last executing test programs: 8.786956547s ago: executing program 4 (id=167): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000380)="ec8f43a9", 0x4}, {0x0}], 0x3}}], 0x1, 0x24000040) 8.407161067s ago: executing program 3 (id=170): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000008b40)=[{{0x0, 0x0, &(0x7f00000035c0)=[{0x0}, {&(0x7f0000001140)=""/53, 0x35}], 0x2}, 0x3}], 0x1, 0x2, 0x0) 7.375692851s ago: executing program 4 (id=176): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a010400000000000000000200ffff400004803c0001800b00010065787468647200002c000280050002000700000008000340000000f508000440000000010800064000"], 0x94}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 6.87526271s ago: executing program 3 (id=179): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "001004", 0x8, 0x2b, 0x1, @remote, @mcast2, {[@routing={0x2f, 0x0, 0x1}]}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x41da}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xae}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00032cbd7000ffdbdf2502000000140001800800030004000000080003000000000004000180"], 0x2c}, 0x1, 0x0, 0x0, 0x400c095}, 0x44) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000050c0200000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000e0010380dc010080080003400000000273000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000000e14000180090001006c617374"], 0x290}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x700, 0x8, 0x3, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x11, 0x0}, @private=0xa010101}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x68}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ac0)=@newsa={0x144, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9, 0x2}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x1}}]}, 0x144}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x68, r8, 0x1, 0x70bd2c, 0x25dfdc00, {}, [@NL80211_ATTR_REG_RULES={0x4c, 0x22, 0x0, 0x1, [{0x4}, {0x4}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x101}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffff2547}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}]}, {0x4}, {0x4}, {0x4}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040001}, 0x8000) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r10 = socket$inet_udplite(0x2, 0x2, 0x88) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r12, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x800) r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r14, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) listen(r9, 0x2) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 6.852821444s ago: executing program 1 (id=180): syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f94716330", 0x7) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, 0x0, 0x840) ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) syz_init_net_socket$llc(0x1a, 0x801, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd700000000000070000000c0001800500020001"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) 6.743458182s ago: executing program 4 (id=181): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000500)=0x2, 0x4) write$tun(r1, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x18, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xb, 0x10000}}}}}}}}, 0x52) 6.34070125s ago: executing program 2 (id=182): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$netlink(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r6 = socket(0x10, 0x3, 0x0) close(r5) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x5, 0xffffffff, 0x10000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4008810) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.1723965s ago: executing program 1 (id=184): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x80) 5.568329005s ago: executing program 1 (id=185): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB="080026006c09000008002700010000000800a000"], 0x34}}, 0x0) 4.497469057s ago: executing program 1 (id=187): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) 4.442421194s ago: executing program 4 (id=188): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x3a00, 0x88be, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0x3e) 4.379918022s ago: executing program 3 (id=189): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000008b40)=[{{0x0, 0x0, &(0x7f00000035c0)=[{0x0}, {&(0x7f0000001140)=""/53, 0x35}], 0x2}, 0x3}], 0x1, 0x2, 0x0) 4.308621401s ago: executing program 2 (id=190): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0b01, 0x0) write$tun(r0, &(0x7f0000001640)=ANY=[@ANYBLOB="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"/272], 0x10c) 3.979984258s ago: executing program 0 (id=191): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a010400000000000000000200ffff400004803c0001800b00010065787468647200002c000280050002000700000008000340000000f5080004400000000108000640000000040800014000ddff130900010073"], 0x94}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 3.598228048s ago: executing program 2 (id=192): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001708000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r7) r8 = socket$unix(0x1, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0x18, 0xb}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004060}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000000300)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.245897628s ago: executing program 1 (id=193): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x1ff01018ce30c2a5}, @TCA_TBF_RATE64={0xc, 0x4, 0xdcd9be68b5bd509}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x3, 0x5, 0x7}, 0x6db63122, 0x7, 0x1257}}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xb}, {0xffff, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0) 3.18972832s ago: executing program 0 (id=194): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x1, &(0x7f0000000480), 0x14}}], 0x400, 0x10) 2.964527447s ago: executing program 4 (id=195): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x240, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x210, 0x206, 0x240, 0x210, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x70, 0xd0, 0x0, {0x390, 0x8f00}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x7, 0x0, [0x2d, 0x12, 0x2e, 0x40, 0xd, 0x3a, 0x23, 0x2b, 0x103, 0x1c, 0x4037, 0x15, 0x31, 0x4, 0x31, 0x1d], 0x1, 0x8, 0x7}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x900, 0x10, 0x8, 'snmp\x00', 'syz0\x00', {0x8000}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x2a, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7f}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xffffffffffffffff}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x8, 0x88, &(0x7f0000000680)=""/136, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x3, 0x9, 0x10, 0x80}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000740)=[{0x5, 0x3, 0xf, 0x2}, {0x4, 0x2, 0x3, 0x4}, {0x6, 0x4, 0x7, 0x4}, {0x1, 0x4, 0x2}], 0x10, 0x4}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000880)={r4, r5, 0x25, 0x14, @void}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) sendmsg$key(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) close(r6) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x54, r2, 0x10, 0x70bd26, 0x25dfdbfb, {0x5}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'nicvf0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'ftp-20000\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001a00010024bd70000000000002201400ff00fe020003000008000300", @ANYRES32, @ANYBLOB="08000100e0"], 0x34}}, 0xea5bc50b6199d7be) 2.877264451s ago: executing program 3 (id=196): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080)=0x1, 0x4) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x1}, 0x8) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 2.438572882s ago: executing program 0 (id=197): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB="080026006c09000008002700010000000800a000"], 0x34}}, 0x0) 2.204656503s ago: executing program 2 (id=198): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000500)=0x2, 0x4) write$tun(r1, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x18, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xb, 0x10000}}}}}}}}, 0x52) 2.195511247s ago: executing program 4 (id=199): socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x401}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0x3, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) connect$netlink(r1, &(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfe, 0x2000000}, 0xc) ioctl$IMGETCOUNT(r0, 0x400261f2, 0x0) 2.158551909s ago: executing program 3 (id=200): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$netlink(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r6 = socket(0x10, 0x3, 0x0) close(r5) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.721293539s ago: executing program 0 (id=201): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b160000000000000000020000084400048018000180080001006f7366000c000280080001400000000428000180080001006e6174001c00028008000140000040000800034000000014080002400000000209000100"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 1.562145321s ago: executing program 1 (id=202): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x5, 0x6, 0x6}, 0x38}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, 0x0, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200000314000e00003c000300000000ff8400000000000000000000000000060000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) 1.299192678s ago: executing program 2 (id=203): syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xa, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008015}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000c00)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4040889}, 0x40) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) 1.10322684s ago: executing program 0 (id=204): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 718.561997ms ago: executing program 3 (id=205): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x3a00, 0x88be, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0x3e) 468.607655ms ago: executing program 0 (id=206): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000008b40)=[{{0x0, 0x0, &(0x7f00000035c0)=[{0x0}, {&(0x7f0000001140)=""/53, 0x35}], 0x2}, 0x3}], 0x1, 0x2, 0x0) 0s ago: executing program 2 (id=207): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r1, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x10e80, &(0x7f00000000c0)=ANY=[], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.142' (ED25519) to the list of known hosts. [ 168.390729][ T5753] cgroup: Unknown subsys name 'net' [ 168.531750][ T5753] cgroup: Unknown subsys name 'cpuset' [ 168.546729][ T5753] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 174.145332][ T5753] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 178.225589][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 178.233587][ T49] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 178.246908][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 178.255428][ T5786] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 178.265443][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 178.274741][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 178.284036][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 178.292856][ T5789] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 178.300497][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 178.310125][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 178.319463][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 178.324522][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 178.336963][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 178.339539][ T5789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 178.346672][ T5791] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 178.356220][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 178.367840][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 178.370108][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 178.385423][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 178.395898][ T5789] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 178.414170][ T5789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 178.414496][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 178.431111][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 178.431871][ T5789] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 178.451874][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 179.866487][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 180.060233][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 180.181662][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 180.350866][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 180.457630][ T5789] Bluetooth: hci3: command tx timeout [ 180.519040][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 180.533278][ T5789] Bluetooth: hci1: command tx timeout [ 180.536983][ T5782] Bluetooth: hci2: command tx timeout [ 180.538916][ T5791] Bluetooth: hci0: command tx timeout [ 180.544888][ T49] Bluetooth: hci4: command tx timeout [ 180.913245][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.933507][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.941129][ T5771] bridge_slave_0: entered allmulticast mode [ 180.986948][ T5771] bridge_slave_0: entered promiscuous mode [ 181.069314][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.077447][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.085201][ T5771] bridge_slave_1: entered allmulticast mode [ 181.095401][ T5771] bridge_slave_1: entered promiscuous mode [ 181.285722][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.297854][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.305665][ T5774] bridge_slave_0: entered allmulticast mode [ 181.315611][ T5774] bridge_slave_0: entered promiscuous mode [ 181.340191][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.399207][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.406830][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.414631][ T5774] bridge_slave_1: entered allmulticast mode [ 181.422627][ T5774] bridge_slave_1: entered promiscuous mode [ 181.440602][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.451411][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.458972][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.466652][ T5772] bridge_slave_0: entered allmulticast mode [ 181.475263][ T5772] bridge_slave_0: entered promiscuous mode [ 181.572522][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.580182][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.587771][ T5772] bridge_slave_1: entered allmulticast mode [ 181.596062][ T5772] bridge_slave_1: entered promiscuous mode [ 181.628242][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.636128][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.643855][ T5775] bridge_slave_0: entered allmulticast mode [ 181.652061][ T5775] bridge_slave_0: entered promiscuous mode [ 181.665617][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.672912][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.680609][ T5775] bridge_slave_1: entered allmulticast mode [ 181.689219][ T5775] bridge_slave_1: entered promiscuous mode [ 181.767797][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.775698][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.788021][ T5773] bridge_slave_0: entered allmulticast mode [ 181.796750][ T5773] bridge_slave_0: entered promiscuous mode [ 181.836477][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.855783][ T5771] team0: Port device team_slave_0 added [ 181.888555][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.896505][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.904535][ T5773] bridge_slave_1: entered allmulticast mode [ 181.913326][ T5773] bridge_slave_1: entered promiscuous mode [ 182.007030][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.026315][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.044431][ T5771] team0: Port device team_slave_1 added [ 182.060105][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.098023][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.160272][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.298041][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.337926][ T5774] team0: Port device team_slave_0 added [ 182.346011][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.353458][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.379827][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.422120][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.438443][ T5775] team0: Port device team_slave_0 added [ 182.452504][ T5774] team0: Port device team_slave_1 added [ 182.461308][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.468755][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.495254][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.514947][ T5772] team0: Port device team_slave_0 added [ 182.533256][ T5782] Bluetooth: hci3: command tx timeout [ 182.555136][ T5775] team0: Port device team_slave_1 added [ 182.613521][ T5782] Bluetooth: hci2: command tx timeout [ 182.619211][ T5782] Bluetooth: hci0: command tx timeout [ 182.625251][ T49] Bluetooth: hci4: command tx timeout [ 182.630798][ T49] Bluetooth: hci1: command tx timeout [ 182.644547][ T5772] team0: Port device team_slave_1 added [ 182.698185][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.705569][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.731889][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.750037][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.757343][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.783648][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.830686][ T5773] team0: Port device team_slave_0 added [ 182.846166][ T5773] team0: Port device team_slave_1 added [ 182.879942][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.887197][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.913447][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.031415][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.038589][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.064772][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.094822][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.101864][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.129429][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.201989][ T5771] hsr_slave_0: entered promiscuous mode [ 183.210543][ T5771] hsr_slave_1: entered promiscuous mode [ 183.229051][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.236391][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.263571][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.277398][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.284699][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.311047][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.416383][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.423580][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.450061][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.519471][ T5774] hsr_slave_0: entered promiscuous mode [ 183.528157][ T5774] hsr_slave_1: entered promiscuous mode [ 183.536190][ T5774] debugfs: 'hsr0' already exists in 'hsr' [ 183.542031][ T5774] Cannot create hsr debugfs directory [ 183.614955][ T5775] hsr_slave_0: entered promiscuous mode [ 183.623644][ T5775] hsr_slave_1: entered promiscuous mode [ 183.631127][ T5775] debugfs: 'hsr0' already exists in 'hsr' [ 183.637172][ T5775] Cannot create hsr debugfs directory [ 183.907491][ T5772] hsr_slave_0: entered promiscuous mode [ 183.916421][ T5772] hsr_slave_1: entered promiscuous mode [ 183.924386][ T5772] debugfs: 'hsr0' already exists in 'hsr' [ 183.930202][ T5772] Cannot create hsr debugfs directory [ 184.060566][ T5773] hsr_slave_0: entered promiscuous mode [ 184.069069][ T5773] hsr_slave_1: entered promiscuous mode [ 184.077201][ T5773] debugfs: 'hsr0' already exists in 'hsr' [ 184.083192][ T5773] Cannot create hsr debugfs directory [ 184.613326][ T49] Bluetooth: hci3: command tx timeout [ 184.693317][ T49] Bluetooth: hci1: command tx timeout [ 184.698903][ T49] Bluetooth: hci4: command tx timeout [ 184.704779][ T5782] Bluetooth: hci0: command tx timeout [ 184.705712][ T5791] Bluetooth: hci2: command tx timeout [ 184.901590][ T5771] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 184.961412][ T5771] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 184.979527][ T5771] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 185.044496][ T5771] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 185.245627][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 185.276105][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 185.301032][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 185.336363][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 185.499298][ T5775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 185.525250][ T5775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 185.582112][ T5775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 185.630035][ T5775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 185.884615][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 185.909086][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 185.969343][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 186.030123][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 186.145494][ T5773] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 186.211147][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.222462][ T5773] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 186.246043][ T5773] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 186.282635][ T5773] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 186.521461][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.581891][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.589429][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.640909][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.688016][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.695406][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.703599][ T5791] Bluetooth: hci3: command tx timeout [ 186.774504][ T5791] Bluetooth: hci4: command tx timeout [ 186.775483][ T49] Bluetooth: hci2: command tx timeout [ 186.780063][ T5791] Bluetooth: hci0: command tx timeout [ 186.787576][ T5782] Bluetooth: hci1: command tx timeout [ 186.910654][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.957172][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.110478][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.118047][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.239386][ T3478] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.246913][ T3478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.330913][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.454924][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.481892][ T3478] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.489436][ T3478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.564418][ T3478] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.571707][ T3478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.673727][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.821507][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.865272][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.928144][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.935720][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.000725][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.008096][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.079094][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.086749][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.180441][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.188028][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.411209][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.078990][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.260768][ T5771] veth0_vlan: entered promiscuous mode [ 189.370785][ T5771] veth1_vlan: entered promiscuous mode [ 189.432489][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.856135][ T5771] veth0_macvtap: entered promiscuous mode [ 189.907016][ T5774] veth0_vlan: entered promiscuous mode [ 189.935988][ T5771] veth1_macvtap: entered promiscuous mode [ 190.006560][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.071481][ T5774] veth1_vlan: entered promiscuous mode [ 190.132613][ T5775] veth0_vlan: entered promiscuous mode [ 190.167678][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.203680][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.286352][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.352236][ T5775] veth1_vlan: entered promiscuous mode [ 190.410370][ T53] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.420626][ T53] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.487478][ T53] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.511210][ T53] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.753080][ T5774] veth0_macvtap: entered promiscuous mode [ 190.820099][ T5772] veth0_vlan: entered promiscuous mode [ 190.881490][ T5774] veth1_macvtap: entered promiscuous mode [ 191.006988][ T5775] veth0_macvtap: entered promiscuous mode [ 191.065102][ T5775] veth1_macvtap: entered promiscuous mode [ 191.110221][ T5772] veth1_vlan: entered promiscuous mode [ 191.190370][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.346410][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.395333][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.483655][ T53] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.577420][ T53] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.594139][ T53] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.607729][ T53] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.642382][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.760495][ T5772] veth0_macvtap: entered promiscuous mode [ 191.827935][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.915335][ T5772] veth1_macvtap: entered promiscuous mode [ 191.931982][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.943661][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.003839][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.145509][ T5773] veth0_vlan: entered promiscuous mode [ 192.271952][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.342573][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.364898][ T5773] veth1_vlan: entered promiscuous mode [ 192.474544][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.497670][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.529918][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.564983][ T5881] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.928076][ T5773] veth0_macvtap: entered promiscuous mode [ 193.080851][ T5773] veth1_macvtap: entered promiscuous mode [ 193.380336][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.512390][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.615208][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.667474][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.700106][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.753887][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.311755][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.364234][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.634733][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.673732][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.109402][ T5771] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 196.925323][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.963885][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.188397][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.228577][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.863206][ T5881] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.871200][ T5881] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.128586][ T5881] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.185515][ T5881] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.923247][ T5845] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.931236][ T5845] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.164966][ T5971] netlink: 5 bytes leftover after parsing attributes in process `syz.0.8'. [ 199.273441][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.281456][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.918597][ T5983] netlink: 'syz.0.11': attribute type 2 has an invalid length. [ 199.927060][ T5983] netlink: 164 bytes leftover after parsing attributes in process `syz.0.11'. [ 200.364656][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.372650][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.563497][ T5985] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'. [ 200.698953][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.725827][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.383237][ T5995] syz.1.14 uses obsolete (PF_INET,SOCK_PACKET) [ 201.471058][ T5993] Illegal XDP return value 5993 on prog (id 4) dev N/A, expect packet loss! [ 203.518166][ T6018] netlink: 60 bytes leftover after parsing attributes in process `syz.2.23'. [ 203.569958][ T6022] netlink: 60 bytes leftover after parsing attributes in process `syz.2.23'. [ 203.899735][ T6024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25'. [ 204.933469][ T6040] syzkaller0: entered promiscuous mode [ 204.939132][ T6040] syzkaller0: entered allmulticast mode [ 208.311635][ T6087] syzkaller0: entered promiscuous mode [ 208.353674][ T6087] syzkaller0: entered allmulticast mode [ 208.609730][ T6091] Zero length message leads to an empty skb [ 209.032421][ T6093] syzkaller0: entered promiscuous mode [ 209.073576][ T6093] syzkaller0: entered allmulticast mode [ 210.108398][ T6109] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 210.201742][ T6109] netlink: 28 bytes leftover after parsing attributes in process `syz.1.57'. [ 210.252392][ T6109] netlink: 28 bytes leftover after parsing attributes in process `syz.1.57'. [ 210.730060][ T6109] batadv0: entered promiscuous mode [ 210.768159][ T6109] bond0: entered promiscuous mode [ 210.787628][ T6109] bond_slave_0: entered promiscuous mode [ 210.882923][ T6109] bond_slave_1: entered promiscuous mode [ 210.926394][ T6109] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 211.236443][ T6122] evm: overlay not supported [ 212.065017][ T6131] syzkaller1: entered promiscuous mode [ 212.083648][ T6131] syzkaller1: entered allmulticast mode [ 212.827424][ T6135] syzkaller0: entered promiscuous mode [ 212.835263][ T6135] syzkaller0: entered allmulticast mode [ 214.029059][ T6157] sch_tbf: burst 545 is lower than device lo mtu (65550) ! [ 214.731495][ T6164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.76'. [ 215.310996][ T6170] syzkaller0: entered promiscuous mode [ 215.393551][ T6170] syzkaller0: entered allmulticast mode [ 215.712010][ T6176] syzkaller0: entered promiscuous mode [ 215.723530][ T6176] syzkaller0: entered allmulticast mode [ 216.472415][ T6186] netlink: 20 bytes leftover after parsing attributes in process `syz.1.87'. [ 216.507754][ T6186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.87'. [ 216.556157][ T6186] netlink: 31 bytes leftover after parsing attributes in process `syz.1.87'. [ 216.653663][ T6186] netlink: 'syz.1.87': attribute type 3 has an invalid length. [ 216.661470][ T6186] netlink: 'syz.1.87': attribute type 2 has an invalid length. [ 216.703319][ T6186] netlink: 31 bytes leftover after parsing attributes in process `syz.1.87'. [ 216.746586][ T6186] netlink: 16 bytes leftover after parsing attributes in process `syz.1.87'. [ 217.079784][ T6191] tipc: Started in network mode [ 217.108765][ T6191] tipc: Node identity dea68e22fe34, cluster identity 4711 [ 217.164629][ T6191] tipc: Enabled bearer , priority 0 [ 217.186578][ T6196] syzkaller0: entered promiscuous mode [ 217.192244][ T6196] syzkaller0: entered allmulticast mode [ 217.392043][ T6204] netlink: 44 bytes leftover after parsing attributes in process `syz.3.89'. [ 217.522366][ T6191] tipc: Resetting bearer [ 217.586191][ T6189] tipc: Resetting bearer [ 217.647973][ T6189] tipc: Disabling bearer [ 218.080343][ T6209] bridge1: entered allmulticast mode [ 218.172877][ T6209] team0: Port device bridge1 added [ 218.713546][ T6217] syzkaller0: entered promiscuous mode [ 218.730012][ T6217] syzkaller0: entered allmulticast mode [ 219.865217][ T6234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.104'. [ 219.887564][ T6235] netlink: 24 bytes leftover after parsing attributes in process `syz.4.106'. [ 220.539927][ T6241] netlink: 24 bytes leftover after parsing attributes in process `syz.3.108'. [ 220.697116][ T6243] bridge1: entered allmulticast mode [ 220.789881][ T6243] team0: Port device bridge1 added [ 220.924970][ T6250] netlink: 24 bytes leftover after parsing attributes in process `syz.2.112'. [ 222.082791][ T6265] netlink: 24 bytes leftover after parsing attributes in process `syz.3.119'. [ 222.893939][ T6276] netlink: 24 bytes leftover after parsing attributes in process `syz.0.125'. [ 223.450423][ T6286] netlink: 24 bytes leftover after parsing attributes in process `syz.2.127'. [ 223.481791][ T6288] ieee802154 phy0 wpan0: encryption failed: -90 [ 223.843982][ T6284] bridge1: entered allmulticast mode [ 223.867815][ T6284] team0: Port device bridge1 added [ 224.503814][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.516443][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 224.917887][ T6307] netlink: 24 bytes leftover after parsing attributes in process `syz.3.134'. [ 226.270908][ T6325] sch_tbf: burst 545 is lower than device lo mtu (65550) ! [ 226.349849][ T6324] bridge1: entered allmulticast mode [ 226.476599][ T6324] team0: Port device bridge1 added [ 226.490643][ T6327] syzkaller1: entered promiscuous mode [ 226.505347][ T6327] syzkaller1: entered allmulticast mode [ 226.935531][ T6331] syzkaller0: entered promiscuous mode [ 226.941207][ T6331] syzkaller0: entered allmulticast mode [ 227.047607][ T6334] tipc: Enabling of bearer rejected, failed to enable media [ 227.369144][ T6342] netlink: 24 bytes leftover after parsing attributes in process `syz.4.149'. [ 228.808233][ T6359] sch_tbf: burst 545 is lower than device lo mtu (65550) ! [ 229.020635][ T6361] syzkaller0: entered promiscuous mode [ 229.053628][ T6361] syzkaller0: entered allmulticast mode [ 229.505755][ T6369] netlink: 24 bytes leftover after parsing attributes in process `syz.1.162'. [ 229.599273][ T6368] syzkaller0: entered promiscuous mode [ 229.622521][ T6368] syzkaller0: entered allmulticast mode [ 229.770824][ T6374] tipc: Enabling of bearer rejected, failed to enable media [ 231.557528][ T6403] sch_tbf: burst 545 is lower than device lo mtu (65550) ! [ 231.965891][ T6409] netlink: 24 bytes leftover after parsing attributes in process `syz.4.176'. [ 232.096060][ T6410] syzkaller0: entered promiscuous mode [ 232.121279][ T6410] syzkaller0: entered allmulticast mode [ 232.170571][ T6412] tipc: Enabling of bearer rejected, failed to enable media [ 232.503797][ T6418] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 232.548493][ T6418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.179'. [ 232.593290][ T6418] bridge_slave_1: left allmulticast mode [ 232.621121][ T6418] bridge_slave_1: left promiscuous mode [ 232.693977][ T6418] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.791232][ T6421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.179'. [ 232.880336][ T6421] netlink: 348 bytes leftover after parsing attributes in process `syz.3.179'. [ 233.048477][ T6418] bridge_slave_0: left allmulticast mode [ 233.048818][ T6421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.179'. [ 233.095037][ T6418] bridge_slave_0: left promiscuous mode [ 233.140369][ T6427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.179'. [ 233.142614][ T6418] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.225348][ T6421] netlink: 348 bytes leftover after parsing attributes in process `syz.3.179'. [ 233.289358][ T6421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.179'. [ 234.189557][ T6435] tipc: Enabling of bearer rejected, failed to enable media [ 235.489362][ T6473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.191'. [ 235.899899][ T6477] tipc: Started in network mode [ 235.938225][ T6477] tipc: Node identity 0e845bf301f1, cluster identity 4711 [ 236.004958][ T6477] tipc: Enabled bearer , priority 10 [ 236.033439][ T6478] syzkaller0: entered promiscuous mode [ 236.039088][ T6478] syzkaller0: entered allmulticast mode [ 236.212893][ T6477] tipc: Resetting bearer [ 236.260367][ T6476] tipc: Resetting bearer [ 236.281788][ T6476] tipc: Disabling bearer [ 236.497683][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.195'. [ 236.654925][ T6483] syzkaller0: entered promiscuous mode [ 236.713452][ T6483] syzkaller0: entered allmulticast mode [ 236.781865][ T6483] tipc: Enabling of bearer rejected, failed to enable media [ 237.379113][ T6506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.199'. [ 237.426181][ T6504] tipc: Enabled bearer , priority 0 [ 237.603740][ T6500] syzkaller0: entered promiscuous mode [ 237.646404][ T6500] syzkaller0: entered allmulticast mode [ 237.659581][ T6509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.201'. [ 237.700433][ T6504] netlink: 44 bytes leftover after parsing attributes in process `syz.3.200'. [ 237.770658][ T6510] tipc: Resetting bearer [ 237.885923][ T6499] tipc: Resetting bearer [ 237.914321][ T6499] tipc: Disabling bearer [ 238.170189][ T6517] netlink: 24 bytes leftover after parsing attributes in process `syz.2.203'. [ 238.469270][ T6518] syzkaller0: entered promiscuous mode [ 238.478500][ T6518] syzkaller0: entered allmulticast mode [ 239.256363][ T6534] ===================================================== [ 239.263683][ T6534] BUG: KMSAN: uninit-value in bpf_prog_run_generic_xdp+0x19a5/0x20d0 [ 239.272053][ T6534] bpf_prog_run_generic_xdp+0x19a5/0x20d0 [ 239.278123][ T6534] do_xdp_generic+0xdef/0x1760 [ 239.283146][ T6534] tun_get_user+0x525a/0x7830 [ 239.288004][ T6534] tun_chr_write_iter+0x3e9/0x5c0 [ 239.293389][ T6534] vfs_write+0xbe1/0x15c0 [ 239.297853][ T6534] ksys_write+0x1d9/0x470 [ 239.302320][ T6534] __ia32_sys_write+0x9a/0xf0 [ 239.307315][ T6534] ia32_sys_call+0x37a7/0x4360 [ 239.312234][ T6534] do_int80_emulation+0x15a/0x330 [ 239.317523][ T6534] asm_int80_emulation+0x1f/0x30 [ 239.322606][ T6534] [ 239.325089][ T6534] Uninit was stored to memory at: [ 239.330336][ T6534] pskb_expand_head+0x4a0/0x1fb0 [ 239.335534][ T6534] do_xdp_generic+0xb18/0x1760 [ 239.340458][ T6534] tun_get_user+0x525a/0x7830 [ 239.345426][ T6534] tun_chr_write_iter+0x3e9/0x5c0 [ 239.350631][ T6534] vfs_write+0xbe1/0x15c0 [ 239.355218][ T6534] ksys_write+0x1d9/0x470 [ 239.359686][ T6534] __ia32_sys_write+0x9a/0xf0 [ 239.364615][ T6534] ia32_sys_call+0x37a7/0x4360 [ 239.369509][ T6534] do_int80_emulation+0x15a/0x330 [ 239.374813][ T6534] asm_int80_emulation+0x1f/0x30 [ 239.379890][ T6534] [ 239.382275][ T6534] Uninit was created at: [ 239.386842][ T6534] __kmalloc_node_track_caller_noprof+0x4ff/0x1710 [ 239.393618][ T6534] __alloc_skb+0x90d/0x1190 [ 239.398259][ T6534] alloc_skb_with_frags+0xc5/0xa60 [ 239.403723][ T6534] sock_alloc_send_pskb+0xacb/0xc60 [ 239.409102][ T6534] tun_get_user+0xcfc/0x7830 [ 239.413986][ T6534] tun_chr_write_iter+0x3e9/0x5c0 [ 239.419215][ T6534] vfs_write+0xbe1/0x15c0 [ 239.423810][ T6534] ksys_write+0x1d9/0x470 [ 239.428297][ T6534] __ia32_sys_write+0x9a/0xf0 [ 239.433232][ T6534] ia32_sys_call+0x37a7/0x4360 [ 239.438141][ T6534] do_int80_emulation+0x15a/0x330 [ 239.443449][ T6534] asm_int80_emulation+0x1f/0x30 [ 239.448575][ T6534] [ 239.451016][ T6534] CPU: 0 UID: 0 PID: 6534 Comm: syz.2.207 Not tainted syzkaller #0 PREEMPT(full) [ 239.460484][ T6534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 239.470812][ T6534] ===================================================== [ 239.477941][ T6534] Disabling lock debugging due to kernel taint [ 239.484308][ T6534] Kernel panic - not syncing: kmsan.panic set ... [ 239.490852][ T6534] CPU: 0 UID: 0 PID: 6534 Comm: syz.2.207 Tainted: G B syzkaller #0 PREEMPT(full) [ 239.501786][ T6534] Tainted: [B]=BAD_PAGE [ 239.506011][ T6534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 239.516174][ T6534] Call Trace: [ 239.519524][ T6534] [ 239.522527][ T6534] __dump_stack+0x26/0x30 [ 239.527006][ T6534] dump_stack_lvl+0x50/0x1c0 [ 239.531734][ T6534] ? dump_stack+0x12/0x25 [ 239.536205][ T6534] dump_stack+0x1e/0x25 [ 239.540504][ T6534] vpanic+0x7b4/0x1430 [ 239.544739][ T6534] panic+0x15d/0x160 [ 239.548826][ T6534] kmsan_report+0x31a/0x320 [ 239.553480][ T6534] ? __msan_warning+0x1b/0x30 [ 239.558294][ T6534] ? bpf_prog_run_generic_xdp+0x19a5/0x20d0 [ 239.564348][ T6534] ? do_xdp_generic+0xdef/0x1760 [ 239.569462][ T6534] ? tun_get_user+0x525a/0x7830 [ 239.574503][ T6534] ? tun_chr_write_iter+0x3e9/0x5c0 [ 239.579900][ T6534] ? vfs_write+0xbe1/0x15c0 [ 239.584569][ T6534] ? ksys_write+0x1d9/0x470 [ 239.589211][ T6534] ? __ia32_sys_write+0x9a/0xf0 [ 239.594286][ T6534] ? ia32_sys_call+0x37a7/0x4360 [ 239.599431][ T6534] ? do_int80_emulation+0x15a/0x330 [ 239.604796][ T6534] ? asm_int80_emulation+0x1f/0x30 [ 239.610033][ T6534] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 239.616013][ T6534] ? ___bpf_prog_run+0xea23/0xeb60 [ 239.621366][ T6534] ? __bpf_prog_run32+0xc2/0xf0 [ 239.626399][ T6534] ? kmsan_get_metadata+0xf1/0x160 [ 239.631683][ T6534] __msan_warning+0x1b/0x30 [ 239.636319][ T6534] bpf_prog_run_generic_xdp+0x19a5/0x20d0 [ 239.642242][ T6534] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 239.648289][ T6534] do_xdp_generic+0xdef/0x1760 [ 239.653271][ T6534] ? tun_get_user+0x51dc/0x7830 [ 239.658311][ T6534] tun_get_user+0x525a/0x7830 [ 239.663167][ T6534] ? stack_depot_save_flags+0x35/0x790 [ 239.668758][ T6534] ? kmsan_get_metadata+0xf1/0x160 [ 239.674041][ T6534] ? kmsan_get_metadata+0xf1/0x160 [ 239.679318][ T6534] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 239.685840][ T6534] ? kmsan_get_metadata+0x30/0x160 [ 239.691152][ T6534] tun_chr_write_iter+0x3e9/0x5c0 [ 239.696365][ T6534] vfs_write+0xbe1/0x15c0 [ 239.700854][ T6534] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 239.706582][ T6534] ksys_write+0x1d9/0x470 [ 239.711062][ T6534] __ia32_sys_write+0x9a/0xf0 [ 239.715884][ T6534] ia32_sys_call+0x37a7/0x4360 [ 239.720771][ T6534] do_int80_emulation+0x15a/0x330 [ 239.725958][ T6534] ? clear_bhb_loop+0x50/0xa0 [ 239.730762][ T6534] ? clear_bhb_loop+0x50/0xa0 [ 239.735582][ T6534] asm_int80_emulation+0x1f/0x30 [ 239.740660][ T6534] RIP: 0023:0xf710572b [ 239.744825][ T6534] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 239.764570][ T6534] RSP: 002b:00000000f53c644c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 239.773135][ T6534] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 00000000800000c0 [ 239.781226][ T6534] RDX: 0000000000010e80 RSI: 0000000000000000 RDI: 0000000000000000 [ 239.789297][ T6534] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 239.797369][ T6534] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 239.805434][ T6534] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 239.813536][ T6534] [ 239.817053][ T6534] Kernel Offset: disabled [ 239.821418][ T6534] Rebooting in 86400 seconds..