last executing test programs: 3.120470794s ago: executing program 1 (id=601): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2422eb05d200290a000000000000000007000000544b134d48", @ANYRES32=r1, @ANYBLOB="000000000000000004000380"], 0x24}}, 0x0) 2.863928134s ago: executing program 1 (id=605): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600000f500140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=r6, @ANYRES32=0x41424344, @ANYBLOB="70000000907100009f4da7a0293830d4dbabca00745d3cd571649fafa8ae1fc0e4609a4e4aadf5c9d468909120d631e19f3c95d4d044973b66bbaba774f3dfd9523e51f175152d5da90ced71382a87f2a8f9af6913c21dcfac70602483bc4540a2d38500000000000000"], 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.threads\x00', 0x2, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r8, 0x40089413, &(0x7f00000002c0)=0x5) sendmmsg$inet6(r7, &(0x7f0000001c40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000480)="dc", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xe) write$binfmt_aout(r7, &(0x7f0000000680)={{0xc, 0xfb, 0x5, 0x248, 0x2c6, 0xffff, 0xb2, 0x8}, "7963d2729526a699043eba0800b36ad837d3321db37829054afdef7a92afb0a211c875beea8a3966d38545040bc1959500c43861072f6113b299976b97a1b0807e1c69862346cbb00abe36119bc83961acc818e7e9daf8cbb05f75f7cf894657c6712081a62599bfd71be2e09ee5a8ab7152693b786c9a05fc0752d9ba33017bd779f50d6145add3ebc8528b69e2ab4628cf70eb83400a704f4bb328f2d7415d867e1c06f91fa068806b022ac5c4aea5a3c7abf9ea039831cba409148896886bb42b6db4ee41d86fb08b57217ac6fc2bd0e78b0ac3c7efe541600c6b3f7162b5ceb09a53", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x704) syz_emit_ethernet(0x1e, &(0x7f0000000140)={@empty, @random="ecd6026b7df4", @void, {@can={0xc, {{0x4, 0x1, 0x0, 0x1}, 0x1, 0x1, 0x0, 0x0, "0c943199a392f833"}}}}, &(0x7f0000000180)={0x1, 0x3, [0x33f, 0x197, 0x306, 0xc95]}) syz_emit_ethernet(0x52, &(0x7f0000000600)={@local, @link_local, @val={@val={0x88a8, 0x7}, {0x8100, 0x6, 0x0, 0x2}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, r6, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000080)={@random="37a454c624f7", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x15, 0x88, 0x65, 0x0, 0x7f, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@generic={0x82, 0x9, "aae3561a2abe68"}]}}, {{0x4e21, 0x4e21, r6, 0x41424344, 0x0, 0x0, 0x6, 0x1, 0x81, 0x0, 0x5, {[@mss={0x2, 0x4}]}}, {"bb76d8b30a8f4ed5fe48a5f138c2abfcab54c79033c9bf3cc3c18dc186ad089c1ec4a94455a0164ea75b9de64d2d3f07eb83e31eaa6ac4f940dc0ed23e08e4d12ee686a479eba7a755233a26bfaebb40"}}}}}}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'vlan0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=r10, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c"], 0xb4}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x9}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001a0001000000000000000000020000000000fe00fe1c2300"], 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000002000010300000000000000000214000000000000000000000a0001"], 0x30}}, 0x0) 2.581953264s ago: executing program 2 (id=609): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x1a, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x90) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 2.283102675s ago: executing program 2 (id=614): socket$inet6_dccp(0xa, 0x6, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r0, &(0x7f0000000d80)="5ca02049a8825024892f61601e3137d09d6e5d0e54d55be9d6d460eb78e3eb94c0b3866b091d34dc3ed67172ae1e7f390d505c084609e4491d372fe4888a3c3e660cc6fc3fd9b97c6c923389653eb074d96a3f1768e30f818adf94780feeab011de24785dd6cf88777a7806c05d0ed88fa985d77aab6996fa1af1190d1620732d9f2f9712e1182b815f0d415c12e6c42021b43e26578db3f2b475ea0ebb199323d", 0xfffffda9, 0x0, &(0x7f0000000380), 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@empty, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @local, @random="e6266756da16", @broadcast}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @typedef, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e]}}, 0x0, 0x3f}, 0x19) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x6, 0x0, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000140)='mm_page_free_batched\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r4, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0x50, r5, 0x1, 0x0, 0x0, {{}, {@val={0x65, 0x3, r6}, @val={0x0, 0x99, {0xb, 0x54}}}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @assoc_resp={{{}, {}, @broadcast}, 0x0, 0x0, @default, @val, @void}}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x50}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffeff, 0x61, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x8004}, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f00000000c0)={0x14, r8, 0x100, 0x0, 0x25dfdbfd, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r9, &(0x7f00000002c0), 0x12) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r10) 2.047553825s ago: executing program 0 (id=617): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000dcffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x20, 0x3e, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@typed={0x4}, @nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}]}, 0x20}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 1.872344182s ago: executing program 0 (id=619): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020e1ff2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000001c0)='mm_page_alloc\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) 1.815518642s ago: executing program 1 (id=620): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x88, 0x6, 0x918, 0xd0, 0x728, 0xd0, 0x208, 0x410, 0x848, 0x848, 0x848, 0x848, 0x848, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0x108, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@mcast1, @mcast1, [], [], 'macsec0\x00', 'geneve0\x00'}, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @local, @private1, @local, @dev, @mcast1, @ipv4={'\x00', '\xff\xff', @private}, @mcast2, @dev, @private2, @private1, @dev, @empty]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x318, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0xfffd}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "a08a90797c970ebe826006b58de0911976b585cad6f7d48198d9ad89c6ba"}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x978) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) 1.745888896s ago: executing program 0 (id=622): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$unix(0x1, 0x2, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f00000000c0)={0x8, {{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}}, 0x88) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000200)='syzkaller\x00', 0x6, 0xf, &(0x7f0000000240)=""/15, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[r1, r2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x1, r1, 0xffffffffffffffff, 0x1], &(0x7f0000000300)=[{0x5, 0x2, 0x6, 0xc}, {0x0, 0x3, 0xd, 0x8}, {0x3, 0x2, 0xe, 0x6}, {0x3, 0x1, 0x8, 0x4}, {0x5, 0x4, 0xd, 0x5}, {0x2, 0x3, 0xb, 0x6}], 0x10, 0x1}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='io_uring_link\x00', r3}, 0x10) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_dccp_buf(r5, 0x21, 0xc0, &(0x7f0000000480)=""/228, &(0x7f0000000580)=0xe4) openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x2400, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000600)=0x101010, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000680)=0x0, &(0x7f00000006c0)=0x4) sendmsg$nl_route(r7, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@bridge_setlink={0x30, 0x13, 0x18, 0x70bd2b, 0x25dfdbfe, {0x7, 0x0, 0x0, r8, 0x80808, 0x20000}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x312aa}, @IFLA_OPERSTATE={0x5, 0x10, 0x3f}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044815}, 0x20000000) ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, &(0x7f00000007c0)=0x8) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x10001, 0x0, 0xffffffffffffffff, 0x7f, '\x00', r8, 0xffffffffffffffff, 0x5, 0x1, 0x1}, 0x48) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000880)={r0, 0x5, 0x7, 0x16}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000ac0)={'gretap0\x00', &(0x7f0000000a00)={'sit0\x00', r8, 0x387, 0x700, 0xfffffff6, 0x1b413726, {{0x28, 0x4, 0x1, 0x1, 0xa0, 0x66, 0x0, 0x81, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@noop, @ra={0x94, 0x4}, @generic={0x88, 0xc, "0b5530c5d99b6b18b47a"}, @cipso={0x86, 0x42, 0x0, [{0x2, 0x9, "4ed600c30b6958"}, {0x5, 0x12, "61a83f63bc0ca386d9b95b82a484ef6c"}, {0x6, 0x4, "3212"}, {0x2, 0x7, "5c977398cd"}, {0x0, 0x6, "f643a9bb"}, {0x2, 0x10, "c8a6757bb0842933f28f340573d2"}]}, @ra={0x94, 0x4}, @rr={0x7, 0x1f, 0xd5, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @broadcast, @broadcast, @empty, @broadcast]}, @rr={0x7, 0x13, 0x9e, [@local, @empty, @rand_addr=0x64010101, @empty]}]}}}}}) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000b00), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_tracing={0x1a, 0x1a, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0xe}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xd}, @initr0={0x18, 0x0, 0x0, 0x0, 0xec, 0x0, 0x0, 0x0, 0xff}, @ldst={0x2, 0x2, 0x4, 0x7, 0x7, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000009c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x31, '\x00', r11, 0x1b, r12, 0x8, &(0x7f0000000b40)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000b80)={0x5, 0xf, 0x11ec, 0x6}, 0x10, 0x16ac, 0xffffffffffffffff, 0x4, &(0x7f0000000bc0), &(0x7f0000000c00)=[{0x5, 0x2, 0x10, 0x3}, {0x2, 0x3, 0xf, 0xa}, {0x2, 0x1, 0x6, 0x8}, {0x2, 0x1, 0x8, 0xa}], 0x10, 0x8}, 0x90) bind$tipc(r10, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x2e0, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, &(0x7f0000000d00), {[{{@ipv6={@loopback, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0xffffffff, 0xff, 0xff], [0xffffffff, 0xffffffff, 0xff000000, 0xffffff00], 'tunl0\x00', 'veth1_virt_wifi\x00', {}, {}, 0x9e, 0x8, 0x2, 0xa}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'team_slave_1\x00', {0x3b6e}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0x0, 0xff], [0xffffff00, 0xff, 0xffffffff], 'nicvf0\x00', 'bond_slave_0\x00', {}, {}, 0x2b, 0xf6}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x2557adba, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) syz_80211_inject_frame(&(0x7f0000001080)=@device_b, &(0x7f00000010c0)=@data_frame={@a_msdu=@type11={{0x0, 0x2, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {}, @broadcast, @device_b, @random="17536b0ec9cc", {0x9, 0x73}, @device_a, @void, @value=@ver_80211n={0x0, 0x41e, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, @random="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"}, 0x2ae) sendmsg$nl_route(r7, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)=@setneightbl={0x40, 0x43, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NDTA_THRESH2={0x8, 0x3, 0xffffff00}, @NDTA_THRESH2={0x8, 0x3, 0x9}, @NDTA_THRESH1={0x8, 0x2, 0x4277}, @NDTA_THRESH2={0x8, 0x3, 0x8}, @NDTA_NAME={0x9, 0x1, '[@})\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4050}, 0x20000000) r13 = socket(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000014c0)={0x0, 0x0}) sendmsg$can_bcm(r13, &(0x7f00000015c0)={&(0x7f0000001480)={0x1d, r8}, 0x10, &(0x7f0000001580)={&(0x7f0000001500)={0x5, 0x444, 0x2, {0x77359400}, {r14, r15/1000+10000}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x1}, 0x5, 0x3, 0x0, 0x0, "4aab3959b7ca891a"}}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x404000c) recvfrom(r4, &(0x7f0000001600)=""/166, 0xa6, 0x40002142, &(0x7f00000016c0)=@rc={0x1f, @any, 0x5}, 0x80) syz_80211_inject_frame(&(0x7f0000001740)=@device_b, &(0x7f0000001780)=@mgmt_frame=@assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_a, @broadcast, @from_mac=@broadcast, {0x7, 0x6}, @value=@ver_80211n={0x0, 0x4, 0x2, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0x1da1, 0x2, {0x0, 0x2, @random="4c04"}, @val={0x1, 0x1, [{0x1, 0x1}]}, @void, [{0xdd, 0x36, "aa64682b2ed97f5617b3b4a40e826417be2663f9280b645329ebfb12ceaa8ef17f7e22513788c21be481f2b59c7edff6fcb465adafbe"}, {0xdd, 0x43, "4542a7181818f0ae06d6b5dab3487b22acdd4924d040b76ac25785c833a2f6185d03373598d1e901fe1818c9a5f9a10c7aea2a69b5ddd5d98bc813658c088594d5ecc0"}, {0xdd, 0x4e, "70613fab11ae1ce6edf0b1629aafe900b96a7af3f7465e7956318a1116d3d1beea0d5a812ab1a06eb11031a075ad9c0c79f4392d8f18e2983aa7f8cf845e1d05cc5d91253b4d91a81f17bf0c0d00"}, {0xdd, 0xd6, "37041913c77766ecac1ff371d7e6d3513673e171b5fbc6c7c098cbd49cdf130e375e5011b0ea966f28a404472c5dad6a5d29d357c27144894bd3d5aa3b7b81185b988e0842ec05e3501449d109309ec91dc601958719d77b3dee93e8cc08a26045291b3e39918c5b549ca348c9d2d00ca9d2a019d62ebb8fa4d42c0fef079c14430b39fd4f55a06983178b0955fcc734f9d704cc1aebac49e65fe885275deb4aa5c9bc3270d8be30d954067bb875ddc13a748cb0aab3795817c96b98dd5294f784e4ab33c69fd4a5fc566cee1ef994391222447d11dc"}, {0xdd, 0x2d, "b9d1a5ce97b6e95020cc6e280a0597cdac750d3710e79ef01dfebbdd8d4273be3c535266f24fc71b05c0cca94e"}, {0xdd, 0xc7, "7d2757bfab5523d62f84f381f9bcfd6c3988b9a802fc9b85547aee4fdc8fe0981832d5a2d9792dd349a944a2792b3993e95c4c02ac5a35192d8aa457abb53182871b91c713e60774eccafbeefd1a756f0c6f3177afbc578036adfc6134ee0f37ef9f1981175503bbf9a99c77aaa1a5a859603906bb40a4d2fc06d1820370852c8f4c08813d514779ab3768d7cfacb71c38bb9a8cb913865a5dd12dd87f3fd535e272b730b64f6bc8c71af4bb32f3a2b1cc09a3f9986cd9769f223c6f11b1079e5a7083b0f64242"}, {0xdd, 0x54, "85e60f1af751daa091be5eb0fffc6aa70db1b4d20f0b22f1073ea081b7e76838951421ab1212b8d6dfc215e5c129b9306447e512d649aafdc2993362b107c6176fe9903b74545a17d640c064c09dca26cb52fb4f"}]}, 0x31a) 1.616477868s ago: executing program 4 (id=623): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000001140)=0x8000, 0x4) sendmmsg$inet(r0, &(0x7f0000001180)=[{{&(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x27}}], 0x18}}], 0x1, 0x0) 1.615997304s ago: executing program 1 (id=624): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000013c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000001340)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000000c0)={r2}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000500)={r2}, 0x10) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000340)='l', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000001c0), 0x4) 1.476635328s ago: executing program 4 (id=625): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000001140)=0x8000, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x3c}}, 0x0) pipe(&(0x7f0000000380)) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa010100}]}}}]}, 0x40}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001180)=[{{&(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x27}}], 0x18}}], 0x1, 0x0) 1.386654729s ago: executing program 3 (id=626): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000001140)=0x8000, 0x4) sendmmsg$inet(r0, &(0x7f0000001180)=[{{&(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x27}}], 0x18}}], 0x1, 0x0) (fail_nth: 1) 1.208369989s ago: executing program 2 (id=627): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000480)="526d0101985a6e40e7fc359c4146f13c5b69dd2d81034f32", 0x18}], 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088a847", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.207720213s ago: executing program 1 (id=628): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000040000000000000009500000000000000"], &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000040)=@abs={0x1}, 0x6e) bind$unix(r1, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @remote}, &(0x7f0000000280)=0x10) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000300)=0x4, 0x4) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x4000044) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYRESOCT=r3, @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000408500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 992.354276ms ago: executing program 3 (id=629): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x60, 0x20, 0x1, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0x20, 0x7f, 0x7, 0x0, 0x0, 0x5, 0x18026}, [@FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x65}, @FRA_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x31}}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000880}, 0x884) sendmsg$inet6(r0, &(0x7f0000000e40)={&(0x7f0000000b80)={0xa, 0x4e23, 0x0, @loopback}, 0x18, 0x0}, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x8, 0x8, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x7800, 0x8000, 0x5, 0xffff}}) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x6, &(0x7f0000000000)={0x0, {{0x29, 0x0, 0x4, @empty, 0xffffffff}}}, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000028c0)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x2, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800}}) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r6}) (async) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x27b, r9}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r10 = socket(0x10, 0x3, 0x0) (rerun: 64) sendto$inet6(r10, &(0x7f0000000000)="7800000018001f07b9409b0dffff000d0216be0402030605060140034300080012000000fac8388827a685a168d0bf46d323456500000000caaf6c26c291214549935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160009000a000000000000000000000040f6b0f8eca0faed", 0x78, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000900)=@base={0x3, 0xa5c, 0x4, 0x1, 0x188, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x1002, 0x1}, 0x48) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r12 = syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), 0xffffffffffffffff) (rerun: 64) sendmsg$GTP_CMD_ECHOREQ(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="010d000000000000000003000000"], 0x14}}, 0x0) (async) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r13, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) listen(r13, 0x2) syz_emit_ethernet(0x62, &(0x7f00000001c0)={@local, @random="c4bc9cac9686", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}, @mss={0x2, 0x4}, @window={0x3, 0x3}, @exp_fastopen={0xfe, 0xa, 0xf989, "d463e2c4e2da"}]}}}}}}}}, 0x0) (async) r14 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_l2cap(r14, &(0x7f0000000000), 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) 967.36751ms ago: executing program 0 (id=630): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040)=0x8, 0x4) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000001140)=0x8000, 0x4) sendmmsg$inet(r0, &(0x7f0000001180)=[{{&(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x27}}], 0x18}}], 0x1, 0x4040005) 887.761565ms ago: executing program 2 (id=631): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x9}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, 0x0, 0x0) bind$rose(r1, &(0x7f0000000280)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x10e, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0xb}, 0x1c) unshare(0x40600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r3, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) socket$nl_generic(0x10, 0x3, 0x10) 720.266593ms ago: executing program 3 (id=632): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x10b}) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x2}, 0x10) (async) bind$tipc(r2, 0x0, 0x0) (async) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'wlan1\x00', 0x400}) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'rose0\x00'}) (async) r5 = socket$inet6(0xa, 0x6, 0x0) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) (async) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendto$inet6(r7, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) (async, rerun: 32) recvmsg(r6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/14, 0xe}, 0x0) (async, rerun: 32) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x7fffffff, @private2, 0x20001}, 0x1c) (async, rerun: 64) listen(r5, 0x4) (async, rerun: 64) r8 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r8, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) (async) getsockopt$inet_int(r8, 0x10d, 0xb7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x80002, 0x0) (async) unshare(0x20000400) (async, rerun: 64) writev(0xffffffffffffffff, &(0x7f00000003c0), 0x0) (rerun: 64) 719.774821ms ago: executing program 0 (id=633): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x0, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x34}, 0x1, 0x0, 0x0, 0x1d}, 0x20000040) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r4, &(0x7f0000000200), 0x10) sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_mreq(r4, 0x0, 0x20, 0x0, 0x4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90724fc602f1a04000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f0000000100)={'c', ' *:* ', 'm\x00'}, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r11) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32, @ANYBLOB="0000000000000d00b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 719.000955ms ago: executing program 4 (id=634): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40), 0x0, 0x10162, 0x0) 580.570694ms ago: executing program 2 (id=635): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r1, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="ba", 0x1}], 0x1}, 0x48044) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) unshare(0x30000080) unshare(0x24020400) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005200ff0000000000000000000200000008000100feffffff"], 0x1c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r8, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, 0x0}, 0x4008804) sendmsg$inet(r8, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000000)="c109000000000000001d1e020e7126", 0xf}, {&(0x7f0000000100)="89", 0x1}], 0x2}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x0, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180800cae1a45500"/18], 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000004400000010000300", @ANYRES32=r10, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000180)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x33}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000180)={'pimreg0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r11, 0x400454ce, 0x18) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'pimreg0\x00', 0x1}) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r12, &(0x7f0000000080)=ANY=[], 0x32600) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x200, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) 522.892354ms ago: executing program 4 (id=636): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000001140)=0x8000, 0x4) sendmmsg$inet(r0, &(0x7f0000001180)=[{{&(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x27}}], 0x18}}], 0x1, 0x0) 456.313075ms ago: executing program 3 (id=637): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x13, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='neigh_create\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc38}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfe, 0x49, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000, 0x0, 0xc, &(0x7f0000000000), &(0x7f0000000000)="bacca4593b4b150de950d714"}, 0x50) 352.780503ms ago: executing program 4 (id=638): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x80000000, 0x1a) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/81, 0x51}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000004000000000000000000000095"], &(0x7f00000006c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x0) 242.583486ms ago: executing program 2 (id=639): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000001140)=0x8000, 0x4) sendmmsg$inet(r0, &(0x7f0000001180)=[{{&(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x27}}], 0x18}}], 0x1, 0x0) (fail_nth: 2) 132.369951ms ago: executing program 1 (id=640): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x8, 0x7800, 0x1e, 0x960, {{0x2b, 0x4, 0x0, 0x7, 0xac, 0x66, 0x0, 0x7, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x7, 0x48, [@rand_addr=0x64010101]}, @rr={0x7, 0x2b, 0xe6, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast1, @loopback, @private=0xa010102, @multicast1, @dev={0xac, 0x14, 0x14, 0x12}, @remote, @dev={0xac, 0x14, 0x14, 0x10}, @remote]}, @generic={0x82, 0x7, "05af246600"}, @generic={0x83, 0x11, "23196f3276ef0f159e2ae6617bce76"}, @rr={0x7, 0x2b, 0x7a, [@dev={0xac, 0x14, 0x14, 0x14}, @remote, @broadcast, @local, @broadcast, @rand_addr=0x64010102, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x11}]}, @generic={0x88, 0x10, "03f36dfe59bf23b9d02a54638bc8"}, @rr={0x7, 0x3, 0x7e}, @ssrr={0x89, 0xb, 0x9c, [@local, @loopback]}, @ra={0x94, 0x4, 0x1}]}}}}}) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000002018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000045090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x100b, &(0x7f0000001e40)=""/4107}, 0x90) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000240)={r1, 0x1, 0x6, @broadcast}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 130.324351ms ago: executing program 3 (id=641): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000480)="526d0101985a6e40e7fc359c4146f13c5b69dd2d81034f32", 0x18}], 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088a847", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 130.021993ms ago: executing program 4 (id=642): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', "b7411bd57b00b03cffb7437cdda2f487fdb1869db0669865b50427c59853678c", "3c8097bd14f735197114ccd7cbc7a177a83da33a65aecc1ba79b66b12eeb5500"}}}]}, 0x268}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xb00}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r5, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x4000045) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x2) 5.090151ms ago: executing program 3 (id=643): socket$inet6(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @ringbuf_query, @exit, @alu={0x5, 0x1, 0xa, 0xa, 0xa}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) socket(0xb, 0x0, 0x0) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r0) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14}, 0x14}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x55, 0x0, &(0x7f00000001c0)="a1f809b5f03f6b20aeddf6f38aa27f9b3958205ba2a6b04b4a0502960666650d74a26371d5a2d307d6112505cbdc5fdf61b8c0dbb536ddd36dbe92abf968a4f05c02e9d3fe606989755bbc054f138c063b9068cedd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x4}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000140)={@local}, &(0x7f0000000040)=0xfffffffffffffff1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f0000000000)={{0x6, @rose}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) sendto(r2, 0x0, 0x0, 0x0, &(0x7f0000000480)=@llc={0x1a, 0x0, 0x0, 0x0, 0x2, 0x0, @local}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, 0x0, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228000000"], 0x28}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0xffffbffd, @mcast1, 0x4}, 0x1c) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040), 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nbd(&(0x7f0000000400), r0) 0s ago: executing program 0 (id=644): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) (async) r2 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async) r12 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r12, 0x0, 0x0) (async) r13 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_pktinfo(r13, 0x0, 0x8, &(0x7f0000000b40)={0x0, @empty, @local}, &(0x7f0000000b80)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="8520000001002000"], &(0x7f0000000cc0)='GPL\x00', 0x1ff, 0x0, 0x0, 0x40f00, 0x4a, '\x00', r14, 0x34, r11, 0x8, &(0x7f0000000e00)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000e40)=[0xffffffffffffffff, 0xffffffffffffffff, r12, 0xffffffffffffffff], 0x0, 0x10, 0xf3db}, 0x90) (async) setsockopt$packet_rx_ring(r12, 0x107, 0x5, &(0x7f0000000080)=@req={0x400, 0x101, 0x5, 0x5}, 0x10) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, 0x0, 0x0) (async) sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)={0x1c, r5, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x700}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010200000000e6ffffff2e0000000c000500000000000000000005002e00000000000a0001007770616e3100000005002b00030000000c002d"], 0x48}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.112' (ED25519) to the list of known hosts. [ 49.481931][ T5216] cgroup: Unknown subsys name 'net' [ 49.650542][ T5216] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.017523][ T5216] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.314488][ T5233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.325985][ T5244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.343692][ T5244] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.351778][ T5244] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 53.351926][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.367846][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.376178][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.383150][ T5244] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.391877][ T5238] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 53.399273][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.400722][ T5245] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.407905][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.414047][ T5244] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.422065][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.430342][ T5245] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 53.436618][ T5247] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.442561][ T5245] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.449573][ T5247] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.455499][ T5244] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 53.470668][ T5245] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.477415][ T5246] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 53.485654][ T5246] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 53.493073][ T5246] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 53.500693][ T5246] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.505600][ T5245] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.508159][ T5246] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.515844][ T5244] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 53.529490][ T5244] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.537935][ T5235] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 53.546199][ T5244] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 53.987897][ T5228] chnl_net:caif_netlink_parms(): no params data found [ 54.179162][ T5231] chnl_net:caif_netlink_parms(): no params data found [ 54.189681][ T5240] chnl_net:caif_netlink_parms(): no params data found [ 54.240318][ T5230] chnl_net:caif_netlink_parms(): no params data found [ 54.276618][ T5237] chnl_net:caif_netlink_parms(): no params data found [ 54.288248][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.298057][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.305721][ T5228] bridge_slave_0: entered allmulticast mode [ 54.312459][ T5228] bridge_slave_0: entered promiscuous mode [ 54.352741][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.360215][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.367498][ T5228] bridge_slave_1: entered allmulticast mode [ 54.374167][ T5228] bridge_slave_1: entered promiscuous mode [ 54.512141][ T5228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.541226][ T5231] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.548933][ T5231] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.556454][ T5231] bridge_slave_0: entered allmulticast mode [ 54.563383][ T5231] bridge_slave_0: entered promiscuous mode [ 54.570253][ T5240] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.577750][ T5240] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.584933][ T5240] bridge_slave_0: entered allmulticast mode [ 54.591580][ T5240] bridge_slave_0: entered promiscuous mode [ 54.603862][ T5228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.634925][ T5231] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.642095][ T5231] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.649289][ T5231] bridge_slave_1: entered allmulticast mode [ 54.656637][ T5231] bridge_slave_1: entered promiscuous mode [ 54.675346][ T5240] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.682422][ T5240] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.690135][ T5240] bridge_slave_1: entered allmulticast mode [ 54.697015][ T5240] bridge_slave_1: entered promiscuous mode [ 54.748412][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.755724][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.762825][ T5230] bridge_slave_0: entered allmulticast mode [ 54.770302][ T5230] bridge_slave_0: entered promiscuous mode [ 54.778368][ T5230] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.785582][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.792669][ T5230] bridge_slave_1: entered allmulticast mode [ 54.802754][ T5230] bridge_slave_1: entered promiscuous mode [ 54.839585][ T5237] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.846835][ T5237] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.854202][ T5237] bridge_slave_0: entered allmulticast mode [ 54.861670][ T5237] bridge_slave_0: entered promiscuous mode [ 54.872510][ T5228] team0: Port device team_slave_0 added [ 54.889514][ T5231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.901952][ T5231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.914958][ T5240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.928636][ T5237] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.935942][ T5237] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.943916][ T5237] bridge_slave_1: entered allmulticast mode [ 54.950593][ T5237] bridge_slave_1: entered promiscuous mode [ 54.958674][ T5228] team0: Port device team_slave_1 added [ 54.967208][ T5230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.979611][ T5230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.002106][ T5240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.077681][ T5231] team0: Port device team_slave_0 added [ 55.103920][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.110877][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.136955][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.149873][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.156914][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.189328][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.213290][ T5231] team0: Port device team_slave_1 added [ 55.221956][ T5240] team0: Port device team_slave_0 added [ 55.231484][ T5240] team0: Port device team_slave_1 added [ 55.239720][ T5237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.251853][ T5237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.272652][ T5230] team0: Port device team_slave_0 added [ 55.321369][ T5230] team0: Port device team_slave_1 added [ 55.336705][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.344800][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.371536][ T5231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.392891][ T5240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.400459][ T5240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.426421][ T5240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.442237][ T5237] team0: Port device team_slave_0 added [ 55.451155][ T5237] team0: Port device team_slave_1 added [ 55.487784][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.494808][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.521297][ T5231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.524063][ T5244] Bluetooth: hci0: command tx timeout [ 55.549670][ T5240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.556755][ T5240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.583360][ T5244] Bluetooth: hci1: command tx timeout [ 55.584386][ T5240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.589034][ T5244] Bluetooth: hci3: command tx timeout [ 55.621027][ T5228] hsr_slave_0: entered promiscuous mode [ 55.628001][ T5228] hsr_slave_1: entered promiscuous mode [ 55.661773][ T5231] hsr_slave_0: entered promiscuous mode [ 55.667986][ T5231] hsr_slave_1: entered promiscuous mode [ 55.673127][ T5244] Bluetooth: hci2: command tx timeout [ 55.673914][ T5233] Bluetooth: hci4: command tx timeout [ 55.687621][ T5231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.695943][ T5231] Cannot create hsr debugfs directory [ 55.713435][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.720387][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.746483][ T5237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.759310][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.766948][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.794027][ T5230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.806492][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.813800][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.839786][ T5230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.858342][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.865497][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.891538][ T5237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.959300][ T5240] hsr_slave_0: entered promiscuous mode [ 55.967233][ T5240] hsr_slave_1: entered promiscuous mode [ 55.974227][ T5240] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.981786][ T5240] Cannot create hsr debugfs directory [ 56.121039][ T5230] hsr_slave_0: entered promiscuous mode [ 56.127347][ T5230] hsr_slave_1: entered promiscuous mode [ 56.133881][ T5230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.141450][ T5230] Cannot create hsr debugfs directory [ 56.191615][ T5237] hsr_slave_0: entered promiscuous mode [ 56.198225][ T5237] hsr_slave_1: entered promiscuous mode [ 56.204969][ T5237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.212507][ T5237] Cannot create hsr debugfs directory [ 56.549941][ T5228] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.572929][ T5228] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.582693][ T5228] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.592472][ T5228] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.669337][ T5231] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.680489][ T5231] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.694241][ T5231] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.703575][ T5231] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.793910][ T5237] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.804830][ T5237] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.815118][ T5237] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.826381][ T5237] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.909167][ T5230] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.919700][ T5230] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.929866][ T5230] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.939966][ T5230] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.959763][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.001176][ T5228] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.060582][ T5283] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.067926][ T5283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.102417][ T5240] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.117011][ T5240] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.133532][ T5283] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.140594][ T5283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.162311][ T5240] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.174438][ T5240] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.277177][ T5228] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.308753][ T5231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.421179][ T5237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.470709][ T5230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.484038][ T5231] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.507122][ T5269] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.514592][ T5269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.560980][ T5240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.577879][ T5237] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.586366][ T5233] Bluetooth: hci0: command tx timeout [ 57.593599][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.600675][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.632194][ T5230] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.657532][ T5286] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.664637][ T5286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.672202][ T5233] Bluetooth: hci3: command tx timeout [ 57.677736][ T5244] Bluetooth: hci1: command tx timeout [ 57.686563][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.712846][ T5286] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.720012][ T5286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.736891][ T5286] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.743987][ T5286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.751436][ T5233] Bluetooth: hci2: command tx timeout [ 57.757272][ T5244] Bluetooth: hci4: command tx timeout [ 57.804588][ T5286] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.811734][ T5286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.825041][ T5240] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.882004][ T5269] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.889191][ T5269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.937808][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.944998][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.000567][ T5237] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.034868][ T5228] veth0_vlan: entered promiscuous mode [ 58.101657][ T5231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.130432][ T5228] veth1_vlan: entered promiscuous mode [ 58.301623][ T5231] veth0_vlan: entered promiscuous mode [ 58.336188][ T5228] veth0_macvtap: entered promiscuous mode [ 58.367322][ T5231] veth1_vlan: entered promiscuous mode [ 58.394222][ T5228] veth1_macvtap: entered promiscuous mode [ 58.445057][ T5230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.469806][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.496206][ T5237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.507780][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.531027][ T5231] veth0_macvtap: entered promiscuous mode [ 58.566113][ T5240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.575818][ T5228] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.585417][ T5228] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.595799][ T5228] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.604698][ T5228] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.619503][ T5231] veth1_macvtap: entered promiscuous mode [ 58.730667][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.742342][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.761284][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.790387][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.812090][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.825061][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.877601][ T5231] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.889160][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.894258][ T5231] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.901563][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.906200][ T5231] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.922574][ T5231] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.969321][ T5237] veth0_vlan: entered promiscuous mode [ 59.009481][ T5240] veth0_vlan: entered promiscuous mode [ 59.040661][ T5237] veth1_vlan: entered promiscuous mode [ 59.085656][ T1057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.096418][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.100091][ T5230] veth0_vlan: entered promiscuous mode [ 59.118386][ T1057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.127390][ T5240] veth1_vlan: entered promiscuous mode [ 59.128621][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.186846][ T5230] veth1_vlan: entered promiscuous mode [ 59.227788][ T5237] veth0_macvtap: entered promiscuous mode [ 59.256220][ T1057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.275430][ T1057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.278499][ T5237] veth1_macvtap: entered promiscuous mode [ 59.388735][ T5240] veth0_macvtap: entered promiscuous mode [ 59.412581][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.442772][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.461903][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.478662][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.490409][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.501551][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.514716][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.525892][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.539282][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.557133][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.585403][ T5240] veth1_macvtap: entered promiscuous mode [ 59.599903][ T5237] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.619175][ T5237] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.620431][ T5318] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1'. [ 59.632498][ T5237] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.652201][ T5237] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.665972][ T5230] veth0_macvtap: entered promiscuous mode [ 59.671843][ T5244] Bluetooth: hci0: command tx timeout [ 59.721632][ T5230] veth1_macvtap: entered promiscuous mode [ 59.744164][ T5244] Bluetooth: hci3: command tx timeout [ 59.749602][ T5244] Bluetooth: hci1: command tx timeout [ 59.753412][ T5318] netlink: 'syz.0.1': attribute type 29 has an invalid length. [ 59.809034][ T5320] netlink: 'syz.0.1': attribute type 29 has an invalid length. [ 59.823235][ T5244] Bluetooth: hci2: command tx timeout [ 59.825447][ T5233] Bluetooth: hci4: command tx timeout [ 59.829044][ T5325] warning: `syz.1.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 59.873639][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.884191][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.896105][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.907241][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.917383][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.927990][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.939791][ T5240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.980431][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.013050][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.033287][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.046130][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.056144][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.067814][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.080263][ T5240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.090608][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.105450][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.115555][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.127267][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.138036][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.149338][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.159307][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.170900][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.184647][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.211831][ T5240] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.222266][ T5240] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.235399][ T5240] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.244158][ T5240] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.275131][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.286897][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.298096][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.309224][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.319332][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.330004][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.340574][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.351225][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.367646][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.393333][ T1057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.401965][ T1057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.420077][ T5230] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.429930][ T5230] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.439956][ T5230] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.450133][ T5230] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.576684][ T1057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.592485][ T1057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.706177][ T1057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.728057][ T5336] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.735733][ T1057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.916491][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.930304][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.001665][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.063124][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.142522][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.202726][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.253520][ T5353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14'. [ 61.405384][ T5363] netlink: 'syz.2.3': attribute type 2 has an invalid length. [ 61.439196][ T5364] syz.3.14 uses obsolete (PF_INET,SOCK_PACKET) [ 61.475460][ T5366] veth1_to_bridge: entered allmulticast mode [ 61.507769][ T5366] veth1_to_bridge: left allmulticast mode [ 61.743632][ T5233] Bluetooth: hci0: command tx timeout [ 61.808574][ T5374] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17'. [ 61.823857][ T5233] Bluetooth: hci3: command tx timeout [ 61.826610][ T5244] Bluetooth: hci1: command tx timeout [ 61.868736][ T5376] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16'. [ 61.904007][ T5244] Bluetooth: hci2: command tx timeout [ 61.904017][ T5233] Bluetooth: hci4: command tx timeout [ 61.979270][ T5376] netlink: 'syz.0.16': attribute type 21 has an invalid length. [ 62.013849][ T5376] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16'. [ 62.118233][ T5385] atomic_op ffff88805df5f198 conn xmit_atomic 0000000000000000 [ 62.156658][ T5385] Zero length message leads to an empty skb [ 62.525502][ T5414] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.765458][ T5423] netlink: 48 bytes leftover after parsing attributes in process `syz.2.31'. [ 63.078817][ T5422] netdevsim netdevsim4 netdevsim0: Unsupported IPsec algorithm [ 63.402824][ T5448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.37'. [ 63.586541][ T5456] @ÿ: renamed from veth0_vlan (while UP) [ 63.710487][ T5464] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 63.737414][ T5463] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 64.368382][ T5486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'. [ 64.408435][ T5486] netlink: 32 bytes leftover after parsing attributes in process `syz.2.46'. [ 64.439669][ T5490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.47'. [ 64.713749][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.743020][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.763856][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.803288][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.827714][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.870967][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.909850][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.946164][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.989788][ T5513] trusted_key: syz.4.43 sent an empty control message without MSG_MORE. [ 65.057260][ T5518] dummy0: entered promiscuous mode [ 65.107520][ T5518] dummy0: left promiscuous mode [ 65.141855][ T5524] netlink: 68 bytes leftover after parsing attributes in process `syz.3.54'. [ 65.215655][ T5527] veth0_vlan: entered allmulticast mode [ 65.239133][ T5529] RDS: rds_bind could not find a transport for ::8000:20:0:0, load rds_tcp or rds_rdma? [ 65.279883][ T5524] can: request_module (can-proto-0) failed. [ 65.325036][ T5522] netlink: 20 bytes leftover after parsing attributes in process `syz.1.55'. [ 65.572587][ T5536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.58'. [ 65.608590][ T5539] netlink: 20 bytes leftover after parsing attributes in process `syz.3.58'. [ 65.846514][ T5554] vlan2: entered promiscuous mode [ 65.872582][ T5554] bond0: entered promiscuous mode [ 65.894385][ T5558] xt_hashlimit: max too large, truncated to 1048576 [ 65.910499][ T5554] bond_slave_0: entered promiscuous mode [ 65.922699][ T5554] bond_slave_1: entered promiscuous mode [ 65.940394][ T5554] bond0: left promiscuous mode [ 65.941495][ T5562] netlink: 40 bytes leftover after parsing attributes in process `syz.2.65'. [ 65.950843][ T5554] bond_slave_0: left promiscuous mode [ 65.959731][ T5562] netlink: 284 bytes leftover after parsing attributes in process `syz.2.65'. [ 65.977180][ T5554] bond_slave_1: left promiscuous mode [ 66.325223][ T5575] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 66.377478][ T5575] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.386591][ T5575] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.445515][ T5575] bridge0: entered allmulticast mode [ 66.450081][ T5581] netlink: 'syz.2.67': attribute type 1 has an invalid length. [ 66.694158][ T5595] pim6reg1: entered promiscuous mode [ 66.703928][ T5583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.71'. [ 66.723167][ T5595] pim6reg1: entered allmulticast mode [ 67.340905][ T5637] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20001 [ 67.575342][ T5656] netlink: 40 bytes leftover after parsing attributes in process `syz.4.87'. [ 68.112382][ T5687] netlink: 'syz.4.96': attribute type 4 has an invalid length. [ 68.283552][ T5684] netlink: 12 bytes leftover after parsing attributes in process `syz.2.95'. [ 68.329240][ T5684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.95'. [ 68.345688][ T5684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.375916][ T5684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.406419][ T5684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.420558][ T5684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.557071][ T5706] netlink: 'syz.0.98': attribute type 10 has an invalid length. [ 68.600846][ T5706] team0: Port device netdevsim0 added [ 68.632893][ T5708] netlink: 'syz.0.98': attribute type 10 has an invalid length. [ 68.663451][ T5708] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 68.738621][ T5708] team0: Port device netdevsim0 removed [ 68.814417][ T5714] syzkaller0: refused to change device tx_queue_len [ 69.201210][ T5729] netlink: 'syz.0.104': attribute type 16 has an invalid length. [ 69.233949][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.323804][ T5736] dccp_invalid_packet: P.Data Offset(144) too large [ 69.447781][ T5741] netlink: 'syz.4.106': attribute type 21 has an invalid length. [ 69.676620][ T5751] xt_hashlimit: max too large, truncated to 1048576 [ 70.030343][ T5767] netlink: 'syz.0.114': attribute type 1 has an invalid length. [ 70.132668][ T5769] ip6gre1: entered allmulticast mode [ 70.355438][ T5786] __nla_validate_parse: 8 callbacks suppressed [ 70.355456][ T5786] netlink: 56 bytes leftover after parsing attributes in process `syz.4.121'. [ 70.394292][ T5786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.121'. [ 70.418711][ T5786] netlink: 55 bytes leftover after parsing attributes in process `syz.4.121'. [ 70.446135][ T5786] netlink: 55 bytes leftover after parsing attributes in process `syz.4.121'. [ 70.463435][ T5791] netlink: 'syz.4.121': attribute type 3 has an invalid length. [ 70.496414][ T5785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.729468][ T5811] xt_hashlimit: invalid rate [ 70.787888][ T5813] netlink: 28 bytes leftover after parsing attributes in process `syz.3.125'. [ 70.960960][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.984709][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.020306][ T5823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.127'. [ 71.169732][ T5827] tap0: tun_chr_ioctl cmd 1074025677 [ 71.183871][ T5827] tap0: linktype set to 512 [ 71.208498][ T5825] tap0: tun_chr_ioctl cmd 1074025673 [ 71.479270][ T5852] netlink: 'syz.2.136': attribute type 10 has an invalid length. [ 71.569862][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:172.20.20.170]:2. Sending cookies. [ 71.594708][ T5857] netlink: 'syz.2.136': attribute type 10 has an invalid length. [ 71.602478][ T5857] netlink: 2 bytes leftover after parsing attributes in process `syz.2.136'. [ 71.612605][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.620149][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.690071][ T5860] netlink: 32 bytes leftover after parsing attributes in process `syz.1.138'. [ 71.711062][ T5857] team0: entered promiscuous mode [ 71.717493][ T5857] team_slave_0: entered promiscuous mode [ 71.749812][ T5857] team_slave_1: entered promiscuous mode [ 71.783920][ T5868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.140'. [ 71.786018][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.809168][ T5857] bridge0: port 3(team0) entered blocking state [ 71.829498][ T5857] bridge0: port 3(team0) entered disabled state [ 71.836321][ T5857] team0: entered allmulticast mode [ 71.853220][ T5857] team_slave_0: entered allmulticast mode [ 71.869727][ T5857] team_slave_1: entered allmulticast mode [ 72.125780][ T5882] syz.3.143 uses old SIOCAX25GETINFO [ 72.267392][ T5892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.143'. [ 72.379875][ T5900] batman_adv: batadv0: Adding interface: dummy0 [ 72.390947][ T5900] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.423808][ T5900] batman_adv: batadv0: Interface activated: dummy0 [ 72.536138][ T5900] batadv0: mtu less than device minimum [ 72.553317][ T5900] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 72.566179][ T5900] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 72.578739][ T5900] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 72.591279][ T5900] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 72.603852][ T5900] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 72.616408][ T5900] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 72.628941][ T5900] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.320523][ T5948] team_slave_0: entered promiscuous mode [ 73.326515][ T5948] team_slave_1: entered promiscuous mode [ 73.380978][ T5948] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 73.545035][ T5965] netlink: 'syz.1.159': attribute type 11 has an invalid length. [ 73.983332][ T5233] Bluetooth: hci4: command tx timeout [ 74.484927][ T6010] netlink: 'syz.2.173': attribute type 27 has an invalid length. [ 74.534686][ T6007] Illegal XDP return value 4294967274 on prog (id 75) dev N/A, expect packet loss! [ 74.889605][ T6026] netlink: 'syz.3.178': attribute type 25 has an invalid length. [ 74.916801][ T6026] netlink: 'syz.3.178': attribute type 7 has an invalid length. [ 74.981063][ T6026] syzkaller1: entered promiscuous mode [ 75.000550][ T6026] syzkaller1: entered allmulticast mode [ 75.357290][ T6044] x_tables: duplicate underflow at hook 2 [ 75.380891][ T6041] __nla_validate_parse: 7 callbacks suppressed [ 75.380908][ T6041] netlink: 24 bytes leftover after parsing attributes in process `syz.3.184'. [ 75.400657][ T6038] netlink: 'syz.0.182': attribute type 1 has an invalid length. [ 75.415719][ T6038] netlink: 224 bytes leftover after parsing attributes in process `syz.0.182'. [ 75.438130][ T6041] netlink: 24 bytes leftover after parsing attributes in process `syz.3.184'. [ 75.686709][ T6061] syz.3.187: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 75.708736][ T6061] CPU: 0 UID: 0 PID: 6061 Comm: syz.3.187 Not tainted 6.11.0-rc1-syzkaller-00305-g91d516d4de48 #0 [ 75.719530][ T6061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 75.729601][ T6061] Call Trace: [ 75.732891][ T6061] [ 75.735831][ T6061] dump_stack_lvl+0x241/0x360 [ 75.740552][ T6061] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.745770][ T6061] ? __pfx__printk+0x10/0x10 [ 75.750382][ T6061] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 75.756810][ T6061] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 75.763326][ T6061] warn_alloc+0x278/0x410 [ 75.767681][ T6061] ? __pfx_warn_alloc+0x10/0x10 [ 75.772560][ T6061] ? xskq_create+0xb6/0x170 [ 75.777091][ T6061] ? __get_vm_area_node+0x23d/0x270 [ 75.782314][ T6061] __vmalloc_node_range_noprof+0x69f/0x1460 [ 75.788251][ T6061] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 75.794599][ T6061] ? __kasan_kmalloc+0x98/0xb0 [ 75.799378][ T6061] ? xskq_create+0x54/0x170 [ 75.803897][ T6061] vmalloc_user_noprof+0x74/0x80 [ 75.808844][ T6061] ? xskq_create+0xb6/0x170 [ 75.813361][ T6061] xskq_create+0xb6/0x170 [ 75.817704][ T6061] xsk_init_queue+0xa1/0x100 [ 75.822308][ T6061] xsk_setsockopt+0x4ea/0x950 [ 75.826998][ T6061] ? __pfx_xsk_setsockopt+0x10/0x10 [ 75.832218][ T6061] ? __pfx_lock_acquire+0x10/0x10 [ 75.837257][ T6061] ? aa_sock_opt_perm+0x79/0x120 [ 75.842210][ T6061] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 75.847774][ T6061] ? security_socket_setsockopt+0x87/0xb0 [ 75.853513][ T6061] ? __pfx_xsk_setsockopt+0x10/0x10 [ 75.858723][ T6061] do_sock_setsockopt+0x3af/0x720 [ 75.863773][ T6061] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 75.869339][ T6061] ? __fget_files+0x29/0x470 [ 75.873946][ T6061] ? __fget_files+0x3f6/0x470 [ 75.878651][ T6061] __sys_setsockopt+0x1ae/0x250 [ 75.883530][ T6061] __x64_sys_setsockopt+0xb5/0xd0 [ 75.888576][ T6061] do_syscall_64+0xf3/0x230 [ 75.893096][ T6061] ? clear_bhb_loop+0x35/0x90 [ 75.897785][ T6061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.903702][ T6061] RIP: 0033:0x7f4321f779f9 [ 75.908129][ T6061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.927748][ T6061] RSP: 002b:00007f4322dd4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 75.936268][ T6061] RAX: ffffffffffffffda RBX: 00007f4322105f80 RCX: 00007f4321f779f9 [ 75.944259][ T6061] RDX: 0000000000000005 RSI: 000000000000011b RDI: 000000000000000c [ 75.952242][ T6061] RBP: 00007f4321fe58ee R08: 000000000000002c R09: 0000000000000000 [ 75.960227][ T6061] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 75.968211][ T6061] R13: 0000000000000000 R14: 00007f4322105f80 R15: 00007ffcb9ad8158 [ 75.976212][ T6061] [ 76.043317][ T6061] Mem-Info: [ 76.047942][ T6061] active_anon:3991 inactive_anon:0 isolated_anon:0 [ 76.047942][ T6061] active_file:1249 inactive_file:38133 isolated_file:0 [ 76.047942][ T6061] unevictable:768 dirty:477 writeback:0 [ 76.047942][ T6061] slab_reclaimable:8786 slab_unreclaimable:94573 [ 76.047942][ T6061] mapped:21264 shmem:1277 pagetables:743 [ 76.047942][ T6061] sec_pagetables:0 bounce:0 [ 76.047942][ T6061] kernel_misc_reclaimable:0 [ 76.047942][ T6061] free:1393672 free_pcp:3223 free_cma:0 [ 76.129554][ T6061] Node 0 active_anon:16084kB inactive_anon:0kB active_file:4996kB inactive_file:152456kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:84988kB dirty:1904kB writeback:0kB shmem:3444kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10152kB pagetables:3144kB sec_pagetables:0kB all_unreclaimable? no [ 76.200895][ T6076] netlink: 40 bytes leftover after parsing attributes in process `syz.2.189'. [ 76.205293][ T6061] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 76.330899][ T6061] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 76.451988][ T6061] lowmem_reserve[]: 0 2561 2562 0 0 [ 76.470087][ T6061] Node 0 DMA32 free:1620576kB boost:0kB min:35020kB low:43772kB high:52524kB reserved_highatomic:0KB active_anon:15632kB inactive_anon:0kB active_file:4996kB inactive_file:151144kB unevictable:1536kB writepending:1904kB present:3129332kB managed:2651252kB mlocked:0kB bounce:0kB free_pcp:728kB local_pcp:244kB free_cma:0kB [ 76.484370][ T6091] netlink: 'syz.2.194': attribute type 11 has an invalid length. [ 76.563044][ T6061] lowmem_reserve[]: 0 0 1 0 0 [ 76.578912][ T6061] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1312kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 76.583204][ T6091] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 76.616745][ T6097] netlink: 16 bytes leftover after parsing attributes in process `syz.4.195'. [ 76.630124][ T6097] netlink: 16 bytes leftover after parsing attributes in process `syz.4.195'. [ 76.647535][ T6061] lowmem_reserve[]: 0 0 0 0 0 [ 76.652784][ T6061] Node 1 Normal free:3945924kB boost:0kB min:54864kB low:68580kB high:82296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:6012kB local_pcp:5576kB free_cma:0kB [ 76.692409][ T6061] lowmem_reserve[]: 0 0 0 0 0 [ 76.700367][ T6061] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 76.707189][ T6097] netlink: 'syz.4.195': attribute type 10 has an invalid length. [ 76.717401][ T8] cfg80211: failed to load regulatory.db [ 76.736077][ T6061] Node 0 DMA32: 125*4kB (UME) 255*8kB (UME) 170*16kB (UME) 132*32kB (UME) 80*64kB (UME) 35*128kB (UME) 21*256kB (UME) 9*512kB (UME) 6*1024kB (UME) 3*2048kB (ME) 385*4096kB (M) = 1618316kB [ 76.772344][ T6061] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 76.803447][ T6097] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.811775][ T6097] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.820004][ T6061] Node 1 Normal: 4*4kB (UM) 3*8kB (U) 1*16kB (U) 0*32kB 2*64kB (UM) 6*128kB (U) 6*256kB (U) 4*512kB (UM) 5*1024kB (U) 2*2048kB (UM) 960*4096kB (M) = 3945912kB [ 76.859444][ T6097] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.866701][ T6097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.869279][ T6061] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 76.874211][ T6097] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.890926][ T6097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.917456][ T6061] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 76.920561][ T6097] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 76.945316][ T6061] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 76.975124][ T6106] netlink: 44 bytes leftover after parsing attributes in process `syz.2.199'. [ 76.988781][ T6106] bridge0: entered promiscuous mode [ 76.995700][ T6061] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 77.001072][ T6106] bridge0: left allmulticast mode [ 77.021032][ T6112] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.200'. [ 77.033126][ T6061] 40652 total pagecache pages [ 77.038281][ T6061] 0 pages in swap cache [ 77.058495][ T6061] Free swap = 124996kB [ 77.062683][ T6061] Total swap = 124996kB [ 77.066969][ T6061] 2097051 pages RAM [ 77.071669][ T6061] 0 pages HighMem/MovableOnly [ 77.077477][ T6061] 402772 pages reserved [ 77.081810][ T6061] 0 pages cma reserved [ 77.254417][ T6118] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.202'. [ 77.543812][ T6136] net_ratelimit: 15 callbacks suppressed [ 77.543830][ T6136] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 77.743166][ T6148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.202516][ T6185] xt_HMARK: spi-set and port-set can't be combined [ 78.384254][ T6184] syzkaller0: entered promiscuous mode [ 78.412660][ T6184] syzkaller0: entered allmulticast mode [ 78.474874][ T6197] x_tables: duplicate underflow at hook 1 [ 78.635951][ T6206] Bluetooth: MGMT ver 1.23 [ 78.756136][ T6210] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20000 [ 78.925729][ T6223] xt_connbytes: Forcing CT accounting to be enabled [ 79.058925][ T6228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.140571][ T6228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.175740][ T6228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.970906][ T6216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.229'. [ 80.231673][ T6246] nbd: socks must be embedded in a SOCK_ITEM attr [ 80.455964][ T6265] __nla_validate_parse: 2 callbacks suppressed [ 80.455983][ T6265] netlink: 20 bytes leftover after parsing attributes in process `syz.0.239'. [ 80.685225][ T6275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.244'. [ 80.723193][ T6278] xt_hashlimit: max too large, truncated to 1048576 [ 80.801052][ T6281] netlink: 16 bytes leftover after parsing attributes in process `syz.1.246'. [ 80.831861][ T6281] netlink: 20 bytes leftover after parsing attributes in process `syz.1.246'. [ 80.983765][ T6285] netlink: 20 bytes leftover after parsing attributes in process `syz.3.247'. [ 81.388706][ T6297] netlink: 16 bytes leftover after parsing attributes in process `syz.0.250'. [ 81.528020][ T6303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.251'. [ 81.569755][ T6302] netlink: 'syz.2.251': attribute type 10 has an invalid length. [ 81.588276][ T6303] netlink: 6 bytes leftover after parsing attributes in process `syz.2.251'. [ 81.760613][ T6302] team0 (unregistering): left allmulticast mode [ 81.767272][ T6302] team_slave_0: left allmulticast mode [ 81.772892][ T6302] team_slave_1: left allmulticast mode [ 81.778756][ T6302] bridge0: port 3(team0) entered disabled state [ 81.792320][ T6302] team_slave_0: left promiscuous mode [ 81.818902][ T6302] team0 (unregistering): Port device team_slave_0 removed [ 81.839399][ T6302] team_slave_1: left promiscuous mode [ 81.865508][ T6302] team0 (unregistering): Port device team_slave_1 removed [ 81.923237][ T6309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.254'. [ 82.007827][ T6314] netlink: 48 bytes leftover after parsing attributes in process `syz.1.255'. [ 82.260511][ T6328] x_tables: unsorted underflow at hook 2 [ 82.696141][ T6352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.717771][ T6352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.736923][ T6352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.751068][ T6352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.843515][ T6355] vlan2: entered promiscuous mode [ 82.947769][ T6363] hsr0: VLAN not yet supported [ 83.377262][ T6405] netlink: 'syz.4.280': attribute type 3 has an invalid length. [ 83.436756][ T6405] netlink: 'syz.4.280': attribute type 1 has an invalid length. [ 83.609338][ T6405] can: request_module (can-proto-0) failed. [ 83.945482][ T6433] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 84.125925][ T6441] sctp: [Deprecated]: syz.0.287 (pid 6441) Use of int in maxseg socket option. [ 84.125925][ T6441] Use struct sctp_assoc_value instead [ 84.239134][ T6443] netlink: 'syz.0.287': attribute type 15 has an invalid length. [ 84.274097][ T6443] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 65023 - 0 [ 84.283307][ T6443] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 65023 - 0 [ 84.292146][ T6443] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 65023 - 0 [ 84.301105][ T6443] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 65023 - 0 [ 84.344137][ T6443] vxlan0: entered promiscuous mode [ 85.358344][ T6480] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 86.204939][ T6485] syz.0.297[6485] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.205081][ T6485] syz.0.297[6485] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.336697][ T6494] __nla_validate_parse: 15 callbacks suppressed [ 86.336717][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.299'. [ 86.354609][ T6495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.298'. [ 86.355194][ T6495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.298'. [ 86.368866][ T6490] netlink: 56 bytes leftover after parsing attributes in process `syz.0.297'. [ 86.663741][ T6512] netlink: 'syz.1.304': attribute type 1 has an invalid length. [ 86.720644][ T6518] netlink: 24 bytes leftover after parsing attributes in process `syz.4.305'. [ 86.859984][ T6512] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 86.911205][ T6512] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 87.299488][ T6537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.309'. [ 87.427830][ T6533] netlink: 'syz.0.310': attribute type 21 has an invalid length. [ 87.463345][ T6533] netlink: 132 bytes leftover after parsing attributes in process `syz.0.310'. [ 87.890251][ T6558] bond0: option arp_interval: invalid value (18446744072926568490) [ 87.910003][ T6558] bond0: option arp_interval: allowed values 0 - 2147483647 [ 87.946268][ T6558] tap0: tun_chr_ioctl cmd 1074025677 [ 87.952167][ T6558] tap0: linktype set to 65534 [ 87.988461][ T6560] ipt_rpfilter: unknown options [ 88.342416][ T6572] netlink: 16 bytes leftover after parsing attributes in process `syz.0.323'. [ 88.762884][ T6595] netlink: 604 bytes leftover after parsing attributes in process `syz.2.328'. [ 88.789778][ T6593] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 89.015807][ T6608] syz.1.333[6608] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.016058][ T6608] syz.1.333[6608] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.040378][ T6608] syz.1.333[6608] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.059727][ T6608] syz.1.333[6608] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.279115][ T6617] netlink: 12 bytes leftover after parsing attributes in process `syz.1.335'. [ 90.742132][ T6672] pimreg: entered allmulticast mode [ 91.011617][ T6688] netlink: 'syz.0.356': attribute type 10 has an invalid length. [ 91.369640][ T6715] __nla_validate_parse: 8 callbacks suppressed [ 91.369658][ T6715] netlink: 24 bytes leftover after parsing attributes in process `syz.3.363'. [ 91.472026][ T6718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.364'. [ 91.634338][ T6725] netlink: 12 bytes leftover after parsing attributes in process `syz.4.366'. [ 91.644965][ T6725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.366'. [ 92.061362][ T6743] xt_hashlimit: overflow, try lower: 0/0 [ 92.371414][ T6743] netlink: 'syz.4.372': attribute type 10 has an invalid length. [ 92.511301][ T6767] netlink: 44 bytes leftover after parsing attributes in process `syz.3.375'. [ 92.600301][ T6775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.378'. [ 92.711794][ T6780] x_tables: duplicate underflow at hook 2 [ 92.753455][ T6779] netlink: 44 bytes leftover after parsing attributes in process `syz.3.379'. [ 93.105740][ T6793] bridge0: port 2(bridge_slave_1) entered listening state [ 93.133200][ T6798] netlink: 184 bytes leftover after parsing attributes in process `syz.0.384'. [ 93.339465][ T6797] netlink: 4360 bytes leftover after parsing attributes in process `syz.3.383'. [ 94.367233][ T6842] vlan4: entered promiscuous mode [ 94.432021][ T6839] macvlan2: entered allmulticast mode [ 94.446281][ T6839] team_slave_0: entered promiscuous mode [ 94.452038][ T6839] team_slave_1: entered promiscuous mode [ 94.473094][ T6839] team0: entered allmulticast mode [ 94.499617][ T6839] team_slave_0: entered allmulticast mode [ 94.517832][ T6839] team_slave_1: entered allmulticast mode [ 94.538457][ T6839] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 94.570333][ T6839] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 94.619919][ T6787] netlink: 48 bytes leftover after parsing attributes in process `syz.1.380'. [ 95.135780][ T6862] netlink: 'syz.0.398': attribute type 14 has an invalid length. [ 95.358333][ T6873] wg2: entered promiscuous mode [ 95.388956][ T6873] wg2: entered allmulticast mode [ 95.424829][ T6875] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 95.517887][ T6878] netlink: 'syz.0.402': attribute type 10 has an invalid length. [ 95.554790][ T6878] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.677426][ T6888] netlink: 'syz.2.403': attribute type 1 has an invalid length. [ 95.726037][ T6890] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 96.058677][ T6903] syz.4.409[6903] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.058822][ T6903] syz.4.409[6903] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.028287][ T6949] openvswitch: netlink: Message has 16 unknown bytes. [ 97.403931][ T6938] __nla_validate_parse: 5 callbacks suppressed [ 97.403950][ T6938] netlink: 32 bytes leftover after parsing attributes in process `syz.2.417'. [ 97.765454][ T6987] netlink: 'syz.1.431': attribute type 16 has an invalid length. [ 99.019387][ T7104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.443'. [ 99.355056][ T7120] netlink: 20 bytes leftover after parsing attributes in process `syz.2.448'. [ 100.996262][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.457'. [ 101.235059][ T7174] syzkaller1: entered promiscuous mode [ 101.242387][ T7174] syzkaller1: entered allmulticast mode [ 101.268698][ T7177] pimreg: entered allmulticast mode [ 101.370948][ T7182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.459'. [ 101.396407][ T7183] netlink: 36 bytes leftover after parsing attributes in process `syz.3.458'. [ 101.802184][ T7207] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.467'. [ 102.281674][ T7227] No such timeout policy "syz0" [ 102.423117][ T7229] netlink: 'syz.1.473': attribute type 21 has an invalid length. [ 102.451217][ T7229] netlink: 156 bytes leftover after parsing attributes in process `syz.1.473'. [ 102.527159][ T7236] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 102.676866][ T7249] netlink: 56 bytes leftover after parsing attributes in process `syz.0.481'. [ 103.009349][ T7269] netlink: 'syz.1.488': attribute type 2 has an invalid length. [ 103.017189][ T7269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.488'. [ 103.109716][ T7279] netlink: 'syz.2.490': attribute type 4 has an invalid length. [ 103.162074][ T7282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.488'. [ 103.369929][ T7296] (unnamed net_device) (uninitialized): peer notification delay (4) is not a multiple of miimon (7), value rounded to 0 ms [ 103.767110][ T7328] netlink: 'syz.3.503': attribute type 1 has an invalid length. [ 103.790057][ T7328] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.503'. [ 103.930472][ T7338] netlink: 52 bytes leftover after parsing attributes in process `syz.4.504'. [ 104.072504][ T7348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.505'. [ 104.133175][ T7348] nbd: couldn't find a device at index 0 [ 104.157181][ T7345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.505'. [ 104.198350][ T7359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.444995][ T7371] netlink: 44 bytes leftover after parsing attributes in process `syz.1.511'. [ 104.740819][ T7381] netlink: 'syz.3.515': attribute type 7 has an invalid length. [ 105.075040][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.517'. [ 105.691384][ T7413] netlink: 'syz.1.523': attribute type 1 has an invalid length. [ 107.002833][ T7457] tap0: tun_chr_ioctl cmd 2147767517 [ 107.210745][ T7459] netlink: 'syz.3.536': attribute type 15 has an invalid length. [ 107.530154][ T7490] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 107.556957][ T7493] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 107.567864][ T7493] macvlan2: entered promiscuous mode [ 107.574703][ T7493] macvlan2: entered allmulticast mode [ 107.581876][ T7493] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 107.592824][ T7493] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 107.600217][ T7493] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 107.829666][ T7514] netlink: 'syz.2.550': attribute type 46 has an invalid length. [ 107.934601][ T7518] __nla_validate_parse: 1 callbacks suppressed [ 107.934619][ T7518] netlink: 44 bytes leftover after parsing attributes in process `syz.2.552'. [ 107.962975][ T7518] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 107.970566][ T7518] macsec1: entered promiscuous mode [ 107.981309][ T7518] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 107.986611][ T7515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.627201][ T7556] netlink: 20 bytes leftover after parsing attributes in process `syz.4.561'. [ 108.729466][ T7559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.753956][ T7563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.563'. [ 108.783156][ T7563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.817998][ T7563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.865895][ T7563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.889812][ T7565] ebtables: ebtables: counters copy to user failed while replacing table [ 108.903302][ T7563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.095854][ T7577] netlink: 40 bytes leftover after parsing attributes in process `syz.4.568'. [ 109.128438][ T7577] hsr0: entered promiscuous mode [ 109.333800][ T7590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.571'. [ 109.489177][ T7594] IPVS: length: 215 != 6168 [ 109.515495][ T7592] sctp: [Deprecated]: syz.2.572 (pid 7592) Use of int in max_burst socket option. [ 109.515495][ T7592] Use struct sctp_assoc_value instead [ 109.569891][ T7597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.657124][ T7606] netlink: 16 bytes leftover after parsing attributes in process `syz.4.577'. [ 109.780396][ T7616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.581'. [ 109.802074][ T7616] netlink: 24 bytes leftover after parsing attributes in process `syz.2.581'. [ 109.856417][ T7616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.581'. [ 109.906334][ T7625] netlink: 20 bytes leftover after parsing attributes in process `syz.1.580'. [ 109.971910][ T7629] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.987748][ T7631] netlink: 'syz.0.586': attribute type 1 has an invalid length. [ 110.036533][ T7631] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 110.045798][ T7631] bond2: (slave batadv1): Enslaving as a backup interface with an up link [ 110.674353][ T7643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.700844][ T7646] tipc: Failed to remove unknown binding: 66,1,1/0:1231190032/1231190034 [ 110.719853][ T7646] tipc: Failed to remove unknown binding: 66,1,1/0:1231190032/1231190034 [ 110.922814][ T7657] Bluetooth: MGMT ver 1.23 [ 111.079615][ T7673] sctp: [Deprecated]: syz.2.598 (pid 7673) Use of struct sctp_assoc_value in delayed_ack socket option. [ 111.079615][ T7673] Use struct sctp_sack_info instead [ 111.323968][ T7681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.438010][ T7692] syzkaller1: entered promiscuous mode [ 111.455753][ T7692] syzkaller1: entered allmulticast mode [ 111.560034][ T7705] vlan0: entered allmulticast mode [ 111.578523][ T7705] @ÿ: entered allmulticast mode [ 112.101173][ T7741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.214551][ T7749] netlink: get zone limit has 4 unknown bytes [ 112.472092][ T7764] xt_connbytes: Forcing CT accounting to be enabled [ 112.482842][ T7764] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 112.566207][ T7767] x_tables: duplicate underflow at hook 3 [ 112.584647][ T7767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.611967][ T7767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.793265][ T7776] sctp: [Deprecated]: syz.1.624 (pid 7776) Use of int in max_burst socket option deprecated. [ 112.793265][ T7776] Use struct sctp_assoc_value instead [ 112.850085][ T7781] FAULT_INJECTION: forcing a failure. [ 112.850085][ T7781] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 112.870517][ T7781] CPU: 1 UID: 0 PID: 7781 Comm: syz.3.626 Not tainted 6.11.0-rc1-syzkaller-00305-g91d516d4de48 #0 [ 112.881134][ T7781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 112.881587][ T7777] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.891179][ T7781] Call Trace: [ 112.891190][ T7781] [ 112.891198][ T7781] dump_stack_lvl+0x241/0x360 [ 112.891230][ T7781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.891253][ T7781] ? __pfx__printk+0x10/0x10 [ 112.891276][ T7781] ? __pfx_lock_release+0x10/0x10 [ 112.891306][ T7781] should_fail_ex+0x3b0/0x4e0 [ 112.928194][ T7781] _copy_from_user+0x2f/0xe0 [ 112.932807][ T7781] copy_msghdr_from_user+0xae/0x680 [ 112.938024][ T7781] ? _parse_integer_limit+0x1b5/0x200 [ 112.943429][ T7781] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 112.949272][ T7781] __sys_sendmmsg+0x374/0x740 [ 112.953970][ T7781] ? __pfx___sys_sendmmsg+0x10/0x10 [ 112.959220][ T7781] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 112.965135][ T7781] ? ksys_write+0x23e/0x2c0 [ 112.969654][ T7781] ? __pfx_lock_release+0x10/0x10 [ 112.974793][ T7781] ? vfs_write+0x7c4/0xc90 [ 112.979236][ T7781] ? __mutex_unlock_slowpath+0x21d/0x750 [ 112.984886][ T7781] ? __pfx_vfs_write+0x10/0x10 [ 112.989704][ T7781] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 112.995715][ T7781] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 113.002064][ T7781] ? do_syscall_64+0x100/0x230 [ 113.006857][ T7781] __x64_sys_sendmmsg+0xa0/0xb0 [ 113.011725][ T7781] do_syscall_64+0xf3/0x230 [ 113.016247][ T7781] ? clear_bhb_loop+0x35/0x90 [ 113.020941][ T7781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.026856][ T7781] RIP: 0033:0x7f4321f779f9 [ 113.031282][ T7781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.050897][ T7781] RSP: 002b:00007f4322dd4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 113.059328][ T7781] RAX: ffffffffffffffda RBX: 00007f4322105f80 RCX: 00007f4321f779f9 [ 113.067311][ T7781] RDX: 0000000000000001 RSI: 0000000020001180 RDI: 0000000000000003 [ 113.075296][ T7781] RBP: 00007f4322dd4090 R08: 0000000000000000 R09: 0000000000000000 [ 113.083283][ T7781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.091271][ T7781] R13: 0000000000000000 R14: 00007f4322105f80 R15: 00007ffcb9ad8158 [ 113.099269][ T7781] [ 113.112394][ T7782] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.162283][ T7782] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 113.189864][ T7782] bond1: (slave vti0): Error -95 calling set_mac_address [ 113.217691][ T7784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.679102][ T7823] netlink: 'syz.0.633': attribute type 4 has an invalid length. [ 113.703945][ T7823] __nla_validate_parse: 9 callbacks suppressed [ 113.703962][ T7823] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.633'. [ 113.755628][ T7825] netlink: 'syz.2.635': attribute type 3 has an invalid length. [ 114.054075][ T7841] FAULT_INJECTION: forcing a failure. [ 114.054075][ T7841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.083392][ T7841] CPU: 1 UID: 0 PID: 7841 Comm: syz.2.639 Not tainted 6.11.0-rc1-syzkaller-00305-g91d516d4de48 #0 [ 114.094028][ T7841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 114.104101][ T7841] Call Trace: [ 114.107396][ T7841] [ 114.110353][ T7841] dump_stack_lvl+0x241/0x360 [ 114.115059][ T7841] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.120286][ T7841] ? __pfx__printk+0x10/0x10 [ 114.124914][ T7841] should_fail_ex+0x3b0/0x4e0 [ 114.129618][ T7841] _copy_from_user+0x2f/0xe0 [ 114.134227][ T7841] move_addr_to_kernel+0x82/0x150 [ 114.139283][ T7841] copy_msghdr_from_user+0x43e/0x680 [ 114.144618][ T7841] ? _parse_integer_limit+0x1b5/0x200 [ 114.150019][ T7841] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 114.155866][ T7841] __sys_sendmmsg+0x374/0x740 [ 114.159669][ T7844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.160723][ T7841] ? __pfx___sys_sendmmsg+0x10/0x10 [ 114.160776][ T7841] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 114.181526][ T7841] ? ksys_write+0x23e/0x2c0 [ 114.186051][ T7841] ? __pfx_lock_release+0x10/0x10 [ 114.191101][ T7841] ? vfs_write+0x7c4/0xc90 [ 114.195547][ T7841] ? __mutex_unlock_slowpath+0x21d/0x750 [ 114.201202][ T7841] ? __pfx_vfs_write+0x10/0x10 [ 114.206096][ T7841] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 114.212101][ T7841] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 114.218451][ T7841] ? do_syscall_64+0x100/0x230 [ 114.223243][ T7841] __x64_sys_sendmmsg+0xa0/0xb0 [ 114.228129][ T7841] do_syscall_64+0xf3/0x230 [ 114.232650][ T7841] ? clear_bhb_loop+0x35/0x90 [ 114.237351][ T7841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.243268][ T7841] RIP: 0033:0x7f4b359779f9 [ 114.247698][ T7841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.267318][ T7841] RSP: 002b:00007f4b3680f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 114.275761][ T7841] RAX: ffffffffffffffda RBX: 00007f4b35b05f80 RCX: 00007f4b359779f9 [ 114.283744][ T7841] RDX: 0000000000000001 RSI: 0000000020001180 RDI: 0000000000000003 [ 114.291711][ T7841] RBP: 00007f4b3680f090 R08: 0000000000000000 R09: 0000000000000000 [ 114.299683][ T7841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.307646][ T7841] R13: 0000000000000000 R14: 00007f4b35b05f80 R15: 00007ffc91f558a8 [ 114.315620][ T7841] [ 114.341545][ T5285] jump_label: Fatal kernel bug, unexpected op at fl6_sock_lookup+0x12/0xd0 [ffffffff8a603932] (eb 14 e8 37 2d != 66 90 0f 1f 00)) size:2 type:1 [ 114.380512][ T5285] ------------[ cut here ]------------ [ 114.386183][ T5285] kernel BUG at arch/x86/kernel/jump_label.c:73! [ 114.410220][ T5285] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 114.417198][ T5285] CPU: 1 UID: 0 PID: 5285 Comm: kworker/1:7 Not tainted 6.11.0-rc1-syzkaller-00305-g91d516d4de48 #0 [ 114.427956][ T5285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 114.438005][ T5285] Workqueue: events jump_label_update_timeout [ 114.444073][ T5285] RIP: 0010:__jump_label_patch+0x463/0x490 [ 114.449873][ T5285] Code: e8 22 82 5f 00 48 c7 c7 60 4f 05 8c 48 8b 0c 24 48 89 ce 48 89 ca 4d 89 e8 4c 8b 4c 24 08 41 54 e8 a2 90 7e 0a 48 83 c4 08 90 <0f> 0b e8 c6 8f 81 0a e8 f1 81 5f 00 90 0f 0b e8 e9 81 5f 00 90 0f [ 114.469555][ T5285] RSP: 0018:ffffc900043af920 EFLAGS: 00010292 [ 114.475610][ T5285] RAX: 000000000000008d RBX: 0000000000000085 RCX: 8c7e01d817f07c00 [ 114.483568][ T5285] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 114.491524][ T5285] RBP: ffffc900043afa48 R08: ffffffff8173dfac R09: fffffbfff1cf9f80 [ 114.499483][ T5285] R10: dffffc0000000000 R11: fffffbfff1cf9f80 R12: 0000000000000001 [ 114.507439][ T5285] R13: ffffffff8c056d81 R14: ffffffff931088c0 R15: ffffffff8c056d81 [ 114.515396][ T5285] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 114.524309][ T5285] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.530879][ T5285] CR2: 00007fe6f4ad1d38 CR3: 0000000064b8e000 CR4: 00000000003506f0 [ 114.538837][ T5285] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 114.546792][ T5285] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 114.554746][ T5285] Call Trace: [ 114.558010][ T5285] [ 114.560925][ T5285] ? __die_body+0x88/0xe0 [ 114.565248][ T5285] ? die+0xcf/0x110 [ 114.569044][ T5285] ? do_trap+0x15a/0x3a0 [ 114.573273][ T5285] ? __jump_label_patch+0x463/0x490 [ 114.578459][ T5285] ? do_error_trap+0x1dc/0x2c0 [ 114.583210][ T5285] ? __jump_label_patch+0x463/0x490 [ 114.588395][ T5285] ? __pfx_do_error_trap+0x10/0x10 [ 114.593493][ T5285] ? report_bug+0x3e8/0x500 [ 114.597983][ T5285] ? handle_invalid_op+0x34/0x40 [ 114.602904][ T5285] ? __jump_label_patch+0x463/0x490 [ 114.608091][ T5285] ? exc_invalid_op+0x38/0x50 [ 114.612757][ T5285] ? asm_exc_invalid_op+0x1a/0x20 [ 114.617773][ T5285] ? __wake_up_klogd+0xcc/0x110 [ 114.622608][ T5285] ? __jump_label_patch+0x463/0x490 [ 114.627794][ T5285] ? fl6_sock_lookup+0x12/0xd0 [ 114.632542][ T5285] ? __pfx___jump_label_patch+0x10/0x10 [ 114.638078][ T5285] ? fl6_sock_lookup+0x12/0xd0 [ 114.642826][ T5285] ? fl6_sock_lookup+0x21/0xd0 [ 114.647575][ T5285] ? fl6_sock_lookup+0x14/0xd0 [ 114.652329][ T5285] ? __static_key_slow_dec_cpuslocked+0x21c/0x410 [ 114.658734][ T5285] ? __pfx___mutex_lock+0x10/0x10 [ 114.663750][ T5285] arch_jump_label_transform_queue+0x68/0x100 [ 114.669806][ T5285] __jump_label_update+0x177/0x3a0 [ 114.674910][ T5285] __static_key_slow_dec_cpuslocked+0x250/0x410 [ 114.681140][ T5285] ? __pfx___static_key_slow_dec_cpuslocked+0x10/0x10 [ 114.687894][ T5285] ? process_scheduled_works+0x945/0x1830 [ 114.693601][ T5285] jump_label_update_timeout+0x1e/0x30 [ 114.699046][ T5285] process_scheduled_works+0xa2c/0x1830 [ 114.704590][ T5285] ? __pfx_process_scheduled_works+0x10/0x10 [ 114.710559][ T5285] ? assign_work+0x364/0x3d0 [ 114.715139][ T5285] worker_thread+0x86d/0xd40 [ 114.719719][ T5285] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 114.725598][ T5285] ? __kthread_parkme+0x169/0x1d0 [ 114.730610][ T5285] ? __pfx_worker_thread+0x10/0x10 [ 114.735710][ T5285] kthread+0x2f0/0x390 [ 114.739760][ T5285] ? __pfx_worker_thread+0x10/0x10 [ 114.744856][ T5285] ? __pfx_kthread+0x10/0x10 [ 114.749427][ T5285] ret_from_fork+0x4b/0x80 [ 114.753834][ T5285] ? __pfx_kthread+0x10/0x10 [ 114.758408][ T5285] ret_from_fork_asm+0x1a/0x30 [ 114.763168][ T5285] [ 114.766168][ T5285] Modules linked in: [ 114.788786][ T7861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.645'. [ 114.799582][ T7861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.645'. [ 114.816254][ T5285] ---[ end trace 0000000000000000 ]--- [ 114.821413][ T7861] netlink: 68 bytes leftover after parsing attributes in process `syz.0.645'. [ 114.838424][ T5285] RIP: 0010:__jump_label_patch+0x463/0x490 [ 114.846869][ T5285] Code: e8 22 82 5f 00 48 c7 c7 60 4f 05 8c 48 8b 0c 24 48 89 ce 48 89 ca 4d 89 e8 4c 8b 4c 24 08 41 54 e8 a2 90 7e 0a 48 83 c4 08 90 <0f> 0b e8 c6 8f 81 0a e8 f1 81 5f 00 90 0f 0b e8 e9 81 5f 00 90 0f [ 114.867212][ T5285] RSP: 0018:ffffc900043af920 EFLAGS: 00010292 [ 114.873398][ T5285] RAX: 000000000000008d RBX: 0000000000000085 RCX: 8c7e01d817f07c00 [ 114.881581][ T5285] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 114.890919][ T5285] RBP: ffffc900043afa48 R08: ffffffff8173dfac R09: fffffbfff1cf9f80 [ 114.899100][ T5285] R10: dffffc0000000000 R11: fffffbfff1cf9f80 R12: 0000000000000001 [ 114.907133][ T5285] R13: ffffffff8c056d81 R14: ffffffff931088c0 R15: ffffffff8c056d81 [ 114.915182][ T5285] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 114.924156][ T5285] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.930761][ T5285] CR2: 00007f254d501d58 CR3: 0000000079d00000 CR4: 00000000003506f0 [ 114.938748][ T5285] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 114.947406][ T5285] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 114.955406][ T5285] Kernel panic - not syncing: Fatal exception [ 114.961683][ T5285] Kernel Offset: disabled [ 114.965992][ T5285] Rebooting in 86400 seconds..