.865941][ T9622] bridge_slave_0: left promiscuous mode
[  208.908102][ T9636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1045'.
[  208.917201][ T9622] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.091476][ T9633] IPVS: Unknown mcast interface: ip6erspan0
[  209.184027][ T9645] xt_TPROXY: Can be used only with -p tcp or -p udp
[  209.204336][ T9645] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1052'.
[  209.385022][ T9653] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1055'.
[  209.805181][ T9677] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1061'.
[  209.805653][ T9678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1062'.
[  209.837625][ T9671] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1059'.
[  209.916198][ T9680] bond0: (slave dummy0): Releasing backup interface
[  209.963250][ T9680] bond0: (slave bond_slave_0): Releasing backup interface
[  210.100746][ T9680] bond0: (slave bond_slave_1): Releasing backup interface
[  210.160559][ T9680] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  210.171388][ T6117] wlan1: Trigger new scan to find an IBSS to join
[  210.181703][ T9690] xt_TPROXY: Can be used only with -p tcp or -p udp
[  210.194219][ T9680] batman_adv: batadv0: Removing interface: batadv_slave_0
[  210.219720][ T9680] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  210.227733][ T9680] batman_adv: batadv0: Removing interface: batadv_slave_1
[  210.297446][ T5882] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  210.305274][ T9693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1065'.
[  210.305345][ T9690] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1066'.
[  210.827473][ T5882] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  211.090972][ T6120] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00
[  211.478555][ T9732] netlink: 'syz.5.1078': attribute type 10 has an invalid length.
[  211.498119][ T9734] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7
[  211.563113][ T9732] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  211.608788][ T9732] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  211.680132][ T9732] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  212.164205][ T9769] netlink: 'syz.5.1088': attribute type 10 has an invalid length.
[  212.561530][ T9781] Cannot find map_set index 65532 as target
[  212.721528][ T9785] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  212.809834][ T9790] netlink: 'syz.3.1096': attribute type 29 has an invalid length.
[  213.226725][ T9809] GUP no longer grows the stack in syz.3.1101 (9809): 200000006000-20000000a000 (200000005000)
[  213.250562][ T9809] CPU: 1 UID: 0 PID: 9809 Comm: syz.3.1101 Not tainted 6.14.0-rc7-syzkaller-01413-gd9917c7d533c #0
[  213.250590][ T9809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  213.250602][ T9809] Call Trace:
[  213.250609][ T9809]  <TASK>
[  213.250618][ T9809]  dump_stack_lvl+0x241/0x360
[  213.250649][ T9809]  ? __pfx_dump_stack_lvl+0x10/0x10
[  213.250672][ T9809]  ? __pfx__printk+0x10/0x10
[  213.250690][ T9809]  ? find_vma+0xf9/0x170
[  213.250723][ T9809]  __get_user_pages+0x3b07/0x4140
[  213.250754][ T9809]  ? mark_lock+0x9a/0x360
[  213.250799][ T9809]  ? __pfx___get_user_pages+0x10/0x10
[  213.250818][ T9809]  ? __gup_longterm_locked+0xd2f/0x17f0
[  213.250842][ T9809]  ? __pfx_down_read_killable+0x10/0x10
[  213.250867][ T9809]  ? __pfx_lock_acquire+0x10/0x10
[  213.250899][ T9809]  ? try_get_folio+0xf1/0x6f0
[  213.250921][ T9809]  ? __pfx_lock_release+0x10/0x10
[  213.250960][ T9809]  __gup_longterm_locked+0xe64/0x17f0
[  213.250996][ T9809]  ? mark_lock+0x9a/0x360
[  213.251020][ T9809]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  213.251051][ T9809]  ? __pfx___gup_longterm_locked+0x10/0x10
[  213.251075][ T9809]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  213.251114][ T9809]  ? gup_fast_fallback+0x207e/0x29c0
[  213.251138][ T9809]  gup_fast_fallback+0x2266/0x29c0
[  213.251191][ T9809]  ? __pfx_gup_fast_fallback+0x10/0x10
[  213.251212][ T9809]  ? __lock_acquire+0x1397/0x2100
[  213.251278][ T9809]  ? is_valid_gup_args+0x124/0x200
[  213.251302][ T9809]  get_user_pages_fast+0xcc/0x160
[  213.251327][ T9809]  ? __pfx_get_user_pages_fast+0x10/0x10
[  213.251349][ T9809]  ? rcu_is_watching+0x15/0xb0
[  213.251373][ T9809]  ? trace_contention_end+0x3c/0x120
[  213.251409][ T9809]  __iov_iter_get_pages_alloc+0x39c/0xa90
[  213.251449][ T9809]  ? __se_sys_vmsplice+0x4b7/0x14a0
[  213.251476][ T9809]  ? __pfx_validate_chain+0x10/0x10
[  213.251504][ T9809]  iov_iter_get_pages2+0xcf/0x130
[  213.251536][ T9809]  ? __pfx_iov_iter_get_pages2+0x10/0x10
[  213.251582][ T9809]  __se_sys_vmsplice+0x739/0x14a0
[  213.251630][ T9809]  ? mark_lock+0x9a/0x360
[  213.251652][ T9809]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  213.251679][ T9809]  ? __lock_acquire+0x1397/0x2100
[  213.251764][ T9809]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  213.251802][ T9809]  ? rcu_is_watching+0x15/0xb0
[  213.251826][ T9809]  ? trace_sys_enter+0x25/0x120
[  213.251853][ T9809]  do_syscall_64+0xf3/0x230
[  213.251885][ T9809]  ? clear_bhb_loop+0x35/0x90
[  213.251919][ T9809]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.251947][ T9809] RIP: 0033:0x7fb660f8d169
[  213.251966][ T9809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  213.251983][ T9809] RSP: 002b:00007fb661d36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  213.252005][ T9809] RAX: ffffffffffffffda RBX: 00007fb6611a5fa0 RCX: 00007fb660f8d169
[  213.252020][ T9809] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000b
[  213.252032][ T9809] RBP: 00007fb66100e2a0 R08: 0000000000000000 R09: 0000000000000000
[  213.252045][ T9809] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  213.252057][ T9809] R13: 0000000000000000 R14: 00007fb6611a5fa0 R15: 00007ffcd2bd70d8
[  213.252088][ T9809]  </TASK>
[  213.649259][ T9816] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  214.117468][ T9828] syz_tun: entered promiscuous mode
[  214.120646][ T9831] __nla_validate_parse: 13 callbacks suppressed
[  214.120665][ T9831] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1107'.
[  214.196809][ T9831] netlink: 'syz.1.1107': attribute type 1 has an invalid length.
[  214.344819][ T9843] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1110'.
[  214.360383][ T9840] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1108'.
[  214.414038][ T9842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1111'.
[  214.436225][ T9846] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1110'.
[  214.439013][ T9847] trusted_key: syz.1.1112 sent an empty control message without MSG_MORE.
[  214.489806][ T9837] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1108'.
[  214.514381][ T9849] IPVS: set_ctl: invalid protocol: 8 0.0.0.0:20000
[  214.515220][ T9837] erspan0: entered promiscuous mode
[  214.538688][ T9832] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1108'.
[  214.578864][ T9842] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  214.659625][ T9827] syz_tun: left promiscuous mode
[  214.747913][ T9853] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1113'.
[  215.002896][   T30] audit: type=1107 audit(1742611080.606:8): pid=9864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ô6픲Ÿ‚~A—øðïÆÓIÎjjÃH©J˜É�A”nFIWÕ2,n”-|BÓZxoC,–<—Pµ³9ŽbÁ+NEZ•áËÂí/ÈI<ð¢¤5Ô2ì«QÑæe3Ï<£w$TÞ꘹@¡n„]$ìÏLOZ:¶(É¢¤�¹$Óm‹^Mˆ8,-aG<ßÞt7Tq´2?Ô2åt[@ì‹É[tru3»:Þ£¬£1|6¬úÓÈvþÂÈüu‡�Ñ=/�FA!!£HÇAT�ÇX˜¹ Q‡3³-^‚9×.ú¨lÂØR[‘bõ4ºÊž•�P]àZµ®Ž¡›@œA=½Ø¬�gâÓBöœåt«kõv×"©ßiaD*Rtñ!SšbEçùÏóS‡²¦´—Ž>ý›2Eà&ž©;	wîÊøBHU}4x¾°-û=N"/*jmUš1çä(…ãÔÚÔµ:€LBXËEà(gˆ±;n¼Àg.ò½F˜m“è‹Äd%†a3¦>ë‡x
[  215.002896][   T30] :žÞuH�û
¼Qß©˜+› HÑGxÝCsa@Z†z'
[  215.246248][ T9867] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  215.795089][ T9892] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1124'.
[  215.805914][ T9863] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  215.813213][ T9863] IPv6: NLM_F_CREATE should be set when creating new route
[  215.818028][ T9873] Bluetooth: hci4: Opcode 0x0401 failed: -4
[  215.820513][ T9863] IPv6: NLM_F_CREATE should be set when creating new route
[  215.833599][ T9863] IPv6: NLM_F_CREATE should be set when creating new route
[  215.849115][ T9894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1124'.
[  216.266922][   T30] audit: type=1107 audit(1742611081.886:9): pid=9890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Àï'
[  216.703010][ T9925] xt_recent: hitcount (4294967294) is larger than allowed maximum (65535)
[  217.209494][ T5840] Bluetooth: hci4: command 0x0405 tx timeout
[  217.844390][ T9957] netlink: 'syz.5.1140': attribute type 9 has an invalid length.
[  217.906062][ T9950] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  217.921958][ T9950] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  217.992207][ T9950] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  218.002018][ T9950] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  218.011424][ T9950] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  218.020497][ T9950] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  218.071432][ T9950] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  218.080677][ T9950] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  218.091785][ T9950] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  218.101015][ T9950] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  218.136615][ T9952] sit0: left promiscuous mode
[  218.174579][ T9952] 8021q: adding VLAN 0 to HW filter on device bond0
[  218.184980][ T9952] 8021q: adding VLAN 0 to HW filter on device team0
[  218.195853][ T9952] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  218.631335][ T9980] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  218.935021][ T9993] netlink: 'syz.2.1152': attribute type 1 has an invalid length.
[  218.965348][ T9992] netlink: 'syz.0.1151': attribute type 1 has an invalid length.
[  218.990747][ T9992] netlink: 'syz.0.1151': attribute type 2 has an invalid length.
[  219.033977][ T9993] bond1: entered promiscuous mode
[  219.039484][ T9993] bond1: entered allmulticast mode
[  219.061360][ T9994] batadv2: entered promiscuous mode
[  219.075109][ T9994] 8021q: adding VLAN 0 to HW filter on device batadv2
[  219.099752][ T9994] bond1: (slave batadv2): making interface the new active one
[  219.115033][ T9994] batadv2: entered allmulticast mode
[  219.122359][ T9994] bond1: (slave batadv2): Enslaving as an active interface with an up link
[  219.140575][ T9996] netlink: 'syz.5.1153': attribute type 11 has an invalid length.
[  219.166179][ T9996] __nla_validate_parse: 12 callbacks suppressed
[  219.166199][ T9996] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1153'.
[  219.270742][T10000] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[  219.346793][T10005] netlink: 'syz.2.1155': attribute type 3 has an invalid length.
[  219.403704][T10009] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1156'.
[  219.513113][T10012] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1161'.
[  219.641587][T10018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1160'.
[  219.747091][T10021] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1162'.
[  219.843433][T10030] netlink: 'syz.0.1164': attribute type 1 has an invalid length.
[  220.187371][T10049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1169'.
[  221.153889][T10091] netpci0: tun_chr_ioctl cmd 1074025672
[  221.183579][T10091] netpci0: ignored: set checksum disabled
[  221.265806][T10096] bond1: entered promiscuous mode
[  221.275165][T10096] bond1: entered allmulticast mode
[  221.281516][T10096] 8021q: adding VLAN 0 to HW filter on device bond1
[  221.520542][T10096] bond1 (unregistering): Released all slaves
[  221.899795][T10121] xt_limit: Overflow, try lower: 262144/524288
[  222.660108][T10145] syzkaller0: entered promiscuous mode
[  222.665692][T10145] syzkaller0: entered allmulticast mode
[  222.943082][T10148] syzkaller0: entered promiscuous mode
[  222.956536][T10148] syzkaller0: entered allmulticast mode
[  223.426292][   T14] syzkaller0: tun_net_xmit 48
[  223.436834][T10153] bridge_slave_0: entered promiscuous mode
[  223.634454][T10164] netlink: 'syz.3.1196': attribute type 5 has an invalid length.
[  223.689212][T10169] netlink: 'syz.3.1196': attribute type 5 has an invalid length.
[  223.864300][T10174] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1195'.
[  223.952294][T10176] netlink: 'syz.2.1198': attribute type 1 has an invalid length.
[  227.767061][T10176] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  227.774903][T10175] ipip1: entered promiscuous mode
[  227.808789][T10175] ipip1: entered allmulticast mode
[  227.951486][T10184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1201'.
[  227.989720][T10184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1201'.
[  228.039293][T10184] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1201'.
[  228.203911][T10199] vlan0: entered promiscuous mode
[  228.252065][T10205] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1208'.
[  228.273272][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1208'.
[  228.495314][T10214] netlink: 'syz.0.1212': attribute type 10 has an invalid length.
[  228.509456][T10214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1212'.
[  228.513368][T10215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1211'.
[  228.703822][T10229] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1214'.
[  228.723853][T10219] syzkaller0: entered promiscuous mode
[  228.729768][T10229] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1214'.
[  228.729801][T10229] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1214'.
[  228.761377][T10219] syzkaller0: entered allmulticast mode
[  228.804139][ T6120] syzkaller0: tun_net_xmit 48
[  228.906148][T10240] xt_policy: output policy not valid in PREROUTING and INPUT
[  228.945414][T10240] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  230.882916][T10245] 0·: renamed from hsr_slave_1 (while UP)
[  230.901097][T10245] 0·: entered allmulticast mode
[  230.917367][T10245] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  231.132372][T10254] netlink: 'syz.2.1222': attribute type 1 has an invalid length.
[  231.252783][T10266] bond2: (slave gretap1): making interface the new active one
[  231.303614][T10266] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  231.601758][T10281] openvswitch: netlink: Missing key (keys=440, expected=200000)
[  232.071552][T10304] netlink: 'syz.3.1238': attribute type 9 has an invalid length.
[  232.510082][T10328] FAULT_INJECTION: forcing a failure.
[  232.510082][T10328] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  232.582331][T10334] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  232.609022][T10328] CPU: 1 UID: 0 PID: 10328 Comm: syz.3.1247 Not tainted 6.14.0-rc7-syzkaller-01413-gd9917c7d533c #0
[  232.609053][T10328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  232.609067][T10328] Call Trace:
[  232.609074][T10328]  <TASK>
[  232.609083][T10328]  dump_stack_lvl+0x241/0x360
[  232.609116][T10328]  ? __pfx_dump_stack_lvl+0x10/0x10
[  232.609139][T10328]  ? __pfx__printk+0x10/0x10
[  232.609171][T10328]  should_fail_ex+0x40a/0x550
[  232.609209][T10328]  _copy_to_user+0x31/0xb0
[  232.609239][T10328]  bpf_test_finish+0x212/0x890
[  232.609279][T10328]  ? __pfx_bpf_test_finish+0x10/0x10
[  232.609315][T10328]  ? convert_skb_to___skb+0x2d3/0x510
[  232.609348][T10328]  bpf_prog_test_run_skb+0xff8/0x1830
[  232.609410][T10328]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  232.609440][T10328]  ? __fget_files+0x2a/0x410
[  232.609475][T10328]  ? fput+0x21b/0x290
[  232.609503][T10328]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  232.609535][T10328]  bpf_prog_test_run+0x2e4/0x360
[  232.609571][T10328]  __sys_bpf+0x487/0x820
[  232.609601][T10328]  ? __pfx___sys_bpf+0x10/0x10
[  232.609655][T10328]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  232.609690][T10328]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  232.609724][T10328]  ? do_syscall_64+0x100/0x230
[  232.609759][T10328]  __x64_sys_bpf+0x7c/0x90
[  232.609787][T10328]  do_syscall_64+0xf3/0x230
[  232.609816][T10328]  ? clear_bhb_loop+0x35/0x90
[  232.609848][T10328]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.609876][T10328] RIP: 0033:0x7fb660f8d169
[  232.609895][T10328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  232.609911][T10328] RSP: 002b:00007fb661d36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  232.609933][T10328] RAX: ffffffffffffffda RBX: 00007fb6611a5fa0 RCX: 00007fb660f8d169
[  232.609947][T10328] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  232.609960][T10328] RBP: 00007fb661d36090 R08: 0000000000000000 R09: 0000000000000000
[  232.609972][T10328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  232.609984][T10328] R13: 0000000000000000 R14: 00007fb6611a5fa0 R15: 00007ffcd2bd70d8
[  232.610015][T10328]  </TASK>
[  233.303428][T10345] netlink: 'syz.0.1252': attribute type 1 has an invalid length.
[  233.359868][T10350] __nla_validate_parse: 13 callbacks suppressed
[  233.359888][T10350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1252'.
[  233.465200][T10345] 8021q: adding VLAN 0 to HW filter on device bond1
[  233.607723][T10353] macsec1: entered promiscuous mode
[  233.613597][T10353] team0: entered promiscuous mode
[  233.620096][T10353] team_slave_0: entered promiscuous mode
[  233.638228][T10353] team_slave_1: entered promiscuous mode
[  233.690358][T10353] team0: left promiscuous mode
[  233.695313][T10353] team_slave_0: left promiscuous mode
[  233.701399][T10353] team_slave_1: left promiscuous mode
[  233.897615][T10359] ip6gretap0: left allmulticast mode
[  233.912085][T10361] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1256'.
[  233.996274][T10367] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1255'.
[  234.007067][T10359] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  234.077253][T10362] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  234.454464][T10378] netlink: 'syz.2.1260': attribute type 2 has an invalid length.
[  234.463708][T10378] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1260'.
[  234.643551][T10386] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  234.697210][T10388] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  234.903235][T10400] netlink: 'syz.5.1265': attribute type 1 has an invalid length.
[  234.907010][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1267'.
[  235.053370][T10405] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1269'.
[  235.174739][T10410] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1272'.
[  235.510273][T10417] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1274'.
[  235.539879][T10417] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1274'.
[  235.583991][T10417] vlan3: entered promiscuous mode
[  235.597972][T10417] dummy0: entered promiscuous mode
[  235.959824][T10426] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  236.384472][T10430] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  256.019746][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  288.806652][ T5838] Bluetooth: hci4: command 0x0405 tx timeout
[  317.458766][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  364.116466][T10447] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  364.232315][T10455] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  364.247522][T10455] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  364.305177][T10447] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  364.613543][T10463] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1286'.
[  364.793504][T10470] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  364.820076][T10469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1288'.
[  364.987542][T10474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1290'.
[  365.032895][T10474] ip6gretap0: entered promiscuous mode
[  365.061626][T10474] macsec1: entered promiscuous mode
[  365.070090][T10474] macsec1: entered allmulticast mode
[  365.084634][T10474] ip6gretap0: entered allmulticast mode
[  365.162402][T10484] netlink: 'syz.5.1295': attribute type 10 has an invalid length.
[  365.307653][T10486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1296'.
[  365.459363][T10494] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  365.698532][T10500] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1301'.
[  365.735210][T10500] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1301'.
[  366.288200][T10510] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  366.508123][ T5881] IPVS: starting estimator thread 0...
[  366.636713][T10518] IPVS: using max 19 ests per chain, 45600 per kthread
[  366.889557][T10535] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1313'.
[  367.171346][T10546] FAULT_INJECTION: forcing a failure.
[  367.171346][T10546] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  367.207620][T10546] CPU: 1 UID: 0 PID: 10546 Comm: syz.5.1318 Not tainted 6.14.0-rc7-syzkaller-01413-gd9917c7d533c #0
[  367.207665][T10546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  367.207696][T10546] Call Trace:
[  367.207704][T10546]  <TASK>
[  367.207713][T10546]  dump_stack_lvl+0x241/0x360
[  367.207746][T10546]  ? __pfx_dump_stack_lvl+0x10/0x10
[  367.207770][T10546]  ? __pfx__printk+0x10/0x10
[  367.207794][T10546]  ? __pfx_lock_release+0x10/0x10
[  367.207835][T10546]  should_fail_ex+0x40a/0x550
[  367.207873][T10546]  _copy_from_iter+0x1df/0x1c40
[  367.207899][T10546]  ? __virt_addr_valid+0x183/0x530
[  367.207921][T10546]  ? __pfx_lock_release+0x10/0x10
[  367.207959][T10546]  ? __alloc_skb+0x28f/0x440
[  367.207984][T10546]  ? __pfx__copy_from_iter+0x10/0x10
[  367.208012][T10546]  ? __virt_addr_valid+0x183/0x530
[  367.208032][T10546]  ? __virt_addr_valid+0x183/0x530
[  367.208057][T10546]  ? __virt_addr_valid+0x45f/0x530
[  367.208079][T10546]  ? __phys_addr_symbol+0x2f/0x70
[  367.208098][T10546]  ? __check_object_size+0x47a/0x730
[  367.208132][T10546]  netlink_sendmsg+0x742/0xcb0
[  367.208166][T10546]  ? __pfx_netlink_sendmsg+0x10/0x10
[  367.208191][T10546]  ? aa_sock_msg_perm+0x91/0x160
[  367.208229][T10546]  ? __pfx_netlink_sendmsg+0x10/0x10
[  367.208248][T10546]  __sock_sendmsg+0x221/0x270
[  367.208282][T10546]  ____sys_sendmsg+0x53a/0x860
[  367.208317][T10546]  ? __pfx_____sys_sendmsg+0x10/0x10
[  367.208341][T10546]  ? __fget_files+0x2a/0x410
[  367.208375][T10546]  ? __fget_files+0x2a/0x410
[  367.208414][T10546]  __sys_sendmsg+0x269/0x350
[  367.208446][T10546]  ? __pfx___sys_sendmsg+0x10/0x10
[  367.208485][T10546]  ? do_sys_openat2+0x17a/0x1d0
[  367.208554][T10546]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  367.208587][T10546]  ? do_syscall_64+0x100/0x230
[  367.208622][T10546]  ? do_syscall_64+0xb6/0x230
[  367.208656][T10546]  do_syscall_64+0xf3/0x230
[  367.208686][T10546]  ? clear_bhb_loop+0x35/0x90
[  367.208720][T10546]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.208756][T10546] RIP: 0033:0x7f957418d169
[  367.208775][T10546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  367.208793][T10546] RSP: 002b:00007f95750bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  367.208815][T10546] RAX: ffffffffffffffda RBX: 00007f95743a5fa0 RCX: 00007f957418d169
[  367.208830][T10546] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  367.208842][T10546] RBP: 00007f95750bb090 R08: 0000000000000000 R09: 0000000000000000
[  367.208855][T10546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  367.208867][T10546] R13: 0000000000000000 R14: 00007f95743a5fa0 R15: 00007ffceb703438
[  367.208902][T10546]  </TASK>
[  367.526603][ T5838] Bluetooth: hci5: command 0x0405 tx timeout
[  367.726043][T10564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1322'.
[  367.869245][T10569] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1325'.
[  368.043957][T10579] batman_adv: batadv0: Removing interface: ipvlan2
[  368.057558][T10579] bond1: (slave batadv2): Releasing active interface
[  368.064477][T10579] batadv2: left allmulticast mode
[  368.102583][T10579] bond2: (slave gretap1): Releasing active interface
[  368.708639][T10599] FAULT_INJECTION: forcing a failure.
[  368.708639][T10599] name failslab, interval 1, probability 0, space 0, times 0
[  368.756424][T10599] CPU: 0 UID: 0 PID: 10599 Comm: syz.1.1332 Not tainted 6.14.0-rc7-syzkaller-01413-gd9917c7d533c #0
[  368.756462][T10599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  368.756475][T10599] Call Trace:
[  368.756483][T10599]  <TASK>
[  368.756491][T10599]  dump_stack_lvl+0x241/0x360
[  368.756523][T10599]  ? __pfx_dump_stack_lvl+0x10/0x10
[  368.756548][T10599]  ? __pfx__printk+0x10/0x10
[  368.756584][T10599]  should_fail_ex+0x40a/0x550
[  368.756623][T10599]  should_failslab+0xac/0x100
[  368.756652][T10599]  ? skb_clone+0x20c/0x390
[  368.756679][T10599]  kmem_cache_alloc_noprof+0x70/0x380
[  368.756715][T10599]  skb_clone+0x20c/0x390
[  368.756747][T10599]  __netlink_deliver_tap+0x3c4/0x7f0
[  368.756793][T10599]  ? netlink_deliver_tap+0x2e/0x1b0
[  368.756826][T10599]  netlink_deliver_tap+0x19d/0x1b0
[  368.756860][T10599]  netlink_unicast+0x7c4/0x990
[  368.756910][T10599]  ? __pfx_netlink_unicast+0x10/0x10
[  368.756939][T10599]  ? __virt_addr_valid+0x45f/0x530
[  368.756962][T10599]  ? __phys_addr_symbol+0x2f/0x70
[  368.756982][T10599]  ? __check_object_size+0x47a/0x730
[  368.757025][T10599]  netlink_sendmsg+0x8de/0xcb0
[  368.757062][T10599]  ? __pfx_netlink_sendmsg+0x10/0x10
[  368.757087][T10599]  ? aa_sock_msg_perm+0x91/0x160
[  368.757127][T10599]  ? __pfx_netlink_sendmsg+0x10/0x10
[  368.757146][T10599]  __sock_sendmsg+0x221/0x270
[  368.757182][T10599]  ____sys_sendmsg+0x53a/0x860
[  368.757219][T10599]  ? __pfx_____sys_sendmsg+0x10/0x10
[  368.757244][T10599]  ? __fget_files+0x2a/0x410
[  368.757279][T10599]  ? __fget_files+0x2a/0x410
[  368.757319][T10599]  __sys_sendmsg+0x269/0x350
[  368.757351][T10599]  ? __pfx___sys_sendmsg+0x10/0x10
[  368.757391][T10599]  ? do_sys_openat2+0x17a/0x1d0
[  368.757457][T10599]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  368.757492][T10599]  ? do_syscall_64+0x100/0x230
[  368.757527][T10599]  ? do_syscall_64+0xb6/0x230
[  368.757561][T10599]  do_syscall_64+0xf3/0x230
[  368.757592][T10599]  ? clear_bhb_loop+0x35/0x90
[  368.757626][T10599]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.757655][T10599] RIP: 0033:0x7f7cdd18d169
[  368.757674][T10599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  368.757691][T10599] RSP: 002b:00007f7cddfb8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  368.757713][T10599] RAX: ffffffffffffffda RBX: 00007f7cdd3a5fa0 RCX: 00007f7cdd18d169
[  368.757728][T10599] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  368.757741][T10599] RBP: 00007f7cddfb8090 R08: 0000000000000000 R09: 0000000000000000
[  368.757754][T10599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  368.757766][T10599] R13: 0000000000000000 R14: 00007f7cdd3a5fa0 R15: 00007fff369ff3b8
[  368.757798][T10599]  </TASK>
[  368.764700][T10599] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1332'.
[  368.898476][T10605] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  369.204410][T10612] 8021q: adding VLAN 0 to HW filter on device bond2
[  369.213495][T10612] bond2: entered promiscuous mode
[  369.219696][T10612] bond0: (slave bond2): Enslaving as an active interface with an up link
[  369.289561][T10616] 8021q: VLANs not supported on sit0
[  370.065000][T10643] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  370.082628][T10649] __nla_validate_parse: 2 callbacks suppressed
[  370.082646][T10649] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1348'.
[  370.099316][T10646] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1347'.
[  370.148544][T10646] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1347'.
[  370.375242][T10661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1351'.
[  370.405320][T10662] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1347'.
[  370.438118][T10661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1351'.
[  370.447338][T10661] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1351'.
[  370.463310][T10661] gtp0: entered promiscuous mode
[  370.473608][T10661] gtp0: entered allmulticast mode
[  370.729307][ T5838] Bluetooth: hci5: command 0x0405 tx timeout
[  370.735881][T10668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1353'.
[  370.953028][T10668] bridge0: port 1(ip6gretap1) entered blocking state
[  370.962107][T10668] bridge0: port 1(ip6gretap1) entered disabled state
[  370.972476][T10668] ip6gretap1: entered allmulticast mode
[  370.996566][T10668] ip6gretap1: entered promiscuous mode
[  371.105735][T10671] veth3: entered promiscuous mode
[  371.126782][T10671] bridge0: port 2(veth3) entered blocking state
[  371.133398][T10671] bridge0: port 2(veth3) entered disabled state
[  371.161230][T10671] veth3: entered allmulticast mode
[  371.469145][T10678] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1356'.
[  371.480424][T10678] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1356'.
[  371.611573][T10711] netlink: 'syz.0.1361': attribute type 21 has an invalid length.
[  371.663572][T10714] netlink: 'syz.0.1361': attribute type 6 has an invalid length.
[  371.729162][T10706] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  371.757038][T10678] x_tables: duplicate entry at hook 2
[  372.000158][T10726] netlink: zone id is out of range
[  372.013180][T10726] netlink: zone id is out of range
[  372.023291][T10726] netlink: zone id is out of range
[  372.043938][T10726] netlink: zone id is out of range
[  372.073222][T10728] netlink: 'syz.3.1364': attribute type 27 has an invalid length.
[  372.133988][   T30] audit: type=1800 audit(1742611237.746:10): pid=10716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1363" name="memory.events" dev="tmpfs" ino=1388 res=0 errno=0
[  372.465963][T10735] netlink: 'syz.0.1369': attribute type 1 has an invalid length.
[  373.268495][T10772] openvswitch: netlink: Message has 44053 unknown bytes.
[  373.422162][T10776] syz.1.1380: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  373.467873][T10776] CPU: 0 UID: 0 PID: 10776 Comm: syz.1.1380 Not tainted 6.14.0-rc7-syzkaller-01413-gd9917c7d533c #0
[  373.467907][T10776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  373.467921][T10776] Call Trace:
[  373.467929][T10776]  <TASK>
[  373.467938][T10776]  dump_stack_lvl+0x241/0x360
[  373.467976][T10776]  ? __pfx_dump_stack_lvl+0x10/0x10
[  373.468000][T10776]  ? __pfx__printk+0x10/0x10
[  373.468026][T10776]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  373.468059][T10776]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[  373.468090][T10776]  warn_alloc+0x278/0x410
[  373.468131][T10776]  ? __vmalloc_node_range_noprof+0x106/0x1380
[  373.468155][T10776]  ? __pfx_warn_alloc+0x10/0x10
[  373.468179][T10776]  ? kasan_save_track+0x3f/0x80
[  373.468201][T10776]  ? __kasan_kmalloc+0x98/0xb0
[  373.468227][T10776]  ? xsk_setsockopt+0x4aa/0x810
[  373.468247][T10776]  ? do_sock_setsockopt+0x3af/0x720
[  373.468271][T10776]  ? __x64_sys_setsockopt+0x1ee/0x280
[  373.468295][T10776]  ? do_syscall_64+0xf3/0x230
[  373.468331][T10776]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  373.468371][T10776]  __vmalloc_node_range_noprof+0x126/0x1380
[  373.468424][T10776]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  373.468452][T10776]  ? __kasan_kmalloc+0x98/0xb0
[  373.468483][T10776]  vmalloc_user_noprof+0x74/0x80
[  373.468505][T10776]  ? xskq_create+0xb6/0x170
[  373.468528][T10776]  xskq_create+0xb6/0x170
[  373.468554][T10776]  xsk_init_queue+0xa1/0x100
[  373.468581][T10776]  xsk_setsockopt+0x4aa/0x810
[  373.468606][T10776]  ? __pfx_xsk_setsockopt+0x10/0x10
[  373.468629][T10776]  ? __pfx_aa_sk_perm+0x10/0x10
[  373.468664][T10776]  ? aa_sock_opt_perm+0x79/0x120
[  373.468703][T10776]  ? __pfx_xsk_setsockopt+0x10/0x10
[  373.468724][T10776]  do_sock_setsockopt+0x3af/0x720
[  373.468756][T10776]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  373.468792][T10776]  ? __fget_files+0x395/0x410
[  373.468823][T10776]  ? __fget_files+0x2a/0x410
[  373.468863][T10776]  __x64_sys_setsockopt+0x1ee/0x280
[  373.468896][T10776]  do_syscall_64+0xf3/0x230
[  373.468927][T10776]  ? clear_bhb_loop+0x35/0x90
[  373.468961][T10776]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  373.468990][T10776] RIP: 0033:0x7f7cdd18d169
[  373.469010][T10776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  373.469028][T10776] RSP: 002b:00007f7cddfb8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  373.469051][T10776] RAX: ffffffffffffffda RBX: 00007f7cdd3a5fa0 RCX: 00007f7cdd18d169
[  373.469067][T10776] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  373.469080][T10776] RBP: 00007f7cdd20e2a0 R08: 0000000000000004 R09: 0000000000000000
[  373.469093][T10776] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  373.469106][T10776] R13: 0000000000000000 R14: 00007f7cdd3a5fa0 R15: 00007fff369ff3b8
[  373.469138][T10776]  </TASK>
[  373.469199][T10776] Mem-Info:
[  373.654601][T10781] netlink: 'syz.0.1382': attribute type 2 has an invalid length.
[  373.716167][T10776] active_anon:3974 inactive_anon:0 isolated_anon:0
[  373.716167][T10776]  active_file:1713 inactive_file:38395 isolated_file:0
[  373.716167][T10776]  unevictable:768 dirty:255 writeback:0
[  373.716167][T10776]  slab_reclaimable:10139 slab_unreclaimable:115651
[  373.716167][T10776]  mapped:28754 shmem:1475 pagetables:788
[  373.716167][T10776]  sec_pagetables:0 bounce:0
[  373.716167][T10776]  kernel_misc_reclaimable:0
[  373.716167][T10776]  free:1324056 free_pcp:724 free_cma:0
[  373.814657][T10776] Node 0 active_anon:15896kB inactive_anon:0kB active_file:6852kB inactive_file:153504kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115016kB dirty:1020kB writeback:0kB shmem:4364kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11296kB pagetables:3048kB sec_pagetables:0kB all_unreclaimable? no
[  373.874312][T10776] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  373.956596][T10776] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  374.016480][T10776] lowmem_reserve[]: 0 2489 2490 2490 2490
[  374.026909][T10776] Node 0 DMA32 free:1373336kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:15456kB inactive_anon:0kB active_file:6852kB inactive_file:153200kB unevictable:1536kB writepending:1020kB present:3129332kB managed:2549692kB mlocked:0kB bounce:0kB free_pcp:1336kB local_pcp:660kB free_cma:0kB
[  374.075712][T10776] lowmem_reserve[]: 0 0 0 0 0
[  374.083643][T10776] Node 0 Normal free:4kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:304kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB
[  374.133461][T10776] lowmem_reserve[]: 0 0 0 0 0
[  374.145297][T10776] Node 1 Normal free:3908116kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  374.198639][T10776] lowmem_reserve[]: 0 0 0 0 0
[  374.203474][T10776] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  374.217940][T10776] Node 0 DMA32: 2*4kB (UE) 924*8kB (UM) 763*16kB (UME) 1323*32kB (UME) 616*64kB (UME) 190*128kB (UME) 75*256kB (UME) 47*512kB (UME) 20*1024kB (UM) 6*2048kB (UM) 285*4096kB (UM) = 1369080kB
[  374.238834][T10776] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[  374.251661][T10776] Node 1 Normal: 209*4kB (UME) 54*8kB (UME) 30*16kB (UME) 220*32kB (UME) 93*64kB (UME) 33*128kB (UM) 16*256kB (UME) 8*512kB (UME) 4*1024kB (UME) 3*2048kB (UE) 945*4096kB (M) = 3908116kB
[  374.270777][T10776] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  374.281379][T10776] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  374.293885][T10776] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  374.297829][ T6110] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1
[  374.305026][T10776] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  374.339281][T10776] 41532 total pagecache pages
[  374.344158][T10776] 0 pages in swap cache
[  374.360560][T10776] Free swap  = 124996kB
[  374.365006][T10776] Total swap = 124996kB
[  374.382596][T10776] 2097051 pages RAM
[  374.393262][T10776] 0 pages HighMem/MovableOnly
[  374.405696][T10776] 427906 pages reserved
[  374.410934][T10776] 0 pages cma reserved
[  374.730841][T10835] openvswitch: netlink: Missing key (keys=40, expected=80)
[  374.745400][T10830] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  374.981011][T10849] tls_set_device_offload: netdev not found
[  375.310051][T10866] __nla_validate_parse: 13 callbacks suppressed
[  375.310073][T10866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1402'.
[  376.728143][T10896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1412'.
[  376.852053][T10901] Bluetooth: MGMT ver 1.23
[  376.917876][T10901] veth0_virt_wifi: entered promiscuous mode
[  377.094366][T10910] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1417'.
[  377.603070][T10898] veth0_virt_wifi: left promiscuous mode
[  378.889150][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  409.667118][ T6109] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.731684][ T6109] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.782812][ T6109] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.831431][ T6109] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.232836][ T6109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  410.244754][ T6109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  410.256520][ T6109] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  410.277332][ T6109] bond0 (unregistering): Released all slaves
[  410.570650][ T6109] hsr_slave_0: left promiscuous mode
[  410.576794][ T6109] hsr_slave_1: left promiscuous mode
[  410.582565][ T6109] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  410.590191][ T6109] batman_adv: batadv0: Removing interface: batadv_slave_0
[  410.600907][ T6109] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  410.608466][ T6109] batman_adv: batadv0: Removing interface: batadv_slave_1
[  410.628266][ T6109] batadv0: left promiscuous mode
[  410.633738][ T6109] veth1_macvtap: left promiscuous mode
[  410.639812][ T6109] veth0_macvtap: left promiscuous mode
[  410.645495][ T6109] veth1_vlan: left promiscuous mode
[  410.652016][ T6109] veth0_vlan: left promiscuous mode
[  440.338927][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  462.222395][T10922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1420'.
[  462.243640][T10923] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1422'.
[  462.253340][T10925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1423'.
[  462.346444][T10930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1421'.
[  462.350353][T10929] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1424'.
[  462.459050][T10936] sctp: [Deprecated]: syz.2.1425 (pid 10936) Use of int in max_burst socket option deprecated.
[  462.459050][T10936] Use struct sctp_assoc_value instead
[  462.481532][T10936] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1425'.
[  463.074889][T10939] sch_fq: defrate 117 ignored.
[  463.183980][T10943] batman_adv: batadv0: Adding interface: ip6gretap2
[  463.191160][T10943] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  463.224130][T10943] batman_adv: batadv0: Not using interface ip6gretap2 (retrying later): interface not active
[  463.258414][T10946] macsec0: entered promiscuous mode
[  463.291432][T10946] macsec0 (unregistering): left promiscuous mode
[  463.401211][T10952] xt_TCPMSS: Only works on TCP SYN packets
[  463.520676][T10958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1433'.
[  463.666713][T10962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1435'.
[  463.688214][T10962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1435'.
[  463.708915][T10962] netlink: 'syz.2.1435': attribute type 14 has an invalid length.
[  463.728020][T10962] netlink: 'syz.2.1435': attribute type 12 has an invalid length.
[  464.105109][T10977] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  464.127562][T10981] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1444'.
[  464.404937][T10994] netlink: 'syz.0.1449': attribute type 14 has an invalid length.
[  464.414044][T10994] netlink: 'syz.0.1449': attribute type 12 has an invalid length.
[  464.603279][T11009] sctp: [Deprecated]: syz.3.1451 (pid 11009) Use of int in max_burst socket option.
[  464.603279][T11009] Use struct sctp_assoc_value instead
[  464.632890][T11009] netlink: 'syz.3.1451': attribute type 10 has an invalid length.
[  464.646978][T11009] veth0_vlan: left promiscuous mode
[  464.653541][T11009] veth0_vlan: entered promiscuous mode
[  464.697576][T11009] team0: Device veth0_vlan failed to register rx_handler
[  465.411758][T11040] netlink: 'syz.2.1464': attribute type 21 has an invalid length.
[  465.424372][T11040] netlink: 'syz.2.1464': attribute type 5 has an invalid length.
[  465.439764][T11040] netlink: 'syz.2.1464': attribute type 6 has an invalid length.
[  466.159126][T11076] team0: Device gtp0 is of different type
[  466.210182][T11075] team0: Device gtp0 is of different type
[  466.685571][    C0] vcan0: j1939_tp_rxtimer: 0xffff888028d1bc00: rx timeout, send abort
[  466.692624][T11107] ip6tnl1: entered promiscuous mode
[  466.700884][T11107] ip6tnl1: entered allmulticast mode
[  467.187075][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880548e1800: rx timeout, send abort
[  467.195721][    C0] vcan0: j1939_tp_rxtimer: 0xffff888028d1bc00: abort rx timeout. Force session deactivation
[  467.496151][T11134] __nla_validate_parse: 11 callbacks suppressed
[  467.496175][T11134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1493'.
[  467.520312][T11134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1493'.
[  467.535138][T11134] netlink: 'syz.1.1493': attribute type 14 has an invalid length.
[  467.543227][T11134] netlink: 'syz.1.1493': attribute type 12 has an invalid length.
[  467.695377][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880548e1800: abort rx timeout. Force session deactivation
[  469.096581][T11137] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1494'.
[  469.483741][T11161] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1501'.
[  469.574392][T11171] netlink: 272 bytes leftover after parsing attributes in process `syz.1.1503'.
[  469.590551][T11171] netlink: 272 bytes leftover after parsing attributes in process `syz.1.1503'.
[  469.648946][T11171] openvswitch: netlink: IP tunnel dst address not specified
[  469.720169][T11184] netlink: 'syz.3.1508': attribute type 1 has an invalid length.
[  469.827195][T11186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1509'.
[  469.874763][T11186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1509'.
[  469.903097][T11186] netlink: 'syz.2.1509': attribute type 14 has an invalid length.
[  469.913076][T11186] netlink: 'syz.2.1509': attribute type 6 has an invalid length.
[  470.094803][T11199] netlink: 'syz.0.1516': attribute type 1 has an invalid length.
[  470.264154][T11208] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  470.661381][T11223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1523'.
[  470.690226][T11221] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1522'.
[  470.707067][T11223] netlink: 'syz.1.1523': attribute type 14 has an invalid length.
[  470.879880][T11228] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  471.310043][T11249] bond1: entered promiscuous mode
[  471.315493][T11249] 8021q: adding VLAN 0 to HW filter on device bond1
[  471.388563][T11253] netlink: 'syz.1.1533': attribute type 1 has an invalid length.
[  471.692666][T11273] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  471.994537][T11290] netlink: 'syz.5.1547': attribute type 1 has an invalid length.
[  472.003722][T11292] lo: left promiscuous mode
[  472.010161][T11292] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  472.051247][T11290] bond2: entered promiscuous mode
[  472.066826][T11290] bond2: entered allmulticast mode
[  472.105036][T11290] batadv1: entered allmulticast mode
[  472.126453][T11290] 8021q: adding VLAN 0 to HW filter on device batadv1
[  472.145096][T11290] bond2: (slave batadv1): making interface the new active one
[  472.181325][T11290] batadv1: entered promiscuous mode
[  472.199485][T11290] bond2: (slave batadv1): Enslaving as an active interface with an up link
[  472.239192][T11300] bond2: left promiscuous mode
[  472.244026][T11300] batadv1: left promiscuous mode
[  472.261537][T11300] bond2: left allmulticast mode
[  472.296850][T11300] 8021q: adding VLAN 0 to HW filter on device bond2
[  472.548556][T11323] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  472.613386][T11325] __nla_validate_parse: 15 callbacks suppressed
[  472.613407][T11325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1556'.
[  472.656515][T11325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1556'.
[  472.666507][T11325] netlink: 'syz.1.1556': attribute type 14 has an invalid length.
[  472.705395][T11325] netlink: 'syz.1.1556': attribute type 12 has an invalid length.
[  472.730998][T11331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1557'.
[  472.884498][T11341] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1560'.
[  472.917511][T11341] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1560'.
[  473.024538][T11348] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1562'.
[  473.066762][T11350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1564'.
[  473.071018][T11348] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1562'.
[  473.165807][T11355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1564'.
[  473.359607][T11358] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  473.369020][T11358] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  473.378294][T11358] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  473.387387][T11358] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  473.554653][T11365] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  473.558400][T11360] syzkaller0: entered promiscuous mode
[  473.601796][T11360] syzkaller0: entered allmulticast mode
[  473.725485][T11368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1569'.
[  473.941293][T11376] netlink: 'syz.0.1573': attribute type 11 has an invalid length.
[  476.229969][T11398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  476.306775][T11398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  476.361047][T11398] batadv_slave_1: entered promiscuous mode
[  476.404699][T11398] batman_adv: batadv0: Interface activated: batadv_slave_1
[  476.625093][T11417] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  476.988212][T11426] netlink: 'syz.0.1584': attribute type 14 has an invalid length.
[  476.996527][T11426] netlink: 'syz.0.1584': attribute type 12 has an invalid length.
[  477.025451][T11425] netlink: zone id is out of range
[  477.031061][T11427] netlink: zone id is out of range
[  477.038059][T11425] netlink: zone id is out of range
[  477.044296][T11427] netlink: zone id is out of range
[  477.069028][T11427] netlink: zone id is out of range
[  477.074197][T11427] netlink: zone id is out of range
[  477.085054][T11425] netlink: zone id is out of range
[  477.102289][T11427] netlink: zone id is out of range
[  477.126452][T11425] netlink: zone id is out of range
[  477.130111][T11427] netlink: zone id is out of range
[  477.161860][T11433] netlink: 'syz.2.1587': attribute type 8 has an invalid length.
[  478.106953][T11466] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  478.224383][T11472] netlink: 'syz.0.1598': attribute type 13 has an invalid length.
[  478.311556][T11472] gretap0: refused to change device tx_queue_len
[  478.316862][T11476] __nla_validate_parse: 7 callbacks suppressed
[  478.316879][T11476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1598'.
[  478.348544][T11476] netlink: 'syz.0.1598': attribute type 21 has an invalid length.
[  478.442913][T11478] sctp: [Deprecated]: syz.2.1599 (pid 11478) Use of int in max_burst socket option.
[  478.442913][T11478] Use struct sctp_assoc_value instead
[  478.475811][T11478] netlink: 'syz.2.1599': attribute type 10 has an invalid length.
[  478.638941][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1600'.
[  478.853753][T11486] FAULT_INJECTION: forcing a failure.
[  478.853753][T11486] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  478.881603][T11486] CPU: 1 UID: 0 PID: 11486 Comm: syz.0.1602 Not tainted 6.14.0-rc7-syzkaller-01413-gd9917c7d533c #0
[  478.881636][T11486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  478.881650][T11486] Call Trace:
[  478.881657][T11486]  <TASK>
[  478.881667][T11486]  dump_stack_lvl+0x241/0x360
[  478.881702][T11486]  ? __pfx_dump_stack_lvl+0x10/0x10
[  478.881727][T11486]  ? __pfx__printk+0x10/0x10
[  478.881751][T11486]  ? __pfx_lock_release+0x10/0x10
[  478.881794][T11486]  should_fail_ex+0x40a/0x550
[  478.881834][T11486]  _copy_from_user+0x2d/0xb0
[  478.881865][T11486]  __sys_bpf+0x1be/0x820
[  478.881898][T11486]  ? __pfx___sys_bpf+0x10/0x10
[  478.881942][T11486]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  478.881979][T11486]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  478.882014][T11486]  ? do_syscall_64+0x100/0x230
[  478.882052][T11486]  __x64_sys_bpf+0x7c/0x90
[  478.882081][T11486]  do_syscall_64+0xf3/0x230
[  478.882113][T11486]  ? clear_bhb_loop+0x35/0x90
[  478.882147][T11486]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  478.882176][T11486] RIP: 0033:0x7fb552b8d169
[  478.882195][T11486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  478.882213][T11486] RSP: 002b:00007fb5539f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  478.882236][T11486] RAX: ffffffffffffffda RBX: 00007fb552da5fa0 RCX: 00007fb552b8d169
[  478.882252][T11486] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 0000000000000004
[  478.882267][T11486] RBP: 00007fb5539f1090 R08: 0000000000000000 R09: 0000000000000000
[  478.882279][T11486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  478.882292][T11486] R13: 0000000000000000 R14: 00007fb552da5fa0 R15: 00007ffd99381c48
[  478.882323][T11486]  </TASK>
[  479.086350][T11484] IPv6: NLM_F_CREATE should be specified when creating new route
[  479.094202][T11484] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1601'.
[  479.311249][T11495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1605'.
[  479.320606][T11495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1605'.
[  479.329655][T11495] netlink: 'syz.2.1605': attribute type 14 has an invalid length.
[  479.339548][T11495] netlink: 'syz.2.1605': attribute type 12 has an invalid length.
[  479.593253][T11508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1607'.
[  479.935734][T11521] netem: change failed
[  480.034283][T11529] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1616'.
[  480.215983][T11539] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1620'.
[  480.390962][T11547] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1622'.
[  480.414732][T11547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1622'.
[  481.098002][T11577] netlink: 'syz.0.1633': attribute type 10 has an invalid length.
[  481.206322][ T5838] Bluetooth: hci5: command 0x0405 tx timeout
[  482.615838][T11653] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  482.657378][T11656] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  482.686690][T11650] xt_CT: No such helper "pptp"
[  482.752879][T11658] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  483.002235][T11666] netlink: 'syz.2.1662': attribute type 1 has an invalid length.
[  483.373614][T11686] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  483.436364][T11691] __nla_validate_parse: 12 callbacks suppressed
[  483.436437][T11691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1668'.
[  484.211706][T11695] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1674'.
[  484.281332][T11695] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  484.333726][T11695] netlink: 830 bytes leftover after parsing attributes in process `syz.5.1674'.
[  484.651176][T11715] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1679'.
[  484.700732][T11716] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1678'.
[  484.827892][T11725] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1681'.
[  484.911295][T11727] net_ratelimit: 11 callbacks suppressed
[  484.911318][T11727] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  485.110088][T11731] sctp: [Deprecated]: syz.1.1683 (pid 11731) Use of struct sctp_assoc_value in delayed_ack socket option.
[  485.110088][T11731] Use struct sctp_sack_info instead
[  485.152458][T11734] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1684'.
[  485.327897][T11747] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1687'.
[  485.377211][T11747] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1687'.
[  485.474418][T11752] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1690'.
[  485.586823][T11760] netlink: 'syz.1.1689': attribute type 9 has an invalid length.
[  485.601754][T11760] macvlan0: entered allmulticast mode
[  485.607765][T11760] bond0: entered allmulticast mode
[  485.623210][T11760] bond2: entered allmulticast mode
[  485.641551][T11760] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  485.788092][T11762] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  485.892118][T11762] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  486.010521][T11762] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  486.034758][T11779] netlink: 'syz.0.1698': attribute type 1 has an invalid length.
[  486.043959][T11781] IPv6: addrconf: prefix option has invalid lifetime
[  486.135158][T11779] bond3: entered promiscuous mode
[  486.145089][T11779] 8021q: adding VLAN 0 to HW filter on device bond3
[  486.165379][T11785] ipip0: entered promiscuous mode
[  486.172907][T11785] ipip0: entered allmulticast mode
[  486.198479][T11785] 8021q: adding VLAN 0 to HW filter on device bond3
[  486.205501][T11785] bond3: (slave ipip0): The slave device specified does not support setting the MAC address
[  486.216091][T11785] bond3: (slave ipip0): Setting fail_over_mac to active for active-backup mode
[  486.230143][T11785] bond3: (slave ipip0): making interface the new active one
[  486.240172][T11789] netlink: 'syz.5.1700': attribute type 1 has an invalid length.
[  486.252230][T11785] bond3: (slave ipip0): Enslaving as an active interface with an up link
[  486.359170][T11762] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  486.443321][T11795] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  486.570420][T11762] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  486.607776][T11762] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  486.664512][T11762] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  486.718295][T11762] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  487.176094][T11832] netlink: 'syz.0.1711': attribute type 16 has an invalid length.
[  487.190460][T11832] netlink: 'syz.0.1711': attribute type 17 has an invalid length.
[  487.297130][T11838] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  487.358032][  T979] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  487.385311][T11837] netlink: 'syz.3.1712': attribute type 10 has an invalid length.
[  487.416005][T11837] veth0_vlan: left promiscuous mode
[  487.432340][T11837] veth0_vlan: entered promiscuous mode
[  487.452639][T11837] veth0_vlan: entered allmulticast mode
[  487.488074][T11837] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  487.695394][T11849] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  488.090075][  T979] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  488.627748][T11883] vlan2: entered promiscuous mode
[  488.632988][T11883] vlan2: entered allmulticast mode
[  488.638576][T11883] hsr_slave_1: entered allmulticast mode
[  488.652835][T11883] __nla_validate_parse: 15 callbacks suppressed
[  488.652853][T11883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1727'.
[  488.655047][T11885] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  488.723434][T11887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1727'.
[  488.749957][T11889] netlink: 'syz.1.1730': attribute type 1 has an invalid length.
[  488.767947][T11889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1730'.
[  489.104189][T11905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1732'.
[  489.146263][T11905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1732'.
[  489.155313][T11905] netlink: 'syz.1.1732': attribute type 14 has an invalid length.
[  489.205434][T11905] netlink: 'syz.1.1732': attribute type 12 has an invalid length.
[  489.747155][   T30] audit: type=1107 audit(1742611355.366:11): pid=11910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Àïï'
[  489.773066][T11898] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1729'.
[  489.836843][T11908] netem: change failed
[  490.081954][T11922] xt_CT: You must specify a L4 protocol and not use inversions on it
[  490.312302][T11935] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1744'.
[  490.389331][T11935] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1744'.
[  490.446557][T11943] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  490.962468][T11976] netlink: 'syz.1.1755': attribute type 27 has an invalid length.
[  491.131320][T11989] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  491.247168][T11978] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  491.297188][T11997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1758'.
[  491.922362][T11976] vti0: left promiscuous mode
[  491.936687][T11976] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  491.945993][T11976] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  491.955702][T11976] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  491.965065][T11976] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  491.981033][T11976] geneve2: left promiscuous mode
[  491.996788][T11976] bond0: left allmulticast mode
[  492.001716][T11976] bond2: left allmulticast mode
[  492.012303][T11976] macvlan0: left allmulticast mode
[  492.053902][T11986] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  492.064813][T12018] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  492.871394][T12050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  492.905781][T12050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  492.934898][T12050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  492.937121][T12052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1769'.
[  492.955852][T12050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  493.017302][T12050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  493.050353][T12056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  493.050377][T12055] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  493.075916][T12056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  493.119133][T12050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  493.623219][T12077] netlink: 'syz.3.1780': attribute type 3 has an invalid length.
[  493.669913][T12077] __nla_validate_parse: 2 callbacks suppressed
[  493.669931][T12077] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1780'.
[  493.699624][T12079] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1780'.
[  493.746691][T12079] netlink: 'syz.3.1780': attribute type 3 has an invalid length.
[  493.921455][T12088] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  493.989760][T12093] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  494.571570][T12127] netlink: 'syz.2.1796': attribute type 1 has an invalid length.
[  494.684371][T12135] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  494.889966][T12147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1802'.
[  494.900376][T12151] netlink: 'syz.2.1804': attribute type 3 has an invalid length.
[  495.072612][T12150] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1803'.
[  495.078647][T12160] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1806'.
[  495.268708][T12169] netlink: 'syz.3.1809': attribute type 11 has an invalid length.
[  495.295470][T12169] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1809'.
[  495.370065][T12174] netlink: 'syz.2.1810': attribute type 1 has an invalid length.
[  495.540136][T12182] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  495.706771][T12192] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1815'.
[  495.840132][T12199] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1819'.
[  495.886607][T12199] netlink: 'syz.3.1819': attribute type 10 has an invalid length.
[  495.897379][T12199] macvlan0: entered allmulticast mode
[  495.903651][T12199] veth1_vlan: entered allmulticast mode
[  495.913764][T12199] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  496.154859][T12216] netlink: 'syz.0.1823': attribute type 1 has an invalid length.
[  496.216500][T12219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1824'.
[  496.226865][T12218] netlink: 34 bytes leftover after parsing attributes in process `syz.3.1824'.
[  496.419086][T12228] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  497.748162][T12270] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  499.027454][T12312] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  499.178171][T12314] __nla_validate_parse: 5 callbacks suppressed
[  499.178189][T12314] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1853'.
[  499.571896][T12329] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1857'.
[  500.211007][T12348] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1861'.
[  500.415567][T12352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1862'.
[  500.427003][T12354] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1864'.
[  500.446277][T12352] vlan0: entered allmulticast mode
[  500.456423][T12352] erspan0: entered allmulticast mode
[  501.099088][T12387] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  501.135059][T12381] netdevsim netdevsim1 netdevsim1: entered allmulticast mode
[  501.343459][T12395] Bluetooth: MGMT ver 1.23
[  501.489335][T12398] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1875'.
[  501.552881][T12398] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1875'.
[  501.779352][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  501.877781][T12408] wg1: entered promiscuous mode
[  501.894921][T12408] wg1: entered allmulticast mode
[  502.029158][T12421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1881'.
[  502.141843][T12423] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1882'.
[  502.175137][T12423] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  502.195982][T12423] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  502.206098][T12423] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  502.236982][T12423] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  502.357063][T12428] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  502.447068][T12291] Set syz1 is full, maxelem 65536 reached
[  502.606817][T12432] sctp: [Deprecated]: syz.5.1886 (pid 12432) Use of int in max_burst socket option deprecated.
[  502.606817][T12432] Use struct sctp_assoc_value instead
[  502.654609][T12434] netlink: 'syz.1.1889': attribute type 1 has an invalid length.
[  502.710981][T12440] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1888'.
[  503.216492][T12468] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  503.419034][T12484] netlink: 'syz.5.1901': attribute type 1 has an invalid length.
[  503.455146][T12487] bridge0: port 1(hsr0) entered blocking state
[  503.462072][T12487] bridge0: port 1(hsr0) entered disabled state
[  503.491267][T12487] tipc: Enabling <eth:lo> not permitted
[  503.515016][T12487] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  503.582343][T12487] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  503.944901][T12508] netlink: 'syz.0.1909': attribute type 1 has an invalid length.
[  503.980892][T12508] netlink: 'syz.0.1909': attribute type 1 has an invalid length.
[  504.086787][T12512] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  504.449376][T12531] __nla_validate_parse: 5 callbacks suppressed
[  504.449399][T12531] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1917'.
[  504.465733][T12531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1917'.
[  504.931138][T12550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1922'.
[  505.199919][T12556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1924'.
[  505.270736][T12559] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  505.287215][ T5838] Bluetooth: hci5: command 0x0405 tx timeout
[  506.023789][T12593] netlink: 'syz.5.1935': attribute type 1 has an invalid length.
[  506.454759][T12613] netlink: 87 bytes leftover after parsing attributes in process `syz.3.1942'.
[  506.550692][T12617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1943'.
[  506.981457][T12631] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  507.266089][T12638] ip6tnl2: entered promiscuous mode
[  507.405967][T12645] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1951'.
[  507.452443][T12647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1952'.
[  507.454296][T12649] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1953'.
[  507.481189][T12649] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1953'.
[  507.498456][T12647] ==================================================================
[  507.506572][T12647] BUG: KASAN: slab-use-after-free in udp_tunnel_update_gro_lookup+0xfe/0x2c0
[  507.515384][T12647] Write of size 8 at addr ffff88801bf31e70 by task syz.3.1952/12647
[  507.523385][T12647] 
[  507.525732][T12647] CPU: 0 UID: 0 PID: 12647 Comm: syz.3.1952 Not tainted 6.14.0-rc7-syzkaller-01413-gd9917c7d533c #0
[  507.525757][T12647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  507.525771][T12647] Call Trace:
[  507.525779][T12647]  <TASK>
[  507.525788][T12647]  dump_stack_lvl+0x241/0x360
[  507.525817][T12647]  ? __pfx_dump_stack_lvl+0x10/0x10
[  507.525841][T12647]  ? __pfx__printk+0x10/0x10
[  507.525862][T12647]  ? _printk+0xd5/0x120
[  507.525881][T12647]  ? __virt_addr_valid+0x183/0x530
[  507.525900][T12647]  ? __virt_addr_valid+0x183/0x530
[  507.525921][T12647]  print_report+0x16e/0x5b0
[  507.525946][T12647]  ? __virt_addr_valid+0x183/0x530
[  507.525966][T12647]  ? __virt_addr_valid+0x183/0x530
[  507.525984][T12647]  ? __virt_addr_valid+0x45f/0x530
[  507.526002][T12647]  ? __phys_addr+0xba/0x170
[  507.526021][T12647]  ? udp_tunnel_update_gro_lookup+0xfe/0x2c0
[  507.526047][T12647]  kasan_report+0x143/0x180
[  507.526074][T12647]  ? udp_tunnel_update_gro_lookup+0xfe/0x2c0
[  507.526102][T12647]  udp_tunnel_update_gro_lookup+0xfe/0x2c0
[  507.526128][T12647]  l2tp_tunnel_register+0xf9a/0x19f0
[  507.526154][T12647]  ? lockdep_hardirqs_on+0x99/0x150
[  507.526183][T12647]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  507.526209][T12647]  ? __pfx_l2tp_tunnel_register+0x10/0x10
[  507.526232][T12647]  ? __asan_memset+0x23/0x50
[  507.526251][T12647]  ? lockdep_init_map_type+0xa1/0x910
[  507.526287][T12647]  ? __pfx_lockdep_init_map_type+0x10/0x10
[  507.526320][T12647]  ? __pfx_l2tp_udp_encap_recv+0x10/0x10
[  507.526340][T12647]  ? __pfx_l2tp_udp_encap_err_recv+0x10/0x10
[  507.526359][T12647]  ? __pfx_l2tp_udp_encap_destroy+0x10/0x10
[  507.526383][T12647]  ? l2tp_tunnel_create+0x258/0x400
[  507.526402][T12647]  ? l2tp_tunnel_create+0x2d4/0x400
[  507.526425][T12647]  pppol2tp_connect+0x925/0x1960
[  507.526455][T12647]  ? __pfx_pppol2tp_connect+0x10/0x10
[  507.526478][T12647]  ? aa_sk_perm+0x96d/0xab0
[  507.526519][T12647]  __sys_connect+0x288/0x2d0
[  507.526541][T12647]  ? __pfx___sys_connect+0x10/0x10
[  507.526569][T12647]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  507.526600][T12647]  ? do_syscall_64+0x100/0x230
[  507.526631][T12647]  __x64_sys_connect+0x7a/0x90
[  507.526653][T12647]  do_syscall_64+0xf3/0x230
[  507.526684][T12647]  ? clear_bhb_loop+0x35/0x90
[  507.526716][T12647]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  507.526743][T12647] RIP: 0033:0x7fb660f8d169
[  507.526762][T12647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  507.526780][T12647] RSP: 002b:00007fb661d36038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  507.526802][T12647] RAX: ffffffffffffffda RBX: 00007fb6611a5fa0 RCX: 00007fb660f8d169
[  507.526817][T12647] RDX: 0000000000000026 RSI: 0000200000000000 RDI: 0000000000000004
[  507.526848][T12647] RBP: 00007fb66100e2a0 R08: 0000000000000000 R09: 0000000000000000
[  507.526861][T12647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  507.526873][T12647] R13: 0000000000000000 R14: 00007fb6611a5fa0 R15: 00007ffcd2bd70d8
[  507.526897][T12647]  </TASK>
[  507.526905][T12647] 
[  507.828043][T12647] Allocated by task 11075:
[  507.832477][T12647]  kasan_save_track+0x3f/0x80
[  507.837169][T12647]  __kasan_slab_alloc+0x66/0x80
[  507.842109][T12647]  kmem_cache_alloc_noprof+0x1d9/0x380
[  507.847575][T12647]  sk_prot_alloc+0x58/0x210
[  507.852087][T12647]  sk_alloc+0x3e/0x370
[  507.856161][T12647]  inet_create+0x648/0xea0
[  507.860587][T12647]  __sock_create+0x4c0/0xa30
[  507.865184][T12647]  __sys_socket+0x150/0x3c0
[  507.869688][T12647]  __x64_sys_socket+0x7a/0x90
[  507.874378][T12647]  do_syscall_64+0xf3/0x230
[  507.878895][T12647]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  507.884799][T12647] 
[  507.887127][T12647] Freed by task 11075:
[  507.891189][T12647]  kasan_save_track+0x3f/0x80
[  507.895873][T12647]  kasan_save_free_info+0x40/0x50
[  507.900910][T12647]  __kasan_slab_free+0x59/0x70
[  507.905768][T12647]  kmem_cache_free+0x195/0x410
[  507.910538][T12647]  __sk_destruct+0x4fd/0x690
[  507.915152][T12647]  inet_release+0x17d/0x200
[  507.919662][T12647]  sock_close+0xbc/0x240
[  507.923924][T12647]  __fput+0x3e9/0x9f0
[  507.927924][T12647]  task_work_run+0x24f/0x310
[  507.932515][T12647]  do_exit+0xa2a/0x2940
[  507.936701][T12647]  do_group_exit+0x207/0x2c0
[  507.941383][T12647]  get_signal+0x168c/0x1720
[  507.945901][T12647]  arch_do_signal_or_restart+0x96/0x860
[  507.951454][T12647]  syscall_exit_to_user_mode+0xce/0x340
[  507.957011][T12647]  do_syscall_64+0x100/0x230
[  507.961607][T12647]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  507.967504][T12647] 
[  507.969823][T12647] The buggy address belongs to the object at ffff88801bf31740
[  507.969823][T12647]  which belongs to the cache UDP of size 1856
[  507.983270][T12647] The buggy address is located 1840 bytes inside of
[  507.983270][T12647]  freed 1856-byte region [ffff88801bf31740, ffff88801bf31e80)
[  507.997349][T12647] 
[  507.999679][T12647] The buggy address belongs to the physical page:
[  508.006094][T12647] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88801bf32e80 pfn:0x1bf30
[  508.016164][T12647] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  508.024670][T12647] memcg:ffff88807b254801
[  508.028909][T12647] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  508.036889][T12647] page_type: f5(slab)
[  508.040869][T12647] raw: 00fff00000000040 ffff888143684640 0000000000000000 0000000000000001
[  508.049466][T12647] raw: ffff88801bf32e80 0000000000100009 00000000f5000000 ffff88807b254801
[  508.058069][T12647] head: 00fff00000000040 ffff888143684640 0000000000000000 0000000000000001
[  508.066739][T12647] head: ffff88801bf32e80 0000000000100009 00000000f5000000 ffff88807b254801
[  508.075427][T12647] head: 00fff00000000003 ffffea00006fcc01 ffffffffffffffff 0000000000000000
[  508.084098][T12647] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[  508.092763][T12647] page dumped because: kasan: bad access detected
[  508.099182][T12647] page_owner tracks the page as allocated
[  508.104895][T12647] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 4008487419, free_ts 0
[  508.124527][T12647]  post_alloc_hook+0x1f4/0x240
[  508.129319][T12647]  get_page_from_freelist+0x365c/0x37a0
[  508.134867][T12647]  __alloc_frozen_pages_noprof+0x292/0x710
[  508.140676][T12647]  alloc_pages_mpol+0x311/0x660
[  508.145531][T12647]  allocate_slab+0x8f/0x3a0
[  508.150059][T12647]  ___slab_alloc+0xc27/0x14a0
[  508.154746][T12647]  __slab_alloc+0x58/0xa0
[  508.159085][T12647]  kmem_cache_alloc_noprof+0x268/0x380
[  508.164550][T12647]  sk_prot_alloc+0x58/0x210
[  508.169060][T12647]  sk_alloc+0x3e/0x370
[  508.173134][T12647]  inet_create+0x648/0xea0
[  508.177593][T12647]  __sock_create+0x4c0/0xa30
[  508.182191][T12647]  inet_ctl_sock_create+0xc2/0x250
[  508.187308][T12647]  igmp_net_init+0xbb/0x150
[  508.191812][T12647]  ops_init+0x349/0x5b0
[  508.195971][T12647]  register_pernet_operations+0x30d/0x630
[  508.201693][T12647] page_owner free stack trace missing
[  508.207051][T12647] 
[  508.209385][T12647] Memory state around the buggy address:
[  508.215032][T12647]  ffff88801bf31d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  508.223092][T12647]  ffff88801bf31d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  508.231153][T12647] >ffff88801bf31e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  508.239215][T12647]                                                              ^
[  508.246930][T12647]  ffff88801bf31e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  508.254996][T12647]  ffff88801bf31f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  508.263055][T12647] ==================================================================
[  508.272597][T12647] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  508.279822][T12647] CPU: 0 UID: 0 PID: 12647 Comm: syz.3.1952 Not tainted 6.14.0-rc7-syzkaller-01413-gd9917c7d533c #0
[  508.290591][T12647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  508.300652][T12647] Call Trace:
[  508.303936][T12647]  <TASK>
[  508.306876][T12647]  dump_stack_lvl+0x241/0x360
[  508.311560][T12647]  ? __pfx_dump_stack_lvl+0x10/0x10
[  508.316759][T12647]  ? __pfx__printk+0x10/0x10
[  508.321353][T12647]  ? vscnprintf+0x5d/0x90
[  508.325684][T12647]  panic+0x349/0x880
[  508.329580][T12647]  ? check_panic_on_warn+0x21/0xb0
[  508.334724][T12647]  ? __pfx_panic+0x10/0x10
[  508.339141][T12647]  ? mark_lock+0x9a/0x360
[  508.343475][T12647]  ? _raw_spin_unlock_irqrestore+0xd8/0x140
[  508.349392][T12647]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  508.355291][T12647]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  508.361624][T12647]  ? print_report+0x519/0x5b0
[  508.366315][T12647]  check_panic_on_warn+0x86/0xb0
[  508.371264][T12647]  ? udp_tunnel_update_gro_lookup+0xfe/0x2c0
[  508.377251][T12647]  end_report+0x77/0x160
[  508.381502][T12647]  kasan_report+0x154/0x180
[  508.386024][T12647]  ? udp_tunnel_update_gro_lookup+0xfe/0x2c0
[  508.392016][T12647]  udp_tunnel_update_gro_lookup+0xfe/0x2c0
[  508.397857][T12647]  l2tp_tunnel_register+0xf9a/0x19f0
[  508.403163][T12647]  ? lockdep_hardirqs_on+0x99/0x150
[  508.408378][T12647]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  508.414285][T12647]  ? __pfx_l2tp_tunnel_register+0x10/0x10
[  508.420013][T12647]  ? __asan_memset+0x23/0x50
[  508.424607][T12647]  ? lockdep_init_map_type+0xa1/0x910
[  508.429994][T12647]  ? __pfx_lockdep_init_map_type+0x10/0x10
[  508.435813][T12647]  ? __pfx_l2tp_udp_encap_recv+0x10/0x10
[  508.441456][T12647]  ? __pfx_l2tp_udp_encap_err_recv+0x10/0x10
[  508.447440][T12647]  ? __pfx_l2tp_udp_encap_destroy+0x10/0x10
[  508.453340][T12647]  ? l2tp_tunnel_create+0x258/0x400
[  508.458541][T12647]  ? l2tp_tunnel_create+0x2d4/0x400
[  508.463743][T12647]  pppol2tp_connect+0x925/0x1960
[  508.468706][T12647]  ? __pfx_pppol2tp_connect+0x10/0x10
[  508.474085][T12647]  ? aa_sk_perm+0x96d/0xab0
[  508.478607][T12647]  __sys_connect+0x288/0x2d0
[  508.483202][T12647]  ? __pfx___sys_connect+0x10/0x10
[  508.488325][T12647]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  508.494666][T12647]  ? do_syscall_64+0x100/0x230
[  508.499449][T12647]  __x64_sys_connect+0x7a/0x90
[  508.504229][T12647]  do_syscall_64+0xf3/0x230
[  508.508745][T12647]  ? clear_bhb_loop+0x35/0x90
[  508.513431][T12647]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.519415][T12647] RIP: 0033:0x7fb660f8d169
[  508.523830][T12647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  508.543460][T12647] RSP: 002b:00007fb661d36038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  508.551885][T12647] RAX: ffffffffffffffda RBX: 00007fb6611a5fa0 RCX: 00007fb660f8d169
[  508.559963][T12647] RDX: 0000000000000026 RSI: 0000200000000000 RDI: 0000000000000004
[  508.567950][T12647] RBP: 00007fb66100e2a0 R08: 0000000000000000 R09: 0000000000000000
[  508.575943][T12647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  508.583930][T12647] R13: 0000000000000000 R14: 00007fb6611a5fa0 R15: 00007ffcd2bd70d8
[  508.591954][T12647]  </TASK>
[  508.595329][T12647] Kernel Offset: disabled
[  508.599654][T12647] Rebooting in 86400 seconds..