last executing test programs: 1m50.674571271s ago: executing program 4 (id=222): setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000080)={0xb2, 0x66, 0x7, 0x9, 0x40, 0x1, 0x43, 0x76, 0x6, 0x7, 0x4, 0xf, 0x90, 0xa9}, 0xe) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f00000001c0)="0d202c89f3fcbec464f88f3350b22134c7b2a63838578d61cf5a77bcefd4682e9aa0a1", 0x23}], 0x1}}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002f80)="f3138b9b6db511b9ae21807c4364c367ff850b1557ddb77e2fa847dfa0a27912685e340b1d95a2e1c3addecbf7a512de6097b533e3cf913ea96f5d06a31493065fadb6210eb6f6f4b006f2f75096712422ee025c27deefdc9ffcbdd83b51926f1b5de8bd3d1e9ab11afa319762ae7521c064efb2ffa39059b20550a0ebf6859987b77b6a6a85693ee11994af3a79ce73ce4b160f5104a6d5fa212c843569f462aead57c373cb0e383ce375f9fba4f50283a33e3860a5b3d4c0ddbc6351483ebc21a43cd296c4a4136ae6df95223595d23ed726132a4a9704771c0016458836b2e78972e9e296f484351efad3b0b703ddafb1780d6cb634d6e1", 0xf9}, {&(0x7f0000001e80)="ab", 0x1}], 0x2, 0x0, 0x0, 0x4004000}}], 0x2, 0x0) 1m50.440604932s ago: executing program 4 (id=227): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0xa, 0x100c, 0x1}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111770000000000850000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) 1m50.335317005s ago: executing program 4 (id=230): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)}, 0x0) 1m50.148658306s ago: executing program 4 (id=235): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000000)=""/206, &(0x7f0000000440)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000400)={0x0, 0xfffffffffffffefc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="06195300", @ANYRES16=r0, @ANYBLOB="010000000000ffdbdf25420000000e0001006e657464657673696d0000000f0002006e657464657673696d300000360087006c325f64726f70730000000005008e0001000000"], 0x4c}}, 0x8000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}}, @NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) shutdown(r4, 0x2000000) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x9) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0xbb87, @private2}]}, &(0x7f0000000180)=0x10) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r9, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, 0x0, &(0x7f000001f200)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x52}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) pipe(0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140), 0xfffffdef) 1m49.907112159s ago: executing program 4 (id=239): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0908000000080001000041fe9f6d8d359ba9d8583fb82cfae387aefd001849a572dd9e5aec9505547af940467dda81513753312a1586e7b5b6f32014aab7a8cae95adf7cce2734cdd4376d73cae835ccd44d710a10149b55cfed97836b3a", @ANYRES32=r5, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400ffffffff"], 0x58}, 0x1, 0x0, 0x0, 0x80c0}, 0x4004000) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x15, 0x200, 0x70bd2c, 0x25dfdbfb, {0x10, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x57, 0x1, "8986501003d47b862ed227b2017247b210af61ec0744e0b00f28820dd8c13c8626b6478a64408280c16d5d999b5231ecc1294959559dc33ed79f54920967fadb940aa1acc6e6dfb3154081e21641f8933042fc"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0xffffffffffffff46, 0x3, 0x3, 0x300, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x9539eaec64615a83) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a80)=@newqdisc={0x48, 0x24, 0xf0b, 0x3fff, 0x25dfdbfc, {0x0, 0x0, 0x12, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000}]}}]}, 0x48}}, 0x4c094) 1m48.673917416s ago: executing program 4 (id=252): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff29bd70000000000000000000", @ANYBLOB="351e7624115e", @ANYBLOB="81ffffff71e1dcde000012326e00000000220074617000000c0002800500080005000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$key(0xf, 0x3, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x114}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r3, @ANYBLOB="0000000000000000690300000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmsg$key(r2, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x2, 0x0, 0x70bd27, 0x25dfdbfe}, 0x10}}, 0x40408c0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000060000000bf0900000000000055090100000000009500000000000000bf91000000000000b5020000000000008500000000000000b70000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x62001, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd603000bb00083500fc0200000000006a92d0a600000000ceff972839fcde6c000000aa0000000000089078"], 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback=r1, 0x2e, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$alg(r5, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x7a) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x40048d0) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x8, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)="e38cf359dddeba653d2353556f859eb9e4f6d8a2", 0x14}], 0x1}, 0x480c0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000001440)={'\x00', 0x4212}) ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0x9) ioctl$TUNSETLINK(r4, 0x400454cd, 0xfffe) 1m48.225468765s ago: executing program 32 (id=252): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff29bd70000000000000000000", @ANYBLOB="351e7624115e", @ANYBLOB="81ffffff71e1dcde000012326e00000000220074617000000c0002800500080005000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$key(0xf, 0x3, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x114}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r3, @ANYBLOB="0000000000000000690300000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmsg$key(r2, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x2, 0x0, 0x70bd27, 0x25dfdbfe}, 0x10}}, 0x40408c0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000060000000bf0900000000000055090100000000009500000000000000bf91000000000000b5020000000000008500000000000000b70000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x62001, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd603000bb00083500fc0200000000006a92d0a600000000ceff972839fcde6c000000aa0000000000089078"], 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback=r1, 0x2e, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$alg(r5, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x7a) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x40048d0) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x8, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)="e38cf359dddeba653d2353556f859eb9e4f6d8a2", 0x14}], 0x1}, 0x480c0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000001440)={'\x00', 0x4212}) ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0x9) ioctl$TUNSETLINK(r4, 0x400454cd, 0xfffe) 3.409783475s ago: executing program 1 (id=1343): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000076000907000000000000000007020000", @ANYRES32=0x0, @ANYBLOB="0c000d800800030000bd"], 0x24}, 0x1, 0x5502000000000000}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x4f, @mcast2, 0x3}, 0x1c) (async) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x4f, @mcast2, 0x3}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="011c30bd701004000000050000000d000100050000000800000008000b000000402008000c00a80a0400"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="011c30bd701004000000050000000d000100050000000800000008000b000000402008000c00a80a0400"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, 0x0, 0x0) 2.207845656s ago: executing program 1 (id=1344): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000000)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}) connect$rose(r0, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000080)={0x2, 0x91e, @status={[0x7, 0xb7000000000, 0x4, 0x2, 0xffffffffffffff7a, 0x9]}, [0x1, 0xb, 0xffffffffffffffff, 0xe0d5, 0x9, 0x7, 0x4, 0x1, 0x6, 0x180, 0x10, 0x4, 0x2, 0x2, 0xc, 0x4, 0x8, 0x10000, 0x9, 0x8468, 0x1ff, 0x4cc, 0xde48, 0x7fff, 0x4, 0x0, 0x81, 0x7, 0x4, 0x8, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x4, 0x400, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb, 0xfffffffffffffff1, 0x5, 0x10001, 0x2, 0x5, 0x80000001, 0x765d1ed000000, 0x1, 0x5, 0x7, 0x6b, 0xfff, 0x401, 0x5, 0x9, 0x8fb7, 0x7, 0x80000000, 0x200, 0x9, 0x9e04, 0x57b9, 0x8, 0x432d, 0x5, 0x1]}) ioctl$SIOCRSACCEPT(r0, 0x89e3) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000ac0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000ec0)) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000f00)=0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000f40)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001140)={"7a180cab419b5b135919b9b5e3e80294", r3, r4, {0xffffffffffff99b1, 0xfdd1}, {0x7, 0xc0}, 0xa5e, [0xeee, 0xfffffffffffffff9, 0x8, 0x8, 0x5, 0xfffffffffffffe00, 0x8, 0x100000000, 0x0, 0xe, 0xb, 0x6, 0x68, 0x2, 0x542e]}) r5 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000001240)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x1000) connect$vsock_stream(r5, &(0x7f0000001280)={0x28, 0x0, 0x2711, @host}, 0x10) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x1, 0x4) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000012c0)={0x1, 0x3ff, 0x3, 0x2}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000001300)) r6 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_REVISION_MATCH(r6, 0x29, 0x44, &(0x7f0000001340)={'ah\x00'}, &(0x7f0000001380)=0x1e) r7 = accept(r6, &(0x7f00000013c0)=@can={0x1d, 0x0}, &(0x7f0000001440)=0x80) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000014c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x44, r9, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x52}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0xff}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x4}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x3ff}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x80000000}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000c}, 0x40040) getsockopt$bt_BT_VOICE(r7, 0x112, 0xb, &(0x7f0000001600)=0x8, &(0x7f0000001640)=0x2) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000001700)={{r5}, r4, 0x6, @inherit={0x50, &(0x7f0000001680)={0x1, 0x1, 0x9, 0x400, {0x20, 0x2, 0x8, 0x2, 0xffff}, [0x24000]}}, @devid=r1}) socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r5, &(0x7f0000002700)={0x28, 0x0, 0x2711, @local}, 0x10, 0x0) sendto$l2tp(r7, &(0x7f0000002740)="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", 0xff, 0x0, &(0x7f0000002840)={0x2, 0x0, @multicast2, 0x2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000028c0)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_SET(r7, &(0x7f00000029c0)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002980)={&(0x7f0000002900)={0x48, r9, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x81) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000002a40), r7) sendmsg$GTP_CMD_DELPDP(r7, &(0x7f0000002b00)={&(0x7f0000002a00), 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x30, r11, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_MS_ADDR6={0x14, 0xc, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004010}, 0x800) 2.099555436s ago: executing program 0 (id=1348): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffa}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001900010000000000000000000a000000000061b484bc8da609bbf0d61d550500140004000000000000000000"], 0x24}}, 0x0) 2.035855944s ago: executing program 1 (id=1349): r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000012c0)={0x2, 0xe20, @empty}, 0x14) syz_emit_ethernet(0x6f, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000400019c00610000000000119078000000000000000000004e20004d90782451bba4192a000000001af53ee5900bde08a6a3b7cbb51b2e074e1be5783e9593cac81a1795775c4069a51d9205245940d0e86a9e16a48074992ee6b67e37634927fa35da0000000000000000"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200000000000}, 0x0, &(0x7f00000002c0)={0x3fc, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, 0x0, &(0x7f0000000040)) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x40000000, 0x400}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x1d0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0x0, 'wg1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@cpu={{0x28}, {0x9}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x23, 0x6}, {0xffffffffffffffff, 0x1, 0x2}, 0x100, 0x964}}}, {{@uncond, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x5, 0x0, 0x2]}, {0xfffc, [0x0, 0x5, 0x0, 0x2, 0x0, 0x1], 0x2, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x50, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0xb, 0x0, &(0x7f0000000640)) sendto$inet(r0, &(0x7f0000000040)="e556a2ba78cbed7b1da7d91ad28501b60c4d07814cdaac4b0bb0189c104e6c10520d5f51ff6ba3ea25a51eef985f48ce364023511a39f63f0dd169bb14a85a94", 0x40, 0xc040, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 2.006500258s ago: executing program 5 (id=1351): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1406, 0x1}, 0x10}}, 0x0) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x2, 0x18}, 0xc) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00'}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x70bd25, 0x0, {0xa, 0x3f, 0x0, 0xc8}}, 0x18}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_emit_ethernet(0xae, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400260004000000"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0xd87, 0x6}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xff}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x3}]}}}]}, 0x38}}, 0x0) r14 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000001c0)={r2, 0x1000, 0x2, 0x80000000}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x2, 0x89b8, 0x5376, 0x8000, r2, 0xea, '\x00', r5, r14, 0x2, 0x1, 0x1, 0x3, @value=r15}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x20, 0x0, &(0x7f0000000240), &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r16 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r16}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.932473445s ago: executing program 0 (id=1352): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000000)={{r2}}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@rand_addr=0x4, @in6=@private0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x20, 0x20}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@remote, 0x4d3, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 1.832126099s ago: executing program 2 (id=1353): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0xb, 0x2, 0x7, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000100), 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 1.792922305s ago: executing program 2 (id=1354): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x41}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@deltaction={0x44, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x44}}, 0x0) (async, rerun: 32) r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2049}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x110, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_USERDATA={0xab, 0x6, "d9df4d99ee346c55a54072ffeaf783630d9341d9c9e1056d4ac03961bf4f85c908fb3e17d5bc65d63aced10d86e282ad88531ab8d89c84264788e7381b6fd253d6faac7dbdb93cde4d4babe715026a772003f9a73dcf970480807f7ed13ab6d22dac635054ccbd9fffcab94d78cb9dcec9cd966d5da49699fe41f16a152903f2dffe13f389b5d6ab096b1288d8675ffe721f95b1c1134480b267503b210a4b7253c03af44f84b9"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6b928866a4704728}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0xfc, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0xdf, 0x7, 0x1, 0x0, "986605f9c626e1f2e030e735e7c6aa443ecd17611ef2b2da66b0efbe8ee0167c8c07cd158cc807a6c3e5a69087331b55dd4053a0c965a4ee921ffcb36d314b4f31a1403269a7250f57a03fb1e01d516666ae773df44ad30db49d17db4f2a9d55f69269b7a3ff5751e39dabaef0d78e7f6dadf2d76f756a3df29e3206d14b3df80cdf75a1ba779f8e79e61299c297766a25044b9d4a4dc60926ca537ca9fd8bc42282fa3498f1b282f9bf88586a28f564917cee91103123b034a0c827f83ea8bc98c56bbfd83b2c7497484a533d2358e2f27154f04f91037d28f755"}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0xe0, 0xb, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x6}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8}, @NFTA_SET_EXPRESSIONS={0x88, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x30, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x16}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7ff}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}]}, @NFT_MSG_DELTABLE={0x34, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x398}, 0x1, 0x0, 0x0, 0x48080}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374"], 0x140}}, 0x0) 1.77419219s ago: executing program 0 (id=1355): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) writev(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b36, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x205}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) r5 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0), &(0x7f00000001c0)=0x8) 1.540070298s ago: executing program 5 (id=1358): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000200001000000000000000000020014000000000000000000080f0200e0000002260017004e224e2408000b0000000000"], 0x34}}, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000440)=0x1000, 0x4) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1ef8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1ef8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="880500d00f", 0x5, 0x24040054, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @mcast2, 0xa}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="880500d00f", 0x5, 0x24040054, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @mcast2, 0xa}, 0x1c) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="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", 0x155}], 0x1, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @local}}}], 0x20}, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x9, 0x1, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x1, 0x584, 0xffffff7f}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x9, 0x1, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x1, 0x584, 0xffffff7f}}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@mcast2, @mcast1, @private1, 0x8, 0x0, 0x3, 0x100, 0x7, 0x4, r4}) 1.539646918s ago: executing program 2 (id=1359): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) splice(r0, &(0x7f0000000000), r0, &(0x7f0000000040)=0x8, 0xffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r3 = socket(0x10, 0x800000000080002, 0x6) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f00000000c0)=r2, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) tee(r5, r4, 0xffffffffffffffff, 0x2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r2, r5, 0xe, 0x0, @void}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x18c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x45, 0xe, {{{}, {}, @broadcast, @device_a, @random="8e742f592bf6"}, 0x0, @default, 0x1, @void, @void, @void, @val={0x4, 0x6, {0x7f, 0x1, 0x7}}, @void, @val={0x5, 0x3, {0xeb, 0x3a, 0xb0}}, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x8, 0x9, 0x11, 0x979}}}}, @NL80211_ATTR_BEACON_TAIL={0x10e, 0xf, [@perr={0x84, 0x108, {0x1, 0x10, [{{}, @broadcast, 0x7c, @void, 0x7e}, {{}, @device_a, 0x90, @void, 0x25}, {{0x0, 0x1}, @broadcast, 0x5, @value, 0x22}, {{0x0, 0x1}, @device_b, 0x5, @value, 0x30}, {{0x0, 0x1}, @device_a, 0x4, @value=@device_b, 0x1d}, {{}, @device_a, 0x6, @void, 0x3e}, {{}, @broadcast, 0x38000000, @void, 0x1d}, {{0x0, 0x1}, @broadcast, 0x7, @value, 0x3c}, {{}, @device_a, 0x0, @void, 0x26}, {{0x0, 0x1}, @device_b, 0x8ec, @value, 0xb}, {{0x0, 0x1}, @device_a, 0x1, @value, 0x40}, {{0x0, 0x1}, @device_a, 0x400, @value=@device_b, 0x1e}, {{0x0, 0x1}, @device_a, 0x7, @value=@broadcast, 0x33}, {{}, @broadcast, 0xdfb421f, @void, 0x3c}, {{0x0, 0x1}, @device_a, 0x8000, @value=@device_b, 0xa}, {{}, @device_a, 0x7a, @void, 0x32}]}}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x18c}}, 0xc010) 1.498226819s ago: executing program 0 (id=1360): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x51}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xb0}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="5c0000001000370429bd7000fcdbdf2500000000", @ANYRES32=r3, @ANYBLOB="890c0400000000003c0012800b000100697036746e6c00002c00028014000300fc0200000000000000000000000000001400020000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0xb}, 0xbfd475d13653b11b) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x19, &(0x7f00000000c0)=ANY=[@ANYBLOB="18150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4e76d9121c5afa70aed8755dca0b7293f00000000000007040000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b5001800ffffffff18450000ffffffff0000000000000000182b0000", @ANYRES32, @ANYBLOB="000000007a00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000000d280000f0ffffff"], &(0x7f0000000240)='syzkaller\x00', 0x9, 0x9c, &(0x7f0000000280)=""/156, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xc, 0x1, 0x45}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000003c0)=[{0x2, 0x3, 0x9, 0x3}, {0x2, 0x1, 0xc, 0x9}, {0x2, 0x4}, {0x1, 0x4, 0x2, 0x3}], 0x10, 0x3}, 0x94) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYBLOB="1e00000008000000", @ANYRES32, @ANYBLOB="3ce8b8dc59a767567ebac69d2c06d2793256343faa79242c368e0ae72149a7588b0c39c6e9608ab710fe75f2fe7d9276d255d08b9a599cdca823f658550ed08f47cbb8dd95f5cfc6fcfc9700ffdeb33ebab3e684a39a68fa79e2d241ae04d65ee14634dfae0af7e82a3a0c221045f482d8b4c89ae54c8e0178a2d91ce1937cf9552f2dfea33d5b21caefc190bc", @ANYRES32=r4, @ANYBLOB, @ANYRES64=0x0], 0x20) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@ipv6_delroute={0x34, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2200}, [@RTA_PRIORITY={0x8, 0x1e}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x0, 0x8}}}]}, 0x34}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYRES8=r7, @ANYBLOB="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"], 0xcc}}, 0x0) 1.426706694s ago: executing program 2 (id=1361): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x129a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r2, 0x0, 0x0}, 0x20) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="04000000040000000400000009"], 0x50) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x51}, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x49}}}}}, 0x30}}, 0x240040c0) close(0x4) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x3, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x4e24, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x0, 0x7, 0x0, 0x13, {[@window={0xb, 0x3}, @generic={0x0, 0x7, "d58838068b"}]}}, {"2244070000bc0be4bdf9da"}}}}}, 0x4d) 1.360055817s ago: executing program 3 (id=1362): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xffffffffffffff3d, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x30000011}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) close(r2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c000000020601030000000000000000000068000900020073797a3004000000050001000600000005000500000000000501040000000000140007800800114000002721c9f81500000000000000000000b2fd4985000d000300686173683a6d616300000000"], 0x5c}}, 0x0) 1.356413683s ago: executing program 5 (id=1363): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, r2, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x1}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2d, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac0a}, @typed={0x5a, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.323325354s ago: executing program 0 (id=1364): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000240)=0xc) sendmsg$nl_route(r0, 0x0, 0x20008011) r1 = socket(0x10, 0x803, 0x6) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = accept4(r1, &(0x7f0000000400)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, &(0x7f0000000480)=0x80, 0x800) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r6, 0x0, 0x16, 0x0, &(0x7f00000001c0)=0x2) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f00000002c0), 0x4) read(0xffffffffffffffff, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xf100}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00'}, 0x90) close(0x3) r7 = accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, &(0x7f0000000580)=0x1c, 0x180800) setsockopt$inet6_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f00000005c0)=@gcm_128={{0xeebc61b9e3e0e49}, "cb9a36dd02de4e09", "0d391b854a26447aab985e2eb63d7582", "edd40395", "5dd98ca8ee23b42d"}, 0x28) syz_emit_ethernet(0x82, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde0800450000740000000000019078ac1e0001ac1414aa05009078e00000e04600000000000000001100000200000000000000830300070300443c0003e0000089000000000000000000000000ac1414aa00000000bc1414bb000000000000000000000000ac14140100010000000000010000000000009be1441cd35410cee7dbfc5eb026b1080c1152af3ece5867"], 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r9, 0x0, 0x20, &(0x7f0000000040)={@empty, @empty}, 0x8) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x81, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e24}, @IFLA_GENEVE_TTL_INHERIT={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1.178758682s ago: executing program 5 (id=1365): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = gettid() sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)={0x118, 0x1d, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf3, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @pid=r1}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x8, 0xec, 0x0, 0x0, @pid}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)=0x0) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={r1, r3, r4}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0xec15bdab019ca09d, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r6, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x64}}, 0x0) (async) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000040)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x880b, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) (async) gettid() (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001e000100fdffffff0000000002000000010000070000000014000900766c616e300000000000000000000000080001"], 0x38}, 0x1, 0x0, 0x0, 0x42812}, 0x0) (async) accept$alg(r2, 0x0, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000180)=0x6, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) close(r11) (async) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000007000010000000000fddbdf2507000000", @ANYRES32=r13, @ANYBLOB="0c000180080001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x440040c4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'veth1_macvtap\x00', 0x0}) sendmmsg$inet(r2, &(0x7f0000000480)=[{{&(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000380)="6cade6ef9c46f70ab10112b2b0499a6b5945073ec9168e772d9b561af8a661210277f96c386c769c44b6d2e89a7c17dee3ae86339b422771d46c9fa0faa1000a8ee4b86b2f37e7ec7a0c8fcef0eb5ab8bdd7a0c10292f2351374c64978da60", 0x5f}, {&(0x7f0000000a40)="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", 0x1000}], 0x2, &(0x7f0000000540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @multicast1, @rand_addr=0x64010102}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8000000}}, @ip_retopts={{0x84, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x3c, 0xda, 0x3, 0xb, [{@multicast2, 0x2}, {@rand_addr=0x64010102, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x200}, {@broadcast, 0x6d3}, {@loopback}, {@empty}, {@empty, 0x3}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x34, 0xf9, 0x1, 0x4, [{@private=0xa010102, 0x90eb}, {@multicast1, 0x5}, {@remote, 0x5}, {@private=0xa010102}, {@loopback, 0x1}, {@multicast2, 0x6}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xb088}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x148}}], 0x1, 0x20000000) (async) socket(0x10, 0x803, 0x0) 1.096163998s ago: executing program 3 (id=1366): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069001c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) r1 = socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000000)=0x4) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000000c0), 0x8) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x49, &(0x7f0000000040)=r3, 0x4) 1.095478358s ago: executing program 1 (id=1367): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000580), &(0x7f0000000180)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207f00000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 985.958385ms ago: executing program 3 (id=1368): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2000, 0xab00, 0x0, 0x7, {{0x5, 0x4, 0x0, 0x13, 0x14, 0x20, 0x0, 0x2b, 0x2f, 0x0, @empty=0x2f, @multicast1}}}}) 894.129647ms ago: executing program 1 (id=1369): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f00000000c0)=0x6, 0x4) (async, rerun: 32) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x0) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000008000000e27f00000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000d00"/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, &(0x7f0000000040), 0x0}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @empty}, 0x4, 0x2, 0x0, 0x2, 0x0, 0x4}, 0x20) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r3, 0x8b32, &(0x7f0000000040)) (async, rerun: 64) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) getsockopt$inet6_int(r4, 0x29, 0x3a, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x3, 0x103, @empty, 0x20010}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) (async) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000019600)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x2}}], 0x28}, 0x0) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xa, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x4, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x9fbef606b5534957}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) ioctl$BTRFS_IOC_SNAP_CREATE(r4, 0x50009401, &(0x7f0000000b40)={{r1}, "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"}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000640)={'ip6tnl0\x00', 0x0, 0x2f, 0xff, 0xdc, 0x200, 0x8, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x40, 0x8, 0x842}}) sendmsg$inet6(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)="52f562455262f1e09ad6057fcfedd208805134d4d6cff0a5303e8e6cca15362df0c71a29d8adc6b0d85f44e8587f37d6b66f25e399b58957fd767491204e6d44cdbb567609ea2c5ea7a012ca17bc2e4ea29dd91c836425d85554f41d25586f2704908eb103", 0x65}, {&(0x7f0000001b40)="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", 0x1000}, {&(0x7f0000000340)="f2d0d2347012930f59f5c1a7f72c0093b5bbad30ff6bba124fd342b33dc8937b1d5e843ff96816d1ea4d14fd693fa7f36e961dcc334d9c205dbecb48861e025bfe5003bb367d04f17803ca9263388c5a6bbe6d32f791c068018624f2c15194e37596029213e071fb66806d92e4db3234a37953148205d3815aa7142ae203ddbf5764a4046234613e908afa55fe61c77ace2aba95cd8dda680da71dfd8623bad12112d1887333188318f33c3b3efce6351d5c1cbb88af1eb98fd7f7ed78c175725e753f0c670a87816744fe0ca036c3e32626eb644c1b1c6eb27fea", 0xdb}, {&(0x7f0000000800)="a5102443f175c086e0d6b4fcc884b2bc377f69cc8812749f527c2a347c8419f2c9bcaeb557befe159e643ee1eb84e625d5c5b0759070aa72247f989eb293937ad2dab652e5845cac54f7424b8bfa18488f91ecb48b098314acf69086bc6deead1bb0353a01", 0x65}, {&(0x7f0000000580)="a00005695d2a645da38bcf194208b67f389d75a4050d05f44719a9b29878f395a36402ed7b78aee3e74afb9fef42d8ca8b61d7adc768ad31576d125c932ce7dcf369870fd81b8803d1b2bb9e03017d0b74b6f30220c8432658abd7716aba583f0e54a4615f7219ce3712b1f687b5bd062f83eb41cdb67e39398e0d0d22edbb92caa1cf9c6e97739daf604048adea", 0x8e}], 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="1400000000000000958401d081c36a45a3624c2900001000000000030000000000000024000000810eaaa1225f9e6032000097e958565336c4270000000000000000019c19862c4a7a925cfd482ab21939965ca14eb31b498e9193374bfc390688fdd557e398e3aea8f23745a0b940415f05a980dee8aaee9b76afebab31a75424c6033029c77a84fc50285357", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00'], 0x40}, 0x4000000) (async, rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'vxcan1\x00', @broadcast}) 491.321659ms ago: executing program 3 (id=1370): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000100)={0x0, 0x7530}, 0x10) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="d52a99295b2f"}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 489.929502ms ago: executing program 0 (id=1371): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b1b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e1f}]}}}]}, 0x3c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="1c0000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r6, 0x11, 0x0, 0x0, @void, @value=r5}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000400)={r5}, 0x42) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)={@ifindex, r6, 0x11, 0x0, 0x0, @void, @value=r7}, 0x20) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) 489.357158ms ago: executing program 1 (id=1372): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x1, 0xb}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x2}, @TCA_FLOWER_KEY_CT_STATE_MASK={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe3, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xfc, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x20, 0x13, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@jmp={0x5, 0x0, 0xc, 0x7, 0x8, 0x1, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x5, 0x6, 0x5, 0x2, 0xfffffffffffffff0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000840)='syzkaller\x00', 0xbbab, 0xc5, &(0x7f0000000880)=""/197, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f00000009c0)=[r5, r4, r5, r4, r5, r5, r5, r5], &(0x7f0000000a00)=[{0x1, 0x1, 0x10, 0x9}, {0x2, 0x4, 0x4, 0x4}, {0x3, 0x2, 0x10, 0x8}], 0x10, 0xca4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1, 0x1a, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_val={0x18, 0x1, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x7ff, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x15, r6, 0x8, &(0x7f0000000280)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, r7, r8, 0x0, &(0x7f0000000b00)=[r5, r4, r4], 0x0, 0x10, 0xfffffff7}, 0x94) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x80}, [@map_fd={0x18, 0x4, 0x1, 0x0, r5}, @generic={0x7, 0x0, 0x2, 0x2, 0x3}, @map_val={0x18, 0x1, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x3}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xffffffffffffffff}, @ldst={0x2, 0x2, 0x779fa341c9d14534, 0x5, 0x8, 0x100, 0xa}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @kfunc]}, &(0x7f0000000100)='GPL\x00', 0x100, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0xd, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000}, 0x94) ioctl$SIOCAX25DELFWD(r9, 0x89eb, &(0x7f0000000c00)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x1, 0xb}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x2}, @TCA_FLOWER_KEY_CT_STATE_MASK={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x800) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe3, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xfc, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x20, 0x13, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@jmp={0x5, 0x0, 0xc, 0x7, 0x8, 0x1, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x5, 0x6, 0x5, 0x2, 0xfffffffffffffff0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000840)='syzkaller\x00', 0xbbab, 0xc5, &(0x7f0000000880)=""/197, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f00000009c0)=[r5, r4, r5, r4, r5, r5, r5, r5], &(0x7f0000000a00)=[{0x1, 0x1, 0x10, 0x9}, {0x2, 0x4, 0x4, 0x4}, {0x3, 0x2, 0x10, 0x8}], 0x10, 0xca4}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1, 0x1a, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_val={0x18, 0x1, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x7ff, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x15, r6, 0x8, &(0x7f0000000280)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, r7, r8, 0x0, &(0x7f0000000b00)=[r5, r4, r4], 0x0, 0x10, 0xfffffff7}, 0x94) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x80}, [@map_fd={0x18, 0x4, 0x1, 0x0, r5}, @generic={0x7, 0x0, 0x2, 0x2, 0x3}, @map_val={0x18, 0x1, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x3}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xffffffffffffffff}, @ldst={0x2, 0x2, 0x779fa341c9d14534, 0x5, 0x8, 0x100, 0xa}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @kfunc]}, &(0x7f0000000100)='GPL\x00', 0x100, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0xd, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000}, 0x94) (async) ioctl$SIOCAX25DELFWD(r9, 0x89eb, &(0x7f0000000c00)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) (async) 488.732027ms ago: executing program 5 (id=1373): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) accept$phonet_pipe(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff28}, 0x48) r5 = accept4(r4, 0x0, 0x0, 0x80000) setsockopt(r5, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000080), 0x4) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000006540000000c0a01010000000000000000010000000900020073797a32000000002800038024000080090026400000000018000b80140001800a0001006c696d697400000004fe02800900010073797a30"], 0xd8}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x7, 0x1, 0x1, 0x0, 0x6006}]}]}], {0x14}}, 0xa0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000c00010000001c001a8018000a8014000700fc0200"], 0x58}, 0x1, 0x2}, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) (async) accept$phonet_pipe(r0, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet(0xa, 0x801, 0x84) (async) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r4, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff28}, 0x48) (async) accept4(r4, 0x0, 0x0, 0x80000) (async) setsockopt(r5, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) (async) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000080), 0x4) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000006540000000c0a01010000000000000000010000000900020073797a32000000002800038024000080090026400000000018000b80140001800a0001006c696d697400000004fe02800900010073797a30"], 0xd8}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x7, 0x1, 0x1, 0x0, 0x6006}]}]}], {0x14}}, 0xa0}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000c00010000001c001a8018000a8014000700fc0200"], 0x58}, 0x1, 0x2}, 0x0) (async) 272.188666ms ago: executing program 3 (id=1374): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "5c8f022482395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0x8, 0x1, 'set\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 271.811366ms ago: executing program 2 (id=1375): r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000003c0)=ANY=[@ANYBLOB="050000000000000071117200000000008510000002000000850000000000000095000000000000009500a5058240c34f786574f25447e6392f58000082a7"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) (async) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x2, @local, 0x4}, 0x1c) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r2, 0x8b2c, &(0x7f0000000040)) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)={[{0x2b, 'cpu'}, {0x2d, 'cpuset'}, {0x0, 'pids'}, {0x2b, 'rdma'}]}, 0x19) (async) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) (async) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) close(r0) 226.35518ms ago: executing program 5 (id=1376): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x10041, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'erspan0\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000200)='F', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r3 = socket(0x1a, 0x80805, 0x40) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="4ddf9c0000c307c3f181861c0000d5bafcc1f01401bfb1893647f2728e", @ANYRES16=0x0, @ANYBLOB="010027bf7000fbdbdf254400000008000300", @ANYRES32=0x0, @ANYBLOB="0a0018000303030303030000"], 0x28}, 0x1, 0x0, 0x0, 0x805}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0xfe, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffd}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 142.349504ms ago: executing program 3 (id=1377): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x578, 0x1a0, 0x3f8, 0x2b8, 0x0, 0xd0, 0x518, 0x518, 0x518, 0x518, 0x518, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, [0xffffffff, 0xffffffff, 0x7f000101, 0xff000000], [0xffffff00, 0xffffffff, 0xff000000, 0xff000000], 'pimreg\x00', 'veth1_to_bridge\x00', {}, {}, 0xfd, 0xff, 0x2, 0x8}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x5, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x5}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@private=0xa010101, 0x21, 0x3b, 0x200}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x9, 0x2, 0x1, [0x8, 0xff, 0x10, 0x1, 0x2800, 0xc, 0xfffb, 0xff93, 0x7, 0x0, 0x81, 0x6, 0x0, 0x5, 0x7f, 0x200], 0x10}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x3, 0x2, 0x17c, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f00000000c0)=0xd95, 0x4019e2060d4e3ac7) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4062d13c}}}}}, 0x0) recvmmsg(r1, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3f2}, 0x1c) 0s ago: executing program 2 (id=1378): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r1 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) accept$phonet_pipe(r1, 0x0, &(0x7f00000000c0)) (async) accept$phonet_pipe(r1, 0x0, &(0x7f00000000c0)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socketpair(0x2a, 0x800, 0x16, &(0x7f0000000240)={0xffffffffffffffff}) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000280), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000400)=ANY=[@ANYBLOB="543de392386f19898100001000000000fc010000000000000000000000000000fe8000000000004ce0be26047a8b09dd14180000000000000000bb00000000000000000200000000000000d77234745f206ea4414d1031293d19c27d9c524291e35cc469a40f51295c753d0b234a294a67f31a32103de0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x154}}, 0x0) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000400)=ANY=[@ANYBLOB="543de392386f19898100001000000000fc010000000000000000000000000000fe8000000000004ce0be26047a8b09dd14180000000000000000bb00000000000000000200000000000000d77234745f206ea4414d1031293d19c27d9c524291e35cc469a40f51295c753d0b234a294a67f31a32103de0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x154}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xed27c9fa5277b9b7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ALPHA={0x1, 0x5, 0xd}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xfffffff8}]}}]}, 0x44}}, 0x20008000) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r8) (async) syz_genetlink_get_family_id$nl80211(0x0, r8) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001580)={0x58, r9, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "bf1dddca2049e38b2f49083c278c97edd08cd4e8"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4014) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x6, 0x6361, 0x2, 0xfffffffd, 0x6}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x1, 0x7}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.29' (ED25519) to the list of known hosts. [ 73.809112][ T5853] cgroup: Unknown subsys name 'net' [ 73.918443][ T5853] cgroup: Unknown subsys name 'cpuset' [ 73.927585][ T5853] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.252891][ T5853] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.630766][ T5869] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.639332][ T5869] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.644270][ T5875] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.647213][ T5869] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.661414][ T5875] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.662193][ T5869] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.676160][ T5875] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.679131][ T5869] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.691011][ T5873] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.701165][ T5869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.708618][ T5869] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.716666][ T5878] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.727236][ T5875] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.736753][ T5878] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.739149][ T5875] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.752684][ T5875] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.758143][ T5878] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.761915][ T5875] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.775835][ T5871] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.777850][ T5875] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.783641][ T5882] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.793667][ T5875] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.820310][ T5875] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.832582][ T5875] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.851068][ T5185] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.420634][ T5874] chnl_net:caif_netlink_parms(): no params data found [ 78.549644][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 78.604630][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 78.640730][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 78.793802][ T5876] chnl_net:caif_netlink_parms(): no params data found [ 78.823923][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.832445][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.840051][ T5874] bridge_slave_0: entered allmulticast mode [ 78.847523][ T5874] bridge_slave_0: entered promiscuous mode [ 78.884084][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.891568][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.898786][ T5874] bridge_slave_1: entered allmulticast mode [ 78.906461][ T5874] bridge_slave_1: entered promiscuous mode [ 79.046440][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.054097][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.061737][ T5865] bridge_slave_0: entered allmulticast mode [ 79.068894][ T5865] bridge_slave_0: entered promiscuous mode [ 79.077798][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.085098][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.092247][ T5865] bridge_slave_1: entered allmulticast mode [ 79.100267][ T5865] bridge_slave_1: entered promiscuous mode [ 79.119917][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.127217][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.134403][ T5863] bridge_slave_0: entered allmulticast mode [ 79.141993][ T5863] bridge_slave_0: entered promiscuous mode [ 79.165757][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.178553][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.198231][ T5876] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.205555][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.212696][ T5876] bridge_slave_0: entered allmulticast mode [ 79.219921][ T5876] bridge_slave_0: entered promiscuous mode [ 79.227169][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.234292][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.242149][ T5863] bridge_slave_1: entered allmulticast mode [ 79.250004][ T5863] bridge_slave_1: entered promiscuous mode [ 79.256645][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.263762][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.271388][ T5866] bridge_slave_0: entered allmulticast mode [ 79.279168][ T5866] bridge_slave_0: entered promiscuous mode [ 79.312166][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.319552][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.327054][ T5876] bridge_slave_1: entered allmulticast mode [ 79.334139][ T5876] bridge_slave_1: entered promiscuous mode [ 79.355897][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.363749][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.371717][ T5866] bridge_slave_1: entered allmulticast mode [ 79.379106][ T5866] bridge_slave_1: entered promiscuous mode [ 79.414774][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.459976][ T5874] team0: Port device team_slave_0 added [ 79.468179][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.493704][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.506765][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.518766][ T5874] team0: Port device team_slave_1 added [ 79.552489][ T5876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.564287][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.590544][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.641817][ T5876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.676789][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.683749][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.712069][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.726066][ T5865] team0: Port device team_slave_0 added [ 79.744726][ T5863] team0: Port device team_slave_0 added [ 79.754104][ T5863] team0: Port device team_slave_1 added [ 79.762110][ T5866] team0: Port device team_slave_0 added [ 79.771468][ T5866] team0: Port device team_slave_1 added [ 79.778110][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.785088][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.811084][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.823475][ T5865] team0: Port device team_slave_1 added [ 79.836046][ T5185] Bluetooth: hci2: command tx timeout [ 79.841774][ T5185] Bluetooth: hci0: command tx timeout [ 79.846558][ T5869] Bluetooth: hci1: command tx timeout [ 79.903568][ T5876] team0: Port device team_slave_0 added [ 79.916032][ T5869] Bluetooth: hci3: command tx timeout [ 79.924992][ T5869] Bluetooth: hci4: command tx timeout [ 79.940989][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.948371][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.974442][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.999906][ T5876] team0: Port device team_slave_1 added [ 80.006934][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.013871][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.040132][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.063651][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.070716][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.096860][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.116316][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.123272][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.149491][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.173599][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.180679][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.206730][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.243999][ T5874] hsr_slave_0: entered promiscuous mode [ 80.250376][ T5874] hsr_slave_1: entered promiscuous mode [ 80.258098][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.266725][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.292814][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.350817][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.358178][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.384305][ T5876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.438836][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.446315][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.472466][ T5876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.497070][ T5863] hsr_slave_0: entered promiscuous mode [ 80.503367][ T5863] hsr_slave_1: entered promiscuous mode [ 80.510457][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 80.516382][ T5863] Cannot create hsr debugfs directory [ 80.534689][ T5866] hsr_slave_0: entered promiscuous mode [ 80.540962][ T5866] hsr_slave_1: entered promiscuous mode [ 80.547319][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 80.553038][ T5866] Cannot create hsr debugfs directory [ 80.679644][ T5865] hsr_slave_0: entered promiscuous mode [ 80.686714][ T5865] hsr_slave_1: entered promiscuous mode [ 80.692693][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 80.698782][ T5865] Cannot create hsr debugfs directory [ 80.793755][ T5876] hsr_slave_0: entered promiscuous mode [ 80.800362][ T5876] hsr_slave_1: entered promiscuous mode [ 80.806650][ T5876] debugfs: 'hsr0' already exists in 'hsr' [ 80.812379][ T5876] Cannot create hsr debugfs directory [ 81.283180][ T5874] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.299086][ T5874] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.310118][ T5874] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.330300][ T5874] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.381662][ T5865] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.393168][ T5865] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.420872][ T5865] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.431403][ T5865] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.496050][ T5866] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.508309][ T5866] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.546896][ T5866] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.580353][ T5866] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.661289][ T5863] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.689888][ T5863] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.730009][ T5863] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.744424][ T5863] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.915843][ T5869] Bluetooth: hci1: command tx timeout [ 81.921277][ T5869] Bluetooth: hci0: command tx timeout [ 81.925509][ T5185] Bluetooth: hci2: command tx timeout [ 81.972239][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.995683][ T5185] Bluetooth: hci4: command tx timeout [ 81.999795][ T5876] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.001102][ T5185] Bluetooth: hci3: command tx timeout [ 82.052871][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.076766][ T5876] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.108219][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.120440][ T5876] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.147950][ T5876] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.163857][ T750] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.171108][ T750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.210667][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.230577][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.237743][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.266282][ T750] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.273491][ T750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.293429][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.300661][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.339235][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.441342][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.480003][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.523818][ T750] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.531013][ T750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.547901][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.555073][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.640377][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.701555][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.709211][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.739848][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.747032][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.830855][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.923387][ T5876] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.011549][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.018752][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.038242][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.045450][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.089309][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.141341][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.303555][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.344983][ T5874] veth0_vlan: entered promiscuous mode [ 83.400672][ T5874] veth1_vlan: entered promiscuous mode [ 83.540636][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.610800][ T5874] veth0_macvtap: entered promiscuous mode [ 83.639414][ T5874] veth1_macvtap: entered promiscuous mode [ 83.654405][ T5866] veth0_vlan: entered promiscuous mode [ 83.731952][ T5866] veth1_vlan: entered promiscuous mode [ 83.745653][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.776039][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.813500][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.839848][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.856514][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.867680][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.878527][ T5865] veth0_vlan: entered promiscuous mode [ 83.890184][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.942390][ T5865] veth1_vlan: entered promiscuous mode [ 83.949147][ T5863] veth0_vlan: entered promiscuous mode [ 83.958721][ T5866] veth0_macvtap: entered promiscuous mode [ 83.996327][ T5185] Bluetooth: hci2: command tx timeout [ 83.996547][ T5869] Bluetooth: hci1: command tx timeout [ 84.007314][ T5875] Bluetooth: hci0: command tx timeout [ 84.019246][ T5866] veth1_macvtap: entered promiscuous mode [ 84.073274][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.082084][ T5875] Bluetooth: hci3: command tx timeout [ 84.089382][ T5869] Bluetooth: hci4: command tx timeout [ 84.110414][ T5863] veth1_vlan: entered promiscuous mode [ 84.119770][ T5876] veth0_vlan: entered promiscuous mode [ 84.135320][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.143657][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.173896][ T5865] veth0_macvtap: entered promiscuous mode [ 84.191042][ T5865] veth1_macvtap: entered promiscuous mode [ 84.200358][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.229944][ T5876] veth1_vlan: entered promiscuous mode [ 84.250895][ T750] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.259602][ T750] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.263040][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.292336][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.321128][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.330092][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.349366][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.366209][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.382712][ T5874] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.426323][ T5863] veth0_macvtap: entered promiscuous mode [ 84.458933][ T5863] veth1_macvtap: entered promiscuous mode [ 84.483573][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.509483][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.524054][ T5876] veth0_macvtap: entered promiscuous mode [ 84.541458][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.551094][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.572553][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.593412][ T5985] Dead loop on virtual device ip6_vti0, fix it urgently! [ 84.601563][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.619700][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.628976][ T5876] veth1_macvtap: entered promiscuous mode [ 84.677252][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.731854][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.749127][ T750] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.760734][ T750] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.809469][ T750] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.819984][ T750] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.820737][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.847343][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.868384][ T5990] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 84.876497][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.952280][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.047425][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.102536][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.119851][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.176660][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.185659][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.233245][ T1116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.253330][ T1116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.265293][ T6000] syzkaller0: entered promiscuous mode [ 85.270777][ T6000] syzkaller0: entered allmulticast mode [ 85.309482][ T6002] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9'. [ 85.321368][ T3580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.343523][ T3580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.392357][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.409383][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.538416][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.571177][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.594375][ T3580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.611028][ T3580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.704275][ T6008] syz.0.10 uses obsolete (PF_INET,SOCK_PACKET) [ 85.793544][ T6008] netlink: 232 bytes leftover after parsing attributes in process `syz.0.10'. [ 85.879085][ T6008] netlink: 'syz.0.10': attribute type 3 has an invalid length. [ 85.944534][ T6014] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 85.947140][ T6010] openvswitch: netlink: Message has -1 unknown bytes. [ 85.957177][ T6014] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2'. [ 85.992937][ T6014] nbd: illegal input index 1048576 [ 86.095048][ T5875] Bluetooth: hci2: command tx timeout [ 86.100492][ T5875] Bluetooth: hci0: command tx timeout [ 86.106230][ T5875] Bluetooth: hci1: command tx timeout [ 86.157476][ T5869] Bluetooth: hci3: command tx timeout [ 86.157488][ T5875] Bluetooth: hci4: command tx timeout [ 86.173138][ T6018] veth0: entered promiscuous mode [ 86.295593][ T6029] openvswitch: netlink: Multiple metadata blocks provided [ 86.303697][ T6017] veth0: left promiscuous mode [ 86.482656][ T6038] netlink: 'syz.3.18': attribute type 11 has an invalid length. [ 86.515008][ T6038] netlink: 64 bytes leftover after parsing attributes in process `syz.3.18'. [ 86.545724][ T6040] netlink: 'syz.0.19': attribute type 1 has an invalid length. [ 86.571452][ T6040] netlink: 224 bytes leftover after parsing attributes in process `syz.0.19'. [ 86.614597][ T6038] Zero length message leads to an empty skb [ 86.616422][ T6042] netlink: 'syz.1.20': attribute type 3 has an invalid length. [ 86.685308][ T6042] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.20'. [ 86.772086][ T6046] netlink: 'syz.4.22': attribute type 2 has an invalid length. [ 86.801886][ T981] cfg80211: failed to load regulatory.db [ 86.810958][ T6048] netlink: 'syz.4.22': attribute type 2 has an invalid length. [ 86.821220][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22'. [ 86.848536][ T6046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22'. [ 86.871830][ T6058] netlink: 'syz.1.20': attribute type 1 has an invalid length. [ 87.395722][ T6111] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.418995][ T6047] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 87.448970][ T6113] netlink: 96 bytes leftover after parsing attributes in process `syz.3.29'. [ 87.488450][ T6115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.31'. [ 87.590819][ T6115] xfrm1: entered promiscuous mode [ 87.598053][ T6116] netlink: 'syz.0.30': attribute type 4 has an invalid length. [ 87.630489][ T6115] xfrm1: entered allmulticast mode [ 87.749664][ T6129] netlink: 'syz.4.32': attribute type 1 has an invalid length. [ 87.777700][ T6129] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.843133][ T6128] Driver unsupported XDP return value 0 on prog (id 7) dev N/A, expect packet loss! [ 89.456854][ T6221] sctp: [Deprecated]: syz.1.65 (pid 6221) Use of int in max_burst socket option. [ 89.456854][ T6221] Use struct sctp_assoc_value instead [ 89.592883][ T6230] sctp: [Deprecated]: syz.4.67 (pid 6230) Use of int in maxseg socket option. [ 89.592883][ T6230] Use struct sctp_assoc_value instead [ 89.630267][ T6230] sctp: [Deprecated]: syz.4.67 (pid 6230) Use of int in maxseg socket option. [ 89.630267][ T6230] Use struct sctp_assoc_value instead [ 89.691160][ T6230] sctp: [Deprecated]: syz.4.67 (pid 6230) Use of int in maxseg socket option. [ 89.691160][ T6230] Use struct sctp_assoc_value instead [ 89.770470][ T6230] sctp: [Deprecated]: syz.4.67 (pid 6230) Use of int in maxseg socket option. [ 89.770470][ T6230] Use struct sctp_assoc_value instead [ 89.922837][ T6243] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.032557][ T6104] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 90.324006][ T6270] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.468810][ T6276] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 90.591366][ T6283] __nla_validate_parse: 12 callbacks suppressed [ 90.591384][ T6283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.83'. [ 90.592522][ T6276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.82'. [ 90.629683][ T6281] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 90.820040][ T6289] netlink: 192 bytes leftover after parsing attributes in process `syz.4.85'. [ 90.977114][ T6298] netlink: 24 bytes leftover after parsing attributes in process `syz.1.86'. [ 90.995181][ T6298] nbd: must specify a size in bytes for the device [ 91.496693][ T6332] Bluetooth: MGMT ver 1.23 [ 91.602905][ T6335] netlink: 208 bytes leftover after parsing attributes in process `syz.2.96'. [ 91.803060][ T6344] netlink: 24 bytes leftover after parsing attributes in process `syz.4.100'. [ 91.836611][ T6350] xt_l2tp: v2 tid > 0xffff: 1114244 [ 92.014403][ T6357] validate_nla: 5 callbacks suppressed [ 92.014422][ T6357] netlink: 'syz.2.104': attribute type 1 has an invalid length. [ 92.033630][ T6361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.106'. [ 92.050013][ T6357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.104'. [ 92.061735][ T6363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.104'. [ 92.078165][ T6357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.104'. [ 92.090063][ T6363] openvswitch: netlink: Flow actions attr not present in new flow. [ 92.103016][ T6359] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 93.033188][ T6410] pim6reg: entered allmulticast mode [ 93.652579][ T6429] netlink: 'syz.4.123': attribute type 4 has an invalid length. [ 93.852552][ T6444] sctp: [Deprecated]: syz.0.125 (pid 6444) Use of struct sctp_assoc_value in delayed_ack socket option. [ 93.852552][ T6444] Use struct sctp_sack_info instead [ 94.451931][ T6470] team0: No ports can be present during mode change [ 95.267256][ T6518] tipc: Enabling of bearer rejected, failed to enable media [ 95.291470][ T6521] gretap1: entered promiscuous mode [ 95.299120][ T6521] gretap1: entered allmulticast mode [ 95.532806][ T6531] netlink: 'syz.1.151': attribute type 12 has an invalid length. [ 95.580254][ T6531] netlink: 'syz.1.151': attribute type 29 has an invalid length. [ 95.618659][ T6531] __nla_validate_parse: 15 callbacks suppressed [ 95.618676][ T6531] netlink: 148 bytes leftover after parsing attributes in process `syz.1.151'. [ 95.655013][ T6531] netlink: 59 bytes leftover after parsing attributes in process `syz.1.151'. [ 95.679852][ T6537] lo speed is unknown, defaulting to 1000 [ 95.699850][ T6537] lo speed is unknown, defaulting to 1000 [ 95.723001][ T6537] lo speed is unknown, defaulting to 1000 [ 95.747680][ T6544] netlink: 'syz.4.154': attribute type 10 has an invalid length. [ 95.778829][ T6544] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.833402][ T6544] bridge_slave_1: left allmulticast mode [ 95.852218][ T6544] bridge_slave_1: left promiscuous mode [ 95.872009][ T6544] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.904237][ T6553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.157'. [ 95.937277][ T6544] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 96.207879][ T6564] netlink: 24 bytes leftover after parsing attributes in process `syz.1.162'. [ 96.510561][ T6574] syzkaller0: entered promiscuous mode [ 96.531341][ T6574] syzkaller0: entered allmulticast mode [ 96.577980][ T6581] gtp0: entered promiscuous mode [ 96.583371][ T6581] gtp0: entered allmulticast mode [ 96.643215][ T6583] netlink: 12 bytes leftover after parsing attributes in process `syz.1.166'. [ 96.672027][ T6537] infiniband syz0: set active [ 96.691155][ T6537] infiniband syz0: added lo [ 96.717599][ T6537] syz0: rxe_create_cq: returned err = -12 [ 96.730511][ T5983] lo speed is unknown, defaulting to 1000 [ 96.740153][ T6537] infiniband syz0: Couldn't create ib_mad CQ [ 96.742755][ T6583] geneve2: entered promiscuous mode [ 96.748679][ T6537] infiniband syz0: Couldn't open port 1 [ 96.809767][ T6593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.167'. [ 96.824263][ T6537] RDS/IB: syz0: added [ 96.834484][ T6537] smc: adding ib device syz0 with port count 1 [ 96.841618][ T6593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.167'. [ 96.852137][ T6537] smc: ib device syz0 port 1 has pnetid [ 96.880645][ T5948] lo speed is unknown, defaulting to 1000 [ 96.898159][ T6590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.167'. [ 96.899448][ T6537] lo speed is unknown, defaulting to 1000 [ 96.931469][ T6595] af_packet: tpacket_rcv: packet too big, clamped from 3698 to 4294967272. macoff=96 [ 96.960406][ T6590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.167'. [ 96.978198][ T6104] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.996572][ T6104] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.019427][ T6067] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.033163][ T6597] netlink: 277 bytes leftover after parsing attributes in process `syz.0.170'. [ 97.055612][ T6067] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.124325][ T6598] xfrm1: left allmulticast mode [ 97.467701][ T6616] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 97.503320][ T6617] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 97.586096][ T6537] lo speed is unknown, defaulting to 1000 [ 97.597120][ T6619] raw_sendmsg: syz.2.174 forgot to set AF_INET. Fix it! [ 97.622069][ T6619] syzkaller1: entered promiscuous mode [ 97.649484][ T6619] syzkaller1: entered allmulticast mode [ 98.036965][ T6632] Unsupported ieee802154 address type: 0 [ 98.401822][ T6537] lo speed is unknown, defaulting to 1000 [ 98.640150][ T6659] openvswitch: netlink: Flow actions attr not present in new flow. [ 98.853714][ T6537] lo speed is unknown, defaulting to 1000 [ 99.133504][ T6653] lo speed is unknown, defaulting to 1000 [ 99.725251][ T6700] netlink: 'syz.1.199': attribute type 10 has an invalid length. [ 99.740436][ T6700] dummy0: entered promiscuous mode [ 99.748145][ T6700] bridge0: port 3(dummy0) entered blocking state [ 99.754848][ T6700] bridge0: port 3(dummy0) entered disabled state [ 99.774599][ T6700] dummy0: entered allmulticast mode [ 99.789217][ T6700] bridge0: port 3(dummy0) entered blocking state [ 99.795756][ T6700] bridge0: port 3(dummy0) entered forwarding state [ 99.871085][ T6537] lo speed is unknown, defaulting to 1000 [ 99.923288][ T6707] warning: `syz.1.202' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 99.967154][ T6706] bridge0: entered promiscuous mode [ 99.972792][ T6706] macsec1: entered promiscuous mode [ 99.983001][ T6706] macsec1: entered allmulticast mode [ 99.991284][ T6706] bridge0: entered allmulticast mode [ 100.001001][ T6706] bridge0: port 2(macsec1) entered blocking state [ 100.011471][ T6706] bridge0: port 2(macsec1) entered disabled state [ 100.022639][ T6706] bridge0: left allmulticast mode [ 100.031038][ T6706] bridge0: left promiscuous mode [ 100.482586][ T6722] netlink: 'syz.0.207': attribute type 33 has an invalid length. [ 100.599045][ T6724] team0: Device ip6gre1 is of different type [ 100.662993][ T6726] netlink: 'syz.0.209': attribute type 33 has an invalid length. [ 100.671211][ T6726] __nla_validate_parse: 12 callbacks suppressed [ 100.671228][ T6726] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.209'. [ 101.079956][ T6730] team0 (unregistering): Port device team_slave_0 removed [ 101.099855][ T6730] team0 (unregistering): Port device team_slave_1 removed [ 101.181123][ T6742] netlink: 20 bytes leftover after parsing attributes in process `syz.2.213'. [ 101.279536][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.214'. [ 101.400777][ T6755] netlink: 32 bytes leftover after parsing attributes in process `syz.3.215'. [ 101.402450][ T6756] netlink: 32 bytes leftover after parsing attributes in process `syz.3.215'. [ 101.498664][ T6746] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.509635][ T6746] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.545238][ T6746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.569398][ T6746] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.645953][ T6762] block nbd0: server does not support multiple connections per device. [ 101.658905][ T6762] block nbd0: shutting down sockets [ 101.698267][ T6760] netlink: 'syz.2.218': attribute type 33 has an invalid length. [ 102.257739][ T6795] netlink: 3 bytes leftover after parsing attributes in process `syz.2.233'. [ 102.281842][ T6795] openvswitch: netlink: Actions may not be safe on all matching packets [ 102.345477][ T6798] netlink: 36 bytes leftover after parsing attributes in process `syz.4.235'. [ 102.356450][ T6798] netlink: 16 bytes leftover after parsing attributes in process `syz.4.235'. [ 102.365618][ T6801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.231'. [ 102.371149][ T6798] netlink: 36 bytes leftover after parsing attributes in process `syz.4.235'. [ 102.428135][ T6803] netlink: 'syz.1.236': attribute type 19 has an invalid length. [ 102.629040][ T6815] netlink: 'syz.2.240': attribute type 2 has an invalid length. [ 102.804555][ T6823] GUP no longer grows the stack in syz.0.241 (6823): 200000006000-200000008000 (200000005000) [ 102.816724][ T6823] CPU: 0 UID: 0 PID: 6823 Comm: syz.0.241 Not tainted syzkaller #0 PREEMPT(full) [ 102.816750][ T6823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 102.816768][ T6823] Call Trace: [ 102.816776][ T6823] [ 102.816785][ T6823] dump_stack_lvl+0x189/0x250 [ 102.816819][ T6823] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.816844][ T6823] ? __pfx__printk+0x10/0x10 [ 102.816867][ T6823] ? find_vma+0xe7/0x160 [ 102.816907][ T6823] __get_user_pages+0x24d0/0x2ce0 [ 102.816930][ T6823] ? __lock_acquire+0xab9/0xd20 [ 102.816986][ T6823] ? __gup_longterm_locked+0xc68/0x1660 [ 102.817018][ T6823] __gup_longterm_locked+0xde9/0x1660 [ 102.817058][ T6823] ? sanity_check_pinned_pages+0x123a/0x1300 [ 102.817091][ T6823] gup_fast_fallback+0x1e6a/0x2010 [ 102.817152][ T6823] ? __pfx_gup_fast_fallback+0x10/0x10 [ 102.817180][ T6823] ? __lock_acquire+0xab9/0xd20 [ 102.817216][ T6823] ? pin_user_pages_fast+0x4d/0xb0 [ 102.817243][ T6823] iov_iter_extract_pages+0x35a/0x5e0 [ 102.817281][ T6823] extract_iter_to_sg+0xe46/0x24e0 [ 102.817321][ T6823] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 102.817353][ T6823] ? __local_bh_enable_ip+0x12d/0x1c0 [ 102.817373][ T6823] ? lockdep_hardirqs_on+0x9c/0x150 [ 102.817396][ T6823] ? __local_bh_enable_ip+0x12d/0x1c0 [ 102.817415][ T6823] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 102.817440][ T6823] ? __asan_memset+0x22/0x50 [ 102.817465][ T6823] hash_sendmsg+0x4f4/0x11d0 [ 102.817517][ T6823] ? __pfx_hash_sendmsg+0x10/0x10 [ 102.817546][ T6823] __sock_sendmsg+0x21c/0x270 [ 102.817579][ T6823] ____sys_sendmsg+0x52d/0x830 [ 102.817609][ T6823] ? __pfx_____sys_sendmsg+0x10/0x10 [ 102.817642][ T6823] ? import_iovec+0x74/0xa0 [ 102.817670][ T6823] ___sys_sendmsg+0x21f/0x2a0 [ 102.817695][ T6823] ? __pfx____sys_sendmsg+0x10/0x10 [ 102.817760][ T6823] ? __fget_files+0x2a/0x420 [ 102.817777][ T6823] ? __fget_files+0x3a0/0x420 [ 102.817806][ T6823] __sys_sendmmsg+0x227/0x430 [ 102.817836][ T6823] ? __pfx___sys_sendmmsg+0x10/0x10 [ 102.817858][ T6823] ? do_futex+0x395/0x420 [ 102.817892][ T6823] ? fd_install+0x97/0x540 [ 102.817943][ T6823] ? rcu_is_watching+0x15/0xb0 [ 102.817969][ T6823] __x64_sys_sendmmsg+0xa0/0xc0 [ 102.817996][ T6823] do_syscall_64+0xfa/0x3b0 [ 102.818016][ T6823] ? lockdep_hardirqs_on+0x9c/0x150 [ 102.818035][ T6823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.818055][ T6823] ? clear_bhb_loop+0x60/0xb0 [ 102.818078][ T6823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.818097][ T6823] RIP: 0033:0x7f1a9578eba9 [ 102.818123][ T6823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.818140][ T6823] RSP: 002b:00007f1a9663c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 102.818160][ T6823] RAX: ffffffffffffffda RBX: 00007f1a959d6180 RCX: 00007f1a9578eba9 [ 102.818175][ T6823] RDX: 0000000000000001 RSI: 0000200000000640 RDI: 0000000000000008 [ 102.818187][ T6823] RBP: 00007f1a95811e19 R08: 0000000000000000 R09: 0000000000000000 [ 102.818200][ T6823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.818212][ T6823] R13: 00007f1a959d6218 R14: 00007f1a959d6180 R15: 00007fff54a9ae58 [ 102.818243][ T6823] [ 103.169013][ T6827] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20002 [ 103.474036][ T6834] netlink: 'syz.3.246': attribute type 4 has an invalid length. [ 103.860206][ T6850] syzkaller0: entered promiscuous mode [ 103.872898][ T6850] syzkaller0: entered allmulticast mode [ 104.440827][ T6878] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 104.454568][ T6879] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 104.760151][ T5869] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 104.777957][ T5869] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 104.790586][ T5869] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 104.804788][ T5869] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 104.812734][ T5869] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 105.571786][ T6064] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.583820][ T6064] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.642054][ T6884] tipc: Enabling not permitted [ 105.658109][ T6884] tipc: Enabling of bearer rejected, failed to enable media [ 105.817878][ T6064] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.830644][ T6066] tipc: Subscription rejected, illegal request [ 105.847864][ T6064] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.988487][ T6911] __nla_validate_parse: 5 callbacks suppressed [ 105.988505][ T6911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.266'. [ 106.075982][ T6064] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.099109][ T6064] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.126726][ T6886] lo speed is unknown, defaulting to 1000 [ 106.159514][ T6924] netlink: 'syz.0.269': attribute type 1 has an invalid length. [ 106.265544][ T6064] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.289014][ T6927] netlink: 'syz.3.270': attribute type 1 has an invalid length. [ 106.308403][ T6064] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.386902][ T6924] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 106.516694][ T6931] macvtap1: entered promiscuous mode [ 106.532664][ T6931] macvtap1: entered allmulticast mode [ 106.539441][ T6939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.272'. [ 106.553606][ T6931] bond_slave_0: entered promiscuous mode [ 106.559506][ T6931] bond_slave_1: entered promiscuous mode [ 106.569139][ T6931] bond0: entered allmulticast mode [ 106.574345][ T6931] bond_slave_0: entered allmulticast mode [ 106.581068][ T6931] bond_slave_1: entered allmulticast mode [ 106.615633][ T6931] bond0: entered promiscuous mode [ 106.623638][ T6931] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 106.635756][ T6931] team0: Device macvtap1 failed to register rx_handler [ 106.643613][ T6931] bond0: left allmulticast mode [ 106.648724][ T6931] bond_slave_0: left allmulticast mode [ 106.654355][ T6931] bond_slave_1: left allmulticast mode [ 106.659994][ T6931] bond0: left promiscuous mode [ 106.665693][ T6931] bond_slave_0: left promiscuous mode [ 106.671187][ T6931] bond_slave_1: left promiscuous mode [ 106.703849][ T6942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.274'. [ 106.712954][ T6942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.274'. [ 106.730970][ T6939] bridge0: entered promiscuous mode [ 106.743684][ T6939] macsec1: entered promiscuous mode [ 106.750515][ T6939] macsec1: entered allmulticast mode [ 106.756574][ T6939] bridge0: entered allmulticast mode [ 106.763492][ T6939] bridge0: port 3(macsec1) entered blocking state [ 106.771685][ T6939] bridge0: port 3(macsec1) entered disabled state [ 106.782496][ T6939] bridge0: left allmulticast mode [ 106.787933][ T6939] bridge0: left promiscuous mode [ 106.875309][ T5875] Bluetooth: hci1: command tx timeout [ 107.103207][ T6950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.275'. [ 107.234356][ T6953] netlink: 12 bytes leftover after parsing attributes in process `syz.1.275'. [ 107.288558][ T6064] bridge_slave_0: left allmulticast mode [ 107.312393][ T6064] bridge_slave_0: left promiscuous mode [ 107.338834][ T6064] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.054087][ T6064] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.068278][ T6064] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.080181][ T6064] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 108.090357][ T6064] bond0 (unregistering): Released all slaves [ 108.123007][ T6951] syzkaller1: entered promiscuous mode [ 108.129095][ T6951] syzkaller1: entered allmulticast mode [ 108.608917][ T6999] netlink: 32 bytes leftover after parsing attributes in process `syz.0.289'. [ 108.912247][ T7002] tipc: Started in network mode [ 108.919012][ T7002] tipc: Node identity 4a42fd21c947, cluster identity 4711 [ 108.927519][ T7002] tipc: Enabled bearer , priority 0 [ 108.936816][ T7008] syzkaller0: entered promiscuous mode [ 108.955222][ T5875] Bluetooth: hci1: command tx timeout [ 108.975132][ T7008] syzkaller0: entered allmulticast mode [ 109.011963][ T7012] netlink: 'syz.2.292': attribute type 18 has an invalid length. [ 109.020599][ T7012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.292'. [ 109.031924][ T6997] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 109.041136][ T7011] netlink: 76 bytes leftover after parsing attributes in process `syz.1.293'. [ 109.058748][ T7011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.293'. [ 109.094688][ T6886] chnl_net:caif_netlink_parms(): no params data found [ 109.132107][ T7012] netlink: 'syz.2.292': attribute type 18 has an invalid length. [ 109.141251][ T7008] tipc: Resetting bearer [ 109.162961][ T6995] tipc: Resetting bearer [ 109.213576][ T6995] tipc: Disabling bearer [ 109.409181][ T6067] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.430305][ T6067] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.634736][ T6072] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.705950][ T7038] 8021q: VLANs not supported on nlmon0 [ 109.983055][ T6072] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.096473][ T6064] hsr_slave_0: left promiscuous mode [ 110.117286][ T6064] hsr_slave_1: left promiscuous mode [ 110.132118][ T6064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.156301][ T6064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.176401][ T6064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.205002][ T6064] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.315529][ T6064] veth1_macvtap: left promiscuous mode [ 110.335609][ T6064] veth0_macvtap: left promiscuous mode [ 110.343081][ T6064] veth1_vlan: left promiscuous mode [ 110.351635][ T6064] veth0_vlan: left promiscuous mode [ 110.544584][ T6064] pim6reg (unregistering): left allmulticast mode [ 110.902553][ T6064] team0 (unregistering): Port device team_slave_1 removed [ 110.939622][ T6064] team0 (unregistering): Port device team_slave_0 removed [ 111.039069][ T5875] Bluetooth: hci1: command tx timeout [ 111.271131][ T6886] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.282815][ T6886] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.290731][ T6886] bridge_slave_0: entered allmulticast mode [ 111.300307][ T6886] bridge_slave_0: entered promiscuous mode [ 111.312028][ T6886] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.319313][ T6886] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.327025][ T6886] bridge_slave_1: entered allmulticast mode [ 111.351509][ T6886] bridge_slave_1: entered promiscuous mode [ 111.608431][ T6886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.740604][ T6886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.039183][ T6886] team0: Port device team_slave_0 added [ 112.079002][ T6886] team0: Port device team_slave_1 added [ 112.346267][ T6886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.353245][ T6886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.406875][ T6886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.478531][ T6886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.487587][ T6886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.563459][ T6886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.826829][ T7156] __nla_validate_parse: 3 callbacks suppressed [ 112.826848][ T7156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.326'. [ 112.855171][ T7154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.324'. [ 112.888421][ T6886] hsr_slave_0: entered promiscuous mode [ 112.918093][ T6886] hsr_slave_1: entered promiscuous mode [ 112.933227][ T6886] debugfs: 'hsr0' already exists in 'hsr' [ 112.959612][ T6886] Cannot create hsr debugfs directory [ 113.005552][ T7152] bridge_slave_0: left allmulticast mode [ 113.011399][ T7152] bridge_slave_0: left promiscuous mode [ 113.027905][ T7152] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.068638][ T7152] bridge_slave_1: left allmulticast mode [ 113.074506][ T7152] bridge_slave_1: left promiscuous mode [ 113.084597][ T7171] netlink: 12 bytes leftover after parsing attributes in process `syz.3.328'. [ 113.097093][ T7152] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.110500][ T7152] bond0: (slave bond_slave_0): Releasing backup interface [ 113.118192][ T5875] Bluetooth: hci1: command tx timeout [ 113.129763][ T7152] bond0: (slave bond_slave_1): Releasing backup interface [ 113.145141][ T7152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.153870][ T7152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.166251][ T7152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.173801][ T7152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.191556][ T7167] netlink: 666 bytes leftover after parsing attributes in process `syz.2.329'. [ 113.430288][ T7182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.331'. [ 113.484740][ T7182] macvlan0: entered promiscuous mode [ 113.538319][ T7182] batadv_slave_0: entered promiscuous mode [ 113.583477][ T7197] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 113.583796][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.333'. [ 114.016310][ T7212] ipvlan2: entered promiscuous mode [ 114.378405][ T6886] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 114.424599][ T6886] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 114.487988][ T6886] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 114.540847][ T6886] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 114.612006][ T6090] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 115.204382][ T7266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.345'. [ 115.279747][ T7270] pim6reg1: entered promiscuous mode [ 115.285539][ T7270] pim6reg1: entered allmulticast mode [ 115.332664][ T7270] netlink: 'syz.0.347': attribute type 5 has an invalid length. [ 115.346973][ T7268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.346'. [ 115.694680][ T7291] tipc: Failed to obtain node identity [ 115.745103][ T7291] tipc: Enabling of bearer rejected, failed to enable media [ 115.875192][ T7299] netlink: 256 bytes leftover after parsing attributes in process `syz.1.353'. [ 116.020257][ T7310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.355'. [ 116.118319][ T6886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.150466][ T7310] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 116.173234][ T7310] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 116.195164][ T7310] gretap1: entered promiscuous mode [ 116.200671][ T7310] gretap1: entered allmulticast mode [ 116.306307][ T6886] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.501681][ T6061] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.508922][ T6061] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.569891][ T6061] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.577116][ T6061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.797703][ T6886] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 117.798314][ T6886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.950935][ T7382] __nla_validate_parse: 3 callbacks suppressed [ 117.950953][ T7382] netlink: 224 bytes leftover after parsing attributes in process `syz.2.372'. [ 118.002442][ T7340] infiniband syz2: set active [ 118.031958][ T7340] infiniband syz2: added bond_slave_0 [ 118.053036][ T7340] syz2: rxe_create_cq: returned err = -12 [ 118.136827][ T7340] infiniband syz2: Couldn't create ib_mad CQ [ 118.143000][ T7340] infiniband syz2: Couldn't open port 1 [ 118.258730][ T7340] RDS/IB: syz2: added [ 118.260832][ T7395] netlink: 256 bytes leftover after parsing attributes in process `syz.3.374'. [ 118.273587][ T7340] smc: adding ib device syz2 with port count 1 [ 118.293774][ T7340] smc: ib device syz2 port 1 has pnetid [ 118.968224][ T6886] veth0_vlan: entered promiscuous mode [ 119.000659][ T6886] veth1_vlan: entered promiscuous mode [ 119.137133][ T6886] veth0_macvtap: entered promiscuous mode [ 119.177664][ T6886] veth1_macvtap: entered promiscuous mode [ 119.272908][ T6886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.440125][ T6886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.515617][ T6075] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.524367][ T6075] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.574852][ T6075] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.590238][ T7435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.380'. [ 119.642595][ T6075] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.857715][ T7447] netlink: 20 bytes leftover after parsing attributes in process `syz.0.383'. [ 119.861626][ T6075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.895422][ T6075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.911786][ T7447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.383'. [ 119.932238][ T7450] trusted_key: syz.0.383 sent an empty control message without MSG_MORE. [ 120.137198][ T6075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.174352][ T6075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.435840][ T7462] 8021q: VLANs not supported on ip_vti0 [ 120.447880][ T7462] sctp: [Deprecated]: syz.0.386 (pid 7462) Use of struct sctp_assoc_value in delayed_ack socket option. [ 120.447880][ T7462] Use struct sctp_sack_info instead [ 120.498304][ T7462] netlink: 48 bytes leftover after parsing attributes in process `syz.0.386'. [ 120.520530][ T7464] º: renamed from veth1_vlan (while UP) [ 120.569571][ T7462] netlink: 48 bytes leftover after parsing attributes in process `syz.0.386'. [ 120.853222][ T7479] netlink: 132 bytes leftover after parsing attributes in process `syz.2.390'. [ 120.872930][ T7485] netlink: 24 bytes leftover after parsing attributes in process `syz.5.392'. [ 120.935554][ T981] IPVS: starting estimator thread 0... [ 120.942830][ T7485] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 121.030469][ T7491] netlink: 'syz.2.393': attribute type 1 has an invalid length. [ 121.065247][ T7489] IPVS: using max 31 ests per chain, 74400 per kthread [ 121.088208][ T7497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.393'. [ 121.137996][ T7491] gretap2: entered promiscuous mode [ 121.212055][ T7491] bond1: (slave gretap2): making interface the new active one [ 121.256458][ T7491] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 121.321876][ T7497] macvlan2: entered promiscuous mode [ 121.349554][ T7497] macvlan2: entered allmulticast mode [ 121.457397][ T7496] lo speed is unknown, defaulting to 1000 [ 121.764386][ T7499] netlink: 'syz.0.394': attribute type 13 has an invalid length. [ 121.784625][ T7499] netlink: 'syz.0.394': attribute type 17 has an invalid length. [ 122.056145][ T7499] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 131.795678][ T7591] netlink: 'syz.2.405': attribute type 2 has an invalid length. [ 131.811793][ T7591] netlink: 'syz.2.405': attribute type 8 has an invalid length. [ 131.823935][ T7584] __nla_validate_parse: 4 callbacks suppressed [ 131.823953][ T7584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.403'. [ 131.848137][ T7591] netlink: 132 bytes leftover after parsing attributes in process `syz.2.405'. [ 131.979224][ T7600] netlink: 'syz.3.408': attribute type 1 has an invalid length. [ 132.444377][ T7605] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 132.660703][ T7628] netlink: 36 bytes leftover after parsing attributes in process `syz.2.413'. [ 132.881456][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.888149][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.030419][ T7652] tipc: Started in network mode [ 133.056850][ T7652] tipc: Node identity 8eafe5851073, cluster identity 4711 [ 133.064348][ T7652] tipc: Enabled bearer , priority 0 [ 133.130112][ T7652] syzkaller0: entered promiscuous mode [ 133.148310][ T7652] syzkaller0: entered allmulticast mode [ 133.206035][ T7652] tipc: Resetting bearer [ 133.377611][ T7663] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002 [ 133.387739][ T10] IPVS: starting estimator thread 0... [ 133.407955][ T7641] tipc: Resetting bearer [ 133.464211][ T7669] Bluetooth: MGMT ver 1.23 [ 133.493003][ T7669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.422'. [ 133.502112][ T7666] IPVS: using max 26 ests per chain, 62400 per kthread [ 133.509770][ T7641] tipc: Disabling bearer [ 133.572154][ T7675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.424'. [ 133.727688][ T7680] vlan2: entered allmulticast mode [ 133.732852][ T7680] bridge0: entered allmulticast mode [ 133.752324][ T7682] netlink: 152 bytes leftover after parsing attributes in process `syz.0.426'. [ 133.783596][ T7680] bridge1: port 1(vlan2) entered blocking state [ 133.795267][ T7680] bridge1: port 1(vlan2) entered disabled state [ 133.825672][ T7692] netlink: 28 bytes leftover after parsing attributes in process `syz.2.427'. [ 133.849966][ T7680] vlan2: entered promiscuous mode [ 133.858799][ T7680] bridge0: entered promiscuous mode [ 134.027190][ T7701] netlink: 20 bytes leftover after parsing attributes in process `syz.0.430'. [ 134.067836][ T7702] gretap0: entered promiscuous mode [ 134.073591][ T7702] vlan2: entered promiscuous mode [ 134.229595][ T7716] netlink: 'syz.2.432': attribute type 6 has an invalid length. [ 134.243858][ T7718] openvswitch: netlink: IP tunnel dst address not specified [ 134.482383][ T7727] netlink: 'syz.0.435': attribute type 4 has an invalid length. [ 134.551022][ T7737] netlink: 'syz.0.435': attribute type 4 has an invalid length. [ 134.555185][ T7733] netlink: 'syz.1.438': attribute type 68 has an invalid length. [ 134.801581][ T7746] xt_limit: Overflow, try lower: 604147548/4200216962 [ 134.853233][ T7750] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 135.089914][ T7761] netlink: 16146 bytes leftover after parsing attributes in process `syz.5.443'. [ 135.100429][ T7763] netlink: 27 bytes leftover after parsing attributes in process `syz.1.442'. [ 136.464122][ T7826] unknown channel width for channel at 909000KHz? [ 136.507775][ T7826] unknown channel width for channel at 909000KHz? [ 136.968115][ T7857] netlink: 'syz.1.464': attribute type 1 has an invalid length. [ 136.981093][ T7863] __nla_validate_parse: 5 callbacks suppressed [ 136.981112][ T7863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.466'. [ 137.007398][ T7857] netlink: 224 bytes leftover after parsing attributes in process `syz.1.464'. [ 137.215582][ T7871] syzkaller1: entered promiscuous mode [ 137.243125][ T7871] syzkaller1: entered allmulticast mode [ 137.314487][ T981] lo speed is unknown, defaulting to 1000 [ 137.414351][ T7888] tls_set_device_offload_rx: netdev not found [ 137.582659][ T7891] ipvlan2: entered promiscuous mode [ 137.696764][ T7893] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 137.704252][ T7893] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 137.820743][ T7898] can: request_module (can-proto-4) failed. [ 137.862330][ T7913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.480'. [ 137.936727][ T7913] hsr_slave_0: left promiscuous mode [ 138.010188][ T7913] hsr_slave_1: left promiscuous mode [ 138.034554][ T7922] sctp: [Deprecated]: syz.0.483 (pid 7922) Use of int in maxseg socket option. [ 138.034554][ T7922] Use struct sctp_assoc_value instead [ 138.302767][ T7929] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 138.312329][ T7930] netlink: 'syz.2.488': attribute type 2 has an invalid length. [ 138.721563][ T7958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.496'. [ 138.773684][ T7957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.495'. [ 138.828860][ T7957] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.266626][ T7992] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.804791][ T8015] netlink: 80 bytes leftover after parsing attributes in process `syz.5.508'. [ 140.082813][ T8030] netlink: 36 bytes leftover after parsing attributes in process `syz.0.511'. [ 140.880193][ T8068] netlink: 40 bytes leftover after parsing attributes in process `syz.1.528'. [ 140.993960][ T8073] netlink: 20 bytes leftover after parsing attributes in process `syz.3.529'. [ 141.026507][ T8073] netlink: 64 bytes leftover after parsing attributes in process `syz.3.529'. [ 141.587588][ T5983] lo speed is unknown, defaulting to 1000 [ 141.629108][ T5983] syz0: Port: 1 Link DOWN [ 141.656028][ T5983] lo speed is unknown, defaulting to 1000 [ 141.820348][ T8110] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 141.827959][ T8110] IPv6: NLM_F_CREATE should be set when creating new route [ 141.868230][ T8109] netlink: 'syz.5.540': attribute type 1 has an invalid length. [ 141.953759][ T8109] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.274191][ T8131] netlink: 'syz.0.549': attribute type 11 has an invalid length. [ 142.285068][ T8131] __nla_validate_parse: 5 callbacks suppressed [ 142.285084][ T8131] netlink: 224 bytes leftover after parsing attributes in process `syz.0.549'. [ 142.406558][ T8128] openvswitch: netlink: Message has -1 unknown bytes. [ 142.424496][ T8121] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.620673][ T8143] netlink: 252 bytes leftover after parsing attributes in process `syz.5.553'. [ 142.649822][ T8121] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.875636][ T8121] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.919811][ T8154] netlink: 24 bytes leftover after parsing attributes in process `syz.5.556'. [ 143.019397][ T8121] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.058735][ T8154] netlink: 24 bytes leftover after parsing attributes in process `syz.5.556'. [ 143.356953][ T6090] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.435594][ T8186] netlink: 40 bytes leftover after parsing attributes in process `syz.2.563'. [ 143.470003][ T6090] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.490693][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.563'. [ 143.608371][ T6090] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.621182][ T6090] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.673317][ T8198] netlink: 80 bytes leftover after parsing attributes in process `syz.0.567'. [ 143.723771][ T8198] netlink: 'syz.0.567': attribute type 21 has an invalid length. [ 143.782261][ T8198] netlink: 128 bytes leftover after parsing attributes in process `syz.0.567'. [ 143.842289][ T8198] netlink: 3 bytes leftover after parsing attributes in process `syz.0.567'. [ 143.949895][ T8214] bond0: entered promiscuous mode [ 143.978451][ T8214] bond_slave_0: entered promiscuous mode [ 143.984337][ T8214] bond_slave_1: entered promiscuous mode [ 143.986931][ T8209] netlink: 48 bytes leftover after parsing attributes in process `syz.3.571'. [ 144.298351][ T8226] bridge2: entered promiscuous mode [ 144.330060][ T8226] bridge2: entered allmulticast mode [ 144.362197][ T8231] tipc: Enabling of bearer rejected, failed to enable media [ 144.439281][ T8231] bridge3: entered promiscuous mode [ 144.444627][ T8231] bridge3: entered allmulticast mode [ 144.581505][ T8244] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.279637][ T981] hid (null): report_id 0 is invalid [ 145.301616][ T981] hid-generic 0005:0005:5505.0001: report_id 0 is invalid [ 145.316889][ T981] hid-generic 0005:0005:5505.0001: item 0 0 1 8 parsing failed [ 145.327243][ T981] hid-generic 0005:0005:5505.0001: probe with driver hid-generic failed with error -22 [ 145.843259][ T8316] netlink: 'syz.2.604': attribute type 4 has an invalid length. [ 145.845672][ T8313] netlink: 'syz.2.604': attribute type 4 has an invalid length. [ 146.011972][ T8322] netlink: 'syz.5.605': attribute type 10 has an invalid length. [ 146.054517][ T8322] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 146.087813][ T8322] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 146.124703][ T8322] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 146.477634][ T8346] sctp: [Deprecated]: syz.3.607 (pid 8346) Use of struct sctp_assoc_value in delayed_ack socket option. [ 146.477634][ T8346] Use struct sctp_sack_info instead [ 147.129637][ T6067] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.141753][ T6067] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.159713][ T6067] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.185840][ T6067] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.360068][ T8390] netlink: 'syz.3.626': attribute type 6 has an invalid length. [ 147.642724][ T8405] __nla_validate_parse: 9 callbacks suppressed [ 147.642742][ T8405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.629'. [ 147.723439][ T8411] netlink: 2 bytes leftover after parsing attributes in process `syz.1.630'. [ 147.833947][ T8413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.633'. [ 148.060473][ T6061] tipc: Subscription rejected, illegal request [ 148.300385][ T8435] netlink: 16 bytes leftover after parsing attributes in process `syz.3.638'. [ 148.330351][ T8437] netlink: 9 bytes leftover after parsing attributes in process `syz.2.639'. [ 148.342508][ T8437] gretap0: entered promiscuous mode [ 148.462505][ T8440] netlink: 16 bytes leftover after parsing attributes in process `syz.1.640'. [ 148.498038][ T8445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.641'. [ 148.527490][ T8448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.642'. [ 148.561765][ T8448] geneve2: entered promiscuous mode [ 148.604317][ T8443] delete_channel: no stack [ 149.355224][ T8499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.652'. [ 149.426711][ T8503] netlink: 88 bytes leftover after parsing attributes in process `syz.2.653'. [ 150.095083][ T8537] netlink: 'syz.5.664': attribute type 1 has an invalid length. [ 150.193625][ T8542] netlink: 'syz.0.665': attribute type 30 has an invalid length. [ 150.436409][ T8551] netlink: 'syz.3.667': attribute type 2 has an invalid length. [ 151.557914][ T8613] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 151.592051][ T8617] veth0: entered promiscuous mode [ 151.619987][ T8613] tipc: Enabling of bearer rejected, failed to enable media [ 151.668344][ T8612] veth0: left promiscuous mode [ 151.876998][ T8628] lo speed is unknown, defaulting to 1000 [ 152.320092][ T8653] macvlan2: entered allmulticast mode [ 152.368548][ T8653] bond0: (slave macvlan2): Opening slave failed [ 152.594062][ T8666] netlink: 'syz.0.702': attribute type 21 has an invalid length. [ 152.661976][ T8669] º: renamed from veth1_vlan (while UP) [ 152.967161][ T30] audit: type=1107 audit(1758021383.337:2): pid=8682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='‹’yH¥0¹<Õ8tš=†}Àz í™ÜU¼Ú¼¨î+Bº.W—,0?ˌ٪ä~D«ôðö‰+¼Áwaªà¸IS¥º‰ù«"yjø iàõÞ¥2qå/ÎÒÉö?#Lß2òN-RwrY(PîꙥF.' [ 153.178540][ T8697] netlink: 'syz.1.708': attribute type 1 has an invalid length. [ 153.190100][ T8697] __nla_validate_parse: 10 callbacks suppressed [ 153.190117][ T8697] netlink: 244 bytes leftover after parsing attributes in process `syz.1.708'. [ 153.319362][ T8700] netlink: 'syz.3.709': attribute type 10 has an invalid length. [ 153.329764][ T8701] delete_channel: no stack [ 153.336712][ T8700] veth0_vlan: entered allmulticast mode [ 153.379266][ T8700] veth0_vlan: left promiscuous mode [ 153.417448][ T8700] veth0_vlan: entered promiscuous mode [ 153.427884][ T8706] tls_set_device_offload_rx: netdev not found [ 153.432220][ T8700] team0: Device veth0_vlan failed to register rx_handler [ 153.580031][ T8708] delete_channel: no stack [ 153.630658][ T8712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.713'. [ 153.714274][ T8718] netlink: 'syz.0.715': attribute type 7 has an invalid length. [ 154.616862][ T8752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.724'. [ 154.815879][ T8757] netlink: 'syz.1.727': attribute type 1 has an invalid length. [ 154.875076][ T5869] Bluetooth: hci1: command 0x0405 tx timeout [ 154.991860][ T8763] netlink: 'syz.1.729': attribute type 1 has an invalid length. [ 155.015099][ T8763] netlink: 224 bytes leftover after parsing attributes in process `syz.1.729'. [ 155.204494][ T8771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.731'. [ 155.535159][ T8792] netlink: 'syz.3.738': attribute type 1 has an invalid length. [ 155.588352][ T8792] netlink: 'syz.3.738': attribute type 9 has an invalid length. [ 155.992851][ T8819] netlink: 76 bytes leftover after parsing attributes in process `syz.2.745'. [ 156.061166][ T8820] netlink: 'syz.5.746': attribute type 10 has an invalid length. [ 156.091571][ T8820] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode [ 156.095149][ T8822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.747'. [ 156.104672][ T8820] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 156.110687][ T8822] netlink: 24 bytes leftover after parsing attributes in process `syz.3.747'. [ 156.132361][ T8822] netlink: 24 bytes leftover after parsing attributes in process `syz.3.747'. [ 156.143726][ T8826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.748'. [ 156.808233][ T8861] tipc: Enabling of bearer rejected, media not registered [ 156.953436][ T8871] !: renamed from dummy0 (while UP) [ 157.093854][ T8882] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 157.481431][ T8906] netlink: 'syz.1.773': attribute type 2 has an invalid length. [ 157.672206][ T8915] netlink: 'syz.0.777': attribute type 1 has an invalid length. [ 157.897626][ T8923] dvmrp0: entered allmulticast mode [ 158.140169][ T8937] IPVS: length: 157 != 24 [ 158.188322][ T8940] netlink: 'syz.5.787': attribute type 1 has an invalid length. [ 158.210373][ T8943] netlink: 'syz.5.787': attribute type 1 has an invalid length. [ 158.236232][ T8940] netlink: 'syz.5.787': attribute type 2 has an invalid length. [ 158.272195][ T8943] netlink: 'syz.5.787': attribute type 2 has an invalid length. [ 158.425078][ T8956] __nla_validate_parse: 5 callbacks suppressed [ 158.425097][ T8956] netlink: 12 bytes leftover after parsing attributes in process `syz.3.791'. [ 158.934390][ T8980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.798'. [ 158.992680][ T8984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.799'. [ 159.003036][ T8982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.799'. [ 159.047803][ T10] hid-generic 0005:04F3:1010.0002: item fetching failed at offset 0/1 [ 159.067008][ T10] hid-generic 0005:04F3:1010.0002: probe with driver hid-generic failed with error -22 [ 159.149682][ T8983] netlink: 144 bytes leftover after parsing attributes in process `syz.5.800'. [ 159.184231][ T8983] pim6reg1: entered promiscuous mode [ 159.204835][ T8983] pim6reg1: entered allmulticast mode [ 159.213167][ T9003] netlink: 'syz.1.804': attribute type 12 has an invalid length. [ 159.414815][ T9009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.806'. [ 159.614818][ T9010] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 159.629143][ T10] IPVS: starting estimator thread 0... [ 159.640401][ T9018] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 159.649451][ T9015] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 159.715013][ T9022] IPVS: using max 26 ests per chain, 62400 per kthread [ 159.773571][ T9025] netlink: 84 bytes leftover after parsing attributes in process `syz.3.811'. [ 160.103496][ T9052] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 160.108136][ T9049] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.564722][ T9066] syzkaller0: entered promiscuous mode [ 160.570833][ T9066] syzkaller0: entered allmulticast mode [ 160.655901][ T9082] netlink: 52 bytes leftover after parsing attributes in process `syz.0.830'. [ 162.090964][ T9100] gretap0: left promiscuous mode [ 162.246153][ T9100] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.253914][ T9100] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.617537][ T9100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.631219][ T9100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.759424][ T9100] xfrm1: left promiscuous mode [ 162.773747][ T9100] ipvlan2: left promiscuous mode [ 162.782860][ T9100] gretap1: left promiscuous mode [ 162.792265][ T9100] gretap2: left promiscuous mode [ 162.805540][ T9100] macvlan2: left promiscuous mode [ 162.854310][ T9120] lo speed is unknown, defaulting to 1000 [ 162.864790][ T6072] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.913112][ T6072] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.952645][ T6072] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.994823][ T6072] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.022276][ T6072] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.046488][ T6072] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.072619][ T9144] openvswitch: netlink: IP tunnel dst address not specified [ 163.148977][ T6072] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.172537][ T6072] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.191836][ T9147] tipc: Started in network mode [ 163.213186][ T9149] netlink: 132 bytes leftover after parsing attributes in process `syz.5.842'. [ 163.214945][ T9147] tipc: Node identity faec7964a72d, cluster identity 4711 [ 163.260352][ T9147] tipc: Enabled bearer , priority 0 [ 163.291629][ T9142] syzkaller0: entered promiscuous mode [ 163.320533][ T9147] IPVS: set_ctl: invalid protocol: 22 172.20.20.55:20003 [ 163.348173][ T9142] syzkaller0: entered allmulticast mode [ 163.384215][ T9153] sch_tbf: peakrate 16 is lower than or equals to rate 4096 ! [ 163.413191][ T9140] tipc: Resetting bearer [ 163.457325][ T9140] tipc: Disabling bearer [ 163.481279][ T9159] atomic_op ffff8880317f2998 conn xmit_atomic 0000000000000000 [ 163.641420][ T9168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.848'. [ 163.659466][ T9166] netlink: 8 bytes leftover after parsing attributes in process `syz.5.847'. [ 163.668784][ T9166] netlink: 8 bytes leftover after parsing attributes in process `syz.5.847'. [ 163.691001][ T9168] netlink: 'syz.0.848': attribute type 5 has an invalid length. [ 163.715127][ T9168] netlink: 20 bytes leftover after parsing attributes in process `syz.0.848'. [ 163.794689][ T9168] geneve2: entered promiscuous mode [ 163.815794][ T9168] geneve2: entered allmulticast mode [ 163.847604][ T6090] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 163.867454][ T6090] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 163.906766][ T6090] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 163.930586][ T6090] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 164.102873][ T9176] syzkaller1: entered promiscuous mode [ 164.113895][ T9176] syzkaller1: entered allmulticast mode [ 164.202047][ T9190] netlink: 'syz.0.856': attribute type 10 has an invalid length. [ 164.423645][ T9202] netlink: 'syz.5.861': attribute type 4 has an invalid length. [ 164.554801][ T9200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.859'. [ 164.809039][ T9216] netlink: 76 bytes leftover after parsing attributes in process `syz.0.865'. [ 164.928270][ T9224] netlink: 3 bytes leftover after parsing attributes in process `syz.0.865'. [ 165.129999][ T9230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.869'. [ 165.280262][ T9236] netlink: 28 bytes leftover after parsing attributes in process `syz.2.871'. [ 165.324699][ T9235] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 165.480866][ T9241] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 166.215394][ T9268] netlink: 22 bytes leftover after parsing attributes in process `syz.2.880'. [ 166.637152][ T9296] Dead loop on virtual device ip6_vti0, fix it urgently! [ 166.690210][ T9301] tipc: Enabled bearer , priority 0 [ 166.700721][ T9301] syzkaller0: entered promiscuous mode [ 166.706506][ T9301] syzkaller0: entered allmulticast mode [ 166.823126][ T9301] tipc: Resetting bearer [ 166.956436][ T9298] tipc: Resetting bearer [ 167.052619][ T9298] tipc: Disabling bearer [ 167.346794][ T9335] C: renamed from lo (while UP) [ 167.375980][ T9335] netlink: 'syz.5.904': attribute type 12 has an invalid length. [ 167.401824][ T9337] gretap1: entered promiscuous mode [ 167.407195][ T9337] gretap1: entered allmulticast mode [ 167.463901][ T9346] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 167.720669][ T9354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.807785][ T9354] bond0: (slave rose0): Enslaving as an active interface with an up link [ 167.847598][ T9355] geneve2: entered promiscuous mode [ 167.861499][ T9355] geneve2: entered allmulticast mode [ 167.878311][ T6061] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 167.904723][ T6061] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 167.912886][ T5922] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 167.946941][ T5922] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 168.020754][ T3534] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.081983][ T3534] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.202759][ T3534] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.227784][ T3534] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.348259][ T9383] macvtap1: entered promiscuous mode [ 168.353602][ T9383] vlan0: entered promiscuous mode [ 168.384273][ T9383] macvtap1: entered allmulticast mode [ 168.421021][ T9383] vlan0: entered allmulticast mode [ 168.443005][ T9383] veth0_vlan: entered allmulticast mode [ 168.452110][ T9391] netlink: 'syz.5.917': attribute type 4 has an invalid length. [ 168.603908][ T9384] netlink: 'syz.2.916': attribute type 3 has an invalid length. [ 168.620422][ T9399] netlink: 'syz.0.920': attribute type 4 has an invalid length. [ 168.893246][ T5922] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 168.897348][ T9418] __nla_validate_parse: 11 callbacks suppressed [ 168.897366][ T9418] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.924'. [ 169.139355][ T9429] netlink: 'syz.1.928': attribute type 1 has an invalid length. [ 169.174442][ T9429] netlink: 224 bytes leftover after parsing attributes in process `syz.1.928'. [ 169.278975][ T9437] netlink: 'syz.0.930': attribute type 12 has an invalid length. [ 169.293060][ T9437] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 169.602543][ T9458] netlink: 'syz.3.933': attribute type 1 has an invalid length. [ 169.623941][ T9460] netlink: 184 bytes leftover after parsing attributes in process `syz.1.934'. [ 169.673826][ T9458] 8021q: adding VLAN 0 to HW filter on device bond2 [ 169.678492][ T9464] netlink: 'syz.5.935': attribute type 10 has an invalid length. [ 169.804707][ T9464] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 170.141086][ T9488] delete_channel: no stack [ 170.157360][ T9492] netlink: 48 bytes leftover after parsing attributes in process `syz.2.943'. [ 171.379575][ T9565] netlink: 'syz.0.960': attribute type 8 has an invalid length. [ 171.395450][ T9569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.962'. [ 171.414661][ T9569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.962'. [ 171.491041][ T9569] bridge0: port 4(vlan3) entered blocking state [ 171.525755][ T9569] bridge0: port 4(vlan3) entered disabled state [ 171.555557][ T9569] vlan3: entered allmulticast mode [ 171.571096][ T9569] vlan3: left allmulticast mode [ 171.600310][ T9571] mac80211_hwsim hwsim11 ÿ: renamed from wlan1 (while UP) [ 171.601531][ T9579] netlink: 40 bytes leftover after parsing attributes in process `syz.2.964'. [ 171.958092][ T9590] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 172.075090][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 172.167885][ T9611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.973'. [ 172.176902][ T9611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.973'. [ 172.253973][ T9616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.975'. [ 172.338505][ T9616] lo: entered promiscuous mode [ 172.354096][ T9616] lo: entered allmulticast mode [ 172.368190][ T9619] netlink: 'syz.2.976': attribute type 1 has an invalid length. [ 172.391993][ T9623] netlink: 'syz.3.975': attribute type 64 has an invalid length. [ 172.412034][ T9622] openvswitch: netlink: EtherType 50a is less than min 600 [ 172.435239][ T5941] lo speed is unknown, defaulting to 1000 [ 172.445607][ T5941] syz0: Port: 1 Link ACTIVE [ 172.450276][ T5922] lo speed is unknown, defaulting to 1000 [ 172.806687][ T9652] lo: left allmulticast mode [ 172.813505][ T9652] netlink: 'syz.3.984': attribute type 2 has an invalid length. [ 172.826970][ T9652] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.846039][ T5939] lo speed is unknown, defaulting to 1000 [ 172.850907][ T9652] netlink: 'syz.3.984': attribute type 2 has an invalid length. [ 172.853145][ T5939] syz0: Port: 1 Link DOWN [ 172.862779][ T9652] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.881258][ T43] lo speed is unknown, defaulting to 1000 [ 173.741987][ T9675] tipc: Started in network mode [ 173.755152][ T9675] tipc: Node identity b2920348e252, cluster identity 4711 [ 173.773496][ T9675] tipc: Enabled bearer , priority 0 [ 173.829390][ T9675] tipc: Resetting bearer [ 173.838866][ T9671] tipc: Disabling bearer [ 173.879263][ T9682] netlink: 'syz.3.994': attribute type 6 has an invalid length. [ 174.060906][ T9689] __nla_validate_parse: 1 callbacks suppressed [ 174.060923][ T9689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.996'. [ 174.093526][ T9689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.996'. [ 174.654699][ T9712] sctp: [Deprecated]: syz.2.1005 (pid 9712) Use of int in max_burst socket option. [ 174.654699][ T9712] Use struct sctp_assoc_value instead [ 175.162196][ T9744] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1013'. [ 175.186337][ T9744] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1013'. [ 175.190352][ T9741] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1015'. [ 175.278054][ T9732] tipc: Started in network mode [ 175.283068][ T9732] tipc: Node identity 5e0a7534a53d, cluster identity 4711 [ 175.293346][ T9732] tipc: Enabled bearer , priority 0 [ 175.329559][ T9749] vlan2: entered allmulticast mode [ 175.344855][ T9749] bond0: entered allmulticast mode [ 175.350591][ T9749] bond_slave_0: entered allmulticast mode [ 175.358002][ T9749] bond_slave_1: entered allmulticast mode [ 175.373728][ T9732] syzkaller0: entered promiscuous mode [ 175.386042][ T9732] syzkaller0: entered allmulticast mode [ 175.465627][ T9732] tipc: Resetting bearer [ 175.497575][ T9732] sch_fq: defrate 0 ignored. [ 175.556654][ T9756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1020'. [ 175.585243][ T9731] tipc: Resetting bearer [ 175.659038][ T9765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1020'. [ 175.670183][ T9731] tipc: Disabling bearer [ 175.691057][ T9756] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1020'. [ 175.764809][ T9766] tipc: Enabled bearer , priority 0 [ 175.963388][ T9768] syzkaller0: entered promiscuous mode [ 175.982233][ T9768] syzkaller0: entered allmulticast mode [ 175.992542][ T9768] tipc: Resetting bearer [ 176.054336][ T9768] tipc: Resetting bearer [ 176.072642][ T9783] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1029'. [ 176.786378][ T5941] tipc: Node number set to 2198207777 [ 177.275145][ T5869] Bluetooth: hci2: command 0x0401 tx timeout [ 177.275184][ T5875] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 180.235107][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 183.831488][ T9768] tipc: Disabling bearer [ 183.878609][ T9812] 8021q: VLANs not supported on ip6_vti0 [ 183.988080][ T9797] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 183.994151][ T9797] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 184.039889][ T9797] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 184.053099][ T9826] ip6gre1: entered allmulticast mode [ 184.066588][ T9797] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 184.205537][ T9797] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 184.225790][ T9797] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 184.356433][ T9797] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 184.395899][ T9797] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 184.515364][ T9852] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1043'. [ 184.535852][ T9851] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1044'. [ 184.558852][ T9852] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1043'. [ 184.896627][ T9875] validate_nla: 1 callbacks suppressed [ 184.896645][ T9875] netlink: 'syz.5.1048': attribute type 12 has an invalid length. [ 184.919909][ T9875] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1048'. [ 185.050770][ T9875] netlink: 'syz.5.1048': attribute type 12 has an invalid length. [ 185.058866][ T9887] nbd: must specify an index to disconnect [ 185.084449][ T9875] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1048'. [ 185.153235][ T6067] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.171057][ T6067] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.255444][ T6067] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.264614][ T6067] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.278305][ T9797] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 185.284235][ T9797] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 185.571168][ T9915] netlink: 'syz.2.1056': attribute type 1 has an invalid length. [ 185.633583][ T9915] netlink: 'syz.2.1056': attribute type 10 has an invalid length. [ 185.706694][ T9915] veth1_macvtap: left promiscuous mode [ 185.726683][ T9915] team0: Device veth1_macvtap failed to register rx_handler [ 185.939925][ T9937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1060'. [ 185.980531][ T9939] netlink: 'syz.3.1061': attribute type 4 has an invalid length. [ 186.176178][ T9952] ip6gre1: entered allmulticast mode [ 186.215443][ T9957] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1064'. [ 186.220510][ T9952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.243855][ T9952] bond0: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 186.261031][ T9952] bond0: (slave ip6gre1): Error -95 calling set_mac_address [ 186.634782][ T9937] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 186.675793][ T9961] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 187.410391][T10003] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1073'. [ 187.489290][T10006] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 187.523561][T10003] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1073'. [ 187.576987][T10003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1073'. [ 187.951435][T10030] netlink: 'syz.2.1078': attribute type 1 has an invalid length. [ 188.610583][T10056] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 189.049361][T10084] team0: No ports can be present during mode change [ 189.189439][T10088] netlink: 'syz.0.1094': attribute type 11 has an invalid length. [ 189.229626][T10088] netlink: 'syz.0.1094': attribute type 11 has an invalid length. [ 189.600234][T10100] __nla_validate_parse: 7 callbacks suppressed [ 189.600254][T10100] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1099'. [ 189.650996][T10103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1100'. [ 190.002416][T10125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1105'. [ 190.308555][T10139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1108'. [ 190.359508][T10142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1108'. [ 190.548932][T10147] veth0: entered promiscuous mode [ 190.589917][T10147] veth0: left promiscuous mode [ 191.036896][T10185] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 191.101500][T10190] netlink: 'syz.3.1119': attribute type 13 has an invalid length. [ 191.123482][T10189] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1118'. [ 191.227749][T10190] veth0_macvtap: left promiscuous mode [ 191.264133][T10190] macvtap0: entered allmulticast mode [ 191.295028][T10190] macvtap0: refused to change device tx_queue_len [ 191.523714][T10210] netlink: 332 bytes leftover after parsing attributes in process `syz.5.1123'. [ 191.663382][T10216] syz_tun: entered allmulticast mode [ 191.773617][T10213] syz_tun: left allmulticast mode [ 191.963514][T10229] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1129'. [ 192.341836][T10253] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1136'. [ 192.598101][T10272] sctp: [Deprecated]: syz.1.1141 (pid 10272) Use of struct sctp_assoc_value in delayed_ack socket option. [ 192.598101][T10272] Use struct sctp_sack_info instead [ 193.033508][T10286] bridge0: port 3(batadv1) entered blocking state [ 193.048927][T10286] bridge0: port 3(batadv1) entered disabled state [ 193.062291][T10286] batadv1: entered allmulticast mode [ 193.070585][T10286] batadv1: entered promiscuous mode [ 193.091455][T10286] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1145'. [ 193.270126][T10297] sctp: [Deprecated]: syz.3.1146 (pid 10297) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.270126][T10297] Use struct sctp_sack_info instead [ 193.310925][T10298] sctp: [Deprecated]: syz.3.1146 (pid 10298) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.310925][T10298] Use struct sctp_sack_info instead [ 193.531347][ T6066] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 193.540996][ T6066] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 193.633379][T10310] tipc: Enabled bearer , priority 0 [ 193.682441][T10310] syzkaller0: entered promiscuous mode [ 193.721602][T10310] syzkaller0: entered allmulticast mode [ 193.772765][T10318] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 193.817602][T10308] tipc: Resetting bearer [ 193.981305][T10304] tipc: Resetting bearer [ 194.024087][T10304] tipc: Disabling bearer [ 194.450197][T10343] tipc: Enabled bearer , priority 0 [ 194.491084][T10343] syzkaller0: entered promiscuous mode [ 194.505045][T10343] syzkaller0: entered allmulticast mode [ 194.542330][T10346] pim6reg1: entered promiscuous mode [ 194.558452][T10346] pim6reg1: entered allmulticast mode [ 194.572240][T10343] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 194.622942][T10352] __nla_validate_parse: 6 callbacks suppressed [ 194.622961][T10352] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1159'. [ 194.652224][T10346] netlink: 'syz.3.1157': attribute type 1 has an invalid length. [ 194.667554][T10346] netlink: 784 bytes leftover after parsing attributes in process `syz.3.1157'. [ 194.699383][T10343] tipc: Resetting bearer [ 194.786477][T10340] tipc: Resetting bearer [ 194.850098][T10340] tipc: Disabling bearer [ 194.854370][T10364] netlink: 'syz.1.1162': attribute type 21 has an invalid length. [ 194.867880][T10364] netlink: 'syz.1.1162': attribute type 22 has an invalid length. [ 194.882719][T10364] netlink: 'syz.1.1162': attribute type 23 has an invalid length. [ 194.893726][T10364] netlink: 'syz.1.1162': attribute type 25 has an invalid length. [ 194.902869][T10364] netlink: 'syz.1.1162': attribute type 26 has an invalid length. [ 194.912039][T10364] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1162'. [ 195.381958][T10388] netlink: 'syz.5.1168': attribute type 1 has an invalid length. [ 195.478032][T10395] bond2: (slave gretap1): making interface the new active one [ 195.490474][T10395] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 195.502693][T10388] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1168'. [ 195.528171][T10388] 8021q: adding VLAN 0 to HW filter on device bond2 [ 195.737075][T10410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1171'. [ 196.004994][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1177'. [ 196.159198][T10435] lo speed is unknown, defaulting to 1000 [ 196.235327][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 196.574476][T10457] gre0: entered promiscuous mode [ 196.820277][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1185'. [ 196.867398][T10471] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1187'. [ 196.914375][T10473] tipc: Enabled bearer , priority 0 [ 197.013307][T10476] netlink: 'syz.5.1188': attribute type 30 has an invalid length. [ 197.022777][T10473] tipc: Disabling bearer [ 197.085263][T10476] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 197.104710][T10476] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 197.115623][T10480] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1189'. [ 197.226313][T10488] netlink: 788 bytes leftover after parsing attributes in process `syz.1.1191'. [ 197.889664][T10524] openvswitch: netlink: Missing key (keys=40, expected=100) [ 198.093519][T10535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.241802][T10541] sctp: [Deprecated]: syz.2.1203 (pid 10541) Use of struct sctp_assoc_value in delayed_ack socket option. [ 198.241802][T10541] Use struct sctp_sack_info instead [ 198.329037][T10537] sctp: [Deprecated]: syz.2.1203 (pid 10537) Use of struct sctp_assoc_value in delayed_ack socket option. [ 198.329037][T10537] Use struct sctp_sack_info instead [ 199.174084][T10590] syzkaller0: entered promiscuous mode [ 199.238630][T10590] syzkaller0: entered allmulticast mode [ 199.302550][T10584] syzkaller0: mtu less than device minimum [ 199.388181][T10612] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 201.142720][T10626] netlink: 'syz.2.1220': attribute type 1 has an invalid length. [ 201.157180][T10626] netlink: 'syz.2.1220': attribute type 1 has an invalid length. [ 201.284117][T10644] IPVS: set_ctl: invalid protocol: 3 172.20.20.45:20000 [ 201.497972][T10652] netlink: 'syz.5.1226': attribute type 1 has an invalid length. [ 201.563382][T10652] ipvlan1: entered promiscuous mode [ 201.977553][T10675] __nla_validate_parse: 3 callbacks suppressed [ 201.977573][T10675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1233'. [ 202.073979][T10675] vlan2: entered allmulticast mode [ 202.111653][T10675] bridge0: entered allmulticast mode [ 202.132273][T10675] bridge2: port 1(vlan2) entered blocking state [ 202.143679][T10675] bridge2: port 1(vlan2) entered disabled state [ 202.154833][T10675] vlan2: entered promiscuous mode [ 202.160069][T10675] bridge0: entered promiscuous mode [ 202.182152][T10684] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 202.200049][T10680] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1235'. [ 202.218122][T10686] syz_tun: entered promiscuous mode [ 202.241731][T10675] ip6gre1: entered allmulticast mode [ 202.471076][T10702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1241'. [ 202.627510][T10709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1243'. [ 202.675559][T10709] netlink: 'syz.1.1243': attribute type 5 has an invalid length. [ 202.688105][T10709] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1243'. [ 202.718274][T10709] geneve2: entered promiscuous mode [ 202.732970][T10709] geneve2: entered allmulticast mode [ 202.744006][ T6061] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 202.761310][ T6061] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 202.771850][ T6061] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 202.787533][ T6061] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 203.454831][T10744] syzkaller1: entered promiscuous mode [ 203.468628][T10744] syzkaller1: entered allmulticast mode [ 203.731443][T10766] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1258'. [ 203.785954][T10770] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1258'. [ 204.078043][T10783] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1266'. [ 204.296385][T10798] sctp: [Deprecated]: syz.2.1270 (pid 10798) Use of int in maxseg socket option. [ 204.296385][T10798] Use struct sctp_assoc_value instead [ 204.353911][T10800] IPVS: length: 8 != 1152 [ 205.009224][T10834] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1282'. [ 205.033035][T10840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1283'. [ 205.259718][T10850] syzkaller0: entered promiscuous mode [ 205.291008][T10850] syzkaller0: entered allmulticast mode [ 205.351929][T10850] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 205.658180][T10871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.208101][T10939] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.215872][T10939] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.408014][T10939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.419955][T10939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.519638][T10969] veth0: entered promiscuous mode [ 207.528560][ T6104] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.541044][T10965] veth0: left promiscuous mode [ 207.546995][ T6061] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.642598][ T6061] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.677853][ T6090] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.982252][T10986] syzkaller0: entered promiscuous mode [ 207.997230][T10997] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 208.014208][T10986] syzkaller0: entered allmulticast mode [ 208.274281][T10991] IPv6: sit2: Disabled Multicast RS [ 209.058295][T11034] netlink: 'syz.1.1343': attribute type 1 has an invalid length. [ 209.068378][T11034] __nla_validate_parse: 5 callbacks suppressed [ 209.068393][T11034] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1343'. [ 209.096114][T11035] netlink: 'syz.1.1343': attribute type 1 has an invalid length. [ 209.104040][T11035] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1343'. [ 210.089561][T11024] netlink: 'syz.5.1340': attribute type 4 has an invalid length. [ 210.371478][T11049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1348'. [ 210.619218][T11062] netlink: 'syz.2.1354': attribute type 1 has an invalid length. [ 210.637694][T11066] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1354'. [ 210.647783][T11066] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1354'. [ 210.657654][T11066] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1354'. [ 210.743790][T11058] netem: change failed [ 210.903945][T11078] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1358'. [ 210.950399][ T3534] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 210.959548][T11080] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 211.067436][T11085] netlink: 'syz.5.1363': attribute type 11 has an invalid length. [ 211.072857][T11083] syzkaller1: entered promiscuous mode [ 211.081770][T11088] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1362'. [ 211.090985][T11083] syzkaller1: entered allmulticast mode [ 211.090995][T11085] netlink: 'syz.5.1363': attribute type 11 has an invalid length. [ 211.091012][T11085] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1363'. [ 211.237224][T11091] netlink: 'syz.0.1364': attribute type 1 has an invalid length. [ 211.322163][T11098] sctp: [Deprecated]: syz.3.1366 (pid 11098) Use of int in maxseg socket option. [ 211.322163][T11098] Use struct sctp_assoc_value instead [ 211.332745][T11101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1367'. [ 211.356196][ T9138] page_pool_release_retry() stalled pool shutdown: id 35, 1 inflight 60 sec [ 211.743880][T11097] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 211.755297][ T6090] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.777391][ T6090] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.786406][ T6090] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 211.795816][ T6090] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 211.804712][ T6090] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.813627][ T6090] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.822983][ T6090] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 211.832110][ T6090] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 211.963830][ T6090] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.974546][T11119] netlink: 'syz.5.1373': attribute type 1 has an invalid length. [ 211.974981][ T6090] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.992468][ T6090] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 212.002904][ T6090] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 212.016263][T11117] netlink: 'syz.3.1370': attribute type 1 has an invalid length. [ 212.026929][T11122] geneve4: entered promiscuous mode [ 212.032160][T11122] geneve4: entered allmulticast mode [ 212.086176][ T6090] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.119662][ T6090] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.175053][ T6090] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 212.178195][T11136] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 212.183864][ T6090] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 212.183894][ T6090] netdevsim netdevsim0 netdevsim3: set [1, 3] type 2 family 0 port 19999 - 0 [ 212.204101][ T6090] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 212.262894][ T6090] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 212.340153][T11122] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 212.357685][T11122] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 3] type 2 family 0 port 19999 - 0 [ 212.370795][T11122] ------------[ cut here ]------------ [ 212.376943][T11122] ODEBUG: free active (active state 0) object: ffff88807e313e00 object type: work_struct hint: udp_tunnel_nic_device_sync_work+0x0/0xa50 [ 212.398015][T11122] WARNING: CPU: 0 PID: 11122 at lib/debugobjects.c:615 debug_print_object+0x16b/0x1e0 [ 212.408007][T11122] Modules linked in: [ 212.412232][T11122] CPU: 0 UID: 0 PID: 11122 Comm: syz.0.1371 Not tainted syzkaller #0 PREEMPT(full) [ 212.421793][T11122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 212.431918][T11122] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 212.438034][T11122] Code: 4c 89 ff e8 17 93 52 fd 4d 8b 0f 48 c7 c7 a0 45 e3 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 ba bb b2 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 b7 39 d3 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 212.457776][T11122] RSP: 0018:ffffc9001a07ebd8 EFLAGS: 00010286 [ 212.463913][T11122] RAX: abec1f3b2bc2d100 RBX: dffffc0000000000 RCX: 0000000000080000 [ 212.472034][T11122] RDX: ffffc900046e2000 RSI: 000000000000f362 RDI: 000000000000f363 [ 212.480585][T11122] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 212.488644][T11122] R10: dffffc0000000000 R11: fffffbfff1bfa22c R12: ffffffff8a130530 [ 212.496833][T11122] R13: ffffffff8be34720 R14: ffff88807e313e00 R15: ffffffff8b89d580 [ 212.504830][T11122] FS: 00007f1a9667e6c0(0000) GS:ffff888125c15000(0000) knlGS:0000000000000000 [ 212.513842][T11122] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 212.520498][T11122] CR2: 00007fd6c761ef98 CR3: 00000000757d8000 CR4: 00000000003526f0 [ 212.528603][T11122] Call Trace: [ 212.531894][T11122] [ 212.534842][T11122] debug_check_no_obj_freed+0x3a2/0x470 [ 212.540538][T11122] ? udp_tunnel_nic_netdevice_event+0x1332/0x19f0 [ 212.547101][T11122] kfree+0x112/0x440 [ 212.551035][T11122] udp_tunnel_nic_netdevice_event+0x1332/0x19f0 [ 212.557436][T11122] notifier_call_chain+0x1b3/0x3e0 [ 212.562587][T11122] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 212.569121][T11122] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 212.575982][T11122] ? __mutex_lock+0x5bb/0x1350 [ 212.580780][T11122] ? nsim_destroy+0xe5/0x670 [ 212.585485][T11122] unregister_netdevice_queue+0x33c/0x380 [ 212.591243][T11122] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 212.597619][T11122] nsim_destroy+0x1dd/0x670 [ 212.602162][T11122] __nsim_dev_port_del+0x14d/0x1b0 [ 212.607369][T11122] nsim_dev_reload_destroy+0x288/0x490 [ 212.612870][T11122] nsim_dev_reload_down+0x8a/0xc0 [ 212.618009][T11122] devlink_reload+0x1b6/0x8d0 [ 212.622728][T11122] ? __pfx_devlink_reload+0x10/0x10 [ 212.628057][T11122] ? devlink_resources_validate+0xa7/0xd0 [ 212.633815][T11122] ? devlink_resources_validate+0xa7/0xd0 [ 212.639875][T11122] devlink_nl_reload_doit+0xb35/0xd50 [ 212.645333][T11122] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 212.651262][T11122] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 212.657716][T11122] genl_family_rcv_msg_doit+0x212/0x300 [ 212.663306][T11122] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 212.669461][T11122] ? bpf_lsm_capable+0x9/0x20 [ 212.674170][T11122] ? security_capable+0x7e/0x2e0 [ 212.679231][T11122] genl_rcv_msg+0x60e/0x790 [ 212.683776][T11122] ? __pfx_genl_rcv_msg+0x10/0x10 [ 212.688872][T11122] ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10 [ 212.695377][T11122] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 212.701300][T11122] ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10 [ 212.707905][T11122] netlink_rcv_skb+0x208/0x470 [ 212.712694][T11122] ? __lock_acquire+0xab9/0xd20 [ 212.717811][T11122] ? __pfx_genl_rcv_msg+0x10/0x10 [ 212.722884][T11122] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 212.728291][T11122] ? down_read+0x1ad/0x2e0 [ 212.732747][T11122] genl_rcv+0x28/0x40 [ 212.736858][T11122] netlink_unicast+0x82f/0x9e0 [ 212.741663][T11122] ? __pfx_netlink_unicast+0x10/0x10 [ 212.747674][T11122] ? netlink_sendmsg+0x642/0xb30 [ 212.752645][T11122] ? skb_put+0x11b/0x210 [ 212.757046][T11122] netlink_sendmsg+0x805/0xb30 [ 212.761851][T11122] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.767206][T11122] ? aa_sock_msg_perm+0xf1/0x1d0 [ 212.772163][T11122] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 212.777533][T11122] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.782844][T11122] __sock_sendmsg+0x21c/0x270 [ 212.787713][T11122] ____sys_sendmsg+0x505/0x830 [ 212.792517][T11122] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.798133][T11122] ? import_iovec+0x74/0xa0 [ 212.802675][T11122] ___sys_sendmsg+0x21f/0x2a0 [ 212.807443][T11122] ? __pfx____sys_sendmsg+0x10/0x10 [ 212.812709][T11122] ? __fget_files+0x2a/0x420 [ 212.817400][T11122] ? __fget_files+0x3a0/0x420 [ 212.822104][T11122] __x64_sys_sendmsg+0x19b/0x260 [ 212.827157][T11122] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 212.832655][T11122] ? rcu_is_watching+0x15/0xb0 [ 212.837552][T11122] ? do_syscall_64+0xbe/0x3b0 [ 212.842267][T11122] do_syscall_64+0xfa/0x3b0 [ 212.846862][T11122] ? lockdep_hardirqs_on+0x9c/0x150 [ 212.852083][T11122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.858259][T11122] ? clear_bhb_loop+0x60/0xb0 [ 212.862962][T11122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.868937][T11122] RIP: 0033:0x7f1a9578eba9 [ 212.873370][T11122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.893283][T11122] RSP: 002b:00007f1a9667e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.901772][T11122] RAX: ffffffffffffffda RBX: 00007f1a959d5fa0 RCX: 00007f1a9578eba9 [ 212.909858][T11122] RDX: 0000000000008000 RSI: 0000200000000080 RDI: 0000000000000004 [ 212.918428][T11122] RBP: 00007f1a95811e19 R08: 0000000000000000 R09: 0000000000000000 [ 212.926539][T11122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.934522][T11122] R13: 00007f1a959d6038 R14: 00007f1a959d5fa0 R15: 00007fff54a9ae58 [ 212.942598][T11122] [ 212.945781][T11122] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 212.953075][T11122] CPU: 0 UID: 0 PID: 11122 Comm: syz.0.1371 Not tainted syzkaller #0 PREEMPT(full) [ 212.962458][T11122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 212.972533][T11122] Call Trace: [ 212.975828][T11122] [ 212.978767][T11122] dump_stack_lvl+0x99/0x250 [ 212.983379][T11122] ? __asan_memcpy+0x40/0x70 [ 212.987996][T11122] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.993217][T11122] ? __pfx__printk+0x10/0x10 [ 212.997848][T11122] vpanic+0x281/0x750 [ 213.001850][T11122] ? __pfx__printk+0x10/0x10 [ 213.006472][T11122] ? __pfx_vpanic+0x10/0x10 [ 213.010991][T11122] ? is_bpf_text_address+0x292/0x2b0 [ 213.016310][T11122] panic+0xb9/0xc0 [ 213.020053][T11122] ? __pfx_panic+0x10/0x10 [ 213.024512][T11122] __warn+0x31b/0x4b0 [ 213.028514][T11122] ? debug_print_object+0x16b/0x1e0 [ 213.033737][T11122] ? debug_print_object+0x16b/0x1e0 [ 213.038960][T11122] report_bug+0x2be/0x4f0 [ 213.043305][T11122] ? debug_print_object+0x16b/0x1e0 [ 213.048533][T11122] ? debug_print_object+0x16b/0x1e0 [ 213.053758][T11122] ? debug_print_object+0x16d/0x1e0 [ 213.058980][T11122] handle_bug+0x84/0x160 [ 213.063239][T11122] exc_invalid_op+0x1a/0x50 [ 213.067746][T11122] asm_exc_invalid_op+0x1a/0x20 [ 213.072595][T11122] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 213.078419][T11122] Code: 4c 89 ff e8 17 93 52 fd 4d 8b 0f 48 c7 c7 a0 45 e3 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 ba bb b2 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 b7 39 d3 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 213.098026][T11122] RSP: 0018:ffffc9001a07ebd8 EFLAGS: 00010286 [ 213.104101][T11122] RAX: abec1f3b2bc2d100 RBX: dffffc0000000000 RCX: 0000000000080000 [ 213.112068][T11122] RDX: ffffc900046e2000 RSI: 000000000000f362 RDI: 000000000000f363 [ 213.120038][T11122] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 213.127999][T11122] R10: dffffc0000000000 R11: fffffbfff1bfa22c R12: ffffffff8a130530 [ 213.135967][T11122] R13: ffffffff8be34720 R14: ffff88807e313e00 R15: ffffffff8b89d580 [ 213.143937][T11122] ? __pfx_udp_tunnel_nic_device_sync_work+0x10/0x10 [ 213.150620][T11122] ? __pfx_udp_tunnel_nic_device_sync_work+0x10/0x10 [ 213.157296][T11122] debug_check_no_obj_freed+0x3a2/0x470 [ 213.162855][T11122] ? udp_tunnel_nic_netdevice_event+0x1332/0x19f0 [ 213.169261][T11122] kfree+0x112/0x440 [ 213.173157][T11122] udp_tunnel_nic_netdevice_event+0x1332/0x19f0 [ 213.179399][T11122] notifier_call_chain+0x1b3/0x3e0 [ 213.184516][T11122] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 213.190942][T11122] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 213.197707][T11122] ? __mutex_lock+0x5bb/0x1350 [ 213.202469][T11122] ? nsim_destroy+0xe5/0x670 [ 213.207063][T11122] unregister_netdevice_queue+0x33c/0x380 [ 213.212781][T11122] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 213.219027][T11122] nsim_destroy+0x1dd/0x670 [ 213.223533][T11122] __nsim_dev_port_del+0x14d/0x1b0 [ 213.228647][T11122] nsim_dev_reload_destroy+0x288/0x490 [ 213.234115][T11122] nsim_dev_reload_down+0x8a/0xc0 [ 213.239131][T11122] devlink_reload+0x1b6/0x8d0 [ 213.243820][T11122] ? __pfx_devlink_reload+0x10/0x10 [ 213.249018][T11122] ? devlink_resources_validate+0xa7/0xd0 [ 213.254738][T11122] ? devlink_resources_validate+0xa7/0xd0 [ 213.260460][T11122] devlink_nl_reload_doit+0xb35/0xd50 [ 213.265844][T11122] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 213.271742][T11122] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 213.278076][T11122] genl_family_rcv_msg_doit+0x212/0x300 [ 213.283628][T11122] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 213.289710][T11122] ? bpf_lsm_capable+0x9/0x20 [ 213.294386][T11122] ? security_capable+0x7e/0x2e0 [ 213.299328][T11122] genl_rcv_msg+0x60e/0x790 [ 213.303835][T11122] ? __pfx_genl_rcv_msg+0x10/0x10 [ 213.308857][T11122] ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10 [ 213.315270][T11122] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 213.321157][T11122] ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10 [ 213.327673][T11122] netlink_rcv_skb+0x208/0x470 [ 213.332431][T11122] ? __lock_acquire+0xab9/0xd20 [ 213.337281][T11122] ? __pfx_genl_rcv_msg+0x10/0x10 [ 213.342303][T11122] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 213.347598][T11122] ? down_read+0x1ad/0x2e0 [ 213.352016][T11122] genl_rcv+0x28/0x40 [ 213.355993][T11122] netlink_unicast+0x82f/0x9e0 [ 213.360767][T11122] ? __pfx_netlink_unicast+0x10/0x10 [ 213.366052][T11122] ? netlink_sendmsg+0x642/0xb30 [ 213.370981][T11122] ? skb_put+0x11b/0x210 [ 213.375221][T11122] netlink_sendmsg+0x805/0xb30 [ 213.379989][T11122] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.385269][T11122] ? aa_sock_msg_perm+0xf1/0x1d0 [ 213.390203][T11122] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 213.395481][T11122] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.400761][T11122] __sock_sendmsg+0x21c/0x270 [ 213.405444][T11122] ____sys_sendmsg+0x505/0x830 [ 213.410212][T11122] ? __pfx_____sys_sendmsg+0x10/0x10 [ 213.415504][T11122] ? import_iovec+0x74/0xa0 [ 213.420012][T11122] ___sys_sendmsg+0x21f/0x2a0 [ 213.424691][T11122] ? __pfx____sys_sendmsg+0x10/0x10 [ 213.429921][T11122] ? __fget_files+0x2a/0x420 [ 213.434499][T11122] ? __fget_files+0x3a0/0x420 [ 213.439174][T11122] __x64_sys_sendmsg+0x19b/0x260 [ 213.444112][T11122] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 213.449577][T11122] ? rcu_is_watching+0x15/0xb0 [ 213.454338][T11122] ? do_syscall_64+0xbe/0x3b0 [ 213.459013][T11122] do_syscall_64+0xfa/0x3b0 [ 213.463511][T11122] ? lockdep_hardirqs_on+0x9c/0x150 [ 213.468701][T11122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.474761][T11122] ? clear_bhb_loop+0x60/0xb0 [ 213.479434][T11122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.485317][T11122] RIP: 0033:0x7f1a9578eba9 [ 213.489727][T11122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.509326][T11122] RSP: 002b:00007f1a9667e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.517735][T11122] RAX: ffffffffffffffda RBX: 00007f1a959d5fa0 RCX: 00007f1a9578eba9 [ 213.525700][T11122] RDX: 0000000000008000 RSI: 0000200000000080 RDI: 0000000000000004 [ 213.533666][T11122] RBP: 00007f1a95811e19 R08: 0000000000000000 R09: 0000000000000000 [ 213.541625][T11122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.549594][T11122] R13: 00007f1a959d6038 R14: 00007f1a959d5fa0 R15: 00007fff54a9ae58 [ 213.557576][T11122] [ 213.560835][T11122] Kernel Offset: disabled [ 213.565146][T11122] Rebooting in 86400 seconds..