last executing test programs: 22.697522636s ago: executing program 3 (id=211): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f00000014c0)="dc", 0x1}], 0x2}, 0x4000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000480)="7800000018002507b9409b14ffff00000204be04020506050e0204095c0009003f0000000a0000000d0085a168d0bf46d32345653600648d0a0015000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000340)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000380)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000003c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000400)=@gcm_256={{0x304}, "00e1ffffff00", "5985e81ad0d9585bc175cbecd3f55eb699e3ee0bc206f3ba527c85bde06fbf19", '\x00', '\x00\x00\x00\f\x00'}, 0x38) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r4) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYRES64=r0, @ANYRES16=r4, @ANYBLOB="010000000000000000000d0100000a0001007770616e3000000006000a000100000006000800ffff0000050007000b000000050017000f000000050018000f000000050019000100000005001a000000000005001b"], 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00082dbd7000fbdbdf2523000000050023001d0000000a0001007770616e3453d00008000200", @ANYRES32=r6, @ANYBLOB="08002400bad300000a0001007770616e340000000500250002000000050021000700000005002700800000000500230005000000"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x54) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x4, &(0x7f0000000440)=@gcm_128={{0x304}, "cdbef90c18b633a0", "fa07b3a2d40586d364f360be6df53598", "7eb00b44", "e598980949a58c71"}, 0x28) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r1) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="030100000000000000000800000015000100000000000000005adc0c00"/38], 0x2c}}, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="6d932bbd70000000000001000000080003"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) 22.5156907s ago: executing program 3 (id=213): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newtaction={0x14, 0x30, 0x2, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x41) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r2, &(0x7f0000000440)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) recvmsg(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x140) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @broadcast}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x4810) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x2c, r8, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000c8dfe27f9404d6dd78996e754b63ff496cac4f57c20364107ddee88bf5f86d656c3eeaad4f94bafa9ed5030fc8a17ea2116064811a2c47e5dabc06ef76a470d4efee74dc6e181d69bba8bca3030b6c04f371", @ANYRES16=r8, @ANYBLOB="010027bd7000ffdbdf25020000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000800010000000000140000004500801600000000000190780a010100ac1414aa040090780000000045000000000000000011000aac1414aa7f000001"], 0xfdef) 22.24676544s ago: executing program 3 (id=218): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x20000078}}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000005c0)={0x2, &(0x7f0000000600)=[{0x20, 0x0, 0xfd, 0x5ae9}, {0x6, 0x2, 0x3, 0x3}]}, 0x10) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x7, 0x0, 0x0, {}, {r3, r4/1000+10000}, {}, 0x7, @can={{}, 0x3, 0x1, 0x0, 0x0, "8bc7e9385559d457"}}, 0x48}}, 0x0) connect$inet6(r1, &(0x7f0000000dc0)={0xa, 0x4e24, 0x20000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000e40)=[{{0x0, 0x11, &(0x7f0000000e80), 0x171}}], 0x400000000000172, 0x4000000) 22.034508505s ago: executing program 3 (id=222): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x6, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r1, @ANYRES16=r2, @ANYBLOB="050200000000fddbdf251200000018000180140002007369743000"/38], 0x2c}}, 0x0) 21.823712075s ago: executing program 3 (id=225): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x44200, &(0x7f0000000040)={@_ha_fsid={[0x1, 0x3]}, {0xe42, 0xfe01, 0x6, 0xd4a}}, 0x5, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x80000000}) getsockopt$inet_sctp6_SCTP_ECN_SUPPORTED(r0, 0x84, 0x82, &(0x7f0000000140)={0x1, 0x7fc00000}, &(0x7f0000000180)=0x8) r2 = accept4$x25(r0, &(0x7f00000001c0)={0x9, @remote}, &(0x7f0000000200)=0x12, 0x800) ioctl$SIOCX25GCALLUSERDATA(r2, 0x89e4, &(0x7f0000000240)={0x15, "1e448cc0dde26e0733db8f7f7ee1f4d2e31b913a06a84fb33fb49422652a70598f818764094527f4280b617c062a4545a02025f29691f51ddfbfb19ca4ec7064d1ea37709f1639c7f66b35925cab3765eeab5b940a64fdd7e6d6c5804d186f3aa26801073d60aa6697d625a2d0423e1aa0d9ee3e6bfbca11b036b4204ac78dbe"}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000300)={r1, 0x7, 0x0, 0x2}, &(0x7f0000000340)=0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x4, 0x10, 0x4, 0x7, 0x1, @empty, @mcast1, 0xa1, 0x10, 0xfffffffe, 0x4}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r0, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x4) getsockname$packet(r0, &(0x7f0000000640)={0x11, 0x0, 0x0}, &(0x7f0000000680)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000740)={'ip_vti0\x00', &(0x7f00000006c0)={'syztnl0\x00', 0x0, 0x7800, 0x20, 0xfff, 0x9, {{0x16, 0x4, 0x0, 0x5, 0x58, 0x65, 0x0, 0x7b, 0x2f, 0x0, @loopback, @loopback, {[@timestamp_addr={0x44, 0x3c, 0x80, 0x1, 0x6, [{@multicast2, 0x3ff}, {@remote, 0x10000}, {@remote, 0x5}, {@multicast1, 0x4}, {@rand_addr=0x64010102, 0x1}, {@local, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x8}]}, @lsrr={0x83, 0x7, 0xd1, [@empty]}]}}}}}) getpeername$packet(r0, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f0000000800)={0x1ec, r4, 0x201, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0xc2145ee9bd8be496}, 0x8004) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000c80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x148, r4, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x40000}, 0x4040010) r12 = socket(0x1d, 0x80000, 0x5) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), 0xffffffffffffffff) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r12, 0x942e, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r0, 0x84, 0x7a, &(0x7f0000000d00)={r3, 0xffffffffffffffff, 0x80800}, &(0x7f0000000d40)=0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r13, 0x84, 0x70, &(0x7f0000000d80)={r3, @in6={{0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x11}, 0x200}}, [0x2, 0xd1c, 0x8000, 0x8, 0xfff, 0x10001, 0x6, 0x3ff, 0x2, 0x7, 0x81, 0x1, 0x2, 0x2, 0x7]}, &(0x7f0000000e80)=0x100) r14 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r14, 0xc0805841, &(0x7f0000000ec0)={0x8, 0x5, 0x401, 0x20d, 0x6f}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r12, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x6c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfff, 0x17}}}}, [@NL80211_ATTR_IE={0x13, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0xb, 0xae, 0x3}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x8}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x24}, @NL80211_ATTR_IE={0x28, 0x2a, [@ht={0x2d, 0x1a, {0x8000, 0x1, 0x1, 0x0, {0x100, 0xbda, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0, 0x4, 0x1}}, @mesh_id={0x72, 0x6}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2004}, 0x20000000) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f0000001080)) socket$nl_generic(0x10, 0x3, 0x10) close(r12) ioctl$FS_IOC_SETFLAGS(r14, 0x40086602, &(0x7f00000010c0)=0x40000) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x28, 0x1404, 0x100, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x64004001) shutdown(r13, 0x1) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000001540)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001500)={&(0x7f00000013c0)={0x104, r4, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x40048d4}, 0x0) 21.64174513s ago: executing program 0 (id=228): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 64) close(0x4) (async, rerun: 32) syz_open_procfs$namespace(0x0, &(0x7f0000000940)='ns/pid\x00') (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) socket$kcm(0x2a, 0x2, 0x0) (async, rerun: 64) socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000980)={0x2, 0x4e21, @local}, 0x10) (async) sendmsg$rds(r1, &(0x7f00000009c0)={&(0x7f0000000a00)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) (async, rerun: 64) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r4 = socket(0x10, 0x3, 0x0) (async, rerun: 32) listen(0xffffffffffffffff, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000840)={0x80}, 0x10) (async, rerun: 32) sendmsg$nl_route(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000000013"], 0x24}}, 0x0) (async, rerun: 32) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r7, 0x6, 0xd, &(0x7f00000007c0)="b86b", 0x2) (async) setsockopt$inet6_tcp_TLS_RX(r7, 0x6, 0x2, &(0x7f0000000800)=@ccm_128={{0x304}, "e9b172ecf2655b52", "7712b91180acb093fb6b48dce5ba7c41", "0711e4b2", "e9190a5ace69e884"}, 0x28) (async) setsockopt$inet6_tcp_int(r7, 0x6, 0x22, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x5}, {0xffff, 0xffff}, {0x12}}}, 0x24}}, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) (rerun: 32) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000005500e50226bd7000feffffff07000000", @ANYRES32=r8, @ANYBLOB="20000100", @ANYRES32=r8], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000100) 21.622193123s ago: executing program 3 (id=229): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x40600) unshare(0x50000) tee(r2, r2, 0x66f, 0x0) unshare(0x44000000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x14, 0x14}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000002c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf25070000000c00060000000000000000000c001700000000000000000008000300", @ANYRES32=r4, @ANYBLOB="0c00060000000000020000000c3efa000202aaaaaaaaaaaa12facc698253b145f8169c0f6529ed3a9a602ab1c30990af35ac392179580095da78c3e9499b6106c1ac8d9516fa67af2d25c64a2f9de1e64ef51df4b48ee3"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r0) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) unshare(0x40600) (async) unshare(0x50000) (async) tee(r2, r2, 0x66f, 0x0) (async) unshare(0x44000000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x14, 0x14}}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000002c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf25070000000c00060000000000000000000c001700000000000000000008000300", @ANYRES32=r4, @ANYBLOB="0c00060000000000020000000c3efa000202aaaaaaaaaaaa12facc698253b145f8169c0f6529ed3a9a602ab1c30990af35ac392179580095da78c3e9499b6106c1ac8d9516fa67af2d25c64a2f9de1e64ef51df4b48ee3"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x80) (async) 21.140946791s ago: executing program 4 (id=233): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000080), 0x4) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x1c, 0x5, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x5}]}, 0x1c}}, 0x0) (async) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$netlink(0x10, 0x3, 0x5) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000000c148aec6288f4ca4b3fdf25080001000200000008000100010000000800010001000000"], 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x40000) (async) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000500)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f00000005c0)={0x48, 0xd, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) (async) ioctl$TUNSETNOCSUM(r4, 0xff09, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000004000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000354000000120a01010000000000000000000000000900010073797a3000000000090002006f30303000000000080003400000000720000480060001000002000005000200110000000c000300080001000000001e54000000120a01010000000000000000020000000900010073797a3000000000090002006f303130000000000800034000000007200004800600fc000002000005000200", @ANYRESOCT], 0x3204}}, 0x0) 20.97399329s ago: executing program 2 (id=235): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000280)=0x8, 0x4) (async) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000280)=0x8, 0x4) recvmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'rose0\x00', 0x400}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'rose0\x00', 0x400}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x2}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000d0e4ae454c00060000000300000000000005000000000000612e8900"], 0x0, 0x2a, 0x0, 0x0, 0x1c16}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000500)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000580)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() sendmsg$nl_generic(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x2c, 0x2d, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x2, 0x0, 0x1, [@generic="cbd30d11251c9a26"]}, @nested={0x4, 0x7}, @typed={0x8, 0x1, 0x0, 0x0, @pid=r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd2b, 0x25dfdbfe, {0x7, 0x0, 0x0, r6, 0x80, 0xb3, 0x6}, [@NDA_LLADDR={0xa, 0x2, @random="81e03eeb2f9f"}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044}, 0x4040004) (async) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd2b, 0x25dfdbfe, {0x7, 0x0, 0x0, r6, 0x80, 0xb3, 0x6}, [@NDA_LLADDR={0xa, 0x2, @random="81e03eeb2f9f"}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044}, 0x4040004) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'vcan0\x00', 0x800}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r7, 0x40305829, 0x0) (async) ioctl$FITRIM(r7, 0x40305829, 0x0) 20.808532085s ago: executing program 4 (id=237): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}}) r1 = socket$inet(0x2, 0x3, 0x30) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000002180006801400040020010000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000040)={@dev, @local, @broadcast}, &(0x7f0000000100)=0x2c) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 20.651299924s ago: executing program 1 (id=238): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x32}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24040008) (async, rerun: 64) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x7, 0xa, &(0x7f00000000c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, 0x0}, 0x94) (async, rerun: 64) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2721, 0x0, &(0x7f00000003c0)) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0xe0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r4, &(0x7f0000000900)="a80000004100010003000000eaff0000030100002a0000003200010000112233445566778899aabb88a84500894f000140004011b778c0a80101c0a8010204d2162e000c00007465737400004c00020008000300010000001000010000008899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e08001600010000000600170000000000100003000c000c000600020000000000", 0xa8, 0x0, 0x0, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)={0xd8, 0x0, 0x401, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfc}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x24}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe870}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x47}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x808}, 0x0) r5 = socket(0x1d, 0x2, 0x6) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x6a, 0x1, 0x0, 0xc) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000280)={'vxcan1\x00', 0x0}) (rerun: 32) bind$can_raw(r5, &(0x7f00000002c0)={0x1d, r6}, 0x10) (async, rerun: 32) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xa, 0x1c, &(0x7f00000007c0)=ANY=[@ANYBLOB="1808000000490000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090b00000000007baaf0ff00000000bf8700000000000007080000fffdffffbca4000000000000a7040000f0ffffff740200001d00000018290000", @ANYRES32=r7, @ANYBLOB="0000000004000000b7050000080000006608f0ff76000000cf4900000000000056080000000000008500000001000000b70000000000000095"], &(0x7f00000008c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close(r8) 20.452039724s ago: executing program 4 (id=239): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000080)=0x3, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r4, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x7, &(0x7f0000000500)=0x8, 0x4) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010002000000fcdbdf25310000000c000180080001"], 0x20}}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x45}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x7d}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_PROTOCOL={0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x0, 0x14, 0x40}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 20.149181109s ago: executing program 2 (id=240): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, 0x0, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xffff24d6, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x194, 0x200006, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x9888, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x8, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0xd, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x8, 0x6, 0xd, 0x3, 0xa, 0xd0, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f788000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1040, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x30, 0xffffffffffffffff, 0xe674c000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) 20.14893078s ago: executing program 0 (id=241): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@security={'security\x00', 0x44, 0x4, 0x4f8, 0xffffffff, 0x330, 0x0, 0x330, 0xffffffff, 0xffffffff, 0x428, 0x428, 0x428, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @private2, [0xffffffff, 0xffffff00, 0x0, 0xd0f5bcfa7c76e88e], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'bond0\x00', 'wg0\x00', {}, {}, 0x87, 0x6, 0x5, 0x61}, 0x203, 0x210, 0x238, 0x8502, {}, [@common=@rt={{0x138}, {0x7, [0x77], 0x4, 0x1, 0x5, [@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @rand_addr=' \x01\x00', @local, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @local}, @ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @remote, @mcast1, @private1], 0x3}}, @common=@unspec=@cluster={{0x30}, {0x800, 0x7, 0x7, 0x1}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x8, 0x3}, {0x0, 0x24, 0x1}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x11}, [@common=@eui64={{0x28}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x3}}}, {{@ipv6={@mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0x0, 0xff, 0xffffffff], [0x0, 0xff, 0xffffffff, 0xffffffff], 'bond0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x29, 0xb6, 0x5}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x5b2f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 19.973781662s ago: executing program 4 (id=242): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x2, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x0, 0x5c4, 0x8000, 0x7, 0xffff, 0x3dc], [0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x75}}, 0x20000000) bind$phonet(r3, &(0x7f0000000180)={0x23, 0x7, 0x80, 0xe2}, 0x10) accept4(r0, 0x0, 0x0, 0x0) 19.843550696s ago: executing program 0 (id=243): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x304}, "2941190c1612a400", "333caf22d473fa037f8820e26313e592", "24ca36b2", "e47c37f2ddf4d5dd"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000200)=0x0) bind$nfc_llcp(r2, &(0x7f0000000240)={0x27, r4, 0xffffffffffffffff, 0x6, 0x0, 0xff, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f5237c9c58a8f60d4f1700000000000200000000001900", 0x3c}, 0x60) close(r3) getsockopt(r2, 0x1, 0x4, 0x0, &(0x7f0000000440)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0xfe86}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xfc96}, {&(0x7f00000014c0)="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", 0xdf3}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 19.416681157s ago: executing program 4 (id=244): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x79, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x2, &(0x7f0000000040)=[{0x6, 0xfa, 0x0, 0xe6}, {0x5, 0x0, 0x7, 0x5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000400)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000001000000000000000000"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)=ANY=[@ANYRESOCT=r2], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r2, &(0x7f0000000580), &(0x7f00000005c0)=@udp=r1}, 0x20) recvmsg(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)=""/149, 0x95}], 0x1}, 0x22) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)=0x100) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000880)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000ac0)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000b00)={0x28, 0x0, 0x2710}, 0x10) r7 = accept4(r5, 0x0, 0x0, 0x0) sendto(r7, &(0x7f0000000b40)='+', 0x1, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=""/211, 0xd3}}, {{0x0, 0x0, &(0x7f0000000d40), 0x2}}, {{0x0, 0x0, &(0x7f0000000d80)=[{0x0, 0x7}], 0x1}}], 0x3, 0x0, &(0x7f0000000dc0)={0x0, 0x3938700}) writev(r6, &(0x7f0000000e00)=[{&(0x7f0000000e40)='I', 0x1}], 0x1) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r8, &(0x7f0000000780), 0x9) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r9, 0x6, 0x15, 0x0, &(0x7f0000000900)) 19.416015s ago: executing program 1 (id=245): sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x60, 0x0, 0x1, 0x0, 0x0, {0x39}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x60}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900"], 0x48}}, 0x0) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20) (async, rerun: 32) ppoll(&(0x7f0000000100)=[{r0, 0x4000}, {r0, 0x8000}], 0x2, &(0x7f0000000140)={0x0, 0x3938700}, &(0x7f0000000180)={[0x1]}, 0x8) (rerun: 32) 19.356542414s ago: executing program 2 (id=246): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@private0, @mcast1, @private2, 0x1, 0x8, 0x5, 0x100, 0x15e0000000, 0x60}) sendto$inet6(r0, &(0x7f0000000500)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0xfd, 0xe5, 0x0, 0x6, 0x4, 0x6, 0x0, 0xf, 0x8}, 0xe) (async, rerun: 32) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) shutdown(r0, 0x1) (async, rerun: 32) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) (rerun: 32) 19.14766766s ago: executing program 1 (id=247): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000600), &(0x7f0000001380)=@udp=r0}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="31032cbd7000fbdbdf250b00000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0xc0) recvmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r5, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)="91cf", 0x2}], 0x1}, 0x0) sendmsg$rds(r5, &(0x7f0000000180)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x1, &(0x7f0000000300)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg$unix(r0, &(0x7f0000001040)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) 19.100487163s ago: executing program 4 (id=248): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, 0x0, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xffff24d6, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x194, 0x200006, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x9888, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x8, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0xd, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x8, 0x6, 0xd, 0x3, 0xa, 0xd0, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f788000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1040, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) (fail_nth: 4) 19.095008959s ago: executing program 2 (id=249): r0 = socket$inet(0x2, 0xa, 0x84) listen(r0, 0x3) (async) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x4d, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88a2c87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc509000000a4683a6bdcd7a1"}}}}}}}, 0x0) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) listen(r1, 0x7cea) shutdown(r0, 0x0) 18.939988861s ago: executing program 2 (id=250): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000010400000000ffdbdf0000000000", @ANYRES32=0x0, @ANYBLOB="00000000000005001c0012800b00010067656e65766500000c00028005000a00000000001400030067656e6576653100"], 0x50}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c000200657468746f6f6c"], 0x20}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 18.828662858s ago: executing program 1 (id=251): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000000c0)='o', 0x1}], 0x1}}], 0x1, 0x0) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) listen(r1, 0x5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x8901, &(0x7f0000000300)={r2}) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="90", 0x1}], 0x1}, 0x24004011) accept(r1, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0xfffffe19, 0x0, 0x0, 0x41, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 18.210678167s ago: executing program 0 (id=252): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) (async) listen(r0, 0x4) (async) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) close(r0) 18.147132263s ago: executing program 0 (id=253): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtaction={0xcc, 0x30, 0x51b, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_skbmod={0x54, 0x2, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x4, 0x10000000, 0x0, 0x6}, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xcc}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x5, 0x430, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000e80], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x4d1) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000240)) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) 17.844161461s ago: executing program 2 (id=254): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x80c80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000006c0)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x14, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x10, &(0x7f0000000340)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000003c0)=r6, 0x4) sendmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) close(r7) r8 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000a00)={'syzkaller0\x00', 0x0}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r10, &(0x7f0000000440)=[{&(0x7f0000000480)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) splice(r11, 0x0, r10, 0x0, 0x9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xa, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x5, &(0x7f00000008c0)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xe, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r12], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r13, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x6, 0xc, &(0x7f0000000e80)=ANY=[], &(0x7f0000000ec0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r14, 0x2000000, 0xe, 0x0, &(0x7f0000000f80)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$nl_route_sched(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffff9, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000b80)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbf, {0x0, 0x0, 0x0, r9, {0x5, 0xffe0}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x2000, 0x7, 0x2}, {{0x1, 0x0, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x5, 0x1, 0x1}, {0x9, 0x0, 0x7, 0x2, 0x5, 0x1}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045081}, 0x20004004) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000c00)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f0000000c40)={&(0x7f0000000c80)=@xdp={0x2c, 0x7, r9, 0x3d}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000d40)="5b9d", 0x2}], 0x1}, 0x5) 17.689161936s ago: executing program 0 (id=255): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000001280)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000012c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x102, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000c40)={'lo\x00', &(0x7f0000000c80)=@ethtool_per_queue_op={0x4b, 0xf, [0x2, 0x8, 0x10000, 0x8000007, 0x100, 0xfffffff9, 0xfffffffb, 0xb3, 0x3, 0x10001, 0x3107a6ef, 0xa889, 0xff, 0x401, 0x6, 0xfffffffd, 0xe03b, 0x2, 0x2, 0x2, 0x7f, 0x6, 0x7, 0x84, 0x0, 0x0, 0x9, 0x9, 0x1, 0x8, 0x0, 0xab, 0xb09, 0x1e, 0x2, 0xfffffffb, 0x10, 0x6, 0x0, 0x7, 0x5, 0xffff, 0x2, 0xf974, 0x4, 0x0, 0x7e, 0x4, 0x0, 0xffffffff, 0x100, 0x1d65, 0x2, 0x4, 0x80e, 0x9, 0xffff0001, 0x1, 0x3, 0x6, 0x100, 0xb12, 0x10001, 0x804, 0x1, 0x5, 0x4, 0x8, 0x2, 0xa, 0x10001, 0xb1, 0x2, 0x0, 0xb, 0x3ff, 0x8, 0x68, 0x800, 0x1000, 0xffffaa53, 0x1, 0x5a5, 0xc, 0x1, 0x1, 0x9, 0x52, 0x2, 0x2, 0x3, 0x2, 0x9, 0x7f, 0x10, 0x6, 0x9, 0x9, 0x3, 0x7fffffff, 0x400, 0x8, 0x4, 0x401, 0xfffffff9, 0x6867bc93, 0x8, 0x6, 0x10000, 0x834, 0x1, 0x1, 0xa021, 0xc, 0x3, 0x5b, 0x6, 0x2, 0x1, 0x4d51, 0x5, 0xc, 0x1a5, 0x1, 0x7, 0x8, 0x101, 0x3]}}) r2 = socket(0x1, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x100, 0x0, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xb}, {0x8, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c021}, 0x4048000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@newchain={0x3c, 0x64, 0x300, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff3}, {0xffff, 0x3}, {0xffff, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x959}, @TCA_RATE={0x6, 0x5, {0x5, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_SIOCBRDELBR(r6, 0x89a1, &(0x7f0000000b80)='vlan0\x00') sendmsg$DEVLINK_CMD_TRAP_GET(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) shutdown(r2, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000fc0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="016b00000000000003006700000008000300", @ANYRES32=r10, @ANYBLOB="0c00990002000000210000000800c400010000000800c3007413"], 0x3c}}, 0x880) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000740)={0x1f, 0xffff, 0x3}, 0x6) write(r11, &(0x7f0000000c00)="3100000007000764b800000003", 0xd) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000ec0)=ANY=[@ANYRES32=r7, @ANYRES16=r7, @ANYRES64=r7], 0x2c}, 0x1, 0x0, 0x0, 0x22004000}, 0x0) 17.499812295s ago: executing program 1 (id=256): setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffe24, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x9, &(0x7f0000000580)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xba}, @generic={0xa7}, @initr0, @exit]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x35}, 0x90) r1 = socket$rds(0x15, 0x5, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xe224f6e2d74a70b2}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x88, r3, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x3}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3f1a}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8040}, 0x94) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000300)=ANY=[], 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x482000, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x2c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x34, r5, 0x1, 0x70bd28, 0x24dfdbfd, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4040140) 16.742802126s ago: executing program 1 (id=257): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r1) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) (async, rerun: 64) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000100000000000000001800009500729a2f000000000000"], &(0x7f0000000200)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000300)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_ext={0x1c, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000004f0c00"/17], &(0x7f0000000580)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (async, rerun: 32) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x871ac4b32833d133}, 0x0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000240)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) (async) r7 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r7, 0x5421, &(0x7f0000000280)=0x100000001) connect$inet(r7, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x4}}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000010000000000000000000000791204000000000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) close(r7) 0s ago: executing program 32 (id=229): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x40600) unshare(0x50000) tee(r2, r2, 0x66f, 0x0) unshare(0x44000000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x14, 0x14}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000002c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf25070000000c00060000000000000000000c001700000000000000000008000300", @ANYRES32=r4, @ANYBLOB="0c00060000000000020000000c3efa000202aaaaaaaaaaaa12facc698253b145f8169c0f6529ed3a9a602ab1c30990af35ac392179580095da78c3e9499b6106c1ac8d9516fa67af2d25c64a2f9de1e64ef51df4b48ee3"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r0) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) unshare(0x40600) (async) unshare(0x50000) (async) tee(r2, r2, 0x66f, 0x0) (async) unshare(0x44000000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x14, 0x14}}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000002c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf25070000000c00060000000000000000000c001700000000000000000008000300", @ANYRES32=r4, @ANYBLOB="0c00060000000000020000000c3efa000202aaaaaaaaaaaa12facc698253b145f8169c0f6529ed3a9a602ab1c30990af35ac392179580095da78c3e9499b6106c1ac8d9516fa67af2d25c64a2f9de1e64ef51df4b48ee3"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x80) (async) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.56' (ED25519) to the list of known hosts. [ 88.032010][ T5624] cgroup: Unknown subsys name 'net' [ 88.151255][ T5624] cgroup: Unknown subsys name 'cpuset' [ 88.160376][ T5624] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.823103][ T5624] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.172227][ T50] cfg80211: failed to load regulatory.db [ 92.234984][ T5643] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.244038][ T5643] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.244768][ T5643] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.261685][ T5643] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.262472][ T5643] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.316612][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.319523][ T5648] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.320538][ T5648] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.321307][ T5648] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.321611][ T5648] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.322220][ T5648] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.324285][ T5651] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.324396][ T5651] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.325466][ T5651] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.326199][ T5653] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.365550][ T5653] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.366752][ T5648] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.367591][ T5648] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.379190][ T4954] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.379754][ T4954] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.381738][ T4954] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.385419][ T4954] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.386707][ T5653] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.433210][ T5653] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.471119][ T5653] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.492537][ T5641] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 93.499159][ T5646] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 93.502952][ T5647] rxe_eth0 speed is unknown, defaulting to 1000 [ 93.519148][ T5647] rxe_eth0 speed is unknown, defaulting to 1000 [ 93.535994][ T5647] rxe_eth0 speed is unknown, defaulting to 1000 [ 93.562559][ T5645] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 93.627779][ T5655] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 93.838835][ T5647] infiniband rxe0: set active [ 93.840986][ T5647] infiniband rxe0: added rxe_eth0 [ 93.867646][ T5647] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 93.867690][ T5647] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 93.867732][ T5647] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 93.932429][ T993] rxe_eth0 speed is unknown, defaulting to 1000 [ 93.934524][ T5647] RDS/IB: rxe0: added [ 93.934972][ T5647] smc: adding ib device rxe0 with port count 1 [ 93.935081][ T5647] smc: ib device rxe0 port 1 has no pnetid [ 93.989767][ T993] rxe_eth0 speed is unknown, defaulting to 1000 [ 94.016911][ T5647] rxe_eth0 speed is unknown, defaulting to 1000 [ 94.307107][ T5653] Bluetooth: hci0: command tx timeout [ 94.325517][ T5647] rxe_eth0 speed is unknown, defaulting to 1000 [ 94.385796][ T5653] Bluetooth: hci2: command tx timeout [ 94.465806][ T5653] Bluetooth: hci4: command tx timeout [ 94.465997][ T5653] Bluetooth: hci1: command tx timeout [ 94.555889][ T54] Bluetooth: hci3: command tx timeout [ 94.798415][ T5647] rxe_eth0 speed is unknown, defaulting to 1000 [ 94.828541][ T5645] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.829615][ T5645] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.829784][ T5645] bridge_slave_0: entered allmulticast mode [ 94.832631][ T5645] bridge_slave_0: entered promiscuous mode [ 94.937352][ T5645] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.937449][ T5645] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.937855][ T5645] bridge_slave_1: entered allmulticast mode [ 94.941288][ T5645] bridge_slave_1: entered promiscuous mode [ 95.112016][ T5647] rxe_eth0 speed is unknown, defaulting to 1000 [ 95.113107][ T5655] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.113343][ T5655] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.113763][ T5655] bridge_slave_0: entered allmulticast mode [ 95.115507][ T5655] bridge_slave_0: entered promiscuous mode [ 95.122526][ T5646] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.122657][ T5646] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.122782][ T5646] bridge_slave_0: entered allmulticast mode [ 95.145668][ T5646] bridge_slave_0: entered promiscuous mode [ 95.178021][ T5645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.205204][ T5641] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.205403][ T5641] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.221405][ T5641] bridge_slave_0: entered allmulticast mode [ 95.223520][ T5641] bridge_slave_0: entered promiscuous mode [ 95.236532][ T5655] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.236826][ T5655] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.245231][ T5655] bridge_slave_1: entered allmulticast mode [ 95.256689][ T5655] bridge_slave_1: entered promiscuous mode [ 95.264498][ T5646] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.264612][ T5646] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.265017][ T5646] bridge_slave_1: entered allmulticast mode [ 95.275149][ T5646] bridge_slave_1: entered promiscuous mode [ 95.314058][ T5645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.338597][ T5641] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.338723][ T5641] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.339256][ T5641] bridge_slave_1: entered allmulticast mode [ 95.341665][ T5641] bridge_slave_1: entered promiscuous mode [ 95.453015][ T5646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.466208][ T5645] team0: Port device team_slave_0 added [ 95.492629][ T5655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.504501][ T5646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.512582][ T5645] team0: Port device team_slave_1 added [ 95.522781][ T5641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.530091][ T5655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.572963][ T5641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.604329][ T5646] team0: Port device team_slave_0 added [ 95.651468][ T5646] team0: Port device team_slave_1 added [ 95.672651][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.672671][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.672707][ T5645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.730384][ T5655] team0: Port device team_slave_0 added [ 95.752643][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.752662][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.752690][ T5645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.761692][ T5641] team0: Port device team_slave_0 added [ 95.772716][ T5655] team0: Port device team_slave_1 added [ 95.774950][ T5647] rxe_eth0 speed is unknown, defaulting to 1000 [ 95.827730][ T5646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.827756][ T5646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.827779][ T5646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.888882][ T5641] team0: Port device team_slave_1 added [ 95.910451][ T5646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.910470][ T5646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.910498][ T5646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.913175][ T5655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.913190][ T5655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.913217][ T5655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.020453][ T5655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.020473][ T5655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.020501][ T5655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.118096][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.118117][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.118145][ T5641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.137879][ T5645] hsr_slave_0: entered promiscuous mode [ 96.141695][ T5645] hsr_slave_1: entered promiscuous mode [ 96.220628][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.220642][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.220661][ T5641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.281432][ T5655] hsr_slave_0: entered promiscuous mode [ 96.282310][ T5655] hsr_slave_1: entered promiscuous mode [ 96.282930][ T5655] debugfs: 'hsr0' already exists in 'hsr' [ 96.283019][ T5655] Cannot create hsr debugfs directory [ 96.316432][ T5646] hsr_slave_0: entered promiscuous mode [ 96.317277][ T5646] hsr_slave_1: entered promiscuous mode [ 96.317806][ T5646] debugfs: 'hsr0' already exists in 'hsr' [ 96.317826][ T5646] Cannot create hsr debugfs directory [ 96.396326][ T54] Bluetooth: hci0: command tx timeout [ 96.430528][ T5641] hsr_slave_0: entered promiscuous mode [ 96.431310][ T5641] hsr_slave_1: entered promiscuous mode [ 96.431883][ T5641] debugfs: 'hsr0' already exists in 'hsr' [ 96.431904][ T5641] Cannot create hsr debugfs directory [ 96.466127][ T54] Bluetooth: hci2: command tx timeout [ 96.546294][ T5653] Bluetooth: hci4: command tx timeout [ 96.546545][ T54] Bluetooth: hci1: command tx timeout [ 96.625998][ T54] Bluetooth: hci3: command tx timeout [ 96.999423][ T5645] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.014333][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.015474][ T5645] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.035472][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.045871][ T5645] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.054052][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.061344][ T5645] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.080519][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.225199][ T5646] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.236887][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.237491][ T5647] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.237587][ T5647] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.237699][ T5647] bridge_slave_0: entered allmulticast mode [ 97.239583][ T5647] bridge_slave_0: entered promiscuous mode [ 97.249462][ T5647] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.249750][ T5647] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.250283][ T5647] bridge_slave_1: entered allmulticast mode [ 97.262790][ T5647] bridge_slave_1: entered promiscuous mode [ 97.308207][ T5646] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.311823][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.312795][ T5646] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.321557][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.329105][ T5646] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.354651][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.393888][ T5647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.423879][ T5647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.465193][ T5647] team0: Port device team_slave_0 added [ 97.473176][ T5647] team0: Port device team_slave_1 added [ 97.519781][ T5647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.519801][ T5647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.519828][ T5647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.572546][ T5647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.572562][ T5647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.572585][ T5647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.637448][ T5655] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.641575][ T5655] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.642393][ T5655] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.645244][ T5655] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.687657][ T5655] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.692502][ T5655] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.723934][ T5647] hsr_slave_0: entered promiscuous mode [ 97.724729][ T5647] hsr_slave_1: entered promiscuous mode [ 97.725257][ T5647] debugfs: 'hsr0' already exists in 'hsr' [ 97.725278][ T5647] Cannot create hsr debugfs directory [ 97.731889][ T5655] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.763644][ T5655] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.872708][ T5641] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.881656][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.904776][ T5641] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.915870][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.939329][ T5641] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.943189][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.944166][ T5641] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.957131][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.024771][ T5645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.167301][ T5645] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.197655][ T5646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.225633][ T1044] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.225873][ T1044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.282848][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.282959][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.308884][ T5646] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.313003][ T5647] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 98.322650][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.329919][ T5647] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 98.343781][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.359746][ T5647] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 98.363509][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.364377][ T5647] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 98.382752][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.419546][ T5655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.423128][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.423243][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.465258][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.465345][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.480517][ T54] Bluetooth: hci0: command tx timeout [ 98.522027][ T5655] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.546251][ T54] Bluetooth: hci2: command tx timeout [ 98.563578][ T5641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.589736][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.589814][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.621028][ T1044] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.621121][ T1044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.626129][ T5653] Bluetooth: hci4: command tx timeout [ 98.626219][ T54] Bluetooth: hci1: command tx timeout [ 98.684601][ T5641] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.706129][ T54] Bluetooth: hci3: command tx timeout [ 98.738917][ T1044] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.738996][ T1044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.798030][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.798144][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.010432][ T5647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.120616][ T5647] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.193504][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.193618][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.239435][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.239557][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.957286][ T5645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.135229][ T5645] veth0_vlan: entered promiscuous mode [ 100.175654][ T5645] veth1_vlan: entered promiscuous mode [ 100.227998][ T5646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.369509][ T5645] veth0_macvtap: entered promiscuous mode [ 100.410795][ T5645] veth1_macvtap: entered promiscuous mode [ 100.475345][ T5655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.519410][ T5646] veth0_vlan: entered promiscuous mode [ 100.550764][ T54] Bluetooth: hci0: command tx timeout [ 100.552169][ T5641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.572751][ T5646] veth1_vlan: entered promiscuous mode [ 100.587734][ T5647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.590941][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.629510][ T54] Bluetooth: hci2: command tx timeout [ 100.642897][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.706619][ T5653] Bluetooth: hci4: command tx timeout [ 100.706673][ T54] Bluetooth: hci1: command tx timeout [ 100.768395][ T1014] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.786408][ T54] Bluetooth: hci3: command tx timeout [ 100.786576][ T294] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.786660][ T294] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.786700][ T294] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.834338][ T5655] veth0_vlan: entered promiscuous mode [ 100.881816][ T5646] veth0_macvtap: entered promiscuous mode [ 100.913621][ T5646] veth1_macvtap: entered promiscuous mode [ 100.941435][ T5655] veth1_vlan: entered promiscuous mode [ 101.034790][ T1905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.034817][ T1905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.034859][ T5647] veth0_vlan: entered promiscuous mode [ 101.068930][ T5646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.092177][ T5646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.132899][ T5647] veth1_vlan: entered promiscuous mode [ 101.151650][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.151673][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.186862][ T294] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.187548][ T294] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.187595][ T294] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.187660][ T294] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.233473][ T5655] veth0_macvtap: entered promiscuous mode [ 101.258258][ T5655] veth1_macvtap: entered promiscuous mode [ 101.354465][ T5655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.370321][ T5647] veth0_macvtap: entered promiscuous mode [ 101.385569][ T5641] veth0_vlan: entered promiscuous mode [ 101.428505][ T5655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.428948][ T5647] veth1_macvtap: entered promiscuous mode [ 101.470875][ T1044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.470900][ T1044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.471592][ T5641] veth1_vlan: entered promiscuous mode [ 101.516395][ T5645] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 101.548026][ T294] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.548078][ T294] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.548118][ T294] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.548157][ T294] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.598491][ T294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.598512][ T294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.643842][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.710760][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.827526][ T294] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.871455][ T5641] veth0_macvtap: entered promiscuous mode [ 101.888062][ T1044] IPVS: starting estimator thread 0... [ 101.892449][ T294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.892470][ T294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.978540][ T5641] veth1_macvtap: entered promiscuous mode [ 101.995965][ T5845] IPVS: using max 28 ests per chain, 67200 per kthread [ 101.996788][ T294] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.996838][ T294] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.996878][ T294] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.134844][ T1044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.134869][ T1044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.194952][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.236579][ T1905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.236603][ T1905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.348416][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.468480][ T1905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.468504][ T1905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.497965][ T1905] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.498078][ T1905] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.498119][ T1905] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.498157][ T1905] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.731497][ T5871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'. [ 102.777955][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.777979][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.960685][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.960718][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.120414][ T5881] bridge1: entered allmulticast mode [ 103.216733][ T63] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.573254][ T5907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15'. [ 103.648060][ T5908] netlink: 'syz.2.14': attribute type 1 has an invalid length. [ 103.683569][ T5914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 104.017020][ T5929] netlink: 248 bytes leftover after parsing attributes in process `syz.0.19'. [ 104.039061][ T5929] bond0: Error: Cannot enslave bond to itself. [ 104.062244][ T5929] x_tables: duplicate underflow at hook 2 [ 104.161699][ T5933] Zero length message leads to an empty skb [ 104.283961][ T5939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21'. [ 104.283995][ T5939] netlink: 50 bytes leftover after parsing attributes in process `syz.4.21'. [ 104.284087][ T5939] netlink: 50 bytes leftover after parsing attributes in process `syz.4.21'. [ 104.472577][ T5942] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 104.587680][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23'. [ 104.633975][ T5946] netlink: 'syz.0.23': attribute type 49 has an invalid length. [ 104.750412][ T5768] hid-generic 0005:15C2:8001.0001: item fetching failed at offset 0/1 [ 104.751101][ T5768] hid-generic 0005:15C2:8001.0001: probe with driver hid-generic failed with error -22 [ 104.865258][ T5946] ip6gretap0: entered promiscuous mode [ 104.865283][ T5946] ip6gretap0: entered allmulticast mode [ 105.500889][ T5976] bridge1: entered allmulticast mode [ 105.924612][ T6002] netlink: 'syz.0.35': attribute type 1 has an invalid length. [ 107.149430][ T6057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.50'. [ 107.401717][ T6064] Bluetooth: MGMT ver 1.23 [ 107.401759][ T6064] Bluetooth: hci0: unsupported parameter 5135 [ 107.401775][ T6064] Bluetooth: hci0: unsupported parameter 8192 [ 107.401797][ T6064] Bluetooth: hci0: unsupported parameter 5135 [ 107.401811][ T6064] Bluetooth: hci0: unsupported parameter 8192 [ 107.451975][ T6068] netlink: 'syz.4.53': attribute type 1 has an invalid length. [ 107.451983][ T6064] netlink: 'syz.3.52': attribute type 12 has an invalid length. [ 107.452003][ T6064] netlink: 205056 bytes leftover after parsing attributes in process `syz.3.52'. [ 107.505037][ T6064] gretap0: entered promiscuous mode [ 107.613216][ T6068] vlan2: entered allmulticast mode [ 107.613242][ T6068] veth0: entered allmulticast mode [ 107.782178][ T5298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 107.786276][ T5748] rxe_eth0 speed is unknown, defaulting to 1000 [ 107.823010][ T6069] __nla_validate_parse: 1 callbacks suppressed [ 107.823033][ T6069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.54'. [ 107.882412][ T6069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.54'. [ 108.061779][ T6075] netlink: 28 bytes leftover after parsing attributes in process `syz.1.56'. [ 108.167073][ T6096] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 108.440902][ T54] Bluetooth: hci1: unexpected event 0x13 length: 321 > 255 [ 108.751606][ T6080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.57'. [ 108.752025][ T6080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.57'. [ 108.967556][ T6134] netlink: 68 bytes leftover after parsing attributes in process `syz.1.68'. [ 109.073545][ T6133] netlink: 36 bytes leftover after parsing attributes in process `syz.1.68'. [ 109.602059][ T6151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.70'. [ 109.630709][ T6151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.70'. [ 109.647327][ T6151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.70'. [ 109.735505][ T6157] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 110.873529][ T6203] FAULT_INJECTION: forcing a failure. [ 110.873529][ T6203] name failslab, interval 1, probability 0, space 0, times 1 [ 110.873575][ T6203] CPU: 1 UID: 0 PID: 6203 Comm: syz.4.80 Not tainted syzkaller #0 PREEMPT(full) [ 110.873600][ T6203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 110.873622][ T6203] Call Trace: [ 110.873631][ T6203] [ 110.873641][ T6203] dump_stack_lvl+0xe8/0x150 [ 110.873684][ T6203] should_fail_ex+0x3eb/0x540 [ 110.873715][ T6203] ? __alloc_skb+0x1db/0x7a0 [ 110.873748][ T6203] should_failslab+0xa8/0x100 [ 110.873783][ T6203] ? __alloc_skb+0x1db/0x7a0 [ 110.873814][ T6203] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 110.873841][ T6203] ? __alloc_skb+0x18d/0x7a0 [ 110.873874][ T6203] ? __alloc_skb+0x1db/0x7a0 [ 110.873914][ T6203] __alloc_skb+0x1db/0x7a0 [ 110.873954][ T6203] alloc_skb_with_frags+0xc6/0x760 [ 110.873990][ T6203] sock_alloc_send_pskb+0xc69/0xd90 [ 110.874038][ T6203] ? __lock_acquire+0x747/0x2de0 [ 110.874067][ T6203] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 110.874093][ T6203] ? check_noncircular+0xdb/0x150 [ 110.874153][ T6203] tun_get_user+0x9c8/0x4470 [ 110.874197][ T6203] ? aa_file_perm+0x18b/0x15f0 [ 110.874226][ T6203] ? aa_file_perm+0x4ed/0x15f0 [ 110.874250][ T6203] ? __pfx_tun_get_user+0x10/0x10 [ 110.874279][ T6203] ? __lock_acquire+0x747/0x2de0 [ 110.874310][ T6203] ? kstrtoull+0x137/0x1d0 [ 110.874353][ T6203] ? ref_tracker_alloc+0x172/0x530 [ 110.874381][ T6203] ? lock_acquire+0x115/0x350 [ 110.874410][ T6203] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 110.874442][ T6203] ? lock_acquire+0x115/0x350 [ 110.874470][ T6203] ? tun_get+0x1c/0x2f0 [ 110.874502][ T6203] ? tun_get+0x1c/0x2f0 [ 110.874528][ T6203] ? tun_get+0x1c/0x2f0 [ 110.874559][ T6203] tun_chr_write_iter+0x113/0x200 [ 110.874589][ T6203] vfs_write+0x612/0xba0 [ 110.874629][ T6203] ? __pfx_vfs_write+0x10/0x10 [ 110.874662][ T6203] ? __fget_files+0x3a2/0x420 [ 110.874688][ T6203] ? __fget_files+0x2a/0x420 [ 110.874719][ T6203] ? fdget+0x1ac/0x250 [ 110.874758][ T6203] ksys_write+0x150/0x270 [ 110.874790][ T6203] ? __pfx_ksys_write+0x10/0x10 [ 110.874831][ T6203] do_syscall_64+0x166/0x520 [ 110.874857][ T6203] ? trace_irq_disable+0x3b/0x140 [ 110.874888][ T6203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.874911][ T6203] ? clear_bhb_loop+0x70/0xc0 [ 110.874939][ T6203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.874962][ T6203] RIP: 0033:0x7fdf9579fb19 [ 110.874988][ T6203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.875006][ T6203] RSP: 002b:00007fdf96750028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 110.875034][ T6203] RAX: ffffffffffffffda RBX: 00007fdf95a25fa0 RCX: 00007fdf9579fb19 [ 110.875051][ T6203] RDX: 000000000000001c RSI: 0000200000000300 RDI: 0000000000000004 [ 110.875065][ T6203] RBP: 00007fdf96750090 R08: 0000000000000000 R09: 0000000000000000 [ 110.875079][ T6203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.875092][ T6203] R13: 00007fdf95a26038 R14: 00007fdf95a25fa0 R15: 00007ffe51621788 [ 110.875127][ T6203] [ 111.119860][ T6211] netlink: 'syz.2.84': attribute type 2 has an invalid length. [ 111.446517][ T6221] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 111.731992][ T6230] netlink: 'syz.0.88': attribute type 10 has an invalid length. [ 111.763912][ T6230] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.792291][ T6230] bond0: (slave team0): Enslaving as an active interface with an up link [ 111.821136][ T6232] syzkaller0: entered promiscuous mode [ 111.821163][ T6232] syzkaller0: entered allmulticast mode [ 112.132472][ T6253] x_tables: duplicate underflow at hook 1 [ 112.198030][ T6253] Bluetooth: hci0: unsupported parameter 5161 [ 112.198089][ T6253] Bluetooth: hci0: unsupported parameter 8192 [ 112.198103][ T6253] Bluetooth: hci0: unsupported parameter 5161 [ 112.198117][ T6253] Bluetooth: hci0: unsupported parameter 8192 [ 112.573739][ T6273] v: renamed from dummy0 (while UP) [ 113.127375][ T6304] syzkaller0: entered promiscuous mode [ 113.127402][ T6304] syzkaller0: entered allmulticast mode [ 113.137440][ T6310] __nla_validate_parse: 30 callbacks suppressed [ 113.137470][ T6310] netlink: 144 bytes leftover after parsing attributes in process `syz.2.106'. [ 113.350614][ T6317] netlink: 44 bytes leftover after parsing attributes in process `syz.1.108'. [ 113.557023][ T6319] Driver unsupported XDP return value 0 on prog (id 53) dev N/A, expect packet loss! [ 113.596790][ T6319] netlink: 64 bytes leftover after parsing attributes in process `syz.4.107'. [ 113.769753][ T6335] FAULT_INJECTION: forcing a failure. [ 113.769753][ T6335] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 113.769790][ T6335] CPU: 0 UID: 0 PID: 6335 Comm: syz.2.112 Not tainted syzkaller #0 PREEMPT(full) [ 113.769814][ T6335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 113.769826][ T6335] Call Trace: [ 113.769835][ T6335] [ 113.769844][ T6335] dump_stack_lvl+0xe8/0x150 [ 113.769900][ T6335] should_fail_ex+0x3eb/0x540 [ 113.769933][ T6335] _copy_to_user+0x31/0xb0 [ 113.769964][ T6335] simple_read_from_buffer+0xe1/0x170 [ 113.769997][ T6335] proc_fail_nth_read+0x1bb/0x230 [ 113.770036][ T6335] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.770074][ T6335] ? rw_verify_area+0x24a/0x4c0 [ 113.770105][ T6335] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.770139][ T6335] vfs_read+0x213/0xa80 [ 113.770174][ T6335] ? __pfx___mutex_lock+0x10/0x10 [ 113.770202][ T6335] ? __pfx_vfs_read+0x10/0x10 [ 113.770232][ T6335] ? __fget_files+0x2a/0x420 [ 113.770264][ T6335] ? __fget_files+0x3a2/0x420 [ 113.770289][ T6335] ? __fget_files+0x2a/0x420 [ 113.770321][ T6335] ? fdget+0x1ac/0x250 [ 113.770363][ T6335] ksys_read+0x150/0x270 [ 113.770393][ T6335] ? __pfx_ksys_read+0x10/0x10 [ 113.770436][ T6335] do_syscall_64+0x166/0x520 [ 113.770462][ T6335] ? trace_irq_disable+0x3b/0x140 [ 113.770492][ T6335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.770515][ T6335] ? clear_bhb_loop+0x70/0xc0 [ 113.770543][ T6335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.770565][ T6335] RIP: 0033:0x7fdb9256034e [ 113.770592][ T6335] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 113.770610][ T6335] RSP: 002b:00007fdb933fffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 113.770637][ T6335] RAX: ffffffffffffffda RBX: 00007fdb934006c0 RCX: 00007fdb9256034e [ 113.770654][ T6335] RDX: 000000000000000f RSI: 00007fdb934000a0 RDI: 0000000000000007 [ 113.770668][ T6335] RBP: 00007fdb93400090 R08: 0000000000000000 R09: 0000000000000000 [ 113.770682][ T6335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.770695][ T6335] R13: 00007fdb92826038 R14: 00007fdb92825fa0 R15: 00007ffef6ba2e48 [ 113.770732][ T6335] [ 114.086628][ T6337] syz.4.114 uses obsolete (PF_INET,SOCK_PACKET) [ 114.091056][ T6340] netlink: 24 bytes leftover after parsing attributes in process `syz.3.113'. [ 114.300574][ T6356] netlink: 24 bytes leftover after parsing attributes in process `syz.3.113'. [ 114.559780][ T6370] syzkaller0: entered promiscuous mode [ 114.559807][ T6370] syzkaller0: entered allmulticast mode [ 114.670322][ T6374] netlink: 44 bytes leftover after parsing attributes in process `syz.3.121'. [ 115.121836][ T6404] warning: `syz.1.128' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 115.123954][ T6404] ip_vti0: entered promiscuous mode [ 115.364794][ T6417] netlink: 104 bytes leftover after parsing attributes in process `syz.2.131'. [ 115.543485][ T6425] syzkaller0: entered promiscuous mode [ 115.543545][ T6425] syzkaller0: entered allmulticast mode [ 115.708330][ T6429] netlink: 44 bytes leftover after parsing attributes in process `syz.2.136'. [ 117.881366][ T6386] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 117.882900][ T6393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.124'. [ 118.170978][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.139'. [ 118.300494][ T6448] ip6gre1: entered promiscuous mode [ 118.406293][ T6457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.144'. [ 118.422680][ T6458] syzkaller0: entered promiscuous mode [ 118.422704][ T6458] syzkaller0: entered allmulticast mode [ 118.445166][ T6454] netlink: 'syz.0.147': attribute type 15 has an invalid length. [ 118.459382][ T6454] xt_nat: multiple ranges no longer supported [ 118.670123][ T6465] x_tables: duplicate entry at hook 4 [ 118.689570][ T6469] x_tables: duplicate entry at hook 4 [ 118.694317][ T6468] netlink: 44 bytes leftover after parsing attributes in process `syz.1.149'. [ 118.733543][ T6470] syzkaller1: entered promiscuous mode [ 118.733567][ T6470] syzkaller1: entered allmulticast mode [ 118.880721][ T6480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.150'. [ 118.880745][ T6480] netlink: 24 bytes leftover after parsing attributes in process `syz.0.150'. [ 118.881041][ T6480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.150'. [ 118.881058][ T6480] netlink: 24 bytes leftover after parsing attributes in process `syz.0.150'. [ 119.095104][ T6487] netlink: 'syz.2.154': attribute type 62 has an invalid length. [ 119.303426][ T6502] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543 [ 119.322377][ T6502] ip_tables: iptables: counters copy to user failed while replacing table [ 119.384279][ T6505] xt_l2tp: missing protocol rule (udp|l2tpip) [ 119.393399][ T6506] xt_l2tp: missing protocol rule (udp|l2tpip) [ 119.572078][ T6516] syzkaller0: entered promiscuous mode [ 119.572105][ T6516] syzkaller0: entered allmulticast mode [ 119.658402][ T6521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.163'. [ 119.702910][ T6521] Bluetooth: MGMT ver 1.23 [ 119.713522][ T6521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.163'. [ 119.714797][ T6521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.163'. [ 119.749460][ T6521] bridge1: entered allmulticast mode [ 120.317925][ T6559] netlink: 'syz.4.176': attribute type 10 has an invalid length. [ 120.345938][ T6559] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.351715][ T6559] bond0: (slave team0): Enslaving as an active interface with an up link [ 120.354627][ T6555] syzkaller0: entered promiscuous mode [ 120.354651][ T6555] syzkaller0: entered allmulticast mode [ 120.402649][ T6557] syzkaller0: entered promiscuous mode [ 120.402673][ T6557] syzkaller0: entered allmulticast mode [ 120.439676][ T6557] FAULT_INJECTION: forcing a failure. [ 120.439676][ T6557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.439710][ T6557] CPU: 1 UID: 0 PID: 6557 Comm: syz.0.175 Not tainted syzkaller #0 PREEMPT(full) [ 120.439735][ T6557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 120.439759][ T6557] Call Trace: [ 120.439768][ T6557] [ 120.439777][ T6557] dump_stack_lvl+0xe8/0x150 [ 120.439820][ T6557] should_fail_ex+0x3eb/0x540 [ 120.439853][ T6557] _copy_from_user+0x2d/0xb0 [ 120.439884][ T6557] __sys_sendto+0x2a9/0x5a0 [ 120.439919][ T6557] ? ksys_write+0x1e6/0x270 [ 120.439953][ T6557] ? __pfx___sys_sendto+0x10/0x10 [ 120.439985][ T6557] ? __mutex_unlock_slowpath+0x731/0x900 [ 120.440028][ T6557] ? fdget+0x1ac/0x250 [ 120.440071][ T6557] ? __pfx_ksys_write+0x10/0x10 [ 120.440107][ T6557] __x64_sys_sendto+0xde/0x100 [ 120.440151][ T6557] do_syscall_64+0x166/0x520 [ 120.440178][ T6557] ? trace_irq_disable+0x3b/0x140 [ 120.440210][ T6557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.440233][ T6557] ? clear_bhb_loop+0x70/0xc0 [ 120.440262][ T6557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.440285][ T6557] RIP: 0033:0x7f281859fb19 [ 120.440305][ T6557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.440323][ T6557] RSP: 002b:00007f28167f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 120.440347][ T6557] RAX: ffffffffffffffda RBX: 00007f2818825fa0 RCX: 00007f281859fb19 [ 120.440365][ T6557] RDX: 000000000000000e RSI: 0000200000000200 RDI: 0000000000000009 [ 120.440379][ T6557] RBP: 00007f28167f6090 R08: 00002000000001c0 R09: 0000000000000014 [ 120.440394][ T6557] R10: 0000000004000050 R11: 0000000000000246 R12: 0000000000000001 [ 120.440407][ T6557] R13: 00007f2818826038 R14: 00007f2818825fa0 R15: 00007ffe39653518 [ 120.440445][ T6557] [ 121.091011][ T6585] netlink: 'syz.1.179': attribute type 1 has an invalid length. [ 121.091047][ T6585] netlink: 'syz.1.179': attribute type 2 has an invalid length. [ 121.617780][ T6613] IPv6: NLM_F_CREATE should be specified when creating new route [ 121.813737][ T6621] netlink: 'syz.4.188': attribute type 1 has an invalid length. [ 121.824873][ T6621] bond0: option ad_select: unable to set because the bond device is up [ 121.887101][ T6626] bond0: option ad_select: unable to set because the bond device is up [ 121.892069][ T6621] netlink: 'syz.4.188': attribute type 1 has an invalid length. [ 122.368745][ T6646] sctp: [Deprecated]: syz.2.195 (pid 6646) Use of int in max_burst socket option deprecated. [ 122.368745][ T6646] Use struct sctp_assoc_value instead [ 122.375550][ T6644] ip6t_hbh: unknown flags 38 [ 122.411817][ T6652] ip6t_hbh: unknown flags 38 [ 122.570066][ T6654] netlink: 'syz.1.196': attribute type 3 has an invalid length. [ 123.185023][ T6676] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 123.279325][ T6688] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 123.383424][ T6697] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 123.490805][ T6703] __nla_validate_parse: 15 callbacks suppressed [ 123.490827][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.206'. [ 123.490842][ T6703] netlink: 5 bytes leftover after parsing attributes in process `syz.4.206'. [ 123.523347][ T6704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.206'. [ 123.523372][ T6704] netlink: 5 bytes leftover after parsing attributes in process `syz.4.206'. [ 123.733482][ T6708] netlink: zone id is out of range [ 123.733546][ T6708] netlink: zone id is out of range [ 123.733556][ T6708] netlink: zone id is out of range [ 123.733564][ T6708] netlink: zone id is out of range [ 123.733573][ T6708] netlink: zone id is out of range [ 123.922533][ T6719] syz_tun: entered allmulticast mode [ 123.953832][ T6722] x_tables: duplicate underflow at hook 1 [ 123.977789][ T6716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.211'. [ 124.084483][ T6729] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 124.110279][ T6709] syz_tun: left allmulticast mode [ 124.340673][ T6738] netlink: 'syz.4.216': attribute type 3 has an invalid length. [ 124.401136][ T6740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.217'. [ 124.401504][ T6742] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 124.457068][ T6745] netlink: 20 bytes leftover after parsing attributes in process `syz.4.220'. [ 124.543021][ T6745] 8021q: adding VLAN 0 to HW filter on device bond2 [ 124.580241][ T6748] syzkaller1: entered promiscuous mode [ 124.580264][ T6748] syzkaller1: entered allmulticast mode [ 124.675457][ T6755] netlink: 32 bytes leftover after parsing attributes in process `syz.0.223'. [ 124.691649][ T6758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.224'. [ 124.691946][ T6758] bridge_slave_0: default FDB implementation only supports local addresses [ 124.756679][ T6760] netlink: 48 bytes leftover after parsing attributes in process `syz.4.224'. [ 124.885077][ T6762] can: request_module (can-proto-5) failed. [ 125.031690][ T6770] x_tables: duplicate entry at hook 3 [ 125.340189][ T6783] rxe_eth0 speed is unknown, defaulting to 1000 [ 125.899641][ T6820] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 125.923109][ T6829] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 126.404821][ T6793] rxe_eth0 speed is unknown, defaulting to 1000 [ 126.552091][ T6848] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 127.694113][ T6881] syzkaller0: entered promiscuous mode [ 127.694139][ T6881] syzkaller0: entered allmulticast mode [ 127.743450][ T6881] FAULT_INJECTION: forcing a failure. [ 127.743450][ T6881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.743483][ T6881] CPU: 0 UID: 0 PID: 6881 Comm: syz.4.248 Not tainted syzkaller #0 PREEMPT(full) [ 127.743507][ T6881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 127.743525][ T6881] Call Trace: [ 127.743534][ T6881] [ 127.743543][ T6881] dump_stack_lvl+0xe8/0x150 [ 127.743584][ T6881] should_fail_ex+0x3eb/0x540 [ 127.743617][ T6881] _copy_from_iter+0x1d3/0x1680 [ 127.743652][ T6881] ? sock_alloc_send_pskb+0xc87/0xd90 [ 127.743690][ T6881] ? __pfx__copy_from_iter+0x10/0x10 [ 127.743725][ T6881] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 127.743756][ T6881] skb_copy_datagram_from_iter+0xe6/0x720 [ 127.743786][ T6881] ? dev_get_by_index+0x22/0x2d0 [ 127.743815][ T6881] ? skb_put+0x112/0x210 [ 127.743840][ T6881] packet_sendmsg+0x390b/0x5330 [ 127.743895][ T6881] ? __lock_acquire+0x747/0x2de0 [ 127.743930][ T6881] ? __lock_acquire+0x747/0x2de0 [ 127.743961][ T6881] ? __lock_acquire+0x747/0x2de0 [ 127.743994][ T6881] ? kstrtouint+0x6e/0xe0 [ 127.744036][ T6881] ? __pfx_packet_sendmsg+0x10/0x10 [ 127.744062][ T6881] ? aa_sk_perm+0x6ff/0x8f0 [ 127.744102][ T6881] ? lockdep_count_forward_deps+0x100/0x170 [ 127.744129][ T6881] ? __pfx_aa_sk_perm+0x10/0x10 [ 127.744166][ T6881] ? aa_sock_msg_perm+0x144/0x210 [ 127.744194][ T6881] ? apparmor_socket_sendmsg+0x98/0x360 [ 127.744228][ T6881] ? __pfx_packet_sendmsg+0x10/0x10 [ 127.744254][ T6881] sock_sendmsg_nosec+0x14e/0x190 [ 127.744287][ T6881] __sys_sendto+0x408/0x5a0 [ 127.744321][ T6881] ? ksys_write+0x1e6/0x270 [ 127.744354][ T6881] ? __pfx___sys_sendto+0x10/0x10 [ 127.744385][ T6881] ? __mutex_unlock_slowpath+0x731/0x900 [ 127.744428][ T6881] ? fdget+0x1ac/0x250 [ 127.744469][ T6881] ? __pfx_ksys_write+0x10/0x10 [ 127.744504][ T6881] __x64_sys_sendto+0xde/0x100 [ 127.744543][ T6881] do_syscall_64+0x166/0x520 [ 127.744568][ T6881] ? trace_irq_disable+0x3b/0x140 [ 127.744598][ T6881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.744622][ T6881] ? clear_bhb_loop+0x70/0xc0 [ 127.744664][ T6881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.744686][ T6881] RIP: 0033:0x7fdf9579fb19 [ 127.744707][ T6881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.744726][ T6881] RSP: 002b:00007fdf96750028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 127.744749][ T6881] RAX: ffffffffffffffda RBX: 00007fdf95a25fa0 RCX: 00007fdf9579fb19 [ 127.744766][ T6881] RDX: 000000000000000e RSI: 0000200000000200 RDI: 0000000000000009 [ 127.744780][ T6881] RBP: 00007fdf96750090 R08: 00002000000001c0 R09: 0000000000000014 [ 127.744795][ T6881] R10: 0000000004000050 R11: 0000000000000246 R12: 0000000000000001 [ 127.744809][ T6881] R13: 00007fdf95a26038 R14: 00007fdf95a25fa0 R15: 00007ffe51621788 [ 127.744845][ T6881] [ 129.092093][ T6917] netlink: 'syz.0.255': attribute type 83 has an invalid length. [ 129.209591][ T6917] __nla_validate_parse: 8 callbacks suppressed [ 129.209614][ T6917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.255'. [ 129.432851][ T6918] syzkaller0: entered promiscuous mode [ 129.432875][ T6918] syzkaller0: entered allmulticast mode [ 129.480864][ T6922] tipc: Started in network mode [ 129.480905][ T6922] tipc: Node identity ac14140f, cluster identity 4711 [ 129.483081][ T6922] tipc: New replicast peer: 255.255.255.255 [ 129.544127][ T6922] tipc: Enabled bearer , priority 10 [ 133.310808][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.405647][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.881141][ C1] sched: DL replenish lagged too much [ 194.737831][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.745766][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 222.672807][ T5648] Bluetooth: hci2: command 0x0406 tx timeout [ 222.672914][ T5648] Bluetooth: hci3: command 0x0406 tx timeout [ 222.672959][ T5648] Bluetooth: hci1: command 0x0406 tx timeout [ 222.672999][ T5648] Bluetooth: hci0: command 0x0406 tx timeout [ 236.951134][ T5648] Bluetooth: hci4: command 0x0406 tx timeout [ 256.286862][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.306229][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 294.408175][ T32] INFO: task kworker/1:4:5748 blocked for more than 143 seconds. [ 294.408204][ T32] Not tainted syzkaller #0 [ 294.408216][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 294.408227][ T32] task:kworker/1:4 state:D stack:24008 pid:5748 tgid:5748 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 294.408305][ T32] Workqueue: events tipc_net_finalize_work [ 294.408345][ T32] Call Trace: [ 294.408353][ T32] [ 294.408368][ T32] __schedule+0x17dd/0x5830 [ 294.408429][ T32] ? __pfx___schedule+0x10/0x10 [ 294.408466][ T32] ? schedule+0x90/0x2b0 [ 294.408495][ T32] schedule+0x164/0x2b0 [ 294.408522][ T32] schedule_preempt_disabled+0x13/0x30 [ 294.408547][ T32] __mutex_lock+0x7c4/0x15a0 [ 294.408590][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 294.408623][ T32] ? tipc_net_finalize_work+0x1e/0x90 [ 294.408659][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 294.408706][ T32] ? rcu_is_watching+0x16/0xb0 [ 294.408740][ T32] ? process_scheduled_works+0x97a/0x1630 [ 294.408776][ T32] tipc_net_finalize_work+0x1e/0x90 [ 294.408810][ T32] process_scheduled_works+0xc3d/0x1630 [ 294.408881][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 294.408924][ T32] ? assign_work+0x3cf/0x5d0 [ 294.408964][ T32] worker_thread+0xa47/0xfb0 [ 294.409031][ T32] kthread+0x38b/0x480 [ 294.409059][ T32] ? __pfx_worker_thread+0x10/0x10 [ 294.409090][ T32] ? __pfx_kthread+0x10/0x10 [ 294.409113][ T32] ret_from_fork+0x514/0xb70 [ 294.409139][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 294.409160][ T32] ? __switch_to+0xc78/0x1410 [ 294.409197][ T32] ? __pfx_kthread+0x10/0x10 [ 294.409225][ T32] ret_from_fork_asm+0x1a/0x30 [ 294.409269][ T32] [ 294.409297][ T32] INFO: task syz.3.229:6783 blocked for more than 143 seconds. [ 294.409313][ T32] Not tainted syzkaller #0 [ 294.409325][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 294.409335][ T32] task:syz.3.229 state:D stack:24920 pid:6783 tgid:6777 ppid:5655 task_flags:0x400140 flags:0x00080002 [ 294.409400][ T32] Call Trace: [ 294.409407][ T32] [ 294.409421][ T32] __schedule+0x17dd/0x5830 [ 294.409478][ T32] ? __pfx___schedule+0x10/0x10 [ 294.409514][ T32] ? schedule+0x90/0x2b0 [ 294.409543][ T32] schedule+0x164/0x2b0 [ 294.409570][ T32] schedule_preempt_disabled+0x13/0x30 [ 294.409604][ T32] __mutex_lock+0x7c4/0x15a0 [ 294.409638][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 294.409672][ T32] ? cangw_pernet_exit_batch+0x20/0x90 [ 294.409702][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 294.409754][ T32] cangw_pernet_exit_batch+0x20/0x90 [ 294.409783][ T32] ? __pfx_cangw_pernet_exit_batch+0x10/0x10 [ 294.409810][ T32] ops_undo_list+0x4d7/0x8f0 [ 294.409853][ T32] ? __pfx_ops_undo_list+0x10/0x10 [ 294.409886][ T32] ? ops_init+0x46a/0x5d0 [ 294.409932][ T32] setup_net+0x2f6/0x350 [ 294.409968][ T32] ? __pfx_setup_net+0x10/0x10 [ 294.410003][ T32] ? down_read_killable+0x1b6/0x3b0 [ 294.410035][ T32] ? __ns_common_init+0x384/0x590 [ 294.410062][ T32] copy_net_ns+0x536/0x770 [ 294.410101][ T32] create_new_namespaces+0x3f0/0x6b0 [ 294.410140][ T32] ? security_capable+0x7e/0x2c0 [ 294.410182][ T32] unshare_nsproxy_namespaces+0x144/0x190 [ 294.410222][ T32] ksys_unshare+0x532/0x890 [ 294.410261][ T32] ? __pfx_ksys_unshare+0x10/0x10 [ 294.410299][ T32] ? rcu_is_watching+0x16/0xb0 [ 294.410347][ T32] __x64_sys_unshare+0x38/0x50 [ 294.410382][ T32] do_syscall_64+0x166/0x520 [ 294.410408][ T32] ? trace_irq_disable+0x3b/0x140 [ 294.410440][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.410464][ T32] ? clear_bhb_loop+0x70/0xc0 [ 294.410493][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.410516][ T32] RIP: 0033:0x7f551a19fb19 [ 294.410536][ T32] RSP: 002b:00007f551b061028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 294.410559][ T32] RAX: ffffffffffffffda RBX: 00007f551a425fa0 RCX: 00007f551a19fb19 [ 294.410576][ T32] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000044000000