last executing test programs: 2.970184435s ago: executing program 0 (id=130): r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@remote, 0x0, 0x4, 0xffff, 0x0, 0xa, 0x0, 0x10}, {0x0, 0x6, 0x8, 0x0, 0x0, 0xf}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x0, 0x6c}, 0x0, @in6=@empty, 0x40000000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0xff000000}, 0x1c) 2.463054814s ago: executing program 0 (id=133): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 2.2178417s ago: executing program 0 (id=137): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 2.017108331s ago: executing program 0 (id=140): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000040)=0x10001, 0x4) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000001380)=0x1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xa0}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) (async) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710}, 0x10, 0x40800) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) (async) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0xc, 0x3, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002980)=ANY=[@ANYBLOB="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"], 0x15b8}}, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) socket$phonet(0x23, 0x2, 0x1) (async) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000004000000140001800d0001007564703a7379b390b3"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40004) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) (async) writev(r6, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a62c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc86", 0xc1}], 0x1) (async) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) (async) readv(r6, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) 1.879919062s ago: executing program 4 (id=143): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffd}, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x9) 1.782394137s ago: executing program 4 (id=145): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x4, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e65720000004800028008000240000000840800034000000007080004400000000f0800014000000000240005800c000100706105006f6164001400028008000340000000e108000240000000050900010073797a30000000000900020073797a32"], 0xb0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x23}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.699015958s ago: executing program 2 (id=146): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 1.530880503s ago: executing program 4 (id=148): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x1, 0x0, 0x9}, 0x8}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, {}, {}, {0x0, 0x40000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff, 0x4000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x2, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {0x0, 0xfffffffd}, {}, {}, {0x15d}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1000}, {0x0, 0x0, 0x4000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff, 0x8}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x81, 0x0, 0x400}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff24}, {}, {0x0, 0x0, 0x2000000}, {0x0, 0x3}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff, 0x800}, {}, {}, {}, {0x0, 0x0, 0xd}, {0xfff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x0, 0x0, 0x2, 0x0, 0x0, 0xa}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x20040804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0xa0}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 1.523581755s ago: executing program 1 (id=149): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00100000000900000000000000000000000000000000000000000077d9828f5f9921ced019879a32d38400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map=0x1, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.491692366s ago: executing program 2 (id=150): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 1.379384397s ago: executing program 4 (id=151): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, 0x0, 0x20000090) 1.329236379s ago: executing program 1 (id=152): r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x0) ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r2) 1.259659743s ago: executing program 2 (id=153): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x40047452, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a0101fa00000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002d0500020007000000380001800c0001006269747769736500280002800800014000000014080002400000011208000640000000030400058008000340000000010900010073797a30"], 0x10c}}, 0x0) 1.139421366s ago: executing program 4 (id=155): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffd}, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x9) 1.139245789s ago: executing program 1 (id=156): socketpair(0x26, 0x800, 0x4, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x80, 0x1, 0x3, 0x4, {{0x7, 0x4, 0x2, 0x8, 0x1c, 0x65, 0x0, 0x9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @local, {[@timestamp={0x44, 0x8, 0x91, 0x0, 0x7, [0x100]}]}}}}}) sendmsg$xdp(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x2c, 0x8, r1, 0x38}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000200)="2622636ab2e3dfdc11bcf02968b55997cb2fa869b2c32a5ecbc9f9df3ff3a278f0bef2a3188cf33c94e5a7c47ba84d0285114fcf2ad9b6846f0e26fbea75ebaa3ef4f9491e60c5331ca30669bb0a904715f32c6649e57485875c7f78b3a0b5af14fc4ea801db043d58a79e528b7c2bfa69ff", 0x72}, {&(0x7f0000000280)="91aa43edeb948afe68a09e88b3eb99555f864a34baa3fc1a429b827147f8275d5b5696a8e6712fe799a007ced27ad9e47e0621125b4fa998e5fbd54ef5575aa7de5bc27f506cc88cbd32014c2b27e734ce9274fd60fc0bd5f6e327ab6cd62b7b57a395758656b6d50809407b904bc5f6ca303b71a7a3beae13bf6c000f6a355c2223aa2426f3fd4edd9328f8be64e5c4de", 0x91}, {&(0x7f0000000340)="08a49e212c66a7bab29db93b6b8e81ec04715d0e6a3c72706d448bc49b6e11e687495e8ed4d735c0d110d039e81932f572b6e6c825b3ecd8374bdedb7842d2cb42521d372c28c8949d04a1802402f199e3c776b8510f8a0abc9985295cc85f71cc55d85162d7a234389ae8d10557e4449e4a9fc0672718fa", 0x78}], 0x3, 0x0, 0x0, 0x40044d0}, 0x40048c0) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x1c, 0x1e, 0x492dfc465ae32a8d}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x2, "000000000000000000000500"}}}]}, 0x48}}, 0x0) 1.0748817s ago: executing program 2 (id=157): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x112002, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x0) splice(r1, 0x0, r0, 0x0, 0x1100000000f336, 0x8) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@ptr={0x1, 0x0, 0x0, 0x2, 0x1}, @enum64={0x10, 0x2, 0x0, 0x13, 0x0, 0x0, [{0x1, 0x2, 0x8000}, {0xc, 0x8000, 0xd0}]}]}, {0x0, [0x30, 0x61, 0x2e, 0x2e, 0x5f, 0x7f, 0x0, 0x2e]}}, &(0x7f0000000700)=""/236, 0x52, 0xec, 0x0, 0x6, 0x10000}, 0x28) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@udp=r0, 0x2}, 0x20) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x12, &(0x7f0000000f00)=ANY=[@ANYBLOB="549902000000000018110000ec45f8ed31ebca3e7a14c97ad72c41efe35315eadc45d1ba775909d478c0b100930ae0100b06adb0818d05c79dd2c385194d6c2f670fdee81179db8cbd8713d2ca173adbad083bc187ce328184a6c13b744dd9059b66e929ddccf164c709f92375cb63", @ANYRES32=r0, @ANYRES32, @ANYRESDEC=r7, @ANYBLOB, @ANYRESHEX], &(0x7f00000004c0)='syzkaller\x00', 0x8d0a, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x1, 0xb, 0xfffbffc0, 0x8bf}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000880)=[0x1, r6, r8], &(0x7f00000008c0)=[{0x0, 0x1, 0xf, 0x6}, {0x0, 0x2, 0x3, 0x1}, {0x2005, 0x4, 0xe, 0x3}, {0xfffffffe, 0x3, 0x2, 0xb}], 0x10, 0x40000002}, 0x94) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r10 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r10, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={'rose', 0x0}, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r9, 0x8914, &(0x7f0000000000)) 916.817826ms ago: executing program 4 (id=159): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='lp', 0x2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x33, 0x0, 0x0) listen(r2, 0x2) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000e80)='Jm', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000004c0)="86", 0x1}], 0x1}}], 0x2, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000002600)=""/197, 0xc5, 0x0, 0x0}, &(0x7f0000000100)=0x40) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r3, 0x84, 0x84, 0x0, &(0x7f0000001080)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4}, 0x14) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x1c, 0x15, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) 711.344259ms ago: executing program 0 (id=161): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x7, 0x9, 0x10, 0x1, 0x1, {0xffff1c72, 0x23, 0x100007, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031400d3fc1c0000124788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 681.402733ms ago: executing program 1 (id=162): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0xe4, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {0x5, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xb8, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xc, 0x6}}, @TCA_U32_SEL={0xa4, 0x5, {0x7, 0x2, 0x9, 0x0, 0x8, 0x200, 0x9, 0x2, [{0xffff0001, 0xffff, 0x9, 0x7}, {0xe, 0x2c3, 0xb526, 0x110}, {0xc, 0x6, 0xfffff65d, 0x2}, {0x3, 0x9, 0x3ff, 0x6}, {0x7, 0x5b, 0x8, 0x6}, {0x4, 0x7, 0x4, 0x4}, {0x6, 0x4, 0x7, 0x4}, {0x4, 0x2, 0xffff6d1b, 0x3}, {0x3, 0x1, 0xaf, 0x401}]}}, @TCA_U32_LINK={0x8, 0x3, 0x1}]}}]}, 0xe4}}, 0x0) (async, rerun: 32) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000004) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 616.235238ms ago: executing program 3 (id=163): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 490.093734ms ago: executing program 3 (id=164): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 427.191413ms ago: executing program 1 (id=165): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c810}, 0x20000090) 384.132807ms ago: executing program 0 (id=166): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'gre0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x8000, 0x7800, 0x3, 0x26, {{0x6, 0x4, 0x3, 0x11, 0x18, 0x64, 0x0, 0x8, 0x4, 0x0, @multicast1, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}}) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000740)={{0xffffffffffffffff, &(0x7f0000000440)='gre0\x00', 0x10002, &(0x7f0000000480)={@align=0x2, {0x2, 0x8, 0x2, 0x1a}}, 0x6, &(0x7f00000004c0)={@_ha_fsid}, &(0x7f0000000500)=0x6}, 0x2, &(0x7f0000000700)=[{0x1, 0x400, &(0x7f0000000540)='\'.\x00', &(0x7f0000000580)="cf8e08ab510312ea5a437ce7b22c2df5f9dfc71fd1732f9ae770f1e7e1cdf50c59905d4ae22cffab107d6b252b8a7c9a890b757075a8c636d0f8b1ba1a7e707caf20b363750de37527a36e0ee7512090d5a06df8f618c9d903a81082604359a4b9a1757c5dcd100bad5ce73b53d8b9bd73ba46626c074b2268a988a7960c60e7beb077337cf82f7dca00c554fbd96f333698b935fa5dbde9fa671153f411", 0x9e, 0x18}, {0x2, 0xffffffff, &(0x7f0000000640)='GPL\x00', &(0x7f0000000680)="4f24c6b049742bf15b6a4f901cc6812d17b997fad1cb4490de12341fcc7ac880ea588f1cb4788457497db366ec6e0b4e73396ed8dcb0ec9041207830f206711a8e", 0x41, 0x10}]}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x40, '\x00', r0, r1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000040), &(0x7f00000000c0)='%-010d \x00'}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2, 0xffffffffffffffff}, 0x4) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0500000000000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000000840)={&(0x7f0000000800)=""/10, 0xa}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r5, 0x40305829, 0x0) write$6lowpan_control(r5, &(0x7f00000007c0)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) close(0x4) (async) recvmsg(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) (async) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f000100feffffff0000000001"], 0x114}], 0x1}, 0x0) 376.750227ms ago: executing program 1 (id=167): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000040)={0xffffffffffffffff}) readv(r3, &(0x7f0000000680)=[{&(0x7f0000000240)=""/127, 0x7f}], 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x18, 0x2, 0x0, 0x8001, 0x66a24, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x50) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000140)={0x20000010}) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r7, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) close(0x3) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000200)={@val, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0xe4, 0x0, 0x8, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback}}}}}}, 0x2e) 327.647519ms ago: executing program 3 (id=168): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000001480)=[{{&(0x7f0000000800)={0x2, 0xce24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 245.99089ms ago: executing program 3 (id=169): r0 = socket$inet6(0xa, 0x3, 0x2f) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000600)=""/164, 0xa4}], 0x1, &(0x7f0000001980)=""/4096, 0x1000}, 0x3}], 0x1, 0x0, 0x0) write(r4, &(0x7f0000003400)="d3", 0x1) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newlink={0x34, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r5, 0x50ccb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x4c040) sendmmsg$inet(r1, &(0x7f0000000700)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@remote, 0x0, 0x4, 0xffff, 0x0, 0xa, 0x0, 0x10}, {0x0, 0x6, 0x8, 0x0, 0x0, 0xf}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x0, 0x6c}, 0x0, @in6=@empty, 0x40000000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 99.637796ms ago: executing program 3 (id=170): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xc, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000c30100000001000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x24}, 0x94) 98.108585ms ago: executing program 2 (id=171): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000800)={0x2, 0xce24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r0, &(0x7f00000001c0)="0f89363c1c00bd5637c8b4ecc3292e80defce803000000acc90200000000000000c548e0f1810d3321312f79cfbaa25720bb7f133ec1989d1f", 0x39, 0x12000000, 0x0, 0x0) 38.043365ms ago: executing program 3 (id=172): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) (async) close(0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180017000000050017"], 0x50}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) (async) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x208, 0x3000}, [@IFLA_CARRIER={0x5, 0x21, 0x7}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x4048004) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)={0x58, r8, 0x1, 0x0, 0x4, {}, [@TIPC_NLA_BEARER={0xfffffffffffffddf}]}, 0x58}}, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) (async) r10 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r10, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, 0x0}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x48, r8, 0x2, 0x70bd26, 0x8, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4001850) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r11}, 0x20) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x308000, 0x4) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, &(0x7f0000000380)={r6, &(0x7f00000000c0)='ipvlan\x00', 0x40, &(0x7f0000000140)={@_ha_fsid={[0x9, 0x1000]}, {0x4, 0x10, 0xbf3b, 0xe}}, 0x3, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000340)=0x6}) (async) getsockname$packet(r6, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000500)=0x14) sendmsg$ETHTOOL_MSG_PAUSE_SET(r12, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f00000007c0)={0x94, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_PAUSE_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4c8c0}, 0x41) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 0s ago: executing program 2 (id=173): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x3}, @nl=@proc={0x10, 0x0, 0x25dfdbff, 0x20000}, @isdn={0x22, 0x2, 0x7, 0x2, 0x9}, 0xa55c, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x4, 0x3}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.244' (ED25519) to the list of known hosts. [ 402.908607][ T5852] cgroup: Unknown subsys name 'net' [ 403.024438][ T5852] cgroup: Unknown subsys name 'cpuset' [ 403.033240][ T5852] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 404.447832][ T5852] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 406.442800][ T5873] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 406.442804][ T5869] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 406.459436][ T5873] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 406.459433][ T5869] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 406.473949][ T5869] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 406.483695][ T5873] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 406.492293][ T5873] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 406.504827][ T5878] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 406.512355][ T5878] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 406.520154][ T5878] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 406.522824][ T5882] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 406.528422][ T5878] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 406.537209][ T5882] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 406.542325][ T5878] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 406.557601][ T5880] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 406.565834][ T5878] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 406.566809][ T5882] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 406.574410][ T5878] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 406.597411][ T5883] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 406.608606][ T5878] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 406.610680][ T5882] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 406.624138][ T5878] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 406.628117][ T5869] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 406.639495][ T5869] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 406.639528][ T5878] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 407.052333][ T5875] chnl_net:caif_netlink_parms(): no params data found [ 407.241148][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.250730][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.258014][ T5875] bridge_slave_0: entered allmulticast mode [ 407.265444][ T5875] bridge_slave_0: entered promiscuous mode [ 407.300846][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 407.328886][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.336035][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.343594][ T5875] bridge_slave_1: entered allmulticast mode [ 407.351591][ T5875] bridge_slave_1: entered promiscuous mode [ 407.439375][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 407.457027][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.486868][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.550124][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 407.576553][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.586003][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.593234][ T5864] bridge_slave_0: entered allmulticast mode [ 407.600199][ T5864] bridge_slave_0: entered promiscuous mode [ 407.632149][ T5875] team0: Port device team_slave_0 added [ 407.638810][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 407.650874][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.658268][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.665381][ T5864] bridge_slave_1: entered allmulticast mode [ 407.672494][ T5864] bridge_slave_1: entered promiscuous mode [ 407.693994][ T5875] team0: Port device team_slave_1 added [ 407.786888][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.810541][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.817480][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.844184][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.863406][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.888316][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.895273][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.921498][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.945062][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.952424][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.960025][ T5865] bridge_slave_0: entered allmulticast mode [ 407.966951][ T5865] bridge_slave_0: entered promiscuous mode [ 408.006635][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.014016][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.021261][ T5865] bridge_slave_1: entered allmulticast mode [ 408.028311][ T5865] bridge_slave_1: entered promiscuous mode [ 408.045081][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.052540][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.059736][ T5872] bridge_slave_0: entered allmulticast mode [ 408.066668][ T5872] bridge_slave_0: entered promiscuous mode [ 408.085199][ T5864] team0: Port device team_slave_0 added [ 408.114921][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.122565][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.129996][ T5872] bridge_slave_1: entered allmulticast mode [ 408.136834][ T5872] bridge_slave_1: entered promiscuous mode [ 408.143941][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.151175][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.158364][ T5871] bridge_slave_0: entered allmulticast mode [ 408.165188][ T5871] bridge_slave_0: entered promiscuous mode [ 408.174058][ T5864] team0: Port device team_slave_1 added [ 408.203143][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.214469][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.243271][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.250499][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.257609][ T5871] bridge_slave_1: entered allmulticast mode [ 408.264950][ T5871] bridge_slave_1: entered promiscuous mode [ 408.301597][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.329582][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.336583][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.362704][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.379616][ T5875] hsr_slave_0: entered promiscuous mode [ 408.385820][ T5875] hsr_slave_1: entered promiscuous mode [ 408.394216][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.405378][ T5865] team0: Port device team_slave_0 added [ 408.420999][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.428127][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.454372][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.475850][ T5865] team0: Port device team_slave_1 added [ 408.483627][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.495397][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.568354][ T5872] team0: Port device team_slave_0 added [ 408.597163][ T5864] hsr_slave_0: entered promiscuous mode [ 408.603446][ T5864] hsr_slave_1: entered promiscuous mode [ 408.609770][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 408.615545][ T5864] Cannot create hsr debugfs directory [ 408.630875][ T5872] team0: Port device team_slave_1 added [ 408.644946][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.652700][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.679248][ T5874] Bluetooth: hci1: command tx timeout [ 408.679254][ T5873] Bluetooth: hci3: command tx timeout [ 408.688555][ T5873] Bluetooth: hci4: command tx timeout [ 408.690615][ T5874] Bluetooth: hci2: command tx timeout [ 408.695651][ T5873] Bluetooth: hci0: command tx timeout [ 408.701429][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.719213][ T5871] team0: Port device team_slave_0 added [ 408.751022][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.758087][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.784204][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.796897][ T5871] team0: Port device team_slave_1 added [ 408.846902][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.854184][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.880284][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.892278][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.899268][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.925409][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.988878][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.995839][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.022741][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.068759][ T5865] hsr_slave_0: entered promiscuous mode [ 409.074905][ T5865] hsr_slave_1: entered promiscuous mode [ 409.081067][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 409.086789][ T5865] Cannot create hsr debugfs directory [ 409.092950][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.100149][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.126075][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.186270][ T5872] hsr_slave_0: entered promiscuous mode [ 409.192480][ T5872] hsr_slave_1: entered promiscuous mode [ 409.198797][ T5872] debugfs: 'hsr0' already exists in 'hsr' [ 409.204520][ T5872] Cannot create hsr debugfs directory [ 409.330756][ T5871] hsr_slave_0: entered promiscuous mode [ 409.336959][ T5871] hsr_slave_1: entered promiscuous mode [ 409.343285][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 409.349074][ T5871] Cannot create hsr debugfs directory [ 409.598329][ T5875] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 409.620140][ T5875] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 409.644794][ T5875] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 409.676306][ T5875] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 409.734196][ T5864] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 409.747578][ T5864] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 409.773575][ T5864] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 409.784180][ T5864] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 409.850951][ T5865] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 409.871918][ T5865] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 409.884767][ T5865] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 409.899013][ T5865] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 409.993167][ T5871] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 410.025597][ T5871] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 410.035980][ T5871] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 410.046566][ T5871] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 410.130904][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.137722][ T5872] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 410.159926][ T5872] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 410.170698][ T5872] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 410.181078][ T5872] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 410.193782][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.267250][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.291846][ T5875] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.311617][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.323226][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.330395][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.343609][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.350720][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.373347][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.380506][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.395384][ T5916] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.402539][ T5916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.465598][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.475688][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.501565][ T5953] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.508700][ T5953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.535993][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.543150][ T5953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.558470][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.590829][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.598012][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.617743][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.624936][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.715602][ T5865] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 410.750674][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.761503][ T5878] Bluetooth: hci4: command tx timeout [ 410.764521][ T5874] Bluetooth: hci1: command tx timeout [ 410.766900][ T5878] Bluetooth: hci0: command tx timeout [ 410.772348][ T5882] Bluetooth: hci3: command tx timeout [ 410.778382][ T5873] Bluetooth: hci2: command tx timeout [ 410.882239][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.946855][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.954031][ T5956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.023924][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.031174][ T5956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.123056][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.132797][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.242763][ T5872] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 411.293806][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.359136][ T5875] veth0_vlan: entered promiscuous mode [ 411.395611][ T5875] veth1_vlan: entered promiscuous mode [ 411.445729][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.536115][ T5865] veth0_vlan: entered promiscuous mode [ 411.580560][ T5875] veth0_macvtap: entered promiscuous mode [ 411.615156][ T5865] veth1_vlan: entered promiscuous mode [ 411.625387][ T5875] veth1_macvtap: entered promiscuous mode [ 411.671191][ T5871] veth0_vlan: entered promiscuous mode [ 411.683689][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.728224][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.745404][ T5871] veth1_vlan: entered promiscuous mode [ 411.784297][ T5865] veth0_macvtap: entered promiscuous mode [ 411.794786][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.829030][ T5865] veth1_macvtap: entered promiscuous mode [ 411.835979][ T5864] veth0_vlan: entered promiscuous mode [ 411.842252][ T1165] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.852525][ T1165] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.867445][ T5872] veth0_vlan: entered promiscuous mode [ 411.879910][ T1165] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.888896][ T1165] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.917428][ T5864] veth1_vlan: entered promiscuous mode [ 411.940880][ T5872] veth1_vlan: entered promiscuous mode [ 411.954668][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.997466][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.013470][ T5871] veth0_macvtap: entered promiscuous mode [ 412.031431][ T5916] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.040464][ T5916] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.070036][ T5916] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.079749][ T5916] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.094241][ T5871] veth1_macvtap: entered promiscuous mode [ 412.147084][ T5956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.160915][ T5864] veth0_macvtap: entered promiscuous mode [ 412.171868][ T5956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.184117][ T5872] veth0_macvtap: entered promiscuous mode [ 412.223628][ T5864] veth1_macvtap: entered promiscuous mode [ 412.229634][ T5966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.237436][ T5966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.249019][ T5872] veth1_macvtap: entered promiscuous mode [ 412.283355][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.330515][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.342184][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.353470][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.374210][ T5875] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 412.396984][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.404796][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.414778][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.437346][ T1165] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.446843][ T1165] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.461075][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.515329][ T1165] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.532185][ T1165] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.558822][ T1165] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.579903][ T5966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.588821][ T5966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.596158][ T1165] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.622508][ T1165] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.669261][ T1165] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.709503][ T1165] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.719414][ T1165] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.744494][ T1165] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.761993][ T1165] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.840254][ T5873] Bluetooth: hci2: command tx timeout [ 412.840514][ T5882] Bluetooth: hci3: command tx timeout [ 412.845670][ T5873] Bluetooth: hci1: command tx timeout [ 412.845693][ T5873] Bluetooth: hci0: command tx timeout [ 412.851141][ T5874] Bluetooth: hci4: command tx timeout [ 412.925097][ T5956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.936098][ T5956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.983511][ T5916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.994296][ T5916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.009654][ T5997] C: renamed from lo (while UP) [ 413.020081][ T5997] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 413.039354][ T5997] xt_limit: Overflow, try lower: 271964/0 [ 413.065209][ T5994] Zero length message leads to an empty skb [ 413.134961][ T5956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.143687][ T5956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.194886][ T5916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.216438][ T5916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.281126][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.307493][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.445618][ T6006] netlink: 'syz.3.10': attribute type 4 has an invalid length. [ 413.454341][ T6006] netlink: 240 bytes leftover after parsing attributes in process `syz.3.10'. [ 413.485401][ T6010] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET) [ 413.512733][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.525742][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.547054][ T6010] syzkaller1: entered promiscuous mode [ 413.583873][ T6010] syzkaller1: entered allmulticast mode [ 413.629314][ T6010] ieee802154 phy0 wpan0: encryption failed: -22 [ 414.190370][ T6041] warning: `syz.1.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 414.193999][ T6046] openvswitch: netlink: IP tunnel dst address not specified [ 414.299282][ T6052] netlink: 'syz.4.19': attribute type 2 has an invalid length. [ 414.316534][ T6041] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 414.458544][ T6058] syzkaller1: entered promiscuous mode [ 414.470908][ T6058] syzkaller1: entered allmulticast mode [ 414.545907][ T6062] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 414.570148][ T6062] team0: Port device dummy0 added [ 414.826742][ T6071] FAULT_INJECTION: forcing a failure. [ 414.826742][ T6071] name failslab, interval 1, probability 0, space 0, times 1 [ 414.869479][ T6071] CPU: 1 UID: 0 PID: 6071 Comm: syz.2.25 Not tainted syzkaller #0 PREEMPT(full) [ 414.869508][ T6071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 414.869524][ T6071] Call Trace: [ 414.869531][ T6071] [ 414.869539][ T6071] dump_stack_lvl+0xe8/0x150 [ 414.869572][ T6071] should_fail_ex+0x412/0x560 [ 414.869599][ T6071] should_failslab+0xa8/0x100 [ 414.869624][ T6071] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 414.869645][ T6071] ? __alloc_skb+0x1d0/0x7d0 [ 414.869662][ T6071] ? __local_bh_enable_ip+0xd0/0x130 [ 414.869685][ T6071] __alloc_skb+0x1d0/0x7d0 [ 414.869708][ T6071] nl80211_get_key+0x490/0x960 [ 414.869734][ T6071] ? __pfx_nl80211_get_key+0x10/0x10 [ 414.869754][ T6071] ? nl80211_pre_doit+0x4f1/0x930 [ 414.869781][ T6071] genl_family_rcv_msg_doit+0x22a/0x330 [ 414.869810][ T6071] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 414.869842][ T6071] ? bpf_lsm_capable+0x9/0x20 [ 414.869858][ T6071] ? security_capable+0x7e/0x2c0 [ 414.869886][ T6071] genl_rcv_msg+0x61c/0x7a0 [ 414.869912][ T6071] ? __pfx_genl_rcv_msg+0x10/0x10 [ 414.869930][ T6071] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 414.869950][ T6071] ? __pfx_nl80211_get_key+0x10/0x10 [ 414.869963][ T6071] ? __pfx_nl80211_post_doit+0x10/0x10 [ 414.869988][ T6071] ? __pfx_ref_tracker_free+0x10/0x10 [ 414.870009][ T6071] ? __skb_clone+0x63/0x7a0 [ 414.870034][ T6071] netlink_rcv_skb+0x232/0x4b0 [ 414.870052][ T6071] ? __pfx_genl_rcv_msg+0x10/0x10 [ 414.870073][ T6071] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 414.870087][ T6071] ? genl_rcv+0x19/0x40 [ 414.870122][ T6071] ? down_read+0x272/0x2e0 [ 414.870142][ T6071] ? genl_rcv+0xd/0x40 [ 414.870162][ T6071] genl_rcv+0x28/0x40 [ 414.870179][ T6071] netlink_unicast+0x80f/0x9b0 [ 414.870208][ T6071] ? __pfx_netlink_unicast+0x10/0x10 [ 414.870232][ T6071] ? netlink_sendmsg+0x650/0xb40 [ 414.870253][ T6071] netlink_sendmsg+0x813/0xb40 [ 414.870280][ T6071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.870306][ T6071] ? aa_sock_msg_perm+0xf1/0x1b0 [ 414.870329][ T6071] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 414.870352][ T6071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.870368][ T6071] ____sys_sendmsg+0xa68/0xad0 [ 414.870397][ T6071] ? __pfx_____sys_sendmsg+0x10/0x10 [ 414.870426][ T6071] ? import_iovec+0x73/0xa0 [ 414.870447][ T6071] ___sys_sendmsg+0x2a5/0x360 [ 414.870466][ T6071] ? __lock_acquire+0x6b5/0x2cf0 [ 414.870487][ T6071] ? __pfx____sys_sendmsg+0x10/0x10 [ 414.870544][ T6071] ? __fget_files+0x2a/0x420 [ 414.870560][ T6071] ? __fget_files+0x3a0/0x420 [ 414.870586][ T6071] __x64_sys_sendmsg+0x1bd/0x2a0 [ 414.870609][ T6071] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 414.870639][ T6071] ? __pfx_ksys_write+0x10/0x10 [ 414.870669][ T6071] do_syscall_64+0x14d/0xf80 [ 414.870689][ T6071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.870704][ T6071] ? trace_irq_disable+0x37/0x100 [ 414.870721][ T6071] ? clear_bhb_loop+0x40/0x90 [ 414.870742][ T6071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.870761][ T6071] RIP: 0033:0x7fcf0cf9c629 [ 414.870781][ T6071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.870795][ T6071] RSP: 002b:00007fcf0def8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.870820][ T6071] RAX: ffffffffffffffda RBX: 00007fcf0d215fa0 RCX: 00007fcf0cf9c629 [ 414.870832][ T6071] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 414.870841][ T6071] RBP: 00007fcf0def8090 R08: 0000000000000000 R09: 0000000000000000 [ 414.870851][ T6071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.870861][ T6071] R13: 00007fcf0d216038 R14: 00007fcf0d215fa0 R15: 00007fffca18a358 [ 414.870889][ T6071] [ 415.249866][ T5882] Bluetooth: hci0: command tx timeout [ 415.255340][ T5882] Bluetooth: hci1: command tx timeout [ 415.261293][ T5882] Bluetooth: hci2: command tx timeout [ 415.265148][ T5874] Bluetooth: hci3: command tx timeout [ 415.266683][ T5882] Bluetooth: hci4: command tx timeout [ 415.455166][ T6082] netlink: 288 bytes leftover after parsing attributes in process `syz.3.31'. [ 415.808758][ T6105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35'. [ 415.977020][ T6121] syzkaller0: entered promiscuous mode [ 416.020878][ T6121] syzkaller0: entered allmulticast mode [ 416.082502][ T6105] team0: Port device team_slave_0 removed [ 416.430907][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.41'. [ 416.509309][ T6141] syzkaller0: entered promiscuous mode [ 416.514819][ T6141] syzkaller0: entered allmulticast mode [ 416.535664][ T6146] syzkaller0: entered promiscuous mode [ 416.542482][ T6143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.41'. [ 416.553818][ T6146] syzkaller0: entered allmulticast mode [ 417.141503][ T6182] netlink: 20 bytes leftover after parsing attributes in process `syz.2.48'. [ 417.364886][ T6190] ieee802154 phy0 wpan0: encryption failed: -22 [ 417.664870][ T6201] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 417.734516][ T6201] syzkaller0: entered promiscuous mode [ 417.753140][ T6201] syzkaller0: entered allmulticast mode [ 417.864141][ T6207] syzkaller0: entered promiscuous mode [ 417.884959][ T6207] syzkaller0: entered allmulticast mode [ 418.118001][ T5882] Bluetooth: hci0: command 0x0c1a tx timeout [ 418.118580][ T6096] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 418.134183][ T6221] netlink: 152 bytes leftover after parsing attributes in process `syz.3.58'. [ 418.145028][ T6096] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 418.419788][ T6237] macsec1: entered promiscuous mode [ 418.601914][ T6096] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 418.628302][ T6096] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 418.686520][ T6096] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 418.711154][ T6096] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 418.802635][ T6096] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 418.814755][ T6256] syzkaller0: entered promiscuous mode [ 418.826340][ T6256] syzkaller0: entered allmulticast mode [ 418.836578][ T6096] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 418.901520][ T6096] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 418.907458][ T6096] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 419.149982][ T5995] IPVS: starting estimator thread 0... [ 419.226198][ T6276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.77'. [ 419.248948][ T6274] IPVS: using max 31 ests per chain, 74400 per kthread [ 419.269681][ T6276] netlink: 'syz.2.77': attribute type 1 has an invalid length. [ 419.291436][ T6281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 419.339428][ T6286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 419.908222][ T6284] netlink: 59 bytes leftover after parsing attributes in process `syz.4.80'. [ 419.927229][ T6283] lec:lec_atm_close: lec0: Shut down! [ 419.996008][ T6308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.84'. [ 420.318110][ T6333] netlink: 'syz.2.88': attribute type 1 has an invalid length. [ 420.325883][ T6334] netlink: 'syz.2.88': attribute type 1 has an invalid length. [ 420.382624][ T6333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.88'. [ 420.468429][ T6333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.88'. [ 421.276235][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.103'. [ 421.835430][ T6414] netlink: 20 bytes leftover after parsing attributes in process `syz.2.110'. [ 422.049076][ T6419] netlink: 16 bytes leftover after parsing attributes in process `syz.1.109'. [ 422.116252][ T6438] netlink: 24 bytes leftover after parsing attributes in process `syz.3.116'. [ 422.329225][ T6447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.120'. [ 422.353045][ T6445] syzkaller0: entered promiscuous mode [ 422.359751][ T6445] syzkaller0: entered allmulticast mode [ 422.791686][ T6474] ieee802154 phy0 wpan0: encryption failed: -22 [ 422.912594][ T6480] FAULT_INJECTION: forcing a failure. [ 422.912594][ T6480] name failslab, interval 1, probability 0, space 0, times 0 [ 422.947994][ T6480] CPU: 0 UID: 0 PID: 6480 Comm: syz.2.129 Not tainted syzkaller #0 PREEMPT(full) [ 422.948017][ T6480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 422.948027][ T6480] Call Trace: [ 422.948034][ T6480] [ 422.948041][ T6480] dump_stack_lvl+0xe8/0x150 [ 422.948066][ T6480] should_fail_ex+0x412/0x560 [ 422.948092][ T6480] should_failslab+0xa8/0x100 [ 422.948113][ T6480] ? skb_clone+0x212/0x3a0 [ 422.948134][ T6480] kmem_cache_alloc_noprof+0x87/0x650 [ 422.948151][ T6480] ? sk_filter_trim_cap+0x1e1/0xd90 [ 422.948182][ T6480] skb_clone+0x212/0x3a0 [ 422.948203][ T6480] __netlink_deliver_tap+0x404/0x850 [ 422.948231][ T6480] ? netlink_deliver_tap+0x2e/0x1b0 [ 422.948248][ T6480] netlink_deliver_tap+0x19c/0x1b0 [ 422.948265][ T6480] netlink_dump+0x926/0xe80 [ 422.948292][ T6480] ? __pfx_netlink_dump+0x10/0x10 [ 422.948320][ T6480] ? netlink_recvmsg+0x5d6/0xa50 [ 422.948335][ T6480] ? kmem_cache_free+0x180/0x610 [ 422.948360][ T6480] netlink_recvmsg+0x690/0xa50 [ 422.948386][ T6480] ? __pfx_netlink_recvmsg+0x10/0x10 [ 422.948407][ T6480] ? aa_sock_msg_perm+0xf1/0x1b0 [ 422.948430][ T6480] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 422.948450][ T6480] ? security_socket_recvmsg+0x7e/0x2c0 [ 422.948468][ T6480] ? __pfx_netlink_recvmsg+0x10/0x10 [ 422.948492][ T6480] sock_recvmsg+0x22c/0x270 [ 422.948511][ T6480] ____sys_recvmsg+0x1e6/0x4a0 [ 422.948541][ T6480] ? __pfx_____sys_recvmsg+0x10/0x10 [ 422.948576][ T6480] ? import_iovec+0x73/0xa0 [ 422.948596][ T6480] ___sys_recvmsg+0x215/0x590 [ 422.948621][ T6480] ? __pfx____sys_recvmsg+0x10/0x10 [ 422.948645][ T6480] ? __fget_files+0x2a/0x420 [ 422.948677][ T6480] ? __fget_files+0x3a0/0x420 [ 422.948701][ T6480] do_recvmmsg+0x334/0x800 [ 422.948725][ T6480] ? __pfx_do_recvmmsg+0x10/0x10 [ 422.948756][ T6480] ? _copy_from_user+0x94/0xb0 [ 422.948788][ T6480] __x64_sys_recvmmsg+0x1b7/0x250 [ 422.948810][ T6480] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 422.948842][ T6480] do_syscall_64+0x14d/0xf80 [ 422.948862][ T6480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.948878][ T6480] ? trace_irq_disable+0x37/0x100 [ 422.948895][ T6480] ? clear_bhb_loop+0x40/0x90 [ 422.948914][ T6480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.948930][ T6480] RIP: 0033:0x7fcf0cf9c629 [ 422.948946][ T6480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.948959][ T6480] RSP: 002b:00007fcf0def8028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 422.948976][ T6480] RAX: ffffffffffffffda RBX: 00007fcf0d215fa0 RCX: 00007fcf0cf9c629 [ 422.948987][ T6480] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000004 [ 422.948999][ T6480] RBP: 00007fcf0def8090 R08: 0000200000003700 R09: 0000000000000000 [ 422.949009][ T6480] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000002 [ 422.949019][ T6480] R13: 00007fcf0d216038 R14: 00007fcf0d215fa0 R15: 00007fffca18a358 [ 422.949048][ T6480] [ 423.967712][ T6515] ieee802154 phy0 wpan0: encryption failed: -22 [ 424.119728][ T6524] xt_TCPMSS: Only works on TCP SYN packets [ 425.014703][ T5484] lec:lec_start_xmit: lec0:No lecd attached [ 425.184398][ T6579] syzkaller0: entered promiscuous mode [ 425.218412][ T6579] syzkaller0: entered allmulticast mode [ 425.495944][ T6593] netlink: 256 bytes leftover after parsing attributes in process `syz.0.166'. [ 425.562269][ T6599] syzkaller0: entered promiscuous mode [ 425.570830][ T6599] syzkaller0: entered allmulticast mode [ 425.640136][ T6602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.167'. [ 425.783319][ T6608] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] SMP KASAN PTI [ 425.795239][ T6608] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] [ 425.803662][ T6608] CPU: 1 UID: 0 PID: 6608 Comm: syz.3.172 Not tainted syzkaller #0 PREEMPT(full) [ 425.812859][ T6608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 425.822904][ T6608] RIP: 0010:ip_route_output_key_hash_rcu+0x12ba/0x25d0 [ 425.829754][ T6608] Code: c3 31 ff 89 c6 e8 16 9b c7 f7 85 db 74 5b e8 cd 96 c7 f7 eb 05 e8 c6 96 c7 f7 4d 85 ff 74 36 49 8d 5f 3a 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 ff 10 00 00 0f b7 1b bf ff ff 00 00 89 [ 425.849345][ T6608] RSP: 0018:ffffc9001a9b7140 EFLAGS: 00010202 [ 425.855400][ T6608] RAX: 0000000000000007 RBX: 0000000000000039 RCX: ffff888028928000 [ 425.863353][ T6608] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 425.871309][ T6608] RBP: 0000000080000000 R08: ffff888028928000 R09: 0000000000000003 [ 425.879348][ T6608] R10: 0000000000000005 R11: 0000000000000000 R12: dffffc0000000000 [ 425.887298][ T6608] R13: 0000000000000000 R14: ffff88805b812f58 R15: ffffffffffffffff [ 425.895253][ T6608] FS: 00007f725a5f66c0(0000) GS:ffff8881255b0000(0000) knlGS:0000000000000000 [ 425.904167][ T6608] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 425.910734][ T6608] CR2: 00007f725a5b3ff8 CR3: 000000002b6e8000 CR4: 00000000003526f0 [ 425.918689][ T6608] Call Trace: [ 425.921953][ T6608] [ 425.924870][ T6608] ? ip_route_output_key_hash+0xd8/0x2a0 [ 425.930562][ T6608] ip_route_output_key_hash+0x18d/0x2a0 [ 425.936091][ T6608] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 425.942142][ T6608] ? crng_fast_key_erasure+0x196/0x270 [ 425.947587][ T6608] ? __pfx_crng_fast_key_erasure+0x10/0x10 [ 425.953396][ T6608] ip_route_output_flow+0x2a/0x150 [ 425.958507][ T6608] sctp_v4_get_dst+0x3f8/0x12b0 [ 425.963358][ T6608] ? crng_make_state+0x2c5/0x600 [ 425.968287][ T6608] ? lockdep_hardirqs_on+0x7a/0x110 [ 425.973475][ T6608] ? crng_make_state+0x36a/0x600 [ 425.978398][ T6608] ? __pfx_sctp_v4_get_dst+0x10/0x10 [ 425.983673][ T6608] ? _get_random_bytes+0x1e7/0x260 [ 425.988786][ T6608] ? dst_release+0x72/0x1b0 [ 425.993288][ T6608] sctp_transport_route+0x118/0x2f0 [ 425.998475][ T6608] sctp_assoc_add_peer+0x650/0x13b0 [ 426.003675][ T6608] sctp_connect_new_asoc+0x329/0x6b0 [ 426.008949][ T6608] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 426.014829][ T6608] ? __local_bh_enable_ip+0xd0/0x130 [ 426.020099][ T6608] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 426.025634][ T6608] ? security_sctp_bind_connect+0x7e/0x2c0 [ 426.031425][ T6608] sctp_sendmsg+0x1528/0x2c10 [ 426.036090][ T6608] ? finish_task_switch+0x161/0x920 [ 426.041276][ T6608] ? __pfx_sctp_sendmsg+0x10/0x10 [ 426.046293][ T6608] ? lockdep_hardirqs_on+0x7a/0x110 [ 426.051475][ T6608] ? aa_sk_perm+0x15a/0x960 [ 426.055963][ T6608] ? aa_sk_perm+0x82d/0x960 [ 426.060460][ T6608] ? __pfx_aa_sk_perm+0x10/0x10 [ 426.065294][ T6608] ? plist_check_list+0x2f4/0x310 [ 426.070299][ T6608] ? sock_rps_record_flow+0x19/0x400 [ 426.075569][ T6608] ? inet_sendmsg+0x2f4/0x370 [ 426.080230][ T6608] ____sys_sendmsg+0x894/0xad0 [ 426.084983][ T6608] ? __pfx_____sys_sendmsg+0x10/0x10 [ 426.090252][ T6608] ? import_iovec+0x73/0xa0 [ 426.094737][ T6608] ___sys_sendmsg+0x2a5/0x360 [ 426.099398][ T6608] ? __lock_acquire+0x6b5/0x2cf0 [ 426.104319][ T6608] ? __pfx____sys_sendmsg+0x10/0x10 [ 426.109500][ T6608] ? __pfx_futex_wake_mark+0x10/0x10 [ 426.114773][ T6608] ? __fget_files+0x2a/0x420 [ 426.119344][ T6608] ? __fget_files+0x3a0/0x420 [ 426.124014][ T6608] __sys_sendmmsg+0x27c/0x4e0 [ 426.128677][ T6608] ? __pfx___sys_sendmmsg+0x10/0x10 [ 426.133858][ T6608] ? do_futex+0x333/0x420 [ 426.138179][ T6608] ? fput+0xa0/0xd0 [ 426.141990][ T6608] ? rcu_is_watching+0x15/0xb0 [ 426.146747][ T6608] __x64_sys_sendmmsg+0xa0/0xc0 [ 426.151600][ T6608] do_syscall_64+0x14d/0xf80 [ 426.156185][ T6608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.162246][ T6608] ? trace_irq_disable+0x37/0x100 [ 426.167276][ T6608] ? clear_bhb_loop+0x40/0x90 [ 426.171955][ T6608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.177848][ T6608] RIP: 0033:0x7f725c39c629 [ 426.182255][ T6608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.201847][ T6608] RSP: 002b:00007f725a5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 426.210253][ T6608] RAX: ffffffffffffffda RBX: 00007f725c615fa0 RCX: 00007f725c39c629 [ 426.218210][ T6608] RDX: 0000000000000002 RSI: 0000200000000440 RDI: 0000000000000007 [ 426.226164][ T6608] RBP: 00007f725c432b39 R08: 0000000000000000 R09: 0000000000000000 [ 426.234120][ T6608] R10: 0000000000048000 R11: 0000000000000246 R12: 0000000000000000 [ 426.242078][ T6608] R13: 00007f725c616038 R14: 00007f725c615fa0 R15: 00007ffd5351fe18 [ 426.250044][ T6608] [ 426.253056][ T6608] Modules linked in: [ 426.261402][ T6608] ---[ end trace 0000000000000000 ]--- [ 426.280141][ T6608] RIP: 0010:ip_route_output_key_hash_rcu+0x12ba/0x25d0 [ 426.289649][ T6608] Code: c3 31 ff 89 c6 e8 16 9b c7 f7 85 db 74 5b e8 cd 96 c7 f7 eb 05 e8 c6 96 c7 f7 4d 85 ff 74 36 49 8d 5f 3a 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 ff 10 00 00 0f b7 1b bf ff ff 00 00 89 [ 426.295721][ T6614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.173'. [ 426.313067][ T6608] RSP: 0018:ffffc9001a9b7140 EFLAGS: 00010202 [ 426.324412][ T6608] RAX: 0000000000000007 RBX: 0000000000000039 RCX: ffff888028928000 [ 426.332475][ T6608] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 426.340761][ T6608] RBP: 0000000080000000 R08: ffff888028928000 R09: 0000000000000003 [ 426.348822][ T6608] R10: 0000000000000005 R11: 0000000000000000 R12: dffffc0000000000 [ 426.357113][ T6608] R13: 0000000000000000 R14: ffff88805b812f58 R15: ffffffffffffffff [ 426.365902][ T6608] FS: 00007f725a5f66c0(0000) GS:ffff8881255b0000(0000) knlGS:0000000000000000 [ 426.378857][ T6608] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 426.385811][ T6608] CR2: 00007fcf0ded6ff8 CR3: 000000002b6e8000 CR4: 00000000003526f0 [ 426.395253][ T6608] Kernel panic - not syncing: Fatal exception [ 426.401705][ T6608] Kernel Offset: disabled [ 426.406015][ T6608] Rebooting in 86400 seconds..