last executing test programs: 3.740007573s ago: executing program 1 (id=155): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002800)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x5, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) 3.220014004s ago: executing program 1 (id=160): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x800, 0x7, 0x1}, {{0x0, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xe85, 0x6e4, 0xc}, {0x4, 0x80000000, 0x3, 0x1, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6e4}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0xb}}}, 0x51}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x870bd28, 0x8000, {0x0, 0x0, 0x0, r11, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 3.186972877s ago: executing program 3 (id=162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000040) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}}], {0x14}}, 0x50}}, 0x0) 3.004027615s ago: executing program 3 (id=163): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x60, r0, 0x1, 0x70bd25, 0x25dfdbfe, {0x39}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x60}}, 0x4000810) 2.889276166s ago: executing program 3 (id=164): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c394f305916c4516999da286dd", 0xe, 0x0, &(0x7f0000000340)={0x11, 0x3, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.471210417s ago: executing program 3 (id=165): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}, 0x1, 0x0, 0x0, 0x4005000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x23, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x4, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x74}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, 0x4, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_USERDATA={0x4}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x4}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x2b3}]}}]}, 0x40}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000008004"], 0x26}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x80, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x3}]}}}}}}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r2, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{0x0}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f", 0xb7}, {&(0x7f0000001400)}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e537dfc26029f52cfd5b4dd3416fc140fce45c077ab5ee206763130ccdaedd3bff9b7a20b6b02e558fd", 0xaf}, {&(0x7f0000000a40)}], 0x3}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.215980492s ago: executing program 3 (id=166): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$key(0xf, 0x3, 0x2) setsockopt$packet_int(r0, 0x107, 0x14, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x88}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc8701, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000340)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0xa, 0x0, 0x8d}, @mpls={[], @ipv6=@tipc_packet={0x8, 0x6, "09c2b4", 0x68, 0x6, 0xff, @empty, @mcast2, {[@fragment={0x2e, 0x0, 0x2c, 0x0, 0x0, 0x3, 0x67}, @srh={0x4, 0x6, 0x4, 0x3, 0x8f, 0x10, 0x1000, [@loopback, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x1, 0xa, 0x2, 0x2, 0x4886, 0x0, 0x3, 0x9, 0x0, 0x2, 0x8, 0x0, 0x0, 0x4e23, 0x4e20}, 0x1}, 0x4, 0x4}}}}}}}, 0x9e) 2.215002512s ago: executing program 2 (id=167): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0xfffffffffffffcbf) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='%'], 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r2, @ANYBLOB="f5fd752bec2ca0667b5ed7e9105f7d6febf8e6849d9e92a88548f5c072a0ab30774fa134f9386e3a238e6649ffd6e210feba8cc46e7cac439f2ae445758dc606dda140243ae8d76841d8a22a429121a653d18155b6d823345104710e6192feffeaca577808f0d1f68fb9f553", @ANYRESHEX, @ANYRES16, @ANYBLOB="051f0293d857ced8d46f07eeb5a7febf"], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) unshare(0x22020600) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, &(0x7f0000000780)}, 0x20) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000189"], 0xfdef) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba", 0x10}], 0x2}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000, 0x0, 0x4}, 0x20) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e000000010000800200000008000000000100", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r2, @ANYRES32], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r11}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000600000018110000", @ANYRES32=r11, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.182383586s ago: executing program 0 (id=168): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008"], 0x7c}, 0x1, 0x0, 0x0, 0x4005000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, 0x4, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_USERDATA={0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000008004"], 0x26}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9", 0x7b}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f", 0xb7}, {&(0x7f0000001400)="9af390e2aadb61017e08249a2485ad46a590a90910858e1ceefc66db2ed8f32bf6be0e2f94e7e4db6454393a128402ed26580c7c5ebc85db639da17c927c23dbde640ab030889e8b61f26d270bc73b21c9ac8ba542e6b4ad2cd147059128ba038e4b9ebb20537f437b23b46ec790720e1fb74cef3c677e9978662a84cf2fcf73c73a5e763358496737af6284226bad34fb9083f87d853ab78c816cf32c90bd5c40ff6446214552d29745d34e0c4bfa623d00e5cbb393972371503122a0f44135db5654ace67cddb85a12df91fcf994fc680afe5d34268b23447589ef3f5383d152bf6dd104984297180f896ec8b1ba50952c5ab76e144f5636692d7cf17922c9b447ed6d59553ec6085e07413034875c1ae0947280e1a6f0d5e7f23b32e56ead8590d3269fdcb624cc870968b2f100bf3bc3d2ab105a5f61456d4969181fbd207b6f4d6d9ca0a1920daabec06d0c5e276d18f2571e88373dd41af9080d72aa88b10f8900b48acb61a61007dd4dd0e9240af5382a26f68bd706a83d8df76a4a5d02b39d07f97c4f86dad9e14eb957cc4be52b027a462262589929e3d035188dd9f0561e3ba2de6bafe743d9ae397e9aa423644fba8b2d6425ac1cd78c76e52e04d3a29e74075625fb5e674bab02843991ce804e0d04961f2978f3749c5ad83f355ae5da936fd6e0178d2bd12aacbe0205aa9a15579fd61d738f8d36412e814ba500edaf28ea68b0e96fb1839acf8416d8f5df7fad3b663f68e2ee5784fd01c7021130a490e629b1348acf3479e0392ecabbeeb18ec421c26e76f6f5c480e7decc85a0583a56180f199d26090b10ee5057ec4c1e04be948a5960acda014d646cf91bfdfb9d327f8ab545f8b41e8dbab94f195b189a8642a6b95e0ceb36b640fbdfe21925cc110bd2ef2c3fe24f12f95771b60e2ffbc47e58b2237b5574cadc32aab0f0db3202e4adc44a0651ef97703957857cfb6022578c97802f486bd7f48129f0c120700d0b70e048618a9f1de9f34dbb1f92dadc86f09e6288eb1bdbd1f700cc2df781654dfd57d9da779607080d3bc6dede5818aa8d6c99fa1ffdbb6a1a43040fe1379cf2a8b4b862db428c29e388a6e6b863bc818c2139a0d4238f10baf22f498b6629181f997ac280547e92fe300d0f8dd8b6724df5aa14be73cd630b808a29bfb52707b8db7d0065bd753b3773f8df58c74ea56f4582caa2fa8532b8049fd9ba775afc5b92b767ed0b35d4c086d9af6f7b7ed96f5f9d3734e703fc683fe0ed82b7763c67734067759e27b60036a3b4c53526716c175d75a9fa6ed019d3e1047bcb9c6510665de23cc2802804a0c3a347faba392282df430e5e6141f9eb660f7cb0eaedb832a7880c953bc0188c1f28eb466799e2768886ef81096847f50159278b572b0cca7744d6a572a81ddd2bcea73da3c8a59680bcaaadaf95e1fe91e41a8036835975b072a9587c560e3da854c96c64011755d08fef5228bb2db62a445bc0b9e17dea88854cd6a7c8a288727d5690fc4941978dee5eda2dbdc85915e7a2fdae978adb217b3f6b31cf69b51b9f805f8b447a4868b442933fc0e03860a7084230ff8fdff70665717f9c0bade31f87f5de99643e800feceb0dfdd6d1b67d4056a52f0efa2ed2b1142132c6242d917b46d939aade6a362bf586058385d7fcef1b4e358a093d6781b9e9bf280520ff083a6026bf701237e38927ed21209dbf407a7944ef687b93619b181b9112477fa902f391a7163f93bec2d6369ffba644f4fd5139890fb66bd6017a61d9fd043154eb0ab0de3046cdb8a182a553cece0701a922518cf09cd1ab421ee8ec677a8d453cd8c21bdaa5f8dd804dfe80fffec8c4d778d5e260b65a2f0d3c1b09e9d6bd1f3746aa7fe07374a028a89fc96eb66affbcddfaa01a72058566e33af88e37f43fbba73c0423d54079fad54c136ec5fcd61d5134f833ab44f6cfbc2348871f190ac4c4bc20c97fcb29f4823a8e3bf76f85b10dfd33df0001646a7e0b2ee3e14455f6c8f225b80eed457e772cb2504ded46a24e911428decff4a130be797b6530c33ec1be7b0dd4df6206eca1c4c8dfda776336bcb876d80043195de773fbcf0d3abe53e9a38da0af7a6598815a71ffc937203f5a04e87eb532e579d66d42b06b791b6ebd50e7855f6645d29434bb0280fdf1511b163b12838f39ca864516711501bbe345d46b34ab2f0d8317d45376f73e302a90f5c362b18e1840668a9f27e90f2b715b4b6ae7a6dc387583110a42fd4977635275f7244a1912d0c67cf53d5da8a384839020d71db234fcc4388a735275763f01b2b4967e99f551e489bcc28f693a1e688ac8c39a971f8ae9d973cc7adac4a642a7a84ecca2d0bd24c300b94dff82fa4f95c1ce5fdb9128466443cb8442048e53cd46334d59774de0e2ceefcd4cd2e6c9da7cdc2162346111f7da236d72f33d509d73133951e1a3f84fa7e767cf56fc9bfb3986c5ec501634b92a780f63e0ee61e3d25f51c39b975ea587027a101059e9386f1eaaaab8ebfd5c453e9f86c851f9c78e4e06184f04fa9a54ba0bba5d18108c2973f50cb626eca6e3d5b2907b00d2ad4fff9546482815291bd220fa31c1d1a735562174644fe06131e31ce66064fa6a02d5bda756994f81163b97e854274183bbc4ddeb9bb823944afc3e07caf510732df2835fd11de82cb318b88f4d385adb57ac73ffe7f3d1e387848766e11000c94123f2a7d33a93d3b030ebb1206f26221a1ceef44a708693796ab80add7d9b6907c653c6becc21d49c380b3fea419276a387ad482fc3614fa7cac6ea9d07dffc85c1d3f01f57aa9816f32e3237b05d191c3f3d2ed31c313346176d18dc53307afc3aea306a5b44189b6fce062cd21319f1c0a5cf3bc84aaff275491d5fa26d12173e134bdb776478c27502dd4786cc079b6eb00d05f1c8c27a2e326ef11ad1866529b60e6a9e9ae776f01071e364a4604dfe79fbdfc9828628e50940398cc6b925ea8806ee3bbd22129c5d37551eb5e1ef613b027aebce0a83963888396f3e7c953e5416b522fd3a0660fefaea0fc97ca7d82191e2e8f23ca2aa56e8b9de2e1d3e093b8c3f4d7e700b7193b3d83c5b6bb1e7ff2a1c574c9d15ad79631573e41d46653601c510ec7cd0d6125c8e600ebb41247988c28305ac47eead817fecf4460c2221a399134d1d11363401090691a7bf1f58f27a09311d6591cef3d879570667e9e10eebf7df32ec9417f0132be9f1485b167b58b0bf88e31fb2d3957fa05a4d3f191c1d1caa189fc0c11c04287ceaee39a147aced6e3e9c2fe8f51a9823401ad4bf92b0fd4070aae1fe886b8c160a0d2a1507259e58c5608654f05f444877bf9ec215933d6f0a89a3f6199a23c535d8cf9541f2eb970261b12325884fe64330f67a8b07748522c58e5096a04afc67f08b4b0b3da2c9e010b8f079fabdbd187b3d1f69b9f8110e0ec3a488aa8b8563745f7e9fdc1faeaf542858f417d3a75d416e8f55c46cd962d9ac96ce8b56f7a0e22350d2b9e8a537780edddd519fd43baec4834aa6abb0b8c4007dfbb9dac74bf3802108966bf7d5a2999d16110ad0d2cab1c72c2d0ddce14e5043ee62fe9b722355dd2b7e728a589da59ef46dae95f1b89c22d5487a855bc1ee5f9d1427f643e2fa8748e07e6b51e365ab5e23e32401acc229c09f56868532ca611fa678b13f7f580392aee230878817f9dadc9b071245f75b7f626ab6f3342e8d80c3735e3a37646dfddeddec617fd3c155bb0735dd74eb1b71b957645978638f6bab555681b1e0047f7ccf370051f8fd42b171d16291a79ab5aad78940d12129d4de9f1d0a17f539fe333c7e3af31703dd147044ab4efd666cda9942c14cb25fae13cdb497bf7d71094192765df81234cf3dc9d38cdf373a06f5b723ab987708c8ed1b1b7c14cf55663298e752621be837d9e8f806552e0d605515dc0346354c76536d7681bac9dce48479abf18fc8b45862471ce1d75957a23c6bee5b2eb0022d557b6ad6153124e4594d26cc4a6e70de89086e0365039d215c2d9c7d881766b564b58be42104b4a4cad074eb1600be3a98fd7e19296066ee8a8d141d1b9f070c06c58c4f6e5c73b43022f39a13e701220064ceac7951818b1a88f68b2241efc57d37f224161533c75e279500896058aa03ce9571567172b57dbd40e1e14f8068cec77cde8da6aebf54039de9c7251289192616dca9d90bcc3ca24708dde9309d00d9a61c7be33f5858729ca3726fd8e8fdf911e58d3908797ec7b53cec49a8d51a3a30c3172b4277a8be98346488f10385ab3396ba34390f5f44a6f51606a392c25f4b6c65d3cee98004c5312b9f2a6349facbb7f0491fa0505ddc859e25963fae59e8ff05282c108be2a267690c8d53cd2ab7189b997cca8f0905ebcdc86a29b851546284870b348d54023e16262e78c034885696e931e1b2a7b2c23c59ef21393370a16f068ce46115e6b1c3ba9375bb9cb644ec9032bb2eb57eb4897284164af7a8b0a7019a610985dad9f1ce9f12a9a2399ee63fd6d21ee4adc8cbeb7ffe22b50e14c959042197ae45c8f8db2a5d03d6d9c2d5e826112a0bf6d21854a6d5fc77604e4117d7e9a92804c7db9f3eeca536b61a079654f8afbccc140602db833e537ac3c591b98549b5c70734e98b5a47eb9cc16ab2e0ed4f32ff69558e5dcfa2a3b54b8cf3326d4cdd7e9a0c19e4b703070a996acb40a882c2c512e38b4e3d31fe918a3562526132c7bbd497d3f5d40881e6c7363f2e21c8ae8d3ade72d57b6fe9a6cce7f100ae63775c6706b5004312b057aa9191e7614a69584974629c81e536b6422072cdb55b5d98418bf0b15268551548fbc6a9c84f4f701461c5e8e9f12573cc7611758c085582c823f9500d1fb8fa0eb44423f78fa60262f1578304c834865ba39ae3a1a393cfc3c9892518fca1ce37752f488faeabcb616700e831239025481f489c56331ea60ab91a77a73aca23da9fc2a2f171a0b42708ca64bc23985acd303b5eb32045bd55755facde52d4c5d134374736438996a956b5515a21c3c92968187235f0ec1cc68f671776f6b9805f2597bf6f0f93e55c843db7e590a923867da924981b1f653882bb744b3642e31fc43edbd028e804a71e40a80f0f3945fef279b7d7e060e3f2c3cf755b26a37f600021015ff3096c726ea948c2a25d1dbd7e5f7a6865109a83e99ec6e57bb1eea68c40131e1237e33766212f5fab50541a7028d734aaf1b6da21ef19b513a83d0f66f2db05960d404f918d23095e731b7f95bf79b04c91e419891fd04338508b1d44d47c954855550b1db8ab5e4c6d433d3e0113a9a5945d8f1bfb76a3cedad512d85103cb0bb1d32f7d3e30c19ee27bcadb3924ac774c79a5f5a7dd0d5e5d37400c070d7d97cd0e8841f55dce9461e98e2a3958dee488518f8481125530fb869e128e299c40e7bf341b363d14ed5707c176fc806997145ac1fbc2295c1b47c42b1cd1a1d455e7346c3a5d3fb29fb105a8b17ec42486f0ef3891aa9aeffaabfbafb0d3660609dfca3880209f18fedcee0b53338e4d3d72a4798c53604bc9adf78789be08fd2b2b227e0f37dcf7e30d3b2308dea145e6cd0c7a0a5cf637e192188b5a9f", 0xf89}], 0x3}}], 0x1, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.181422786s ago: executing program 1 (id=169): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x26f, 0x7, 0x2, 0xc93, 0x6, 0x7ff, 0x0, 0x7, 0xfffffffa}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x10001}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.03710699s ago: executing program 4 (id=170): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x400000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0xfffa, 0x7, 0x8, 0x8}, {0x6, 0x1, 0xd, 0x6, 0x6, 0xfb8e001}, 0x6, 0x4, 0x111e}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0x7, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x5, 0x2, 0x2, 0x3, 0x2, 0x5, 0x0, 0x81}}}}]}, 0x58}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.480028344s ago: executing program 0 (id=171): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002800)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x5, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0}}], 0x1, 0x0) 1.129903039s ago: executing program 4 (id=172): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}, 0x1, 0x0, 0x0, 0x4005000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x23, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x4, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x74}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, 0x4, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_USERDATA={0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_DEFAULT_RATE={0x0, 0x6, 0x4}, @TCA_FQ_TIMER_SLACK={0x0, 0xd, 0x2b3}]}}]}, 0x48}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000008004"], 0x26}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65", 0x6c}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f", 0xb7}, {&(0x7f0000001400)="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", 0x7db}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e537dfc26029f52cfd5b4dd3416fc140fce45c077ab5ee206763130ccdaedd3bff9b7a20b6b02e558fd", 0xaf}, {&(0x7f0000000a40)}], 0x3}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.12150358s ago: executing program 2 (id=173): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 1.008117801s ago: executing program 1 (id=174): unshare(0x22020400) r0 = socket$isdn_base(0x22, 0x3, 0x0) bind(r0, &(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x26}}}, 0x80) 1.007727801s ago: executing program 2 (id=175): r0 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) 993.546423ms ago: executing program 4 (id=176): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}, 0x1, 0x0, 0x0, 0x4005000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x23, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x4, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x74}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, 0x4, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_USERDATA={0x4}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x4}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x2b3}]}}]}, 0x40}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000008004"], 0x26}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x80, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x3}]}}}}}}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r2, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{0x0}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f", 0xb7}, {&(0x7f0000001400)}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e537dfc26029f52cfd5b4dd3416fc140fce45c077ab5ee206763130ccdaedd3bff9b7a20b6b02e558fd", 0xaf}, {&(0x7f0000000a40)}], 0x3}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 979.019694ms ago: executing program 0 (id=177): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x1843}, 0x18) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000000c0)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3", 0x30}], 0x3, 0x0, 0x0, 0x8008}], 0x1, 0x40800) recvmmsg$unix(r3, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/56, 0x38}, {&(0x7f0000000740)=""/83, 0x53}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000c80)=""/93, 0x5d}], 0x1}}], 0x2, 0x41, 0x0) 897.316032ms ago: executing program 1 (id=178): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56441, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xe, 0x81, 0x1, 0x4, 0x80000000, 0x1, 0x9e, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x17f}], 0x3}, 0x0) 896.649922ms ago: executing program 2 (id=179): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x800, 0x7, 0x1}, {{0x0, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xe85, 0x6e4, 0xc}, {0x4, 0x80000000, 0x3, 0x1, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6e4}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0xb}}}, 0x51}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x870bd28, 0x8000, {0x0, 0x0, 0x0, r11, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 763.988455ms ago: executing program 4 (id=180): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 655.568916ms ago: executing program 4 (id=181): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008"], 0x7c}, 0x1, 0x0, 0x0, 0x4005000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x23, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x4, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x74}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x20000800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000008004"], 0x26}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9", 0x7b}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f", 0xb7}, {&(0x7f0000001400)="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", 0xf89}], 0x3}}], 0x1, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 583.928053ms ago: executing program 0 (id=182): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x400000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0xfffa, 0x7, 0x8, 0x8}, {0x6, 0x1, 0xd, 0x6, 0x6, 0xfb8e001}, 0x6, 0x4, 0x111e}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0x7, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x5, 0x2, 0x2, 0x3, 0x2, 0x5, 0x0, 0x81}}}}]}, 0x58}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 484.140463ms ago: executing program 4 (id=183): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24004045}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x7, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) close(0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 483.351563ms ago: executing program 1 (id=184): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x26f, 0x7, 0x2, 0xc93, 0x6, 0x7ff, 0x0, 0x7, 0xfffffffa}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x10001}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 407.76317ms ago: executing program 3 (id=185): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSACCEPT(r3, 0x89e3) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x1}, 0xe) connect$bt_l2cap(r2, &(0x7f0000000680)={0x1f, 0x20, @none}, 0xe) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x14, 0x0, @remote}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x22, &(0x7f0000000100)={0x0, 0x989680}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$sock_ifreq(r5, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000007000000008000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000eaff0000000000f700"/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r7, &(0x7f0000000340)="351656b5c7027f807406bb0b", &(0x7f0000000400)}, 0x20) getpeername(r5, &(0x7f00000002c0)=@isdn, &(0x7f00000000c0)=0x80) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000400000000000000000000018110000", @ANYRES32=r8, @ANYRES32=r0], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r12}, &(0x7f0000000000), &(0x7f0000000140)=r9}, 0x20) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f00000000c0)=r13, 0x4) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000001000000080000004000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r14}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r14, &(0x7f0000000280), &(0x7f0000000600)=""/98}, 0x20) sendmsg$inet(r11, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 407.31881ms ago: executing program 2 (id=186): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 356.122255ms ago: executing program 2 (id=187): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002800)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x5, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0}}], 0x1, 0x0) 188.189651ms ago: executing program 0 (id=188): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001b80)=[{{&(0x7f0000000380)={0x2, 0x4e20, @empty}, 0x10, 0x0}}, {{&(0x7f00000007c0)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001900)=[@ip_pktinfo={{0x1c, 0xe0000000, 0x8, {0x0, @remote, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x38}}], 0x2, 0x4800) 0s ago: executing program 0 (id=189): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) read(r1, &(0x7f00000003c0)=""/123, 0x7b) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.178' (ED25519) to the list of known hosts. [ 57.382457][ T4171] cgroup: Unknown subsys name 'net' [ 57.498707][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.945035][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.089384][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 61.132338][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 61.184447][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 61.209833][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 61.249971][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 61.319836][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.327236][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.335626][ T4191] device bridge_slave_0 entered promiscuous mode [ 61.368370][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.375613][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.383585][ T4191] device bridge_slave_1 entered promiscuous mode [ 61.403678][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.410732][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.419039][ T4187] device bridge_slave_0 entered promiscuous mode [ 61.450975][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.458106][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.466487][ T4187] device bridge_slave_1 entered promiscuous mode [ 61.488537][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.495746][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.504101][ T4183] device bridge_slave_0 entered promiscuous mode [ 61.531832][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.539447][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.547365][ T4196] device bridge_slave_0 entered promiscuous mode [ 61.557393][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.566836][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.573998][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.581769][ T4183] device bridge_slave_1 entered promiscuous mode [ 61.590122][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.597308][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.605626][ T4182] device bridge_slave_0 entered promiscuous mode [ 61.619852][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.626940][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.635980][ T4196] device bridge_slave_1 entered promiscuous mode [ 61.644481][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.668468][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.675742][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.684094][ T4182] device bridge_slave_1 entered promiscuous mode [ 61.692589][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.731704][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.750958][ T4191] team0: Port device team_slave_0 added [ 61.758847][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.786667][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.798020][ T4191] team0: Port device team_slave_1 added [ 61.805423][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.816141][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.827233][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.864868][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.877463][ T4187] team0: Port device team_slave_0 added [ 61.916564][ T4187] team0: Port device team_slave_1 added [ 61.923044][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.929995][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.956474][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.970797][ T4196] team0: Port device team_slave_0 added [ 61.979508][ T4183] team0: Port device team_slave_0 added [ 62.000311][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.007415][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.033680][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.046027][ T4196] team0: Port device team_slave_1 added [ 62.053515][ T4183] team0: Port device team_slave_1 added [ 62.068067][ T4182] team0: Port device team_slave_0 added [ 62.110162][ T4182] team0: Port device team_slave_1 added [ 62.116411][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.123825][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.149845][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.162110][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.169071][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.196027][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.215555][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.222558][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.248500][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.278143][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.285914][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.312073][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.323665][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.330624][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.357016][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.376738][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.383832][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.409829][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.422338][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.429292][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.455240][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.475432][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.482556][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.508572][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.537630][ T4191] device hsr_slave_0 entered promiscuous mode [ 62.544422][ T4191] device hsr_slave_1 entered promiscuous mode [ 62.576856][ T4187] device hsr_slave_0 entered promiscuous mode [ 62.584214][ T4187] device hsr_slave_1 entered promiscuous mode [ 62.590800][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.598731][ T4187] Cannot create hsr debugfs directory [ 62.650531][ T4182] device hsr_slave_0 entered promiscuous mode [ 62.657462][ T4182] device hsr_slave_1 entered promiscuous mode [ 62.664370][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.672212][ T4182] Cannot create hsr debugfs directory [ 62.689907][ T4196] device hsr_slave_0 entered promiscuous mode [ 62.696695][ T4196] device hsr_slave_1 entered promiscuous mode [ 62.703471][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.711038][ T4196] Cannot create hsr debugfs directory [ 62.752878][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 62.752878][ T4173] Bluetooth: hci2: command 0x0409 tx timeout [ 62.765284][ T4173] Bluetooth: hci1: command 0x0409 tx timeout [ 62.771349][ T4173] Bluetooth: hci0: command 0x0409 tx timeout [ 62.780170][ T4183] device hsr_slave_0 entered promiscuous mode [ 62.787212][ T4183] device hsr_slave_1 entered promiscuous mode [ 62.794003][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.801570][ T4183] Cannot create hsr debugfs directory [ 62.832190][ T4173] Bluetooth: hci4: command 0x0409 tx timeout [ 63.085769][ T4196] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.097313][ T4196] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.111115][ T4196] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.120369][ T4196] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.171691][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.187225][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.209891][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.219410][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.248349][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.272676][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.283714][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.296744][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.410427][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.420939][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.440016][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.452487][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.466536][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.478159][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.496123][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.505700][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.517239][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.525636][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.547836][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.557144][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.583246][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.595374][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.604274][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.611458][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.628437][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.642732][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.651646][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.661595][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.671478][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.678587][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.688382][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.725309][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.734078][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.743126][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.750207][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.758795][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.767510][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.776639][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.783878][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.791508][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.801133][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.810049][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.819968][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.828832][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.840170][ T4182] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.850399][ T4182] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.860648][ T4182] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.869451][ T4182] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.880468][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.896146][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.913172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.922466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.930886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.941152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.951192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.963332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.971631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.984005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.993229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.001611][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.008706][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.016936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.046775][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.056047][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.065738][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.075324][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.084178][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.091239][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.099015][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.107799][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.116491][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.126389][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.156416][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.176544][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.185546][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.195539][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.205367][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.216635][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.225660][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.234899][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.244148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.254145][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.263584][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.279781][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.291816][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.304184][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.321891][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.341883][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.357134][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.368206][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.382637][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.391022][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.404902][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.413319][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.421631][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.430257][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.439126][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.448163][ T672] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.455401][ T672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.464869][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.476894][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.505273][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.514745][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.523954][ T672] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.531044][ T672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.539334][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.551652][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.566955][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.579147][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.607276][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.626302][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.647865][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.693106][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.707148][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.735946][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.751346][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.761190][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.772341][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.781268][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.789960][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.799458][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.808135][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.816925][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.832287][ T4173] Bluetooth: hci0: command 0x041b tx timeout [ 64.839183][ T4258] Bluetooth: hci1: command 0x041b tx timeout [ 64.847845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.855356][ T4258] Bluetooth: hci2: command 0x041b tx timeout [ 64.861384][ T4258] Bluetooth: hci3: command 0x041b tx timeout [ 64.892473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.904211][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.912633][ T4245] Bluetooth: hci4: command 0x041b tx timeout [ 64.919361][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.935167][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.960062][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.981793][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.001140][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.037821][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.052634][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.072988][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.081875][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.088997][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.098252][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.108939][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.117821][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.124944][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.134297][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.143297][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.153155][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.192895][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.205248][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.216095][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.226572][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.235481][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.244493][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.253588][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.261877][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.270359][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.279229][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.291125][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.299774][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.308317][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.341636][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.349417][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.358013][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.391967][ T4196] device veth0_vlan entered promiscuous mode [ 65.406344][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.420635][ T4191] device veth0_vlan entered promiscuous mode [ 65.430479][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.441824][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.456594][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.466876][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.476174][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.485439][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.495020][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.503245][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.510922][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.518975][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.536698][ T4196] device veth1_vlan entered promiscuous mode [ 65.550960][ T4187] device veth0_vlan entered promiscuous mode [ 65.562699][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.570834][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.580164][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.590295][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.600295][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.608611][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.626343][ T4191] device veth1_vlan entered promiscuous mode [ 65.669616][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.678063][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.687181][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.696424][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.705139][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.714438][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.726733][ T4196] device veth0_macvtap entered promiscuous mode [ 65.742530][ T4196] device veth1_macvtap entered promiscuous mode [ 65.768157][ T4187] device veth1_vlan entered promiscuous mode [ 65.785818][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.795745][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.804552][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.813352][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.821808][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.830825][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.839810][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.848776][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.857071][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.868246][ T4183] device veth0_vlan entered promiscuous mode [ 65.878586][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.890193][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.902525][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.911075][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.920009][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.928991][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.938849][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.948222][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.956641][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.968626][ T4183] device veth1_vlan entered promiscuous mode [ 65.985431][ T4196] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.994479][ T4196] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.005087][ T4196] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.014053][ T4196] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.029513][ T4191] device veth0_macvtap entered promiscuous mode [ 66.059451][ T4191] device veth1_macvtap entered promiscuous mode [ 66.068498][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.132702][ T4187] device veth0_macvtap entered promiscuous mode [ 66.139913][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.149239][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.157637][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.166638][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.175558][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.184588][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.193966][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.203657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.212929][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.242441][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.251157][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.266235][ T4187] device veth1_macvtap entered promiscuous mode [ 66.282914][ T4183] device veth0_macvtap entered promiscuous mode [ 66.304150][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.315458][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.320834][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.325040][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.338149][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.354084][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.365546][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.375677][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.386421][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.397410][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.408007][ T4183] device veth1_macvtap entered promiscuous mode [ 66.425812][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.436090][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.446822][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.455936][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.465262][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.477267][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.488384][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.499475][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.509413][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.521644][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.531655][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.543099][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.555139][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.583409][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.594087][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.594132][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.610072][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.620146][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.630653][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.640770][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.651280][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.664509][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.682355][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.691099][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.700948][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.710541][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.719590][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.729448][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.738059][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.749640][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.759496][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.769079][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.778127][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.795258][ T4182] device veth0_vlan entered promiscuous mode [ 66.804210][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.814956][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.827063][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.838963][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.848969][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.859698][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.871757][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.880388][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.889794][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.899512][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.908294][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.912624][ T4289] Bluetooth: hci3: command 0x040f tx timeout [ 66.917978][ T4173] Bluetooth: hci2: command 0x040f tx timeout [ 66.931191][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.940235][ T4173] Bluetooth: hci1: command 0x040f tx timeout [ 66.940499][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.946761][ T4173] Bluetooth: hci0: command 0x040f tx timeout [ 66.961147][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.969941][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.978815][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.986698][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.994847][ T4258] Bluetooth: hci4: command 0x040f tx timeout [ 67.006747][ T4182] device veth1_vlan entered promiscuous mode [ 67.040693][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.049871][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.066104][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.075746][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.261500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.284312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.297143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.306959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.332808][ T4182] device veth0_macvtap entered promiscuous mode [ 67.343612][ T1239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.346248][ T4182] device veth1_macvtap entered promiscuous mode [ 67.362082][ T1239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.394718][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.404026][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.435155][ T672] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.451277][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.480283][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.484479][ T672] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.499948][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.510853][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.521040][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.537593][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.551499][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.563879][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.575893][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.587068][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.598980][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.609363][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.618499][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.627095][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.636959][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.656691][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.667719][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.680505][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.685199][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.704360][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.716996][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.731396][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.751262][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.761817][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.778793][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.790649][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.815688][ T672] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.827871][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.839962][ T672] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.848123][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.860478][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.871851][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.894542][ T4182] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.936832][ T4182] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.961995][ T4182] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.971056][ T4182] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.000702][ T4296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 68.049254][ T4296] netlink: 388 bytes leftover after parsing attributes in process `syz.1.2'. [ 68.064023][ T672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.097434][ T4299] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6'. [ 68.103960][ T672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.154886][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.270563][ T4306] device syzkaller0 entered promiscuous mode [ 68.311723][ T672] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.357823][ T672] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.601865][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.625837][ T4316] tipc: Started in network mode [ 68.630937][ T4316] tipc: Node identity beb5c0fe73f1, cluster identity 4711 [ 68.636627][ T4314] Zero length message leads to an empty skb [ 68.656073][ T4316] tipc: Enabled bearer , priority 0 [ 68.673715][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.681666][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.701289][ T4313] device syzkaller0 entered promiscuous mode [ 68.825242][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.874557][ T4313] tipc: Resetting bearer [ 68.963881][ T4312] tipc: Resetting bearer [ 68.992251][ T4253] Bluetooth: hci3: command 0x0419 tx timeout [ 68.992550][ T4292] Bluetooth: hci0: command 0x0419 tx timeout [ 69.006481][ T4328] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 69.018752][ T4312] tipc: Disabling bearer [ 69.030661][ T4292] Bluetooth: hci1: command 0x0419 tx timeout [ 69.052185][ T4292] Bluetooth: hci2: command 0x0419 tx timeout [ 69.073486][ T4252] Bluetooth: hci4: command 0x0419 tx timeout [ 69.570791][ T4353] syz.0.18 uses obsolete (PF_INET,SOCK_PACKET) [ 69.926507][ T4335] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 70.016948][ T4363] netlink: 'syz.4.21': attribute type 1 has an invalid length. [ 70.359392][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 70.489160][ T4381] tipc: Enabling of bearer rejected, failed to enable media [ 70.520745][ T4382] tipc: Started in network mode [ 70.553261][ T4382] tipc: Node identity 0a99ceb24d77, cluster identity 4711 [ 70.560733][ T4382] tipc: Enabled bearer , priority 0 [ 70.568017][ T4385] device syzkaller0 entered promiscuous mode [ 70.600427][ T4386] device syzkaller0 entered promiscuous mode [ 70.638419][ T4382] tipc: Resetting bearer [ 70.723864][ T4380] tipc: Resetting bearer [ 70.742215][ T4380] tipc: Disabling bearer [ 71.147173][ T4400] tipc: Enabling of bearer rejected, failed to enable media [ 71.161138][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.167706][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.186823][ T4400] device syzkaller0 entered promiscuous mode [ 71.240285][ T4400] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 71.906602][ T4402] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 72.126957][ T4440] tipc: Enabling of bearer rejected, failed to enable media [ 72.196818][ T4440] device syzkaller0 entered promiscuous mode [ 73.058706][ T4479] xt_CT: You must specify a L4 protocol and not use inversions on it [ 73.283504][ T4482] xt_CT: No such helper "snmp" [ 73.588881][ T4499] tipc: Enabling of bearer rejected, failed to enable media [ 73.599117][ T4499] device syzkaller0 entered promiscuous mode [ 73.895721][ T4507] netlink: 'syz.4.71': attribute type 1 has an invalid length. [ 74.117014][ T4517] netlink: 20 bytes leftover after parsing attributes in process `syz.4.77'. [ 74.140638][ T4517] netlink: 48 bytes leftover after parsing attributes in process `syz.4.77'. [ 75.830891][ T4574] device syzkaller0 entered promiscuous mode [ 75.863107][ T4574] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 76.098749][ T4580] tipc: Enabled bearer , priority 0 [ 76.122675][ T4580] device syzkaller0 entered promiscuous mode [ 76.167768][ T4582] netlink: 'syz.3.98': attribute type 1 has an invalid length. [ 76.187552][ T4579] tipc: Resetting bearer [ 76.267189][ T4579] tipc: Disabling bearer [ 76.441328][ T4592] netlink: 24 bytes leftover after parsing attributes in process `syz.3.103'. [ 76.461077][ T4591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.102'. [ 76.561317][ T4594] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.144370][ T4614] tipc: Started in network mode [ 77.149296][ T4614] tipc: Node identity 0a3fcfc18a17, cluster identity 4711 [ 77.253264][ T4614] tipc: Enabled bearer , priority 0 [ 77.263499][ T4619] device syzkaller0 entered promiscuous mode [ 77.372543][ T4613] tipc: Resetting bearer [ 77.444822][ T4613] tipc: Disabling bearer [ 77.669822][ T4637] netlink: 3980 bytes leftover after parsing attributes in process `syz.4.117'. [ 77.751112][ T4639] device syzkaller0 entered promiscuous mode [ 78.060697][ T4651] device syzkaller0 entered promiscuous mode [ 78.091318][ T4651] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 78.395927][ T4662] tipc: Enabled bearer , priority 0 [ 78.417406][ T4662] device syzkaller0 entered promiscuous mode [ 78.474071][ T4661] tipc: Resetting bearer [ 78.544441][ T4661] tipc: Disabling bearer [ 78.609119][ T4665] device syzkaller0 entered promiscuous mode [ 78.625009][ T4667] netlink: 16 bytes leftover after parsing attributes in process `syz.0.129'. [ 78.940900][ T4673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.131'. [ 79.145182][ T4675] device syzkaller0 entered promiscuous mode [ 79.557941][ T4693] device syzkaller0 entered promiscuous mode [ 79.636599][ T4693] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 79.671078][ T4696] tipc: Started in network mode [ 79.694179][ T4696] tipc: Node identity c258fdd96f6a, cluster identity 4711 [ 79.717783][ T4696] tipc: Enabled bearer , priority 0 [ 79.771431][ T4695] device syzkaller0 entered promiscuous mode [ 79.839626][ T4703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.141'. [ 80.215134][ T4694] tipc: Resetting bearer [ 80.254868][ T4694] tipc: Disabling bearer [ 80.642030][ T4738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.146'. [ 81.076890][ T4762] tipc: Enabled bearer , priority 0 [ 81.101510][ T4766] device syzkaller0 entered promiscuous mode [ 81.128579][ T4763] tipc: Enabled bearer , priority 0 [ 81.174723][ T4763] device syzkaller0 entered promiscuous mode [ 81.214278][ T4755] tipc: Resetting bearer [ 81.238102][ T4759] tipc: Resetting bearer [ 81.285368][ T4759] tipc: Disabling bearer [ 81.362196][ T4754] tipc: Resetting bearer [ 81.405364][ T4754] tipc: Disabling bearer [ 81.406769][ T7] cfg80211: failed to load regulatory.db [ 81.469002][ T4778] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 81.592931][ T4787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.158'. [ 81.961560][ T4820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.164'. [ 82.155248][ T4803] device syzkaller0 entered promiscuous mode [ 82.853673][ T4845] team0 (unregistering): Port device team_slave_0 removed [ 83.087153][ T4845] team0 (unregistering): Port device team_slave_1 removed [ 83.323075][ T4857] device syzkaller0 entered promiscuous mode [ 83.340458][ T4863] device syzkaller0 entered promiscuous mode [ 83.970410][ T4900] device syzkaller0 entered promiscuous mode [ 84.254496][ T4921] device syzkaller0 entered promiscuous mode [ 84.303987][ T4921] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 84.440907][ T4932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.185'. [ 84.477515][ T4935] tipc: Enabled bearer , priority 0 [ 84.504418][ T4925] device syzkaller0 entered promiscuous mode [ 84.544012][ T4926] device syzkaller0 entered promiscuous mode [ 84.614050][ T4924] tipc: Resetting bearer [ 84.629917][ T4943] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 84.718938][ T4924] tipc: Disabling bearer [ 84.869274][ T4941] ================================================================== [ 84.877578][ T4941] BUG: KASAN: use-after-free in ax25_unregister_dev_sysctl+0x33/0xa0 [ 84.885683][ T4941] Read of size 8 at addr ffff88807a6a7818 by task syz.3.185/4941 [ 84.893417][ T4941] [ 84.895792][ T4941] CPU: 0 PID: 4941 Comm: syz.3.185 Not tainted syzkaller #0 [ 84.903083][ T4941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 84.913153][ T4941] Call Trace: [ 84.916434][ T4941] [ 84.919414][ T4941] dump_stack_lvl+0x168/0x230 [ 84.924107][ T4941] ? show_regs_print_info+0x20/0x20 [ 84.929308][ T4941] ? _printk+0xcc/0x110 [ 84.933469][ T4941] ? load_image+0x3b0/0x3b0 [ 84.937977][ T4941] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 84.943352][ T4941] ? lock_chain_count+0x20/0x20 [ 84.948205][ T4941] print_address_description+0x60/0x2d0 [ 84.953752][ T4941] ? ax25_unregister_dev_sysctl+0x33/0xa0 [ 84.959482][ T4941] kasan_report+0xdf/0x130 [ 84.963922][ T4941] ? ax25_unregister_dev_sysctl+0x33/0xa0 [ 84.969651][ T4941] ax25_unregister_dev_sysctl+0x33/0xa0 [ 84.975197][ T4941] ax25_dev_device_down+0x5b/0x520 [ 84.980319][ T4941] ax25_device_event+0x4b4/0x4f0 [ 84.985273][ T4941] raw_notifier_call_chain+0xcb/0x160 [ 84.990656][ T4941] dev_close_many+0x28d/0x400 [ 84.995342][ T4941] ? _raw_spin_unlock+0x40/0x40 [ 85.000200][ T4941] ? __dev_open+0x420/0x420 [ 85.004727][ T4941] ? bond_netdev_event+0x159/0xea0 [ 85.009851][ T4941] ? try_to_del_timer_sync+0x165/0x1b0 [ 85.015323][ T4941] dev_close+0x14c/0x200 [ 85.019576][ T4941] ? __dev_close_many+0x2a0/0x2a0 [ 85.024607][ T4941] ? macvlan_device_event+0x10b/0x930 [ 85.029996][ T4941] bpq_device_event+0x2f4/0x9c0 [ 85.034850][ T4941] ? lockdep_rtnl_is_held+0x22/0x30 [ 85.040051][ T4941] ? team_device_event+0x11b/0x9e0 [ 85.045173][ T4941] raw_notifier_call_chain+0xcb/0x160 [ 85.050559][ T4941] dev_close_many+0x28d/0x400 [ 85.055244][ T4941] ? __dev_open+0x420/0x420 [ 85.059756][ T4941] ? lock_chain_count+0x20/0x20 [ 85.064612][ T4941] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 85.070618][ T4941] dev_close+0x14c/0x200 [ 85.074865][ T4941] ? __dev_close_many+0x2a0/0x2a0 [ 85.079905][ T4941] ? __local_bh_enable_ip+0x12a/0x1b0 [ 85.085285][ T4941] ? _local_bh_enable+0xa0/0xa0 [ 85.090141][ T4941] bond_setup_by_slave+0x61/0x3a0 [ 85.095173][ T4941] bond_enslave+0x77c/0x3a40 [ 85.099774][ T4941] ? __lock_acquire+0x13ad/0x7c60 [ 85.104815][ T4941] ? bond_lower_state_changed+0x150/0x150 [ 85.110553][ T4941] ? apparmor_capable+0x12c/0x190 [ 85.115587][ T4941] ? bpf_lsm_capable+0x5/0x10 [ 85.120271][ T4941] ? full_name_hash+0x8e/0xe0 [ 85.124965][ T4941] bond_do_ioctl+0x2a2/0x8c0 [ 85.129563][ T4941] ? bond_eth_ioctl+0x200/0x200 [ 85.134424][ T4941] ? rcu_lock_acquire+0x30/0x30 [ 85.139279][ T4941] ? __mutex_lock_common+0x14ce/0x2390 [ 85.144751][ T4941] bond_siocdevprivate+0x13c/0x320 [ 85.149864][ T4941] ? __rwlock_init+0x140/0x140 [ 85.154631][ T4941] ? bond_do_ioctl+0x8c0/0x8c0 [ 85.159396][ T4941] ? do_raw_spin_unlock+0x11d/0x230 [ 85.164598][ T4941] ? __mutex_lock_common+0x14d8/0x2390 [ 85.170062][ T4941] ? full_name_hash+0x8e/0xe0 [ 85.174746][ T4941] dev_ifsioc+0xaf5/0xe70 [ 85.179083][ T4941] ? dev_ioctl+0x5e8/0xe50 [ 85.183519][ T4941] ? dev_ioctl+0xe50/0xe50 [ 85.187962][ T4941] ? full_name_hash+0x8e/0xe0 [ 85.192648][ T4941] dev_ioctl+0x5f9/0xe50 [ 85.196892][ T4941] ? get_user_ifreq+0xc7/0x170 [ 85.201663][ T4941] sock_ioctl+0x67b/0x6e0 [ 85.205999][ T4941] ? sock_poll+0x3f0/0x3f0 [ 85.210426][ T4941] ? bpf_lsm_file_ioctl+0x5/0x10 [ 85.215363][ T4941] ? security_file_ioctl+0x7c/0xa0 [ 85.220480][ T4941] ? sock_poll+0x3f0/0x3f0 [ 85.224895][ T4941] __se_sys_ioctl+0xfa/0x170 [ 85.229494][ T4941] do_syscall_64+0x4c/0xa0 [ 85.233910][ T4941] ? clear_bhb_loop+0x30/0x80 [ 85.238595][ T4941] ? clear_bhb_loop+0x30/0x80 [ 85.243274][ T4941] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.249173][ T4941] RIP: 0033:0x7fa88fc5afc9 [ 85.253592][ T4941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.273288][ T4941] RSP: 002b:00007fa88de80038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.281719][ T4941] RAX: ffffffffffffffda RBX: 00007fa88feb2180 RCX: 00007fa88fc5afc9 [ 85.289691][ T4941] RDX: 0000200000000180 RSI: 00000000000089f0 RDI: 0000000000000008 [ 85.297663][ T4941] RBP: 00007fa88fcddf91 R08: 0000000000000000 R09: 0000000000000000 [ 85.305631][ T4941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.313599][ T4941] R13: 00007fa88feb2218 R14: 00007fa88feb2180 R15: 00007ffcc25d8e88 [ 85.321581][ T4941] [ 85.324600][ T4941] [ 85.326917][ T4941] Allocated by task 4823: [ 85.331240][ T4941] __kasan_kmalloc+0xb5/0xf0 [ 85.335829][ T4941] call_usermodehelper_setup+0x8a/0x260 [ 85.341365][ T4941] __request_module+0x3be/0x910 [ 85.346212][ T4941] dev_load+0x156/0x1b0 [ 85.350366][ T4941] dev_ioctl+0x3e4/0xe50 [ 85.354604][ T4941] sock_do_ioctl+0x222/0x2f0 [ 85.359194][ T4941] sock_ioctl+0x4ed/0x6e0 [ 85.363519][ T4941] __se_sys_ioctl+0xfa/0x170 [ 85.368113][ T4941] do_syscall_64+0x4c/0xa0 [ 85.372525][ T4941] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.378420][ T4941] [ 85.380739][ T4941] Freed by task 4823: [ 85.384712][ T4941] kasan_set_track+0x4b/0x70 [ 85.389298][ T4941] kasan_set_free_info+0x1f/0x40 [ 85.394240][ T4941] ____kasan_slab_free+0xd5/0x110 [ 85.399268][ T4941] slab_free_freelist_hook+0xea/0x170 [ 85.404635][ T4941] kfree+0xef/0x2a0 [ 85.408450][ T4941] call_usermodehelper_exec+0x2b6/0x460 [ 85.413997][ T4941] __request_module+0x3df/0x910 [ 85.418849][ T4941] dev_load+0x156/0x1b0 [ 85.423006][ T4941] dev_ioctl+0x3e4/0xe50 [ 85.427249][ T4941] sock_do_ioctl+0x222/0x2f0 [ 85.431840][ T4941] sock_ioctl+0x4ed/0x6e0 [ 85.436169][ T4941] __se_sys_ioctl+0xfa/0x170 [ 85.440765][ T4941] do_syscall_64+0x4c/0xa0 [ 85.445184][ T4941] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.451082][ T4941] [ 85.453402][ T4941] Last potentially related work creation: [ 85.459107][ T4941] kasan_save_stack+0x35/0x60 [ 85.463784][ T4941] kasan_record_aux_stack+0xb8/0x100 [ 85.469083][ T4941] insert_work+0x54/0x3d0 [ 85.473411][ T4941] __queue_work+0x9c5/0xd50 [ 85.477927][ T4941] queue_work_on+0x11d/0x1d0 [ 85.482511][ T4941] call_usermodehelper_exec+0x26b/0x460 [ 85.488056][ T4941] __request_module+0x3df/0x910 [ 85.492907][ T4941] dev_load+0x156/0x1b0 [ 85.497067][ T4941] dev_ioctl+0x3e4/0xe50 [ 85.501309][ T4941] sock_do_ioctl+0x222/0x2f0 [ 85.505934][ T4941] sock_ioctl+0x4ed/0x6e0 [ 85.510269][ T4941] __se_sys_ioctl+0xfa/0x170 [ 85.514861][ T4941] do_syscall_64+0x4c/0xa0 [ 85.519273][ T4941] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.525168][ T4941] [ 85.527488][ T4941] The buggy address belongs to the object at ffff88807a6a7800 [ 85.527488][ T4941] which belongs to the cache kmalloc-192 of size 192 [ 85.541536][ T4941] The buggy address is located 24 bytes inside of [ 85.541536][ T4941] 192-byte region [ffff88807a6a7800, ffff88807a6a78c0) [ 85.554718][ T4941] The buggy address belongs to the page: [ 85.560354][ T4941] page:ffffea0001e9a9c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807a6a7e00 pfn:0x7a6a7 [ 85.571811][ T4941] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 85.579361][ T4941] raw: 00fff00000000200 ffffea0000ac6dc8 ffffea0000a87ec8 ffff888016841a00 [ 85.587940][ T4941] raw: ffff88807a6a7e00 000000000010000e 00000001ffffffff 0000000000000000 [ 85.596515][ T4941] page dumped because: kasan: bad access detected [ 85.602932][ T4941] page_owner tracks the page as allocated [ 85.608643][ T4941] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4363, ts 70063982646, free_ts 70053210340 [ 85.624615][ T4941] get_page_from_freelist+0x1b77/0x1c60 [ 85.630179][ T4941] __alloc_pages+0x1e1/0x470 [ 85.634763][ T4941] new_slab+0xb6/0x4b0 [ 85.638830][ T4941] ___slab_alloc+0x81e/0xdf0 [ 85.643426][ T4941] __kmalloc_node+0x200/0x3b0 [ 85.648134][ T4941] memcg_alloc_page_obj_cgroups+0x81/0x120 [ 85.653948][ T4941] slab_post_alloc_hook+0xba/0x380 [ 85.659062][ T4941] kmem_cache_alloc+0x100/0x290 [ 85.663910][ T4941] __d_alloc+0x2a/0x6f0 [ 85.668062][ T4941] d_alloc_pseudo+0x19/0x70 [ 85.672598][ T4941] alloc_file_pseudo+0xc8/0x1f0 [ 85.677448][ T4941] sock_alloc_file+0xb3/0x240 [ 85.682126][ T4941] __sys_socket+0x11d/0x170 [ 85.686638][ T4941] __x64_sys_socket+0x76/0x80 [ 85.691317][ T4941] do_syscall_64+0x4c/0xa0 [ 85.695730][ T4941] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.701634][ T4941] page last free stack trace: [ 85.706307][ T4941] free_unref_page_prepare+0x637/0x6c0 [ 85.711790][ T4941] free_unref_page+0x94/0x280 [ 85.716469][ T4941] __vunmap+0x8ab/0xa40 [ 85.720642][ T4941] process_one_work+0x863/0x1000 [ 85.725589][ T4941] worker_thread+0xaa8/0x12a0 [ 85.730365][ T4941] kthread+0x436/0x520 [ 85.734432][ T4941] ret_from_fork+0x1f/0x30 [ 85.738847][ T4941] [ 85.741166][ T4941] Memory state around the buggy address: [ 85.746792][ T4941] ffff88807a6a7700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 85.754866][ T4941] ffff88807a6a7780: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 85.762922][ T4941] >ffff88807a6a7800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.770974][ T4941] ^ [ 85.775823][ T4941] ffff88807a6a7880: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 85.783883][ T4941] ffff88807a6a7900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.791945][ T4941] ================================================================== [ 85.800009][ T4941] Disabling lock debugging due to kernel taint [ 85.881056][ T4941] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 85.888307][ T4941] CPU: 0 PID: 4941 Comm: syz.3.185 Tainted: G B syzkaller #0 [ 85.896997][ T4941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 85.907065][ T4941] Call Trace: [ 85.910354][ T4941] [ 85.913298][ T4941] dump_stack_lvl+0x168/0x230 [ 85.918111][ T4941] ? show_regs_print_info+0x20/0x20 [ 85.923353][ T4941] ? load_image+0x3b0/0x3b0 [ 85.927881][ T4941] panic+0x2c9/0x7f0 [ 85.931794][ T4941] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 85.937997][ T4941] ? bpf_jit_dump+0xd0/0xd0 [ 85.942526][ T4941] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 85.948437][ T4941] ? _raw_spin_unlock+0x40/0x40 [ 85.953306][ T4941] ? ax25_unregister_dev_sysctl+0x33/0xa0 [ 85.959042][ T4941] check_panic_on_warn+0x80/0xa0 [ 85.964002][ T4941] ? ax25_unregister_dev_sysctl+0x33/0xa0 [ 85.969746][ T4941] end_report+0x6d/0xf0 [ 85.973927][ T4941] kasan_report+0x102/0x130 [ 85.978448][ T4941] ? ax25_unregister_dev_sysctl+0x33/0xa0 [ 85.984192][ T4941] ax25_unregister_dev_sysctl+0x33/0xa0 [ 85.989762][ T4941] ax25_dev_device_down+0x5b/0x520 [ 85.994902][ T4941] ax25_device_event+0x4b4/0x4f0 [ 85.999867][ T4941] raw_notifier_call_chain+0xcb/0x160 [ 86.005280][ T4941] dev_close_many+0x28d/0x400 [ 86.009985][ T4941] ? _raw_spin_unlock+0x40/0x40 [ 86.014858][ T4941] ? __dev_open+0x420/0x420 [ 86.019390][ T4941] ? bond_netdev_event+0x159/0xea0 [ 86.024523][ T4941] ? try_to_del_timer_sync+0x165/0x1b0 [ 86.030017][ T4941] dev_close+0x14c/0x200 [ 86.034285][ T4941] ? __dev_close_many+0x2a0/0x2a0 [ 86.039330][ T4941] ? macvlan_device_event+0x10b/0x930 [ 86.044735][ T4941] bpq_device_event+0x2f4/0x9c0 [ 86.049608][ T4941] ? lockdep_rtnl_is_held+0x22/0x30 [ 86.054834][ T4941] ? team_device_event+0x11b/0x9e0 [ 86.059975][ T4941] raw_notifier_call_chain+0xcb/0x160 [ 86.065368][ T4941] dev_close_many+0x28d/0x400 [ 86.070081][ T4941] ? __dev_open+0x420/0x420 [ 86.074626][ T4941] ? lock_chain_count+0x20/0x20 [ 86.079495][ T4941] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 86.085708][ T4941] dev_close+0x14c/0x200 [ 86.089983][ T4941] ? __dev_close_many+0x2a0/0x2a0 [ 86.095159][ T4941] ? __local_bh_enable_ip+0x12a/0x1b0 [ 86.100647][ T4941] ? _local_bh_enable+0xa0/0xa0 [ 86.105518][ T4941] bond_setup_by_slave+0x61/0x3a0 [ 86.110566][ T4941] bond_enslave+0x77c/0x3a40 [ 86.115190][ T4941] ? __lock_acquire+0x13ad/0x7c60 [ 86.120244][ T4941] ? bond_lower_state_changed+0x150/0x150 [ 86.125991][ T4941] ? apparmor_capable+0x12c/0x190 [ 86.131052][ T4941] ? bpf_lsm_capable+0x5/0x10 [ 86.135752][ T4941] ? full_name_hash+0x8e/0xe0 [ 86.140448][ T4941] bond_do_ioctl+0x2a2/0x8c0 [ 86.145060][ T4941] ? bond_eth_ioctl+0x200/0x200 [ 86.149940][ T4941] ? rcu_lock_acquire+0x30/0x30 [ 86.154817][ T4941] ? __mutex_lock_common+0x14ce/0x2390 [ 86.160307][ T4941] bond_siocdevprivate+0x13c/0x320 [ 86.165436][ T4941] ? __rwlock_init+0x140/0x140 [ 86.170231][ T4941] ? bond_do_ioctl+0x8c0/0x8c0 [ 86.175018][ T4941] ? do_raw_spin_unlock+0x11d/0x230 [ 86.180247][ T4941] ? __mutex_lock_common+0x14d8/0x2390 [ 86.185724][ T4941] ? full_name_hash+0x8e/0xe0 [ 86.190424][ T4941] dev_ifsioc+0xaf5/0xe70 [ 86.194779][ T4941] ? dev_ioctl+0x5e8/0xe50 [ 86.199220][ T4941] ? dev_ioctl+0xe50/0xe50 [ 86.203652][ T4941] ? full_name_hash+0x8e/0xe0 [ 86.208356][ T4941] dev_ioctl+0x5f9/0xe50 [ 86.212627][ T4941] ? get_user_ifreq+0xc7/0x170 [ 86.217415][ T4941] sock_ioctl+0x67b/0x6e0 [ 86.221762][ T4941] ? sock_poll+0x3f0/0x3f0 [ 86.226209][ T4941] ? bpf_lsm_file_ioctl+0x5/0x10 [ 86.231164][ T4941] ? security_file_ioctl+0x7c/0xa0 [ 86.236299][ T4941] ? sock_poll+0x3f0/0x3f0 [ 86.240749][ T4941] __se_sys_ioctl+0xfa/0x170 [ 86.245368][ T4941] do_syscall_64+0x4c/0xa0 [ 86.249804][ T4941] ? clear_bhb_loop+0x30/0x80 [ 86.254499][ T4941] ? clear_bhb_loop+0x30/0x80 [ 86.259197][ T4941] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.265107][ T4941] RIP: 0033:0x7fa88fc5afc9 [ 86.269526][ T4941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.289137][ T4941] RSP: 002b:00007fa88de80038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.297546][ T4941] RAX: ffffffffffffffda RBX: 00007fa88feb2180 RCX: 00007fa88fc5afc9 [ 86.305509][ T4941] RDX: 0000200000000180 RSI: 00000000000089f0 RDI: 0000000000000008 [ 86.313473][ T4941] RBP: 00007fa88fcddf91 R08: 0000000000000000 R09: 0000000000000000 [ 86.321441][ T4941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.329404][ T4941] R13: 00007fa88feb2218 R14: 00007fa88feb2180 R15: 00007ffcc25d8e88 [ 86.337376][ T4941] [ 86.340698][ T4941] Kernel Offset: disabled [ 86.345032][ T4941] Rebooting in 86400 seconds..