last executing test programs: 3.574258709s ago: executing program 4 (id=6529): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1234}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, r0}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2, r2}, &(0x7f0000000600), &(0x7f0000000640)=r1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x7, &(0x7f0000000a80)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000bc0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 3.328009685s ago: executing program 4 (id=6533): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) listen(r4, 0x0) accept$ax25(r4, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x1000000, 0xe, 0x0, &(0x7f0000000400)="e0b9547ed387c6e950a4e1f95bec", 0x0, 0xf, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r5}, 0x18) nanosleep(&(0x7f0000000bc0)={0x0, 0x3938700}, 0x0) socket$inet6(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61158800000000006113500000010100bfa000000000000007000000ee0016055e03010000000000160500000000000069163e0000000000bf07000000000000260507000fff07206706000007000000140600001be60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r7, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r2], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) close(r1) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x4, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800) sendmsg$nl_route(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=ANY=[@ANYBLOB="280000001100010027bd7000ffdbdf2500000000", @ANYRES32=r7, @ANYBLOB="c000000000140000ef4da59a0f000800"], 0x28}, 0x1, 0x0, 0x0, 0x60000145}, 0x40804) 2.905768463s ago: executing program 1 (id=6542): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x0, 0x4}, 0xfd}, 0x18) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000040000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x200000000, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000003e80)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)={0x68, 0x13, 0x200, 0x70bd28, 0x25dfdbfb, "", [@typed={0x8, 0x72, 0x0, 0x0, @fd=r2}, @typed={0x8, 0xc, 0x0, 0x0, @pid}, @nested={0x4, 0x137}, @generic="89c8ddd6a40e0c8a5b4fa7de8f023d7f9cebe3e7e59c0c29", @generic="c067ba04a2d797d6448933d5169242167d6ae0010a42233d4570ce83fe3c1b86717d5c3bdfa7100fa6"]}, 0x68}, {&(0x7f0000000340)={0x28, 0x33, 0x300, 0x70bd28, 0x25dfdbfb, "", [@typed={0xc, 0xf6, 0x0, 0x0, @u64=0x3}, @nested={0xc, 0x7c, 0x0, 0x1, [@typed={0x8, 0xf8, 0x0, 0x0, @pid}]}]}, 0x28}, {&(0x7f00000012c0)={0x181c, 0x41, 0x100, 0x70bd2a, 0x25dfdbfe, "", [@typed={0xc, 0xe0, 0x0, 0x0, @u64=0xfff}, @nested={0x2bc, 0x3e, 0x0, 0x1, [@typed={0xe6, 0xab, 0x0, 0x0, @binary="865edbfbfb6b4b3970b94e4256598fa6a723c0ecf03ae438196651dc1ed13a7d102449e414dad39a40ebd638f1f93dfd63bfdb45bf897c08c429966067e8e7c705a77cec671914dbd11dc1881373d83213d29ab42f161d77b94bc9ee25c4d32f7a3213d04486d9eb4e480128ce2760d71c44e22bdebf679f9b2d40e843c5522a6648f31141526b123bf4e55943684fe49a1901cfe4d5f1b6225535d3df7dd1b5da2649aca368fa0fc357fb355c5dc2e67a3ff553ec2229f13acd10f84cf85a4a3a7f93be5cc6497bbb10f2509b9eadf9c61c0372cfce1192985c751c15602eeeefeb"}, @generic="070903b4caf3862402c32212d345c910c35d58627797b82c1ae69c796009bc5ea16ba985a86c315b2f8cac98e51457c56fe12815c1bdfc67f196508f1e4cbe808f1eb0f457df0d2e2b59e2abc4fede5e3840a2cb143b33a0b02f42ddb5346eb8d0dc315c01cd9b84e98d2a99d58023493f0478799025a8f2e6a2becf239105", @typed={0x8, 0xe4, 0x0, 0x0, @fd}, @generic="5327b4a8593ca5e26acaf78769b9eac2ef714e2675479032545c8b542043e6c70cc68137e310c4c1355283e644718afaf4bb247753566247e0044da9280ab2734fd9c7e11fc2e7b673eab06535af6255ae7c5fbdc1f51516bcec8f489f919db2823c57d3631fdffb7d4b65", @nested={0x4, 0xe}, @generic="ef1260ac425ab0f2928f71d1a790020c7803469e3eaf7fbef8b2e50a2dd2073678b649b8b059abb03594aeadf274c1c9466713ae91855d5533b7e52c02f4f20daed3512eae5b0a73a1a8e399f3823210424450d85fd0a00ea3fee30739b81f43242f8f09d7f2b021e3c589250521ba93028e47ced21fcc5016a68eaf0a08ca1e882c8c62c1644bd59af1295e63f7ea7938b8fab93f6768b6e78fee19c521ea2ff38ee8d0a1d28af419ca13dd60a40d257a4ddd34b7bffa20981cec1327e138ef9e4dd569365e296fed384798dd3c322e4c4fd1f63212", @nested={0x4, 0x7e}]}, @nested={0x11f0, 0xca, 0x0, 0x1, [@typed={0x1004, 0x8e, 0x0, 0x0, @binary="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"}, @nested={0x4, 0x13d}, @nested={0x4, 0x134}, @nested={0x4, 0xdf}, @generic="c1950597b03bd71513f04c18333ea34a04c6174864840ebd4c2b2be94798c45d3a1d8a572210948ecaddc88ca77e4282d2cbd6463e08da0e0c36c934b067e093e5eda3f2c21486035d77f1542b754e8ebd587a518d5a53368647bdb60aed055f355fa705df5eca010d0bbb17cadcd691f258460832af909bb3d8d4fb63607dc66dd2643a5a77a34d296bcdde1ee7d6aa41c0db308177e24a1015698a44a28dd920124c0c12", @generic="38900378c46d078510e217c25a7a0cacc16201568d0e5f81fa0730a2c0fddc940540a2c3db5c13d5e500ab1816449036aa7bffd528691bcd70575037d0022e6f3a6bc3f3350f2f16773957e477c2badd8df774ef09e817328985b00867c4d810536e18b9afe8545f441c3a2de16d0c9a4b7c6f93a6af7b2548ef51786132f4164a6ef969dea5f0ffd02551f3441f684cfa7f8a810b862dd796afc3bdd9ab01a0b5a1602f821fc7922ac088fc8a18519eb6b2698f4078dc3da54e99bb5e36bfc8d0580eaba4a584a848fc9b825cf8b6f1d6fb", @generic="d0bb530ec09ef1688f559ea45ab3da271538f9b44f4ba06f301372e80a3f8a57ae699eb15cfddbad7559e6f88180cea2637024920b125fe0427c4c89636d6f304bba1951446f97da88a56b02ef1bb5c15fdb9af690c13e806b9109d81c0b88ff49afaa3f59"]}, @nested={0x85, 0x9f, 0x0, 0x1, [@nested={0x4, 0x143}, @generic="13b51989db2d4093adff01b9726e5071ea87c8aac1523dac35b26686433a626d061f1ad7100c294975381da99a9323cd6c7149af244e98c176af8978cf1d0ee716dfb0b47fdd0f361dd81488808b444443e408136c6a81e516b433f619bb40b47109c4892730573837622d658f03ca9ccde4c3e003bd96fe3f6df30bf4"]}, @generic="bfc6", @generic="93f08681ce9f885f1da8538e1fe407ddf9429d61d56d8f644207a91de757420db5f53470ead95e6b00a63c26f62bad8b3601abe02db5378bbca7c2a5843910f2bdaa448a57457a374c07dcac72974da1476a235944d7ea7f153e26486c5acb1bb623b9ba75a5fb2a70d6f3f06b1b898d262af3361039cf9dc72f2d6baf2605479a7f9830ef46c9d3ea1b3b296bf3f09b0eb9acc21b73c4de804908c2b2f2f5fea912476bc7e5fd3dca19f400d7bb243f8e056fc82499684b37883eba07", @generic="c4a41ec4e3921043f646f627edd7c286f8d8b6a27ff47a4e2c5b1692991d72e8aaefc587643175f09cc66909a5615d39a544fd79e1ff97704b49090ccf5535f73034833e7aed6520fb3468d2e417c698ddfb3d8100582093e64a7fe93ee3a1e089fae35203369d1183", @generic="dd6f53cc250793eb2253699fe3dde3e27490e60bc1f5c97b393b61dc3041500aa21fbc6dea749b1a8510e4df08085bea6d1189b5309d09c8b4f7b111944e38da97b7fb3a4cc996a1c4b43053d8d974a44d69f637038010ecb7910871003854c077c186e58a16cb22945cb5fa1ea4348c6eda8aca23b425aeb23728853e5be4ff53733076693b1b1f88d26dfd8779c43359e36a6ce8b4ff3f0d7cbe0ba0822519b23b67c42fbc046115f10f24f90fd0d1552e6b6f86fa922810d06665d5f405d8e4d7caa89b107608c1c69e7c0fb79d7915cfab", @typed={0x14, 0xe2, 0x0, 0x0, @ipv6=@remote}, @generic="ac535b88d57bffabe8e7b0f34ee470f283bd0c459c6478ee5eec54bfc9b895bdf1fc0e44eb0f1b4792c10435a88b2e536c23efedef3783a7bde79f0b8f2678b501bd777b91a445320116ddf6dd505d71f569b90d6f01875b967ace74ee82f8ceffde35435cf3183d6b1f32dac4b130813a807b231f31f914ff6bd0faf42c38ae603ea1ef1cc519c2ddd8f988b3448fcea023680e940201fa51a724bb7cd234460e6a869cb63ec365a4505a1f8fe69a23f591c584fcded37a6a2f"]}, 0x181c}, {0x0}, {&(0x7f0000004000)={0x7ac, 0x3b, 0x8, 0x70bd2d, 0x25dfdbfc, "", [@nested={0xf1, 0xc5, 0x0, 0x1, [@typed={0x14, 0xef, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @typed={0x8, 0x14e, 0x0, 0x0, @fd=r6}, @generic="4ecf2bcc4e22865e3b808cb38d3cd502c05afcf37babdc9b8cd8ad05e52ea38ebb4b9bf2f6c2daa1554b0745d45e7055777ddb210215d354dffdb211498f86a6eab8c36d5cd4e4c2030eddf774fbb606b622022a997902cc4c0769cd7ff8b6f59eb82be926334cee9d0a5ce5beb8ad", @typed={0x4, 0x149}, @generic="dbb030c4ba45f6d8d5b8471fb798451a7411a7c8a2a1824f1bbe8f8e6696c69d0c180feb81505dd8e39e74c2a6164f0fec2e4fe16fe4c45aee4292de0a2bfb5040afd60305105bbc8be25a3711599fa7f8eed821998eef81f186", @nested={0x4, 0xb4}]}, @nested={0x6a5, 0x13c, 0x0, 0x1, [@nested={0x4, 0x51}, @nested={0x4, 0x103}, @generic="4073fd6608ce34e111bdc3d953ef8a40d07aba0ef55381aa7a074f4f0480589b37c195b5d97c87ffadcf58ff3c5f3e1944a9f499942728ea346ed8304700e26f27907315", @typed={0xc, 0x121, 0x0, 0x0, @u64=0x10001}, @generic="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"]}]}, 0x7ac}], 0x5, &(0x7f0000003d00)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r7, 0xffffffffffffffff, r6, r7, r5]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r3, r5, r0, r3]}}, @rights={{0x34, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r6, r2, r3, r7]}}, @rights={{0x2c, 0x1, 0x1, [r2, r5, r3, r2, r7, 0xffffffffffffffff, r4]}}], 0x170, 0x20044081}, 0x4000050) 2.633299147s ago: executing program 0 (id=6547): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x7, 0x700, 0x6, 0x5, {{0x17, 0x4, 0x0, 0xf, 0x5c, 0x64, 0x0, 0x7e, 0x4, 0x0, @broadcast, @multicast2, {[@lsrr={0x83, 0x13, 0x3f, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @remote]}, @end, @cipso={0x86, 0x10, 0x3, [{0x5, 0xa, "335c30fb511676ee"}]}, @rr={0x7, 0x1f, 0xd9, [@local, @multicast2, @local, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x39}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x3, 0x19}]}}}}}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000200)={0x1d, r5, 0x1, {0x1, 0xff, 0x2}, 0x6f01bcc8e6cb9140}, 0x18) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001c00)=ANY=[@ANYBLOB="28040000", @ANYRES16=r10, @ANYBLOB="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", @ANYRES32=r11], 0x428}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x8, 0x40, 0x3, 0x10, {{0xb, 0x4, 0x3, 0x34, 0x2c, 0x68, 0x0, 0x80, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp_addr={0x44, 0x14, 0x3f, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x77}, {@multicast2, 0x8}]}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000640)={0x180, r2, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xa0, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x20000001}, 0x8081) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181004000000001000000000000000e000a000d00000002800200121f", 0x2e}], 0x1}, 0x0) 2.559841934s ago: executing program 3 (id=6549): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) (fail_nth: 3) 2.245246251s ago: executing program 3 (id=6550): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 2.172987779s ago: executing program 4 (id=6552): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24008810) 2.171856676s ago: executing program 0 (id=6553): syz_emit_ethernet(0x22, &(0x7f0000000280)={@local, @empty, @void, {@llc={0x4, {@snap={0xab, 0xaa, "d0", "b23386", 0x806, "ff17b1fb8fb2e63d3cc570b3"}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7a0a0500212b0042440012800b000100697036746e6c000034000280140003000000000000000000000800000000003f14000200fe80000000000000000000000000000f08000100", @ANYBLOB='#'], 0x64}}, 0x24000000) 2.075805993s ago: executing program 2 (id=6554): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0xfffffd1d, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x28}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000}, 0x8010) socket(0x2c, 0x800, 0x0) 2.011883369s ago: executing program 3 (id=6555): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000000400)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x800, @loopback}, 0x1c, 0x0}}], 0x1, 0x60040000) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028005000e000900000014000300626f"], 0x50}}, 0x40) recvmmsg(r1, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xcf}], 0x1, 0x40012002, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000210108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x4) 2.011654566s ago: executing program 0 (id=6556): r0 = socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000280)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='b ', @ANYRESDEC=r1], 0xa) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e120602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) syz_emit_ethernet(0x8a, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x1a, 0x0, 0x0, 0x0, 0x0, {[@nop, @nop, @eol, @mss={0x2, 0x4, 0x5}, @md5sig={0x13, 0x12, "ab519c9940eb739563a3c52b43aee4a2"}, @sack={0x5, 0x26, [0x9, 0xffffff4c, 0x43, 0x1, 0x8, 0xfa39, 0x8000, 0x8, 0x9]}, @md5sig={0x13, 0x12, "625fbe96fc97dc524d8a397b7b38957f"}]}}}}}}}, 0x0) 1.969105048s ago: executing program 1 (id=6557): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x40000000}, 0x0) 1.888013501s ago: executing program 2 (id=6558): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000003a72d081a30109567be374e38d3ad0f200bdd6ba390d19c2641039e5fb68ba1a2192192b5f6797ef15237782b9257bdab8a37583c3c9cfca78b77de8f27825afbb5eb985f2ffaa892b6b083ac6409b79366ea33994ee539edd11835fc556a2a060b035cb1f91e6554ad17e1efa64ce5f6775eaa8b298cc1b1505f27bde35e1dc7e32fe1a2bcd6adf1f864daed2ee759c84d69d76757e1366676201f3e572d9b54ec8c6f82bb341830ac9dc83a6cbebfd2d7b60421e8e70e6d3a13f1772a639bd5b3cc609e923f27f53d5", @ANYRES16=r2, @ANYBLOB="01002cbd70004400000005000000080009000200000008000c00a80a0000060001000800000008000b000200000005001400fe0000000500130009000000"], 0x44}}, 0x4) 1.742793135s ago: executing program 1 (id=6559): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000f80000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82100000000000a6020000f8ffffffb703000008000000b7030000000000000c0000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.742099471s ago: executing program 3 (id=6560): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@getneightbl={0x14, 0x42, 0x20, 0x70bd2d, 0x25dfdc00, {}, ["", ""]}, 0x65}}, 0x4044004) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000700850600008f02000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000040)='vlan0\x00') ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000000680)={0x8c0, 0x1, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) 1.689931534s ago: executing program 2 (id=6561): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x4, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) socket(0x2, 0x80805, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xcdb281c6bf69a511}, 0xc000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2000000) 1.667951453s ago: executing program 3 (id=6562): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x4000}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x3, 0x10004, 0x5}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r2}, 0x10) bpf$OBJ_GET_PROG(0x9, &(0x7f00000000c0)=@generic={0x0, 0x11}, 0x18) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x4e20, @multicast2}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r7, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}], 0x20, 0x40044}}], 0x1, 0x14) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r6, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) splice(r6, 0x0, r11, 0x0, 0x39000, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r5, 0x10e, 0x8, &(0x7f00000000c0)=0xffff, 0x4) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) r12 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8b25, &(0x7f0000000000)={'wlan1\x00'}) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000011c0)=ANY=[@ANYBLOB="140000001a00010a00000000400000e780"], 0x14}}, 0x0) 1.591902299s ago: executing program 0 (id=6563): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000080)={0x0, @aes128}) socket$inet(0x2, 0x3, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x110, 0x2f, 0x1, 0x0, 0x25dddbfb, "", [@nested={0xff, 0xf2, 0x0, 0x1, [@typed={0xc, 0x13, 0x0, 0x0, @u64=0x7ff}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8", @typed={0x4, 0xe9}]}]}, 0x110}], 0x1, 0x0, 0x0, 0x41}, 0x4008080) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000100)=@nat={'nat\x00', 0x2, 0x5, 0x500, 0x360, 0x118, 0xffffffff, 0x118, 0x360, 0x430, 0x430, 0xffffffff, 0x430, 0x430, 0x5, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv4=@private=0xa010102, @ipv4=@rand_addr=0x64010101, @icmp_id=0x65, @gre_key=0x732}}}, {{@uncond, 0x0, 0xe8, 0x158, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x6, 0x9, 0xa, 0x1, 0x0, "1f6e7fd418c3ad3267eafbb136b6b7cde9dd3dab7db3dbce603e93ad739c17ee01d1a9f8efefb08a0cfa51398cf55f3c15cb988217c90dd3f7025cd8b3bd9d44"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [0x0, 0xffffffff], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) r3 = socket$inet(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/3002], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000740)={0x0, 0x1, 0x2, 0x8000000000400}) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000980)={&(0x7f0000000740)="2ea9f4a4d49d4047c6d3884e4cd0e814c255eda45d96bd13fa455f8515de94e2b5c6d2dfd86aa850e10752aab26016f82d80c03ac6f5454f4561e9dae840a317d917f7c5b1241b14d3f055cbed3eaca2e8253780354c52467452b159951f9345a881a6acf2f5834773f4839a9745686852976b56dfe017c9da5cb81d1f75b47921", &(0x7f0000000800)=""/22, &(0x7f0000000840)="e26025206ab50d66e4b4fb9aacc35936546519ac20ce891e21d81416f3282250de93cdc70f7b0f84eed3a66373d45eb048ce8c9e4c20e32f79ccf274a479643e4b68d64812dfddb92cca0b957e3f2bb014a711ee299098bddb268e7068c80984ebf47f0c65ae70e91a17b09dc6338be3c2d32c0ee9c0fbeac4405bb0ded9963094c27d19c46ba75d99999b841f4bf029980cbba3060cb3e5c5dcb1e8ea3efd21e0d1c85e3726a46997fb5689562009ae50a9", &(0x7f0000000900)="45be9fa09a252a62f97136beae62ae76ab0739c7af29043f12fe8ddc69a09e98b16d1ca101a2e80fd3806dd2a33c68d7937161ad1c57a7fe2c388e004a703cdd9e5c4f8b610d36dfd5998e23e00b8ddf5993c7a390d74f7920545c094ecb5700ac0885a32bf9cf6fc08c01f52c37adea68f356d2ced4fb1f2be59b4d3d", 0x3, r4, 0x4}, 0x38) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000680)=""/174, &(0x7f00000000c0)=0xae) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001, 0x4000, 0x3}}}}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0104000000000000000002000000200004801c0001800900010068617368000000000c00028008000740000400010900010073797a3000"], 0x7c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="d787639c652d66a7776aeeaaa09e1c9eaa74aab09c2e4e41a9"], 0x98}}, 0x404c001) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd7000000000000400fffd480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 1.583241032s ago: executing program 1 (id=6564): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r2], 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) write$nci(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713"], 0x16) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000100)=@ethtool_wolinfo={0x6, 0x9, 0x3, "746478bdfd09"}}) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, 0x0, 0x14000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYRES8=r1, @ANYRES16, @ANYBLOB="01002cbd7000040000000500000008001800ac14141a08000c00a80a0000060001000500000008000b0004000000ce8096876184772f7bd285308dc695b830e9e228f7f45a2ea6769f8384f6a085f1c94e8cb274735a293b2e6191356b80950770f94751942bafb143d577a8a023c8b1a174b655cc80b74f91aed69f283809afb1fe29a48da8c7a93ca465da17f977043f7d046ea473c8700503"], 0x34}, 0x1, 0x0, 0x0, 0x4c805}, 0x20000084) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2000, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x898}}, 0x0) 1.391490087s ago: executing program 3 (id=6565): r0 = socket$can_raw(0x1d, 0x3, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a3100000000050001"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYRES64=0x0, @ANYRESDEC=r3, @ANYRES32=r0], 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x40084) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x224e, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1.357645987s ago: executing program 2 (id=6566): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x28}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)}], 0x1}}], 0x1, 0x24000045) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000780)=@mangle={'mangle\x00', 0x10, 0x6, 0x5a8, 0x428, 0x428, 0x310, 0xe8, 0x428, 0x658, 0x658, 0x658, 0x658, 0x658, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x6, 0x2e95058f, @ipv4=@broadcast, 0x4e24}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff000000, 0xffffffff, 0x0, 0xffffff00], [0xffffff00, 0xff000000, 0xffffff00, 0xff], 'batadv0\x00', 'pimreg0\x00', {0xff}, {}, 0xc, 0x2, 0x7, 0xc}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2, 0x0, 0x7c}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg1\x00', 'vxcan1\x00', {0xff}, {}, 0x2c}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x608) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104c3ffffffffffffff00000000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 1.222209979s ago: executing program 0 (id=6567): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x0, 0x4}, 0xfd}, 0x18) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000040000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x200000000, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000003e80)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)={0x68, 0x13, 0x200, 0x70bd28, 0x25dfdbfb, "", [@typed={0x8, 0x72, 0x0, 0x0, @fd=r2}, @typed={0x8, 0xc, 0x0, 0x0, @pid}, @nested={0x4, 0x137}, @generic="89c8ddd6a40e0c8a5b4fa7de8f023d7f9cebe3e7e59c0c29", @generic="c067ba04a2d797d6448933d5169242167d6ae0010a42233d4570ce83fe3c1b86717d5c3bdfa7100fa6"]}, 0x68}, {&(0x7f0000000340)={0x28, 0x33, 0x300, 0x70bd28, 0x25dfdbfb, "", [@typed={0xc, 0xf6, 0x0, 0x0, @u64=0x3}, @nested={0xc, 0x7c, 0x0, 0x1, [@typed={0x8, 0xf8, 0x0, 0x0, @pid}]}]}, 0x28}, {&(0x7f00000012c0)={0x181c, 0x41, 0x100, 0x70bd2a, 0x25dfdbfe, "", [@typed={0xc, 0xe0, 0x0, 0x0, @u64=0xfff}, @nested={0x2bc, 0x3e, 0x0, 0x1, [@typed={0xe6, 0xab, 0x0, 0x0, @binary="865edbfbfb6b4b3970b94e4256598fa6a723c0ecf03ae438196651dc1ed13a7d102449e414dad39a40ebd638f1f93dfd63bfdb45bf897c08c429966067e8e7c705a77cec671914dbd11dc1881373d83213d29ab42f161d77b94bc9ee25c4d32f7a3213d04486d9eb4e480128ce2760d71c44e22bdebf679f9b2d40e843c5522a6648f31141526b123bf4e55943684fe49a1901cfe4d5f1b6225535d3df7dd1b5da2649aca368fa0fc357fb355c5dc2e67a3ff553ec2229f13acd10f84cf85a4a3a7f93be5cc6497bbb10f2509b9eadf9c61c0372cfce1192985c751c15602eeeefeb"}, @generic="070903b4caf3862402c32212d345c910c35d58627797b82c1ae69c796009bc5ea16ba985a86c315b2f8cac98e51457c56fe12815c1bdfc67f196508f1e4cbe808f1eb0f457df0d2e2b59e2abc4fede5e3840a2cb143b33a0b02f42ddb5346eb8d0dc315c01cd9b84e98d2a99d58023493f0478799025a8f2e6a2becf239105", @typed={0x8, 0xe4, 0x0, 0x0, @fd}, @generic="5327b4a8593ca5e26acaf78769b9eac2ef714e2675479032545c8b542043e6c70cc68137e310c4c1355283e644718afaf4bb247753566247e0044da9280ab2734fd9c7e11fc2e7b673eab06535af6255ae7c5fbdc1f51516bcec8f489f919db2823c57d3631fdffb7d4b65", @nested={0x4, 0xe}, @generic="ef1260ac425ab0f2928f71d1a790020c7803469e3eaf7fbef8b2e50a2dd2073678b649b8b059abb03594aeadf274c1c9466713ae91855d5533b7e52c02f4f20daed3512eae5b0a73a1a8e399f3823210424450d85fd0a00ea3fee30739b81f43242f8f09d7f2b021e3c589250521ba93028e47ced21fcc5016a68eaf0a08ca1e882c8c62c1644bd59af1295e63f7ea7938b8fab93f6768b6e78fee19c521ea2ff38ee8d0a1d28af419ca13dd60a40d257a4ddd34b7bffa20981cec1327e138ef9e4dd569365e296fed384798dd3c322e4c4fd1f63212", @nested={0x4, 0x7e}]}, @nested={0x11f0, 0xca, 0x0, 0x1, [@typed={0x1004, 0x8e, 0x0, 0x0, @binary="ec971d5658a248f4d1b1a0a19bee0d3d8345a18573a02c1e477b6c2deb47bc0a04412a3287e25ef3d0823cd988fb939798faba3e8b7141d0774ec2466a07e5575e5371cd39067d7b03065a25bb83290fc0734d40c0554c815074fa16b2881c2134800c37c3bab7debc93f56d9ba7c86f17fcbbf440774410f617c0aeceb53876094edfae905d6f3a5de72a752ba4098ccf87bde76736acfcc8885a3d3921e442cf93772f7d9ded5d425623bada830ef5720718e6296da34d34d9bb0c24eaea9e3d5773824364e85e84ed4d2af2c76d5960b1e0c257eb0fa52c03139fe23dff38fbd4d1b437c26be9168914f01595fb618639ff1577e6b2e1ec184d9680aa383b6526ce3c3a9b5e359dddb44c02b788ab06b318553969660929243587e60d7907323e6a19d9c90274fe4bc91555f6fa3059de080c524ac91466ba32a10e385de945155a77008186578c63dd0ae6fca597d99baa443058e579f94f6c75547a36b9d71f9c40ca75a2b82a26630c765fcb77d227129ca9956147e0c90bf8b43ae577efd6f56dd94aa517172c8f76f886669221b983745c3d50e3fc262d9188da368ee924bb74cc9438a1efd6372d8f67cf404c433420121691708f5399680bb3e3df9581ab17c930a65b6c78feeb9b2ec1dc4e5e3b380b686a0a1817f0dc72c1998d25b0c8875007f6176f4a8b3f2c44ff6484d16fc2dd952662d48fc1cdebcfd562ca3c218e0391acd4cb1c0cdb7f514c0ac6593f984f18fb0343c3570229366f47a6274b34414d90484118c2825c5043d731a12ca26071a73fa62c9818e74b280c7ac6fcb11950cb176975d223ef87ad11695bd9ad4603ca0780844551accaf7912ef7f103e7784db72a9af1086362b7b9ff79a410e1f793e93497544f543369d0b8fc599a7e078932c91da394f347d17d71a91581de1a1b1c65da73fa7dddddc4e59286bd7adab954ea564ce815b2e9f60137657bca18158915e9ece9b6ac8904c0597af7dbc9f54e0384c13410d323fbdb5075eb8f0e419c732d27cca0d4a4ca2a2e0dcb967ba3c7f1428c1b807b4d6914e3972fbefd03bea0c988c4601086cef7fc00ec60cbf269b9f7499b51fac44769e3234afca6dee0ad872830c569ef89623adc82fd38767ff190ee4ac99690cff987e9a32051f2bc4c55b8a5c05b883eac02556365cc5abdc8bb1dadaee2adaf4679db7398cc31b830b60b53ce27c3133837971448a53868e435d047093575fe45474c2b6c4d8176db6021d715dc6aeaf869927ed9e36b9134fdada9454e64c3aec109ace5471bf0ecfcbeb2cc50311792cc2115026572a88043e459f62375b75f90d7b7166053b3a357cba1634b6cc1159e7830f06cd140af79f5634882245b2cd3f6238d3d11d6170f7c766ff54a12d1d1be4e35342559c902a31f520666c584aea26a09e65e9fee1fd415f5b60a378ecf5764c4f79ff394d7f7172c3050d3112b1c1203f13c82bd5260554f34d95ac914fbec7ba3024b58ab72c45e87453ee89d73e8eb67428f97e16c600c6323b680c10e3aaa16696107d794e4e9bfbf0d101bc533f88b2f2e4d8a88087c834478ec6708de0444a0fdd43c918ba41b328a6c77d0e62c44a87b2b3c37fa7e797d1b25907c8e78fd96c38f9ee37d2758b39b8b240cf3ef812311becc1595f56d5bde89ab7323fcb15f8465bf20ae3a7a629a726c796718cd6cf32cc5949123edb5a4ae5193be3063177e4d945f2e041b046b3abaae5927835505d803c84997b152dc58856e742a176fdbf3bba370be4073bcbbe6529d6951508b333cfd21fd30ca4b580b6c1d45c23a49f53b08e9c7dfad0b6ef44a217cd980b5dc81c0aec4b635112d8c23f7dcf93f3f067e877028722fb5aa3eff8afbbc3f75787f7712980351706cf56809638e2f34d123fdeddc59cd389918f1cd38aed5092a8f9cf5f5708db609100825feebf4e8269725d90340cbae5c0fb20585e3244e84fd6d57f493a594c449face1ea3c4990c198701900f4876a20e349ddf6ab9e2184843a3d8b0975f9ee08871bf4a3eeccddb7ac477a31da258651e0bef2e698f3a7112efd5fe8d9ad20981c20d51355128fd0d9ec699ebfaebfb7d000cb1d9f3df6e6c740b6e05fdd5cd38883d92158a0385ad0d98fb74009e613153bc46075cd7b26d70c0ef570688dcfc5502dbf9d1ce1895f34472e72adb30c2827d9876dea1c1dc6b3433a0c3aae7243a8e4e1a2f2fd2e40930e81161e423b0b035edcf574f83f5f66673840186698c35bf211508781c9fca18fec8d61f0f6071f0c22d1d53a639f3a4e6915b07f17cb5c4d7a169e121a7c92646449fe126230c173a6db13a87ec750ddc9a94c257fc2da8882f7dfaf7c1ccde3ad18d313731e53561325b7b79799364b4c5c938b149deb348cbc0baad2c2c6398bea77b631481fcee798c7655e4f647bc1b09096144234f902b3eccccfdb60a0788fa12a2f0ae07b6cd618d60f88c1743b4118a6789f5fda2756991c3ec93cdbe0a9022e1c0280960a4d357181ba37bf3dafeab11842e041cca6d1bf860a8eb2389ca73024414226ece269663a9b9e1fa16967b6feef2e59517c37300f0e186399fdb7d58404cbee454f233f81c7cbb82c56ae75298dbc7a4c9c213f3f3b336d93040e7d806f68610ac4945753e9cfae34921e18b2ca5342b0c23585c8f00d251f1004f5113f98f448d7eeba2cf6c7f5b57712b041eff05577a7430c2f714e73d9145d2c2e2f7e9e7fda7fd72095acf2faa3e839a4195736596047f796655ed31ec5ee12a7e818d8952f65057a2219df04fc7b78389126df1d7a0239c2ee737136a7718bb66c90773deb03c3923f149b09b4c440c700f51cb4fd97a1561899b60ba5620be056860b7858eb1d467c544641ea971aa538072484c72aed1dd924699953363ca1c745c6eab05df2de735a679bd5bd3f4c5526658c0f724a4026f52cdf40291f870fba4bf88f732df75fb508c3774a8b6e17ddfd36f5778e006b5782f8363cc19a65421cf01a1758163b4a28ee0b91de42d08d180e17a61da69830fe20d2551a40daa3eaa0aade435c7c43473149ce7748ca147a974bc51d0abff5491bc3b94dcb553edd4afc9f825b85e876b3e18af5ff7a118fff075c49c3d22589805c94de30b3157a082eaaab86c0a3c7e8df44f5ee042592ef33317f820c867e19030eeda8fa04ddaa312270f113cc3d2a72ccf14e90e5136f1d9a7fd06022b1b3dcd8475f1a6718426cb53f4a8c63d602af208699db8b12c783f3bde01ca5d020b9a0c852c4f6eecd4c3c792c8244e62a29f94a8ee6b0488ad78d2dce4f23d2f74d0fec4a3cc0833b94e571c3119b307de7f6a1aee6e9e1a2819ba1e7242ba5b1c595668deebde84a6c670938382a8522e2f745147ab70eb3d1c99d5294fd72c5853bb61f85077a0a678de0a944b7d257889944096f23f556d7dadd4174efed34e92f527c04a859b9ca7b46d4c66821afba38e2db77df8b697c2bcebd9ef38b7ab26f1b5557eb2c54835eb02383705a2b9e7547a893f5d63c3db463ab83f5c2e7fdd4662576f87e7added5e764a023bf52bc350cda94f7c84fd3d41f23f87955187aefb10bd2f64fdeee4bb158d532d559c167c50b650b0788a544ba4a95f82abf0c1d86eb2a410322c996de009ebbaccac31d96989941468cf75ff6790037b8daba5bfb71f6dfe338e9b2f6cd2ea2d97bb8dc6fd3f497570d3463b9a5cc7a6d5efe3d6f824e2523a8daed21e3b7a7d9048e04a9e851332bf654984d25c91b3e8592f991c5a41a1cf11d4a810bd0c895882c4880b35fa93797cb1de07ae61871280981053b3bb2c74da05c23d067da3548f648d6a59f1df5f31488ba22c496057dc8bc3581d84df9570c4320a07b7e1870c90a1ebe27ff933faa105486471a13c80b8b6225c7ea6711a8110dfeedb270ca6651d2049e19fba3feae81e7b931e0fbe798eb5fc869a69247f98c7dab64b86dc7d9e65324d2e7c5a28a89d3b06d389fa7a573f762058ef1335eb0c58614861f0f6afdc9455934373ac1b7a7677f4bddb89ead36e674e458b30770323dd2dfe5a9ce440ac32cd0bde0e7b8f8f949e0a6002ece164478be2360280b80e32da5606668db28347b9e63e4b8eeec41b9b273111430f9573e08eebde76172742cbdde1a3ae8fdca2cc794c3f92f7448ff3d6586f0eb4dbc926386efe84efa2dedf7f092237073da55dae007becf668ac2f78e9f5f27c18323c4bc63a80b3ccb17c434f21904e0f2c48a15f1e16d6f77a7d66b2c2b036f35c7a60c1eb5a59f036d929c5d4b2254641c57e4be7d285bfdc10003bf8e121c8a3ab5a3586cfbe769d32d8489144f69577f00694f33d37cb56210de5e7d2f6505e91b1db0a5c3c0d953271ff4222eb354c6c96a376d17ef21b493636572c16c502c06130d222657cb27d20713c478422eaec3b72cd22a69ab92eb59d45bda1701120bbf09913f8d2acfa3a10ec53933224c0164671a73a1790eedb17ded54056a389d67f9c2b88da7ed837591a7acc93a9eca004db36062aa2d06773915acdedcae65b147b9c75d16217bf542f6c4e0e4149f97e9a98d1a759b4cf62e01a6bf98fefeb5ce29a1860d64c68593484779f5ae191855b0ced5570a9d572e83dfa8fa0eb6a76072ec3d380c2f03b3adde62186d5f7129fe2f8cb875959c1d62875e062c69f841e24d8f363209f74b9534b13a7f2dca2b138fbf7d6f50f640be9628b651d70cac6fd34efaced3d9e87d3b56649829c52e052c0adaec1b32ab5647f59dbbd7717b446c04a2927efab537775f864bd004c18e09df89ab22ba9ffe2440abd5400bb1b950d5cd6400b233bbaefeeae8d7ad499265f0fb626e4a4781bc9c39b03d34c218e0f9b5ff2dfc1b7ab6995f9e6fd829b16a200cf3cb3b133ede923d1ef67e07bee59d358913af467e206f0bad6b4598ffb2c1a6f7c87b24100c0959a33700c0f42971481afbb25f0a29da3a3761e26ebc15e33fbfd7d799c3419fb7fd9dd7ffb623420115e8b7911680a9d5c2a379a18fe6353c7672b6f49ffa9bf47cf34e5977f85d7ab06628bf8ed561b3e10c71b61048d8522dc1a8567357b8d5fe3b907337505ad742a3430f459f88ed4167c8ee19df4bf6d139ff04ebed711d0ba5477ad3a430786d88787ecdaaac12f5a096efa4a069c5a3953e89c754019a3cef2971bc7573b2b72fabcfef677cc0ac3e903f84350638dd425f306221b3e8050688530c533e432382626c75341063031a74a1d90801ae4962926fdce706c665b27dfa4f093547dffade008c810c4101d623513127913020e3e70b20952182166c75d7d88ddc904999d7405e442e555a079f1b3395a28035cb799fb3109413d89e5ba52749bcd1c335687f468d7c3d81fdea8a6019cd70088c21cd3df55d583b73ea3369edfd57b86cb4adb87fdfaf9413dcf7e7926df9c6a7952a664d6e5fb297db9a5897563c18b254f19eec4d66ef179141410ca8647499d2c7eeee9a97a3e9c73bdb57185826d4edace34e06de7d7cce45aa605da50e09a6db052cb1d87cede1793c34d69bcf9ae1d3bd788f81c7071a3d007cf3e203ad706a65171ecd97b9ebff13d330d40bb72bdd6bb8864c11cb348d7f172d2b5f562db9b46bd1cc3b7596b90eddaa932d4317cae63c6d52976a730b042f93e06a9a9add25cd2ce1820d87dca107f5f530d316a3b91f800959c4b6073cc8883fff94e059fdfb7ddf928ec9b8fb2d4ba2ad32e6f3554c6f3282b0c80c0f4856b09cff48a75dd9cb9a34ff05a970fe4e5783b8d29f"}, @nested={0x4, 0x13d}, @nested={0x4, 0x134}, @nested={0x4, 0xdf}, @generic="c1950597b03bd71513f04c18333ea34a04c6174864840ebd4c2b2be94798c45d3a1d8a572210948ecaddc88ca77e4282d2cbd6463e08da0e0c36c934b067e093e5eda3f2c21486035d77f1542b754e8ebd587a518d5a53368647bdb60aed055f355fa705df5eca010d0bbb17cadcd691f258460832af909bb3d8d4fb63607dc66dd2643a5a77a34d296bcdde1ee7d6aa41c0db308177e24a1015698a44a28dd920124c0c12", @generic="38900378c46d078510e217c25a7a0cacc16201568d0e5f81fa0730a2c0fddc940540a2c3db5c13d5e500ab1816449036aa7bffd528691bcd70575037d0022e6f3a6bc3f3350f2f16773957e477c2badd8df774ef09e817328985b00867c4d810536e18b9afe8545f441c3a2de16d0c9a4b7c6f93a6af7b2548ef51786132f4164a6ef969dea5f0ffd02551f3441f684cfa7f8a810b862dd796afc3bdd9ab01a0b5a1602f821fc7922ac088fc8a18519eb6b2698f4078dc3da54e99bb5e36bfc8d0580eaba4a584a848fc9b825cf8b6f1d6fb", @generic="d0bb530ec09ef1688f559ea45ab3da271538f9b44f4ba06f301372e80a3f8a57ae699eb15cfddbad7559e6f88180cea2637024920b125fe0427c4c89636d6f304bba1951446f97da88a56b02ef1bb5c15fdb9af690c13e806b9109d81c0b88ff49afaa3f59"]}, @nested={0x85, 0x9f, 0x0, 0x1, [@nested={0x4, 0x143}, @generic="13b51989db2d4093adff01b9726e5071ea87c8aac1523dac35b26686433a626d061f1ad7100c294975381da99a9323cd6c7149af244e98c176af8978cf1d0ee716dfb0b47fdd0f361dd81488808b444443e408136c6a81e516b433f619bb40b47109c4892730573837622d658f03ca9ccde4c3e003bd96fe3f6df30bf4"]}, @generic="bfc6", @generic="93f08681ce9f885f1da8538e1fe407ddf9429d61d56d8f644207a91de757420db5f53470ead95e6b00a63c26f62bad8b3601abe02db5378bbca7c2a5843910f2bdaa448a57457a374c07dcac72974da1476a235944d7ea7f153e26486c5acb1bb623b9ba75a5fb2a70d6f3f06b1b898d262af3361039cf9dc72f2d6baf2605479a7f9830ef46c9d3ea1b3b296bf3f09b0eb9acc21b73c4de804908c2b2f2f5fea912476bc7e5fd3dca19f400d7bb243f8e056fc82499684b37883eba07", @generic="c4a41ec4e3921043f646f627edd7c286f8d8b6a27ff47a4e2c5b1692991d72e8aaefc587643175f09cc66909a5615d39a544fd79e1ff97704b49090ccf5535f73034833e7aed6520fb3468d2e417c698ddfb3d8100582093e64a7fe93ee3a1e089fae35203369d1183", @generic="dd6f53cc250793eb2253699fe3dde3e27490e60bc1f5c97b393b61dc3041500aa21fbc6dea749b1a8510e4df08085bea6d1189b5309d09c8b4f7b111944e38da97b7fb3a4cc996a1c4b43053d8d974a44d69f637038010ecb7910871003854c077c186e58a16cb22945cb5fa1ea4348c6eda8aca23b425aeb23728853e5be4ff53733076693b1b1f88d26dfd8779c43359e36a6ce8b4ff3f0d7cbe0ba0822519b23b67c42fbc046115f10f24f90fd0d1552e6b6f86fa922810d06665d5f405d8e4d7caa89b107608c1c69e7c0fb79d7915cfab", @typed={0x14, 0xe2, 0x0, 0x0, @ipv6=@remote}, @generic="ac535b88d57bffabe8e7b0f34ee470f283bd0c459c6478ee5eec54bfc9b895bdf1fc0e44eb0f1b4792c10435a88b2e536c23efedef3783a7bde79f0b8f2678b501bd777b91a445320116ddf6dd505d71f569b90d6f01875b967ace74ee82f8ceffde35435cf3183d6b1f32dac4b130813a807b231f31f914ff6bd0faf42c38ae603ea1ef1cc519c2ddd8f988b3448fcea023680e940201fa51a724bb7cd234460e6a869cb63ec365a4505a1f8fe69a23f591c584fcded37a6a2f"]}, 0x181c}, {0x0}, {&(0x7f0000004000)={0x7ac, 0x3b, 0x8, 0x70bd2d, 0x25dfdbfc, "", [@nested={0xf1, 0xc5, 0x0, 0x1, [@typed={0x14, 0xef, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @typed={0x8, 0x14e, 0x0, 0x0, @fd=r6}, @generic="4ecf2bcc4e22865e3b808cb38d3cd502c05afcf37babdc9b8cd8ad05e52ea38ebb4b9bf2f6c2daa1554b0745d45e7055777ddb210215d354dffdb211498f86a6eab8c36d5cd4e4c2030eddf774fbb606b622022a997902cc4c0769cd7ff8b6f59eb82be926334cee9d0a5ce5beb8ad", @typed={0x4, 0x149}, @generic="dbb030c4ba45f6d8d5b8471fb798451a7411a7c8a2a1824f1bbe8f8e6696c69d0c180feb81505dd8e39e74c2a6164f0fec2e4fe16fe4c45aee4292de0a2bfb5040afd60305105bbc8be25a3711599fa7f8eed821998eef81f186", @nested={0x4, 0xb4}]}, @nested={0x6a5, 0x13c, 0x0, 0x1, [@nested={0x4, 0x51}, @nested={0x4, 0x103}, @generic="4073fd6608ce34e111bdc3d953ef8a40d07aba0ef55381aa7a074f4f0480589b37c195b5d97c87ffadcf58ff3c5f3e1944a9f499942728ea346ed8304700e26f27907315", @typed={0xc, 0x121, 0x0, 0x0, @u64=0x10001}, @generic="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"]}]}, 0x7ac}], 0x5, &(0x7f0000003d00)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r7, 0xffffffffffffffff, r6, r7, r5]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r3, r5, r0, r3]}}, @rights={{0x34, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r6, r2, r3, r7]}}, @rights={{0x2c, 0x1, 0x1, [r2, r5, r3, r2, r7, 0xffffffffffffffff, r4]}}], 0x170, 0x20044081}, 0x4000050) 1.220219251s ago: executing program 1 (id=6568): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) poll(&(0x7f0000000080)=[{r1, 0x8040}], 0x1, 0xffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x20, 0x9, @remote, 0x9}], 0x1c) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x8) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4148b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TOS={0x5, 0x5, 0xa}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0) 1.010077831s ago: executing program 2 (id=6569): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) epoll_create1(0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r3, 0x0, 0x1843}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'gretap0\x00'}) r5 = socket(0x8000000010, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) write(r5, &(0x7f00000002c0)="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", 0xfc) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='5\x00'/12, @ANYRES32, @ANYBLOB="2f2784ca2b2bc86667b289059c97698449ec735d41698e3c49e4475c2a8a12a7c2b747e76d0347785819e7d1677513f56918e2f8bcc842f2b360c8d852091c401097ae54e448a067cc0a50e9b6beaf0e0d", @ANYRES64=0x0], 0x20) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, 0x0, 0xff00) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) 981.133971ms ago: executing program 4 (id=6570): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000104000000000000000000000500", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r1], 0x40}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000180), &(0x7f0000000040)=@udp=r1, 0x1}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x50, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @remote}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x5}, 0x4000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x138, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6erspan0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000104000000000000000000000500", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r1], 0x40}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x8, 0x2, 0x4}, 0x50) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000180), &(0x7f0000000040)=@udp=r1, 0x1}, 0x20) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x50, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @remote}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x5}, 0x4000) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x138, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6erspan0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) (async) 699.412911ms ago: executing program 4 (id=6571): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = accept(0xffffffffffffffff, &(0x7f0000000000)=@qipcrtr, &(0x7f0000000080)=0x80) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000000c0)={0x1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x5, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xc, 0x9, 0x0, 0x1, 0xe7030000}, {0x6, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 643.03509ms ago: executing program 4 (id=6572): r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xd, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4315}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) r3 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1032, 0xffffffffffffffff, 0x21d67000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r4, 0x6, 0x1a, 0x0, &(0x7f0000000100)=0xffffff94) 238.681416ms ago: executing program 0 (id=6573): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec9700001604f9fe800000000000f5ffffffffffffffaaff020000000000000000000000000001"], 0xffe) 143.838965ms ago: executing program 1 (id=6574): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ad56b6aff71b62bbb0fe006eea66c7000000001800000008", 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000380)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="06000000000805640c000000000000001e0000070900010073797a31000000000500030006000000050004800600024065580000"], 0x34}, 0x1, 0x0, 0x0, 0x48014}, 0xa000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001900)={0x84, 0x2, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x80}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xbc37}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x101}]}]}, 0x84}}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000", @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='signal_generate\x00', r9}, 0x18) r11 = socket$phonet_pipe(0x23, 0x5, 0x2) r12 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r11, 0x50009418, &(0x7f0000000900)={{r12}, r13, 0x4, @unused=[0x94, 0x6, 0x2, 0x9], @name="076a111065bc70c3bc420b590599b73b68a132fb55deb36bef1fb59263a22fb821fefa78e46575121dc58282751a0252a98a5daefa805664ba5ea5e507f56fd54f903a536f6c2df64bdf14603babb21721681515e354bcf75b875dc0f909ce9be48f4b6ee542f46afbd0b1b3cc40255c8af5cb496bcf4c09fa81fc6466215ed17d37c40dff90254e20a30099bb6e9c2f4ca4eae9d3c64702826404f0fd9757998898d36a3bb6569ed634a073feeb44c0d2dd12d18be2ae4a15f197b0d25904506814f606d5cf61f07570cdd971a92ddfb9131a16ef6f0e5b35b03543c9bfdecd1a70a1746b59e11a4ed4b9e67956cc8edf4a9cb30486eda63dbdd5d2ac406e5fbd52fb8ff048d8ea523dd8169c15e96b37bf1c2f42e1631b2c6c63602ff00580020a9b9dec7fa9d60ca660f63a7425e1b87f629ebe45a67b87473bdeafbe718e8f0817cd480d70eb0326b79dc0565697ebe46594917f14315b3445091534e7087b094258f1a7c423f6690a80fd23159fc521f6657b9e2cd34e943b4805e9fd8873d34de6de3dbf346c95f6e36feda0fa660add323142f13acfadf41224c7cb79261ede5abaa3dda66a5952b6c7fd1a2e880c78fe53424b50111292c9e8f38dce5b96da613ba2f174f12ffff76ee72557ea1100cfa20d4b9e5c63d6200fa9b680dbbbe95433152f2ae8c818aad498f0f04260ae1ba8022d84ec86f3c21af08ebb57da6be6a025a0cf9c2e3cdf7599a45c8c2cfdd2d24cf7a139491aab3cc6e2384f16fa4b777177da01d3ae23ec55684d69623f0d41386b47458c5daa9836af005306d07f070a9501abbb37e1cddd605ab83c28dd0ff4ff06560d4bb36f83cd5e02fdf4ca500142d074678e4aa2cc704faaad059736a512b343abfc6e232cdb369dc09adacbf0b04999d016b062073ca612d082486734a17993127afdd8dfc3f08ba05d4d9e5e383c1ae30e2fbed6dfece13b33c2af769a392dc81a4cc09598ffbdd37a5e4047ad4621c3c55f090e4f18c426df453187acecf5ee946518ccb9a38fae1eff60c75b6c415cfc918facd80324c6a4bd1b7a18b28fedb916412b32798916cbead1ffa003b98df9f2ad5eb061986aacf6c84e70b5c134df0f3879ea0d718232d3a2343c6d1106238b546aa59c4c692ce9ba85cdac8b371777e2cb2382be0bd7ab662253b91cfe73d70165c48e4aefb9d405f5b0d3bf808de4213b3c1eacb3cc1825e8df51432e23e7c959ee051d1e2c36abb41d6e3dd8c7bd3ba84d7259454bf117e07b1f5aa4a137e3490e93b6005f591f716c3790d5afc66fd496cbaf2a9dca56d71fa49f4aaf3b542f76afd4f035eeccb390937160ed2364a6df5af624942569739a91a33748186fd6345e21b338f6fc6d1afcdb5d0bcb480796c3eb120dbd82f0bc1981ebd20353b9c71fad6ce1504252022b19366f20595a26ff2202205e60f820830ce2a480135c59ba8502141e2c1d4fb2164b57e2e53b2d0bf773cce799bac262e4c02b4ef75ed1d41e7152d4e1edd398d0e72733340bea805736bd60feeab0b575a3e1eb0fd3bc65e36c267fae94a73f3f0fc18dc790201c69b6d65afaa5c54d02fb5f037dc698c94aaa859f651d89189a5dda60adac923e1b186aa3a8238f1f42ebfbb313a3f5b7d599528c2a8227c1abb84f396d92496199867f6663b57317f2c8b77ca4cf2e4e07d707adbf55dd75b2eafe1fbe218e79acc8bb85ef0f8405faffab8fefd4f58908fbbccacb7c27de3c9fa56c454a0cd21ebb8e04e7adb6b3cdf10e6ed385aea9946d5a75f2246a4f2bfbe9abe316a952c00ab980af7a8f1d0f27652df73947073a56c5cfd5fb314e4b262e6415ab5c178d00615565da647175dcab61f03553f132d7b9fe6f46a6b7517925431ab00260823d71b39b3d5915f4cd79b7df0d0e0e47fcf3d9da179c3fa22eba2317424d457bae56f77f4f9860cc39016fec78f1b88715ad9ea96b5b8682e20b987c67d30a4b7c7d27d4a18a9b1fbee92fca5349dea84801242975d01a565962de7f3626b3c2ac45b9af7d3c43c01f90509e32209451535b855b1488329880acd9b8e1eeda02d3f02c959ea721a4d5d2c878ad27ab97d9ff673a0d7ec1ddc1bde7373c464fce53edd3aa469b8182ded789b553dec2d37e14ae7554e547897cb87d4269505dd33238b14c11c90a9ada373ddb5ac57d43f5f986333f0e007dfc4bc9d3d6933d2bcf7b2f43708cd485943f9d3b4a0a7dcbc5f75ec280d63fce81a7f36887f83f0340953cef2b5f27a3237d78fce1cfb0cd648db3059e68734c64eed311050d3011685b54d1fb9aa92147aecd7f71fcd24890cc8315cf02afac241ce7aa1983e92b54fd46596bcd4046ad3002f64d3bf27c9e505e15a83a5a8347f11e3ab4d4a01466a8000eda2b45be384572b23b9b0920e82cf34e56bd7c5381ac57e0bf4f894a27ad562b20628b2ef7832a9f51aa38858873554a1fb6427f7f3680750aeb42c4027da88aca2cc0acd975d08a2df41ce920e01856d207473ad118451bffb5784953e47863e96cd81040f95c4d70b85835dbdff7072a877cf599faf55f69d37245fe7be896b7450900288c3a9ec95f9b39e79947ab6a4ec9742b0084e8471d283859cade0b7934a331dcef7a7816318cad5eb58760597b8a238ccf608fa53490bb87e43c2e94bb779bb191e50c590d4786d63830500349e5d04facc479dc8889d3a9e5325d7940778b57850c1dfe0ab6c1e4526c8dff231eb96bf14ab3f9aebe30ee52ec9c6fbd2f27fcfed12c49c31b9d083f8317ab19ce73785b5cb4ff8117b777e0ab42e6b68ab655f198cfd277d69ef7c657c186a7e46d3a900092735bf6b403b047f7d4bad60068ae01d3bee9938ac526a71d5ae4831a0eb7f507b1e1b6c82eda8f969315c767ca22b7773b9306cca5d8408cec1b0458bd19b23d3b4bba2b25087595ae4b2b51c76272a386156b4c4565b6f6147823cbbe0fc377e4192eef27bb448d47ecd0a84cb5b5d8c70af0a64d084032f0c1bd20e95932e4c97405bfe50f02982a6316655acaaaba55237785b40e187c3c953873e67b65bc9f96391702057ba1ddd8cf790fede70e8359544fca07a8b233b80ef9334aed94153d0ef656204198ec27c74236e4ee2c83a97c22bda2578b04e2099315cf10d73979d583f85d107eb1543b152246dbcdb0d2caa784fbf57a449662aed23c9bb253bca32b9b3e1fc28fc6ed919d3d864ecd65d8950562c5ef312e3d1df287e9b6a85ffef932c6348149a0a3bb5f806a31a3ba019ef42128e6530f694913220376c6c5de2e7afc0461ee774afcdce8b804e873d1439f7b52944cf1cbab8848d77d8ec9d96dc9edf08023d424fc418e9af16b00024fcf3f1117948f27a2c091d0b48e3f54448bc56c299fc8d2fd1a46a7a39c21a9e09edd162d20a659af5f5029138dc76975019da4cfc2459661ff21192f1c3bcf20b049b1e6efa64cfb7994d52e2cac91ae19a91321e6d7e9eae9adc303c6a2ea6dacdd819b13774a54119674946013640407fad0ec467b7ebb25fbdb69e48100abbb29ae14c897248bc1e6bfb75639a5748cb6586ebabc21b933df599abc097d887d08cb1fe6ae7f5983e8f080fd8c95c6e7f2fe34ad61563a1bc3b33279c3fc0638b5dde09b17141b17bb3469b2ba72797f9f630f9cdec6be3aacf2d6ee9d63d5f5d1bd8a08d3e5848cdd7a2c5fde28d4f3e673264e23f23359891c966622539f93710b4a64a6ee33b436964cd222c930295fd6a52d5cf6f2c477080c48950cfa1dcc515945a3218f17cc84e2ef574dcfe81373c5794cf82011d2f3b028f813aedbb793b848e5115471c399fe484a2bf7dcf5d7f9d3c04e98b02f6d9c391d53dfb659dc03e3a3f8d3441b918d78cb61d07cae76acff29dca51ebb51c9b7d79918121f770d817fef64378ab77bff1d9803b137ca8bec98103478a8f54311aa89707b35688c26c8b5550420746fd7cb00d4a9bfa0b846adf1b63d7114732979af53683e7d0217b7f46c0a2b9aecac4e47f46449348f34d62c3662f389e53b7d61f674741aa8a5ff8c98fbd65e459291c8ff1415944d50f56582c1132b489137732d36b8d5a4558c40e4ba423fc4f5641c8665c8f354ea07624db31e673906d4c1bd5151452ab496a50a14c8eecfd126c386f6212d40d08fa0fe77d0d06c56c09aec4b3aa8c0b644f78068e95082790165dd9ccb37b78d6ce252e30cb405ff4a99fa36ee0c6b89fa620f2a81e4fbdc8e61dfa422827bccb5a11219ecbf2eae21ab00ad93dc965258d93cf548cfde91204d9ab5b6ef395317e0ee8651bad3b7cf3e494c631dba3239948ac84ed722efa258a2198e564f6410b39f02c8243a12c238acb12b5bb42f9102024db20574878d7db74e382ac37e95721967e6957f6eadfa031e125dfd265962ee1d21abe01fe1f1eeaccce3d464c6b9c07854701b4f101a4608e0347bfcd04ee86ab29328d427fe5a2034ed8205acc65ca86e75b988f26b543c42a88e6bfe237a09e8881af3784d405db560e2087a54dfb7069edc6d34fcb857b4ab3514b6142cdbf2fc304b7e948dd2be61f6e3a978500a847fb6a5cda0f94ea8169b5e7b9f968879588727c97ac2590d9339c880ec2787338d2c90e8887eabf67bc71fee45b9df9ecfae85fbf19314215955e24b79eb0fe9f8f7d7a4cf2951496f371e646b52b21f50021de2c61b3e245df17a81d245ba35eb113f43820ffcf69239f35ce3f8bb94559d057492b55b27d75add0c3620be9e7bbd4b20a690d6c645ac436dfaaaa41f61949d06b0ac3ae89e4a96378dda971365bc8ba8526d2415590a9d1a1bbde1ecc448e64fe4c406a8997b29ed868c597e26bca2847b66999d360439fa18d088435b2107d0e7d09e71d2dd659835856d93cec497556ec1b5785d05e295134fb5164c316e363410cdec01fc2b7938d63f063a8e68beacca46a862b683248d32934a49751bc15306c141fc01a3c0c953b5f0b25f5be986cc149f3748cf6d8b01ef75035e53546f7ea0d8364c57bfecbd89b00a256e20e83ccebce11099dacce1d45f6c71f93d826cf48800fca300b64e5f67254f4cb7ddfd094b90e6ebdd90fcc69f30c79fa12226317e715fef956efde47ac303beb074404837be2ab2b7482c688d7d0cdd99ba5c47c5ff99c4245c80fb5ef31964dc4ffd0f58a2d0832ac255296e35555fe34a6cfc7a64bd1a51ba1e860626d60a1efc96ef615dc80d2bf0d33e5ff3ad4a203bca9fc361b59aac1380b61dc2c9cf02d305e2fc6ef836c78653a71873eda689441b8e984dc2cc9b558ba425319b41897d3df10267fdcd7a61a388d32f0fb66618ccfe332a6862498136a10903d168861690486ad06800c63ad33c3e0aa6d7a929e48274823fc3244d42088e5170934f0dc7324c0e4b026bebc7af86e155a402aebafa2fb3c4b9112ad6665416113e9a36d0140b245e7843973ec8b7ee4d18c779370a9c855866d805172f53cbc1b0271fcd1cad46904d344e4d9bb42849ffb0448961a28ca0762ba25816618554b1adc20ba5b6fc1efd30760fa04b6011fc2af78e216d491d51556f7c8b14807598e1f246628eb45819fe4a75b3dba32b4b9dd457bec7bb3bd4444bae72ba1c3fcdf1b01290e570a4239456b89f18b260cf7fae0dee81460430c4a21d660cd4fe95f9f66831e7a3ebdde8593677686d18eb264d83e68a7e90ea5406"}) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r14}, 0xc) ioctl$FS_IOC_GETFLAGS(r14, 0x80086601, &(0x7f0000000580)) 0s ago: executing program 2 (id=6575): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {0x0, 0x0, 0x0, 0x1a}, {0x0, 0x22}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x158}}, 0x0) kernel console output (not intermixed with test programs): ng it in 0 ms [ 601.673893][ T12] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 601.688097][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 601.826201][ T1164] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 601.853865][ T12] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 602.172092][T21256] netlink: 'syz.2.5154': attribute type 10 has an invalid length. [ 602.767377][T21283] bridge7: entered allmulticast mode [ 603.069399][T21291] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5164'. [ 603.117326][T21288] wg1 speed is unknown, defaulting to 1000 [ 603.129178][T21288] lo speed is unknown, defaulting to 1000 [ 603.277637][T21288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5163'. [ 603.287115][T21288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5163'. [ 603.380797][T21299] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5166'. [ 603.480532][T21301] syzkaller1: entered promiscuous mode [ 603.504588][T21301] syzkaller1: entered allmulticast mode [ 603.621759][T21306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5170'. [ 603.702239][T21310] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5171'. [ 604.036569][T21326] wg1 speed is unknown, defaulting to 1000 [ 604.122648][T21326] lo speed is unknown, defaulting to 1000 [ 604.125264][T21323] wg1 speed is unknown, defaulting to 1000 [ 604.214367][T21323] lo speed is unknown, defaulting to 1000 [ 604.539898][T21352] 8021q: adding VLAN 0 to HW filter on device bond1 [ 604.843678][T21359] bond1 (unregistering): Released all slaves [ 604.976136][T21360] tipc: Enabling of bearer rejected, failed to enable media [ 605.029931][T21367] ip6tnl4: entered allmulticast mode [ 605.339717][T21382] syzkaller1: entered promiscuous mode [ 605.366835][T21382] syzkaller1: entered allmulticast mode [ 605.455763][T21390] netlink: 'syz.3.5194': attribute type 2 has an invalid length. [ 605.485001][T21390] __nla_validate_parse: 3 callbacks suppressed [ 605.485027][T21390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5194'. [ 605.960028][T21417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5202'. [ 606.443970][ T13] net_ratelimit: 121 callbacks suppressed [ 606.443994][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 606.488557][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 606.644136][ T1164] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 606.664367][ T1164] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 606.710120][T21443] netlink: 'syz.4.5204': attribute type 4 has an invalid length. [ 606.754077][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 606.773300][T21443] netlink: 'syz.4.5204': attribute type 4 has an invalid length. [ 606.795358][ T12] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 606.803165][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 606.859053][T21443] netlink: 'syz.4.5204': attribute type 4 has an invalid length. [ 606.945018][ T36] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 606.952848][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 607.025426][T21456] netlink: 'syz.2.5208': attribute type 8 has an invalid length. [ 607.070081][T21456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5208'. [ 607.100167][ T1119] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 607.119441][ T1119] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 607.149940][T21461] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5209'. [ 607.494310][T21478] netlink: 'syz.1.5211': attribute type 10 has an invalid length. [ 607.521237][T21478] netlink: 'syz.1.5211': attribute type 10 has an invalid length. [ 608.000986][T21504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5222'. [ 609.176745][T21549] wg1 speed is unknown, defaulting to 1000 [ 609.217753][T21549] lo speed is unknown, defaulting to 1000 [ 609.304286][T21538] wg1 speed is unknown, defaulting to 1000 [ 609.393552][T21538] lo speed is unknown, defaulting to 1000 [ 609.684727][T21560] netlink: 'syz.4.5234': attribute type 10 has an invalid length. [ 609.783145][T21561] netlink: 'syz.4.5234': attribute type 10 has an invalid length. [ 609.932225][T21564] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5235'. [ 609.950330][T21568] netlink: 168340 bytes leftover after parsing attributes in process `syz.0.5237'. [ 610.064132][T21570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5237'. [ 610.376590][T21583] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5242'. [ 610.386015][T21581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5241'. [ 610.389710][T21584] vetè0_virt_wif: renamed from lo [ 610.557091][T21590] xt_CT: You must specify a L4 protocol and not use inversions on it [ 610.678789][T21596] netlink: 'syz.0.5245': attribute type 10 has an invalid length. [ 610.758196][T21598] tipc: Started in network mode [ 610.765411][T21598] tipc: Node identity ac14142f, cluster identity 9 [ 610.772481][T21598] tipc: New replicast peer: 0.0.0.0 [ 610.794766][T21598] tipc: Enabled bearer , priority 10 [ 610.875041][T21601] tipc: New replicast peer: 172.30.1.2 [ 610.918713][T21598] netlink: 428 bytes leftover after parsing attributes in process `syz.1.5246'. [ 611.001476][T21598] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5246'. [ 611.007232][T21604] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5248'. [ 611.420522][T21625] netlink: 'syz.4.5253': attribute type 10 has an invalid length. [ 611.436068][T21625] netlink: 'syz.4.5253': attribute type 10 has an invalid length. [ 611.463971][ T36] net_ratelimit: 99 callbacks suppressed [ 611.463995][ T36] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 611.479131][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 611.481395][T21628] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5255'. [ 611.593877][ T37] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 611.609936][ T37] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 611.733952][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 611.742914][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 611.792093][T21634] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5258'. [ 611.854876][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 611.863058][T21639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5259'. [ 611.888375][T21639] macsec0: left allmulticast mode [ 611.899845][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 611.917298][T21639] veth1_macvtap: left allmulticast mode [ 611.924006][ T36] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 611.932034][T21639] macsec0: left promiscuous mode [ 611.937781][T21639] bridge0: port 3(macsec0) entered disabled state [ 611.944605][ T36] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 611.973547][T21639] bridge_slave_1: left allmulticast mode [ 611.980591][T21639] bridge_slave_1: left promiscuous mode [ 611.996090][T21639] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.036347][T21639] bridge_slave_0: left allmulticast mode [ 612.042074][T21639] bridge_slave_0: left promiscuous mode [ 612.072271][T21639] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.286148][ T5920] tipc: Node number set to 2886997039 [ 612.301231][T21642] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5260'. [ 612.637485][T21657] netdevsim netdevsim2: Direct firmware load for þ failed with error -2 [ 612.686943][T21657] netdevsim netdevsim2: Falling back to sysfs fallback for: þ [ 612.690137][T21659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5266'. [ 612.736941][T21659] atomic_op ffff88807bc5f998 conn xmit_atomic 0000000000000000 [ 612.883530][T21675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5271'. [ 612.977603][T21677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5272'. [ 613.971686][T21724] netlink: 'syz.4.5286': attribute type 10 has an invalid length. [ 614.558169][T21760] netlink: 'syz.3.5302': attribute type 10 has an invalid length. [ 614.660302][T21763] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input8 [ 615.187851][T21783] wg1 speed is unknown, defaulting to 1000 [ 615.216367][T21783] lo speed is unknown, defaulting to 1000 [ 615.418594][T21796] netlink: 'syz.2.5318': attribute type 11 has an invalid length. [ 615.751945][T21809] wg1 speed is unknown, defaulting to 1000 [ 615.778526][T21809] lo speed is unknown, defaulting to 1000 [ 616.005395][T21823] wg1 speed is unknown, defaulting to 1000 [ 616.105734][T21828] __nla_validate_parse: 11 callbacks suppressed [ 616.105758][T21828] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5330'. [ 616.128809][T21829] netlink: 4360 bytes leftover after parsing attributes in process `syz.4.5330'. [ 616.129160][T21823] lo speed is unknown, defaulting to 1000 [ 616.294767][T21832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5331'. [ 616.504106][ T36] net_ratelimit: 103 callbacks suppressed [ 616.504129][ T36] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 616.533850][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 616.664329][ T12] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 616.696391][ T12] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 616.734151][ T12] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 616.784580][ T12] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 616.834011][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 616.929316][T21861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5341'. [ 616.943979][ T12] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 616.973852][ T1164] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 617.013914][ T1164] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 617.174511][T21872] netlink: 116 bytes leftover after parsing attributes in process `syz.2.5348'. [ 617.207781][T21872] syzkaller1: entered promiscuous mode [ 617.214329][T21872] syzkaller1: entered allmulticast mode [ 617.233072][T21872] syzkaller1: left promiscuous mode [ 617.233712][T21879] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5350'. [ 617.252023][T21872] syzkaller1: left allmulticast mode [ 617.254660][T21879] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5350'. [ 617.307070][T21880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5349'. [ 618.222527][T21910] netlink: 296 bytes leftover after parsing attributes in process `syz.4.5361'. [ 618.224684][T21912] netlink: 45 bytes leftover after parsing attributes in process `syz.3.5360'. [ 618.730902][T21933] wg1 speed is unknown, defaulting to 1000 [ 618.739991][T21933] lo speed is unknown, defaulting to 1000 [ 618.940165][T21941] 8021q: adding VLAN 0 to HW filter on device bond4 [ 618.948416][T21936] wg1 speed is unknown, defaulting to 1000 [ 618.957038][T21936] lo speed is unknown, defaulting to 1000 [ 619.237901][T21951] netlink: 'syz.0.5376': attribute type 8 has an invalid length. [ 619.257612][T21941] bond4 (unregistering): Released all slaves [ 619.368304][T21945] wg1 speed is unknown, defaulting to 1000 [ 619.415244][T21945] lo speed is unknown, defaulting to 1000 [ 619.859317][T21983] netlink: 'syz.0.5384': attribute type 10 has an invalid length. [ 619.873068][T21983] netlink: 'syz.0.5384': attribute type 10 has an invalid length. [ 619.893087][T21985] FAULT_INJECTION: forcing a failure. [ 619.893087][T21985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 619.908968][T21985] CPU: 0 UID: 0 PID: 21985 Comm: syz.1.5386 Not tainted syzkaller #0 PREEMPT(full) [ 619.909000][T21985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 619.909014][T21985] Call Trace: [ 619.909023][T21985] [ 619.909034][T21985] dump_stack_lvl+0x189/0x250 [ 619.909069][T21985] ? __pfx____ratelimit+0x10/0x10 [ 619.909101][T21985] ? __pfx_dump_stack_lvl+0x10/0x10 [ 619.909131][T21985] ? __pfx__printk+0x10/0x10 [ 619.909153][T21985] ? __might_fault+0xb0/0x130 [ 619.909196][T21985] should_fail_ex+0x414/0x560 [ 619.909234][T21985] _copy_from_user+0x2d/0xb0 [ 619.909263][T21985] do_ipv6_setsockopt+0x23e/0x2eb0 [ 619.909298][T21985] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 619.909332][T21985] ? aa_label_sk_perm+0x4cd/0x630 [ 619.909361][T21985] ? get_pid_task+0x20/0x1f0 [ 619.909396][T21985] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 619.909465][T21985] ? vfs_write+0x956/0xb30 [ 619.909512][T21985] ? __pfx___might_resched+0x10/0x10 [ 619.909551][T21985] ? __lock_acquire+0xab9/0xd20 [ 619.909581][T21985] ipv6_setsockopt+0x59/0x170 [ 619.909609][T21985] rawv6_setsockopt+0x23b/0x5b0 [ 619.909637][T21985] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 619.909661][T21985] ? aa_sock_opt_perm+0xff/0x1b0 [ 619.909758][T21985] ? sock_common_setsockopt+0x36/0xc0 [ 619.909802][T21985] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 619.909837][T21985] do_sock_setsockopt+0x17c/0x1b0 [ 619.909865][T21985] __x64_sys_setsockopt+0x13f/0x1b0 [ 619.909893][T21985] do_syscall_64+0xfa/0xfa0 [ 619.909913][T21985] ? lockdep_hardirqs_on+0x9c/0x150 [ 619.909939][T21985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.909961][T21985] ? clear_bhb_loop+0x60/0xb0 [ 619.909986][T21985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.910007][T21985] RIP: 0033:0x7f24e658f749 [ 619.910027][T21985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 619.910045][T21985] RSP: 002b:00007f24e74ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 619.910069][T21985] RAX: ffffffffffffffda RBX: 00007f24e67e5fa0 RCX: 00007f24e658f749 [ 619.910085][T21985] RDX: 00000000000000d1 RSI: 0000000000000029 RDI: 0000000000000003 [ 619.910098][T21985] RBP: 00007f24e74ea090 R08: 0000000000000004 R09: 0000000000000000 [ 619.910111][T21985] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 619.910125][T21985] R13: 00007f24e67e6038 R14: 00007f24e67e5fa0 R15: 00007ffcc1de3068 [ 619.910161][T21985] [ 620.163279][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880288c5c00: rx timeout, send abort [ 620.174841][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880288c5c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 620.199615][T21974] wg1 speed is unknown, defaulting to 1000 [ 620.210627][T21974] lo speed is unknown, defaulting to 1000 [ 621.172155][T22033] __nla_validate_parse: 9 callbacks suppressed [ 621.172175][T22033] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5403'. [ 621.229298][T22033] sctp: [Deprecated]: syz.0.5403 (pid 22033) Use of int in maxseg socket option. [ 621.229298][T22033] Use struct sctp_assoc_value instead [ 621.283972][T22034] netlink: 136 bytes leftover after parsing attributes in process `syz.3.5401'. [ 621.554437][T22046] net_ratelimit: 124 callbacks suppressed [ 621.554452][T22046] ip6_vti0: mtu less than device minimum [ 621.606277][ T1164] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 621.616329][ T1164] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 621.743870][ T1164] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 621.751919][ T1164] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 621.874429][ T36] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 621.882319][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 622.003957][ T37] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 622.013093][ T37] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 622.135839][ T37] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 622.159132][T22070] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5414'. [ 622.492490][T22089] netlink: 'syz.2.5417': attribute type 8 has an invalid length. [ 622.500925][T22089] sch_fq: defrate 0 ignored. [ 622.667600][T22092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5419'. [ 622.773067][T22092] 8021q: adding VLAN 0 to HW filter on device bond4 [ 622.952134][T22106] netlink: 'syz.2.5422': attribute type 10 has an invalid length. [ 623.020271][T22111] netlink: 'syz.2.5422': attribute type 10 has an invalid length. [ 623.222142][T22092] bond4 (unregistering): Released all slaves [ 623.398708][T22129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5429'. [ 623.409448][T22129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5429'. [ 623.419179][T22129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5429'. [ 623.506881][T22134] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 623.520445][T22132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5430'. [ 623.538412][T22138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5432'. [ 623.665132][T22144] bond3 (unregistering): Released all slaves [ 624.162179][T22160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5442'. [ 624.266337][T22165] netlink: 'syz.2.5440': attribute type 10 has an invalid length. [ 624.315348][T22166] lo: entered allmulticast mode [ 624.327442][T22166] tunl0: entered allmulticast mode [ 624.346420][T22166] gre0: entered allmulticast mode [ 624.372455][T22166] gretap0: entered allmulticast mode [ 624.403292][T22166] erspan0: entered allmulticast mode [ 624.420351][T22166] ip_vti0: entered allmulticast mode [ 624.442458][T22166] ip6_vti0: entered allmulticast mode [ 624.470784][T22166] sit0: entered allmulticast mode [ 624.573288][T22166] ip6tnl0: entered allmulticast mode [ 624.635896][T22166] ip6gre0: entered allmulticast mode [ 624.674629][T22166] syz_tun: entered allmulticast mode [ 624.704411][T22166] ip6gretap0: entered allmulticast mode [ 624.733026][T22166] vcan0: entered allmulticast mode [ 624.766461][T22166] bond0: entered allmulticast mode [ 624.781950][T22166] bond_slave_0: entered allmulticast mode [ 624.796097][T22166] bond_slave_1: entered allmulticast mode [ 624.816395][T22166] `: entered allmulticast mode [ 624.821417][T22166] team_slave_0: entered allmulticast mode [ 624.828211][T22166] team_slave_1: entered allmulticast mode [ 624.834433][T22166] dummy0: entered allmulticast mode [ 624.842116][T22166] nlmon0: entered allmulticast mode [ 624.863703][T22166] caif0: entered allmulticast mode [ 624.876966][T22166] batadv0: entered allmulticast mode [ 624.892447][T22166] vxcan0: entered allmulticast mode [ 624.899637][T22166] vxcan1: entered allmulticast mode [ 624.916584][T22166] wg0: entered allmulticast mode [ 624.940155][T22166] wg1: entered allmulticast mode [ 624.952576][T22166] wg2: entered allmulticast mode [ 624.964103][T22166] veth0_to_bridge: entered allmulticast mode [ 624.977951][T22166] bridge_slave_0: entered allmulticast mode [ 624.989778][T22166] veth1_to_bridge: entered allmulticast mode [ 625.005753][T22166] bridge_slave_1: entered allmulticast mode [ 625.016957][T22166] veth0_to_bond: entered allmulticast mode [ 625.038765][T22166] veth1_to_bond: entered allmulticast mode [ 625.050428][T22166] veth0_to_team: entered allmulticast mode [ 625.062720][T22166] veth1_to_team: entered allmulticast mode [ 625.075701][T22166] veth0_to_batadv: entered allmulticast mode [ 625.084852][T22166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 625.093264][T22166] batadv_slave_0: entered allmulticast mode [ 625.104493][T22166] veth1_to_batadv: entered allmulticast mode [ 625.115487][T22166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 625.124022][T22166] batadv_slave_1: entered allmulticast mode [ 625.133299][T22166] xfrm0: entered allmulticast mode [ 625.143257][T22166] veth0_to_hsr: entered allmulticast mode [ 625.152536][T22166] hsr_slave_0: entered allmulticast mode [ 625.167118][T22166] veth1_to_hsr: entered allmulticast mode [ 625.179344][T22166] hsr_slave_1: entered allmulticast mode [ 625.189237][T22166] hsr0: entered allmulticast mode [ 625.201358][T22166] veth1_virt_wifi: entered allmulticast mode [ 625.216535][T22166] veth0_virt_wifi: entered allmulticast mode [ 625.228540][T22166] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 625.238447][T22166] veth1_vlan: entered allmulticast mode [ 625.249520][T22166] veth0_vlan: entered allmulticast mode [ 625.281859][T22166] vlan0: entered allmulticast mode [ 625.287716][T22166] vlan1: entered allmulticast mode [ 625.294606][T22166] macvlan0: entered allmulticast mode [ 625.305602][T22166] macvlan1: entered allmulticast mode [ 625.314621][T22166] ipvlan0: entered allmulticast mode [ 625.320317][T22166] ipvlan1: entered allmulticast mode [ 625.327177][T22166] veth1_macvtap: entered allmulticast mode [ 625.337397][T22166] veth0_macvtap: entered allmulticast mode [ 625.347680][T22166] macvtap0: entered allmulticast mode [ 625.357368][T22166] geneve0: entered allmulticast mode [ 625.376253][T22166] geneve1: entered allmulticast mode [ 625.385295][T22166] mac80211_hwsim hwsim52 wlan0: left promiscuous mode [ 625.392144][T22166] mac80211_hwsim hwsim52 wlan0: entered allmulticast mode [ 625.399810][T22166] veth2: entered allmulticast mode [ 625.405371][T22166] veth3: entered allmulticast mode [ 625.411642][T22166] vlan2: entered allmulticast mode [ 625.420231][T22166] bond1: entered allmulticast mode [ 625.425761][T22166] veth4: entered allmulticast mode [ 625.431165][T22166] veth5: entered allmulticast mode [ 625.443644][T22166] bridge1: entered allmulticast mode [ 625.454630][T22166] ip6tnl4: entered allmulticast mode [ 625.466672][T22166] sit1: entered allmulticast mode [ 625.473515][T22166] mac80211_hwsim hwsim66 wlan2: entered allmulticast mode [ 625.481493][T22166] vlan3: left promiscuous mode [ 625.486887][T22166] vlan3: entered allmulticast mode [ 625.493241][T22166] hsr1: left promiscuous mode [ 625.498689][T22166] hsr1: entered allmulticast mode [ 625.505403][T22166] macsec0: entered allmulticast mode [ 625.511974][T22166] netdevsim netdevsim4 eth0: entered allmulticast mode [ 625.519295][T22166] netdevsim netdevsim4 eth1: entered allmulticast mode [ 625.526620][T22166] netdevsim netdevsim4 eth2: entered allmulticast mode [ 625.534029][T22166] netdevsim netdevsim4 eth3: entered allmulticast mode [ 625.542316][T22166] vxlan0: entered allmulticast mode [ 625.552308][T22166] syztnl2: entered allmulticast mode [ 625.559844][T22166] ip6gretap1: entered allmulticast mode [ 625.574637][T22166] veth0: entered allmulticast mode [ 625.580279][T22166] veth1: entered allmulticast mode [ 625.590415][T22166] bond2: entered allmulticast mode [ 625.674717][ T36] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.713863][ T36] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.744013][ T36] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.752436][ T36] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.782324][ T36] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.792053][ T36] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.801130][ T36] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.810228][ T36] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.307200][T22237] netlink: 'syz.4.5462': attribute type 8 has an invalid length. [ 626.316133][T22237] __nla_validate_parse: 4 callbacks suppressed [ 626.316156][T22237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5462'. [ 626.392321][T22241] netlink: 'syz.0.5461': attribute type 12 has an invalid length. [ 626.427477][T22242] vcan0: left allmulticast mode [ 626.433032][T22242] netlink: 136 bytes leftover after parsing attributes in process `syz.2.5459'. [ 626.654313][ T12] net_ratelimit: 137 callbacks suppressed [ 626.654337][ T12] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 626.672095][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 626.784577][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 626.797011][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 626.917550][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 626.926818][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 626.999909][T22255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5466'. [ 627.054001][ T12] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 627.087821][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 627.218345][T22264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5471'. [ 627.223055][T22266] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 627.243975][ T12] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 627.289553][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 627.460362][T22283] netlink: 'syz.0.5474': attribute type 10 has an invalid length. [ 627.638425][T22293] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5480'. [ 627.742363][T22302] netlink: 'syz.1.5481': attribute type 1 has an invalid length. [ 627.793926][T22302] netlink: 'syz.1.5481': attribute type 3 has an invalid length. [ 627.823906][T22302] netlink: 'syz.1.5481': attribute type 1 has an invalid length. [ 627.831711][T22302] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5481'. [ 627.994944][T22310] TCP: TCP_TX_DELAY enabled [ 628.116086][T22320] netlink: 296 bytes leftover after parsing attributes in process `syz.2.5490'. [ 628.241356][T22325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5493'. [ 628.299802][T22327] Unsupported ieee802154 address type: 0 [ 628.381032][T22337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5495'. [ 628.414360][T22325] bond2: option lacp_active: invalid value (8) [ 628.422804][T22325] bond2 (unregistering): Released all slaves [ 628.547479][T22337] 8021q: adding VLAN 0 to HW filter on device bond4 [ 628.868391][T22345] bond4 (unregistering): Released all slaves [ 629.007178][T22369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5508'. [ 629.136024][T22374] netlink: 'syz.4.5510': attribute type 6 has an invalid length. [ 629.182306][ T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 629.191266][T22374] netlink: 'syz.4.5510': attribute type 6 has an invalid length. [ 629.200134][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 629.209302][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 629.219832][ T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 629.244081][T22378] vetè0_virt_wif: entered allmulticast mode [ 629.259761][T22378] tunl0: entered allmulticast mode [ 629.276592][T22378] gre0: entered allmulticast mode [ 629.291558][T22378] gretap0: entered allmulticast mode [ 629.300294][T22378] erspan0: entered allmulticast mode [ 629.314500][T22378] ip_vti0: entered allmulticast mode [ 629.320523][T22378] ip6_vti0: entered allmulticast mode [ 629.327432][T22378] sit0: entered allmulticast mode [ 629.333025][T22378] ip6tnl0: left promiscuous mode [ 629.344428][T22378] ip6gre0: entered allmulticast mode [ 629.349918][T22378] syz_tun: entered allmulticast mode [ 629.361426][T22378] ip6gretap0: entered allmulticast mode [ 629.367552][T22378] vcan0: entered allmulticast mode [ 629.372889][T22378] bond0: entered allmulticast mode [ 629.378344][T22378] bond_slave_0: entered allmulticast mode [ 629.384461][T22378] bond_slave_1: entered allmulticast mode [ 629.390621][T22378] team0: entered allmulticast mode [ 629.395921][T22378] team_slave_0: entered allmulticast mode [ 629.401714][T22378] team_slave_1: entered allmulticast mode [ 629.407576][T22378] dummy0: entered allmulticast mode [ 629.413128][T22378] nlmon0: entered allmulticast mode [ 629.419031][T22378] caif0: entered allmulticast mode [ 629.424496][T22378] batadv0: entered allmulticast mode [ 629.430002][T22378] vxcan0: entered allmulticast mode [ 629.435472][T22378] vxcan1: entered allmulticast mode [ 629.440847][T22378] wg0: entered allmulticast mode [ 629.446327][T22378] wg1: entered allmulticast mode [ 629.451419][T22378] wg2: entered allmulticast mode [ 629.456621][T22378] veth0_to_bridge: entered allmulticast mode [ 629.462794][T22378] bridge_slave_0: entered allmulticast mode [ 629.469019][T22378] veth1_to_bridge: entered allmulticast mode [ 629.475809][T22378] bridge_slave_1: entered allmulticast mode [ 629.481939][T22378] veth0_to_bond: entered allmulticast mode [ 629.488224][T22378] veth1_to_bond: entered allmulticast mode [ 629.494890][T22378] veth0_to_team: entered allmulticast mode [ 629.501390][T22378] veth0_to_batadv: entered allmulticast mode [ 629.508008][T22378] batadv_slave_0: entered allmulticast mode [ 629.514161][T22378] veth1_to_batadv: entered allmulticast mode [ 629.520362][T22378] batadv_slave_1: entered allmulticast mode [ 629.526551][T22378] xfrm0: entered allmulticast mode [ 629.531853][T22378] veth0_to_hsr: entered allmulticast mode [ 629.538116][T22378] hsr_slave_0: entered allmulticast mode [ 629.544032][T22378] veth1_to_hsr: entered allmulticast mode [ 629.549991][T22378] hsr_slave_1: entered allmulticast mode [ 629.556044][T22378] hsr0: entered allmulticast mode [ 629.561275][T22378] veth1_virt_wifi: entered allmulticast mode [ 629.567780][T22378] veth0_virt_wifi: entered allmulticast mode [ 629.574207][T22378] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 629.581729][T22378] veth1_vlan: entered allmulticast mode [ 629.587514][T22378] veth0_vlan: entered allmulticast mode [ 629.593256][T22378] vlan0: entered allmulticast mode [ 629.598802][T22378] vlan1: entered allmulticast mode [ 629.604172][T22378] macvlan0: entered allmulticast mode [ 629.609788][T22378] macvlan1: entered allmulticast mode [ 629.635226][T22378] ipvlan0: entered allmulticast mode [ 629.641317][T22378] ipvlan1: entered allmulticast mode [ 629.647453][T22378] veth1_macvtap: entered allmulticast mode [ 629.654011][T22378] veth0_macvtap: entered allmulticast mode [ 629.660390][T22378] macvtap0: entered allmulticast mode [ 629.669004][T22378] macsec0: entered allmulticast mode [ 629.679411][T22378] geneve0: entered allmulticast mode [ 629.685516][T22378] geneve1: entered allmulticast mode [ 629.690999][T22378] mac80211_hwsim hwsim57 wlan0: entered allmulticast mode [ 629.698846][T22378] mac80211_hwsim hwsim58 wlan1: entered allmulticast mode [ 629.706294][T22378] mac80211_hwsim hwsim61 wlan2: entered allmulticast mode [ 629.714753][T22378] vlan2: entered allmulticast mode [ 629.727279][T22378] veth2: entered allmulticast mode [ 629.734435][T22378] veth3: entered allmulticast mode [ 629.740037][T22378] bridge1: entered allmulticast mode [ 629.746536][T22378] bridge2: entered allmulticast mode [ 629.759426][T22378] mac80211_hwsim hwsim65 wlan3: entered allmulticast mode [ 629.767380][T22378] hsr1: left promiscuous mode [ 629.772384][T22378] hsr1: entered allmulticast mode [ 629.778176][T22378] veth4: entered allmulticast mode [ 629.783554][T22378] veth5: entered allmulticast mode [ 629.793358][T22378] bond1: entered allmulticast mode [ 629.804453][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.811264][T22378] bond2: entered allmulticast mode [ 629.824233][T22378] veth6: entered allmulticast mode [ 629.829652][T22378] veth7: entered allmulticast mode [ 629.836984][T22378] @: entered allmulticast mode [ 629.846564][T22378] geneve2: left promiscuous mode [ 629.851827][T22378] geneve2: entered allmulticast mode [ 629.864428][T22378] mac80211_hwsim hwsim69 wlan4: entered allmulticast mode [ 629.872007][T22378] mac80211_hwsim hwsim71 wlan5: entered allmulticast mode [ 629.880310][T22378] mac80211_hwsim hwsim72 wlan6: entered allmulticast mode [ 629.888605][T22378] netdevsim netdevsim3 eth0: entered allmulticast mode [ 629.896326][T22378] netdevsim netdevsim3 eth1: entered allmulticast mode [ 629.903541][T22378] netdevsim netdevsim3 eth2: entered allmulticast mode [ 629.910937][T22378] netdevsim netdevsim3 eth3: entered allmulticast mode [ 629.918624][T22378] mac80211_hwsim hwsim76 wlan8: entered allmulticast mode [ 629.926283][T22378] mac80211_hwsim hwsim79 wlan9: entered allmulticast mode [ 629.934486][T22378] bond3: entered allmulticast mode [ 629.942241][T22378] ip6gretap1: entered allmulticast mode [ 629.949158][T22378] syztnl2: entered allmulticast mode [ 629.955430][T22378] mac80211_hwsim hwsim80 wlan7: entered allmulticast mode [ 629.962929][T22378] mac80211_hwsim hwsim82 wlan10: entered allmulticast mode [ 629.998926][T22387] 8021q: adding VLAN 0 to HW filter on device bond1 [ 630.131043][T22393] can: request_module (can-proto-0) failed. [ 630.277304][T22389] bond1 (unregistering): Released all slaves [ 630.295176][ T13] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.303975][ T13] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.312786][ T13] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.323125][ T13] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.324166][T22406] netlink: 'syz.3.5519': attribute type 10 has an invalid length. [ 630.352014][ T13] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.368476][ T13] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.391316][ T13] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.409938][ T13] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.465176][T22408] netlink: 'syz.3.5519': attribute type 10 has an invalid length. [ 630.524382][T22382] wg1 speed is unknown, defaulting to 1000 [ 630.533701][T22382] lo speed is unknown, defaulting to 1000 [ 630.766921][T22414] tipc: Enabled bearer , priority 0 [ 631.194056][T22432] bond0: Device is already in use. [ 631.345655][T22411] tipc: Resetting bearer [ 632.127327][T22453] __nla_validate_parse: 8 callbacks suppressed [ 632.127347][T22453] netlink: 116 bytes leftover after parsing attributes in process `syz.2.5533'. [ 632.783127][T22465] netlink: 'syz.4.5537': attribute type 10 has an invalid length. [ 632.852024][T22466] netlink: 'syz.4.5537': attribute type 10 has an invalid length. [ 633.974675][T22411] tipc: Disabling bearer [ 634.144359][T22469] syzkaller0: entered promiscuous mode [ 634.160607][T22469] syzkaller0: entered allmulticast mode [ 634.365497][T22489] netlink: 'syz.2.5544': attribute type 10 has an invalid length. [ 634.498736][T22496] net_ratelimit: 82 callbacks suppressed [ 634.498757][T22496] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 634.624478][T20774] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 634.831729][T20774] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 635.285145][T22527] netlink: 'syz.0.5560': attribute type 10 has an invalid length. [ 635.294850][T22521] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5559'. [ 635.331173][T22521] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5559'. [ 635.924074][T22574] netlink: 'syz.1.5572': attribute type 39 has an invalid length. [ 636.096964][T22577] netlink: 'syz.1.5573': attribute type 10 has an invalid length. [ 636.203975][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 636.284298][T22587] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5577'. [ 636.412002][T22593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5579'. [ 636.486902][T22597] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5581'. [ 636.500913][T22597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5581'. [ 636.779044][T22613] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5588'. [ 636.779726][T22614] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 636.852733][T22619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5589'. [ 636.931900][T22624] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5590'. [ 637.358003][T22653] netlink: 'syz.0.5600': attribute type 2 has an invalid length. [ 637.371765][T22654] netlink: 'syz.0.5600': attribute type 2 has an invalid length. [ 637.391773][T22653] !: entered promiscuous mode [ 637.398189][T22654] !: left promiscuous mode [ 637.705811][T22673] __nla_validate_parse: 1 callbacks suppressed [ 637.705831][T22673] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5607'. [ 637.723640][T22673] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5607'. [ 638.172339][T22687] wg1 speed is unknown, defaulting to 1000 [ 638.192680][T22691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5614'. [ 638.216352][T22687] lo speed is unknown, defaulting to 1000 [ 638.289531][T22695] netlink: 'syz.0.5615': attribute type 39 has an invalid length. [ 638.711191][T22709] syzkaller0: entered promiscuous mode [ 638.717192][T22709] syzkaller0: entered allmulticast mode [ 638.746406][T22707] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5620'. [ 638.986735][T22725] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5625'. [ 639.054410][T22730] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5626'. [ 639.149079][T22734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5628'. [ 639.334852][T22742] syzkaller1: entered promiscuous mode [ 639.340802][T22742] syzkaller1: entered allmulticast mode [ 639.482502][T22749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5634'. [ 639.510447][T22747] wg1 speed is unknown, defaulting to 1000 [ 639.518861][T22747] lo speed is unknown, defaulting to 1000 [ 639.538023][T22750] xfrm0: entered promiscuous mode [ 639.953551][T22757] wg1 speed is unknown, defaulting to 1000 [ 639.961639][T22757] lo speed is unknown, defaulting to 1000 [ 640.766357][T22802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 640.807671][T22806] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5655'. [ 640.896459][T22810] 8021q: VLANs not supported on ip6tnl0 [ 640.902521][T22811] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5655'. [ 640.979961][T22813] syzkaller1: entered promiscuous mode [ 640.999772][T22813] syzkaller1: entered allmulticast mode [ 641.129626][T22824] IPv6: Can't replace route, no match found [ 641.244361][T22832] netlink: 'syz.0.5667': attribute type 8 has an invalid length. [ 641.522891][T22840] netlink: 'syz.0.5670': attribute type 39 has an invalid length. [ 641.704367][T22849] syzkaller1: entered promiscuous mode [ 641.712976][T22849] syzkaller1: entered allmulticast mode [ 641.907134][T22860] wg1 speed is unknown, defaulting to 1000 [ 641.926909][T22860] lo speed is unknown, defaulting to 1000 [ 642.682367][T22907] netdevsim netdevsim2: Direct firmware load for þ failed with error -2 [ 642.708732][T22907] netdevsim netdevsim2: Falling back to sysfs fallback for: þ [ 643.268067][T22943] __nla_validate_parse: 8 callbacks suppressed [ 643.268092][T22943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5708'. [ 643.411455][T22945] syzkaller1: entered promiscuous mode [ 643.420628][T22945] syzkaller1: entered allmulticast mode [ 643.530599][T22956] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 643.545214][T22959] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 643.631521][T22956] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 643.644596][T22964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5712'. [ 643.664742][T22964] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5712'. [ 643.687242][T22963] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 643.693413][T22963] syzkaller0: linktype set to 780 [ 643.707620][T22956] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 643.804671][T22973] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5716'. [ 643.809316][T22956] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 643.923294][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 643.950404][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 643.993498][T22979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5717'. [ 643.999289][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.011548][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.820547][T23034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5739'. [ 644.921233][T23028] wg1: entered promiscuous mode [ 645.468813][T23052] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5745'. [ 645.668948][T23069] netlink: 'syz.3.5749': attribute type 21 has an invalid length. [ 645.688374][T23069] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5749'. [ 645.893986][T23069] netlink: 35 bytes leftover after parsing attributes in process `syz.3.5749'. [ 645.910845][T23067] syzkaller1: entered promiscuous mode [ 645.919274][T23067] syzkaller1: entered allmulticast mode [ 645.942287][T23065] wg1 speed is unknown, defaulting to 1000 [ 645.961188][T23065] lo speed is unknown, defaulting to 1000 [ 646.065027][T23087] netdevsim netdevsim2: Direct firmware load for þ failed with error -2 [ 646.120482][T23087] netdevsim netdevsim2: Falling back to sysfs fallback for: þ [ 646.644641][T23114] syzkaller1: entered promiscuous mode [ 646.650361][T23114] syzkaller1: entered allmulticast mode [ 647.349385][T23139] syzkaller1: entered promiscuous mode [ 647.371001][T23139] syzkaller1: entered allmulticast mode [ 647.702753][T23153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5784'. [ 647.716375][T18322] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 647.727897][T18322] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 647.737444][T18322] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 647.751544][T18322] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 647.762227][T18322] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 647.790987][T23153] bond1: option ad_actor_sys_prio: invalid value (0) [ 647.798274][T23153] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 647.808788][T23153] bond1 (unregistering): Released all slaves [ 647.868395][T23154] wg1 speed is unknown, defaulting to 1000 [ 647.879226][T23154] lo speed is unknown, defaulting to 1000 [ 648.148251][T23154] chnl_net:caif_netlink_parms(): no params data found [ 648.233931][T23175] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 3, id = 0 [ 648.354756][T23154] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.365073][T23182] __nla_validate_parse: 1 callbacks suppressed [ 648.365097][T23182] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5792'. [ 648.373680][T23154] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.393449][T23154] bridge_slave_0: entered allmulticast mode [ 648.402020][T23154] bridge_slave_0: entered promiscuous mode [ 648.411753][T23154] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.419417][T23154] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.433428][T23154] bridge_slave_1: entered allmulticast mode [ 648.448271][T23154] bridge_slave_1: entered promiscuous mode [ 648.543092][T23191] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5796'. [ 648.557562][T23184] syzkaller1: entered promiscuous mode [ 648.563666][T23191] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5796'. [ 648.569111][T23184] syzkaller1: entered allmulticast mode [ 648.616259][T23154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.629186][T23195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5797'. [ 648.678104][T23154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 648.704733][T23195] bond1: Invalid ad_actor_system MAC address. [ 648.710867][T23195] bond1: option ad_actor_system: invalid value (7) [ 648.720372][T23195] bond1 (unregistering): Released all slaves [ 648.807975][T23193] bond0: Device is already in use. [ 648.876878][T23193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5795'. [ 648.930229][T23189] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 648.948991][T23154] team0: Port device team_slave_0 added [ 649.015372][T23154] team0: Port device team_slave_1 added [ 649.125937][T23154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 649.144734][T23154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 649.202408][T23154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.223041][T23218] netlink: 'syz.1.5802': attribute type 39 has an invalid length. [ 649.235735][T23154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.242794][T23154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 649.269762][T23154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.419531][T23224] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5805'. [ 649.476295][T23154] hsr_slave_0: entered promiscuous mode [ 649.513024][T23154] hsr_slave_1: entered promiscuous mode [ 649.525945][T23154] debugfs: 'hsr0' already exists in 'hsr' [ 649.531750][T23154] Cannot create hsr debugfs directory [ 649.648875][T23234] syzkaller1: entered promiscuous mode [ 649.657033][T23234] syzkaller1: entered allmulticast mode [ 649.786486][T23240] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5810'. [ 649.796425][T18322] Bluetooth: hci4: command tx timeout [ 649.970989][T23248] vlan0: entered promiscuous mode [ 649.976407][T23248] hsr0: entered promiscuous mode [ 650.090608][T23251] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.5817'. [ 650.102747][T23251] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 650.184323][T23260] syzkaller0: entered promiscuous mode [ 650.191149][T23260] syzkaller0: entered allmulticast mode [ 650.616724][T23154] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 650.649464][T23154] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 650.777439][T23154] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 650.810289][T23154] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 650.836865][T23283] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5827'. [ 651.097307][T23154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.132556][T23154] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.142033][T23302] IPVS: Scheduler module ip_vs_sip not found [ 651.151315][T23301] IPVS: Scheduler module ip_vs_sip not found [ 651.158595][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.165952][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.218061][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.225354][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.298511][T23299] wg1 speed is unknown, defaulting to 1000 [ 651.349056][T23299] lo speed is unknown, defaulting to 1000 [ 651.385905][T23316] netlink: 296 bytes leftover after parsing attributes in process `syz.4.5836'. [ 651.776521][T23330] 8021q: adding VLAN 0 to HW filter on device bond4 [ 651.874104][T18322] Bluetooth: hci4: command tx timeout [ 652.150523][T23330] bond4 (unregistering): Released all slaves [ 652.321029][T23154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 652.418278][T23359] wg1 speed is unknown, defaulting to 1000 [ 652.445949][T23359] lo speed is unknown, defaulting to 1000 [ 652.554895][T23154] veth0_vlan: entered promiscuous mode [ 652.579498][T23154] veth1_vlan: entered promiscuous mode [ 652.670419][T23154] veth0_macvtap: entered promiscuous mode [ 652.790339][T23154] veth1_macvtap: entered promiscuous mode [ 652.878617][T23154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 652.907371][T23154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 653.044701][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.054391][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.087827][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.116511][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.196841][T23388] vcan0: left allmulticast mode [ 653.204658][T23388] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 653.473056][T23394] 8021q: adding VLAN 0 to HW filter on device bond4 [ 653.534248][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.542155][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.930609][T23401] bond4 (unregistering): Released all slaves [ 653.954559][T18322] Bluetooth: hci4: command tx timeout [ 654.015986][ T6971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.024022][ T6971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.073381][T23413] __nla_validate_parse: 5 callbacks suppressed [ 654.073403][T23413] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5867'. [ 654.134305][T23417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5869'. [ 654.206083][T23419] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5774'. [ 654.238114][T23421] bridge0: left allmulticast mode [ 654.244135][T23421] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 654.591640][T23442] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5879'. [ 654.714661][T23446] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 654.776249][T23448] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 654.929350][T23458] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5885'. [ 655.090997][T23462] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5886'. [ 655.525058][T23473] wg1 speed is unknown, defaulting to 1000 [ 655.541716][T23482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5893'. [ 655.607542][T23473] lo speed is unknown, defaulting to 1000 [ 655.801544][T23488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5896'. [ 656.034550][T18322] Bluetooth: hci4: command tx timeout [ 656.052403][T23491] syzkaller0: entered promiscuous mode [ 656.070987][T23491] syzkaller0: entered allmulticast mode [ 656.160666][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 656.172094][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 656.182629][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 656.191700][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 656.202771][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 656.475144][T23505] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5901'. [ 656.489999][T23494] wg1 speed is unknown, defaulting to 1000 [ 656.503124][T23494] lo speed is unknown, defaulting to 1000 [ 656.968851][T23519] 8021q: VLANs not supported on vcan0 [ 657.103706][T23494] chnl_net:caif_netlink_parms(): no params data found [ 657.224536][ T6971] macsec0: left allmulticast mode [ 657.229750][ T6971] macsec0: left promiscuous mode [ 657.235876][ T6971] bridge0: port 3(macsec0) entered disabled state [ 657.284494][T23528] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5905'. [ 657.644853][ T6971] gretap0 (unregistering): left promiscuous mode [ 658.039674][ T6971] bond0 (unregistering): left promiscuous mode [ 658.047016][ T6971] bond0 (unregistering): Released all slaves [ 658.070287][ T6971] bond1 (unregistering): Released all slaves [ 658.090738][ T6971] bond2 (unregistering): Released all slaves [ 658.142704][T23527] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 658.275995][ T52] Bluetooth: hci1: command tx timeout [ 658.375385][ T6971] tipc: Disabling bearer [ 658.394178][ T6971] tipc: Left network mode [ 658.543237][T23494] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.560513][T23494] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.585481][T23494] bridge_slave_0: entered allmulticast mode [ 658.606329][T23494] bridge_slave_0: entered promiscuous mode [ 658.626168][T23494] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.643578][T23494] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.658582][T23494] bridge_slave_1: entered allmulticast mode [ 658.676012][T23494] bridge_slave_1: entered promiscuous mode [ 659.031054][T23494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.063246][T23494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.084632][T23553] sctp: [Deprecated]: syz.0.5915 (pid 23553) Use of int in max_burst socket option. [ 659.084632][T23553] Use struct sctp_assoc_value instead [ 659.307476][T23494] team0: Port device team_slave_0 added [ 659.326802][T23564] ip6gretap0: left allmulticast mode [ 659.332867][T23564] __nla_validate_parse: 5 callbacks suppressed [ 659.332890][T23564] netlink: 136 bytes leftover after parsing attributes in process `syz.0.5918'. [ 659.362782][T23564] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 659.386675][T23494] team0: Port device team_slave_1 added [ 659.556124][T23494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.563145][T23494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.624118][T23494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.696604][T23494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.703620][T23494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.761631][T23494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 659.842505][ T6971] veth0_to_batadv: left promiscuous mode [ 659.900136][ T6971] hsr_slave_0: left promiscuous mode [ 659.908259][ T6971] hsr_slave_1: left promiscuous mode [ 660.051175][T23575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5922'. [ 660.366172][ T52] Bluetooth: hci1: command tx timeout [ 661.411104][T23590] netlink: 'syz.2.5925': attribute type 1 has an invalid length. [ 661.419273][T23590] netlink: 240 bytes leftover after parsing attributes in process `syz.2.5925'. [ 661.527925][ T6971] team0 (unregistering): Port device dummy0 removed [ 661.728073][T23577] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 661.751055][T23584] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 661.773851][T23598] netlink: 136 bytes leftover after parsing attributes in process `syz.2.5928'. [ 661.829393][T23598] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 662.049736][T23494] hsr_slave_0: entered promiscuous mode [ 662.076549][T23494] hsr_slave_1: entered promiscuous mode [ 662.083317][T23494] debugfs: 'hsr0' already exists in 'hsr' [ 662.099899][T23494] Cannot create hsr debugfs directory [ 662.434017][ T52] Bluetooth: hci1: command tx timeout [ 662.596994][T23624] wg1 speed is unknown, defaulting to 1000 [ 662.611223][T23624] lo speed is unknown, defaulting to 1000 [ 662.722431][T23627] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5938'. [ 662.732848][T23627] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5938'. [ 662.744931][T23627] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5938'. [ 662.754519][T23627] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5938'. [ 662.763524][T23627] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5938'. [ 662.772758][T23627] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5938'. [ 663.253691][T23494] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 663.276341][T23494] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 663.299518][T23494] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 663.325916][T23494] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 663.381499][T23650] syzkaller1: entered promiscuous mode [ 663.390267][T23650] syzkaller1: entered allmulticast mode [ 663.618056][T23494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.659217][T23494] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.695530][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.702731][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.736836][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.744095][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.808288][ T6971] IPVS: stop unused estimator thread 0... [ 663.842587][T23665] netlink: 'syz.3.5948': attribute type 13 has an invalid length. [ 663.876622][T23665] netlink: 'syz.3.5948': attribute type 17 has an invalid length. [ 663.900900][T23665] vetè0_virt_wif: left allmulticast mode [ 663.955312][T23665] tunl0: left allmulticast mode [ 663.991397][T23665] gre0: left allmulticast mode [ 664.058312][T23665] ip_vti0: left allmulticast mode [ 664.062223][T23677] netlink: 'syz.2.5953': attribute type 8 has an invalid length. [ 664.067723][T23665] ip6_vti0: left allmulticast mode [ 664.080897][T23665] sit0: left allmulticast mode [ 664.097317][T23665] ip6tnl0: left allmulticast mode [ 664.105361][T23665] ip6gre0: left allmulticast mode [ 664.112703][T23665] syz_tun: left allmulticast mode [ 664.129506][T23665] ip6gretap0: left allmulticast mode [ 664.148634][T23665] vcan0: left allmulticast mode [ 664.158935][T23665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 664.169092][T23665] team0: left allmulticast mode [ 664.175983][T23665] dummy0: left allmulticast mode [ 664.182656][T23665] 8021q: adding VLAN 0 to HW filter on device team0 [ 664.199644][T23665] nlmon0: left allmulticast mode [ 664.209011][T23665] caif0: left allmulticast mode [ 664.215131][T23665] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 664.257244][T23677] bond0: entered promiscuous mode [ 664.262601][T23677] bond_slave_0: entered promiscuous mode [ 664.269600][T23677] bond_slave_1: entered promiscuous mode [ 664.279410][T23677] gretap0: entered promiscuous mode [ 664.286528][T23677] veth0_to_batadv: entered promiscuous mode [ 664.293567][T23677] debugfs: 'hsr1' already exists in 'hsr' [ 664.299913][T23677] Cannot create hsr debugfs directory [ 664.305870][T23677] hsr1: entered promiscuous mode [ 664.524465][ T52] Bluetooth: hci1: command tx timeout [ 664.543068][T23494] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 664.556567][T23668] wg1 speed is unknown, defaulting to 1000 [ 664.612257][T23688] syzkaller1: entered promiscuous mode [ 664.619637][T23688] syzkaller1: entered allmulticast mode [ 664.637527][T23668] lo speed is unknown, defaulting to 1000 [ 665.018642][T23705] __nla_validate_parse: 183 callbacks suppressed [ 665.018665][T23705] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5963'. [ 665.035278][T23494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 665.130555][T23708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5964'. [ 665.226612][T23494] veth0_vlan: entered promiscuous mode [ 665.261254][T23494] veth1_vlan: entered promiscuous mode [ 665.355409][T23714] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.363779][T23714] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.467657][T23714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 665.481887][T23714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 665.600716][T23714] hsr1: left promiscuous mode [ 665.612261][ T6971] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.621906][ T6971] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.638316][ T6971] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.672475][ T6971] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.722933][T23494] veth0_macvtap: entered promiscuous mode [ 665.748811][T23494] veth1_macvtap: entered promiscuous mode [ 665.790023][T23724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5970'. [ 665.802818][T23494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 665.823651][T23494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 665.855486][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.893482][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.907470][T23727] syzkaller1: entered promiscuous mode [ 665.917011][T23727] syzkaller1: entered allmulticast mode [ 665.981757][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.998330][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.176111][T23731] wg1 speed is unknown, defaulting to 1000 [ 666.213848][T23731] lo speed is unknown, defaulting to 1000 [ 666.244192][ T6971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.252083][ T6971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.421920][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.441666][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.441796][T23740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5975'. [ 666.554438][T23740] netlink: 'syz.3.5975': attribute type 33 has an invalid length. [ 666.590426][T23740] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5975'. [ 666.630879][T23740] `: renamed from team0 [ 667.402547][T23771] syzkaller1: entered promiscuous mode [ 667.417313][T23771] syzkaller1: entered allmulticast mode [ 667.654983][T18322] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 667.670122][T18322] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 667.681575][T18322] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 667.690507][T18322] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 667.702066][T18322] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 667.760842][T23787] wg1 speed is unknown, defaulting to 1000 [ 667.768835][T23787] lo speed is unknown, defaulting to 1000 [ 668.239863][T23787] chnl_net:caif_netlink_parms(): no params data found [ 668.412861][T23822] syzkaller0: entered promiscuous mode [ 668.429709][T23822] syzkaller0: entered allmulticast mode [ 668.528614][T23787] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.536200][T23787] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.543567][T23787] bridge_slave_0: entered allmulticast mode [ 668.552548][T23787] bridge_slave_0: entered promiscuous mode [ 668.610455][T23787] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.618325][T23787] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.629538][T23787] bridge_slave_1: entered allmulticast mode [ 668.638417][T23787] bridge_slave_1: entered promiscuous mode [ 668.712833][T23787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 668.735996][T23787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 668.938810][T23787] team0: Port device team_slave_0 added [ 668.960151][T23787] team0: Port device team_slave_1 added [ 669.059327][T23787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 669.071575][T23787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.100379][T23787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 669.121254][T23787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 669.129406][T23787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.156388][T23787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.318086][T23787] hsr_slave_0: entered promiscuous mode [ 669.344822][T23787] hsr_slave_1: entered promiscuous mode [ 669.367005][T23787] debugfs: 'hsr0' already exists in 'hsr' [ 669.372831][T23787] Cannot create hsr debugfs directory [ 669.491058][T23873] IPv6: Can't replace route, no match found [ 669.795433][T18322] Bluetooth: hci0: command tx timeout [ 669.800941][T23883] Bluetooth: MGMT ver 1.23 [ 669.977081][ T6971] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.107054][ T6971] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.357257][ T6971] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.442892][ T6971] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.457984][T23908] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6025'. [ 670.760369][ T6971] macsec0: left allmulticast mode [ 670.773915][ T6971] macsec0: left promiscuous mode [ 670.779783][ T6971] bridge0: port 3(macsec0) entered disabled state [ 670.832965][ T6971] bridge_slave_0: left promiscuous mode [ 670.844303][ T6971] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.015446][T23936] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6033'. [ 671.266019][ T6971] gretap0 (unregistering): left promiscuous mode [ 671.370210][ T6971] team0: Port device geneve0 removed [ 671.781425][ T6971] bond0 (unregistering): left promiscuous mode [ 671.787902][ T6971] bond_slave_0: left promiscuous mode [ 671.798141][ T6971] bond_slave_1: left promiscuous mode [ 671.805919][ T6971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 671.817163][ T6971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 671.826814][ T6971] bond0 (unregistering): Released all slaves [ 671.871816][T23938] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 671.879492][T23938] syzkaller0: linktype set to 780 [ 671.884037][T18322] Bluetooth: hci0: command tx timeout [ 672.120080][T23954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6037'. [ 672.147102][T23954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6037'. [ 672.466356][T23974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6042'. [ 672.598986][T23787] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 672.620721][T23787] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 672.690315][T23787] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 672.733406][T23787] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 672.899523][T23990] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 672.905921][T23990] syzkaller0: linktype set to 780 [ 673.027311][T23787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.088147][T23787] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.111226][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.118514][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.167759][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.175010][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.197124][T24008] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 673.206937][T24008] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 673.446646][ T6971] tipc: Left network mode [ 673.530902][T23787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 673.692896][T23787] veth0_vlan: entered promiscuous mode [ 673.812564][T23787] veth1_vlan: entered promiscuous mode [ 673.836283][T24024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6055'. [ 673.876335][T24024] syz_tun: entered promiscuous mode [ 673.882213][T24024] macvtap1: entered promiscuous mode [ 673.954224][T18322] Bluetooth: hci0: command tx timeout [ 674.087429][T23787] veth0_macvtap: entered promiscuous mode [ 674.118652][T23787] veth1_macvtap: entered promiscuous mode [ 674.146372][ T6971] veth0_to_batadv: left promiscuous mode [ 674.173404][ T6971] hsr_slave_0: left promiscuous mode [ 674.181140][ T6971] hsr_slave_1: left promiscuous mode [ 674.190533][ T6971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.201243][ T6971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 674.245358][ T6971] pimreg3 (unregistering): left allmulticast mode [ 674.459248][T24048] netlink: 'syz.2.6062': attribute type 39 has an invalid length. [ 674.779569][T24051] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6063'. [ 675.069105][ T6971] team0 (unregistering): Port device team_slave_1 removed [ 675.121918][ T6971] team0 (unregistering): Port device team_slave_0 removed [ 675.441671][ T6971] dummy0 (unregistering): left allmulticast mode [ 675.449465][ T6971] team0 (unregistering): Port device dummy0 removed [ 675.711152][T24057] netlink: 296 bytes leftover after parsing attributes in process `syz.4.6064'. [ 675.723614][T24057] Bluetooth: MGMT ver 1.23 [ 675.762864][T23787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 675.821257][T23787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 675.862918][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.933907][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.963277][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.034519][T18322] Bluetooth: hci0: command tx timeout [ 676.041327][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.176038][ T6971] IPVS: stop unused estimator thread 0... [ 676.438524][ T6971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.447060][T24079] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6071'. [ 676.457253][ T6971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.745055][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.763216][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.888638][T24095] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6078'. [ 676.915603][T24097] netlink: 'syz.2.6077': attribute type 39 has an invalid length. [ 676.974741][T24103] tun0: tun_chr_ioctl cmd 1074025675 [ 676.980281][T24103] tun0: persist enabled [ 677.116359][T24106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6079'. [ 677.628053][T24132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6088'. [ 677.727789][T24135] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6089'. [ 677.762169][T24135] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6089'. [ 677.801844][T24143] netlink: 'syz.4.6090': attribute type 39 has an invalid length. [ 678.129400][T24156] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6097'. [ 678.283298][T24165] FAULT_INJECTION: forcing a failure. [ 678.283298][T24165] name failslab, interval 1, probability 0, space 0, times 0 [ 678.299942][T24165] CPU: 1 UID: 0 PID: 24165 Comm: syz.4.6098 Not tainted syzkaller #0 PREEMPT(full) [ 678.299973][T24165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 678.299987][T24165] Call Trace: [ 678.299995][T24165] [ 678.300006][T24165] dump_stack_lvl+0x189/0x250 [ 678.300041][T24165] ? __pfx____ratelimit+0x10/0x10 [ 678.300071][T24165] ? __pfx_dump_stack_lvl+0x10/0x10 [ 678.300097][T24165] ? __pfx__printk+0x10/0x10 [ 678.300120][T24165] ? __pfx___might_resched+0x10/0x10 [ 678.300150][T24165] ? fs_reclaim_acquire+0x7d/0x100 [ 678.300178][T24165] should_fail_ex+0x414/0x560 [ 678.300212][T24165] should_failslab+0xa8/0x100 [ 678.300233][T24165] __kmalloc_cache_noprof+0x6f/0x6f0 [ 678.300260][T24165] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 678.300287][T24165] ? genl_start+0x1c9/0x6c0 [ 678.300317][T24165] genl_start+0x1c9/0x6c0 [ 678.300341][T24165] ? netlink_lookup+0x30/0x200 [ 678.300366][T24165] __netlink_dump_start+0x469/0x7e0 [ 678.300395][T24165] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 678.300425][T24165] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 678.300450][T24165] ? genl_get_cmd+0x67f/0x910 [ 678.300476][T24165] ? __pfx___mutex_lock+0x10/0x10 [ 678.300497][T24165] ? __pfx_genl_start+0x10/0x10 [ 678.300519][T24165] ? __pfx_genl_dumpit+0x10/0x10 [ 678.300541][T24165] ? __pfx_genl_done+0x10/0x10 [ 678.300569][T24165] ? __pfx_stack_trace_save+0x10/0x10 [ 678.300609][T24165] genl_rcv_msg+0x5da/0x790 [ 678.300647][T24165] ? __pfx_genl_rcv_msg+0x10/0x10 [ 678.300671][T24165] ? __pfx_smcd_nl_get_device+0x10/0x10 [ 678.300711][T24165] netlink_rcv_skb+0x208/0x470 [ 678.300729][T24165] ? __lock_acquire+0xab9/0xd20 [ 678.300749][T24165] ? __pfx_genl_rcv_msg+0x10/0x10 [ 678.300776][T24165] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 678.300816][T24165] ? down_read+0x1ad/0x2e0 [ 678.300840][T24165] genl_rcv+0x28/0x40 [ 678.300863][T24165] netlink_unicast+0x82f/0x9e0 [ 678.300902][T24165] ? __pfx_netlink_unicast+0x10/0x10 [ 678.300933][T24165] ? netlink_sendmsg+0x642/0xb30 [ 678.300951][T24165] ? skb_put+0x11b/0x210 [ 678.300975][T24165] netlink_sendmsg+0x805/0xb30 [ 678.301006][T24165] ? __pfx_netlink_sendmsg+0x10/0x10 [ 678.301031][T24165] ? aa_sock_msg_perm+0xf1/0x1d0 [ 678.301060][T24165] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 678.301079][T24165] ? __pfx_netlink_sendmsg+0x10/0x10 [ 678.301101][T24165] __sock_sendmsg+0x21c/0x270 [ 678.301141][T24165] ____sys_sendmsg+0x505/0x830 [ 678.301170][T24165] ? __pfx_____sys_sendmsg+0x10/0x10 [ 678.301201][T24165] ? import_iovec+0x74/0xa0 [ 678.301230][T24165] ___sys_sendmsg+0x21f/0x2a0 [ 678.301255][T24165] ? __pfx____sys_sendmsg+0x10/0x10 [ 678.301316][T24165] ? __fget_files+0x2a/0x420 [ 678.301333][T24165] ? __fget_files+0x3a0/0x420 [ 678.301362][T24165] __x64_sys_sendmsg+0x19b/0x260 [ 678.301387][T24165] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 678.301420][T24165] ? __pfx_ksys_write+0x10/0x10 [ 678.301450][T24165] ? do_syscall_64+0xbe/0xfa0 [ 678.301474][T24165] do_syscall_64+0xfa/0xfa0 [ 678.301491][T24165] ? lockdep_hardirqs_on+0x9c/0x150 [ 678.301509][T24165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.301527][T24165] ? clear_bhb_loop+0x60/0xb0 [ 678.301550][T24165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.301569][T24165] RIP: 0033:0x7f50b758f749 [ 678.301589][T24165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 678.301606][T24165] RSP: 002b:00007f50b8378038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 678.301628][T24165] RAX: ffffffffffffffda RBX: 00007f50b77e5fa0 RCX: 00007f50b758f749 [ 678.301643][T24165] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 678.301656][T24165] RBP: 00007f50b8378090 R08: 0000000000000000 R09: 0000000000000000 [ 678.301668][T24165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 678.301681][T24165] R13: 00007f50b77e6038 R14: 00007f50b77e5fa0 R15: 00007ffce071a008 [ 678.301718][T24165] [ 678.792254][T24169] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6099'. [ 678.917874][T24169] 8021q: adding VLAN 0 to HW filter on device bond4 [ 679.152210][T24185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 679.247729][T24187] netlink: 'syz.2.6106': attribute type 39 has an invalid length. [ 679.307092][T24188] atomic_op ffff88804bd1c998 conn xmit_atomic 0000000000000000 [ 679.354980][T24169] bond4 (unregistering): Released all slaves [ 679.553639][T24202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6110'. [ 679.605612][T24203] syzkaller1: entered promiscuous mode [ 679.611263][T24203] syzkaller1: entered allmulticast mode [ 679.636759][T24203] geneve2: entered promiscuous mode [ 679.643568][ T1164] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.658731][ T1164] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.683534][ T1164] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.709786][ T1164] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.731690][T24208] netlink: 'syz.0.6114': attribute type 2 has an invalid length. [ 679.755644][T24208] !: entered promiscuous mode [ 679.766564][T24208] netlink: 'syz.0.6114': attribute type 2 has an invalid length. [ 679.791717][T24208] !: left promiscuous mode [ 680.335145][T24227] netlink: 'syz.4.6119': attribute type 39 has an invalid length. [ 680.443353][T24229] macvtap2: entered promiscuous mode [ 680.467511][T24229] mac80211_hwsim hwsim58 wlan1: entered promiscuous mode [ 680.544993][T24236] vlan3: entered promiscuous mode [ 680.560621][T24236] vlan3: entered allmulticast mode [ 680.588602][T24236] hsr_slave_1: entered allmulticast mode [ 680.693166][T24236] wg1 speed is unknown, defaulting to 1000 [ 680.772690][T24246] __nla_validate_parse: 3 callbacks suppressed [ 680.772720][T24246] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6128'. [ 680.860541][T24246] 8021q: adding VLAN 0 to HW filter on device bond3 [ 681.034652][ T5949] IPVS: starting estimator thread 0... [ 681.054591][T24239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6121'. [ 681.112391][T24258] nbd2: detected capacity change from 0 to 127 [ 681.119240][T24261] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6131'. [ 681.130739][T24258] netlink: 'syz.3.6131': attribute type 10 has an invalid length. [ 681.141050][T24259] IPVS: using max 33 ests per chain, 79200 per kthread [ 681.158414][T18322] block nbd2: Receive control failed (result -32) [ 681.259361][T24265] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6133'. [ 681.260722][T24246] bond3 (unregistering): Released all slaves [ 681.671566][T24262] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 681.700810][T24262] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 681.714897][T24262] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 681.747258][T24278] xt_cluster: node mask cannot exceed total number of nodes [ 681.782658][T24283] wg1 speed is unknown, defaulting to 1000 [ 682.143380][T24298] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6140'. [ 682.194639][T24298] 8021q: VLANs not supported on ipvlan1 [ 682.302071][T24298] macsec1: entered promiscuous mode [ 682.355211][T24298] macsec1: entered allmulticast mode [ 682.447388][T24303] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 682.475196][T24303] syzkaller0: linktype set to 780 [ 682.538558][T24313] netlink: 'syz.1.6143': attribute type 10 has an invalid length. [ 682.606937][T24313] bridge0: port 3(macsec0) entered blocking state [ 682.613571][T24313] bridge0: port 3(macsec0) entered disabled state [ 682.654390][T24313] macsec0: entered allmulticast mode [ 682.670132][T24313] veth1_macvtap: entered allmulticast mode [ 682.685424][T24313] macsec0: entered promiscuous mode [ 682.694863][T24313] bridge0: port 3(macsec0) entered blocking state [ 682.701692][T24313] bridge0: port 3(macsec0) entered forwarding state [ 682.811245][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 682.822166][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 682.832173][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 682.868001][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 682.876084][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 683.068389][T15007] `: Port device syz_tun removed [ 683.117036][T24317] wg1 speed is unknown, defaulting to 1000 [ 683.486588][T24317] chnl_net:caif_netlink_parms(): no params data found [ 683.509552][T24348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6154'. [ 683.561835][T24351] netlink: 'syz.1.6152': attribute type 10 has an invalid length. [ 683.706709][T24317] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.724778][T24317] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.733257][T24317] bridge_slave_0: entered allmulticast mode [ 683.741461][T24317] bridge_slave_0: entered promiscuous mode [ 683.765676][T24317] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.777734][T24317] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.790903][T24317] bridge_slave_1: entered allmulticast mode [ 683.799906][T24317] bridge_slave_1: entered promiscuous mode [ 683.839956][T24362] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 683.846395][T24362] syzkaller0: linktype set to 780 [ 683.913999][T24317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.933482][T24317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.078447][T24317] team0: Port device team_slave_0 added [ 684.100377][T24317] team0: Port device team_slave_1 added [ 684.184815][T24317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.192006][T24317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.215051][T24380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6161'. [ 684.220973][T24317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.267254][T24380] 8021q: adding VLAN 0 to HW filter on device bond1 [ 684.276599][T24317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.283903][T24317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.310589][T24317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.323257][T24375] wg1 speed is unknown, defaulting to 1000 [ 684.411921][T24383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6164'. [ 684.540241][T24380] bond1 (unregistering): Released all slaves [ 684.683627][T24317] hsr_slave_0: entered promiscuous mode [ 684.695796][T24317] hsr_slave_1: entered promiscuous mode [ 684.705777][T24317] debugfs: 'hsr0' already exists in 'hsr' [ 684.711590][T24317] Cannot create hsr debugfs directory [ 684.993527][T24403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6172'. [ 684.995904][ T52] Bluetooth: hci3: command tx timeout [ 685.079863][T24403] 8021q: adding VLAN 0 to HW filter on device bond1 [ 685.196159][T24410] netlink: 296 bytes leftover after parsing attributes in process `syz.1.6174'. [ 685.294969][T24403] bond1 (unregistering): Released all slaves [ 685.411239][T24317] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.521133][T24317] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.538319][T24420] netlink: 'syz.1.6176': attribute type 10 has an invalid length. [ 685.548705][T24422] xt_hashlimit: size too large, truncated to 1048576 [ 685.560218][T24423] xt_hashlimit: size too large, truncated to 1048576 [ 685.626688][T24317] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.770950][T24317] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.927705][T24437] __nla_validate_parse: 3 callbacks suppressed [ 685.927727][T24437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6182'. [ 686.039901][T24440] netlink: 'syz.2.6184': attribute type 8 has an invalid length. [ 686.049559][T24441] netlink: 'syz.2.6184': attribute type 8 has an invalid length. [ 686.159686][T24448] dummy0: entered promiscuous mode [ 686.165507][T24448] macsec2: entered promiscuous mode [ 686.180676][T24448] dummy0: left promiscuous mode [ 686.262594][T24454] netlink: 'syz.2.6188': attribute type 10 has an invalid length. [ 686.291270][T24454] bridge0: port 3(macsec0) entered blocking state [ 686.300960][T24454] bridge0: port 3(macsec0) entered disabled state [ 686.314177][T24454] macsec0: entered allmulticast mode [ 686.319615][T24454] veth1_macvtap: entered allmulticast mode [ 686.330786][T24454] macsec0: entered promiscuous mode [ 686.341502][T24317] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 686.366586][T24317] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 686.396332][T24317] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 686.431787][T24317] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 686.631529][T24317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 686.657033][T24317] 8021q: adding VLAN 0 to HW filter on device team0 [ 686.670839][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.678144][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 686.733599][T24476] netlink: 7 bytes leftover after parsing attributes in process `syz.3.6196'. [ 686.744761][ T6971] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.751933][ T6971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 686.765634][T24476] netlink: 7 bytes leftover after parsing attributes in process `syz.3.6196'. [ 686.772441][T24478] x_tables: duplicate underflow at hook 1 [ 687.078760][ T52] Bluetooth: hci3: command tx timeout [ 687.215550][T24501] netlink: 116 bytes leftover after parsing attributes in process `syz.2.6205'. [ 687.303184][T24317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 687.474044][T24506] nbd3: detected capacity change from 0 to 127 [ 687.491888][T24510] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6207'. [ 687.515935][ T52] block nbd3: Receive control failed (result -32) [ 687.703002][T24522] pim6reg: entered allmulticast mode [ 687.739468][T24522] pim6reg: left allmulticast mode [ 687.779124][T24526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6214'. [ 687.825233][T24530] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6215'. [ 687.871353][T24530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6215'. [ 687.923484][T24530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6215'. [ 687.964582][T24539] netlink: 'syz.2.6217': attribute type 10 has an invalid length. [ 688.007650][T24539] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6217'. [ 688.080961][T24317] veth0_vlan: entered promiscuous mode [ 688.109688][T24317] veth1_vlan: entered promiscuous mode [ 688.130942][T24539] batman_adv: batadv0: Adding interface: virt_wifi0 [ 688.158724][T24539] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 688.185324][T24539] batman_adv: batadv0: Interface activated: virt_wifi0 [ 688.290371][T24317] veth0_macvtap: entered promiscuous mode [ 688.310759][T24317] veth1_macvtap: entered promiscuous mode [ 688.353454][T24317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 688.385174][T24317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 688.424652][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.449836][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.470990][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.500389][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.767681][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.793966][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 688.868077][ T1119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.884022][ T1119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 688.971492][T24569] wg1 speed is unknown, defaulting to 1000 [ 689.008484][T24574] netlink: 'syz.1.6230': attribute type 8 has an invalid length. [ 689.046146][T24574] bond0: entered promiscuous mode [ 689.059558][T24574] bond_slave_0: entered promiscuous mode [ 689.066059][T24574] bond_slave_1: entered promiscuous mode [ 689.078378][T24574] gretap0: entered promiscuous mode [ 689.108649][T24574] veth0_to_batadv: entered promiscuous mode [ 689.125494][T24574] hsr1: entered promiscuous mode [ 689.154613][ T52] Bluetooth: hci3: command tx timeout [ 689.607829][T24597] netlink: 'syz.4.6236': attribute type 10 has an invalid length. [ 689.649248][T24597] bridge0: port 3(macsec0) entered blocking state [ 689.680110][T24597] bridge0: port 3(macsec0) entered disabled state [ 689.702259][T24597] macsec0: entered allmulticast mode [ 689.723916][T24597] veth1_macvtap: entered allmulticast mode [ 689.758834][T24597] macsec0: entered promiscuous mode [ 689.774920][T24597] bridge0: port 3(macsec0) entered blocking state [ 689.781634][T24597] bridge0: port 3(macsec0) entered forwarding state [ 690.502837][T24630] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 690.510338][T24630] syzkaller0: linktype set to 780 [ 690.672346][T24650] FAULT_INJECTION: forcing a failure. [ 690.672346][T24650] name failslab, interval 1, probability 0, space 0, times 0 [ 690.692569][T24650] CPU: 1 UID: 0 PID: 24650 Comm: syz.4.6255 Not tainted syzkaller #0 PREEMPT(full) [ 690.692601][T24650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 690.692615][T24650] Call Trace: [ 690.692623][T24650] [ 690.692631][T24650] dump_stack_lvl+0x189/0x250 [ 690.692662][T24650] ? __pfx____ratelimit+0x10/0x10 [ 690.692690][T24650] ? __pfx_dump_stack_lvl+0x10/0x10 [ 690.692714][T24650] ? __pfx__printk+0x10/0x10 [ 690.692743][T24650] should_fail_ex+0x414/0x560 [ 690.692774][T24650] should_failslab+0xa8/0x100 [ 690.692794][T24650] kmem_cache_alloc_noprof+0x74/0x6e0 [ 690.692820][T24650] ? skb_clone+0x212/0x3a0 [ 690.692847][T24650] skb_clone+0x212/0x3a0 [ 690.692871][T24650] __netlink_deliver_tap+0x404/0x850 [ 690.692902][T24650] ? netlink_deliver_tap+0x2e/0x1b0 [ 690.692922][T24650] netlink_deliver_tap+0x19c/0x1b0 [ 690.692951][T24650] netlink_sendskb+0x68/0x140 [ 690.692980][T24650] netlink_unicast+0x397/0x9e0 [ 690.693006][T24650] ? __asan_memcpy+0x40/0x70 [ 690.693036][T24650] ? __pfx_netlink_unicast+0x10/0x10 [ 690.693072][T24650] netlink_rcv_skb+0x28c/0x470 [ 690.693089][T24650] ? __lock_acquire+0xab9/0xd20 [ 690.693107][T24650] ? __pfx_genl_rcv_msg+0x10/0x10 [ 690.693132][T24650] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 690.693168][T24650] ? down_read+0x1ad/0x2e0 [ 690.693192][T24650] genl_rcv+0x28/0x40 [ 690.693213][T24650] netlink_unicast+0x82f/0x9e0 [ 690.693248][T24650] ? __pfx_netlink_unicast+0x10/0x10 [ 690.693276][T24650] ? netlink_sendmsg+0x642/0xb30 [ 690.693293][T24650] ? skb_put+0x11b/0x210 [ 690.693315][T24650] netlink_sendmsg+0x805/0xb30 [ 690.693342][T24650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 690.693364][T24650] ? aa_sock_msg_perm+0xf1/0x1d0 [ 690.693392][T24650] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 690.693410][T24650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 690.693430][T24650] __sock_sendmsg+0x21c/0x270 [ 690.693458][T24650] ____sys_sendmsg+0x505/0x830 [ 690.693483][T24650] ? __pfx_____sys_sendmsg+0x10/0x10 [ 690.693512][T24650] ? import_iovec+0x74/0xa0 [ 690.693538][T24650] ___sys_sendmsg+0x21f/0x2a0 [ 690.693560][T24650] ? __pfx____sys_sendmsg+0x10/0x10 [ 690.693614][T24650] ? __fget_files+0x2a/0x420 [ 690.693629][T24650] ? __fget_files+0x3a0/0x420 [ 690.693655][T24650] __x64_sys_sendmsg+0x19b/0x260 [ 690.693678][T24650] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 690.693715][T24650] ? __pfx_ksys_write+0x10/0x10 [ 690.693749][T24650] ? do_syscall_64+0xbe/0xfa0 [ 690.693773][T24650] do_syscall_64+0xfa/0xfa0 [ 690.693793][T24650] ? lockdep_hardirqs_on+0x9c/0x150 [ 690.693814][T24650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.693835][T24650] ? clear_bhb_loop+0x60/0xb0 [ 690.693861][T24650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.693882][T24650] RIP: 0033:0x7fb021b8f749 [ 690.693901][T24650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 690.693920][T24650] RSP: 002b:00007fb022a8d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 690.693948][T24650] RAX: ffffffffffffffda RBX: 00007fb021de5fa0 RCX: 00007fb021b8f749 [ 690.693961][T24650] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 690.693972][T24650] RBP: 00007fb022a8d090 R08: 0000000000000000 R09: 0000000000000000 [ 690.693983][T24650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 690.693993][T24650] R13: 00007fb021de6038 R14: 00007fb021de5fa0 R15: 00007ffd6a64b238 [ 690.694023][T24650] [ 691.236587][ T52] Bluetooth: hci3: command tx timeout [ 691.242687][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.281670][T24664] __nla_validate_parse: 9 callbacks suppressed [ 691.281693][T24664] netlink: 296 bytes leftover after parsing attributes in process `syz.3.6261'. [ 691.344399][T24666] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6260'. [ 691.473099][T24675] netlink: 'syz.3.6263': attribute type 8 has an invalid length. [ 691.510018][T24675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6263'. [ 691.565458][T24680] openvswitch: netlink: Key type 31 is not supported [ 691.567155][T24679] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6266'. [ 691.590667][T24679] 8021q: VLANs not supported on ipvlan1 [ 691.594933][T24685] netlink: 'syz.4.6267': attribute type 13 has an invalid length. [ 691.654131][T24685] netlink: 'syz.4.6267': attribute type 17 has an invalid length. [ 691.873661][T24695] IPVS: set_ctl: invalid protocol: 32 18.0.1.0:0 [ 692.037519][T24708] tipc: Started in network mode [ 692.042479][T24708] tipc: Node identity ac14140f, cluster identity 4711 [ 692.073500][T24708] tipc: New replicast peer: 255.255.255.255 [ 692.084691][T24708] tipc: Enabled bearer , priority 10 [ 692.116073][T24712] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6279'. [ 692.277203][T24719] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6281'. [ 692.436850][T24727] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6283'. [ 692.449869][T24729] ip6tnl1: entered allmulticast mode [ 693.129695][T24756] netlink: 296 bytes leftover after parsing attributes in process `syz.4.6293'. [ 693.205421][ T24] tipc: Node number set to 2886997007 [ 693.314362][ T52] Bluetooth: hci3: command tx timeout [ 693.495277][T24764] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6296'. [ 693.510700][T24770] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6300'. [ 693.672346][T24766] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 694.554979][T24819] ip6tnl1: entered allmulticast mode [ 717.610674][T24832] FAULT_INJECTION: forcing a failure. [ 717.610674][T24832] name failslab, interval 1, probability 0, space 0, times 0 [ 717.646786][T24832] CPU: 0 UID: 0 PID: 24832 Comm: syz.4.6328 Not tainted syzkaller #0 PREEMPT(full) [ 717.646819][T24832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 717.646834][T24832] Call Trace: [ 717.646844][T24832] [ 717.646854][T24832] dump_stack_lvl+0x189/0x250 [ 717.646890][T24832] ? __pfx____ratelimit+0x10/0x10 [ 717.646925][T24832] ? __pfx_dump_stack_lvl+0x10/0x10 [ 717.646955][T24832] ? __pfx__printk+0x10/0x10 [ 717.646984][T24832] ? __pfx___might_resched+0x10/0x10 [ 717.647007][T24832] ? fs_reclaim_acquire+0x7d/0x100 [ 717.647033][T24832] should_fail_ex+0x414/0x560 [ 717.647072][T24832] should_failslab+0xa8/0x100 [ 717.647097][T24832] __kvmalloc_node_noprof+0x158/0x910 [ 717.647130][T24832] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 717.647167][T24832] ? hash_ipportnet_create+0x3a9/0xfe0 [ 717.647198][T24832] ? hash_ipportnet_create+0x2fe/0xfe0 [ 717.647237][T24832] hash_ipportnet_create+0x3a9/0xfe0 [ 717.647279][T24832] ? __nla_parse+0x40/0x60 [ 717.647302][T24832] ? __pfx_hash_ipportnet_create+0x10/0x10 [ 717.647336][T24832] ip_set_create+0xa97/0x1940 [ 717.647358][T24832] ? ip_set_create+0x4a2/0x1940 [ 717.647392][T24832] ? __pfx_ip_set_create+0x10/0x10 [ 717.647453][T24832] nfnetlink_rcv_msg+0xb4d/0x1130 [ 717.647477][T24832] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 717.647518][T24832] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 717.647537][T24832] ? kmem_cache_free+0x19b/0x690 [ 717.647624][T24832] netlink_rcv_skb+0x208/0x470 [ 717.647649][T24832] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 717.647672][T24832] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 717.647708][T24832] ? bpf_lsm_capable+0x9/0x20 [ 717.647734][T24832] ? security_capable+0x7e/0x2e0 [ 717.647772][T24832] nfnetlink_rcv+0x282/0x2590 [ 717.647794][T24832] ? __dev_queue_xmit+0x284/0x3740 [ 717.647821][T24832] ? __dev_queue_xmit+0x1bfb/0x3740 [ 717.647866][T24832] ? __dev_queue_xmit+0x284/0x3740 [ 717.647905][T24832] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 717.647945][T24832] ? ref_tracker_free+0x63a/0x7d0 [ 717.647967][T24832] ? __asan_memcpy+0x40/0x70 [ 717.647995][T24832] ? __pfx_ref_tracker_free+0x10/0x10 [ 717.648035][T24832] ? skb_clone+0x246/0x3a0 [ 717.648065][T24832] ? __netlink_deliver_tap+0x807/0x850 [ 717.648088][T24832] ? netlink_deliver_tap+0x2e/0x1b0 [ 717.648119][T24832] ? netlink_deliver_tap+0x2e/0x1b0 [ 717.648160][T24832] netlink_unicast+0x82f/0x9e0 [ 717.648204][T24832] ? __pfx_netlink_unicast+0x10/0x10 [ 717.648238][T24832] ? netlink_sendmsg+0x642/0xb30 [ 717.648259][T24832] ? skb_put+0x11b/0x210 [ 717.648285][T24832] netlink_sendmsg+0x805/0xb30 [ 717.648320][T24832] ? __pfx_netlink_sendmsg+0x10/0x10 [ 717.648349][T24832] ? aa_sock_msg_perm+0xf1/0x1d0 [ 717.648382][T24832] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 717.648404][T24832] ? __pfx_netlink_sendmsg+0x10/0x10 [ 717.648429][T24832] __sock_sendmsg+0x21c/0x270 [ 717.648464][T24832] ____sys_sendmsg+0x505/0x830 [ 717.648497][T24832] ? __pfx_____sys_sendmsg+0x10/0x10 [ 717.648532][T24832] ? import_iovec+0x74/0xa0 [ 717.648565][T24832] ___sys_sendmsg+0x21f/0x2a0 [ 717.648593][T24832] ? __pfx____sys_sendmsg+0x10/0x10 [ 717.648661][T24832] ? __fget_files+0x2a/0x420 [ 717.648681][T24832] ? __fget_files+0x3a0/0x420 [ 717.648714][T24832] __x64_sys_sendmsg+0x19b/0x260 [ 717.648744][T24832] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 717.648781][T24832] ? __pfx_ksys_write+0x10/0x10 [ 717.648816][T24832] ? do_syscall_64+0xbe/0xfa0 [ 717.648844][T24832] do_syscall_64+0xfa/0xfa0 [ 717.648864][T24832] ? lockdep_hardirqs_on+0x9c/0x150 [ 717.648886][T24832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.648908][T24832] ? clear_bhb_loop+0x60/0xb0 [ 717.648935][T24832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.648957][T24832] RIP: 0033:0x7fb021b8f749 [ 717.648977][T24832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 717.648997][T24832] RSP: 002b:00007fb022a8d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 717.649020][T24832] RAX: ffffffffffffffda RBX: 00007fb021de5fa0 RCX: 00007fb021b8f749 [ 717.649037][T24832] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 717.649051][T24832] RBP: 00007fb022a8d090 R08: 0000000000000000 R09: 0000000000000000 [ 717.649065][T24832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.649078][T24832] R13: 00007fb021de6038 R14: 00007fb021de5fa0 R15: 00007ffd6a64b238 [ 717.649116][T24832] [ 718.299467][T24844] wg1 speed is unknown, defaulting to 1000 [ 718.459823][T24846] __nla_validate_parse: 5 callbacks suppressed [ 718.459843][T24846] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6329'. [ 718.543192][T24846] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 718.550592][T24846] IPv6: NLM_F_CREATE should be set when creating new route [ 718.557987][T24846] IPv6: NLM_F_CREATE should be set when creating new route [ 718.693032][T24842] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6329'. [ 718.859615][T24877] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6336'. [ 718.931703][T24878] macsec1: entered promiscuous mode [ 718.960717][T24878] dummy0: entered promiscuous mode [ 718.989617][T24878] dummy0: left promiscuous mode [ 719.354927][T24904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6343'. [ 719.417695][T24906] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6344'. [ 719.675320][T24904] bridge_slave_1: left allmulticast mode [ 719.734368][T24904] bridge_slave_1: left promiscuous mode [ 719.740293][T24904] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.781467][T24904] bridge_slave_0: left allmulticast mode [ 719.792707][T24904] bridge_slave_0: left promiscuous mode [ 719.827707][T24904] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.413341][T24932] wg1 speed is unknown, defaulting to 1000 [ 720.479041][T24937] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 720.504042][T24937] syzkaller0: linktype set to 780 [ 720.760944][T24951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6357'. [ 720.895188][T18322] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 720.906469][T18322] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 720.917025][T18322] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 720.925715][T18322] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 720.933589][T18322] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 720.978208][T24954] wg1 speed is unknown, defaulting to 1000 [ 720.999746][T24957] dummy0: entered promiscuous mode [ 721.021798][T24957] macsec2: entered promiscuous mode [ 721.033583][T24957] dummy0: left promiscuous mode [ 721.293514][T24961] No such timeout policy "syz1" [ 721.340188][T24963] netlink: 'syz.0.6361': attribute type 2 has an invalid length. [ 721.367333][T24963] netlink: 'syz.0.6361': attribute type 1 has an invalid length. [ 721.391498][T24963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6361'. [ 721.494514][T24965] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6363'. [ 721.673017][T24971] tipc: Started in network mode [ 721.681072][T24971] tipc: Node identity ac1414aa, cluster identity 4711 [ 721.689823][T24971] tipc: Enabled bearer , priority 10 [ 721.741435][T24970] wg1 speed is unknown, defaulting to 1000 [ 721.781512][T24971] ip6gre1: entered promiscuous mode [ 721.847073][T24978] tipc: Enabled bearer , priority 0 [ 721.891133][T24982] netlink: 'syz.2.6367': attribute type 8 has an invalid length. [ 721.899930][T24982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6367'. [ 722.076884][T24985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6368'. [ 722.191071][T24997] dummy0: entered promiscuous mode [ 722.196674][T24997] macsec1: entered promiscuous mode [ 722.208241][T24997] dummy0: left promiscuous mode [ 722.278461][T24954] chnl_net:caif_netlink_parms(): no params data found [ 722.418868][T25005] netlink: 'syz.1.6374': attribute type 39 has an invalid length. [ 722.668036][T24954] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.689787][T24954] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.698198][T24954] bridge_slave_0: entered allmulticast mode [ 722.706569][T24954] bridge_slave_0: entered promiscuous mode [ 722.744924][T24954] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.752452][T24954] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.760125][T24954] bridge_slave_1: entered allmulticast mode [ 722.779753][T24954] bridge_slave_1: entered promiscuous mode [ 722.959268][T24954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 722.979005][T22184] tipc: Node number set to 2886997162 [ 722.993916][ T52] Bluetooth: hci2: command tx timeout [ 723.007070][T24954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 723.175908][T24954] team0: Port device team_slave_0 added [ 723.225712][T24954] team0: Port device team_slave_1 added [ 723.342680][T25034] netlink: 'syz.0.6386': attribute type 39 has an invalid length. [ 723.354410][T24954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 723.361421][T24954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.392068][T24954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 723.497285][T24954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.504738][T24954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.542795][T24954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.708330][T24954] hsr_slave_0: entered promiscuous mode [ 723.725070][T24954] hsr_slave_1: entered promiscuous mode [ 723.732861][T24954] debugfs: 'hsr0' already exists in 'hsr' [ 723.739702][T24954] Cannot create hsr debugfs directory [ 723.778053][T25053] netlink: 'syz.0.6393': attribute type 29 has an invalid length. [ 723.812886][T25053] netlink: 'syz.0.6393': attribute type 29 has an invalid length. [ 723.829610][T25053] __nla_validate_parse: 2 callbacks suppressed [ 723.829630][T25053] netlink: 500 bytes leftover after parsing attributes in process `syz.0.6393'. [ 723.858268][T25053] unsupported nla_type 58 [ 723.951186][T25058] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 723.966522][T25058] syzkaller0: linktype set to 780 [ 724.137102][T25066] : renamed from bond_slave_0 (while UP) [ 724.431173][T25071] netlink: 'syz.1.6397': attribute type 7 has an invalid length. [ 724.465315][T25071] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6397'. [ 724.491415][T24954] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 724.493923][T25072] netlink: 'syz.1.6397': attribute type 10 has an invalid length. [ 724.608010][T25072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 724.639204][T25072] batadv0: entered promiscuous mode [ 724.656936][T25072] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 724.687339][T24954] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 724.761133][T24954] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 724.786453][T24954] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 724.803571][T25083] netlink: 'syz.1.6401': attribute type 1 has an invalid length. [ 724.816810][T25078] tipc: Enabled bearer , priority 0 [ 724.858974][T25085] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6401'. [ 724.870296][T25083] 8021q: adding VLAN 0 to HW filter on device bond1 [ 724.880771][T25078] syzkaller0: entered promiscuous mode [ 724.887542][T25078] syzkaller0: entered allmulticast mode [ 724.930806][T25083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6401'. [ 724.955070][T25078] tipc: Resetting bearer [ 725.004656][T25077] tipc: Resetting bearer [ 725.059825][T25077] tipc: Disabling bearer [ 725.073890][ T52] Bluetooth: hci2: command tx timeout [ 725.195066][T25106] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 725.209418][T25106] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 725.250155][T25110] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6407'. [ 725.261320][T25111] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6403'. [ 725.342207][T25113] No such timeout policy "syz1" [ 725.422703][T24954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 725.470182][T24954] 8021q: adding VLAN 0 to HW filter on device team0 [ 725.491780][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.499039][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 725.503142][T25121] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6411'. [ 725.518367][T25121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6411'. [ 725.539575][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.546819][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 725.572444][T25122] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 725.945404][T25134] wg1 speed is unknown, defaulting to 1000 [ 726.161576][T24954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 726.253930][T24954] veth0_vlan: entered promiscuous mode [ 726.269498][T24954] veth1_vlan: entered promiscuous mode [ 726.348164][T24954] veth0_macvtap: entered promiscuous mode [ 726.369816][T24954] veth1_macvtap: entered promiscuous mode [ 726.406296][T24954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 726.429534][T24954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 726.464896][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.486239][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.510744][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.532579][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.701316][T25151] ip6tnl1: entered allmulticast mode [ 726.890430][T25156] validate_nla: 3 callbacks suppressed [ 726.890462][T25156] netlink: 'syz.2.6423': attribute type 39 has an invalid length. [ 726.924566][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 726.932461][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.081126][ T6971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.117071][ T6971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.154507][ T52] Bluetooth: hci2: command tx timeout [ 727.168965][T25167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6426'. [ 727.192026][T25167] ip6tnl2: entered allmulticast mode [ 727.219720][T25170] netdevsim netdevsim4: Direct firmware load for þ failed with error -2 [ 727.231483][T25170] netdevsim netdevsim4: Falling back to sysfs fallback for: þ [ 727.333606][T25180] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6354'. [ 727.402203][T25183] netlink: 'syz.2.6430': attribute type 10 has an invalid length. [ 727.422818][T25183] team0: Port device dummy0 added [ 727.431491][T25183] netlink: 'syz.2.6430': attribute type 10 has an invalid length. [ 727.567657][T25192] netlink: 'syz.3.6432': attribute type 10 has an invalid length. [ 727.577753][T25192] bridge0: port 3(macsec0) entered blocking state [ 727.586416][T25192] bridge0: port 3(macsec0) entered disabled state [ 727.593279][T25192] macsec0: entered allmulticast mode [ 727.598898][T25192] veth1_macvtap: entered allmulticast mode [ 727.607706][T25192] macsec0: entered promiscuous mode [ 727.615978][T25192] bridge0: port 3(macsec0) entered blocking state [ 727.622630][T25192] bridge0: port 3(macsec0) entered forwarding state [ 727.700177][T25197] netlink: 'syz.3.6435': attribute type 39 has an invalid length. [ 728.253519][T25213] wg1 speed is unknown, defaulting to 1000 [ 728.546581][T25210] wg1 speed is unknown, defaulting to 1000 [ 728.561837][T25236] xt_policy: output policy not valid in PREROUTING and INPUT [ 728.740615][T25245] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 728.782894][T25246] wg1 speed is unknown, defaulting to 1000 [ 728.951562][T25254] netlink: 'syz.1.6454': attribute type 39 has an invalid length. [ 729.236012][ T52] Bluetooth: hci2: command tx timeout [ 729.261935][T25260] netdevsim netdevsim4: Direct firmware load for þ failed with error -2 [ 729.270975][T25260] netdevsim netdevsim4: Falling back to sysfs fallback for: þ [ 729.787856][T25277] ip6tnl2: entered allmulticast mode [ 730.089227][T25284] __nla_validate_parse: 6 callbacks suppressed [ 730.089250][T25284] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6463'. [ 730.229922][T25290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6464'. [ 730.289872][T25283] wg1 speed is unknown, defaulting to 1000 [ 730.474822][T25296] netlink: 'syz.1.6465': attribute type 39 has an invalid length. [ 730.507245][T25285] wg1 speed is unknown, defaulting to 1000 [ 730.558631][T25298] netdevsim netdevsim4: Direct firmware load for þ failed with error -2 [ 730.577352][T25298] netdevsim netdevsim4: Falling back to sysfs fallback for: þ [ 731.502918][T25331] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6476'. [ 731.695442][T25333] netlink: 'syz.2.6478': attribute type 39 has an invalid length. [ 731.904133][T25340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6479'. [ 732.111238][T25349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6481'. [ 732.201586][T25358] netlink: 'syz.0.6484': attribute type 10 has an invalid length. [ 732.230595][T25358] team0: Port device dummy0 added [ 732.239763][T25358] netlink: 'syz.0.6484': attribute type 10 has an invalid length. [ 732.540340][T25367] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6488'. [ 732.608124][T25369] netlink: 'syz.1.6489': attribute type 13 has an invalid length. [ 732.723115][T25369] bridge0: port 3(macsec0) entered disabled state [ 732.729974][T25369] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.739213][T25369] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.973232][T25369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 733.002924][T25369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 733.126517][T25369] tipc: Resetting bearer [ 733.151456][T25369] veth1_macvtap: left allmulticast mode [ 733.388036][ T1119] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.425990][ T1119] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.575967][ T1119] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.607823][ T1119] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.626765][T25396] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 733.659197][T25397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6496'. [ 733.675973][T25395] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 733.682948][T25395] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 733.689865][T25395] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 733.696814][T25395] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 733.703723][T25395] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 733.710590][T25395] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 733.717489][T25395] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 733.724383][T25395] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 733.746358][T25402] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6499'. [ 733.951558][T25412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6503'. [ 733.984885][T25412] ip6tnl1: entered allmulticast mode [ 734.089939][T25422] netlink: 'syz.4.6505': attribute type 10 has an invalid length. [ 734.416712][T25440] netlink: 'syz.3.6513': attribute type 13 has an invalid length. [ 734.471725][T25444] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6515'. [ 735.085970][T25473] FAULT_INJECTION: forcing a failure. [ 735.085970][T25473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 735.115054][T25473] CPU: 1 UID: 0 PID: 25473 Comm: syz.2.6524 Not tainted syzkaller #0 PREEMPT(full) [ 735.115100][T25473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 735.115122][T25473] Call Trace: [ 735.115138][T25473] [ 735.115153][T25473] dump_stack_lvl+0x189/0x250 [ 735.115205][T25473] ? __pfx____ratelimit+0x10/0x10 [ 735.115237][T25473] ? __pfx_dump_stack_lvl+0x10/0x10 [ 735.115263][T25473] ? __pfx__printk+0x10/0x10 [ 735.115283][T25473] ? __might_fault+0xb0/0x130 [ 735.115321][T25473] should_fail_ex+0x414/0x560 [ 735.115354][T25473] _copy_from_user+0x2d/0xb0 [ 735.115380][T25473] do_ip6t_set_ctl+0x69f/0xce0 [ 735.115403][T25473] ? rcu_is_watching+0x15/0xb0 [ 735.115426][T25473] ? trace_contention_end+0x39/0x120 [ 735.115449][T25473] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 735.115492][T25473] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 735.115517][T25473] ? __pfx___mutex_lock+0x10/0x10 [ 735.115547][T25473] nf_setsockopt+0x26f/0x290 [ 735.115577][T25473] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 735.115607][T25473] smc_setsockopt+0x232/0xab0 [ 735.115632][T25473] ? __pfx_smc_setsockopt+0x10/0x10 [ 735.115649][T25473] ? aa_sock_opt_perm+0xff/0x1b0 [ 735.115680][T25473] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 735.115699][T25473] ? __pfx_smc_setsockopt+0x10/0x10 [ 735.115717][T25473] do_sock_setsockopt+0x17c/0x1b0 [ 735.115742][T25473] __x64_sys_setsockopt+0x13f/0x1b0 [ 735.115768][T25473] do_syscall_64+0xfa/0xfa0 [ 735.115786][T25473] ? lockdep_hardirqs_on+0x9c/0x150 [ 735.115804][T25473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.115838][T25473] ? clear_bhb_loop+0x60/0xb0 [ 735.115860][T25473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.115878][T25473] RIP: 0033:0x7f5c3d98f749 [ 735.115896][T25473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 735.115912][T25473] RSP: 002b:00007f5c3e7e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 735.115934][T25473] RAX: ffffffffffffffda RBX: 00007f5c3dbe5fa0 RCX: 00007f5c3d98f749 [ 735.115947][T25473] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 735.115958][T25473] RBP: 00007f5c3e7e0090 R08: 0000000000000330 R09: 0000000000000000 [ 735.115969][T25473] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 735.115980][T25473] R13: 00007f5c3dbe6038 R14: 00007f5c3dbe5fa0 R15: 00007fff802e2758 [ 735.116011][T25473] [ 735.435354][T25475] netlink: 'syz.3.6525': attribute type 10 has an invalid length. [ 735.461573][T25475] team0: Port device dummy0 added [ 735.468727][T25480] __nla_validate_parse: 5 callbacks suppressed [ 735.468748][T25480] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6528'. [ 735.486999][T25475] netlink: 'syz.3.6525': attribute type 10 has an invalid length. [ 735.585862][T25483] tipc: Enabled bearer , priority 0 [ 735.607766][T25483] syzkaller0: entered promiscuous mode [ 735.616275][T25488] net_ratelimit: 56 callbacks suppressed [ 735.616300][T25488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 735.631662][T25483] syzkaller0: entered allmulticast mode [ 735.769149][T25484] tipc: Resetting bearer [ 735.857064][T25500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6533'. [ 735.904355][T25482] tipc: Resetting bearer [ 735.935765][T25506] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6537'. [ 735.961629][T25482] tipc: Disabling bearer [ 735.995712][T25508] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6538'. [ 736.045230][T25508] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6538'. [ 736.439843][T25538] netlink: 'syz.0.6547': attribute type 10 has an invalid length. [ 736.467053][T25539] FAULT_INJECTION: forcing a failure. [ 736.467053][T25539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 736.502638][T25539] CPU: 0 UID: 0 PID: 25539 Comm: syz.3.6549 Not tainted syzkaller #0 PREEMPT(full) [ 736.502673][T25539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 736.502687][T25539] Call Trace: [ 736.502696][T25539] [ 736.502706][T25539] dump_stack_lvl+0x189/0x250 [ 736.502740][T25539] ? __pfx____ratelimit+0x10/0x10 [ 736.502772][T25539] ? __pfx_dump_stack_lvl+0x10/0x10 [ 736.502801][T25539] ? __pfx__printk+0x10/0x10 [ 736.502822][T25539] ? __might_fault+0xb0/0x130 [ 736.502865][T25539] should_fail_ex+0x414/0x560 [ 736.502902][T25539] _copy_from_user+0x2d/0xb0 [ 736.502931][T25539] smc_setsockopt+0x3b8/0xab0 [ 736.502958][T25539] ? __pfx_smc_setsockopt+0x10/0x10 [ 736.502979][T25539] ? aa_sock_opt_perm+0xff/0x1b0 [ 736.503014][T25539] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 736.503037][T25539] ? __pfx_smc_setsockopt+0x10/0x10 [ 736.503058][T25539] do_sock_setsockopt+0x17c/0x1b0 [ 736.503088][T25539] __x64_sys_setsockopt+0x13f/0x1b0 [ 736.503116][T25539] do_syscall_64+0xfa/0xfa0 [ 736.503136][T25539] ? lockdep_hardirqs_on+0x9c/0x150 [ 736.503157][T25539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.503178][T25539] ? clear_bhb_loop+0x60/0xb0 [ 736.503204][T25539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.503223][T25539] RIP: 0033:0x7f9371d8f749 [ 736.503243][T25539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 736.503261][T25539] RSP: 002b:00007f9372b8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 736.503283][T25539] RAX: ffffffffffffffda RBX: 00007f9371fe5fa0 RCX: 00007f9371d8f749 [ 736.503299][T25539] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 736.503311][T25539] RBP: 00007f9372b8e090 R08: 0000000000000330 R09: 0000000000000000 [ 736.503324][T25539] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 736.503337][T25539] R13: 00007f9371fe6038 R14: 00007f9371fe5fa0 R15: 00007fff4bd921d8 [ 736.503371][T25539] [ 736.877989][T25548] netlink: 'syz.2.6551': attribute type 39 has an invalid length. [ 737.027823][T25556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6555'. [ 737.069819][T25559] netlink: 'syz.0.6556': attribute type 10 has an invalid length. [ 737.090675][T25559] veth0_vlan: entered allmulticast mode [ 737.160090][T25559] veth0_vlan: left promiscuous mode [ 737.173498][T25559] veth0_vlan: entered promiscuous mode [ 737.192347][T25559] team0: Device veth0_vlan failed to register rx_handler [ 737.430761][T25573] netlink: 'syz.3.6562': attribute type 4 has an invalid length. [ 737.479883][T25573] netlink: 'syz.3.6562': attribute type 4 has an invalid length. [ 737.491311][T25577] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6563'. [ 737.713425][T25591] netlink: 'syz.2.6566': attribute type 8 has an invalid length. [ 737.742806][T25591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6566'. [ 738.103077][T25605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6570'. [ 738.123525][T25605] gtp0: entered promiscuous mode [ 738.129022][T25605] gtp0: entered allmulticast mode [ 738.157351][T25607] netlink: 'syz.2.6569': attribute type 12 has an invalid length. [ 738.986322][T25621] [ 738.989821][T25621] ============================= [ 738.995191][T25621] WARNING: suspicious RCU usage [ 739.000144][T25621] syzkaller #0 Not tainted [ 739.004656][T25621] ----------------------------- [ 739.009925][T25621] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 739.019152][T25621] [ 739.019152][T25621] other info that might help us debug this: [ 739.019152][T25621] [ 739.030103][T25621] [ 739.030103][T25621] rcu_scheduler_active = 2, debug_locks = 1 [ 739.038382][T25621] 1 lock held by syz.1.6574/25621: [ 739.043854][T25621] #0: ffffffff8df3d880 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x38/0x80 [ 739.054209][T25621] [ 739.054209][T25621] stack backtrace: [ 739.060147][T25621] CPU: 0 UID: 0 PID: 25621 Comm: syz.1.6574 Not tainted syzkaller #0 PREEMPT(full) [ 739.060177][T25621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 739.060192][T25621] Call Trace: [ 739.060202][T25621] [ 739.060212][T25621] dump_stack_lvl+0x189/0x250 [ 739.060251][T25621] ? __pfx_dump_stack_lvl+0x10/0x10 [ 739.060291][T25621] ? __pfx__printk+0x10/0x10 [ 739.060331][T25621] lockdep_rcu_suspicious+0x140/0x1d0 [ 739.060363][T25621] get_callchain_entry+0x2b6/0x3c0 [ 739.060400][T25621] get_perf_callchain+0xb3/0x6f0 [ 739.060432][T25621] ? __pfx___schedule+0x10/0x10 [ 739.060469][T25621] ? __pfx_get_perf_callchain+0x10/0x10 [ 739.060518][T25621] __bpf_get_stack+0x3fa/0xa60 [ 739.060561][T25621] ? __pfx___bpf_get_stack+0x10/0x10 [ 739.060589][T25621] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 739.060636][T25621] bpf_get_stack+0x33/0x50 [ 739.060666][T25621] ? bpf_prog_42db8cfdf50901c9+0x46/0x4e [ 739.060687][T25621] bpf_get_stack_raw_tp+0x1a9/0x220 [ 739.060727][T25621] bpf_prog_42db8cfdf50901c9+0x46/0x4e [ 739.060748][T25621] bpf_prog_run_pin_on_cpu+0x143/0x470 [ 739.060783][T25621] bpf_prog_test_run_syscall+0x312/0x4b0 [ 739.060813][T25621] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 739.060838][T25621] ? __fget_files+0x2a/0x420 [ 739.060866][T25621] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 739.060893][T25621] bpf_prog_test_run+0x2c7/0x340 [ 739.060923][T25621] __sys_bpf+0x562/0x860 [ 739.060947][T25621] ? __pfx___sys_bpf+0x10/0x10 [ 739.060992][T25621] ? rcu_is_watching+0x15/0xb0 [ 739.061028][T25621] __x64_sys_bpf+0x7c/0x90 [ 739.061062][T25621] do_syscall_64+0xfa/0xfa0 [ 739.061085][T25621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.061106][T25621] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 739.061129][T25621] ? clear_bhb_loop+0x60/0xb0 [ 739.061157][T25621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.061179][T25621] RIP: 0033:0x7f4dcf18f749 [ 739.061199][T25621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 739.061217][T25621] RSP: 002b:00007f4dd00d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 739.061240][T25621] RAX: ffffffffffffffda RBX: 00007f4dcf3e5fa0 RCX: 00007f4dcf18f749 [ 739.061256][T25621] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 739.061279][T25621] RBP: 00007f4dcf213f91 R08: 0000000000000000 R09: 0000000000000000 [ 739.061293][T25621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 739.061305][T25621] R13: 00007f4dcf3e6038 R14: 00007f4dcf3e5fa0 R15: 00007ffe0135a9f8 [ 739.061341][T25621]