last executing test programs: 16.241467248s ago: executing program 3 (id=9): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x4000042, 0x82, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000002340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8, 0xfffffffc, 0xdc64}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r5, 0x29, 0x0, 0x6, 0x7f, 0xb, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x80, 0x6, 0x41}}) 15.137686706s ago: executing program 3 (id=11): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f00000000c0)={0x27, r2, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) close(r1) 13.982758238s ago: executing program 3 (id=13): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x5, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x11}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000100170000000000000000", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12.217634169s ago: executing program 3 (id=17): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000040)={0x4, {{0x2, 0x4e22, @loopback}}}, 0x88) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000280)={@loopback, 0x0}, &(0x7f00000002c0)=0x14) sendto$packet(r1, &(0x7f0000000180)="52ee9253ae0eefb3b0dc235d5d7859b04d1986f6d8d54de239bf5fd154ec6e0bbda052d362518420dcabbca2ebbf8e9d2533dbdeb2f6407db710fd79ae38bc59405d8e33705a5dea6b628fc825feb72f1526025ae967202b78d7b5ac1219babf78e8969845746cde93b458f8ff6ff13fa54286c0ef3fc1c08132c289874470118155b168ebe265c4723f71ad5116b2ee656e7a1460887899fabb6196905d18b32229bce9f10938388fc7768d95b2a9090ebfbe264ddfcfd44c7bcb5485b61fdfb179011fee46cb23", 0xc8, 0x20004000, &(0x7f0000000300)={0x11, 0x17, r2, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x14) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f0000000340)={0x6, 'pim6reg0\x00', {0xb72}}) socket$packet(0x11, 0x2, 0x300) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)='%pK \x00'}, 0x20) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000ac0)={&(0x7f0000000440)=@caif=@util={0x25, "2f3f40ddbb718714544d4819140881b5"}, 0x80, &(0x7f0000000580)=[{&(0x7f00000004c0)="531ecb0311fbf93d89d51f5540dfc31247646911be6a93b31b29c9bf126def318fcbd9e4a3d2bdf2b24774746fa4a0fb7f6f9f095958af735ab24123f3361d03681a878166977369040713ddfc044397f3f7c1922568d37c7e3b6bb248c2c294e48858afd4846a3dd74928ec7ddee0796d723e69a60b70f3f68059f708211a9ae14df115b7663850dd51f775355026221ce366ca21ceecf5c68fc6660683c742e91d10e4692af17f2b40e8aa0b9fd0315f8c7816794217b410154f016c1636", 0xbf}], 0x1, &(0x7f00000005c0)=[{0xf8, 0x6, 0x8, "360ed611eada52b52347b1c714ca87d0b7838943f3c5fd720d350c55dfe5eb6d5fbd75dc6d279c578fe06199764ed4097b28d533eb40ba90668ef37cdc5b6f47e10e90267304fbef606f7452edd6efa64b19b410f58024c8e3135702bfd9ca1c9275bf73526c7695868e924c90d77b4f53229be179377f9c8208916ccd9a0fd05663917aedd47c174a8c962b99192e1537e66c64c36bcf763e38818d3cf724014b8d372e72773db1a7d4f35b7c7d8bafac6c1ea13aeea500f22e4fe00477d50a60f303805f548d63c3087dea3f42bf728995d89fbc169fc860b12c04a9e9b88350f8"}, {0xb8, 0x10f, 0xf46a, "d1597fa006ac08436bfff83794c18e51205b5d0162b6da6a7542f46d31e719f5817ba5f2341b9e5c71db41566c7692f8927b87e57a661640d8ec056a802525ff92d888736f729f913f5dd3d9924c85ea08df8ae055868ba507fe834b2310d3e2caecfe2e1a1984b8b35d0d5fefd560d7333e472eaa19d16c7ee0a9dd1e6d4cbe0553dadc64a6df845a06e9916bb007bb9031dd0d688d8bcde59c1c99ee822970538d23e598b9d7"}, {0x108, 0x119, 0x7, "faf8b3c92c7d8de1d1ec9db705b6376f3abfc6fa4c5ce08365c7a6a3f0f2fa544d689e11d9f8ff59a2a2a992469bc9417df66c9ae7d5f4fa377181f2531fbc76cd2dcc977da9c530342eab40149c0046128c7288d328b90bdb3bb5e3b1267d85b1d3ec134415af4edbf2efb7edb997723bf53f4e54cb91d1ae93d1bf285c4f45a89ec2d69be5bf2b5ed108e533dd997c5abd70028a4a7f6aca6c31aa69d0309f630ae8ffe78918d45611e3eee14ef2013e1ec846966b883b7df127f7acf209f0a0fde9086dcea7ff6425222977a5175abc823bf3a78cdea18b3588c209daac7c7b2f480300fd6f65bc9f60df3fb982e36664c94e23"}, {0x90, 0x111, 0x0, "e3b396e993a838fd8796b8f6f05ebb88aa0aed34edf560a039d3ab77812249ac2ead113371e1e26f16b1587d1e40451def2fe1d591767b08ea0f6f44a116f22cd2f8e44117ff208091620b9b206956a2e231f13766f4e8fdb2c16aa26415e78e7d41ffeac585d08efe37b8326f60d3eaa3530edbb84508dd9dbbf6678df8"}, {0xa8, 0x112, 0x4, "4e99d3147f9be5e51e475ad97563467157627bf19eb62d910a5a38eae711bc7d4865f56caa10a18a1e031194082af417cc8ea6a57d326e4d5e3f807f2001e1cb30ea220e11a1738596923205a7ca408341bb9198bb703893e1a2fca109e865cba7f6b6aee8096d8504ee9ebaa2923ccc389532ac652ac2626e46ba50dac825f0df253c09c84094f77d12ceb06d4c5b950ae6868d57"}, {0xd8, 0x111, 0x3, "40279d860a12b712f53ce859a71c0885dad076fafd976f605e5b172584fdf26d12697f4fb8909d19a512644ab164c40b8e5e519a96fa1eb4f4d6b9e9507970599b85224d443b4c46a5083555a5dba92569b420524165e7d3b79eab80474e3d02563a9682e3563d69d0b1c60bd08b26333b11b212ebdfd8823a937aa002a38f8d9efc3f1e7ce20c12a11c98b9fd49a6932895525e0b1655aab778d00abb45945e15a5a9439e8ed44ab2d28f5f02aa4b6a60e71b235869ceea67f59e5549a1c47654ec92"}], 0x4c8}, 0x20008010) setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000b00)={@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}, 0xc) syz_extract_tcp_res$synack(&(0x7f0000000b40), 0x1, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000b80)={0x0, 0x2710}, 0x10) ioctl$XFS_IOC_GETBMAPA(r1, 0xc020582c, &(0x7f0000000bc0)={0x0, 0x86f6, 0x3, 0xd0, 0x8}) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000c00)='veth0_to_batadv\x00') sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x20, 0x17, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x4004000) syz_emit_ethernet(0xe0, &(0x7f0000000d40)={@broadcast, @remote, @void, {@x25={0x805, {0x1, 0x4, 0x1b, "712fb807661239a66ce6cf9ab395168c0022d38c77a01c6598316a8cda4b2128331629e6504506637e31de3131d94d01d03b3f7aa3e6f6ec893c8c98a8069b942c454b2f1fa3c7d3a181f6b039d3332184c1024669a48a4001b6ae529c2e348d04152d8a7058c8c7286cc305bf988d7b4cc5cb6d6b0204f179acd545f8afa2f52d81c10561f5c1916a8ab1a6f24e938ebb65ec86846a2b7d95142683b2429a5a6c27429c506f0e6001960f70a1e7ad808190ff1db5c1e7e21290cf418756e02580af8b3bb940cebee2178aa16a116e"}}}}, 0x0) r6 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000e40)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@private1}}, &(0x7f0000000f40)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000f80)={0x0, 0x0, 0x0}, &(0x7f0000000fc0)=0xc) setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000001000)={r6, r7, r8}, 0xc) close(r5) 11.167224032s ago: executing program 3 (id=21): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) 9.715267155s ago: executing program 3 (id=27): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f00000000c0)=0x101, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000002c00)=@buf={0x500, &(0x7f0000002bc0)}) sendto$inet6(r2, &(0x7f0000000180)="a7", 0x1, 0x2400c040, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0xbcff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x7, 0x72}, 0x2c) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44) r5 = accept4(r0, 0x0, 0x0, 0x800) recvmmsg$unix(r5, &(0x7f0000003700), 0x0, 0x0, 0x0) sendmsg$inet6(r5, &(0x7f0000001680)={&(0x7f0000000000)={0xa, 0x4e20, 0x4, @local, 0x2}, 0x1c, &(0x7f00000015c0), 0x0, &(0x7f0000001640)}, 0x2000c000) 7.210221315s ago: executing program 0 (id=36): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0x9200000000000000) recvmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) socket$key(0xf, 0x3, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 6.39765906s ago: executing program 0 (id=39): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 5.809533567s ago: executing program 4 (id=41): unshare(0x400) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20000000ed071, 0xffffffffffffffff, 0xfffff000) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) 5.482741737s ago: executing program 0 (id=42): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001000030400000000fdffff0000000300", @ANYRES32=0x0, @ANYBLOB="0000000040000200140012800900010076657468000000000400028008004040", @ANYRES32=0x0, @ANYBLOB="04001a80e2b9"], 0x40}, 0x1, 0x0, 0x0, 0x4894}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x28, r6, 0xda409aa40cc3acf1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044081}, 0x20008000) ioctl$BTRFS_IOC_DEFRAG_RANGE(r4, 0x40309410, &(0x7f0000000340)={0x6, 0xa97b, 0x2, 0x14c3a19c, 0x3, [0x3563, 0x7, 0x2f6, 0xff]}) bind$inet(r3, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r8 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000080), 0x4) bind$inet(r8, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_MSG_GETFLOWTABLE(r10, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, 0x17, 0xa, 0x202, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40880}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c00000016"], 0xfc}, 0x1, 0x0, 0x0, 0x48010}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0x9, &(0x7f0000000640)=ANY=[@ANYBLOB="1826582c1206000000000000000000000000400018120000", @ANYRES32=r13, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7070000000000000f0af4ffffffffff9500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x16, &(0x7f00000009c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r13}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r13}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x6, 0x0, 0x3, 0x20, 0x4}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7ff7}, @map_val={0x18, 0xb, 0x2, 0x0, r13, 0x0, 0x0, 0x0, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r13}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000980)='GPL\x00', 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="080008000600090000001400000045"], 0xfce) 5.049477369s ago: executing program 4 (id=43): unshare(0x400) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) 5.049013974s ago: executing program 1 (id=44): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x1, @remote, 0x80}, 0x20) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x80800) socket$kcm(0x2a, 0x2, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000002000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 4.916241254s ago: executing program 2 (id=45): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0x40, 0x1, 0xfffffffe, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0x342}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x15}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0x800c080) 4.425784223s ago: executing program 1 (id=46): socket$inet_icmp(0x2, 0x2, 0x1) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, &(0x7f0000000380)={0x0, 0x2, 0x80004000, 0x9ffffc}) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0x10, 0x4) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x10023}, 0x1c) 4.313956776s ago: executing program 4 (id=47): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f00000000c0)={0x27, r2, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) 4.079853493s ago: executing program 2 (id=48): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000d5}, 0x4054) 3.460501445s ago: executing program 2 (id=49): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0x9200000000000000) recvmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) socket$key(0xf, 0x3, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 3.379897383s ago: executing program 4 (id=50): socket$kcm(0x29, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$tipc(0x1e, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @broadcast}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xd, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7cff, 0x80000001, 0x8, 0x6, 0x1ff}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 3.215612606s ago: executing program 0 (id=51): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x400, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000075e40)={0x0, 0x0}) 2.792530684s ago: executing program 1 (id=52): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2.460904537s ago: executing program 0 (id=53): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000000)) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_buf(r0, 0x29, 0xcd, &(0x7f00000000c0)="ebe280d122fad24516c4b4689cfdb4749b98e20126684303ef12df8b5c528ae586f9d71b23212c647ec070512ab41d8dce95d1a298e0608821bca6d4f2c39546f312e8e20209e77c77f265078be2fe56bd2cbd213d992c3c863e3e41c1f6963b1f754efe4b2c52d2bcd88bc0bd0f3fd0c609334c4cf79e3bad120dc2b747ba3c44345ff9aea2800977e26c", 0x8b) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000180)={'veth0_macvtap\x00', @broadcast}) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}}, 0x88) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f0000000300)={&(0x7f00000002c0)=[{0x1, 0x0, 0x0, {0x8000, 0x8, 0x1}}], 0x1, 0x20, 0x5353, 0x100}) pwrite64(r2, &(0x7f0000000340)="50299a47301466a4ada6b3517413c8370ce3d9530803330a6ca28555ccc853fa34ac7a15ecab3dea7c849478d95f58f78515eab279a3ebf992c682a56e28b35fb85abac7af2919a0093e42d3c208886015d8dcb17355163edcaa885b4ef618e341e18768e6ce95ff192307786593ac0aee2bb20210163daec23a16d7adf06899ca30fd53cd6d56de9703f9ed20c922e8e5425f335cab61c13def15c3e0da30670d5328f4589b93ef", 0xa8, 0x455509d4) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000400)=@req={0x81, 0x5, 0x7, 0x2}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r6, &(0x7f00000006c0)={&(0x7f0000000440), 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x1c0, 0x1, 0x3, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFQA_CT={0x80, 0xb, 0x0, 0x1, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xa10}]}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x14, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0xff, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x5, 0xe8}}]}}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xc}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x5}, @CTA_TUPLE_MASTER={0x20, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xfa}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x53}, @NFQA_VLAN={0x3c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3403}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xc6}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xffb9}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_PAYLOAD={0x7c, 0xa, "139a4a1d8a5488c6096ae47e8eb331d5860fb7709749d17512e74d86c2cbdea33b5728307a4eaea28bccfbd201ca0b7e0c1a91329deb15cfb97caac0e3fac3af38569ec906b8b11f094ca86f97238365b9eee59e381ccb37660baef7a499e55eb678a712e9914a512da15abe44855da76c1e778460a7793d"}, @NFQA_PAYLOAD={0x61, 0xa, "5ad4b84ef578d55cb040a3b41a01e314426958b6b1b8145e62e104ac132da8afa214ef48eefb3898e55aab1ab2c035c89a75ae8e7b7cffe553260248bce84df84033d21deb17256c0e74826504a99f3bf7f3ab155f2750672237786828"}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4}, 0x10008801) ioctl$sock_ifreq(r6, 0x8949, &(0x7f0000000740)={'wg1\x00', @ifru_settings={0x5, 0x3, @raw_hdlc=&(0x7f0000000700)={0x0, 0x11}}}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000780)={{{@in=@multicast1, @in=@local, 0x4e20, 0x0, 0x4e21, 0x4, 0xa, 0x0, 0x20, 0x5e, 0x0, 0xffffffffffffffff}, {0x80008000000, 0x200, 0x1, 0x8, 0x2, 0x6, 0x2, 0x3}, {0x5, 0x2, 0x4, 0x8000}, 0x81, 0x6e6bbb, 0x0, 0x0, 0x0, 0x1}, {{@in6=@private1, 0x4d2, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x1, 0x1, 0x4, 0x10000, 0x452, 0x81}}, 0xe8) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000a00)={r0, 0x0, 0x60, 0x0, &(0x7f0000000880)="ff6ce0362a3dc5181de6de42eec6c51452e769815291dc069042bf4288f70d70e63eed24328e53ac58c76bbea80b35953741a5c69a01e94010abf955575e1571a07c6c6de723502a3fc204027931b6e6756ed234666cf433ecc767463aa3ebc7", 0x0, 0x1, 0x0, 0xe4, 0x0, &(0x7f0000000900)="4431815d488de0e91b2075879a067ed6190687b3b06ea1b03fe67975b0419e6e16a4695ab1ebb9f533c345b04a51cefa64ffdf6be4201421187647a1eaebf213eef9790d0d4752be95a747aef93bf87f90071c43ecddf07377f497ab7ed1d28ba562a35a79539ff118ef59bde0d603128e69ae22825a35938dfd979ead5e6370fb8cde035c0d28a97e093dd80082a76bb6dc35612bbd447f16f4e0bff472228d8aa7caff98cb4baad6d482d2e4e0ca79bd0bc8fb3d6a3f2de74bca509176933cd7e0f6f04fda1fbf3774cf485da63d8ba05981a1cd373e121612e8e07f7f9e61c6d95b9c", 0x0, 0x2, 0x0, 0x9}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a80)={'wlan0\x00'}) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000ac0)) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x891b, &(0x7f0000000b00)={'veth1_to_bond\x00', {0x2, 0x0, @multicast2}}) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, 0x17, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2800c081}, 0x40488a0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xa180000}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x800}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x81}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x44001}, 0x10000004) r7 = accept4(r1, &(0x7f0000000d80)=@ethernet, &(0x7f0000000e00)=0x80, 0x800) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000ec0)={@multicast2, @initdev, 0x0}, &(0x7f0000000f00)=0xc) sendto$packet(r7, &(0x7f0000000e40)="4ea17bc4de7dabb4d617dfe6ba1bbfa024da852619d074d6ef688fa2802a181821bb2cbcc65cb15733f568a289dd1ca197b4d1956b2fa7e85ea4e0845e3d33c930dec96e4793fb8087d20325d6e31a71dd91", 0x52, 0x0, &(0x7f0000000f40)={0x11, 0x4, r8, 0x1, 0x7, 0x6, @local}, 0x14) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000f80)=@req3={0xfff, 0xc, 0x7fffffff, 0x2, 0x400, 0x20, 0x6}, 0x1c) 2.286598979s ago: executing program 2 (id=54): socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x400000000010, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x14}, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000029"], 0x18}, 0x0) 1.739750715s ago: executing program 1 (id=55): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000000206010800000000000000000100000a12000300686173683a6e65742c706f72740000000900020073797a30000000000500010007000000050004000000000005000500020000001400078008000840000000df08001200"], 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x8000) 1.659126548s ago: executing program 4 (id=56): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r0) write$nci(0xffffffffffffffff, 0x0, 0xc) write$nci(0xffffffffffffffff, 0x0, 0x14) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7, 0x407ffffffffffe, 0x800000000000002}, 0x8001, 0x0, 0x1, 0x0, 0x6, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x8000001, @local, 0x5}, 0x1c) 1.33762341s ago: executing program 2 (id=57): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) 768.324116ms ago: executing program 1 (id=58): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt(r0, 0x49e7, 0x1ff, 0xffffffffffffffff, 0x0) 681.996914ms ago: executing program 0 (id=59): unshare(0x2040400) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x23, 0x0, 0x0) 523.978195ms ago: executing program 4 (id=60): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r1, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x11dc0, &(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x0) 454.168131ms ago: executing program 2 (id=61): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x4000801) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001680)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}, 0x3c) syz_emit_ethernet(0x11dc0, &(0x7f0000000040)=ANY=[], 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="6103020502060502"], 0x12) 0s ago: executing program 1 (id=62): listen(0xffffffffffffffff, 0x6) connect$l2tp(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @remote}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000140001b66fb1b313ba36db000a0000000400000014000100"], 0x44}, 0x1, 0x0, 0x0, 0x4018}, 0x0) r0 = syz_open_dev$evdev(0x0, 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x56, 0x0, 0xac, {0xffff, 0x1}, {0x4d, 0x2}, @cond=[{0x8, 0x5388, 0xc, 0x800, 0xf535, 0x7}, {0x0, 0x805, 0x1, 0x7, 0x60d8, 0x1}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.74' (ED25519) to the list of known hosts. [ 215.868028][ T5555] cgroup: Unknown subsys name 'net' [ 216.002416][ T5555] cgroup: Unknown subsys name 'cpuset' [ 216.022801][ T5555] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 223.163184][ T5555] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 228.612854][ T5581] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 228.624391][ T5581] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 228.641793][ T5581] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 228.670197][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 228.689212][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 228.700909][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 228.723166][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 228.733928][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 228.752520][ T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 228.752555][ T5589] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 228.773820][ T5589] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 228.779128][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 228.790061][ T5589] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 228.804665][ T5589] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 228.816686][ T5589] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 228.825492][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 228.847281][ T5593] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 228.862269][ T5576] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 228.871625][ T5576] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 228.883626][ T5593] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 228.886643][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 228.899236][ T5593] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 228.912784][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 228.944559][ T5593] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 228.969988][ T5593] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 230.891331][ T5583] Bluetooth: hci1: command tx timeout [ 230.972129][ T5583] Bluetooth: hci2: command tx timeout [ 230.980357][ T5581] Bluetooth: hci0: command tx timeout [ 231.050905][ T5581] Bluetooth: hci4: command tx timeout [ 231.060916][ T5583] Bluetooth: hci3: command tx timeout [ 232.970938][ T5581] Bluetooth: hci1: command tx timeout [ 233.051002][ T5581] Bluetooth: hci0: command tx timeout [ 233.056858][ T5583] Bluetooth: hci2: command tx timeout [ 233.131797][ T5581] Bluetooth: hci3: command tx timeout [ 233.138128][ T5583] Bluetooth: hci4: command tx timeout [ 235.060892][ T5583] Bluetooth: hci1: command tx timeout [ 235.141815][ T5583] Bluetooth: hci2: command tx timeout [ 235.154446][ T5581] Bluetooth: hci0: command tx timeout [ 235.198892][ T5573] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.211379][ T5581] Bluetooth: hci4: command tx timeout [ 235.220174][ T5583] Bluetooth: hci3: command tx timeout [ 235.234015][ T5573] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.263645][ T5573] bridge_slave_0: entered allmulticast mode [ 235.311259][ T5573] bridge_slave_0: entered promiscuous mode [ 235.429612][ T5573] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.467359][ T5573] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.516607][ T5573] bridge_slave_1: entered allmulticast mode [ 235.557281][ T5573] bridge_slave_1: entered promiscuous mode [ 235.818163][ T5572] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.827203][ T5572] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.836683][ T5572] bridge_slave_0: entered allmulticast mode [ 235.846916][ T5572] bridge_slave_0: entered promiscuous mode [ 235.881893][ T5573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.035289][ T5572] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.044535][ T5572] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.053296][ T5572] bridge_slave_1: entered allmulticast mode [ 236.063911][ T5572] bridge_slave_1: entered promiscuous mode [ 236.083044][ T5573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.126909][ T5577] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.134710][ T5577] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.144398][ T5577] bridge_slave_0: entered allmulticast mode [ 236.154104][ T5577] bridge_slave_0: entered promiscuous mode [ 236.169500][ T5574] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.178775][ T5574] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.187636][ T5574] bridge_slave_0: entered allmulticast mode [ 236.197571][ T5574] bridge_slave_0: entered promiscuous mode [ 236.316612][ T5577] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.325193][ T5577] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.333879][ T5577] bridge_slave_1: entered allmulticast mode [ 236.343888][ T5577] bridge_slave_1: entered promiscuous mode [ 236.355384][ T5574] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.364687][ T5574] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.374069][ T5574] bridge_slave_1: entered allmulticast mode [ 236.386230][ T5574] bridge_slave_1: entered promiscuous mode [ 236.462330][ T5575] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.471131][ T5575] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.480303][ T5575] bridge_slave_0: entered allmulticast mode [ 236.492279][ T5575] bridge_slave_0: entered promiscuous mode [ 236.581552][ T5572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.599464][ T5573] team0: Port device team_slave_0 added [ 236.607300][ T5575] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.616457][ T5575] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.624681][ T5575] bridge_slave_1: entered allmulticast mode [ 236.634376][ T5575] bridge_slave_1: entered promiscuous mode [ 236.714877][ T5572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.733265][ T5573] team0: Port device team_slave_1 added [ 236.781565][ T5577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.802812][ T5574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.917260][ T5577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.937567][ T5574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.014659][ T5575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.089971][ T5572] team0: Port device team_slave_0 added [ 237.099269][ T5573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.107088][ T5573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.135517][ T5581] Bluetooth: hci1: command tx timeout [ 237.135664][ T5573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.164258][ T5575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.210993][ T5581] Bluetooth: hci0: command tx timeout [ 237.211058][ T5583] Bluetooth: hci2: command tx timeout [ 237.250033][ T5572] team0: Port device team_slave_1 added [ 237.260049][ T5573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.268917][ T5573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.299619][ T5573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.311102][ T5581] Bluetooth: hci4: command tx timeout [ 237.311165][ T5583] Bluetooth: hci3: command tx timeout [ 237.353731][ T5577] team0: Port device team_slave_0 added [ 237.368542][ T5574] team0: Port device team_slave_0 added [ 237.461344][ T5577] team0: Port device team_slave_1 added [ 237.475952][ T5574] team0: Port device team_slave_1 added [ 237.516477][ T5572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.523753][ T5572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.550793][ T5572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.572288][ T5575] team0: Port device team_slave_0 added [ 237.640417][ T5572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.648109][ T5572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.675728][ T5572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.696304][ T5575] team0: Port device team_slave_1 added [ 237.869883][ T5577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.877491][ T5577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.905506][ T5577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.920339][ T5574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.927703][ T5574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.955401][ T5574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.028751][ T5577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.036884][ T5577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.067528][ T5577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.082174][ T5574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.089505][ T5574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.117813][ T5574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.143817][ T5573] hsr_slave_0: entered promiscuous mode [ 238.153468][ T5573] hsr_slave_1: entered promiscuous mode [ 238.169499][ T5575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.176932][ T5575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.204619][ T5575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.297133][ T5575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.304995][ T5575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.334630][ T5575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.506667][ T5572] hsr_slave_0: entered promiscuous mode [ 238.515805][ T5572] hsr_slave_1: entered promiscuous mode [ 238.524640][ T5572] debugfs: 'hsr0' already exists in 'hsr' [ 238.530869][ T5572] Cannot create hsr debugfs directory [ 238.660442][ T5577] hsr_slave_0: entered promiscuous mode [ 238.669824][ T5577] hsr_slave_1: entered promiscuous mode [ 238.678595][ T5577] debugfs: 'hsr0' already exists in 'hsr' [ 238.684735][ T5577] Cannot create hsr debugfs directory [ 238.786964][ T5574] hsr_slave_0: entered promiscuous mode [ 238.796126][ T5574] hsr_slave_1: entered promiscuous mode [ 238.805234][ T5574] debugfs: 'hsr0' already exists in 'hsr' [ 238.811256][ T5574] Cannot create hsr debugfs directory [ 238.915041][ T5575] hsr_slave_0: entered promiscuous mode [ 238.925587][ T5575] hsr_slave_1: entered promiscuous mode [ 238.934733][ T5575] debugfs: 'hsr0' already exists in 'hsr' [ 238.940880][ T5575] Cannot create hsr debugfs directory [ 240.421450][ T5573] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 240.455623][ T5573] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 240.474042][ T5573] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 240.511972][ T5573] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 240.532767][ T5573] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 240.563472][ T5573] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 240.595141][ T5573] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 240.618093][ T5573] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 240.736929][ T5572] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 240.786468][ T5572] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 240.805068][ T5572] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 240.827061][ T5572] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 240.843044][ T5572] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 240.870105][ T5572] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 240.884475][ T5572] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 240.907758][ T5572] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 241.151192][ T5577] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 241.175531][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 241.189615][ T5577] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 241.212201][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 241.226374][ T5577] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 241.254219][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 241.286195][ T5577] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 241.312402][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 241.634259][ T5574] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 241.664422][ T5574] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 241.678867][ T5574] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 241.704593][ T5574] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 241.715579][ T5574] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 241.738784][ T5574] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 241.779079][ T5574] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 241.807646][ T5574] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 242.242856][ T5575] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 242.270421][ T5575] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 242.286980][ T5575] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 242.310344][ T5575] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 242.349980][ T5575] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 242.376550][ T5575] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 242.411229][ T5573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.424155][ T5575] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 242.447795][ T5575] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 242.668348][ T5573] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.725597][ T5572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.830426][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.840236][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.955853][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.963675][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.073847][ T5572] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.134176][ T5577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.251961][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.259808][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.373890][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.381795][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.436330][ T5577] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.542386][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.550156][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.690098][ T1054] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.702635][ T1054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.866934][ T5574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.160216][ T5575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.254545][ T5574] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.418306][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.426827][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.539274][ T5575] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.618468][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.626445][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.738570][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.746544][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.944890][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.952739][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.336837][ T5573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.321610][ T5573] veth0_vlan: entered promiscuous mode [ 248.414019][ T5572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.605264][ T5573] veth1_vlan: entered promiscuous mode [ 248.712721][ T5577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.546262][ T5573] veth0_macvtap: entered promiscuous mode [ 249.682436][ T5573] veth1_macvtap: entered promiscuous mode [ 249.827256][ T5572] veth0_vlan: entered promiscuous mode [ 249.999679][ T5574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.119016][ T5572] veth1_vlan: entered promiscuous mode [ 250.150875][ T5573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.308259][ T5573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.374527][ T5575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.505962][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.519774][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.584927][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.599750][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.867818][ T5572] veth0_macvtap: entered promiscuous mode [ 250.987280][ T5574] veth0_vlan: entered promiscuous mode [ 250.998163][ T5572] veth1_macvtap: entered promiscuous mode [ 251.275541][ T5574] veth1_vlan: entered promiscuous mode [ 251.473218][ T5575] veth0_vlan: entered promiscuous mode [ 251.556243][ T5572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.631733][ T5577] veth0_vlan: entered promiscuous mode [ 251.682582][ T5572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.800259][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.835311][ T5575] veth1_vlan: entered promiscuous mode [ 251.867786][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.899668][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.972026][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.031020][ T5577] veth1_vlan: entered promiscuous mode [ 252.347222][ T5574] veth0_macvtap: entered promiscuous mode [ 252.446859][ T5574] veth1_macvtap: entered promiscuous mode [ 252.818095][ T5574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.844346][ T5575] veth0_macvtap: entered promiscuous mode [ 252.925975][ T5577] veth0_macvtap: entered promiscuous mode [ 252.978259][ T5575] veth1_macvtap: entered promiscuous mode [ 253.038111][ T5574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.125245][ T5577] veth1_macvtap: entered promiscuous mode [ 253.218738][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.266165][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.324268][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.346033][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.425796][ T5575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.552661][ T5577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.626312][ T5575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.776215][ T5577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.918220][ T55] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.983852][ T418] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.041843][ T418] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.059133][ T418] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.149082][ T418] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.189898][ T418] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.213978][ T418] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.245711][ T418] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.617071][ T3250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.679125][ T3250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.134383][ T3250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.186566][ T3250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.859336][ T5573] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 260.044444][ T94] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.112993][ T94] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.453659][ T3258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.506445][ T3258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.554531][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.641229][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.998415][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.018667][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.531122][ T3250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.580236][ T3250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.078194][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.130776][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.346727][ T5860] can: request_module (can-proto-0) failed. [ 264.407917][ T418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.484009][ T418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.696422][ T418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.728048][ T418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.559351][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.579701][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.604418][ T5885] netlink: 104 bytes leftover after parsing attributes in process `syz.2.18'. [ 267.113970][ T5887] netlink: 64 bytes leftover after parsing attributes in process `syz.4.19'. [ 269.366307][ T5578] IPVS: starting estimator thread 0... [ 269.520954][ T5916] IPVS: using max 192 ests per chain, 9600 per kthread [ 272.215309][ T5937] netlink: 11 bytes leftover after parsing attributes in process `syz.0.39'. [ 273.404317][ T5945] syz.0.42 uses obsolete (PF_INET,SOCK_PACKET) [ 273.861366][ T5943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.42'. [ 275.651996][ T5966] syzkaller0: entered promiscuous mode [ 275.659309][ T5966] syzkaller0: entered allmulticast mode [ 276.058636][ T5971] netlink: 11 bytes leftover after parsing attributes in process `syz.1.52'. [ 278.165426][ T5994] ===================================================== [ 278.174593][ T5994] BUG: KMSAN: uninit-value in bpf_prog_run_generic_xdp+0x19a5/0x20d0 [ 278.184687][ T5994] bpf_prog_run_generic_xdp+0x19a5/0x20d0 [ 278.192545][ T5994] do_xdp_generic+0xe07/0x17b0 [ 278.200343][ T5994] tun_get_user+0x52df/0x6fe0 [ 278.207163][ T5994] tun_chr_write_iter+0x3e9/0x5c0 [ 278.213940][ T5994] vfs_write+0xbe1/0x15c0 [ 278.218876][ T5994] ksys_write+0x1d9/0x470 [ 278.225864][ T5994] __x64_sys_write+0x97/0xf0 [ 278.231430][ T5994] x64_sys_call+0x2ff0/0x3ea0 [ 278.238404][ T5994] do_syscall_64+0x134/0xf80 [ 278.244930][ T5994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.252567][ T5994] [ 278.255450][ T5994] Uninit was stored to memory at: [ 278.262542][ T5994] pskb_expand_head+0x497/0x1a40 [ 278.268586][ T5994] do_xdp_generic+0xb30/0x17b0 [ 278.275998][ T5994] tun_get_user+0x52df/0x6fe0 [ 278.282772][ T5994] tun_chr_write_iter+0x3e9/0x5c0 [ 278.289828][ T5994] vfs_write+0xbe1/0x15c0 [ 278.295737][ T5994] ksys_write+0x1d9/0x470 [ 278.301182][ T5994] __x64_sys_write+0x97/0xf0 [ 278.308290][ T5994] x64_sys_call+0x2ff0/0x3ea0 [ 278.314343][ T5994] do_syscall_64+0x134/0xf80 [ 278.319942][ T5994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.327011][ T5994] [ 278.329851][ T5994] Uninit was created at: [ 278.334688][ T5994] __kmalloc_node_track_caller_noprof+0x4f6/0x1750 [ 278.344527][ T5994] __alloc_skb+0x90d/0x1190 [ 278.350055][ T5994] alloc_skb_with_frags+0xc5/0x990 [ 278.357363][ T5994] sock_alloc_send_pskb+0xacb/0xc60 [ 278.366684][ T5994] tun_get_user+0xefa/0x6fe0 [ 278.373423][ T5994] tun_chr_write_iter+0x3e9/0x5c0 [ 278.379909][ T5994] vfs_write+0xbe1/0x15c0 [ 278.385913][ T5994] ksys_write+0x1d9/0x470 [ 278.392139][ T5994] __x64_sys_write+0x97/0xf0 [ 278.398431][ T5994] x64_sys_call+0x2ff0/0x3ea0 [ 278.404672][ T5994] do_syscall_64+0x134/0xf80 [ 278.411288][ T5994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.420441][ T5994] [ 278.424290][ T5994] CPU: 0 UID: 0 PID: 5994 Comm: syz.4.60 Not tainted syzkaller #0 PREEMPT(full) [ 278.438600][ T5994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 278.453537][ T5994] ===================================================== [ 278.461615][ T5994] Disabling lock debugging due to kernel taint [ 278.469783][ T5994] Kernel panic - not syncing: kmsan.panic set ... [ 278.477697][ T5994] CPU: 0 UID: 0 PID: 5994 Comm: syz.4.60 Tainted: G B syzkaller #0 PREEMPT(full) [ 278.491250][ T5994] Tainted: [B]=BAD_PAGE [ 278.497394][ T5994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 278.517960][ T5994] Call Trace: [ 278.523241][ T5994] [ 278.526844][ T5994] __dump_stack+0x26/0x30 [ 278.533147][ T5994] dump_stack_lvl+0x50/0x1c0 [ 278.540061][ T5994] ? dump_stack+0x12/0x25 [ 278.548420][ T5994] dump_stack+0x1e/0x25 [ 278.553851][ T5994] vpanic+0x7b4/0x1430 [ 278.560640][ T5994] panic+0x15d/0x160 [ 278.565557][ T5994] kmsan_report+0x31a/0x320 [ 278.571823][ T5994] ? __msan_warning+0x1b/0x30 [ 278.578372][ T5994] ? bpf_prog_run_generic_xdp+0x19a5/0x20d0 [ 278.585235][ T5994] ? do_xdp_generic+0xe07/0x17b0 [ 278.592269][ T5994] ? tun_get_user+0x52df/0x6fe0 [ 278.598150][ T5994] ? tun_chr_write_iter+0x3e9/0x5c0 [ 278.605345][ T5994] ? vfs_write+0xbe1/0x15c0 [ 278.611693][ T5994] ? ksys_write+0x1d9/0x470 [ 278.619455][ T5994] ? __x64_sys_write+0x97/0xf0 [ 278.626813][ T5994] ? x64_sys_call+0x2ff0/0x3ea0 [ 278.633324][ T5994] ? do_syscall_64+0x134/0xf80 [ 278.640304][ T5994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.652072][ T5994] ? ___bpf_prog_run+0xe95c/0xea90 [ 278.659266][ T5994] ? __bpf_prog_run32+0xc2/0xf0 [ 278.668962][ T5994] ? kmsan_get_metadata+0xf1/0x160 [ 278.675835][ T5994] __msan_warning+0x1b/0x30 [ 278.682130][ T5994] bpf_prog_run_generic_xdp+0x19a5/0x20d0 [ 278.692188][ T5994] do_xdp_generic+0xe07/0x17b0 [ 278.698474][ T5994] ? tun_get_user+0x4e71/0x6fe0 [ 278.704410][ T5994] ? filter_irq_stacks+0x49/0x190 [ 278.711664][ T5994] ? tun_get_user+0x525e/0x6fe0 [ 278.718210][ T5994] tun_get_user+0x52df/0x6fe0 [ 278.727163][ T5994] ? stack_depot_save_flags+0x35/0x790 [ 278.736207][ T5994] ? kmsan_get_metadata+0xf1/0x160 [ 278.744193][ T5994] ? kmsan_get_metadata+0xf1/0x160 [ 278.751243][ T5994] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 278.760190][ T5994] ? kmsan_get_metadata+0xf1/0x160 [ 278.767320][ T5994] tun_chr_write_iter+0x3e9/0x5c0 [ 278.774678][ T5994] vfs_write+0xbe1/0x15c0 [ 278.781003][ T5994] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 278.789280][ T5994] ksys_write+0x1d9/0x470 [ 278.795421][ T5994] __x64_sys_write+0x97/0xf0 [ 278.802729][ T5994] x64_sys_call+0x2ff0/0x3ea0 [ 278.809550][ T5994] do_syscall_64+0x134/0xf80 [ 278.817550][ T5994] ? clear_bhb_loop+0x50/0xa0 [ 278.823939][ T5994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.834953][ T5994] RIP: 0033:0x7fb91ad5d68e [ 278.840122][ T5994] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 278.863171][ T5994] RSP: 002b:00007fb91bbb3fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 278.874443][ T5994] RAX: ffffffffffffffda RBX: 00007fb91bbb46c0 RCX: 00007fb91ad5d68e [ 278.885129][ T5994] RDX: 0000000000011dc0 RSI: 00002000000000c0 RDI: 00000000000000c8 [ 278.893813][ T5994] RBP: 00007fb91ae32d6f R08: 0000000000000000 R09: 0000000000000000 [ 278.903953][ T5994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.915868][ T5994] R13: 00007fb91b016038 R14: 00007fb91b015fa0 R15: 00007ffe83eee858 [ 278.925478][ T5994] [ 278.929912][ T5994] Kernel Offset: disabled [ 278.935755][ T5994] Rebooting in 86400 seconds..