last executing test programs: 6.320022574s ago: executing program 0 (id=648): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) socket$inet6(0xa, 0x800000000000002, 0x0) socket$qrtr(0x2a, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r7, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r7, 0x0) mmap(&(0x7f000040b000/0x2000)=nil, 0x2000, 0xa, 0x12, r6, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r9, 0x0, 0x10000008ebc, 0x0) splice(r8, 0x0, r11, 0x0, 0x25a5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000080), &(0x7f0000000240)=r13}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r12, 0x18000000000002a0, 0xd50, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5.890133677s ago: executing program 0 (id=654): r0 = socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000100)={0x8, 'lo\x00', {'vlan1\x00'}, 0xa69}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) ioctl$sock_netdev_private(r0, 0x89f7, &(0x7f00000000c0)="36faaf6efca63e982c5c5be628a9ff34fe273bef41") sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x190, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x2006, 0x80042}, [@IFLA_VFINFO_LIST={0x168, 0x16, 0x0, 0x1, [{0x164, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x91b, 0xb1e, 0x7, 0x8100}}, {0x14, 0x1, {0x5, 0xf57, 0x10000000, 0x8100}}, {0x14, 0x1, {0x3, 0x595, 0x7f, 0x88a8}}, {0x14, 0x1, {0x1000001, 0xe2e, 0xff, 0x88a8}}, {0x14, 0x1, {0x3, 0x56b, 0x6, 0x88a8}}, {0x14, 0x1, {0x2, 0x10005ed, 0x292, 0x8100}}]}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x400, 0x7}}, @IFLA_VF_RATE={0x10, 0x6, {0x784f, 0x1, 0x7d78}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2, 0xa}}, @IFLA_VF_VLAN_LIST={0xa4, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x7, 0xec3, 0x69, 0x8100}}, {0x14, 0x1, {0x4, 0xabe, 0x2, 0x88a8}}, {0x14, 0x1, {0x98ee, 0x51d, 0x2, 0x8100}}, {0x14, 0x1, {0x401, 0x5e, 0x4, 0x88a8}}, {0x14, 0x1, {0x101, 0x689, 0x60, 0x88a8}}, {0x14, 0x1, {0x54, 0x2c5, 0xfff, 0x8100}}, {0x14, 0x1, {0x3443625d, 0x3b8, 0x81, 0x88a8}}, {0x14, 0x1, {0x8e7, 0x386, 0x9, 0x88a8}}]}, @IFLA_VF_RATE={0x10, 0x6, {0x800, 0x889, 0x2}}]}]}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xc}]}, 0x190}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711105000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff07}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000020000100000000000000000059a76baedcf2220900020000f1001400604aac840e108abcaca15c053ba90800000000000000f357a3f80f", @ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x10000805}, 0x0) socket(0x10, 0x3, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000100)={0x8, 'lo\x00', {'vlan1\x00'}, 0xa69}) (async) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) (async) ioctl$sock_netdev_private(r0, 0x89f7, &(0x7f00000000c0)="36faaf6efca63e982c5c5be628a9ff34fe273bef41") (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x190, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x2006, 0x80042}, [@IFLA_VFINFO_LIST={0x168, 0x16, 0x0, 0x1, [{0x164, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x91b, 0xb1e, 0x7, 0x8100}}, {0x14, 0x1, {0x5, 0xf57, 0x10000000, 0x8100}}, {0x14, 0x1, {0x3, 0x595, 0x7f, 0x88a8}}, {0x14, 0x1, {0x1000001, 0xe2e, 0xff, 0x88a8}}, {0x14, 0x1, {0x3, 0x56b, 0x6, 0x88a8}}, {0x14, 0x1, {0x2, 0x10005ed, 0x292, 0x8100}}]}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x400, 0x7}}, @IFLA_VF_RATE={0x10, 0x6, {0x784f, 0x1, 0x7d78}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2, 0xa}}, @IFLA_VF_VLAN_LIST={0xa4, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x7, 0xec3, 0x69, 0x8100}}, {0x14, 0x1, {0x4, 0xabe, 0x2, 0x88a8}}, {0x14, 0x1, {0x98ee, 0x51d, 0x2, 0x8100}}, {0x14, 0x1, {0x401, 0x5e, 0x4, 0x88a8}}, {0x14, 0x1, {0x101, 0x689, 0x60, 0x88a8}}, {0x14, 0x1, {0x54, 0x2c5, 0xfff, 0x8100}}, {0x14, 0x1, {0x3443625d, 0x3b8, 0x81, 0x88a8}}, {0x14, 0x1, {0x8e7, 0x386, 0x9, 0x88a8}}]}, @IFLA_VF_RATE={0x10, 0x6, {0x800, 0x889, 0x2}}]}]}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xc}]}, 0x190}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711105000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff07}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000020000100000000000000000059a76baedcf2220900020000f1001400604aac840e108abcaca15c053ba90800000000000000f357a3f80f", @ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x10000805}, 0x0) (async) 5.695703733s ago: executing program 4 (id=655): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000600), &(0x7f0000000640)=r0}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff7fff}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0xf00, 0x0, &(0x7f0000000040)={0xa, 0x1, 0xfffffffc, @local, 0xe79}, 0x1c) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r7, &(0x7f000000a340)={0x0, 0x0, &(0x7f000000a300)={&(0x7f000000a2c0)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000800) sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r3, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7fffffff, 0x5f}}}}, [@NL80211_ATTR_IE={0x56, 0x2a, [@gcr_ga={0xbd, 0x6}, @chsw_timing={0x68, 0x4, {0x9, 0x5aff}}, @mic={0x8c, 0x18, {0x4ae, "393dafd206b2", @long="48fe29cf7667c31e1e10e3629e2f2e63"}}, @ssid={0x0, 0x6, @default_ap_ssid}, @chsw_timing={0x68, 0x4, {0x5, 0xc}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x9, 0x21}}, @mesh_chsw={0x76, 0x6, {0x0, 0x34, 0x2, 0x9}}, @dsss={0x3, 0x1, 0x2}, @mesh_chsw={0x76, 0x6, {0x6, 0x2, 0x32, 0x9}}]}]}, 0x80}}, 0xc840) 4.724546756s ago: executing program 3 (id=659): r0 = socket$inet(0x2, 0x3, 0x6) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r1, &(0x7f0000000100)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) close(r1) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) (async) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) shutdown(r0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x8000, 0x700, 0xaa7, 0x0, {{0x19, 0x4, 0x0, 0x16, 0x64, 0x64, 0x0, 0xdd, 0x29, 0x0, @remote, @remote, {[@cipso={0x86, 0x2c, 0xffffffffffffffff, [{0x6, 0x10, "326c192c84e25e125b57c9b02e44"}, {0x7, 0x9, "b4137f0ae4a028"}, {0x2, 0xd, "7a0a2b84448e01ecbbd13d"}]}, @noop, @ssrr={0x89, 0xf, 0x79, [@empty, @loopback, @multicast1]}, @ssrr={0x89, 0x13, 0xd1, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @private=0xa010102]}]}}}}}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x6230}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_GROUP={0x8, 0x1b, 0x55690764}]}, 0x3c}}, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 2.940616724s ago: executing program 4 (id=660): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180200008f0800000000000000000000850000006100000085000000a000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x36, 0x0, &(0x7f0000000580)="ac0000000000ec67838717bd86ddbd6e902562ac5675da63a84744c677777570e8bd8e1450c4e68db8b8f5853e524b918ea6e4db95eb", 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x21) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001600156f000000000005000000000000", @ANYRES32=0x0, @ANYBLOB="140006"], 0x2c}}, 0x0) 2.926029322s ago: executing program 0 (id=661): sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc8, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffc01}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'netpci0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x6, @empty, 0x400}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @private0}}}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8004}, 0x4004) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x1, 0x0, 0xfffffffa}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) write$tun(r2, &(0x7f0000001500)={@val={0x0, 0x88f7}, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0xc, 0x58, 0x64, 0x0, 0x10, 0x2f, 0x0, @broadcast, @local}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x1, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x0, {{0xc, 0x1, 0x0, 0x3, 0x1, 0x2, 0x7, 0xc9}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x4, {{0x3, 0x2, 0xa, 0x2, 0x1, 0x2, 0x2, 0xf6}, 0x2, {0x40, 0x6, 0x1, 0x19, 0x1, 0x0, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x72) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000300)={'team_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @random="e5db029ea53c"}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, 0x0, &(0x7f0000000240)) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x3, 0x8, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x27}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20009084}, 0x1) 2.859650387s ago: executing program 1 (id=662): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000f00)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "9fbbb0", 0x8, 0x0, 0x0, @private1, @local, {[@fragment={0x0, 0x0, 0x76}]}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x80000001, 0x27a, 0x100}}]}]}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) ioctl(r3, 0x8b22, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100b11b700000feffff1a000000180001801400020064756d6d7930"], 0x2c}}, 0x0) preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000000100)=""/121, 0x79}, {&(0x7f0000000180)=""/230, 0xe6}, {&(0x7f00000002c0)=""/103, 0x67}], 0x4, 0x0, 0x5) 2.859332702s ago: executing program 3 (id=663): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ec0)={0x1c, r1, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x1c}}, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34010000", @ANYRES16=r2, @ANYBLOB="000229bd7000fddbdf253f00000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x5}, 0x800) 2.74514633s ago: executing program 4 (id=665): syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "ffffffffffff00000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000000000", @ANYRES32], 0x48}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0) sendto$packet(r0, &(0x7f0000000080)="33031600d1fd140000007ef52f555f2a3b9fe67025c1d97bfbf719143baa4b1f0f858c6632f47042195e", 0xfdef, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x62}, 0x14) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "ffffffffffff00000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'geneve1\x00'}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000000000", @ANYRES32], 0x48}}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0) (async) sendto$packet(r0, &(0x7f0000000080)="33031600d1fd140000007ef52f555f2a3b9fe67025c1d97bfbf719143baa4b1f0f858c6632f47042195e", 0xfdef, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x62}, 0x14) (async) 2.737386966s ago: executing program 3 (id=666): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x28) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000140), &(0x7f0000000000)=0x8) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc7901f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb600"/135, 0x87}, {&(0x7f0000000780)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e430bcb03", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)="b1", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000800)="f6b328c40d4cc969a0513b8ffd72381d4ef4a89954104d4a81db2fa3c0f906a33482e2821787ac54c0c62da54d1c77255c322358d0e272be2ccacf8f689f0115afd7305a1ce39e8b54734910fd9257fc4d3d2f910d5b9965f73440df67940c76ddc3df03db0d78c28fc030a88d50", 0x6e}, {&(0x7f0000000940)="ee41e16fcc123e48fa04ef6edfc0fe23b7a8", 0x12}], 0x2}}], 0x3, 0xc0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffff8001}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0xc, &(0x7f0000001200)={0x0, 0x1}, 0x8}, 0x94) 2.62325468s ago: executing program 1 (id=667): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x1c}}, 0x14000) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) (async) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048080}, 0x1) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r2) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000380)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000480)={&(0x7f0000000300), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, r5, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_EXTENDED_ADDR={0xc}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x100}}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x357a4a6c}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000804}, 0x4040050) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r5, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) (async) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x40, r1, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}]}, 0x40}}, 0x44000) (async) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000840), r2) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r7, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x24}}, 0x4000000) (async) r8 = socket$inet6(0xa, 0x6, 0xa) (async) r9 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000940), &(0x7f0000000980)=0x10) sendfile(r8, r9, &(0x7f00000009c0)=0x6, 0x0) (async) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000d0) sendmsg$NL802154_CMD_SET_CCA_MODE(r2, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x24, r5, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4840}, 0x20000000) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c40), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x400208}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x44, r10, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xf9}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xf9}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x49}]}, 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x200000c0) r11 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000d80), &(0x7f0000000e00)=0x60) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000e40)=0x0) connect$nfc_llcp(r11, &(0x7f0000000e80)={0x27, r12, 0xffffffffffffffff, 0x2, 0xe, 0x3, "0ec67bb23606534e99d09d9cb6447fa5093242f49fae957d5264222e52d1cf09c9e4172cd94bc45985d5bde7d3f8b23feaf9539c773e8e87e7906d81011a6c", 0x9}, 0x60) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000f40), r2) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14, r13, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x1) (async) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40) 2.62183486s ago: executing program 2 (id=668): r0 = socket$tipc(0x1e, 0x5, 0x0) accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name, &(0x7f0000000080)=0x10, 0x80000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000000)=0x5fb, 0x4) 2.612770232s ago: executing program 3 (id=669): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000040), &(0x7f00000000c0)=0x8) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x1, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x1, 0xff}, 0x1}, 0x18) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 2.518139301s ago: executing program 4 (id=670): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x40}}, 0x0) (async, rerun: 64) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, 0x0, 0x0) (async) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8=r3], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, r2}, 0x94) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async, rerun: 32) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0x84, 0x8f, 0x8, 0x2c, @private1={0xfc, 0x1, '\x00', 0x2}, @remote, 0x8000, 0x8000, 0x80000000, 0x4}}) (async) mkdirat$cgroup(r4, &(0x7f0000000080)='syz0\x00', 0x1ff) (async) r6 = openat$cgroup(r4, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f0000000180), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000280), 0x9) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 64) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r8, 0x8b2c, &(0x7f0000000040)) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r9, 0x1f4d2000) (async, rerun: 32) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)=0xffff) (rerun: 32) write$tun(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000f6000000000000aa66aaaaaaaa000c020000e0040300006355afc09b81b5efbde27e9a26ef4d9aabc63f84a532bbf99731b180937271b38fa0cde8da759b0cd1e6ff44347fa315f556bbf2caa4ad"], 0x22) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001c00c9242bbd7000fbdbdf2507000000", @ANYRES32=r10, @ANYBLOB="80001e0a0a000200aaaa"], 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) 2.447488949s ago: executing program 1 (id=671): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000040)) 2.418124679s ago: executing program 2 (id=672): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_DST={0x8, 0x1, @rand_addr=0x64010101}]}, 0x24}}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, &(0x7f0000000080), &(0x7f00000000c0)=""/102}, 0x20) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x9) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000013000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) shutdown(r1, 0x1) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20004000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 2.264503051s ago: executing program 0 (id=673): socketpair(0x5, 0x800, 0x3ff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$x25(r0, &(0x7f0000000040)=""/184, 0xb8, 0x22, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r3, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x44001}, 0x800) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, r5, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ff8a528632"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x40}, 0x1, 0x0, 0x0, 0x8c0}, 0x8010) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000740)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)={0x21c, r5, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xf6}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x10a5}, @NL80211_ATTR_FRAME={0x1f0, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1}, {0x81}, @broadcast, @device_a, @initial, {0x2}}, 0x0, 0x2, 0x4a, @val={0x10, 0x1, 0x52}, [{0xdd, 0x32, "b17800d65989bbb91bb06228346cfdb64eaf307a894cf87d1e249d77ef44dcace2d8e96c8971830b9b2b8ba7d67c714edcdb"}, {0xdd, 0x15, "f653ca9acc06279d016bc347de7154215a41f80559"}, {0xdd, 0xae, "eed238a2bf027d6b6d871e4c6b14f3ee824f61b6d08b367637cc0234d21db43df7cb53d9f3b63853a9be55f1cabcdfa3ae8993c5579aae2b707e39761c46caef74509168be81f68983e211c2e84b08adceabd587cbb6222692f5d045ad33d0ef07ad7a4be872954e66c081c3de8ed34e11139a926df3b963279ac87e2c59c599486e8203a1ac5d9b005924d0f84f17131a05fbea2f10cd3d7570bd786d1a7b56e6dc004157e27e11326105d0b35d"}, {0xdd, 0xce, "6811ee5cab6048a74945d39613ff78089fd989c1ed02984adb2ed3f39781ffa2a79f48e5eb8f7ca31a28d33ee49919c58f42d7c69a2a708e18185f6b77af073a29bdb49d881c37728641d41ca2cc77545ecdab389994ced6340d0481ca51613b6265aa141d35feca1a751fe8208ce3d021fd08c672a9795698b4bae4479adeb35d432aa9374cfefa37ebbe889c5183c62c82b9dc2e6021df783b38006ecdfcf5e928990716de76dddfd4756d7f36fbcaf768422a034cb1a5e1ac4ac887bad275daa9cc930291bb6bd3a0e084b1a6"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x21c}, 0x1, 0x0, 0x0, 0x44041}, 0x20000000) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000007c0), r0) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x5c, r6, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8091}, 0x4000000) sendto$x25(r1, &(0x7f0000000900)="cf2d8be89c84824cfefb2b3f89606db94a2cae38cd6079837ea7167e687dc5b19dc9b39c82cb553a79c0c46a9d635554299e3a1a78a5dc38f0b45789ab59e2b72c1c2f50c8d866476a24b15d99462025f4357da2fe3877944262b96cb4ec22674852d715da0983a1005b05465e655e061b0a3f7f08380508e5e5129c8f5bd4e2506cafc63ec6eca1bb758f3dc22761f4f0fbcfe0dedf960f4bef0f49b7b23d0579069d72aac4114a2fc687097f189f1fe5b95014877424197b83952b", 0xbc, 0x48849, &(0x7f00000009c0), 0x12) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r4, 0x46d1f857b204fee1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x20000081) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000b00)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x7c, r5, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7, 0x30}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000800) socketpair(0x6, 0xec10fbf8c50ac60, 0xc, &(0x7f0000000cc0)={0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r8, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x48, 0x1411, 0x100, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20048040}, 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_NAN(r9, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x28, r5, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x61}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004005}, 0x2004c090) syz_genetlink_get_family_id$team(&(0x7f0000000f40), r2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000f80), r9) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000fc0)={'veth0_macvtap\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000001000), 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001080)=@generic={&(0x7f0000001040)='./file0\x00', 0x0, 0x8}, 0x18) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001100), r8) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000001280)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001140)={0xfc, r10, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xe2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4c50}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x20004002) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x34, r4, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040094}, 0x20000000) 2.2194408s ago: executing program 1 (id=674): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x15) (async) r1 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xffffffffffffffff}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x48}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.21904588s ago: executing program 4 (id=675): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x129, 0x870bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0x0, 0xe}}}, 0x24}}, 0x40004) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendto$packet(r2, &(0x7f0000000180)="e1ba2316c020ef4e917d87400e185b6c1be65dd48280ca69cc7e29b0281ee693e8c4ce5f3b8cc10be5c53c6d361c42ba6b8b98f1c40402e6f91e0ba704d9298b498914f5c842d68eddacfd7e3791977a878eb1d6db02c74b78084e1d991e3358dd5fd2163f", 0x65, 0x8000, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) 2.183322519s ago: executing program 3 (id=676): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00178004"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) (async) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000200be040205fe056402040c5c0009003f0020030a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0xa00000000000000) 2.038883291s ago: executing program 2 (id=677): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000580)=@delpolicy={0x5c, 0x14, 0x1, 0x70bd2b, 0x25dfdbfd, {{@in=@empty, @in6=@remote, 0x4e24, 0x2, 0x4e22, 0x0, 0xa}, 0x0, 0x426d722e34e63eff}, [@policy_type={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32, @ANYBLOB="0080a8f4c6d2e5d02ecdc71acccf172f0000fb66f0070aa56ff4d38d74564b70c319d2892cf01f9fcf510d04c4b142cdd8919cd09f77db0724863b8df462418241b4581ba8f67882214d9b5e29b9843089e09582cf14251c180bfe3a6e08ca12ecfb52a4a044d5f70270ff96b140b5fd0585512883ca63730a0bdbcb96c294333301432f83a89ad9e065d6534adc347730b724837b2ef3fd26663b1288fcc516d9027c10cafa281ba0665e7ea2cedc303d316f7435a2403ff20ab4", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async, rerun: 64) r4 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, 0x0, 0x0) (async) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1e, 0xa01, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read(r7, &(0x7f0000000080)=""/22, 0x16) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, r8, 0x1, 0x70bd27, 0x8, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}}, 0x0) 1.987585055s ago: executing program 1 (id=678): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x700) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0x101, @empty, 0xfffffff7}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg(r2, 0x0, 0x0, 0xc0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4098, 0x1002}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000200)=""/100, 0x64}, {&(0x7f0000000780)=""/190, 0xbe}, {&(0x7f0000000400)=""/170, 0xaa}, {&(0x7f0000000140)=""/184, 0xb8}], 0x7}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="88000000100001002fbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0201000000410000140003006e345cc588f193ac657464657673696d3000000000000014001680100001880c00070004"], 0x48}}, 0x24040800) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f00000000c0)) 1.986611364s ago: executing program 0 (id=679): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711053000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) (async) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) (async) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x64, 0x0, 0x0, 0xc84cf8fe4733a687, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1=0xe000006a]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r4, 0x6, 0xd, 0x0, 0x0) (async) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x100}, 0x8) (async) readv(r2, &(0x7f00000003c0)=[{&(0x7f00000006c0)=""/248, 0xf8}, {&(0x7f0000000280)=""/89, 0x59}, {&(0x7f0000000340)=""/107, 0x6b}, {&(0x7f00000007c0)=""/210, 0xd2}], 0x4) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000180)=0x4) (async, rerun: 64) r5 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000001c0)={r6, @in6={{0xa, 0x4e23, 0x9, @empty, 0x8}}, 0x3, 0x8000}, &(0x7f0000000400)=0x90) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={r6, 0x58, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x3, @empty, 0x845}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e22, 0x7, @private0, 0x3ff}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f00000001c0)=0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x18, 0x24, 0x301, 0x70bd25, 0xfffffffc, {0x1}, [@typed={0x4, 0x14e, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0x11, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80040000}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c014) 1.947245166s ago: executing program 3 (id=680): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0b04000000000000000002000000340004803000018008000100636d7000240002800800014000000008080002400000000110000380090001003f25378bca0000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000abcdc74450231010789e93f84ddc6c706cf69c193374d7ba93655db2abadd68374cad80006e960848794dd6b0b1c73213928a6fb71157d76e063f3960a4d2d230e434ee5b"], 0x88}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r4, 0x65, 0x7, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="300086156d0274561e79cdae667d38738ab8b2042d04fc1d2ddc3148d48df3587d2c0199", @ANYRES16=r1, @ANYBLOB="010000000000000000000700000014000800776c616e31000000000000000000000005001300810000001dea0272c48f60696277f99c413a8cc5ce0e3e495c5e00ceeadefdc94e4c40b60019d78e4c72afcdfc8a86f4416d2b2b935cb0ad9f67e7508714c87d86810981952b5bddf2a0a51748f9868afa6bacadb92c1b078496734b212e9b0da2e07f9dfa22985ea5a051a2a670ae9aa3a8a9da28e9d475c665cf82d2be636cca1110d59b1efb486d090973f80be8073be967ce23e9f22dd84471f256c2b009e49eea5b20c589be93044259a87b88f3c9b63144d75b08e917e57e11ba1fed39894343322d1eb12b141443a24f3f89ff6d048cdc46ad9976416d7bc4dfdfd5c186da75f70383921a4539cca6ed777e356110de35", @ANYRESOCT], 0x30}}, 0x40001) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffb, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0xfffffffffffffff8}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r11, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x4}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x5}, @TCA_FQ_CE_THRESHOLD={0x8}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x5}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x12}, @TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x7}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x8}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.802197067s ago: executing program 2 (id=681): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@delpolicy={0x68, 0x14, 0x1, 0x0, 0x0, {{@in=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@sec_ctx={0xc, 0x8, {0xfffffffffffffea4}}, @mark={0xc}]}, 0x68}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000003b40), r1) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000003b80)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="090326bd8800ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4040000) 1.731666513s ago: executing program 0 (id=682): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x1000000, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000006680)=ANY=[@ANYBLOB="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"/4281], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r3, r3, 0x2f}, 0x20) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r2, r3, 0x2f, 0x8, 0x4}, 0x20) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x9, 0x3, 0xc4f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r4, 0x0, 0x200000000000000}, 0x38) (async) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 1.680536447s ago: executing program 2 (id=683): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x2, 0x5) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}, {&(0x7f00000000c0)="f284c648e774127dd60684f426f5ba2cc84df655f88a58c75df430c47239a079342e266f3c28c44315cbac46cc53c0767d83749acd744041c020a467186c009967ac2e04a50c35b7dddb18af1a27f0d2bbf0a2e51d0d9ce97fdc56c626b1e3e31a6327517256ca41474d71555f56e9a9b007d62e4e7bd05d291173d57d21e60ebe507b83d5ae06135abcd2e7e592a94b94b771b539d02a27403695822acb9a493379e161", 0xa4}, {&(0x7f0000000180)="019939bb2a04928533a1fa1566d6a95f474ce5c7ffaac7925af8a8e1b6f988bac0a1646ef545371cec445fac7ca7b357839b02a11f07393bd57b4e19a573e1ac7147ac898142add63bb48fd79031f6120e4ec08da1ba70d624460f073161505ab1acc43d6bc11d0fe93d46cfaca27c59683e69ca9dd04043cd2a33c09e052eb0137ea3aba9dfb33c837df154893fb3ecfc8a8e0b5ededa165a4b9153c37d9f3502281ae4966019320961c59dc893db5f8af3ffe60da184388ffa24086d457fa1f4ed7ea1cfaa82d9e5a34b5651290e86", 0xd0}], 0x3}, 0x0) 94.306263ms ago: executing program 4 (id=684): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x3c}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x3c}}, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) (async) 47.539891ms ago: executing program 2 (id=685): r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) write$tun(r1, &(0x7f0000000100)={@val={0x0, 0x88b5}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0x65, 0x0, 0x1, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @empty}}}}}}, 0x26) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0xfffffffffffffdf4, &(0x7f00000002c0)=[{&(0x7f0000000d00)}], 0x1}}], 0x2, 0x4008040) 0s ago: executing program 1 (id=686): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, r2, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) bind$packet(r1, &(0x7f0000000040)={0x11, 0x18, r2, 0x1, 0x0, 0x6, @local}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="aabaaaaaaaaaaaaaaaaaaa0d0606428ebe"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x41}}, &(0x7f0000000480)='GPL\x00', 0x7}, 0x90) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.113' (ED25519) to the list of known hosts. [ 72.038883][ T5851] cgroup: Unknown subsys name 'net' [ 72.196872][ T5851] cgroup: Unknown subsys name 'cpuset' [ 72.210155][ T5851] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.099766][ T5851] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.236477][ T5863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.244874][ T5863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.273984][ T5863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.282236][ T5863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.290203][ T5863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.410686][ T5863] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.419147][ T5863] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.426963][ T5863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.435651][ T5863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.454748][ T5863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.504470][ T5863] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.515818][ T5863] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.524156][ T5863] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.532768][ T5863] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.541148][ T5863] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.589588][ T5863] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.598100][ T5863] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.606628][ T5863] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.615592][ T5863] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.625142][ T5863] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.678104][ T5863] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.694822][ T5863] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.703398][ T5863] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.712082][ T5863] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.720412][ T5863] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.057927][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 77.243304][ T5869] chnl_net:caif_netlink_parms(): no params data found [ 77.356792][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.364091][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.371588][ T5861] bridge_slave_0: entered allmulticast mode [ 77.379301][ T5861] bridge_slave_0: entered promiscuous mode [ 77.388748][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.396528][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.404198][ T5861] bridge_slave_1: entered allmulticast mode [ 77.411229][ T5861] bridge_slave_1: entered promiscuous mode [ 77.448053][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 77.529468][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.582789][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.632608][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 77.716587][ T5861] team0: Port device team_slave_0 added [ 77.722639][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.730058][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.737490][ T5869] bridge_slave_0: entered allmulticast mode [ 77.745762][ T5869] bridge_slave_0: entered promiscuous mode [ 77.802206][ T5861] team0: Port device team_slave_1 added [ 77.809570][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.817394][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.824916][ T5869] bridge_slave_1: entered allmulticast mode [ 77.831839][ T5869] bridge_slave_1: entered promiscuous mode [ 77.843791][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.850955][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.858706][ T5865] bridge_slave_0: entered allmulticast mode [ 77.867094][ T5865] bridge_slave_0: entered promiscuous mode [ 77.877031][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.884512][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.891924][ T5865] bridge_slave_1: entered allmulticast mode [ 77.899567][ T5865] bridge_slave_1: entered promiscuous mode [ 77.991492][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.998899][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.025044][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.039107][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.052916][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.088874][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 78.115019][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.124130][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.157249][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.190283][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.208405][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.229695][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.242047][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.254636][ T5867] bridge_slave_0: entered allmulticast mode [ 78.264880][ T5867] bridge_slave_0: entered promiscuous mode [ 78.329029][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.340456][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.349914][ T5867] bridge_slave_1: entered allmulticast mode [ 78.363154][ T5867] bridge_slave_1: entered promiscuous mode [ 78.364175][ T5863] Bluetooth: hci0: command tx timeout [ 78.418300][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.436538][ T5869] team0: Port device team_slave_0 added [ 78.446917][ T5869] team0: Port device team_slave_1 added [ 78.491592][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.533621][ T5863] Bluetooth: hci1: command tx timeout [ 78.570667][ T5865] team0: Port device team_slave_0 added [ 78.585667][ T5865] team0: Port device team_slave_1 added [ 78.613531][ T5863] Bluetooth: hci2: command tx timeout [ 78.629831][ T5867] team0: Port device team_slave_0 added [ 78.683672][ T5863] Bluetooth: hci3: command tx timeout [ 78.697450][ T5867] team0: Port device team_slave_1 added [ 78.728536][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.740631][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.781883][ T5863] Bluetooth: hci4: command tx timeout [ 78.791367][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.812206][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.826229][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.867311][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.916365][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.935420][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.992155][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.037514][ T5861] hsr_slave_0: entered promiscuous mode [ 79.056971][ T5861] hsr_slave_1: entered promiscuous mode [ 79.118908][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.136784][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.195232][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.313640][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.332713][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.388915][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.415919][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.433557][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.490813][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.565314][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.578575][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.595647][ T5871] bridge_slave_0: entered allmulticast mode [ 79.612378][ T5871] bridge_slave_0: entered promiscuous mode [ 79.624747][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.638781][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.655060][ T5871] bridge_slave_1: entered allmulticast mode [ 79.672750][ T5871] bridge_slave_1: entered promiscuous mode [ 79.913987][ T5869] hsr_slave_0: entered promiscuous mode [ 79.921096][ T5869] hsr_slave_1: entered promiscuous mode [ 79.935454][ T5869] debugfs: 'hsr0' already exists in 'hsr' [ 79.949495][ T5869] Cannot create hsr debugfs directory [ 80.014749][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.060950][ T5867] hsr_slave_0: entered promiscuous mode [ 80.075022][ T5867] hsr_slave_1: entered promiscuous mode [ 80.084751][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 80.095996][ T5867] Cannot create hsr debugfs directory [ 80.112470][ T5865] hsr_slave_0: entered promiscuous mode [ 80.120904][ T5865] hsr_slave_1: entered promiscuous mode [ 80.135999][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 80.147970][ T5865] Cannot create hsr debugfs directory [ 80.199789][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.333729][ T5871] team0: Port device team_slave_0 added [ 80.431848][ T5871] team0: Port device team_slave_1 added [ 80.443368][ T5863] Bluetooth: hci0: command tx timeout [ 80.604979][ T5863] Bluetooth: hci1: command tx timeout [ 80.691870][ T5863] Bluetooth: hci2: command tx timeout [ 80.713531][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.726957][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.769910][ T5863] Bluetooth: hci3: command tx timeout [ 80.780138][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.852296][ T5863] Bluetooth: hci4: command tx timeout [ 80.898709][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.913948][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.961656][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.211694][ T5871] hsr_slave_0: entered promiscuous mode [ 81.218506][ T5871] hsr_slave_1: entered promiscuous mode [ 81.225643][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 81.231395][ T5871] Cannot create hsr debugfs directory [ 81.340504][ T5861] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.356947][ T5861] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.412774][ T5861] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.515316][ T5861] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.795083][ T5867] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.879394][ T5867] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.919339][ T5867] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.993549][ T5867] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.233634][ T5869] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.260742][ T5869] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.284992][ T5869] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.374502][ T5869] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.526963][ T5863] Bluetooth: hci0: command tx timeout [ 82.618601][ T5865] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.632557][ T5865] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.659656][ T5865] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.669412][ T5865] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.684052][ T5863] Bluetooth: hci1: command tx timeout [ 82.738491][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.749042][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.764363][ T5863] Bluetooth: hci2: command tx timeout [ 82.825380][ T5871] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.843864][ T5863] Bluetooth: hci3: command tx timeout [ 82.854538][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.861476][ T5871] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.872200][ T5871] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.888599][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.908099][ T5871] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.923445][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.930778][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.939073][ T5863] Bluetooth: hci4: command tx timeout [ 82.965929][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.973223][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.984757][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.991850][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.003663][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.010766][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.179531][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.389796][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.417670][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.468990][ T972] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.477279][ T972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.518850][ T1319] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.526123][ T1319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.571667][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.622065][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.678223][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.692512][ T972] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.699835][ T972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.714170][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.736368][ T972] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.743549][ T972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.791919][ T972] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.799423][ T972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.810339][ T972] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.817508][ T972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.871407][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.002363][ T5871] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.038430][ T5861] veth0_vlan: entered promiscuous mode [ 84.110764][ T5867] veth0_vlan: entered promiscuous mode [ 84.126028][ T5861] veth1_vlan: entered promiscuous mode [ 84.187420][ T5867] veth1_vlan: entered promiscuous mode [ 84.221530][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.269332][ T5861] veth0_macvtap: entered promiscuous mode [ 84.308114][ T5861] veth1_macvtap: entered promiscuous mode [ 84.353826][ T5867] veth0_macvtap: entered promiscuous mode [ 84.416714][ T5867] veth1_macvtap: entered promiscuous mode [ 84.501046][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.527514][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.550377][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.569167][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.592846][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.606208][ T5863] Bluetooth: hci0: command tx timeout [ 84.661075][ T4215] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.689393][ T4215] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.706463][ T4215] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.720538][ T4215] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.729624][ T4215] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.763499][ T5863] Bluetooth: hci1: command tx timeout [ 84.770108][ T4215] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.780781][ T4215] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.825700][ T4215] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.843934][ T5863] Bluetooth: hci2: command tx timeout [ 84.898332][ T972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.907952][ T972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.923954][ T5863] Bluetooth: hci3: command tx timeout [ 84.944077][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.951742][ T5871] veth0_vlan: entered promiscuous mode [ 84.990599][ T5871] veth1_vlan: entered promiscuous mode [ 85.004484][ T5863] Bluetooth: hci4: command tx timeout [ 85.015776][ T1319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.043816][ T1319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.068676][ T5869] veth0_vlan: entered promiscuous mode [ 85.104709][ T5869] veth1_vlan: entered promiscuous mode [ 85.115810][ T4215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.139153][ T4215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.143549][ T5865] veth0_vlan: entered promiscuous mode [ 85.175729][ T5861] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.233787][ T4215] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.249021][ T4215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.260265][ T5869] veth0_macvtap: entered promiscuous mode [ 85.277105][ T5865] veth1_vlan: entered promiscuous mode [ 85.310622][ T5871] veth0_macvtap: entered promiscuous mode [ 85.335290][ T5869] veth1_macvtap: entered promiscuous mode [ 85.379126][ T5871] veth1_macvtap: entered promiscuous mode [ 85.460844][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.478035][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.495004][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.509853][ T5865] veth0_macvtap: entered promiscuous mode [ 85.551554][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.560235][ T4215] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.578916][ T1319] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.598271][ T5984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 85.628664][ T5986] trusted_key: syz.0.7 sent an empty control message without MSG_MORE. [ 85.658857][ T1319] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.669231][ T1319] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.727266][ T1319] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.751069][ T5865] veth1_macvtap: entered promiscuous mode [ 85.775380][ T1319] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.798999][ T1319] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.857019][ T1319] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.916162][ T5999] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11'. [ 85.966379][ T5997] netlink: 'syz.2.11': attribute type 2 has an invalid length. [ 86.020617][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.075880][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.137114][ T1319] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.152488][ T1319] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.170163][ T3588] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.180548][ T3588] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.197603][ T1319] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.223183][ T1319] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.272361][ T1319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.303796][ T1319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.338831][ T1319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.348316][ T1319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.416185][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.435855][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.514573][ T6014] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.585277][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.617036][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.675886][ T6017] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17'. [ 86.686224][ T1319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.712991][ T1319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.850845][ T121] cfg80211: failed to load regulatory.db [ 87.229158][ T6041] pimreg: entered allmulticast mode [ 87.500693][ T6054] netlink: 'syz.3.26': attribute type 10 has an invalid length. [ 87.649990][ T6054] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 88.178881][ T6077] netlink: 'syz.0.35': attribute type 1 has an invalid length. [ 88.217084][ T6077] netlink: 'syz.0.35': attribute type 1 has an invalid length. [ 88.326514][ T6080] netlink: 'syz.0.35': attribute type 1 has an invalid length. [ 88.359876][ T6080] netlink: 'syz.0.35': attribute type 1 has an invalid length. [ 88.401524][ T6088] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 88.451247][ T6090] netlink: 24 bytes leftover after parsing attributes in process `syz.4.38'. [ 88.461126][ T6090] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.615369][ T6098] netlink: 'syz.1.40': attribute type 4 has an invalid length. [ 88.639149][ T6100] netlink: 16 bytes leftover after parsing attributes in process `syz.4.42'. [ 88.651615][ T6100] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.42'. [ 88.772804][ T6097] Zero length message leads to an empty skb [ 88.851367][ T6108] syz.1.44 uses obsolete (PF_INET,SOCK_PACKET) [ 88.952881][ T6112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.45'. [ 88.954109][ T6113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.46'. [ 88.981784][ T6112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.45'. [ 89.139139][ T6118] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.47'. [ 89.565664][ T6140] netlink: 'syz.4.53': attribute type 1 has an invalid length. [ 89.967652][ T6162] sctp: failed to load transform for md5: -2 [ 90.097767][ T6169] netlink: 'syz.1.60': attribute type 26 has an invalid length. [ 90.545175][ T6188] pim6reg1: entered promiscuous mode [ 90.552035][ T6188] pim6reg1: entered allmulticast mode [ 90.711755][ T6200] sock: sock_timestamping_bind_phc: sock not bind to device [ 90.777567][ T6202] vlan2: entered allmulticast mode [ 90.789863][ T6202] hsr0: entered allmulticast mode [ 90.797441][ T6202] hsr_slave_0: entered allmulticast mode [ 90.818724][ T6202] hsr_slave_1: entered allmulticast mode [ 91.039793][ T6218] vlan3: entered promiscuous mode [ 91.062957][ T6218] bridge0: entered promiscuous mode [ 91.420097][ T6243] __nla_validate_parse: 5 callbacks suppressed [ 91.420115][ T6243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.83'. [ 91.474157][ T6238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.83'. [ 91.635587][ T6252] tipc: Started in network mode [ 91.648192][ T6252] tipc: Node identity ac14142f, cluster identity 4711 [ 91.692696][ T6252] tipc: New replicast peer: 0.0.0.0 [ 91.703902][ T6253] netlink: 'syz.4.87': attribute type 10 has an invalid length. [ 91.721184][ T6252] tipc: Enabled bearer , priority 10 [ 91.732816][ T6253] netlink: 40 bytes leftover after parsing attributes in process `syz.4.87'. [ 91.746639][ T6253] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 91.754618][ T6253] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 91.768025][ T6253] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 91.818156][ T6256] netlink: 20 bytes leftover after parsing attributes in process `syz.1.88'. [ 91.857643][ T6256] netlink: 20 bytes leftover after parsing attributes in process `syz.1.88'. [ 91.932710][ T6258] pim6reg: entered allmulticast mode [ 91.951529][ T6258] netlink: 'syz.3.89': attribute type 10 has an invalid length. [ 92.007642][ T6258] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.017430][ T6258] bridge_slave_1: left allmulticast mode [ 92.024844][ T6258] bridge_slave_1: left promiscuous mode [ 92.031377][ T6258] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.117968][ T6258] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 92.393775][ T6279] veth0: entered promiscuous mode [ 92.587009][ T6281] veth0: left promiscuous mode [ 92.636780][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.99'. [ 92.834448][ T5920] tipc: Node number set to 2886997039 [ 93.135973][ T6308] tipc: Enabled bearer , priority 0 [ 93.155845][ T6299] tipc: Resetting bearer [ 93.167091][ T6311] syzkaller0: entered promiscuous mode [ 93.172660][ T6311] syzkaller0: entered allmulticast mode [ 93.276715][ T6298] tipc: Resetting bearer [ 93.345627][ T6298] tipc: Disabling bearer [ 93.410281][ T6316] warning: `syz.1.103' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 93.616491][ T6332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.109'. [ 93.753711][ T6338] netlink: 'syz.3.111': attribute type 1 has an invalid length. [ 93.793452][ T6341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.110'. [ 94.003829][ T6346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.113'. [ 94.016412][ T6348] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 94.063665][ T6348] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 94.108600][ T6348] dvmrp0: entered allmulticast mode [ 94.122826][ T6348] dvmrp0: left allmulticast mode [ 94.242224][ T6357] netlink: 'syz.0.116': attribute type 1 has an invalid length. [ 94.253904][ T6358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.116'. [ 94.285353][ T6363] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 94.521398][ T6375] Bluetooth: MGMT ver 1.23 [ 94.936545][ T6393] sctp: failed to load transform for md5: -2 [ 95.472095][ T6428] netlink: 'syz.4.137': attribute type 1 has an invalid length. [ 95.532084][ T6428] syzkaller1: entered promiscuous mode [ 95.557890][ T6428] syzkaller1: entered allmulticast mode [ 95.952415][ T6453] netlink: 'syz.4.144': attribute type 14 has an invalid length. [ 95.963717][ T6454] netlink: 'syz.1.142': attribute type 1 has an invalid length. [ 95.997618][ T6453] netlink: 'syz.4.144': attribute type 13 has an invalid length. [ 96.029065][ T6456] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 96.036587][ T6456] IPv6: NLM_F_CREATE should be set when creating new route [ 96.483814][ T6485] tipc: Started in network mode [ 96.492557][ T6485] tipc: Node identity 3266dd3b311b, cluster identity 4711 [ 96.539633][ T6485] tipc: Enabled bearer , priority 0 [ 96.568813][ T6476] syzkaller0: entered promiscuous mode [ 96.586734][ T6476] syzkaller0: entered allmulticast mode [ 96.601126][ T6491] netlink: 'syz.1.155': attribute type 21 has an invalid length. [ 96.629909][ T6491] IPv6: NLM_F_CREATE should be specified when creating new route [ 96.651887][ T6491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 96.659310][ T6491] IPv6: NLM_F_CREATE should be set when creating new route [ 96.666737][ T6491] IPv6: NLM_F_CREATE should be set when creating new route [ 96.674015][ T6491] IPv6: NLM_F_CREATE should be set when creating new route [ 96.757672][ T6481] tipc: Resetting bearer [ 96.810757][ T6481] tipc: Disabling bearer [ 97.051077][ T6519] __nla_validate_parse: 16 callbacks suppressed [ 97.051096][ T6519] netlink: 108 bytes leftover after parsing attributes in process `syz.0.161'. [ 97.088675][ T6521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.160'. [ 97.197714][ T6519] netlink: 108 bytes leftover after parsing attributes in process `syz.0.161'. [ 97.232562][ T6519] netlink: 108 bytes leftover after parsing attributes in process `syz.0.161'. [ 97.340086][ T6519] netlink: 108 bytes leftover after parsing attributes in process `syz.0.161'. [ 97.391351][ T6533] veth1_macvtap: left promiscuous mode [ 97.425898][ T6519] netlink: 108 bytes leftover after parsing attributes in process `syz.0.161'. [ 97.504947][ T6519] netlink: 108 bytes leftover after parsing attributes in process `syz.0.161'. [ 97.541811][ T6519] netlink: 108 bytes leftover after parsing attributes in process `syz.0.161'. [ 97.565834][ T6540] netlink: 240 bytes leftover after parsing attributes in process `syz.4.167'. [ 97.624491][ T6519] netlink: 108 bytes leftover after parsing attributes in process `syz.0.161'. [ 97.639096][ T6540] : entered promiscuous mode [ 97.656748][ T6547] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 97.685619][ T6549] dvmrp1: entered allmulticast mode [ 97.691281][ T6544] netlink: 'syz.3.169': attribute type 14 has an invalid length. [ 97.740717][ T6548] bond0: (slave wlan1): Releasing backup interface [ 97.752895][ T6548] batman_adv: batadv0: Adding interface: wlan1 [ 97.765441][ T6548] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.797591][ T6548] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 97.827180][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.867553][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.907366][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.929393][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.274560][ T6588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.315792][ T6589] netlink: 'syz.4.179': attribute type 10 has an invalid length. [ 98.379319][ T6589] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.408165][ T6589] bridge_slave_1: left allmulticast mode [ 98.433194][ T6589] bridge_slave_1: left promiscuous mode [ 98.455549][ T6589] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.486149][ T6589] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 98.646872][ T6606] netlink: 'syz.1.186': attribute type 1 has an invalid length. [ 98.772490][ T6611] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.159194][ T6631] netlink: 'syz.0.194': attribute type 5 has an invalid length. [ 99.220939][ T6637] netlink: 'syz.0.194': attribute type 5 has an invalid length. [ 99.347747][ T6636] team1: entered promiscuous mode [ 99.365544][ T6636] team1: entered allmulticast mode [ 99.523443][ T6648] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.685173][ T6656] 8021q: VLANs not supported on sit0 [ 99.848774][ T6661] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 100.544068][ T6701] macvlan2: entered allmulticast mode [ 100.585361][ T6701] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 100.655321][ T6704] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.663166][ T6704] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.064794][ T6731] sctp: [Deprecated]: syz.1.222 (pid 6731) Use of struct sctp_assoc_value in delayed_ack socket option. [ 101.064794][ T6731] Use struct sctp_sack_info instead [ 101.574614][ T6751] Dead loop on virtual device ip6_vti0, fix it urgently! [ 101.622976][ T6753] bond2 (unregistering): Released all slaves [ 102.116493][ T6781] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.171743][ T6791] __nla_validate_parse: 75 callbacks suppressed [ 102.171762][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.240'. [ 102.230574][ T6783] bond_slave_0: entered promiscuous mode [ 102.236967][ T6783] bond_slave_1: entered promiscuous mode [ 102.262929][ T6783] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 102.286537][ T6783] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 103.420026][ T6839] tipc: Enabling of bearer rejected, failed to enable media [ 103.549277][ T6846] batman_adv: batadv0: Adding interface: dummy0 [ 103.573257][ T6846] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.637361][ T6846] batman_adv: batadv0: Interface activated: dummy0 [ 103.669241][ T24] IPVS: starting estimator thread 0... [ 103.691887][ T6864] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 103.742893][ T6861] batadv0: mtu less than device minimum [ 103.754351][ T6861] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 103.766439][ T6861] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 103.777951][ T6861] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 103.789308][ T6861] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 103.800783][ T6861] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 103.825895][ T6862] IPVS: using max 26 ests per chain, 62400 per kthread [ 104.050683][ T6871] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.263'. [ 104.097493][ T6879] sctp: [Deprecated]: syz.3.265 (pid 6879) Use of struct sctp_assoc_value in delayed_ack socket option. [ 104.097493][ T6879] Use struct sctp_sack_info instead [ 104.299261][ T6892] netlink: 'syz.3.269': attribute type 21 has an invalid length. [ 104.307304][ T6892] netlink: 152 bytes leftover after parsing attributes in process `syz.3.269'. [ 104.457894][ T6896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.271'. [ 104.482243][ T6896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.271'. [ 104.505920][ T6898] netlink: 12 bytes leftover after parsing attributes in process `syz.3.272'. [ 104.601199][ T6901] netlink: 'syz.1.273': attribute type 18 has an invalid length. [ 104.621739][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.645549][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.691330][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.720758][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.972009][ T6923] netlink: 'syz.3.280': attribute type 1 has an invalid length. [ 105.068289][ T6923] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.134358][ T6928] netlink: 'syz.2.282': attribute type 4 has an invalid length. [ 105.551156][ T6954] netlink: 'syz.3.288': attribute type 15 has an invalid length. [ 105.658196][ T6964] veth1_to_bond: entered allmulticast mode [ 105.669910][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.294'. [ 105.792175][ T6966] bond0: (slave bond_slave_1): Releasing backup interface [ 105.854136][ T6966] veth1_to_bond (unregistering): left allmulticast mode [ 106.409874][ T7011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.308'. [ 106.416080][ T7013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.311'. [ 106.618397][ T7024] net_ratelimit: 14 callbacks suppressed [ 106.618423][ T7024] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 106.642397][ T7025] tipc: Enabled bearer , priority 0 [ 106.652526][ T7022] pim6reg1: entered promiscuous mode [ 106.660549][ T7022] pim6reg1: entered allmulticast mode [ 106.668899][ T7034] netlink: 'syz.4.313': attribute type 10 has an invalid length. [ 106.680333][ T7019] tipc: Resetting bearer [ 106.737226][ T7017] syzkaller0: entered promiscuous mode [ 106.744810][ T7017] syzkaller0: entered allmulticast mode [ 106.761106][ T7024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.312'. [ 106.773522][ T7014] tipc: Resetting bearer [ 106.822114][ T7014] tipc: Disabling bearer [ 106.880456][ T7042] tipc: New replicast peer: 255.255.255.255 [ 106.890241][ T7042] tipc: Enabled bearer , priority 10 [ 107.204595][ T7047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.289935][ T7069] tipc: Trying to set illegal importance in message [ 107.411910][ T7073] tipc: Can't bind to reserved service type 0 [ 107.604130][ T7036] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 107.634751][ T7037] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 107.840418][ T7093] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.877981][ T7100] tipc: Enabled bearer , priority 0 [ 107.992145][ T7093] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.993232][ T7106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.331'. [ 108.069416][ T7088] syzkaller0: entered promiscuous mode [ 108.076427][ T7088] syzkaller0: entered allmulticast mode [ 108.091561][ T7110] tipc: Resetting bearer [ 108.134728][ T7093] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.203917][ T7087] tipc: Resetting bearer [ 108.238689][ T7087] tipc: Disabling bearer [ 108.356451][ T7093] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.392897][ T7114] netlink: 'syz.3.333': attribute type 1 has an invalid length. [ 108.697893][ T49] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.718495][ T7133] pim6reg1: entered promiscuous mode [ 108.725078][ T7133] pim6reg1: entered allmulticast mode [ 108.751290][ T1319] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.844093][ T5863] Bluetooth: hci0: command 0x080f tx timeout [ 108.972599][ T49] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.052705][ T49] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.138153][ T7149] netlink: 'syz.2.343': attribute type 4 has an invalid length. [ 109.295605][ T7162] netlink: 'syz.4.342': attribute type 1 has an invalid length. [ 109.353954][ T7160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.345'. [ 109.360698][ T7165] Unsupported ieee802154 address type: 0 [ 109.379556][ T7162] netlink: 17 bytes leftover after parsing attributes in process `syz.4.342'. [ 109.412242][ T7165] netlink: 5 bytes leftover after parsing attributes in process `syz.0.346'. [ 109.441162][ T7165] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 109.539685][ T7165] 0ªî{X¹¦: entered allmulticast mode [ 109.565669][ T7165] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 109.719638][ T7174] tipc: Enabled bearer , priority 0 [ 109.761308][ T7174] syzkaller0: entered promiscuous mode [ 109.785628][ T7174] syzkaller0: entered allmulticast mode [ 109.828771][ T7174] tipc: Resetting bearer [ 110.081933][ T7196] netlink: 72 bytes leftover after parsing attributes in process `syz.4.352'. [ 110.187817][ T7204] netlink: 24 bytes leftover after parsing attributes in process `syz.1.353'. [ 110.225295][ T3588] nci: nci_rx_work: unknown MT 0x1 [ 110.299955][ T7171] tipc: Resetting bearer [ 110.382675][ T7171] tipc: Disabling bearer [ 110.575387][ T7217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.357'. [ 110.692429][ T7217] 8021q: adding VLAN 0 to HW filter on device bond2 [ 110.793962][ T7217] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 110.859220][ T7229] netlink: 96 bytes leftover after parsing attributes in process `syz.3.360'. [ 110.924227][ T5863] Bluetooth: hci0: command 0x080f tx timeout [ 111.196315][ T7248] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 111.229368][ T7248] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 111.693987][ T7272] netlink: 'syz.0.370': attribute type 10 has an invalid length. [ 111.862218][ T7272] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 112.027899][ T7278] netlink: 830 bytes leftover after parsing attributes in process `syz.1.372'. [ 112.150140][ T7300] netlink: 'syz.2.375': attribute type 10 has an invalid length. [ 112.236995][ T7304] netlink: 'syz.2.375': attribute type 10 has an invalid length. [ 112.282772][ T7304] netlink: 40 bytes leftover after parsing attributes in process `syz.2.375'. [ 112.303708][ T7304] batadv0: entered promiscuous mode [ 112.331683][ T7310] netlink: 'syz.1.378': attribute type 10 has an invalid length. [ 112.349074][ T7304] batadv0: entered allmulticast mode [ 112.374987][ T7304] bridge0: port 3(batadv0) entered blocking state [ 112.417312][ T7304] bridge0: port 3(batadv0) entered disabled state [ 112.452731][ T7304] bridge0: port 3(batadv0) entered blocking state [ 112.459353][ T7304] bridge0: port 3(batadv0) entered forwarding state [ 112.472349][ T56] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 112.479247][ T7300] bridge0: port 3(batadv0) entered disabled state [ 112.481892][ T56] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 112.489244][ T7300] batadv0: left allmulticast mode [ 112.530480][ T7300] batadv0: left promiscuous mode [ 112.538868][ T7300] bridge0: port 3(batadv0) entered disabled state [ 112.555843][ T7300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.576412][ T7321] siw: device registration error -23 [ 112.581801][ T7300] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 112.646322][ T7310] team0: Port device dummy0 added [ 112.696210][ T7319] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 112.786511][ T7319] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 113.262170][ T7358] netlink: 'syz.1.390': attribute type 4 has an invalid length. [ 113.271048][ T24] IPVS: starting estimator thread 0... [ 113.304607][ T7362] netlink: 'syz.1.390': attribute type 4 has an invalid length. [ 113.373237][ T7361] IPVS: using max 29 ests per chain, 69600 per kthread [ 113.778929][ T7380] tipc: Started in network mode [ 113.786650][ T7380] tipc: Node identity 162b104b3b2f, cluster identity 4711 [ 113.805276][ T7380] tipc: Enabled bearer , priority 0 [ 113.821306][ T7379] tipc: Enabling of bearer rejected, already enabled [ 113.833240][ T7392] sock: sock_set_timeout: `syz.2.396' (pid 7392) tries to set negative timeout [ 113.847775][ T7383] syzkaller0: entered promiscuous mode [ 113.865064][ T7383] syzkaller0: entered allmulticast mode [ 113.868134][ T7377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.919139][ T7379] tipc: Resetting bearer [ 113.934963][ T7380] __nla_validate_parse: 1 callbacks suppressed [ 113.934979][ T7380] netlink: 64 bytes leftover after parsing attributes in process `syz.3.395'. [ 113.964509][ T7377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.024348][ T7378] tipc: Resetting bearer [ 114.064886][ T7378] tipc: Disabling bearer [ 114.115664][ T7404] netlink: 'syz.1.401': attribute type 83 has an invalid length. [ 114.377493][ T7422] netlink: 12 bytes leftover after parsing attributes in process `syz.3.406'. [ 114.415914][ T7418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.405'. [ 114.530314][ T7429] netlink: 28 bytes leftover after parsing attributes in process `syz.0.408'. [ 114.545853][ T7426] tipc: Enabled bearer , priority 0 [ 114.600842][ T7418] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 114.682694][ T7436] netlink: 36 bytes leftover after parsing attributes in process `syz.0.410'. [ 114.746491][ T7426] tipc: Disabling bearer [ 114.788544][ T7444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.411'. [ 115.408780][ T7470] 8021q: VLANs not supported on ip6gre0 [ 115.540434][ T7473] netlink: 'syz.3.418': attribute type 1 has an invalid length. [ 115.610575][ T7473] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 115.617130][ T7476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.419'. [ 115.688298][ T7473] veth5: entered promiscuous mode [ 115.697257][ T7473] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 115.712182][ T7479] netlink: 84 bytes leftover after parsing attributes in process `syz.4.420'. [ 116.021782][ T7492] netlink: 24 bytes leftover after parsing attributes in process `syz.3.425'. [ 116.159255][ T7482] team0 (unregistering): Port device team_slave_0 removed [ 116.171496][ T7482] team0 (unregistering): Port device team_slave_1 removed [ 116.195235][ T7492] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 116.664482][ T7523] macvlan3: entered allmulticast mode [ 116.709313][ T7523] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 116.815401][ T7532] tipc: Enabled bearer , priority 0 [ 116.847834][ T7532] syzkaller0: entered promiscuous mode [ 116.866025][ T7532] syzkaller0: entered allmulticast mode [ 116.921261][ T7526] netlink: 'syz.4.435': attribute type 5 has an invalid length. [ 116.960194][ T7541] netlink: 204 bytes leftover after parsing attributes in process `syz.0.440'. [ 117.050294][ T7538] tipc: Resetting bearer [ 117.078815][ T7547] openvswitch: netlink: Flow key attr not present in new flow. [ 117.088948][ T7529] tipc: Resetting bearer [ 117.170957][ T7529] tipc: Disabling bearer [ 117.247554][ T7557] netlink: 'syz.1.445': attribute type 1 has an invalid length. [ 117.435377][ T7568] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 117.704539][ T7573] bridge0: port 3(batadv1) entered blocking state [ 117.733947][ T7573] bridge0: port 3(batadv1) entered disabled state [ 117.796344][ T7573] batadv1: entered allmulticast mode [ 117.827133][ T7573] batadv1: entered promiscuous mode [ 117.990139][ T7590] openvswitch: netlink: Flow actions attr not present in new flow. [ 118.081054][ T7598] netlink: 'syz.3.459': attribute type 10 has an invalid length. [ 118.134132][ T7594] netlink: 'syz.4.458': attribute type 5 has an invalid length. [ 118.224128][ T7598] team0: Port device geneve0 added [ 118.240809][ T49] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 118.250216][ T49] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 118.873502][ T7629] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 119.182481][ T7640] __nla_validate_parse: 9 callbacks suppressed [ 119.182499][ T7640] netlink: 12 bytes leftover after parsing attributes in process `syz.4.471'. [ 119.205640][ T7640] netlink: 12 bytes leftover after parsing attributes in process `syz.4.471'. [ 119.332179][ T7646] tipc: Started in network mode [ 119.343415][ T7646] tipc: Node identity 080211000001, cluster identity 4711 [ 119.386846][ T7646] tipc: Enabled bearer , priority 0 [ 119.660890][ T7653] tipc: Enabling of bearer rejected, already enabled [ 119.762468][ T7654] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 119.849691][ T7654] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 119.900042][ T7667] netlink: 24 bytes leftover after parsing attributes in process `syz.3.479'. [ 120.006341][ T7667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.479'. [ 120.026408][ T7659] netlink: 'syz.2.477': attribute type 39 has an invalid length. [ 120.237308][ T7671] syzkaller0: entered promiscuous mode [ 120.247599][ T7671] syzkaller0: entered allmulticast mode [ 120.270161][ T7682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.483'. [ 120.460849][ T7686] netlink: 24 bytes leftover after parsing attributes in process `syz.1.485'. [ 120.476483][ T7688] netlink: 'syz.3.484': attribute type 1 has an invalid length. [ 120.513513][ T5941] tipc: Node number set to 134418688 [ 120.952904][ T7707] netlink: 'syz.0.487': attribute type 3 has an invalid length. [ 120.964741][ T7707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.487'. [ 121.180743][ T5863] Bluetooth: hci4: command tx timeout [ 123.419977][ T7688] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 124.371696][ T7735] netlink: 'syz.4.494': attribute type 2 has an invalid length. [ 124.821357][ T7739] tipc: Enabled bearer , priority 0 [ 124.900090][ T7739] syzkaller0: entered promiscuous mode [ 124.933470][ T7739] syzkaller0: entered allmulticast mode [ 125.238180][ T7739] tipc: Resetting bearer [ 125.392008][ T7759] veth0_to_bridge: entered promiscuous mode [ 125.399630][ T7759] veth0_to_bridge: left promiscuous mode [ 125.476500][ T7739] tipc: Resetting bearer [ 125.620876][ T7739] tipc: Disabling bearer [ 125.634012][ T7766] IPVS: length: 215 != 24 [ 125.752627][ T7770] netlink: 'syz.0.505': attribute type 11 has an invalid length. [ 125.835421][ T7773] netlink: ct family unspecified [ 125.840981][ T7773] openvswitch: netlink: Actions may not be safe on all matching packets [ 125.932657][ T7771] dvmrp0: entered allmulticast mode [ 125.992611][ T7770] netlink: 'syz.0.505': attribute type 10 has an invalid length. [ 126.069809][ T7770] veth0_vlan: entered allmulticast mode [ 126.334465][ T7770] veth0_vlan: left promiscuous mode [ 126.392910][ T7770] veth0_vlan: entered promiscuous mode [ 126.454543][ T7770] team0: Device veth0_vlan failed to register rx_handler [ 127.676132][ T7813] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 127.858724][ T7781] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 128.019188][ T7781] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 128.374549][ T7828] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.396108][ T7833] netlink: 40 bytes leftover after parsing attributes in process `syz.0.518'. [ 128.757605][ T7841] netlink: 'syz.0.522': attribute type 10 has an invalid length. [ 128.897535][ T7842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.521'. [ 129.012686][ T7842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.521'. [ 129.041344][ T7847] Unsupported ieee802154 address type: 0 [ 129.560867][ T7863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.527'. [ 129.660802][ T7866] netlink: 24 bytes leftover after parsing attributes in process `syz.3.529'. [ 129.676376][ T7867] netlink: 12 bytes leftover after parsing attributes in process `syz.4.528'. [ 130.719522][ T7891] xt_socket: unknown flags 0x50 [ 130.834041][ T7886] netlink: 'syz.3.534': attribute type 10 has an invalid length. [ 130.935343][ T7886] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 130.994850][ T7897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.537'. [ 131.040572][ T7897] tc_dump_action: action bad kind [ 131.353859][ T7908] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.540'. [ 132.348288][ T7921] sock: sock_timestamping_bind_phc: sock not bind to device [ 132.734524][ T7937] tipc: Enabled bearer , priority 0 [ 132.960517][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.969812][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.008757][ T7950] netlink: 'syz.1.549': attribute type 3 has an invalid length. [ 133.036699][ T7952] tipc: Resetting bearer [ 133.097626][ T7934] tipc: Disabling bearer [ 133.122514][ T7960] netlink: 'syz.1.549': attribute type 1 has an invalid length. [ 133.753476][ T7984] netlink: 'syz.4.559': attribute type 10 has an invalid length. [ 133.878620][ T7986] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.560'. [ 134.209563][ T7996] tipc: Bearer : already 2 bearers with priority 10 [ 134.228242][ T7996] tipc: Bearer : trying with adjusted priority [ 134.241774][ T7996] netlink: 20 bytes leftover after parsing attributes in process `syz.4.563'. [ 134.263520][ T7996] tipc: Invalid UDP bearer configuration [ 134.263580][ T7996] tipc: Enabling of bearer rejected, failed to enable media [ 134.325720][ T8000] tipc: Started in network mode [ 134.359397][ T8000] tipc: Node identity dae1b36d0a7d, cluster identity 4711 [ 134.412847][ T8000] tipc: Enabled bearer , priority 0 [ 134.641958][ T7999] tipc: Disabling bearer [ 134.707775][ T8014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.568'. [ 135.041087][ T8025] netlink: 244 bytes leftover after parsing attributes in process `syz.0.572'. [ 135.281532][ T8035] netlink: 256 bytes leftover after parsing attributes in process `syz.3.575'. [ 135.959862][ T8063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.582'. [ 136.226943][ T8066] bridge2: port 1(veth11) entered blocking state [ 136.277592][ T8066] bridge2: port 1(veth11) entered disabled state [ 136.312328][ T8066] veth11: entered allmulticast mode [ 136.380304][ T8066] veth11: entered promiscuous mode [ 136.510793][ T8068] vlan2: entered allmulticast mode [ 136.525593][ T8068] veth0_to_bond: entered allmulticast mode [ 136.538416][ T8068] bridge2: port 2(vlan2) entered blocking state [ 136.618648][ T8068] bridge2: port 2(vlan2) entered disabled state [ 136.705352][ T8068] vlan2: entered promiscuous mode [ 136.750321][ T8068] veth0_to_bond: entered promiscuous mode [ 136.846477][ T8078] tipc: Enabled bearer , priority 0 [ 137.049881][ T8070] tipc: Disabling bearer [ 137.424906][ T8113] netlink: 20 bytes leftover after parsing attributes in process `syz.0.592'. [ 137.528423][ T8113] vlan2: entered promiscuous mode [ 137.544835][ T8113] 0ªî{X¹¦: entered promiscuous mode [ 137.792186][ T8131] netlink: 'syz.3.596': attribute type 21 has an invalid length. [ 137.838255][ T8131] netlink: 128 bytes leftover after parsing attributes in process `syz.3.596'. [ 137.884077][ T8131] netlink: 3 bytes leftover after parsing attributes in process `syz.3.596'. [ 138.247078][ T8151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.601'. [ 138.354546][ T8152] netlink: 'syz.1.601': attribute type 2 has an invalid length. [ 138.367796][ T8151] netlink: 'syz.1.601': attribute type 2 has an invalid length. [ 138.450882][ T8158] netlink: 'syz.3.603': attribute type 13 has an invalid length. [ 138.482314][ T8158] lo: entered promiscuous mode [ 138.496559][ T8158] lo: entered allmulticast mode [ 138.525448][ T8158] tunl0: entered promiscuous mode [ 138.536658][ T8158] tunl0: entered allmulticast mode [ 138.547138][ T8158] gre0: entered promiscuous mode [ 138.553809][ T8158] gre0: entered allmulticast mode [ 138.610886][ T8158] gretap0: entered promiscuous mode [ 138.649302][ T8158] gretap0: entered allmulticast mode [ 138.683910][ T8158] gretap0: refused to change device tx_queue_len [ 138.707638][ T8158] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 139.047596][ T8168] syzkaller0: entered promiscuous mode [ 139.082585][ T8168] syzkaller0: entered allmulticast mode [ 139.674919][ T8209] syzkaller1: entered promiscuous mode [ 139.731042][ T8209] syzkaller1: entered allmulticast mode [ 140.062095][ T8222] IPv6: sit1: Disabled Multicast RS [ 140.085097][ T8222] sit1: entered allmulticast mode [ 140.251427][ T8229] __nla_validate_parse: 3 callbacks suppressed [ 140.251446][ T8229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.621'. [ 140.255262][ T8234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.619'. [ 140.269031][ T8235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.518684][ T8230] netlink: 44 bytes leftover after parsing attributes in process `syz.3.619'. [ 140.552924][ T8240] netlink: 'syz.0.623': attribute type 21 has an invalid length. [ 140.589385][ T8240] netlink: 152 bytes leftover after parsing attributes in process `syz.0.623'. [ 140.925416][ T8252] syzkaller0: entered promiscuous mode [ 140.946856][ T8252] syzkaller0: entered allmulticast mode [ 141.012479][ T8256] netlink: 56 bytes leftover after parsing attributes in process `syz.2.629'. [ 141.246772][ T8268] netlink: 14 bytes leftover after parsing attributes in process `syz.1.628'. [ 141.433539][ T8270] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 141.624153][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.637'. [ 141.634691][ T8283] netlink: 28 bytes leftover after parsing attributes in process `syz.0.635'. [ 141.669853][ T8280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.637'. [ 141.732359][ T8283] netlink: 20 bytes leftover after parsing attributes in process `syz.0.635'. [ 142.242249][ T8301] can: request_module (can-proto-0) failed. [ 142.257763][ T8304] syzkaller0: entered promiscuous mode [ 142.270891][ T8304] syzkaller0: entered allmulticast mode [ 143.046975][ T8337] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 146.039352][ T8379] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 146.298120][ T8400] __nla_validate_parse: 5 callbacks suppressed [ 146.298139][ T8400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.669'. [ 146.315255][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 146.354355][ T5934] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 146.362759][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 146.473833][ T5934] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 146.603688][ T8412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.672'. [ 146.753556][ T8425] openvswitch: netlink: Duplicate or invalid key (type 0). [ 146.760925][ T8425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.771066][ T8426] netlink: 24 bytes leftover after parsing attributes in process `syz.4.675'. [ 147.104526][ T8441] syzkaller0: entered promiscuous mode [ 147.112347][ T8441] syzkaller0: entered allmulticast mode [ 147.253883][ T8455] netlink: 'syz.2.683': attribute type 10 has an invalid length. [ 147.324462][ T5941] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 148.664117][ T8455] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 148.687459][ T8455] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 148.871607][ C0] ================================================================== [ 148.875417][ T8461] bond0: entered promiscuous mode [ 148.882646][ C0] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0 [ 148.882687][ C0] Write of size 8 at addr ffff888029da4470 by task syz.3.680/8457 [ 148.908165][ C0] [ 148.910852][ C0] CPU: 0 UID: 0 PID: 8457 Comm: syz.3.680 Not tainted syzkaller #0 PREEMPT(full) [ 148.910870][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 148.910885][ C0] Call Trace: [ 148.910894][ C0] [ 148.910902][ C0] dump_stack_lvl+0x189/0x250 [ 148.910922][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 148.910940][ C0] ? rcu_is_watching+0x15/0xb0 [ 148.910954][ C0] ? __kasan_check_byte+0x12/0x40 [ 148.910974][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.910989][ C0] ? rcu_is_watching+0x15/0xb0 [ 148.911003][ C0] ? lock_release+0x4b/0x3e0 [ 148.911024][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 148.911040][ C0] ? __virt_addr_valid+0x4a5/0x5c0 [ 148.911057][ C0] print_report+0xca/0x240 [ 148.911071][ C0] ? __xfrm_state_delete+0x696/0xca0 [ 148.911084][ C0] kasan_report+0x118/0x150 [ 148.911103][ C0] ? __xfrm_state_delete+0x696/0xca0 [ 148.911119][ C0] __xfrm_state_delete+0x696/0xca0 [ 148.911136][ C0] xfrm_timer_handler+0x18f/0xa00 [ 148.911152][ C0] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 148.911164][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 148.911184][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 148.911204][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 148.911222][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 148.911242][ C0] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 148.911255][ C0] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 148.911267][ C0] __hrtimer_run_queues+0x529/0xc60 [ 148.911288][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 148.911301][ C0] ? read_tsc+0x9/0x20 [ 148.911320][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 148.911336][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 148.911352][ C0] handle_softirqs+0x283/0x870 [ 148.911366][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 148.911381][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 148.911396][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 148.911414][ C0] __irq_exit_rcu+0xca/0x1f0 [ 148.911427][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 148.911443][ C0] irq_exit_rcu+0x9/0x30 [ 148.911455][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 148.911475][ C0] [ 148.911480][ C0] [ 148.911485][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 148.911501][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x31/0x70 [ 148.911521][ C0] Code: 24 65 48 8b 0c 25 08 80 a0 92 65 8b 15 c8 d1 e0 10 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 3c 16 00 00 00 74 2c <8b> 91 18 16 00 00 83 fa 02 75 21 48 8b 91 20 16 00 00 48 8b 32 48 [ 148.911532][ C0] RSP: 0018:ffffc9001c4472c8 EFLAGS: 00000246 [ 148.911551][ C0] RAX: ffffffff8211c8e7 RBX: ffffea00019e70c0 RCX: ffff888033de0000 [ 148.911562][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f4000000 [ 148.911571][ C0] RBP: 0000000000000001 R08: ffffea00019e70c7 R09: 1ffffd400033ce18 [ 148.911581][ C0] R10: dffffc0000000000 R11: fffff9400033ce19 R12: 0000000000000000 [ 148.911590][ C0] R13: dffffc0000000000 R14: 80000000679c3000 R15: ffffea00019e70c0 [ 148.911603][ C0] ? __folio_rmap_sanity_checks+0x67/0x7d0 [ 148.911622][ C0] __folio_rmap_sanity_checks+0x67/0x7d0 [ 148.911639][ C0] folio_remove_rmap_ptes+0x3b/0xaf0 [ 148.911653][ C0] ? page_table_check_clear+0x187/0x700 [ 148.911671][ C0] ? page_table_check_clear+0x4f3/0x700 [ 148.911688][ C0] ? page_table_check_clear+0x187/0x700 [ 148.911710][ C0] unmap_page_range+0x1f7f/0x4370 [ 148.911740][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 148.911856][ C0] ? mas_find+0xb0e/0xd30 [ 148.911876][ C0] ? unmap_vmas+0x144/0x580 [ 148.911892][ C0] unmap_vmas+0x399/0x580 [ 148.911909][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 148.911931][ C0] exit_mmap+0x248/0xb50 [ 148.911952][ C0] ? uprobe_clear_state+0x20f/0x290 [ 148.911969][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 148.911986][ C0] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 148.912005][ C0] ? __pfx_exit_aio+0x10/0x10 [ 148.912030][ C0] ? uprobe_clear_state+0x274/0x290 [ 148.912048][ C0] __mmput+0x118/0x420 [ 148.912063][ C0] exit_mm+0x1da/0x2c0 [ 148.912082][ C0] ? __pfx_exit_mm+0x10/0x10 [ 148.912100][ C0] ? rcu_is_watching+0x15/0xb0 [ 148.912117][ C0] do_exit+0x648/0x2300 [ 148.912137][ C0] ? do_raw_spin_lock+0x121/0x290 [ 148.912158][ C0] ? __pfx_do_exit+0x10/0x10 [ 148.912181][ C0] do_group_exit+0x21c/0x2d0 [ 148.912201][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 148.912224][ C0] get_signal+0x1286/0x1340 [ 148.912246][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 148.912272][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 148.912302][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 148.912325][ C0] exit_to_user_mode_loop+0x75/0x110 [ 148.912347][ C0] do_syscall_64+0x2bd/0x3b0 [ 148.912362][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 148.912382][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.912398][ C0] ? clear_bhb_loop+0x60/0xb0 [ 148.912418][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.912433][ C0] RIP: 0033:0x7f541538eba9 [ 148.912465][ C0] Code: Unable to access opcode bytes at 0x7f541538eb7f. [ 148.912474][ C0] RSP: 002b:00007f54131d30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 148.912492][ C0] RAX: fffffffffffffe00 RBX: 00007f54155d6278 RCX: 00007f541538eba9 [ 148.912503][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f54155d6278 [ 148.912514][ C0] RBP: 00007f54155d6270 R08: 0000000000000000 R09: 0000000000000000 [ 148.912523][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.912532][ C0] R13: 00007f54155d6308 R14: 00007fff2f2cf3f0 R15: 00007fff2f2cf4d8 [ 148.912549][ C0] [ 148.912555][ C0] [ 149.518045][ C0] Allocated by task 7047: [ 149.522366][ C0] kasan_save_track+0x3e/0x80 [ 149.527053][ C0] __kasan_slab_alloc+0x6c/0x80 [ 149.531927][ C0] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 149.537472][ C0] xfrm_state_alloc+0x24/0x2f0 [ 149.542230][ C0] __find_acq_core+0x8a7/0x1c00 [ 149.547073][ C0] xfrm_find_acq+0x78/0xa0 [ 149.551486][ C0] xfrm_alloc_userspi+0x6b3/0xc90 [ 149.556585][ C0] xfrm_user_rcv_msg+0x7a0/0xab0 [ 149.561570][ C0] netlink_rcv_skb+0x205/0x470 [ 149.566521][ C0] xfrm_netlink_rcv+0x79/0x90 [ 149.571227][ C0] netlink_unicast+0x82c/0x9e0 [ 149.575992][ C0] netlink_sendmsg+0x805/0xb30 [ 149.580777][ C0] __sock_sendmsg+0x21c/0x270 [ 149.585633][ C0] ____sys_sendmsg+0x505/0x830 [ 149.590564][ C0] ___sys_sendmsg+0x21f/0x2a0 [ 149.595233][ C0] __x64_sys_sendmsg+0x19b/0x260 [ 149.600435][ C0] do_syscall_64+0xfa/0x3b0 [ 149.604988][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.610895][ C0] [ 149.613218][ C0] Freed by task 5934: [ 149.617210][ C0] kasan_save_track+0x3e/0x80 [ 149.621896][ C0] kasan_save_free_info+0x46/0x50 [ 149.626908][ C0] __kasan_slab_free+0x5b/0x80 [ 149.631661][ C0] kmem_cache_free+0x18f/0x400 [ 149.636511][ C0] xfrm_state_gc_task+0x52d/0x6b0 [ 149.641614][ C0] process_scheduled_works+0xae1/0x17b0 [ 149.647152][ C0] worker_thread+0x8a0/0xda0 [ 149.651900][ C0] kthread+0x70e/0x8a0 [ 149.656004][ C0] ret_from_fork+0x3fc/0x770 [ 149.660662][ C0] ret_from_fork_asm+0x1a/0x30 [ 149.665414][ C0] [ 149.667828][ C0] The buggy address belongs to the object at ffff888029da4440 [ 149.667828][ C0] which belongs to the cache xfrm_state of size 928 [ 149.681803][ C0] The buggy address is located 48 bytes inside of [ 149.681803][ C0] freed 928-byte region [ffff888029da4440, ffff888029da47e0) [ 149.695617][ C0] [ 149.698017][ C0] The buggy address belongs to the physical page: [ 149.704440][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888029da4440 pfn:0x29da4 [ 149.714644][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 149.723148][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 149.730715][ C0] page_type: f5(slab) [ 149.734701][ C0] raw: 00fff00000000040 ffff88801b3673c0 dead000000000122 0000000000000000 [ 149.743532][ C0] raw: ffff888029da4440 00000000800f000e 00000000f5000000 0000000000000000 [ 149.752311][ C0] head: 00fff00000000040 ffff88801b3673c0 dead000000000122 0000000000000000 [ 149.761164][ C0] head: ffff888029da4440 00000000800f000e 00000000f5000000 0000000000000000 [ 149.769942][ C0] head: 00fff00000000002 ffffea0000a76901 00000000ffffffff 00000000ffffffff [ 149.778715][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 149.787367][ C0] page dumped because: kasan: bad access detected [ 149.793880][ C0] page_owner tracks the page as allocated [ 149.799579][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6445, tgid 6443 (syz.1.142), ts 95849344134, free_ts 95660652317 [ 149.818797][ C0] post_alloc_hook+0x240/0x2a0 [ 149.823580][ C0] get_page_from_freelist+0x21e4/0x22c0 [ 149.829152][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 149.834981][ C0] alloc_pages_mpol+0x232/0x4a0 [ 149.839938][ C0] allocate_slab+0x8a/0x370 [ 149.844461][ C0] ___slab_alloc+0xbeb/0x1420 [ 149.849148][ C0] kmem_cache_alloc_noprof+0x283/0x3c0 [ 149.854687][ C0] xfrm_state_alloc+0x24/0x2f0 [ 149.859436][ C0] xfrm_add_sa+0x17d1/0x4070 [ 149.864023][ C0] xfrm_user_rcv_msg+0x7a0/0xab0 [ 149.868966][ C0] netlink_rcv_skb+0x205/0x470 [ 149.873736][ C0] xfrm_netlink_rcv+0x79/0x90 [ 149.878502][ C0] netlink_unicast+0x82c/0x9e0 [ 149.883259][ C0] netlink_sendmsg+0x805/0xb30 [ 149.888007][ C0] __sock_sendmsg+0x21c/0x270 [ 149.892686][ C0] ____sys_sendmsg+0x505/0x830 [ 149.897455][ C0] page last free pid 6424 tgid 6422 stack trace: [ 149.903772][ C0] __free_frozen_pages+0xbc4/0xd30 [ 149.908882][ C0] free_large_kmalloc+0x13a/0x1f0 [ 149.913899][ C0] device_release+0x99/0x1c0 [ 149.918481][ C0] kobject_put+0x22b/0x480 [ 149.922897][ C0] netdev_run_todo+0xd2e/0xea0 [ 149.927678][ C0] tun_chr_close+0x13c/0x1c0 [ 149.932270][ C0] __fput+0x449/0xa70 [ 149.936244][ C0] task_work_run+0x1d1/0x260 [ 149.940959][ C0] do_exit+0x6b5/0x2300 [ 149.945128][ C0] do_group_exit+0x21c/0x2d0 [ 149.949815][ C0] get_signal+0x1286/0x1340 [ 149.954311][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 149.959878][ C0] exit_to_user_mode_loop+0x75/0x110 [ 149.965171][ C0] do_syscall_64+0x2bd/0x3b0 [ 149.969748][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.975727][ C0] [ 149.978054][ C0] Memory state around the buggy address: [ 149.983667][ C0] ffff888029da4300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 149.991716][ C0] ffff888029da4380: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 149.999853][ C0] >ffff888029da4400: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 150.007897][ C0] ^ [ 150.015814][ C0] ffff888029da4480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 150.023972][ C0] ffff888029da4500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 150.032046][ C0] ================================================================== [ 150.040291][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 150.047579][ C0] CPU: 0 UID: 0 PID: 8457 Comm: syz.3.680 Not tainted syzkaller #0 PREEMPT(full) [ 150.056796][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 150.067049][ C0] Call Trace: [ 150.070345][ C0] [ 150.073203][ C0] dump_stack_lvl+0x99/0x250 [ 150.077821][ C0] ? __asan_memcpy+0x40/0x70 [ 150.082437][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.087663][ C0] ? __pfx__printk+0x10/0x10 [ 150.092278][ C0] vpanic+0x281/0x750 [ 150.096287][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 150.101590][ C0] ? __pfx_vpanic+0x10/0x10 [ 150.106111][ C0] ? irqentry_exit+0x74/0x90 [ 150.110896][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.116378][ C0] panic+0xb9/0xc0 [ 150.120260][ C0] ? __pfx_panic+0x10/0x10 [ 150.125395][ C0] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 150.132027][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 150.139694][ C0] ? __xfrm_state_delete+0x696/0xca0 [ 150.145738][ C0] check_panic_on_warn+0x89/0xb0 [ 150.151053][ C0] ? __xfrm_state_delete+0x696/0xca0 [ 150.157517][ C0] end_report+0x78/0x160 [ 150.161866][ C0] kasan_report+0x129/0x150 [ 150.167103][ C0] ? __xfrm_state_delete+0x696/0xca0 [ 150.173126][ C0] __xfrm_state_delete+0x696/0xca0 [ 150.179471][ C0] xfrm_timer_handler+0x18f/0xa00 [ 150.186197][ C0] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 150.193774][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 150.201575][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.208069][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 150.215641][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 150.222525][ C0] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 150.230992][ C0] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 150.237995][ C0] __hrtimer_run_queues+0x529/0xc60 [ 150.245916][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 150.253219][ C0] ? read_tsc+0x9/0x20 [ 150.257867][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 150.267707][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 150.274122][ C0] handle_softirqs+0x283/0x870 [ 150.281856][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 150.287160][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 150.293674][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 150.300722][ C0] __irq_exit_rcu+0xca/0x1f0 [ 150.306841][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 150.312764][ C0] irq_exit_rcu+0x9/0x30 [ 150.318676][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 150.325997][ C0] [ 150.330121][ C0] [ 150.335181][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 150.345811][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x31/0x70 [ 150.353288][ C0] Code: 24 65 48 8b 0c 25 08 80 a0 92 65 8b 15 c8 d1 e0 10 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 3c 16 00 00 00 74 2c <8b> 91 18 16 00 00 83 fa 02 75 21 48 8b 91 20 16 00 00 48 8b 32 48 [ 150.384642][ C0] RSP: 0018:ffffc9001c4472c8 EFLAGS: 00000246 [ 150.391856][ C0] RAX: ffffffff8211c8e7 RBX: ffffea00019e70c0 RCX: ffff888033de0000 [ 150.403517][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f4000000 [ 150.412874][ C0] RBP: 0000000000000001 R08: ffffea00019e70c7 R09: 1ffffd400033ce18 [ 150.423928][ C0] R10: dffffc0000000000 R11: fffff9400033ce19 R12: 0000000000000000 [ 150.436184][ C0] R13: dffffc0000000000 R14: 80000000679c3000 R15: ffffea00019e70c0 [ 150.446608][ C0] ? __folio_rmap_sanity_checks+0x67/0x7d0 [ 150.455213][ C0] __folio_rmap_sanity_checks+0x67/0x7d0 [ 150.462258][ C0] folio_remove_rmap_ptes+0x3b/0xaf0 [ 150.468096][ C0] ? page_table_check_clear+0x187/0x700 [ 150.474752][ C0] ? page_table_check_clear+0x4f3/0x700 [ 150.481028][ C0] ? page_table_check_clear+0x187/0x700 [ 150.487383][ C0] unmap_page_range+0x1f7f/0x4370 [ 150.492609][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 150.498695][ C0] ? mas_find+0xb0e/0xd30 [ 150.503383][ C0] ? unmap_vmas+0x144/0x580 [ 150.508002][ C0] unmap_vmas+0x399/0x580 [ 150.512503][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 150.517390][ C0] exit_mmap+0x248/0xb50 [ 150.521812][ C0] ? uprobe_clear_state+0x20f/0x290 [ 150.527540][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 150.532329][ C0] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 150.537952][ C0] ? __pfx_exit_aio+0x10/0x10 [ 150.542623][ C0] ? uprobe_clear_state+0x274/0x290 [ 150.547836][ C0] __mmput+0x118/0x420 [ 150.551920][ C0] exit_mm+0x1da/0x2c0 [ 150.555989][ C0] ? __pfx_exit_mm+0x10/0x10 [ 150.560605][ C0] ? rcu_is_watching+0x15/0xb0 [ 150.565369][ C0] do_exit+0x648/0x2300 [ 150.569518][ C0] ? do_raw_spin_lock+0x121/0x290 [ 150.574625][ C0] ? __pfx_do_exit+0x10/0x10 [ 150.579270][ C0] do_group_exit+0x21c/0x2d0 [ 150.583851][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.589041][ C0] get_signal+0x1286/0x1340 [ 150.593558][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 150.599128][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 150.605278][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 150.610742][ C0] exit_to_user_mode_loop+0x75/0x110 [ 150.616128][ C0] do_syscall_64+0x2bd/0x3b0 [ 150.620707][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.625896][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.631956][ C0] ? clear_bhb_loop+0x60/0xb0 [ 150.636638][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.642537][ C0] RIP: 0033:0x7f541538eba9 [ 150.646973][ C0] Code: Unable to access opcode bytes at 0x7f541538eb7f. [ 150.653986][ C0] RSP: 002b:00007f54131d30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 150.662408][ C0] RAX: fffffffffffffe00 RBX: 00007f54155d6278 RCX: 00007f541538eba9 [ 150.670375][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f54155d6278 [ 150.678354][ C0] RBP: 00007f54155d6270 R08: 0000000000000000 R09: 0000000000000000 [ 150.686329][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.694297][ C0] R13: 00007f54155d6308 R14: 00007fff2f2cf3f0 R15: 00007fff2f2cf4d8 [ 150.702269][ C0] [ 150.705549][ C0] Kernel Offset: disabled [ 150.709902][ C0] Rebooting in 86400 seconds..