last executing test programs: 2.992448806s ago: executing program 4 (id=254): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x459, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x4000000) 2.854410896s ago: executing program 4 (id=257): syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x1, 0x8, 0x28, 0x68, 0x0, 0x9, 0x21, 0x0, @rand_addr=0x64010100, @local, {[@generic={0x82, 0x2}]}}, {{0x4e21, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x2, "740e23", 0xd, '1\x00'}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x58, &(0x7f0000000380)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x54}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 2.492640451s ago: executing program 4 (id=263): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f00000002c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x2c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e24, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x3, 0x3}}}}, 0x3a) 2.447736736s ago: executing program 0 (id=264): socket$kcm(0xa, 0x3, 0x3a) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$unix(0x1, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000bc0)={@random="31e02b0eaf4e", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @empty, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x6}}}}}}, 0x0) 2.403436417s ago: executing program 2 (id=265): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x7d4165c9) listen(r2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r6 = socket$netlink(0x10, 0x3, 0x8000000004) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0x6}, 0x1c) writev(r6, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c100000000000000000", 0x57}], 0x1) 2.330646191s ago: executing program 3 (id=266): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xc}, {}, {0xfff1, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff2, 0xffe0}, {0x0, 0xfff1}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 2.173143396s ago: executing program 0 (id=267): socket$qrtr(0x2a, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, 0x0, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) sendmsg$kcm(r2, &(0x7f0000001400)={&(0x7f0000000b40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @empty}, 0x2, 0x3, 0x4, 0x1}}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000bc0)="11c4f7ea5989aedcae4b1df0b1c64938edc757b137f113d5b9a371898944653ff258d36e056d85cc2149afc6a4f97582c401c3abcfd0108dd8c90938cd6b7534aa9a7aecd610704d3ec068aeb67ce8bf183562ff906f60e383c2fa7ffca0a12cf10894ca20a7dcb4d66a5d0ac5c0f6d7d2b6d2dd3e06064e056066634a053ffcf909b6f327b661ddcc5e4e66a8e87ce37668c9cbb50d39a70d5984c5c1f035d6273e133004d84fb03be48a8fc95964a0c58ef1a6642648d159531c5215f9d146e4103c05b5405bac7f17038c23bccf6e32", 0xd1}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"/398], 0x160}, 0x4044000) 2.145208308s ago: executing program 2 (id=268): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "ad2300", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "2200000003c35360"}, 0x28) syz_genetlink_get_family_id$fou(&(0x7f00000005c0), r0) 2.028800201s ago: executing program 4 (id=269): setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004) 1.950275111s ago: executing program 0 (id=270): socket$unix(0x1, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 1.901902269s ago: executing program 2 (id=271): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4084) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 1.783748582s ago: executing program 3 (id=272): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(r9) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 1.489770134s ago: executing program 4 (id=273): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1092, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd70027100c1582c00000018000180140002006970766c616e3100"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) 1.351688731s ago: executing program 0 (id=274): bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x1) write$cgroup_int(r0, &(0x7f0000000000), 0x12) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10, 0x0}, 0x300440f1) sendfile(r2, r1, 0x0, 0xfffc0003) 1.206087834s ago: executing program 1 (id=275): r0 = socket$pppoe(0x18, 0x1, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'ip_vti0\x00'}}, 0x1e) 1.081069337s ago: executing program 0 (id=276): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000440)={@val={0x0, 0x884c}, @void, @eth={@empty, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x2, 0x10, 0x40, 0x67, 0x0, 0x9, 0x6, 0x0, @multicast2, @broadcast}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x2, 0x2, 0x3, 0x0, 0x0, 0x7, 0x4, 0x1, 0x7ff, 0x8616, 0x2, 0x4e22, 0x4e24}, 0x1, 0x4}, 0x4, 0x3}, 0x1}}}}}}}}, 0x5a) 1.031855981s ago: executing program 1 (id=277): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000340)={0x0, 0xfffe}, 0x8) 895.566935ms ago: executing program 1 (id=278): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x7d4165c9) listen(r2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r6 = socket$netlink(0x10, 0x3, 0x8000000004) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0x6}, 0x1c) writev(r6, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c100000000000000000", 0x57}], 0x1) 749.134858ms ago: executing program 3 (id=279): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000240)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x3, 'sed\x00', 0x1, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x10}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x10048, 0xcd, 0x48}}, 0x44) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @local, 0x4e21, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0x1bd, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 748.475233ms ago: executing program 1 (id=280): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x0, @void}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0xd94, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xd5e, 0x0, 0x0, @private2, @mcast2, {[@routing={0x84}], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386cfcb927dd1a935fa717fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b65a34b9be83df2064391fc5a8d169dc1943d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69f6ffc1ae2e1f54655534d884c2f8f60303da33ccbe47a293643edb61c7d9fad4e3e54028bc64be8e5b1da53446869b136660b8e96ff96c48641ece275967b27b291c5c240b3399b5b901b699227735f821938bc88ded45bada2b257b1a4bcab7ed6647f2027e5680c87329e9cfdba6bde2f2a9b676be016001702bebbabb2eae3eba01d6f49ab70245a4c5ef0e136b531e1843487b3f69c5b811217d6d2f5e71b47f40c28117bd09a88bb21887a06e2cc164d4281d0df47cbd5781f1524098d89ccae32f24c5f9d86469106685fdc683ad5e873030b621dc00354e0621106da90aca69bb53848dd57251a45bc1898aca9bc84c9a8d2f8aabeed888560771c8cb03aab02620430fec8e9740880790060ccbffd5b8edaa219ca61587eff1b1b03ae8af53059f121efdec8b3ee8aba06f494a5b4575bc848d5a9773d2346f75811cb82a078fc960c9bd374555d78b1b4ba0b438ef00e8aa75810ca5efc5c70936e2cb0e515912cb7f625a2130a9ad58f29e58ae6eac5c3f15f22f0163ee6dead6947c4390b92c8dfb146fec7bfc0b37e8ff2c9de90c30f2d8b5e334107f9835bc47fbc193c60ebd5ac4e677c7fd5b6261ff96e97c185c726ec02941bc2336946f181fd2aff43f0e95f06105a049fcb8e4e3738407d6356856f533f17fae281a3be9f2050ae3d19d1b8350d424087ac9b7875824a9b7e098775b53d6ec960fc052ecd165d17a7897de75f15316a072bb9ccf6ce1ec085bb5356c271b985a437a32f12308fc927410fd444bcded9859e7b8a3cfaaf29ebfb92cc7cbfad2559bbe4f90e189e8708e93827b221869cc78fa41fd5bcb6577b7dfe4c3927dc25a58aa84419f76e71d1f3c10cbb5e52ab2bebe0d39bdffda0fa1b55fe3a03683f882a82dd58498d62b101acd710fd436aa7409fe3cf5352dffb399d560323e14d564bdb3121b89c1f43fc9a892b799cd32f7ce2ededb868920b4547735ef0bf3e148251a4f65dddb7f96b2f33734522a8cffdc51520ac98926b3406e96618cf15a042a67239e755afc70ec6a9c99f8e08ec2946e5901364d85223a63d49572519137d93b6b0798e72acf9da120e706ee73367dec1450a68def886c149bcd734469e10b933899501011cd548e99d638821d5709fde050ab382d4896ecfd7999d40ea9c690c26d396545224c8f9e19705593df2688eb592e2476a0193f7054ab6f703d41c545a80bf285bbc7cc735bd306c9ea5eb64f40752fd4c741d9b6e03cd41b636ef8f5e810047a21c0b24c6fde1f2e98f2f27730c90d93af9e7564e4e209a61ff626b666fcc4f75f7d560da688169ff0af5e674a0b89a99fb54bb438a65f953c2db0faec2ce09cec33b6d25620b5a0393ac473fed48a38beaca5223997419876d571ce969b83b5b3ae54de83dd89fd92ed2a93c087828bef49a24ed1a97778c47fdc691a94fd5b437dfe494b5c6fadf499d9d15583b0439d3d5ecb61a32a2508a6960be6009accfd1d5d75a16dbc4121c6ef07bda12646792449c18a56e7aa3893f3f0e55a8e09ca64193dd29ea24ed8614ee8e717f046dd99a8e3750506655331125a502aa89c0d7e8e30c36a4be22cd911322695144d3bf034f38ef32d49431d50da583d08a3e4c5862483cdd52d031b12c89fdaafc3334e877e464134baece883d301193a9c27311a987d4dae82a061f48182cc747cd64441e88b68e26e4975f0fdde3129a9e6af80009962581d5349676df9c73b81514b175709d9193749660f480bd4009b528c1db4f76f42b6a175126603c39a374e890f871c97b2eebb4500451d827cc15497dc5ae89edc6f47f25db7efa4b4b2afbbb2ee543e3db8d20fe93faf300247f59075921e8b2f2a025af8a1d46f274e0c6cb4be0293c7c16c88e98d7d189e9733e4c0e3b96be4aa3fa6ecf42732e0b1432d38aeaf2330d92713cd5580ce42bfe47fb98fea64783de23f456300dd193008211a5ba408d32dedbf12aa8237a6e1a2c9890a2c1011855241fea186906a5139d1c300be57dc7ff493de80010520d10fc3eda0ee9cd413e075d3dc02258fdab567a16e43edbeecc366a69d8d75512f43a2b79cbb9132cdcd00c531730d05f1eabf66613d6e7ebb8c4c3f4f7efd415d41049786352808b22a3bde40121968af39c8f00296001662adc72b7963c8bafab4a496b50f3237a29d19ad4a51a62b1c77a04c14004734189cf7ec49e3d041a1e5658d080f09df77f39782e7133968c1f39ab3ae2a5f24a60073288f3c5825dafd614a379b8b905aaf961caa14ffa38de0d632918d31e4a9291b0f0789248e232e4276840a1ed0257300e522d83111dffd424b1b33148981e3794b2b649ba9174e6697bcc96049f4f3dcc7cf4ca97e2006ec8a146014bb49184632e4fb159a34b6530e959e60a6b4e0427cc697f14cfe6bb7a662a6f5012744f3cf2307abc19c58449864d98fcfebc5d598cd32a1c38c207896468fe8da75eb1edb1d6e7cb1eab671e4e92f139c81d79f15df2a2dc075acc982dec769e2f49aad0fdf594cb590e054616e4f4582b6c4a149ae45d844903ef68d211df2a180178e178b7c7a5012ccf8a1e677586588620365e6111f5192ecfdbd97e2284128de02e08ebc13d4bb4d114faa1e6c16c51c12da2c52d68f73640ce866ce4e794b9fafdc392c91c1f824bc301b30"}}}}}, 0x0) 621.514151ms ago: executing program 2 (id=281): socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 587.00971ms ago: executing program 3 (id=282): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000980)={0x1f, 0x1}, 0x6) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, &(0x7f0000000040)=0xffffff01, 0x4) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xffffffff000) 586.16258ms ago: executing program 4 (id=283): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f0000000440)="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", 0xfc) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @multicast1}}) 402.822475ms ago: executing program 3 (id=284): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x9) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r2, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) readv(r0, &(0x7f0000000e00)=[{&(0x7f00000005c0)=""/153, 0x99}, {0x0}], 0x2) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 401.496586ms ago: executing program 2 (id=285): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @remote}, 0x14) sendmmsg$sock(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x1000000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4c}}], 0x6}}], 0x4000114, 0x40500f0) 294.965175ms ago: executing program 1 (id=286): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000080)=0x221086, 0x4) 70.88822ms ago: executing program 2 (id=287): sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x4c, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "31329eae551326051c0ecba1df0ef9cc9415b343831f26fe"}]]}, 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x32752275d7d1e3ca, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006"], 0x0, 0x349, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @random="bdbd67c12945"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 1.935602ms ago: executing program 0 (id=288): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xffff}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 1.667311ms ago: executing program 1 (id=289): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r0, 0x0, 0xfffffffc, 0xf) 0s ago: executing program 3 (id=290): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4084) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r7, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r6, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.190' (ED25519) to the list of known hosts. [ 72.509079][ T5807] cgroup: Unknown subsys name 'net' [ 72.599000][ T5807] cgroup: Unknown subsys name 'cpuset' [ 72.608605][ T5807] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.031395][ T5807] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.004857][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.017625][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.025590][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.042952][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.054761][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.062140][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.063008][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.083983][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.091946][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.092618][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.106591][ T5822] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.117106][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.117635][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.131479][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.132217][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.148849][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.149097][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.163655][ T5822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.165732][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.173721][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.186309][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.201218][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.212804][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.222890][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.231004][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.638362][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 76.884285][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.892579][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.900557][ T5819] bridge_slave_0: entered allmulticast mode [ 76.910459][ T5819] bridge_slave_0: entered promiscuous mode [ 76.942066][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.949647][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.956935][ T5819] bridge_slave_1: entered allmulticast mode [ 76.964319][ T5819] bridge_slave_1: entered promiscuous mode [ 76.972409][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 76.993242][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 77.026207][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 77.091425][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.104838][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.199809][ T5819] team0: Port device team_slave_0 added [ 77.215939][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 77.234076][ T5819] team0: Port device team_slave_1 added [ 77.338284][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.345493][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.352721][ T5829] bridge_slave_0: entered allmulticast mode [ 77.359693][ T5829] bridge_slave_0: entered promiscuous mode [ 77.369227][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.376345][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.402765][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.414516][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.421878][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.429320][ T5820] bridge_slave_0: entered allmulticast mode [ 77.436593][ T5820] bridge_slave_0: entered promiscuous mode [ 77.457462][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.464650][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.472133][ T5829] bridge_slave_1: entered allmulticast mode [ 77.479410][ T5829] bridge_slave_1: entered promiscuous mode [ 77.487823][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.494888][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.520920][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.532636][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.539895][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.547932][ T5820] bridge_slave_1: entered allmulticast mode [ 77.554944][ T5820] bridge_slave_1: entered promiscuous mode [ 77.561889][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.569128][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.576405][ T5821] bridge_slave_0: entered allmulticast mode [ 77.583393][ T5821] bridge_slave_0: entered promiscuous mode [ 77.636991][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.644112][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.651981][ T5821] bridge_slave_1: entered allmulticast mode [ 77.659478][ T5821] bridge_slave_1: entered promiscuous mode [ 77.689104][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.700965][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.729144][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.736807][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.744015][ T5824] bridge_slave_0: entered allmulticast mode [ 77.751261][ T5824] bridge_slave_0: entered promiscuous mode [ 77.760508][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.771740][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.798311][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.805574][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.813068][ T5824] bridge_slave_1: entered allmulticast mode [ 77.824713][ T5824] bridge_slave_1: entered promiscuous mode [ 77.851036][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.862352][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.925423][ T5819] hsr_slave_0: entered promiscuous mode [ 77.931878][ T5819] hsr_slave_1: entered promiscuous mode [ 77.948542][ T5829] team0: Port device team_slave_0 added [ 77.956416][ T5820] team0: Port device team_slave_0 added [ 77.975415][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.987072][ T5829] team0: Port device team_slave_1 added [ 77.994459][ T5820] team0: Port device team_slave_1 added [ 78.002178][ T5821] team0: Port device team_slave_0 added [ 78.009951][ T5821] team0: Port device team_slave_1 added [ 78.026244][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.121031][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.128178][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.155264][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.167150][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.174165][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.200292][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.212238][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.216721][ T5837] Bluetooth: hci1: command tx timeout [ 78.220034][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.225623][ T5834] Bluetooth: hci0: command tx timeout [ 78.251743][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.276481][ T5824] team0: Port device team_slave_0 added [ 78.284312][ T5824] team0: Port device team_slave_1 added [ 78.290877][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.298674][ T5834] Bluetooth: hci3: command tx timeout [ 78.298749][ T5837] Bluetooth: hci2: command tx timeout [ 78.304764][ T5828] Bluetooth: hci4: command tx timeout [ 78.310295][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.342260][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.354097][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.361084][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.387148][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.398704][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.405809][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.431775][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.493208][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.500239][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.526417][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.539046][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.546586][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.572685][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.709813][ T5820] hsr_slave_0: entered promiscuous mode [ 78.716302][ T5820] hsr_slave_1: entered promiscuous mode [ 78.722303][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 78.728474][ T5820] Cannot create hsr debugfs directory [ 78.738958][ T5821] hsr_slave_0: entered promiscuous mode [ 78.745171][ T5821] hsr_slave_1: entered promiscuous mode [ 78.751474][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 78.757410][ T5821] Cannot create hsr debugfs directory [ 78.767928][ T5829] hsr_slave_0: entered promiscuous mode [ 78.774148][ T5829] hsr_slave_1: entered promiscuous mode [ 78.780477][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 78.786326][ T5829] Cannot create hsr debugfs directory [ 78.807374][ T5824] hsr_slave_0: entered promiscuous mode [ 78.813601][ T5824] hsr_slave_1: entered promiscuous mode [ 78.819941][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 78.825679][ T5824] Cannot create hsr debugfs directory [ 79.199711][ T5819] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.212081][ T5819] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.248790][ T5819] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.260270][ T5819] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.284404][ T5819] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.293809][ T5819] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.301618][ T5819] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.311276][ T5819] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.388935][ T5820] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.401127][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.423472][ T5820] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.432817][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.441529][ T5820] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.450639][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.471931][ T5820] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.481260][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.540639][ T5824] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.549595][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.557840][ T5824] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.568676][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.577888][ T5824] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.589226][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.603106][ T5824] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.612999][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.700832][ T5821] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.710810][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.719244][ T5821] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.730153][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.747935][ T5821] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.759085][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.767211][ T5821] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.776300][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.850990][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.892999][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.904815][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.913168][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.922659][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.937144][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.947877][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.962810][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.974498][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.984955][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.025361][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.033035][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.057983][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.065112][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.102313][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.167904][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.188496][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.237210][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.244402][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.255034][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.282910][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.294089][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.301323][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.309301][ T5828] Bluetooth: hci1: command tx timeout [ 80.313041][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.314831][ T5834] Bluetooth: hci0: command tx timeout [ 80.321959][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.349712][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.357027][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.377940][ T5834] Bluetooth: hci2: command tx timeout [ 80.384147][ T5828] Bluetooth: hci3: command tx timeout [ 80.384158][ T5837] Bluetooth: hci4: command tx timeout [ 80.428674][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.444768][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.451927][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.474270][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.530631][ T991] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.537826][ T991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.588819][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.634191][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.641378][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.671479][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.678745][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.708320][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.976300][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.210548][ T5824] veth0_vlan: entered promiscuous mode [ 81.258727][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.294785][ T5824] veth1_vlan: entered promiscuous mode [ 81.362407][ T5824] veth0_macvtap: entered promiscuous mode [ 81.372924][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.393508][ T5824] veth1_macvtap: entered promiscuous mode [ 81.407016][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.441134][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.466131][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.492881][ T5819] veth0_vlan: entered promiscuous mode [ 81.524896][ T1141] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.534747][ T1141] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.559223][ T1141] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.569374][ T1141] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.589336][ T5819] veth1_vlan: entered promiscuous mode [ 81.606426][ T5820] veth0_vlan: entered promiscuous mode [ 81.671781][ T5821] veth0_vlan: entered promiscuous mode [ 81.697516][ T5820] veth1_vlan: entered promiscuous mode [ 81.711225][ T5829] veth0_vlan: entered promiscuous mode [ 81.724290][ T5821] veth1_vlan: entered promiscuous mode [ 81.743907][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.762002][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.783375][ T5829] veth1_vlan: entered promiscuous mode [ 81.838584][ T5819] veth0_macvtap: entered promiscuous mode [ 81.848593][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.857497][ T5820] veth0_macvtap: entered promiscuous mode [ 81.864833][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.874715][ T5819] veth1_macvtap: entered promiscuous mode [ 81.894790][ T5821] veth0_macvtap: entered promiscuous mode [ 81.910112][ T5820] veth1_macvtap: entered promiscuous mode [ 81.927826][ T5821] veth1_macvtap: entered promiscuous mode [ 81.980005][ T5829] veth0_macvtap: entered promiscuous mode [ 81.992866][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.005209][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.033233][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.049136][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.059755][ T5829] veth1_macvtap: entered promiscuous mode [ 82.078950][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.106987][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.141826][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.153969][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.164905][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.184717][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.194708][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.219901][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.228992][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.252133][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.261548][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.273403][ T5940] syzkaller0: entered promiscuous mode [ 82.279970][ T5940] syzkaller0: entered allmulticast mode [ 82.288140][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.315094][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.324607][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.353289][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.368868][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.386320][ T5828] Bluetooth: hci0: command tx timeout [ 82.392151][ T5834] Bluetooth: hci1: command tx timeout [ 82.406895][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.432624][ T5943] Zero length message leads to an empty skb [ 82.458712][ T5828] Bluetooth: hci4: command tx timeout [ 82.464594][ T5834] Bluetooth: hci3: command tx timeout [ 82.464612][ T5837] Bluetooth: hci2: command tx timeout [ 82.528190][ T1037] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.542800][ T1037] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.573017][ T1037] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.596645][ T1037] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.633406][ T1037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.655558][ T1037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.738305][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.750797][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.777896][ T1037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.790431][ T1037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.844604][ T1037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.854020][ T1037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.934625][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.969882][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.998541][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.011874][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.101441][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.106952][ T1037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.112036][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.119545][ T1037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.127103][ T5953] syzkaller0: entered promiscuous mode [ 83.146836][ T5953] syzkaller0: entered allmulticast mode [ 83.311861][ T5957] TC_ACT_REPEAT abuse ? [ 83.634360][ T5966] syzkaller0: entered promiscuous mode [ 83.640762][ T5966] syzkaller0: entered allmulticast mode [ 83.650090][ T5972] syzkaller0: entered promiscuous mode [ 83.667451][ T5972] syzkaller0: entered allmulticast mode [ 83.767885][ T5976] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13'. [ 84.183140][ T5988] netlink: 1024 bytes leftover after parsing attributes in process `syz.4.16'. [ 84.457975][ T5828] Bluetooth: hci1: command tx timeout [ 84.460888][ T5837] Bluetooth: hci0: command tx timeout [ 84.537536][ T5837] Bluetooth: hci2: command tx timeout [ 84.537586][ T5834] Bluetooth: hci3: command tx timeout [ 84.548424][ T5828] Bluetooth: hci4: command tx timeout [ 84.861409][ T5981] warning: `syz.3.13' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 85.545143][ T6008] syzkaller0: entered promiscuous mode [ 85.569265][ T6008] syzkaller0: entered allmulticast mode [ 85.602419][ T6008] 0: reclassify loop, rule prio 0, protocol 800 [ 85.748495][ T6014] syzkaller0: entered promiscuous mode [ 85.772631][ T6014] syzkaller0: entered allmulticast mode [ 85.899952][ T5998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21'. [ 86.213488][ T6032] syzkaller0: entered promiscuous mode [ 86.237584][ T6032] syzkaller0: entered allmulticast mode [ 86.485979][ T6020] syz.4.28 uses obsolete (PF_INET,SOCK_PACKET) [ 86.715451][ T6026] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 86.799347][ T24] cfg80211: failed to load regulatory.db [ 87.952103][ T6094] Cannot find set identified by id 0 to match [ 88.124785][ T6107] netlink: 104 bytes leftover after parsing attributes in process `syz.4.57'. [ 89.001033][ T6124] Cannot find del_set index 1 as target [ 91.489033][ T6214] syzkaller0: entered promiscuous mode [ 91.509153][ T6214] syzkaller0: entered allmulticast mode [ 91.760057][ T6221] netlink: 'syz.1.111': attribute type 2 has an invalid length. [ 91.768645][ T6221] tipc: Started in network mode [ 91.774916][ T6221] tipc: Node identity 1340008, cluster identity 4711 [ 91.782465][ T6221] tipc: Node number set to 20185096 [ 91.940088][ T6224] syzkaller0: entered promiscuous mode [ 91.958366][ T6224] syzkaller0: entered allmulticast mode [ 92.002248][ T6224] tc action pedit 'at' offset 257 out of bounds [ 92.234756][ T6233] netlink: 20 bytes leftover after parsing attributes in process `syz.4.115'. [ 92.608600][ T6249] syzkaller0: entered promiscuous mode [ 92.618753][ T6249] syzkaller0: entered allmulticast mode [ 92.834228][ T6075] Set syz1 is full, maxelem 65536 reached [ 92.943767][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.980550][ T6262] syzkaller0: entered promiscuous mode [ 92.993705][ T6262] syzkaller0: entered allmulticast mode [ 93.009506][ T6264] netlink: 56 bytes leftover after parsing attributes in process `syz.3.129'. [ 93.181162][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.285684][ T794] IPVS: starting estimator thread 0... [ 93.296809][ T6272] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 93.418777][ T6276] IPVS: using max 32 ests per chain, 76800 per kthread [ 93.461927][ T6282] syzkaller0: entered promiscuous mode [ 93.477402][ T6282] syzkaller0: entered allmulticast mode [ 93.493455][ T6280] syzkaller0: entered promiscuous mode [ 93.509588][ T6280] syzkaller0: entered allmulticast mode [ 93.568978][ T6280] TC_ACT_REPEAT abuse ? [ 93.819713][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.898023][ T6305] syzkaller0: entered promiscuous mode [ 93.914626][ T6305] syzkaller0: entered allmulticast mode [ 93.989316][ T794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.053492][ T6314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.149'. [ 94.166429][ T6321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.176865][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.296868][ T6324] syzkaller0: entered promiscuous mode [ 94.317952][ T6324] syzkaller0: entered allmulticast mode [ 94.930847][ T6351] openvswitch: netlink: Multiple metadata blocks provided [ 94.952985][ T6350] syzkaller0: entered promiscuous mode [ 94.973690][ T6350] syzkaller0: entered allmulticast mode [ 95.250489][ T6367] syzkaller0: entered promiscuous mode [ 95.280751][ T6367] syzkaller0: entered allmulticast mode [ 95.954101][ T6408] syzkaller0: entered promiscuous mode [ 95.965528][ T6408] syzkaller0: entered allmulticast mode [ 96.184053][ T6420] nbd: must specify at least one socket [ 96.407605][ T6424] syzkaller0: entered promiscuous mode [ 96.420143][ T6424] syzkaller0: entered allmulticast mode [ 96.683679][ T6441] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 96.885264][ T6451] syzkaller0: entered promiscuous mode [ 96.896435][ T6451] syzkaller0: entered allmulticast mode [ 97.186139][ T6470] netlink: 'syz.4.199': attribute type 1 has an invalid length. [ 97.505615][ T6474] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 97.517702][ T6474] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 97.616764][ T6487] syzkaller0: entered promiscuous mode [ 97.622469][ T6487] syzkaller0: entered allmulticast mode [ 98.084799][ T6503] syzkaller0: entered promiscuous mode [ 98.092289][ T6503] syzkaller0: entered allmulticast mode [ 98.137621][ T24] net_ratelimit: 6 callbacks suppressed [ 98.137638][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.528041][ T6521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.210'. [ 98.562493][ T6521] ipvlan2: entered allmulticast mode [ 98.571281][ T6521] syz_tun: entered allmulticast mode [ 98.776925][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.176666][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.562902][ T6558] syzkaller0: entered promiscuous mode [ 99.568554][ T6558] syzkaller0: entered allmulticast mode [ 99.745177][ T6457] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 100.216901][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.382434][ T6587] xt_hashlimit: size too large, truncated to 1048576 [ 101.085102][ T6595] syzkaller0: entered promiscuous mode [ 101.130639][ T6595] syzkaller0: entered allmulticast mode [ 101.274730][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.459912][ T6631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.244'. [ 101.702194][ T6638] netlink: 24 bytes leftover after parsing attributes in process `syz.2.248'. [ 101.719778][ T6639] netlink: 'syz.4.247': attribute type 1 has an invalid length. [ 101.789835][ T6639] bond1: entered promiscuous mode [ 101.795258][ T6639] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.810631][ T6645] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 101.823794][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.835020][ T6645] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 101.855935][ T6645] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 101.902951][ T6638] netlink: 32 bytes leftover after parsing attributes in process `syz.2.248'. [ 102.070958][ T6654] syzkaller0: entered promiscuous mode [ 102.082779][ T6654] syzkaller0: entered allmulticast mode [ 102.297288][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.393091][ T6667] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 102.473232][ T6670] netlink: 28 bytes leftover after parsing attributes in process `syz.3.261'. [ 102.638191][ T6678] syzkaller1: entered promiscuous mode [ 102.675053][ T6678] syzkaller1: entered allmulticast mode [ 103.336988][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.360743][ T6699] mpoa:mpoad_close: () going down [ 103.470279][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.539254][ T6712] syzkaller0: entered promiscuous mode [ 103.553343][ T6712] syzkaller0: entered allmulticast mode [ 104.115027][ T6744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.276'. [ 104.361458][ T5899] IPVS: starting estimator thread 0... [ 104.376476][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.384661][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.476841][ T6753] IPVS: using max 28 ests per chain, 67200 per kthread [ 104.559428][ T6758] netlink: 'syz.4.283': attribute type 12 has an invalid length. [ 104.662178][ T6765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.687381][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.770146][ T6765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.791335][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.809946][ T6765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.818641][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.216423][ T42] ================================================================== [ 105.224549][ T42] BUG: KASAN: slab-use-after-free in sock_def_readable+0x1cb/0x550 [ 105.232509][ T42] Read of size 8 at addr ffff88807751c8c0 by task kworker/1:1/42 [ 105.240326][ T42] [ 105.242676][ T42] CPU: 1 UID: 0 PID: 42 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 105.242695][ T42] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 105.242706][ T42] Workqueue: mld mld_ifc_work [ 105.242735][ T42] Call Trace: [ 105.242744][ T42] [ 105.242751][ T42] dump_stack_lvl+0xe8/0x150 [ 105.242772][ T42] print_report+0xba/0x230 [ 105.242789][ T42] ? sock_def_readable+0x1cb/0x550 [ 105.242805][ T42] kasan_report+0x117/0x150 [ 105.242820][ T42] ? sock_def_readable+0x1cb/0x550 [ 105.242837][ T42] sock_def_readable+0x1cb/0x550 [ 105.242852][ T42] ? sock_def_readable+0xae/0x550 [ 105.242867][ T42] ? send_to_lecd+0x26d/0x830 [ 105.242883][ T42] send_to_lecd+0x3e7/0x830 [ 105.242901][ T42] lec_start_xmit+0xe52/0x2890 [ 105.242922][ T42] dev_hard_start_xmit+0x2cd/0x830 [ 105.242941][ T42] sch_direct_xmit+0x251/0x4c0 [ 105.242961][ T42] ? __pfx_sch_direct_xmit+0x10/0x10 [ 105.242981][ T42] __dev_queue_xmit+0x180f/0x3950 [ 105.242998][ T42] ? __dev_queue_xmit+0x2b6/0x3950 [ 105.243016][ T42] ? __pfx___dev_queue_xmit+0x10/0x10 [ 105.243029][ T42] ? neigh_resolve_output+0x438/0x750 [ 105.243047][ T42] ? eth_header+0x11b/0x200 [ 105.243060][ T42] ? __asan_memcpy+0x40/0x70 [ 105.243078][ T42] ? eth_header+0x11b/0x200 [ 105.243090][ T42] ? __pfx_eth_header+0x10/0x10 [ 105.243102][ T42] ? neigh_resolve_output+0x624/0x750 [ 105.243122][ T42] ? ip6_output+0x126/0x550 [ 105.243139][ T42] ip6_output+0x340/0x550 [ 105.243156][ T42] ? __pfx_ip6_output+0x10/0x10 [ 105.243172][ T42] NF_HOOK+0x177/0x4f0 [ 105.243190][ T42] ? __pfx_NF_HOOK+0x10/0x10 [ 105.243206][ T42] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 105.243221][ T42] ? __local_bh_enable_ip+0xd0/0x130 [ 105.243239][ T42] ? lockdep_hardirqs_on+0x7a/0x110 [ 105.243255][ T42] ? __local_bh_enable_ip+0xd0/0x130 [ 105.243272][ T42] ? icmp6_dst_alloc+0x3a6/0x440 [ 105.243291][ T42] mld_sendpack+0x8b4/0xe40 [ 105.243314][ T42] ? mld_sendpack+0x213/0xe40 [ 105.243330][ T42] ? __pfx_mld_sendpack+0x10/0x10 [ 105.243354][ T42] mld_ifc_work+0x835/0xe70 [ 105.243372][ T42] ? process_scheduled_works+0xa70/0x1860 [ 105.243391][ T42] process_scheduled_works+0xb5d/0x1860 [ 105.243419][ T42] ? __pfx_process_scheduled_works+0x10/0x10 [ 105.243439][ T42] ? assign_work+0x3d5/0x5e0 [ 105.243457][ T42] worker_thread+0xa53/0xfc0 [ 105.243485][ T42] kthread+0x388/0x470 [ 105.243498][ T42] ? __pfx_worker_thread+0x10/0x10 [ 105.243515][ T42] ? __pfx_kthread+0x10/0x10 [ 105.243534][ T42] ret_from_fork+0x514/0xb70 [ 105.243553][ T42] ? __pfx_ret_from_fork+0x10/0x10 [ 105.243571][ T42] ? __switch_to+0xc79/0x1410 [ 105.243587][ T42] ? __pfx_kthread+0x10/0x10 [ 105.243600][ T42] ret_from_fork_asm+0x1a/0x30 [ 105.243626][ T42] [ 105.243631][ T42] [ 105.517800][ T42] Allocated by task 6673: [ 105.522128][ T42] kasan_save_track+0x3e/0x80 [ 105.526831][ T42] __kasan_slab_alloc+0x6c/0x80 [ 105.531728][ T42] kmem_cache_alloc_lru_noprof+0x2b8/0x640 [ 105.537530][ T42] sock_alloc_inode+0x2c/0x190 [ 105.542319][ T42] alloc_inode+0x6a/0x1b0 [ 105.546641][ T42] __sock_create+0x12d/0x9d0 [ 105.551238][ T42] __sys_socket+0xd6/0x1b0 [ 105.555639][ T42] __x64_sys_socket+0x7a/0x90 [ 105.560301][ T42] do_syscall_64+0x15f/0xf80 [ 105.564879][ T42] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.570761][ T42] [ 105.573071][ T42] Freed by task 5830: [ 105.577032][ T42] kasan_save_track+0x3e/0x80 [ 105.581698][ T42] kasan_save_free_info+0x46/0x50 [ 105.586710][ T42] __kasan_slab_free+0x5c/0x80 [ 105.591462][ T42] kmem_cache_free+0x180/0x630 [ 105.596227][ T42] rcu_core+0x7cd/0x1070 [ 105.600466][ T42] handle_softirqs+0x22a/0x840 [ 105.605220][ T42] __irq_exit_rcu+0xca/0x220 [ 105.609800][ T42] irq_exit_rcu+0x9/0x30 [ 105.614033][ T42] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 105.619916][ T42] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 105.625883][ T42] [ 105.628191][ T42] Last potentially related work creation: [ 105.633881][ T42] kasan_save_stack+0x3e/0x60 [ 105.638575][ T42] kasan_record_aux_stack+0xbd/0xd0 [ 105.643765][ T42] call_rcu+0xee/0x890 [ 105.647827][ T42] evict+0x95b/0xb10 [ 105.651703][ T42] __dentry_kill+0x1a2/0x5e0 [ 105.656276][ T42] finish_dput+0xc9/0x480 [ 105.660700][ T42] __fput+0x691/0xa60 [ 105.664691][ T42] task_work_run+0x1d9/0x270 [ 105.669271][ T42] get_signal+0x11eb/0x1330 [ 105.673763][ T42] arch_do_signal_or_restart+0xbc/0x830 [ 105.679298][ T42] exit_to_user_mode_loop+0x86/0x480 [ 105.684582][ T42] do_syscall_64+0x33e/0xf80 [ 105.689168][ T42] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.695043][ T42] [ 105.697348][ T42] The buggy address belongs to the object at ffff88807751c800 [ 105.697348][ T42] which belongs to the cache sock_inode_cache of size 1408 [ 105.712426][ T42] The buggy address is located 192 bytes inside of [ 105.712426][ T42] freed 1408-byte region [ffff88807751c800, ffff88807751cd80) [ 105.726386][ T42] [ 105.728703][ T42] The buggy address belongs to the physical page: [ 105.735120][ T42] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77518 [ 105.743906][ T42] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 105.752395][ T42] memcg:ffff88807fc48101 [ 105.756641][ T42] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 105.764199][ T42] page_type: f5(slab) [ 105.768170][ T42] raw: 00fff00000000040 ffff88801f6b8c80 dead000000000100 dead000000000122 [ 105.776750][ T42] raw: 0000000000000000 0000000800150015 00000000f5000000 ffff88807fc48101 [ 105.785405][ T42] head: 00fff00000000040 ffff88801f6b8c80 dead000000000100 dead000000000122 [ 105.794071][ T42] head: 0000000000000000 0000000800150015 00000000f5000000 ffff88807fc48101 [ 105.802917][ T42] head: 00fff00000000003 ffffea0001dd4601 00000000ffffffff 00000000ffffffff [ 105.811593][ T42] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 105.820256][ T42] page dumped because: kasan: bad access detected [ 105.826670][ T42] page_owner tracks the page as allocated [ 105.832377][ T42] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5489, tgid 5489 (dhcpcd), ts 51322930353, free_ts 26200652446 [ 105.855021][ T42] post_alloc_hook+0x231/0x280 [ 105.859782][ T42] get_page_from_freelist+0x24dc/0x2580 [ 105.865315][ T42] __alloc_frozen_pages_noprof+0x18d/0x380 [ 105.871109][ T42] allocate_slab+0x77/0x660 [ 105.875599][ T42] refill_objects+0x331/0x3c0 [ 105.880262][ T42] __pcs_replace_empty_main+0x2e6/0x730 [ 105.885795][ T42] kmem_cache_alloc_lru_noprof+0x37c/0x640 [ 105.891769][ T42] sock_alloc_inode+0x2c/0x190 [ 105.896609][ T42] alloc_inode+0x6a/0x1b0 [ 105.900926][ T42] __sock_create+0x12d/0x9d0 [ 105.905631][ T42] __sys_socket+0xd6/0x1b0 [ 105.910035][ T42] __x64_sys_socket+0x7a/0x90 [ 105.914702][ T42] do_syscall_64+0x15f/0xf80 [ 105.919329][ T42] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.925481][ T42] page last free pid 1 tgid 1 stack trace: [ 105.931269][ T42] __free_frozen_pages+0xc2b/0xdb0 [ 105.936371][ T42] free_contig_range+0xbb/0x170 [ 105.941212][ T42] destroy_args+0x4e5/0x570 [ 105.945708][ T42] debug_vm_pgtable+0x3f8/0x410 [ 105.950900][ T42] do_one_initcall+0x250/0x870 [ 105.955657][ T42] do_initcall_level+0x104/0x190 [ 105.960592][ T42] do_initcalls+0x59/0xa0 [ 105.964910][ T42] kernel_init_freeable+0x2a6/0x3e0 [ 105.970104][ T42] kernel_init+0x1d/0x1d0 [ 105.974425][ T42] ret_from_fork+0x514/0xb70 [ 105.979006][ T42] ret_from_fork_asm+0x1a/0x30 [ 105.983767][ T42] [ 105.986082][ T42] Memory state around the buggy address: [ 105.991698][ T42] ffff88807751c780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 105.999745][ T42] ffff88807751c800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 106.007790][ T42] >ffff88807751c880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 106.015837][ T42] ^ [ 106.021975][ T42] ffff88807751c900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 106.030022][ T42] ffff88807751c980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 106.038067][ T42] ================================================================== [ 106.046658][ T42] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 106.053848][ T42] CPU: 1 UID: 0 PID: 42 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 106.063027][ T42] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 106.073097][ T42] Workqueue: mld mld_ifc_work [ 106.077775][ T42] Call Trace: [ 106.081050][ T42] [ 106.083973][ T42] vpanic+0x56c/0xa60 [ 106.088038][ T42] ? __pfx_vpanic+0x10/0x10 [ 106.092542][ T42] panic+0xc5/0xd0 [ 106.096257][ T42] ? __pfx_panic+0x10/0x10 [ 106.100663][ T42] ? sock_def_readable+0x1cb/0x550 [ 106.105782][ T42] ? rcu_is_watching+0x15/0xb0 [ 106.110545][ T42] ? sock_def_readable+0x1cb/0x550 [ 106.115660][ T42] ? sock_def_readable+0x1cb/0x550 [ 106.120760][ T42] check_panic_on_warn+0x89/0xb0 [ 106.125689][ T42] ? sock_def_readable+0x1cb/0x550 [ 106.130785][ T42] end_report+0x73/0x170 [ 106.135364][ T42] ? sock_def_readable+0x1cb/0x550 [ 106.141009][ T42] kasan_report+0x128/0x150 [ 106.145514][ T42] ? sock_def_readable+0x1cb/0x550 [ 106.150648][ T42] sock_def_readable+0x1cb/0x550 [ 106.155658][ T42] ? sock_def_readable+0xae/0x550 [ 106.160776][ T42] ? send_to_lecd+0x26d/0x830 [ 106.165557][ T42] send_to_lecd+0x3e7/0x830 [ 106.170061][ T42] lec_start_xmit+0xe52/0x2890 [ 106.174837][ T42] dev_hard_start_xmit+0x2cd/0x830 [ 106.179973][ T42] sch_direct_xmit+0x251/0x4c0 [ 106.184735][ T42] ? __pfx_sch_direct_xmit+0x10/0x10 [ 106.190014][ T42] __dev_queue_xmit+0x180f/0x3950 [ 106.195035][ T42] ? __dev_queue_xmit+0x2b6/0x3950 [ 106.200135][ T42] ? __pfx___dev_queue_xmit+0x10/0x10 [ 106.205499][ T42] ? neigh_resolve_output+0x438/0x750 [ 106.210874][ T42] ? eth_header+0x11b/0x200 [ 106.215374][ T42] ? __asan_memcpy+0x40/0x70 [ 106.219960][ T42] ? eth_header+0x11b/0x200 [ 106.224454][ T42] ? __pfx_eth_header+0x10/0x10 [ 106.229293][ T42] ? neigh_resolve_output+0x624/0x750 [ 106.234661][ T42] ? ip6_output+0x126/0x550 [ 106.239155][ T42] ip6_output+0x340/0x550 [ 106.243476][ T42] ? __pfx_ip6_output+0x10/0x10 [ 106.248318][ T42] NF_HOOK+0x177/0x4f0 [ 106.252379][ T42] ? __pfx_NF_HOOK+0x10/0x10 [ 106.256960][ T42] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 106.262761][ T42] ? __local_bh_enable_ip+0xd0/0x130 [ 106.268039][ T42] ? lockdep_hardirqs_on+0x7a/0x110 [ 106.273227][ T42] ? __local_bh_enable_ip+0xd0/0x130 [ 106.278509][ T42] ? icmp6_dst_alloc+0x3a6/0x440 [ 106.283440][ T42] mld_sendpack+0x8b4/0xe40 [ 106.287936][ T42] ? mld_sendpack+0x213/0xe40 [ 106.292603][ T42] ? __pfx_mld_sendpack+0x10/0x10 [ 106.297627][ T42] mld_ifc_work+0x835/0xe70 [ 106.302123][ T42] ? process_scheduled_works+0xa70/0x1860 [ 106.307832][ T42] process_scheduled_works+0xb5d/0x1860 [ 106.313391][ T42] ? __pfx_process_scheduled_works+0x10/0x10 [ 106.319395][ T42] ? assign_work+0x3d5/0x5e0 [ 106.324189][ T42] worker_thread+0xa53/0xfc0 [ 106.328799][ T42] kthread+0x388/0x470 [ 106.332865][ T42] ? __pfx_worker_thread+0x10/0x10 [ 106.337973][ T42] ? __pfx_kthread+0x10/0x10 [ 106.342554][ T42] ret_from_fork+0x514/0xb70 [ 106.347229][ T42] ? __pfx_ret_from_fork+0x10/0x10 [ 106.352331][ T42] ? __switch_to+0xc79/0x1410 [ 106.356996][ T42] ? __pfx_kthread+0x10/0x10 [ 106.361574][ T42] ret_from_fork_asm+0x1a/0x30 [ 106.366346][ T42] [ 106.369764][ T42] Kernel Offset: disabled [ 106.374073][ T42] Rebooting in 86400 seconds..