last executing test programs: 2.768790989s ago: executing program 2 (id=98): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.489351658s ago: executing program 3 (id=102): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}, 0x104}, {{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0, 0x20}, 0x8001}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000029c0)=""/190, 0xbe}, {&(0x7f00000028c0)=""/236, 0xec}, {&(0x7f0000002b80)=""/4100, 0x1004}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f00000000c0)=""/252, 0xfc}], 0x5}, 0xb}, {{0x0, 0x0, 0x0}, 0x10001}], 0x5, 0x4022, 0x0) 2.411587372s ago: executing program 2 (id=103): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000100000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) 2.115667465s ago: executing program 4 (id=108): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x11000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) 2.059930964s ago: executing program 3 (id=109): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 2.058433119s ago: executing program 2 (id=110): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) close(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x28, 0xe, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x48080}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x2c, 0x2, [@TCA_PIE_ECN={0x8}, @TCA_PIE_ECN={0x8}, @TCA_PIE_ECN={0x8, 0x6, 0x1}, @TCA_PIE_BYTEMODE={0x8}, @TCA_PIE_ALPHA={0x8, 0x4, 0x14}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x72b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0xfffc, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xc, 0x4, 0xd}}}}]}, 0x44}}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.850968099s ago: executing program 3 (id=114): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x68, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x4000001c}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}, @IFLA_NET_NS_FD={0x8, 0x1c, r1}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x1}]}, 0x68}}, 0x0) 1.663898621s ago: executing program 3 (id=115): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x20, r0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 1.663700771s ago: executing program 0 (id=116): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) bind$bt_hci(r0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00030010008188040f80ec59acbc0413a1f848190000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) write(r0, &(0x7f0000000000), 0x0) 1.5535517s ago: executing program 4 (id=117): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_DREG={0x8, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000080)={0x6, 0x4}) 1.545083354s ago: executing program 1 (id=118): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x609, 0x0, 0x5500, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x7}]}}}]}, 0x40}}, 0x0) 1.467623953s ago: executing program 0 (id=119): ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, &(0x7f0000000000)) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0x6, 0xfe, 0x7, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x7e7, 0x8017, 0xeb, 0x100}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x20, 0x7, 0x6, 0x1, {{0x6, 0x4, 0x0, 0x1b, 0x18, 0x64, 0x0, 0x8, 0x2f, 0x0, @private=0xa010101, @empty, {[@noop]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0x75, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x87, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000700)={&(0x7f0000000080), 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xcc, r1, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_HEADER={0x4}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0xcc}}, 0x4000080) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000740)=0xffffffffffffffff, 0x4) close(r8) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x200, '\x00', r3, r0, 0x2, 0x2, 0x2}, 0x50) sendmsg$nl_crypto(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@delrng={0x10, 0x14, 0x400, 0x70bd29, 0x25dfdbfd, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x20008090) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)=@delnexthop={0x30, 0x69, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{0x8}, {0x8, 0x1, 0x2}, {0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008010}, 0x8000) tee(r0, 0xffffffffffffffff, 0x5, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a80)={r0, 0x58, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000bc0)={@fallback=r9, 0xe, 0x0, 0x6ac, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c00)={@ifindex=r2, r0, 0xe, 0x20, r0, @void, @void, @void, @value=r5, r13}, 0x20) ioctl$sock_SIOCGIFCONF(r10, 0x8912, &(0x7f0000000c40)=@buf) ioctl$BTRFS_IOC_SET_FEATURES(r10, 0x40309439, &(0x7f0000000c80)={0x1, 0x1, 0x18}) getsockname$packet(r0, &(0x7f0000000d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000d40)=0x14) sendmsg$nl_route(r12, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)=@RTM_NEWMDB={0xb8, 0x54, 0x300, 0x70bd2c, 0x25dfdbfe, {0x7, r11}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x2, 0x0, {@ip4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x96dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r14, 0x0, 0x1, 0x1, {@ip4=@private=0xa010101, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x1, 0x1, 0x3, {@ip4=@multicast1, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x3, 0x1, {@in6_addr=@empty, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x2, 0x3, {@ip4=@private=0xa010102, 0x86dd}}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) getpeername(r7, &(0x7f0000000ec0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, &(0x7f0000000f40)=0x80) socket$nl_route(0x10, 0x3, 0x0) r15 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000fc0), r12) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000001140)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001100)={&(0x7f0000001000)={0xf8, r15, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x38}}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x4}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xdcd}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x23d}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}]}, 0xf8}, 0x1, 0x0, 0x0, 0x11}, 0x40) r16 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_inet6_SIOCSIFDSTADDR(r16, 0x8918, &(0x7f0000001180)={@remote, 0x5c, r2}) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, &(0x7f00000011c0), 0x4) 1.467388414s ago: executing program 3 (id=120): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x298, 0x0, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'wg2\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x60}, 0x0, 0xa8, 0xf0, 0x60030000, {0x0, 0xff000000}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x8}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff000000, 0xffffff00, 0xffffff00, 0xff], [0xff, 0xff, 0xffffffff, 0xff000000], 'ip6gre0\x00', '\x00', {0xff}, {}, 0x84, 0x2, 0x4}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x6, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffd075}, 0x94) (async) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f280080018000bac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, [], [], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x4, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x1, 0x0, &(0x7f0000000300)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.353658127s ago: executing program 4 (id=121): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d800000019000100000212ba0d8105040a600000ff0f040b067c55a1bc0009007d0006000000000015001500fe808178a80035fd00e4ff3f0200000901ac040000d67f6f94007100a007a290457f0189b316277ce06b9e9dfc487d5d32bace8017cbec4c2ee5a71602b2a10c11ce1b14d600741f795025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fec114c5d46a73290f9eaef6288b97192309a00000e000000000000000000000000000000000000000000000000000ab62800"/216, 0xd8}], 0x1}, 0xf0ff) 1.302344891s ago: executing program 1 (id=122): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$inet(0x2, 0x3, 0x3) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r2, &(0x7f0000000680)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="e5eceeef", 0x4}], 0x1}}], 0x2, 0x4040040) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000080)=@ethtool_stats}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000300)=ANY=[@ANYRESOCT=r4, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9100000000000b5090100000000009500000000000000b509000002000000639a04fe00000000b509000000000000c39a04fee1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.239768347s ago: executing program 2 (id=123): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$inet6_sctp(0xa, 0x4, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) (async) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SIOCGETSGCNT(r2, 0x89e1, 0x0) (async) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000340)=0x1c0000, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001900), r2) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001940)={0x19c, r4, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x20000003}, 0x8000) (async) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, 0x0, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) (async) sendmsg$inet(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, @loopback}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000400)='\b', 0x1}, {&(0x7f0000000040)="000000070020ac", 0x7}], 0x2}, 0x0) 1.131277931s ago: executing program 4 (id=124): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x25, 0x6, 0xe779) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08012c26d74a44d6f399bde7f417632fbbb97000ffdbdf25b3f612ddac081f000008000300050048000008510bb93040572ab9fa389b95ca0060c7f4b168c2d30fa293e5f1f46ad40400c507000014cc53000810140d29a784786f786899c4f34d9b50e6753e733614fcabb582c0e274c8e87e3ac23727cd135ac759203fd8f78475f765b0735ff924f69d"], 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r5, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000081c0)=@deltfilter={0x34, 0x2d, 0x1, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xa, 0x4}, {0x2, 0xffff}, {0xfff3, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x40890) syz_emit_ethernet(0x7f, &(0x7f00000000c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x49, 0x2f, 0x0, @private0, @mcast2, {[], {0x0, 0x883e, 0x49, 0x0, @opaque="1a60e2350a4f36e745d2d82fc69104a3d0238ec36469ccd09cf0fb460ae35b623d28c7a16736b31a9ddef1784507db1c6ccd93d3cb68d8e2c3dea92a0db5046f96"}}}}}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@delqdisc={0x1ac, 0x25, 0x400, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x8, 0xf}, {0x5, 0x1}, {0x9, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffff480}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9dbf}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_STAB={0x148, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x87, 0x101, 0xc7e, 0x1, 0xfffffffa, 0x480, 0x2}}, {0x8, 0x2, [0xff2c, 0xfffb]}}, {{0x1c, 0x1, {0x4, 0x5, 0x1, 0x6, 0x0, 0x2, 0x9}}, {0x4}}, {{0x1c, 0x1, {0x5, 0xfb, 0x7f, 0x4, 0x1, 0xd14, 0x9, 0x3}}, {0xa, 0x2, [0x0, 0x2, 0x8]}}, {{0x1c, 0x1, {0x4, 0xdb, 0x5, 0x9, 0x0, 0x1, 0x1, 0x2}}, {0x8, 0x2, [0xe, 0x7]}}, {{0x1c, 0x1, {0x4, 0x8, 0x1, 0x7b584c88, 0x0, 0x6, 0x0, 0x7}}, {0x12, 0x2, [0x35, 0x4, 0x5201, 0x9, 0xfff, 0x5, 0x8001]}}, {{0x1c, 0x1, {0x7, 0x7, 0x7, 0x6, 0x1, 0x27bc, 0x10000, 0xa}}, {0x18, 0x2, [0x8, 0xd, 0x1, 0x5, 0x5, 0xfff4, 0x1, 0xe, 0x4d, 0x7]}}, {{0x1c, 0x1, {0xb, 0x80, 0x3, 0x4, 0x2, 0xfffffff8, 0x8, 0x5}}, {0xe, 0x2, [0xf, 0x3, 0x5, 0x0, 0x7ff]}}, {{0x1c, 0x1, {0x6, 0xc9, 0xd4, 0x8, 0x3, 0x1, 0xd645, 0x2}}, {0x8, 0x2, [0x8a, 0x1ff]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_EGRESS_BLOCK={0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xd93e}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x44080}, 0x20040084) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x74, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r14, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xd, 0x1, 0x3, 0x1, 0x4, 0x401, 0xe, 0xfffffffa, [{0x200, 0x500, 0x3, 0xe}, {0x6783, 0x2, 0x8001, 0x10}, {0x40000, 0x53, 0xa9, 0x80000001}]}}]}}]}, 0x74}}, 0x20000000) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x3}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x2, 0x9, 0x6, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) ioctl$SIOCSIFHWADDR(r7, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @random="0100002010ff"}) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) write$tun(r15, &(0x7f0000000480)=ANY=[@ANYBLOB="00009a01aaaaaaaaaaaaaaaaaaaaaa1b88a8050081001d000600432e5db2012bf82c7134b19a769104c30648e024dafe4c34d453f07b00ce4cd8cc2f2e8ab84a03d4c2c40c22b2be59000000"], 0x3d) 1.01048105s ago: executing program 0 (id=125): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0xd8, 0xd8, 0xd8, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x3e020000, 0xb0, 0xd8, 0x3002, {0x88000000}, [@common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x2]}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@rand_addr=0x64010102, @private=0xa010101, 0xffffff00, 0xff000000, 'netpci0\x00', 'wlan1\x00', {0xff}, {}, 0x4, 0x0, 0x43}, 0x0, 0x98, 0xc0, 0x0, {0x122}, [@common=@ttl={{0x28}, {0x1, 0xe}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xd, 0x6, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xffffffff, 0xffffffff, 'batadv_slave_1\x00', 'veth1_to_batadv\x00', {0xff}, {}, 0x4, 0x2, 0x47}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 863.745185ms ago: executing program 1 (id=126): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) (async, rerun: 64) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000240), 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r3, 0x29, 0x5, 0x0, &(0x7f00000002c0)) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r1, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800060000000000080005"], 0xac}}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r4, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xff}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x8}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x31}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x3, {{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {}, 0x0, 0x200}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x4d6, 0x33}, 0xa, @in6=@private0, 0x3502, 0x3, 0x0, 0x5, 0x400, 0x1, 0x70}, {{@in=@loopback, 0x4d5, 0x32}, 0x2, @in=@multicast2, 0x3504, 0x3, 0x3, 0x2, 0x6, 0x0, 0x8}]}]}, 0x13c}}, 0x0) (async) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x98, 0x453, 0x100, 0x70bd2c, 0x25dfdbfe, "7f1508b836045b1f06fb63b4c1cb31b0dff0b630f159ce3f8e0838fc0f298ba389d900bc005bbb1780df1379e0a69ec556c153997ace12208e8124ca5261dc65cb74cbfa542cfacb69522973db38115d39e94c0193cb67580152ec6d98f82b2e72298a17db940ec54ae0fe6c046ac2c28542fbb0dc1d94eae3c23d7aeb33b626bf38f7febad64f3c", ["", ""]}, 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 863.130702ms ago: executing program 2 (id=127): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x12000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) 711.656883ms ago: executing program 3 (id=128): sendmsg$sock(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000100)="b31654f65e", 0x5}], 0x1}, 0x81) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000000001230000000000ff00000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) sendmsg$inet(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="60a3529b8a2a192e97c59d5dcda9a768b2d0e1ccb3925fc13d97a64c3490685e48bdb04a59cf2d06abfc29aa1051dceaf885def7a0b2402a5a65dde666842717c385bc0b02209daf8c2e026b816af06c074eae0e7cbbeca9c817e5a7fd23bc578bc5430af2ac5701677ee151bb754395f3c0391dd82e60c6142fff98a721b00a2446fc63a4a3833782616a375fbab5ed05efc6c273d5265f8299de8dfe7a28e72e0cf8cf560c82c62cb7379d798d44", 0xaf}, {&(0x7f0000000300)="ad7019adfb752d92fde7e42ff0fe88609fd6c1d5b62a9cbd106a2d94043063c6d8987a8c75b7b2f265f8019ad26c3a4c18d91dbc8795107a8e33bb53213b83cb36522d77b0ba2e6482a50753217e4cbd6b631bd0feb10d7f641c63709dc43f7316df7859164545b7c24f3fe982e057b367ee287f28d6b22d16ef396fcd1a4b3810a091a0c904890318fb05f592ac8aef2232", 0x92}, {&(0x7f00000003c0)="1a102b61b248d1e5c5b1f69aee2448e1b4d1c9925c54b47067168867f29f3d4ccff67fb216fc8731a3930769b6cff414f7d1624f8faa77739e4f9bee514b2b03edef13fea0f5b776368cf49864bacfc386623e210d1782fbcb872e9e4aca37ddc6706ee1bc3cef8bbe65094143d56457dc8b238d92332e1996c13ad934886560", 0x80}, {&(0x7f0000000280)="b9f2d3e51c4e02d3708ab38679e07e9b5e", 0x11}, {&(0x7f0000000440)="0d20da880f9e7994818ad29140bbf13bc1cd6ffea2939116514a788bd8a27e550a595ebc2b558b414f3d92ba315dfc36e5d369d673b16edfdc87c8a93cadfe0618f062b3744e3bcf7fb5b4815648e7ee10d1697a165271f89d279aeaf0484751e17b41b944ed864d72dfc7251445b5c763f7701b84894eab4fa15cb823a55ad9804568039225193d7679796e266006fc1d2237f7551b84fffe89669ccbe7a765e579604451c385fcfac0f3fa0c5fe187616b242e938e048b555e53cdfa65241cce39bb48ff9a84587f50b465aaa27708ef021a", 0xd3}], 0x5}, 0x40008d0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xffffffff000) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x8a, 0x61, 0x2}, {0x7, 0x0, 0x6, 0x5}]}) 589.610378ms ago: executing program 0 (id=129): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) bind$bt_hci(r0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00060010008188040f80ec59acbc0413a1f848190000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) write(r0, &(0x7f0000000000), 0x0) 524.002233ms ago: executing program 1 (id=130): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x20, r0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 470.286034ms ago: executing program 4 (id=131): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="020afc000700000028bd7000fedbdf2505001a0000000340000000000000000000000000640101000000100000000000000000002c003000"], 0x38}}, 0x40408c0) 381.416874ms ago: executing program 1 (id=132): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x609, 0x0, 0x6100, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x7}]}}}]}, 0x40}}, 0x0) 251.521265ms ago: executing program 0 (id=133): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r3) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r4, 0xbc914b49a8246e7, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x8003, @empty}}, 0x1e) r5 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f00000000c0)='\x00e\xa9f\x9e\xbbT}\x15\x91H\x93sW\x94\b\xa2\xf0Es&\xc7\xf8\x8c\xc8\xb1&\x12\xebS\x98\xf3C]A\xf5$\x1e\xf5g|a\xc0\r\x00\x00', 0xff1e) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f00000001c0)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) 251.06839ms ago: executing program 2 (id=134): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000005600)=""/49, 0xe93ae17f6c507ceb}], 0x39}, 0x40000102) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xd, &(0x7f0000000040), 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r4) sendmsg$NFC_CMD_ENABLE_SE(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000ffdbdf25110000000800150002000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x71eff8d2059dfe60}, 0xc004) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000500)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0xc000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r5, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x34}}, 0x400c040) setsockopt$inet_mreqn(r2, 0x0, 0x20, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="ec0767137af7e7d890debdedb6aba1a8b4ede604461087e87bc1e54d08a4c58d94481c59aaedb0d8e7dcf67b286f2eb812797a31410d9f1522c112a7fa390a471160d1c4d0832a4639", 0x49}, {&(0x7f0000000100)="4dea2e9fc630f1670cf70c207e43667030bf092497c42179b09807f9b234acd0e2", 0x21}], 0x2}}], 0x1, 0x8058) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}, 0xf, 'bridge_slave_1\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x30, r8, 0x4, 0x70bd26, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x5006, 0x1000, 0xd5, 0xf}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x490}, 0x20000800) r9 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@rand_addr, 0x0}, &(0x7f00000000c0)=0x14) connect$can_j1939(r9, &(0x7f00000001c0)={0x1d, r10, 0x1, {0x2, 0x0, 0x4}, 0x2}, 0x18) 172.547394ms ago: executing program 4 (id=135): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x8, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x24}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x27d3f) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x27d3f) r4 = socket(0xa, 0x3, 0x3a) getsockopt$nfc_llcp(r4, 0x3a, 0x0, 0x0, 0x20000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a38000000060a010e00000000000000000200ffff0900020073797a32000000000900010073797a30000000000c000640"], 0x60}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd29, 0x25dfdbfe, {{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x3, 0x0, 0x2, 0xfffffffffffffffd}, {0x0, 0x800, 0x6}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 131.092648ms ago: executing program 1 (id=136): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.stat\x00', 0x0, 0x0) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x10, 0x3f5, 0x800, 0x70bd2d, 0x25dfdbfd, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040894}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}, 0x500}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x2, 0x40010101, 0x0) (async) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) 0s ago: executing program 0 (id=137): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0xd, 0xffffffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@dellink={0x20, 0x11, 0x511, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x6c307, 0x18024}}, 0x20}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.141' (ED25519) to the list of known hosts. [ 73.286136][ T5817] cgroup: Unknown subsys name 'net' [ 73.459694][ T5817] cgroup: Unknown subsys name 'cpuset' [ 73.468115][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.919592][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.223103][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.242120][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.258255][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.259134][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.265962][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.274526][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.288092][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.288866][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.295840][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.310695][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.318640][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.320504][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.326912][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.335019][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.341107][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.348741][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.362237][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.369900][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.376153][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.444450][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.493059][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.502281][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.516991][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.525591][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.533958][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.108272][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 80.148343][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 80.177177][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 80.410492][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 80.463947][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.471252][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.479266][ T5831] bridge_slave_0: entered allmulticast mode [ 80.486250][ T5831] bridge_slave_0: entered promiscuous mode [ 80.499398][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.506579][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.513796][ T5827] bridge_slave_0: entered allmulticast mode [ 80.521042][ T5827] bridge_slave_0: entered promiscuous mode [ 80.545668][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.553515][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.561221][ T5831] bridge_slave_1: entered allmulticast mode [ 80.569374][ T5831] bridge_slave_1: entered promiscuous mode [ 80.599181][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.606319][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.614396][ T5827] bridge_slave_1: entered allmulticast mode [ 80.622030][ T5827] bridge_slave_1: entered promiscuous mode [ 80.629434][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.637585][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.644782][ T5828] bridge_slave_0: entered allmulticast mode [ 80.651743][ T5828] bridge_slave_0: entered promiscuous mode [ 80.664613][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.672001][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.679262][ T5828] bridge_slave_1: entered allmulticast mode [ 80.686114][ T5828] bridge_slave_1: entered promiscuous mode [ 80.723771][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 80.761519][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.784559][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.807880][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.832864][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.845173][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.893000][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.963530][ T5831] team0: Port device team_slave_0 added [ 80.986229][ T5827] team0: Port device team_slave_0 added [ 80.994214][ T5828] team0: Port device team_slave_0 added [ 81.001992][ T5831] team0: Port device team_slave_1 added [ 81.013543][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.020753][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.028177][ T5840] bridge_slave_0: entered allmulticast mode [ 81.035035][ T5840] bridge_slave_0: entered promiscuous mode [ 81.048578][ T5827] team0: Port device team_slave_1 added [ 81.057103][ T5828] team0: Port device team_slave_1 added [ 81.073486][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.080891][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.088140][ T5840] bridge_slave_1: entered allmulticast mode [ 81.094965][ T5840] bridge_slave_1: entered promiscuous mode [ 81.183149][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.190291][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.216308][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.240298][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.247705][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.274025][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.299594][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.306907][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.314049][ T5845] bridge_slave_0: entered allmulticast mode [ 81.321383][ T5845] bridge_slave_0: entered promiscuous mode [ 81.329320][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.336885][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.362828][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.374327][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.381602][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.407712][ T5839] Bluetooth: hci1: command tx timeout [ 81.407719][ T53] Bluetooth: hci0: command tx timeout [ 81.419463][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.431569][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.438669][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.464696][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.478580][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.488064][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.495216][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.496603][ T5839] Bluetooth: hci2: command tx timeout [ 81.502708][ T5845] bridge_slave_1: entered allmulticast mode [ 81.508195][ T53] Bluetooth: hci3: command tx timeout [ 81.515503][ T5845] bridge_slave_1: entered promiscuous mode [ 81.566574][ T53] Bluetooth: hci4: command tx timeout [ 81.574925][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.583378][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.609936][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.644047][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.679292][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.783928][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.857459][ T5840] team0: Port device team_slave_0 added [ 81.873741][ T5827] hsr_slave_0: entered promiscuous mode [ 81.881976][ T5827] hsr_slave_1: entered promiscuous mode [ 81.914573][ T5828] hsr_slave_0: entered promiscuous mode [ 81.921136][ T5828] hsr_slave_1: entered promiscuous mode [ 81.927688][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 81.933470][ T5828] Cannot create hsr debugfs directory [ 81.944743][ T5831] hsr_slave_0: entered promiscuous mode [ 81.951114][ T5831] hsr_slave_1: entered promiscuous mode [ 81.957842][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 81.963608][ T5831] Cannot create hsr debugfs directory [ 81.971040][ T5840] team0: Port device team_slave_1 added [ 82.002831][ T5845] team0: Port device team_slave_0 added [ 82.025943][ T5845] team0: Port device team_slave_1 added [ 82.064233][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.071427][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.097990][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.148399][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.155387][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.181677][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.208242][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.215208][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.241195][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.297819][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.304792][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.330758][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.454958][ T5840] hsr_slave_0: entered promiscuous mode [ 82.461671][ T5840] hsr_slave_1: entered promiscuous mode [ 82.468055][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 82.473835][ T5840] Cannot create hsr debugfs directory [ 82.568952][ T5845] hsr_slave_0: entered promiscuous mode [ 82.575878][ T5845] hsr_slave_1: entered promiscuous mode [ 82.582371][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 82.588148][ T5845] Cannot create hsr debugfs directory [ 82.859537][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.871265][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.899474][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.928211][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.003233][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.014308][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.041732][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.061953][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.109009][ T5827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.135731][ T5827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.147493][ T5827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.161265][ T5827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.242234][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.261768][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.288543][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.317861][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.450549][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.469239][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.481399][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.490255][ T53] Bluetooth: hci0: command tx timeout [ 83.496729][ T53] Bluetooth: hci1: command tx timeout [ 83.505735][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.543520][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.577330][ T53] Bluetooth: hci3: command tx timeout [ 83.578015][ T5839] Bluetooth: hci2: command tx timeout [ 83.614999][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.637048][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.644344][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.657035][ T5839] Bluetooth: hci4: command tx timeout [ 83.678340][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.685430][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.710807][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.737405][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.762500][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.792616][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.814646][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.825644][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.833057][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.843404][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.850531][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.878518][ T4318] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.885637][ T4318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.896073][ T4318] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.903180][ T4318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.002662][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.039676][ T1317] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.046795][ T1317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.068503][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.094155][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.101432][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.142748][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.262831][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.363381][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.411827][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.419042][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.493303][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.500665][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.781844][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.828377][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.901407][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.000459][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.073452][ T5828] veth0_vlan: entered promiscuous mode [ 85.154619][ T5828] veth1_vlan: entered promiscuous mode [ 85.162250][ T5831] veth0_vlan: entered promiscuous mode [ 85.233322][ T5831] veth1_vlan: entered promiscuous mode [ 85.257053][ T5840] veth0_vlan: entered promiscuous mode [ 85.278118][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.324300][ T5840] veth1_vlan: entered promiscuous mode [ 85.360757][ T5828] veth0_macvtap: entered promiscuous mode [ 85.399738][ T5831] veth0_macvtap: entered promiscuous mode [ 85.407221][ T5828] veth1_macvtap: entered promiscuous mode [ 85.448549][ T5831] veth1_macvtap: entered promiscuous mode [ 85.492442][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.511034][ T5827] veth0_vlan: entered promiscuous mode [ 85.523670][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.539735][ T5845] veth0_vlan: entered promiscuous mode [ 85.548030][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.561309][ T1317] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.571077][ T5839] Bluetooth: hci1: command tx timeout [ 85.571122][ T53] Bluetooth: hci0: command tx timeout [ 85.580475][ T1317] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.602282][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.611424][ T1317] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.620405][ T1317] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.647515][ T53] Bluetooth: hci3: command tx timeout [ 85.647554][ T5839] Bluetooth: hci2: command tx timeout [ 85.663838][ T5840] veth0_macvtap: entered promiscuous mode [ 85.674890][ T5845] veth1_vlan: entered promiscuous mode [ 85.681801][ T5827] veth1_vlan: entered promiscuous mode [ 85.700245][ T5840] veth1_macvtap: entered promiscuous mode [ 85.708990][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.718408][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.728576][ T5839] Bluetooth: hci4: command tx timeout [ 85.743401][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.752281][ T1109] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.836090][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.883492][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.910014][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.929121][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.946079][ T5827] veth0_macvtap: entered promiscuous mode [ 85.959031][ T3552] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.973070][ T3552] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.998553][ T3552] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.008960][ T3552] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.029009][ T5827] veth1_macvtap: entered promiscuous mode [ 86.044566][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.055641][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.055924][ T5845] veth0_macvtap: entered promiscuous mode [ 86.086034][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.107402][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.134807][ T5845] veth1_macvtap: entered promiscuous mode [ 86.184801][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.213011][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.224115][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.229115][ T3552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.247447][ T3552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.263164][ T1109] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.272431][ T1109] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.289122][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.305668][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.338246][ T3552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.346124][ T3552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.352229][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.420289][ T5948] netlink: 'syz.1.2': attribute type 33 has an invalid length. [ 86.429939][ T5947] netlink: 'syz.1.2': attribute type 33 has an invalid length. [ 86.502791][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.540121][ T5948] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 86.553361][ T5948] bond1 (unregistering): Released all slaves [ 86.585177][ T5947] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 86.597399][ T5947] bond1 (unregistering): Released all slaves [ 86.620646][ T856] cfg80211: failed to load regulatory.db [ 86.640169][ T1317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.652099][ T1317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.715739][ T3552] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.737592][ T3552] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.850468][ T3552] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.870859][ T3552] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.938546][ T1317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.970444][ T1317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.177811][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.206658][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.374350][ T1317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.418157][ T1317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.548636][ T3552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.575724][ T3552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.630458][ T5980] netlink: 'syz.2.11': attribute type 1 has an invalid length. [ 87.647714][ T5839] Bluetooth: hci1: command tx timeout [ 87.649163][ T53] Bluetooth: hci0: command tx timeout [ 87.680376][ T5989] netlink: 'syz.1.12': attribute type 19 has an invalid length. [ 87.729406][ T53] Bluetooth: hci3: command tx timeout [ 87.737106][ T53] Bluetooth: hci2: command tx timeout [ 87.746166][ T5990] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.810510][ T53] Bluetooth: hci4: command tx timeout [ 87.848917][ T5989] Zero length message leads to an empty skb [ 87.859773][ T5996] netlink: 81 bytes leftover after parsing attributes in process `syz.3.14'. [ 87.944942][ T5999] bond1: entered promiscuous mode [ 87.950512][ T5999] bond1: entered allmulticast mode [ 87.956300][ T5999] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.330477][ T6024] syz.1.17 uses obsolete (PF_INET,SOCK_PACKET) [ 88.361117][ T6021] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 88.395650][ T6029] 8021q: VLANs not supported on ip6gre0 [ 88.485086][ T6029] netlink: 14436 bytes leftover after parsing attributes in process `syz.2.20'. [ 88.495808][ T6029] openvswitch: netlink: Missing key (keys=40, expected=100) [ 88.692291][ T6036] syzkaller0: entered promiscuous mode [ 88.706875][ T6036] syzkaller0: entered allmulticast mode [ 89.068327][ T6058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25'. [ 89.116218][ T6058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25'. [ 89.158297][ T1109] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.187017][ T1109] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.211890][ T1109] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.237558][ T1317] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.297691][ T6063] netlink: 24 bytes leftover after parsing attributes in process `syz.2.29'. [ 89.766791][ T6082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.36'. [ 90.309343][ T6093] warning: `syz.3.42' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 90.986143][ T6118] netlink: 12 bytes leftover after parsing attributes in process `syz.4.51'. [ 91.125662][ T6110] syzkaller0: entered promiscuous mode [ 91.141676][ T6110] syzkaller0: entered allmulticast mode [ 92.011585][ T6159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.64'. [ 92.263752][ T6163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.65'. [ 92.839196][ T6166] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 93.270818][ T6187] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.722879][ T6202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.77'. [ 94.391105][ T6222] trusted_key: syz.3.86 sent an empty control message without MSG_MORE. [ 94.402649][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.86'. [ 94.411622][ T6222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.86'. [ 94.432989][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.86'. [ 94.433696][ T3552] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.511436][ T4318] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.532881][ T6222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.86'. [ 94.545511][ T4318] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.574546][ T4318] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.894315][ T6239] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 95.195467][ T6249] netlink: 76 bytes leftover after parsing attributes in process `syz.3.97'. [ 95.613222][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.104'. [ 95.720229][ T6271] netlink: 20 bytes leftover after parsing attributes in process `syz.0.104'. [ 95.870126][ T6278] tipc: Started in network mode [ 95.886535][ T6282] netlink: 12 bytes leftover after parsing attributes in process `syz.4.108'. [ 95.898532][ T6278] tipc: Node identity 4e0cab42f954, cluster identity 4711 [ 95.913470][ T6278] tipc: Enabled bearer , priority 0 [ 95.950665][ T6283] syzkaller0: entered promiscuous mode [ 95.966682][ T6283] syzkaller0: entered allmulticast mode [ 96.031126][ T6282] macvlan2: entered promiscuous mode [ 96.042599][ T6282] macvlan2: entered allmulticast mode [ 96.063331][ T6291] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 96.131136][ T6278] tipc: Resetting bearer [ 96.190795][ T6277] tipc: Resetting bearer [ 96.293661][ T6277] tipc: Disabling bearer [ 96.398837][ T6305] netlink: 248 bytes leftover after parsing attributes in process `syz.3.120'. [ 96.436018][ T6306] xt_hashlimit: size too large, truncated to 1048576 [ 97.060450][ T6326] Cannot find set identified by id 3 to match [ 97.218107][ T6335] macvlan2: entered promiscuous mode [ 97.258678][ T6335] macvlan2: entered allmulticast mode [ 97.792735][ T6359] ------------[ cut here ]------------ [ 97.798598][ T6359] WARNING: CPU: 0 PID: 6359 at net/ipv4/route.c:1270 ip_rt_bug+0x2c/0x110 [ 97.807329][ T6359] Modules linked in: [ 97.811965][ T6359] CPU: 0 UID: 0 PID: 6359 Comm: syz.4.135 Not tainted syzkaller #0 PREEMPT(full) [ 97.821420][ T6359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 97.831567][ T6359] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 97.836692][ T6359] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 3b dd 08 f8 66 90 e8 34 dd 08 f8 31 ff 48 89 de ba 02 00 00 00 e8 d5 0d 6f ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f e9 c1 9d 97 01 cc f3 0f [ 97.856673][ T6359] RSP: 0018:ffffc9001aa77180 EFLAGS: 00010286 [ 97.862802][ T6359] RAX: 8586dfd503b64200 RBX: ffff88805943f000 RCX: 8586dfd503b64200 [ 97.871077][ T6359] RDX: 0000000000000002 RSI: ffffffff8d7e847d RDI: ffffffff8bc077e0 [ 97.879220][ T6359] RBP: 0000000000000001 R08: ffffffff8f9e1477 R09: 1ffffffff1f3c28e [ 97.887384][ T6359] R10: dffffc0000000000 R11: fffffbfff1f3c28f R12: dffffc0000000000 [ 97.895401][ T6359] R13: dffffc0000000000 R14: ffff88805943f000 R15: ffff888145ed1e00 [ 97.903532][ T6359] FS: 00007f70d446a6c0(0000) GS:ffff888125d0c000(0000) knlGS:0000000000000000 [ 97.912579][ T6359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 97.919342][ T6359] CR2: 00007fe8a6dd5b4c CR3: 0000000031ec6000 CR4: 00000000003526f0 [ 97.927404][ T6359] Call Trace: [ 97.930731][ T6359] [ 97.933786][ T6359] ip_push_pending_frames+0xbe/0x150 [ 97.939175][ T6359] __icmp_send+0xfc3/0x1320 [ 97.943822][ T6359] ? __icmp_send+0x1b9/0x1320 [ 97.948640][ T6359] ? __pfx___icmp_send+0x10/0x10 [ 97.953735][ T6359] ? ip_route_input_noref+0x98/0x250 [ 97.959125][ T6359] ? __pfx_ip_route_input_noref+0x10/0x10 [ 97.964906][ T6359] ? tcp_v4_early_demux+0x4b3/0x9a0 [ 97.970214][ T6359] ip_options_compile+0x80/0xb0 [ 97.975107][ T6359] ip_rcv_finish_core+0xaa2/0x1c00 [ 97.980340][ T6359] ip_rcv_finish+0x14c/0x2f0 [ 97.984989][ T6359] NF_HOOK+0x30c/0x3a0 [ 97.989172][ T6359] ? __pfx_ip_rcv_finish+0x10/0x10 [ 97.994343][ T6359] ? NF_HOOK+0x9a/0x3a0 [ 97.998578][ T6359] ? __pfx_NF_HOOK+0x10/0x10 [ 98.003207][ T6359] ? ip_rcv_core+0x7f7/0xd00 [ 98.007904][ T6359] ? __pfx_ip_rcv_finish+0x10/0x10 [ 98.013087][ T6359] ? __pfx_ip_rcv+0x10/0x10 [ 98.017774][ T6359] __netif_receive_skb+0x143/0x380 [ 98.022944][ T6359] ? netif_receive_skb+0x115/0x790 [ 98.028175][ T6359] netif_receive_skb+0x1cb/0x790 [ 98.033155][ T6359] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 98.039039][ T6359] ? __pfx_netif_receive_skb+0x10/0x10 [ 98.044552][ T6359] ? tun_rx_batched+0x160/0x730 [ 98.049491][ T6359] tun_rx_batched+0x1b9/0x730 [ 98.054212][ T6359] ? __lock_acquire+0xab9/0xd20 [ 98.059134][ T6359] ? __pfx_tun_rx_batched+0x10/0x10 [ 98.064369][ T6359] ? tun_get_user+0x272f/0x3e90 [ 98.069316][ T6359] tun_get_user+0x2b65/0x3e90 [ 98.074040][ T6359] ? tun_get_user+0x6f6/0x3e90 [ 98.078923][ T6359] ? tun_get_user+0x272f/0x3e90 [ 98.083819][ T6359] ? aa_file_perm+0x44d/0x1550 [ 98.088670][ T6359] ? __pfx_tun_get_user+0x10/0x10 [ 98.093722][ T6359] ? __futex_wait+0x34a/0x3d0 [ 98.098510][ T6359] ? __pfx___futex_wait+0x10/0x10 [ 98.103589][ T6359] ? ref_tracker_alloc+0x318/0x460 [ 98.108792][ T6359] ? __lock_acquire+0xab9/0xd20 [ 98.113707][ T6359] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 98.119267][ T6359] ? tun_get+0x1c/0x2f0 [ 98.123472][ T6359] ? tun_get+0x1c/0x2f0 [ 98.127718][ T6359] ? tun_get+0x1c/0x2f0 [ 98.131936][ T6359] tun_chr_write_iter+0x113/0x200 [ 98.137073][ T6359] vfs_write+0x5c9/0xb30 [ 98.141378][ T6359] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 98.147022][ T6359] ? __pfx_vfs_write+0x10/0x10 [ 98.151839][ T6359] ? __fget_files+0x2a/0x420 [ 98.156539][ T6359] ksys_write+0x145/0x250 [ 98.160926][ T6359] ? __pfx_ksys_write+0x10/0x10 [ 98.165822][ T6359] ? do_syscall_64+0xbe/0xfa0 [ 98.168970][ T6358] ------------[ cut here ]------------ [ 98.170587][ T6359] do_syscall_64+0xfa/0xfa0 [ 98.176061][ T6358] WARNING: CPU: 1 PID: 6358 at net/ipv4/route.c:1270 ip_rt_bug+0x2c/0x110 [ 98.180570][ T6359] ? lockdep_hardirqs_on+0x9c/0x150 [ 98.180595][ T6359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.180615][ T6359] ? clear_bhb_loop+0x60/0xb0 [ 98.189141][ T6358] Modules linked in: [ 98.194371][ T6359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.200527][ T6358] CPU: 1 UID: 0 PID: 6358 Comm: syz.4.135 Not tainted syzkaller #0 PREEMPT(full) [ 98.205171][ T6359] RIP: 0033:0x7f70d358da7f [ 98.209086][ T6358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 98.214970][ T6359] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 98.224214][ T6358] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 98.228674][ T6359] RSP: 002b:00007f70d446a000 EFLAGS: 00000293 [ 98.238772][ T6358] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 3b dd 08 f8 66 90 e8 34 dd 08 f8 31 ff 48 89 de ba 02 00 00 00 e8 d5 0d 6f ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f e9 c1 9d 97 01 cc f3 0f [ 98.258408][ T6359] ORIG_RAX: 0000000000000001 [ 98.263335][ T6358] RSP: 0018:ffffc90019eb7180 EFLAGS: 00010286 [ 98.269412][ T6359] RAX: ffffffffffffffda RBX: 00007f70d37e6090 RCX: 00007f70d358da7f [ 98.289046][ T6358] [ 98.289057][ T6358] RAX: b742b107722fbf00 RBX: ffff88805859f500 RCX: b742b107722fbf00 [ 98.293716][ T6359] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 98.299805][ T6358] RDX: 0000000000000002 RSI: ffffffff8d7e847d RDI: ffffffff8bc077e0 [ 98.307795][ T6359] RBP: 00007f70d3611f91 R08: 0000000000000000 R09: 0000000000000000 [ 98.310120][ T6358] RBP: 0000000000000001 R08: ffffffff8f9e1477 R09: 1ffffffff1f3c28e [ 98.318124][ T6359] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000000 [ 98.326091][ T6358] R10: dffffc0000000000 R11: fffffbfff1f3c28f R12: dffffc0000000000 [ 98.334086][ T6359] R13: 00007f70d37e6128 R14: 00007f70d37e6090 R15: 00007fff294dd238 [ 98.342084][ T6358] R13: dffffc0000000000 R14: ffff88805859f500 R15: ffff888145ed2580 [ 98.350189][ T6359] [ 98.358165][ T6358] FS: 00007f70d448b6c0(0000) GS:ffff888125e0c000(0000) knlGS:0000000000000000 [ 98.366136][ T6359] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 98.366154][ T6359] CPU: 0 UID: 0 PID: 6359 Comm: syz.4.135 Not tainted syzkaller #0 PREEMPT(full) [ 98.366175][ T6359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 98.366186][ T6359] Call Trace: [ 98.366196][ T6359] [ 98.366204][ T6359] dump_stack_lvl+0x99/0x250 [ 98.366230][ T6359] ? __asan_memcpy+0x40/0x70 [ 98.366251][ T6359] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.366271][ T6359] ? __pfx__printk+0x10/0x10 [ 98.366303][ T6359] vpanic+0x237/0x6d0 [ 98.366329][ T6359] ? __pfx_vpanic+0x10/0x10 [ 98.366369][ T6359] panic+0xb9/0xc0 [ 98.366394][ T6359] ? __pfx_panic+0x10/0x10 [ 98.366434][ T6359] __warn+0x31b/0x4b0 [ 98.366457][ T6359] ? ip_rt_bug+0x2c/0x110 [ 98.366482][ T6359] ? ip_rt_bug+0x2c/0x110 [ 98.366504][ T6359] report_bug+0x2be/0x4f0 [ 98.366521][ T6359] ? ip_rt_bug+0x2c/0x110 [ 98.366543][ T6359] ? ip_rt_bug+0x2c/0x110 [ 98.366565][ T6359] ? ip_rt_bug+0x2e/0x110 [ 98.366586][ T6359] handle_bug+0x84/0x160 [ 98.366608][ T6359] exc_invalid_op+0x1a/0x50 [ 98.366630][ T6359] asm_exc_invalid_op+0x1a/0x20 [ 98.366647][ T6359] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 98.366670][ T6359] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 3b dd 08 f8 66 90 e8 34 dd 08 f8 31 ff 48 89 de ba 02 00 00 00 e8 d5 0d 6f ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f e9 c1 9d 97 01 cc f3 0f [ 98.366685][ T6359] RSP: 0018:ffffc9001aa77180 EFLAGS: 00010286 [ 98.366703][ T6359] RAX: 8586dfd503b64200 RBX: ffff88805943f000 RCX: 8586dfd503b64200 [ 98.366733][ T6359] RDX: 0000000000000002 RSI: ffffffff8d7e847d RDI: ffffffff8bc077e0 [ 98.366746][ T6359] RBP: 0000000000000001 R08: ffffffff8f9e1477 R09: 1ffffffff1f3c28e [ 98.366759][ T6359] R10: dffffc0000000000 R11: fffffbfff1f3c28f R12: dffffc0000000000 [ 98.366773][ T6359] R13: dffffc0000000000 R14: ffff88805943f000 R15: ffff888145ed1e00 [ 98.366808][ T6359] ip_push_pending_frames+0xbe/0x150 [ 98.366834][ T6359] __icmp_send+0xfc3/0x1320 [ 98.366871][ T6359] ? __icmp_send+0x1b9/0x1320 [ 98.366904][ T6359] ? __pfx___icmp_send+0x10/0x10 [ 98.366953][ T6359] ? ip_route_input_noref+0x98/0x250 [ 98.366989][ T6359] ? __pfx_ip_route_input_noref+0x10/0x10 [ 98.367017][ T6359] ? tcp_v4_early_demux+0x4b3/0x9a0 [ 98.367039][ T6359] ip_options_compile+0x80/0xb0 [ 98.367062][ T6359] ip_rcv_finish_core+0xaa2/0x1c00 [ 98.367101][ T6359] ip_rcv_finish+0x14c/0x2f0 [ 98.367131][ T6359] NF_HOOK+0x30c/0x3a0 [ 98.367159][ T6359] ? __pfx_ip_rcv_finish+0x10/0x10 [ 98.367185][ T6359] ? NF_HOOK+0x9a/0x3a0 [ 98.367209][ T6359] ? __pfx_NF_HOOK+0x10/0x10 [ 98.367232][ T6359] ? ip_rcv_core+0x7f7/0xd00 [ 98.367261][ T6359] ? __pfx_ip_rcv_finish+0x10/0x10 [ 98.367297][ T6359] ? __pfx_ip_rcv+0x10/0x10 [ 98.367321][ T6359] __netif_receive_skb+0x143/0x380 [ 98.367351][ T6359] ? netif_receive_skb+0x115/0x790 [ 98.367372][ T6359] netif_receive_skb+0x1cb/0x790 [ 98.367393][ T6359] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 98.367419][ T6359] ? __pfx_netif_receive_skb+0x10/0x10 [ 98.367447][ T6359] ? tun_rx_batched+0x160/0x730 [ 98.367472][ T6359] tun_rx_batched+0x1b9/0x730 [ 98.367494][ T6359] ? __lock_acquire+0xab9/0xd20 [ 98.367523][ T6359] ? __pfx_tun_rx_batched+0x10/0x10 [ 98.367549][ T6359] ? tun_get_user+0x272f/0x3e90 [ 98.367586][ T6359] tun_get_user+0x2b65/0x3e90 [ 98.367616][ T6359] ? tun_get_user+0x6f6/0x3e90 [ 98.367640][ T6359] ? tun_get_user+0x272f/0x3e90 [ 98.367666][ T6359] ? aa_file_perm+0x44d/0x1550 [ 98.367688][ T6359] ? __pfx_tun_get_user+0x10/0x10 [ 98.367707][ T6359] ? __futex_wait+0x34a/0x3d0 [ 98.367741][ T6359] ? __pfx___futex_wait+0x10/0x10 [ 98.367773][ T6359] ? ref_tracker_alloc+0x318/0x460 [ 98.367790][ T6359] ? __lock_acquire+0xab9/0xd20 [ 98.367815][ T6359] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 98.367840][ T6359] ? tun_get+0x1c/0x2f0 [ 98.367868][ T6359] ? tun_get+0x1c/0x2f0 [ 98.367889][ T6359] ? tun_get+0x1c/0x2f0 [ 98.367921][ T6359] tun_chr_write_iter+0x113/0x200 [ 98.367947][ T6359] vfs_write+0x5c9/0xb30 [ 98.367980][ T6359] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 98.368003][ T6359] ? __pfx_vfs_write+0x10/0x10 [ 98.368034][ T6359] ? __fget_files+0x2a/0x420 [ 98.368066][ T6359] ksys_write+0x145/0x250 [ 98.368089][ T6359] ? __pfx_ksys_write+0x10/0x10 [ 98.368113][ T6359] ? do_syscall_64+0xbe/0xfa0 [ 98.368135][ T6359] do_syscall_64+0xfa/0xfa0 [ 98.368153][ T6359] ? lockdep_hardirqs_on+0x9c/0x150 [ 98.368171][ T6359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.368189][ T6359] ? clear_bhb_loop+0x60/0xb0 [ 98.368212][ T6359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.368230][ T6359] RIP: 0033:0x7f70d358da7f [ 98.368247][ T6359] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 98.368262][ T6359] RSP: 002b:00007f70d446a000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 98.368280][ T6359] RAX: ffffffffffffffda RBX: 00007f70d37e6090 RCX: 00007f70d358da7f [ 98.368293][ T6359] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 98.368305][ T6359] RBP: 00007f70d3611f91 R08: 0000000000000000 R09: 0000000000000000 [ 98.368317][ T6359] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000000 [ 98.368328][ T6359] R13: 00007f70d37e6128 R14: 00007f70d37e6090 R15: 00007fff294dd238 [ 98.368360][ T6359] [ 98.374399][ T6359] Kernel Offset: disabled