last executing test programs: 3.367658088s ago: executing program 0 (id=104): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x2, 0x9, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20000001) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1886c301}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) getsockopt$ax25_int(r0, 0x101, 0x7, 0x0, 0x0) 3.16960242s ago: executing program 0 (id=107): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x0, 0x0, 0xa}, {0x1, 0x20000000, 0x20005, 0x8, 0x3, 0xfffffffffffffffa, 0x0, 0x2}, {0x2, 0xfffffffffffffffc}, 0xc24, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@broadcast, 0x4d4, 0x33}, 0x2, @in=@multicast2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x101}}, 0xe8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7ff, 0x2}, 0xfffffffffffffec8) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r3, r3, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r4, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r5, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000500)=r5, 0x4) r6 = accept4(r0, &(0x7f0000000000), &(0x7f00000000c0)=0x80, 0x800) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00030000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8010000000002100000000000000bb050005002b0000000a0000a874000000fc01000000020000000200000000000000000000000000000800197c"], 0xe0}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000400)={r2, r2, 0x2, 0x0, 0x0, 0x9, 0x1, 0xc49, 0x1012, 0xc3, 0x12, 0xb, 'syz0\x00'}) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x12, 0x0, @empty}, 0x1c) 2.978627185s ago: executing program 0 (id=110): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xffffffff}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0x4, 0x0, 0x1, [{0x4}]}]}, 0x44}}, 0x0) (async) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000004006c000500e3ffffffffff07000700ac1414aa08000800ac1434000800020005"], 0x54}}, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x9, 0x81, 0xd4, 0x7, 0xfffffffb, 0x100, 0xf4e5, 0x5}}}}]}, 0x58}}, 0x20040084) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r11, {0x1d}, {0xffff, 0xf}, {0x2, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) (async) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x3, 0x2}, {0x0, 0x8}, {0x8, 0xfff1}}}, 0x24}}, 0x40000) socket(0x25, 0x3, 0x400) (async, rerun: 32) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000000000)) (rerun: 32) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) 2.877325491s ago: executing program 1 (id=111): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x3, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) (async) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x3, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000002c000880280000022400010000000000000000000000000000000000000000000000000000000000000000000800050001000000140002007767310000000000000000000000000008000700ff00000014000200776732"], 0x78}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) (async) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000080000000000000000700000000000000", @ANYRES32=r4, @ANYBLOB="00000000000200"/28, @ANYRES32=r0, @ANYBLOB="000000004f0000120000000000000000000000000000001000000000", @ANYRES32=r0, @ANYBLOB="000000008500"/28, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\v\x00'/28, @ANYRES32=r1, @ANYBLOB="000000000500"/28, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\n\x00'/28, @ANYRES32=r0, @ANYBLOB="000000000300"/28]) (async) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000080000000000000000700000000000000", @ANYRES32=r4, @ANYBLOB="00000000000200"/28, @ANYRES32=r0, @ANYBLOB="000000004f0000120000000000000000000000000000001000000000", @ANYRES32=r0, @ANYBLOB="000000008500"/28, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\v\x00'/28, @ANYRES32=r1, @ANYBLOB="000000000500"/28, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\n\x00'/28, @ANYRES32=r0, @ANYBLOB="000000000300"/28]) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'time\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "07682c020b7b37f29f057acc54d4077549f4e34e86f469eb"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x3c, 0x40, 0x119, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x20, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0x14, 0x1a, 0x0, 0x1, [@nested={0x10, 0x47, 0x0, 0x1, [@nested={0x4, 0x146}, @nested={0x4, 0xb5}, @nested={0x4, 0x7e}]}]}]}, @nested={0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x3c, 0x40, 0x119, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x20, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0x14, 0x1a, 0x0, 0x1, [@nested={0x10, 0x47, 0x0, 0x1, [@nested={0x4, 0x146}, @nested={0x4, 0xb5}, @nested={0x4, 0x7e}]}]}]}, @nested={0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001840)=@newtaction={0xea8, 0x30, 0x25, 0x0, 0x0, {}, [{0xe94, 0x1, [@m_pedit={0xe90, 0x1, 0x0, 0x0, {{0xa}, {0xe64, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x9}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x10, 0x0, 0x0, 0x0, 0x0, 0x3cf}, {0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x4000}, {}, {0xfffffffd}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x200}, {}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x7f, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0xfffffffd}, {0x0, 0xffffff01}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0xdf}, {0x0, 0xfffffff2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x2, 0xf}, {}, {}, {}, {0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x100}, {}, {0xfffffffc, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x40, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xea8}}, 0x0) 2.801831181s ago: executing program 2 (id=112): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x40, 0x2, 0xfd, 0x2, 0x5, 0x2768}, 0x20) (async, rerun: 32) r2 = socket$kcm(0x23, 0x2, 0x0) (rerun: 32) sendmsg$sock(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async, rerun: 32) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) ioctl(r5, 0x8b32, &(0x7f0000000040)) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) setsockopt$sock_int(r7, 0x1, 0x2a, &(0x7f00000000c0)=0x9, 0x4) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)={0x3c, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x3c}}, 0x20000000) 2.737803334s ago: executing program 3 (id=113): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'pcbc(fcrypt-generic)\x00'}}}, 0xe0}}, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3f7, 0x2, 0x70bd2b, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40000) 2.593890665s ago: executing program 2 (id=114): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x25, &(0x7f00000000c0)=0x10001, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x6cc, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x2000000}, 0x5c) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000002780)=ANY=[], 0xfb5) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000080)) 2.522564225s ago: executing program 0 (id=115): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r2 = socket$unix(0x1, 0x5, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000080) (async, rerun: 64) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0b0400000000000000000200000048000480440001800c0001007061796c6f616400340002800800054000000000080002400000000008000440000000000800034000000000080008400400000008000740000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) 2.508250384s ago: executing program 1 (id=116): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000740)=0x8, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @parameter_prob={0xc, 0x0, 0x0, 0xf2, 0xb, 0x0, {0x5, 0x4, 0x0, 0x6, 0x100, 0x1065, 0xf30, 0x4, 0x62, 0x4, @broadcast, @multicast2}}}}}}, 0x0) 2.497610324s ago: executing program 4 (id=117): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @timestamp_reply={0xe, 0x0, 0x0, 0x7fff, 0x1ff, 0xfffffff3, 0xc, 0x8000}}}}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r3, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800"], 0x34}}, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) (async, rerun: 32) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) (rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) 2.434556621s ago: executing program 3 (id=118): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xbe, &(0x7f0000000400)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb0800450c00b000670000051190780a010101ac1414aa4e234e22009c90780100000004000000e9244fc04a5d0a5861b55cff0be058f92dd99fe94244772f1a3261a4ab6f3147884500b0eb3131ec456a044e02e6881290c9693bd22477c82be30f283d636d287e466735805180bfea2717a15f784528fcf488347f2d1dd087860b227e14439a37fdb701c157ed71f60f7825a28056b94c337bfd564b2b5e1db09cb26ad47b01d4e7faa74106e6d168638e87c902d806c0bd7a67b90e747850c812983877e541d8930b80e0c78ef6418bb8a77ea4185aee7ceffe4e00c4d64c88c2ee5d5714975fa41e342d7c55a033e37cd00a4e57ead0276329178901132e9102dfd00d55fe47fc"], 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001c80)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x1, 0x1, 0x40, 0x4255, 0x4}, {0x80, 0xa382b932ee83be1b, 0x1, 0x8, 0x1ff, 0x5}, 0x1, 0x80000000, 0x1b39}}, @TCA_TBF_RATE64={0xc, 0x4, 0xe8eb9bca25e8f4c7}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x2004c8c0}, 0x4000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r5, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) ioctl$SIOCPNENABLEPIPE(r5, 0x89ed, 0x0) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000019000000", 0x8) setsockopt(r4, 0x84, 0x80, &(0x7f0000000040)='\x00\x00\x00{\t\x00\x00\x00', 0x8) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)=ANY=[@ANYBLOB="e7ad880efc741fe762070500000000000000c000"], 0x14}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r1) sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYBLOB="000729bd7000fcdbdf251100000008000400030000000800040007000000"], 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x4000014) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet(0xa, 0x801, 0x84) connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r10 = accept4(r4, 0x0, 0x0, 0x0) poll(&(0x7f00000001c0)=[{r9, 0x2}, {r10, 0x1102}], 0x2, 0xc511) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x40, 0x1c}, 0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'gre0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x700, 0x700, 0x8, 0xffffff89, {{0x5, 0x4, 0x3, 0x18, 0x14, 0x65, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @local}}}}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x3fff, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r11, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r11, 0x89f9, &(0x7f0000000000)) gettid() sendmsg$nl_generic(r8, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="40000000330000032bbd7000fddbdf2520000000100017800c0009000400000000000000c1e6a11dbe4eba375879a005d866263cc125d3ab09b9fb224cd647a7bbf04078d11346a2de201d6dfc304fb286cb5ae7e4885472ea423a143021c3dc10a950aed6aa57ea4ea44c60451034ef22027cf92849000e51962d73c7d2726b1bf9e8def6ca9071d06a1d78f682dc2ac6c40db1337e3bbf1cf7d346139c2e972d3d33283199cf1993f04c18732ece63cf1accf63f3f3317806c9336b4712a374965009982879eca2694ffa9283d3c88d5109789827af7dddcbb"], 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x4000000) 2.353862807s ago: executing program 1 (id=119): r0 = socket$netlink(0x10, 0x3, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0xa) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, r6, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x0) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, r6, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) sendmsg$ETHTOOL_MSG_FEATURES_GET(r4, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, r6, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x5c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000006c0)=@updsa={0x154, 0x1a, 0x1, 0x10000000, 0x0, {{@in6=@private1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in6=@private2, {0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, {}, 0x70bd2d, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @encap={0x1c, 0x4, {0x3, 0x4e20, 0x4e22, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}, 0x154}}, 0x0) (async) sendmsg$nl_xfrm(r9, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000006c0)=@updsa={0x154, 0x1a, 0x1, 0x10000000, 0x0, {{@in6=@private1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in6=@private2, {0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, {}, 0x70bd2d, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @encap={0x1c, 0x4, {0x3, 0x4e20, 0x4e22, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}, 0x154}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="34000000090605000000000000000000060000000900020073797a30000000000c000780060004404e2000000500010007000000dfbbb54b48d13588b798a99257290ad02d0dbca51f78d3e08beed99a9173b52c35e23408f1a4ee4e1817634c2181192ec02aae311a5d59e47114ee2ea63ea89cc3ac6e9d39711d02ba7b85971ff750059377d0e79a825e9bb9d6cbc369020000000000000049bf90443fa0d243935fbd1ac82f3100"/181], 0x4}, 0x1, 0x0, 0x0, 0x8000}, 0x804) r10 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r10, 0x29, 0xca, &(0x7f0000000000), 0xc) getsockopt$PNPIPE_ENCAP(r10, 0x113, 0x1, &(0x7f00000001c0), &(0x7f00000002c0)=0x4) (async) getsockopt$PNPIPE_ENCAP(r10, 0x113, 0x1, &(0x7f00000001c0), &(0x7f00000002c0)=0x4) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r1) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x24, r11, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) (async) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x24, r11, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa0, r11, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x900}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xbd}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc060}, 0x4040854) r12 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r12, 0x200000000114, 0x8, 0x0, 0x0) 2.303756573s ago: executing program 4 (id=120): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async, rerun: 64) r1 = socket$nl_audit(0x10, 0x3, 0x9) (rerun: 64) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000080)={&(0x7f0000000000)=""/66, 0x42, 0x81}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x4, 0x2aa2a518, 0x0, @loopback, @private0, 0x80, 0x8, 0x5, 0x10}}) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r3}, @call={0x85, 0x0, 0x0, 0x1f}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000001, 0x12, r3, 0xffffd000) (async, rerun: 64) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0xe8, 0xe8, 0x0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1f}, @loopback, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 'wlan1\x00', 'sit0\x00', {}, {0xff}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xff000000, 0x1ffffff01], 'sit0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x34}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) (async, rerun: 64) pread64(r0, &(0x7f0000000b40)=""/4096, 0x1000, 0xffffffffffffffff) (rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0xfffffffffffffd7d, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="02000000000000000400000000fedbdf25000000", @ANYRES16=r5, @ANYBLOB="00000000000000001800128008000100736962000c00028008001400fe0f0000"], 0x38}, 0x1, 0x0, 0x0, 0x8801}, 0x50) 2.209820032s ago: executing program 2 (id=121): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @local, 0x9}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000000c0)={r3, 0x1000, 0x3, 0xc, 0x8, 0x7}, 0x14) (async) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_dump={0x3e, 0x2, 0x5}}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.20953934s ago: executing program 1 (id=122): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x16) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$bt_hci(r1, 0x11a, 0x2, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004e0001000000000000ffffffff020000080001"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="94145c5e55c366899eb82a464f2e6b68cfc0", @ANYRES16=r2, @ANYBLOB="050500080080080000004400000008000300", @ANYRES32=r4, @ANYBLOB="2c00238008001c009df20000060004006700000005001d0000000000050006000000000006000100a500000004002400"], 0x4c}}, 0x850) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4000}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0xf5}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x16) (async) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) (async) getsockopt$bt_hci(r1, 0x11a, 0x2, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004e0001000000000000ffffffff020000080001"], 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="94145c5e55c366899eb82a464f2e6b68cfc0", @ANYRES16=r2, @ANYBLOB="050500080080080000004400000008000300", @ANYRES32=r4, @ANYBLOB="2c00238008001c009df20000060004006700000005001d0000000000050006000000000006000100a500000004002400"], 0x4c}}, 0x850) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4000}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0xf5}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) (async) 2.190369507s ago: executing program 0 (id=123): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_proto_private(r1, 0x89e5, &(0x7f0000001180)="7e73c41dbe3d50e0c063869d52293e4a44f43558279581bcda41f449e92a315557a49c7cae14971669b5596b1656a0f006b9a847fa99be67dc1017b00f766500ffe22d1ad6748c6f68812c787c6f9a914a78d040918824fa0fbdae33eb94750f80ca453bc6c8725b5f88f792f836a274ca672fb5") r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c8, 0x0, 0x220, 0x150, 0x220, 0x220, 0x4f8, 0x4f8, 0x4f8, 0x4f8, 0x4f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@hashlimit1={{0x58}, {'\x00', {0x7, 0x8001, 0x9, 0x40000009, 0x539, 0x8, 0xe92c, 0x20, 0x8}, {0x1}}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff000000], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@loopback, 0x0, 0x38}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[0x3, 0x1], 0xffff, 0x24, 0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x628) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0xc8, 0x8, 0x258, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @mcast1, [0xffffffff, 0xff, 0xffffff01, 0xff0000ff], [0xffffffff, 0x0, 0xff000000, 0xff], 'ipvlan0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x87, 0x8, 0x1, 0x31}, 0x0, 0x230, 0x258, 0x0, {0x0, 0x2000000000000}, [@common=@srh={{0x30}, {0x2b, 0x42, 0xc, 0xc, 0x4, 0x75a0ce973f3a179e}}, @common=@inet=@hashlimit3={{0x158}, {'bond0\x00', {0x8, 0xbc88, 0x49, 0x3000000, 0x7, 0x5, 0x1ff, 0x4, 0x40, 0x8}, {0xd}}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x18, 0x8, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x2f, &(0x7f0000000380)="f98c7536503e98f8b03dfc6cc5728da81589a3646de0974417a20f5d7c1c6ce6d213482fbc22f95da00385f3c7f0b42717a40db562527cc94090c4660a7e9b8cbc32b73ded41808c919db8a7e0fb1d57b97f8e711f0303491fe4ab877cf5734213a076a16905b28a5d4162b875f7e6fdd069761b8264", 0x76) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r7 = accept4(r6, 0x0, 0x0, 0x800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000002e00), &(0x7f0000000200), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x7, 0x2}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r9, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_xfrm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001100)=ANY=[@ANYBLOB="4c000000200002002abd70000900000032000000fe800000000000000000000100000021e00000020000000000000000000000004e2204a14e2107ff020000a088000000", @ANYRES32=r10, @ANYRES32=0x0], 0x4c}, 0x1, 0x0, 0x0, 0x2004c800}, 0x48040) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_dump={0x3e, 0x2, 0x5}}) getsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000400)={@loopback, 0x0}, &(0x7f0000000440)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl2\x00', r12, 0x2f, 0x80, 0x80, 0x8, 0x10, @ipv4={'\x00', '\xff\xff', @empty}, @mcast1, 0x7, 0x10, 0x8000, 0x5}}) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r13, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000340)={@empty, r13}, 0x14) 2.055352645s ago: executing program 1 (id=124): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x20002, 0x0) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f00000006c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "80d748bb8f5a1bfb", "865106ea85d8291226c581e869881fd8", "0f59a7c8", "8d437b48b4c5f9b5"}, 0x28) socket$kcm(0x2, 0xa, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000140)={@val={0x800e}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @local}, {0x0, 0x0, 0x8}}}}}}, 0x2e) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x51}], 0x1}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x74, 0x2c, 0xd3f, 0x30bd29, 0x25dfd9fd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x8, 0x3, 0x4, 0x0, {0x4, 0x2, 0x8, 0x8, 0x4, 0x100}, {0xe, 0x2, 0xfff, 0xff00, 0x10, 0x1}, 0xb72, 0x8001, 0x100140}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f0000000540)={'nat\x00', 0x0, [0xc, 0x8, 0x6, 0x1, 0x9]}, &(0x7f0000000040)=0x54) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000180)="2b25964da94061d1aab70df98a0580a024b81e3cfed99029018eff29393cf59c1238df1bd2d3a31ff0d3f379964436efd579cc6e41f10d263926e2c5790966753828588a2fff1d8d3005fdd1fc1c36d75f58534f1828dbdbd38c0d28b4f701fd1764f8937cccf2026e449a10a53bf1db4aed70cf915a89c22ac5bbd9c0e1870db89c0632fd1da949892ddae95e5447ea4a8b30e844f21fd92a1ea3ff33de39bffa86aeb14ee5da0520ac2a779f93c52c23d7f4a7aa81c613cd8aa327a2a4e7855c636fd7bab699dde5fb7c9a2f0a722f240f8e5487eca08f5c108f0f92b7f87e5d87849466226e1f0295", 0xea}, {&(0x7f00000002c0)="7a95f3074f820ffb508add7438d3e392583555cbac28baefbfb90d72adc3e4bd5fb2617be4388237e35d79acb730be2cba609738583000d77dab4bc6861cf77647422b5ed2a8", 0x46}], 0x2) bind$bt_sco(r10, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) listen(r10, 0x0) connect$bt_sco(r10, &(0x7f0000000000)={0x1f, @none}, 0x8) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000380)={0x0, @rand_addr, @dev}, &(0x7f00000003c0)=0x33) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000400)) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="200000001300020000", @ANYRES32=r11, @ANYBLOB="0000040000000200"], 0x20}}, 0x4000844) 1.957809092s ago: executing program 4 (id=125): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) read$alg(0xffffffffffffffff, &(0x7f0000000300)=""/7, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001680)=""/4087, 0xff7}, {&(0x7f0000000200)=""/253, 0xfd}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0x1170, 0x1398, 0x0, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x13}, @loopback, [0x0, 0xff000000], [0xffffff00], 'dvmrp1\x00', 'veth0_to_hsr\x00', {}, {}, 0x18, 0x0, 0x6}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000040)=@id, 0x10) shutdown(r2, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000500000005000000002000000090000000000000e03000000010000000a0000000000000203000000000000000500000d00000000060000000100000000000000000000000000000000000000092000000000000001000000030010000000", @ANYRESHEX=r0], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff, 0x10000}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1810b82c65aff862272f073c972164c90946cd8f1d9fc1db47"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000700)='cachefiles_ondemand_copen\x00', r6}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r7, 0x34}, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r4, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r8) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000340)={'\x00', @random="7c6e426a0274"}) socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) sendmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x4004081}, 0x200000d1) 1.709882524s ago: executing program 4 (id=126): r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 1.556276735s ago: executing program 0 (id=127): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x7, 0x2, 0x3, 0x1, 0x4, 0x9}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000080)={0x10, 0x3b, 0x1}, 0x10}, {&(0x7f00000000c0)={0x10, 0x0, 0x1}, 0x10}], 0x2}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {0x2, 0x14}, [@FRA_DST={0x8, 0x1, @local}]}, 0x24}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x8b32, &(0x7f0000000040)) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r3, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r4 = socket$nl_crypto(0x10, 0x3, 0x15) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="e000000015000000000000000000000061656769733132382d67656e6572696300"], 0xe0}}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) sendmsg$nl_crypto(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000100001"], 0xe8}}, 0x0) 1.413463359s ago: executing program 3 (id=128): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x4a) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000005200010000000000000000001c000000040008"], 0x18}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000000)="b9ff03076844268cb8be14f088470f", 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.239234391s ago: executing program 2 (id=129): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) recvfrom(r3, 0x0, 0x0, 0x2000, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000a0a0101"], 0x68}, 0x1, 0x0, 0x0, 0x8001}, 0x20004800) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x2}, 0x8) r4 = socket(0x10, 0x3, 0x0) write(r4, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000040)=@ethtool_rxfh_indir}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r8 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r5) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000006c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xba}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r10, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x460}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r7, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x17}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x1a}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x4}]}, 0x4c}}, 0x20000811) 727.433731ms ago: executing program 4 (id=130): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x0, 0x0, {0x23}}, 0x14}}, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x0, 0x9, 0x4, 0x7, 0x400}, {0x1, 0x2, 0x0, 0x7, 0x8, 0x72bf8a97}, 0xe9, 0xf, 0x19dd}}, @TCA_TBF_BURST={0x8, 0x6, 0x200}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r6) 457.653512ms ago: executing program 1 (id=131): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180000002e000100000000000000000004001980040010"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) 456.94197ms ago: executing program 3 (id=132): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1e, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x80000003, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x50}, 0x94) 257.270642ms ago: executing program 2 (id=133): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYRES8=r1], 0x0, 0x34}, 0x28) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@pktinfo={{0x20, 0x29, 0x32, {@mcast1}}}], 0x20}}], 0x1, 0x8000) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0xe01, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x60}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x3, 0x4, 0x1, 0x0, r5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0xd9, 0x6, 0x0, @private=0xa210104, @local, {[@generic={0x7, 0x4, "0403"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80}}}}}}, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r6, &(0x7f0000000d40), 0x0}, 0x20) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000040)={r1, @in={{0x2, 0x4e23, @local}}}, &(0x7f0000000000)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000300)={r7, 0xfff9, 0x25, "bdb5aabd399f5bf1d52638c68d4331ed2ca541d26f814ae17d1ae14df95aaa751f9dd6c645"}, 0x2d) 227.92155ms ago: executing program 3 (id=134): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x10, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x409, 0x400, 0x8001, 0x1e, 0x3, 0x19, 0x4}}]}}]}, 0x148}}, 0x41) 78.212577ms ago: executing program 4 (id=135): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) (async) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000400000e52300000024000000020000000002000001000084ffffffff00000000020000009818b5600000ddffffffff14fd566cb792d5e5a5d33a0905020000000000"], 0x0, 0x3e}, 0x28) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) 62.643777ms ago: executing program 3 (id=136): r0 = socket(0x2b, 0x1, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r1, &(0x7f0000000240)={0x27, 0x0, 0xffffffffffffffff, 0x4}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x94}, 0xe) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000000)=ANY=[@ANYRES32=r2]) 0s ago: executing program 2 (id=137): r0 = socket(0x10, 0x803, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000fc0), r1) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0103701b122a34bf6a0e04"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40440d0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r5, 0x8008f512, &(0x7f00000001c0)) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000040)={0xf, 0x200, 0xe56, 0xe72e}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x44, 0x28, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'wlan1\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.197' (ED25519) to the list of known hosts. [ 84.382752][ T5822] cgroup: Unknown subsys name 'net' [ 84.523467][ T5822] cgroup: Unknown subsys name 'cpuset' [ 84.533199][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.234835][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.960215][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.968656][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.976699][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.984467][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.993610][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.002166][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.010268][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.017677][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.025581][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.026833][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.041310][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.043570][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.049376][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.059522][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.070643][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.071018][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.086322][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.094978][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.103272][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.125402][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.148713][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.161320][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.169234][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.178068][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.188010][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.801082][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 89.870525][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 90.015015][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 90.085573][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 90.156282][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 90.238586][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.246476][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.254121][ T5847] bridge_slave_0: entered allmulticast mode [ 90.262504][ T5847] bridge_slave_0: entered promiscuous mode [ 90.280189][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.287413][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.294928][ T5836] bridge_slave_0: entered allmulticast mode [ 90.302366][ T5836] bridge_slave_0: entered promiscuous mode [ 90.341711][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.349077][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.356682][ T5847] bridge_slave_1: entered allmulticast mode [ 90.364076][ T5847] bridge_slave_1: entered promiscuous mode [ 90.377326][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.384633][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.391920][ T5836] bridge_slave_1: entered allmulticast mode [ 90.399226][ T5836] bridge_slave_1: entered promiscuous mode [ 90.538789][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.549119][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.557651][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.564900][ T5834] bridge_slave_0: entered allmulticast mode [ 90.572507][ T5834] bridge_slave_0: entered promiscuous mode [ 90.582902][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.604536][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.611769][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.618927][ T5833] bridge_slave_0: entered allmulticast mode [ 90.627040][ T5833] bridge_slave_0: entered promiscuous mode [ 90.637309][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.667460][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.677161][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.684451][ T5834] bridge_slave_1: entered allmulticast mode [ 90.691715][ T5834] bridge_slave_1: entered promiscuous mode [ 90.700706][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.727014][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.734198][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.741868][ T5833] bridge_slave_1: entered allmulticast mode [ 90.749150][ T5833] bridge_slave_1: entered promiscuous mode [ 90.792665][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.800312][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.807703][ T5845] bridge_slave_0: entered allmulticast mode [ 90.815657][ T5845] bridge_slave_0: entered promiscuous mode [ 90.837445][ T5847] team0: Port device team_slave_0 added [ 90.867833][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.875167][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.882900][ T5845] bridge_slave_1: entered allmulticast mode [ 90.890837][ T5845] bridge_slave_1: entered promiscuous mode [ 90.911629][ T5847] team0: Port device team_slave_1 added [ 90.919863][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.931486][ T5836] team0: Port device team_slave_0 added [ 90.952736][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.977070][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.988446][ T5836] team0: Port device team_slave_1 added [ 91.007313][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.054350][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.077548][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.085047][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.111157][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.117791][ T5839] Bluetooth: hci2: command tx timeout [ 91.151935][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.173960][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.181121][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.207312][ T5839] Bluetooth: hci3: command tx timeout [ 91.207415][ T5850] Bluetooth: hci0: command tx timeout [ 91.213717][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.218669][ T5841] Bluetooth: hci1: command tx timeout [ 91.233097][ T5834] team0: Port device team_slave_0 added [ 91.241306][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.248281][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.269744][ T5841] Bluetooth: hci4: command tx timeout [ 91.274860][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.304471][ T5833] team0: Port device team_slave_0 added [ 91.319078][ T5834] team0: Port device team_slave_1 added [ 91.326137][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.333484][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.360162][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.387153][ T5833] team0: Port device team_slave_1 added [ 91.414770][ T5845] team0: Port device team_slave_0 added [ 91.460138][ T5845] team0: Port device team_slave_1 added [ 91.490256][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.497257][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.523707][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.536303][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.543514][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.569531][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.594060][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.601474][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.627870][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.644793][ T5847] hsr_slave_0: entered promiscuous mode [ 91.651315][ T5847] hsr_slave_1: entered promiscuous mode [ 91.689451][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.696447][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.722904][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.748892][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.755910][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.782230][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.806247][ T5836] hsr_slave_0: entered promiscuous mode [ 91.812704][ T5836] hsr_slave_1: entered promiscuous mode [ 91.818858][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 91.825047][ T5836] Cannot create hsr debugfs directory [ 91.843135][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.850275][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.876255][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.982545][ T5834] hsr_slave_0: entered promiscuous mode [ 91.989040][ T5834] hsr_slave_1: entered promiscuous mode [ 91.995490][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 92.001823][ T5834] Cannot create hsr debugfs directory [ 92.014715][ T9] cfg80211: failed to load regulatory.db [ 92.092808][ T5833] hsr_slave_0: entered promiscuous mode [ 92.100054][ T5833] hsr_slave_1: entered promiscuous mode [ 92.106240][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 92.112055][ T5833] Cannot create hsr debugfs directory [ 92.177788][ T5845] hsr_slave_0: entered promiscuous mode [ 92.185004][ T5845] hsr_slave_1: entered promiscuous mode [ 92.191557][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 92.197312][ T5845] Cannot create hsr debugfs directory [ 92.625142][ T5847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.651779][ T5847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.662618][ T5847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.681795][ T5847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.730739][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.748834][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.770656][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.783739][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.852544][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.868682][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.881724][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.898851][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.017171][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.028605][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.042804][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.059217][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.146517][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.178279][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.190658][ T5841] Bluetooth: hci2: command tx timeout [ 93.223474][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.236351][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.247819][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.266870][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.269644][ T5850] Bluetooth: hci0: command tx timeout [ 93.274604][ T5839] Bluetooth: hci3: command tx timeout [ 93.279012][ T5841] Bluetooth: hci1: command tx timeout [ 93.315881][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.323163][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.351585][ T5841] Bluetooth: hci4: command tx timeout [ 93.368595][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.375769][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.404248][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.462481][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.482524][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.493535][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.518010][ T4263] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.525261][ T4263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.559074][ T4263] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.566237][ T4263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.588956][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.611982][ T4263] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.619164][ T4263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.634351][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.656816][ T4263] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.664096][ T4263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.686602][ T4263] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.693785][ T4263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.721488][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.728660][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.886888][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.907708][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.018616][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.046455][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.082621][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.089833][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.140855][ T2988] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.148049][ T2988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.405950][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.500298][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.646072][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.657775][ T5834] veth0_vlan: entered promiscuous mode [ 94.715367][ T5834] veth1_vlan: entered promiscuous mode [ 94.732640][ T5833] veth0_vlan: entered promiscuous mode [ 94.774551][ T5833] veth1_vlan: entered promiscuous mode [ 94.836016][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.844858][ T5834] veth0_macvtap: entered promiscuous mode [ 94.853452][ T5847] veth0_vlan: entered promiscuous mode [ 94.872867][ T5836] veth0_vlan: entered promiscuous mode [ 94.883464][ T5834] veth1_macvtap: entered promiscuous mode [ 94.912043][ T5847] veth1_vlan: entered promiscuous mode [ 94.923321][ T5836] veth1_vlan: entered promiscuous mode [ 94.938422][ T5833] veth0_macvtap: entered promiscuous mode [ 94.965482][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.982698][ T5833] veth1_macvtap: entered promiscuous mode [ 95.001721][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.041977][ T779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.064152][ T779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.076995][ T5836] veth0_macvtap: entered promiscuous mode [ 95.086892][ T779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.105843][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.114712][ T779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.128179][ T5847] veth0_macvtap: entered promiscuous mode [ 95.136366][ T5836] veth1_macvtap: entered promiscuous mode [ 95.159049][ T5845] veth0_vlan: entered promiscuous mode [ 95.168339][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.195040][ T5847] veth1_macvtap: entered promiscuous mode [ 95.211298][ T2988] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.220810][ T2988] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.240788][ T2988] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.264504][ T2988] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.271026][ T5841] Bluetooth: hci2: command tx timeout [ 95.292188][ T5845] veth1_vlan: entered promiscuous mode [ 95.325189][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.341722][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.351113][ T5841] Bluetooth: hci1: command tx timeout [ 95.351124][ T5839] Bluetooth: hci0: command tx timeout [ 95.361103][ T5839] Bluetooth: hci3: command tx timeout [ 95.368329][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.380260][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.423296][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.431414][ T5841] Bluetooth: hci4: command tx timeout [ 95.456550][ T4263] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.489228][ T779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.501549][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.508825][ T779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.509601][ T4263] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.526007][ T4263] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.545818][ T4263] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.572600][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.588221][ T4263] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.599417][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.627119][ T4263] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.644443][ T4263] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.654207][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.663617][ T4263] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.686915][ T5845] veth0_macvtap: entered promiscuous mode [ 95.724729][ T5845] veth1_macvtap: entered promiscuous mode [ 95.747978][ T2988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.778367][ T2988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.822126][ T5953] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 95.922807][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.960309][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.969626][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.085137][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.101219][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.117986][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.166551][ T61] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.180383][ T61] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.211272][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.227472][ T61] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.237673][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.255049][ T61] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.286313][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.305834][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.547425][ T5971] Zero length message leads to an empty skb [ 96.572611][ T2988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.619355][ T2988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.737523][ T2988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.771983][ T2988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.794208][ T5985] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5'. [ 96.855303][ T5987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11'. [ 97.145079][ T5997] netlink: 808 bytes leftover after parsing attributes in process `syz.4.14'. [ 97.285586][ T6004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.328507][ T5995] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13'. [ 97.341139][ T6003] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15'. [ 97.349798][ T5841] Bluetooth: hci2: command tx timeout [ 97.352098][ T6004] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 97.430514][ T5841] Bluetooth: hci3: command tx timeout [ 97.430754][ T5839] Bluetooth: hci0: command tx timeout [ 97.436043][ T5850] Bluetooth: hci1: command tx timeout [ 97.510080][ T5839] Bluetooth: hci4: command tx timeout [ 97.556143][ T6015] netlink: 56 bytes leftover after parsing attributes in process `syz.4.17'. [ 97.629244][ T6018] netlink: 192 bytes leftover after parsing attributes in process `syz.4.17'. [ 97.894297][ T6026] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.20'. [ 122.831038][ T6104] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 122.870011][ T6107] netlink: 277 bytes leftover after parsing attributes in process `syz.0.25'. [ 122.904982][ T6109] syz.2.27 uses obsolete (PF_INET,SOCK_PACKET) [ 122.924791][ T6109] netlink: 24 bytes leftover after parsing attributes in process `syz.2.27'. [ 123.091040][ T6117] ip6gre1: entered allmulticast mode [ 123.348203][ T6128] netlink: 36 bytes leftover after parsing attributes in process `syz.4.34'. [ 123.452786][ T6140] syzkaller0: entered promiscuous mode [ 123.469993][ T6140] syzkaller0: entered allmulticast mode [ 123.739089][ T6161] netlink: 'syz.4.40': attribute type 7 has an invalid length. [ 123.876697][ T6164] netlink: 260 bytes leftover after parsing attributes in process `syz.2.41'. [ 123.896709][ T6164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.41'. [ 123.955814][ T6168] netlink: 12 bytes leftover after parsing attributes in process `syz.0.43'. [ 124.038857][ T6168] netlink: 24 bytes leftover after parsing attributes in process `syz.0.43'. [ 124.066570][ T6172] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 124.078153][ T6170] netlink: 'syz.4.44': attribute type 1 has an invalid length. [ 124.502789][ T6196] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 124.736994][ T6211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.56'. [ 124.886126][ T6222] netlink: 'syz.3.60': attribute type 32 has an invalid length. [ 125.538911][ T6263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.70'. [ 125.608235][ T6265] netlink: 28 bytes leftover after parsing attributes in process `syz.3.71'. [ 125.733568][ T6272] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.742339][ T6272] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.886044][ T6284] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 126.497464][ T6319] netlink: 'syz.3.86': attribute type 1 has an invalid length. [ 126.726966][ T6329] netlink: 'syz.2.90': attribute type 30 has an invalid length. [ 127.024943][ T6339] tipc: Failed to obtain node identity [ 127.049105][ T6339] tipc: Enabling of bearer rejected, failed to enable media [ 127.066389][ T6345] smc: net device team0 applied user defined pnetid SYZ2 [ 127.077825][ T6346] netlink: 'syz.3.96': attribute type 1 has an invalid length. [ 127.133885][ T6346] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.507782][ T6368] netlink: 'syz.1.101': attribute type 13 has an invalid length. [ 127.539530][ T6368] netlink: 'syz.1.101': attribute type 58 has an invalid length. [ 128.135136][ T6399] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 128.186378][ T6400] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 128.209017][ T6406] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 128.282074][ T6413] __nla_validate_parse: 19 callbacks suppressed [ 128.282095][ T6413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.113'. [ 128.825578][ T6451] xt_hashlimit: size too large, truncated to 1048576 [ 128.868296][ T6451] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 128.984828][ T6456] netlink: 24 bytes leftover after parsing attributes in process `syz.0.123'. [ 129.055746][ T6458] warning: `syz.4.125' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 129.586614][ T6482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.127'. [ 129.931614][ T6494] netlink: 84 bytes leftover after parsing attributes in process `syz.2.129'. [ 130.089847][ T6497] sctp: [Deprecated]: syz.2.129 (pid 6497) Use of struct sctp_assoc_value in delayed_ack socket option. [ 130.089847][ T6497] Use struct sctp_sack_info instead [ 130.402614][ T6501] netlink: 36 bytes leftover after parsing attributes in process `syz.2.129'. [ 130.497587][ T6500] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 130.522243][ T6476] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 130.559401][ T6476] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 130.626837][ T6476] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 130.649929][ T6476] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 130.705720][ T6476] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 130.746960][ T6476] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 130.825668][ T6476] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 130.844626][ T6476] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 130.912919][ T6476] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 130.918894][ T6476] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 130.974126][ T6529] kobject: kobject_add_internal failed for queues (error: -2 parent: bnep0) [ 130.996565][ T6529] ================================================================== [ 131.004676][ T6529] BUG: KASAN: slab-use-after-free in cfusbl_device_notify+0x150/0x6a0 [ 131.012851][ T6529] Read of size 8 at addr ffff88807b7d0d48 by task syz.3.136/6529 [ 131.020594][ T6529] [ 131.022955][ T6529] CPU: 0 UID: 0 PID: 6529 Comm: syz.3.136 Not tainted syzkaller #0 PREEMPT(full) [ 131.022976][ T6529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 131.022993][ T6529] Call Trace: [ 131.023005][ T6529] [ 131.023018][ T6529] dump_stack_lvl+0x189/0x250 [ 131.023040][ T6529] ? __kasan_check_byte+0x12/0x40 [ 131.023066][ T6529] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.023084][ T6529] ? lock_release+0x4b/0x3b0 [ 131.023103][ T6529] ? __virt_addr_valid+0x4a5/0x5c0 [ 131.023125][ T6529] print_report+0xca/0x240 [ 131.023140][ T6529] ? cfusbl_device_notify+0x150/0x6a0 [ 131.023156][ T6529] kasan_report+0x118/0x150 [ 131.023179][ T6529] ? cfusbl_device_notify+0x150/0x6a0 [ 131.023197][ T6529] cfusbl_device_notify+0x150/0x6a0 [ 131.023211][ T6529] ? net_generic+0x1e/0x240 [ 131.023235][ T6529] ? __pfx_cfusbl_device_notify+0x10/0x10 [ 131.023251][ T6529] ? caif_device_notify+0x250/0xfc0 [ 131.023281][ T6529] notifier_call_chain+0x19d/0x3a0 [ 131.023303][ T6529] register_netdevice+0x12cd/0x1a70 [ 131.023327][ T6529] ? __pfx_register_netdevice+0x10/0x10 [ 131.023346][ T6529] ? __asan_memset+0x22/0x50 [ 131.023363][ T6529] ? dev_addr_mod+0x2ce/0x3d0 [ 131.023380][ T6529] register_netdev+0x40/0x60 [ 131.023396][ T6529] bnep_add_connection+0x6bf/0xbf0 [ 131.023424][ T6529] ? __pfx_bnep_add_connection+0x10/0x10 [ 131.023447][ T6529] ? __fget_files+0x3a0/0x420 [ 131.023466][ T6529] do_bnep_sock_ioctl+0x40e/0x640 [ 131.023489][ T6529] ? kasan_quarantine_put+0xdd/0x220 [ 131.023509][ T6529] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 131.023535][ T6529] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 131.023561][ T6529] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 131.023587][ T6529] sock_do_ioctl+0xdc/0x300 [ 131.023605][ T6529] ? __pfx_sock_do_ioctl+0x10/0x10 [ 131.023623][ T6529] ? do_futex+0x395/0x420 [ 131.023643][ T6529] sock_ioctl+0x576/0x790 [ 131.023661][ T6529] ? __pfx_sock_ioctl+0x10/0x10 [ 131.023679][ T6529] ? __fget_files+0x3a0/0x420 [ 131.023693][ T6529] ? __fget_files+0x2a/0x420 [ 131.023708][ T6529] ? bpf_lsm_file_ioctl+0x9/0x20 [ 131.023722][ T6529] ? __pfx_sock_ioctl+0x10/0x10 [ 131.023738][ T6529] __se_sys_ioctl+0xfc/0x170 [ 131.023768][ T6529] do_syscall_64+0xfa/0xf80 [ 131.023788][ T6529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.023802][ T6529] ? clear_bhb_loop+0x60/0xb0 [ 131.023829][ T6529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.023844][ T6529] RIP: 0033:0x7f0c41d8f749 [ 131.023861][ T6529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.023876][ T6529] RSP: 002b:00007f0c42baa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.023894][ T6529] RAX: ffffffffffffffda RBX: 00007f0c41fe5fa0 RCX: 00007f0c41d8f749 [ 131.023904][ T6529] RDX: 0000200000000000 RSI: 00000000400442c8 RDI: 0000000000000007 [ 131.023913][ T6529] RBP: 00007f0c41e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 131.023922][ T6529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.023930][ T6529] R13: 00007f0c41fe6038 R14: 00007f0c41fe5fa0 R15: 00007ffd9aa01c88 [ 131.023947][ T6529] [ 131.023951][ T6529] [ 131.331929][ T6529] Allocated by task 5839: [ 131.336257][ T6529] kasan_save_track+0x3e/0x80 [ 131.340944][ T6529] __kasan_kmalloc+0x93/0xb0 [ 131.345540][ T6529] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 131.350918][ T6529] __hci_conn_add+0x3c5/0x1ab0 [ 131.355681][ T6529] hci_conn_request_evt+0x54e/0xb80 [ 131.360885][ T6529] hci_event_packet+0x7e3/0x1200 [ 131.365830][ T6529] hci_rx_work+0x42b/0xf20 [ 131.370258][ T6529] process_scheduled_works+0xad1/0x1770 [ 131.375828][ T6529] worker_thread+0x8a0/0xda0 [ 131.380419][ T6529] kthread+0x711/0x8a0 [ 131.384500][ T6529] ret_from_fork+0x599/0xb30 [ 131.389097][ T6529] ret_from_fork_asm+0x1a/0x30 [ 131.393875][ T6529] [ 131.396212][ T6529] Freed by task 6529: [ 131.400194][ T6529] kasan_save_track+0x3e/0x80 [ 131.404897][ T6529] __kasan_save_free_info+0x46/0x50 [ 131.410108][ T6529] __kasan_slab_free+0x5c/0x80 [ 131.414904][ T6529] kfree+0x1c0/0x660 [ 131.418800][ T6529] device_release+0x9e/0x1d0 [ 131.423392][ T6529] kobject_put+0x228/0x480 [ 131.427822][ T6529] device_del+0x7a4/0x8e0 [ 131.432164][ T6529] netdev_register_kobject+0x2b2/0x310 [ 131.437651][ T6529] register_netdevice+0x1246/0x1a70 [ 131.442860][ T6529] register_netdev+0x40/0x60 [ 131.447473][ T6529] bnep_add_connection+0x6bf/0xbf0 [ 131.452607][ T6529] do_bnep_sock_ioctl+0x40e/0x640 [ 131.457655][ T6529] sock_do_ioctl+0xdc/0x300 [ 131.462188][ T6529] sock_ioctl+0x576/0x790 [ 131.466520][ T6529] __se_sys_ioctl+0xfc/0x170 [ 131.471112][ T6529] do_syscall_64+0xfa/0xf80 [ 131.475738][ T6529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.481636][ T6529] [ 131.483965][ T6529] Last potentially related work creation: [ 131.489704][ T6529] kasan_save_stack+0x3e/0x60 [ 131.494481][ T6529] kasan_record_aux_stack+0xbd/0xd0 [ 131.499700][ T6529] insert_work+0x3d/0x330 [ 131.504033][ T6529] __queue_work+0xcd0/0xf90 [ 131.508533][ T6529] queue_delayed_work_on+0x18b/0x280 [ 131.513833][ T6529] l2cap_chan_del+0x285/0x5e0 [ 131.518529][ T6529] l2cap_conn_del+0x38b/0x680 [ 131.523212][ T6529] hci_conn_hash_flush+0x10d/0x230 [ 131.528339][ T6529] hci_dev_close_sync+0x821/0xff0 [ 131.533371][ T6529] hci_dev_do_close+0x2f/0x90 [ 131.538056][ T6529] hci_rfkill_set_block+0x21d/0x2e0 [ 131.543273][ T6529] rfkill_set_block+0x1d2/0x440 [ 131.548126][ T6529] rfkill_fop_write+0x44b/0x570 [ 131.552990][ T6529] vfs_write+0x27e/0xb30 [ 131.557256][ T6529] ksys_write+0x145/0x250 [ 131.561593][ T6529] do_syscall_64+0xfa/0xf80 [ 131.566099][ T6529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.571992][ T6529] [ 131.574315][ T6529] The buggy address belongs to the object at ffff88807b7d0000 [ 131.574315][ T6529] which belongs to the cache kmalloc-8k of size 8192 [ 131.588464][ T6529] The buggy address is located 3400 bytes inside of [ 131.588464][ T6529] freed 8192-byte region [ffff88807b7d0000, ffff88807b7d2000) [ 131.602443][ T6529] [ 131.604774][ T6529] The buggy address belongs to the physical page: [ 131.611278][ T6529] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b7d0 [ 131.620048][ T6529] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 131.628550][ T6529] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 131.636106][ T6529] page_type: f5(slab) [ 131.640091][ T6529] raw: 00fff00000000040 ffff88801a027280 ffffea0000c74600 0000000000000002 [ 131.648705][ T6529] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 131.657292][ T6529] head: 00fff00000000040 ffff88801a027280 ffffea0000c74600 0000000000000002 [ 131.665972][ T6529] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 131.674668][ T6529] head: 00fff00000000003 ffffea0001edf401 00000000ffffffff 00000000ffffffff [ 131.683358][ T6529] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 131.692033][ T6529] page dumped because: kasan: bad access detected [ 131.698504][ T6529] page_owner tracks the page as allocated [ 131.704219][ T6529] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5490, tgid 5490 (sh), ts 54781368954, free_ts 54755926852 [ 131.723939][ T6529] post_alloc_hook+0x234/0x290 [ 131.728723][ T6529] get_page_from_freelist+0x2365/0x2440 [ 131.734288][ T6529] __alloc_frozen_pages_noprof+0x181/0x370 [ 131.740107][ T6529] alloc_pages_mpol+0x232/0x4a0 [ 131.744971][ T6529] allocate_slab+0x86/0x3b0 [ 131.749473][ T6529] ___slab_alloc+0xf2b/0x1960 [ 131.754162][ T6529] __slab_alloc+0x65/0x100 [ 131.758599][ T6529] __kmalloc_cache_noprof+0x411/0x6f0 [ 131.763991][ T6529] tomoyo_init_log+0x111f/0x1f70 [ 131.768930][ T6529] tomoyo_supervisor+0x340/0x1480 [ 131.773958][ T6529] tomoyo_env_perm+0x149/0x1e0 [ 131.778810][ T6529] tomoyo_find_next_domain+0x15ce/0x1aa0 [ 131.784454][ T6529] tomoyo_bprm_check_security+0x11c/0x180 [ 131.790192][ T6529] security_bprm_check+0x89/0x270 [ 131.795226][ T6529] bprm_execve+0x887/0x1400 [ 131.799731][ T6529] do_execveat_common+0x510/0x6a0 [ 131.804756][ T6529] page last free pid 5490 tgid 5490 stack trace: [ 131.811090][ T6529] __free_frozen_pages+0xbc4/0xd30 [ 131.816210][ T6529] __put_partials+0x146/0x170 [ 131.820890][ T6529] put_cpu_partial+0x1f2/0x2d0 [ 131.825650][ T6529] __slab_free+0x288/0x2a0 [ 131.830065][ T6529] qlist_free_all+0x97/0x100 [ 131.834661][ T6529] kasan_quarantine_reduce+0x148/0x160 [ 131.840127][ T6529] __kasan_slab_alloc+0x22/0x80 [ 131.844997][ T6529] __kmalloc_noprof+0x3c3/0x800 [ 131.849854][ T6529] load_elf_binary+0x326/0x2740 [ 131.854730][ T6529] bprm_execve+0x92e/0x1400 [ 131.859244][ T6529] do_execveat_common+0x510/0x6a0 [ 131.864275][ T6529] __x64_sys_execve+0x94/0xb0 [ 131.868956][ T6529] do_syscall_64+0xfa/0xf80 [ 131.873461][ T6529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.879380][ T6529] [ 131.881906][ T6529] Memory state around the buggy address: [ 131.887641][ T6529] ffff88807b7d0c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 131.895722][ T6529] ffff88807b7d0c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 131.903792][ T6529] >ffff88807b7d0d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 131.911853][ T6529] ^ [ 131.918261][ T6529] ffff88807b7d0d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 131.926318][ T6529] ffff88807b7d0e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 131.934378][ T6529] ================================================================== [ 131.948836][ T6529] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 131.956088][ T6529] CPU: 1 UID: 0 PID: 6529 Comm: syz.3.136 Not tainted syzkaller #0 PREEMPT(full) [ 131.965306][ T6529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 131.975360][ T6529] Call Trace: [ 131.978638][ T6529] [ 131.981566][ T6529] dump_stack_lvl+0x99/0x250 [ 131.986160][ T6529] ? __asan_memcpy+0x40/0x70 [ 131.990760][ T6529] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.995958][ T6529] ? __pfx__printk+0x10/0x10 [ 132.000555][ T6529] vpanic+0x237/0x6d0 [ 132.004544][ T6529] ? __pfx_vpanic+0x10/0x10 [ 132.009044][ T6529] ? preempt_schedule+0xae/0xc0 [ 132.013896][ T6529] ? __pfx_preempt_schedule+0x10/0x10 [ 132.019357][ T6529] panic+0xb9/0xc0 [ 132.023079][ T6529] ? __pfx_panic+0x10/0x10 [ 132.027496][ T6529] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 132.033392][ T6529] ? cfusbl_device_notify+0x150/0x6a0 [ 132.038766][ T6529] check_panic_on_warn+0x89/0xb0 [ 132.043725][ T6529] ? cfusbl_device_notify+0x150/0x6a0 [ 132.049197][ T6529] end_report+0x6f/0x140 [ 132.053455][ T6529] kasan_report+0x129/0x150 [ 132.057969][ T6529] ? cfusbl_device_notify+0x150/0x6a0 [ 132.063358][ T6529] cfusbl_device_notify+0x150/0x6a0 [ 132.068641][ T6529] ? net_generic+0x1e/0x240 [ 132.073150][ T6529] ? __pfx_cfusbl_device_notify+0x10/0x10 [ 132.078878][ T6529] ? caif_device_notify+0x250/0xfc0 [ 132.084092][ T6529] notifier_call_chain+0x19d/0x3a0 [ 132.089216][ T6529] register_netdevice+0x12cd/0x1a70 [ 132.094434][ T6529] ? __pfx_register_netdevice+0x10/0x10 [ 132.099989][ T6529] ? __asan_memset+0x22/0x50 [ 132.104580][ T6529] ? dev_addr_mod+0x2ce/0x3d0 [ 132.109260][ T6529] register_netdev+0x40/0x60 [ 132.113854][ T6529] bnep_add_connection+0x6bf/0xbf0 [ 132.118989][ T6529] ? __pfx_bnep_add_connection+0x10/0x10 [ 132.124626][ T6529] ? __fget_files+0x3a0/0x420 [ 132.129304][ T6529] do_bnep_sock_ioctl+0x40e/0x640 [ 132.134423][ T6529] ? kasan_quarantine_put+0xdd/0x220 [ 132.139710][ T6529] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 132.145265][ T6529] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 132.150900][ T6529] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 132.156552][ T6529] sock_do_ioctl+0xdc/0x300 [ 132.161055][ T6529] ? __pfx_sock_do_ioctl+0x10/0x10 [ 132.166164][ T6529] ? do_futex+0x395/0x420 [ 132.170503][ T6529] sock_ioctl+0x576/0x790 [ 132.174831][ T6529] ? __pfx_sock_ioctl+0x10/0x10 [ 132.179677][ T6529] ? __fget_files+0x3a0/0x420 [ 132.184348][ T6529] ? __fget_files+0x2a/0x420 [ 132.188934][ T6529] ? bpf_lsm_file_ioctl+0x9/0x20 [ 132.193884][ T6529] ? __pfx_sock_ioctl+0x10/0x10 [ 132.198831][ T6529] __se_sys_ioctl+0xfc/0x170 [ 132.203433][ T6529] do_syscall_64+0xfa/0xf80 [ 132.207946][ T6529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.214031][ T6529] ? clear_bhb_loop+0x60/0xb0 [ 132.218713][ T6529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.224641][ T6529] RIP: 0033:0x7f0c41d8f749 [ 132.229091][ T6529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.248700][ T6529] RSP: 002b:00007f0c42baa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 132.257130][ T6529] RAX: ffffffffffffffda RBX: 00007f0c41fe5fa0 RCX: 00007f0c41d8f749 [ 132.265111][ T6529] RDX: 0000200000000000 RSI: 00000000400442c8 RDI: 0000000000000007 [ 132.273087][ T6529] RBP: 00007f0c41e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 132.281060][ T6529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.289049][ T6529] R13: 00007f0c41fe6038 R14: 00007f0c41fe5fa0 R15: 00007ffd9aa01c88 [ 132.297040][ T6529] [ 132.300419][ T6529] Kernel Offset: disabled [ 132.304756][ T6529] Rebooting in 86400 seconds..