last executing test programs: 5.004499258s ago: executing program 3 (id=408): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000003200)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r6, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0) recvmsg(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r7, &(0x7f00000000c0), 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000020101010000000000000000000000000800084000000000080015400000004008061a4000000000"], 0x2c}}, 0x0) sendto$l2tp(r7, &(0x7f0000000040)="e5786a0d000000000000c83b", 0x5d, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000080)=0x19e9, 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a8010c300"/25], 0x34}}, 0x0) 3.850193269s ago: executing program 4 (id=419): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x18, 0x4, 0xfff, 0x89, 0x4e9}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="e3ffffff", @ANYRES16=r4, @ANYBLOB="040029bd5000fedbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000804) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) write$cgroup_int(r3, &(0x7f00000000c0), 0x12) syz_emit_ethernet(0x66, &(0x7f0000000980)=ANY=[@ANYRES8=r3, @ANYRESOCT=r0, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'macsec0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x60c003a0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r6, 0x22a0b}}, 0x20}}, 0x0) 2.433820218s ago: executing program 0 (id=425): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000379000/0x2000)=nil, 0x2000, 0x0, 0x40010, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}}, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000440)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100"], 0x4c}}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x41) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000200)='bridge0\x00') bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x0, 0x4, 0x4, 0x8}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x89a3, &(0x7f0000000200)='bridge0\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0) 2.426354855s ago: executing program 4 (id=426): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002ac0)=@delchain={0x16c, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0x12c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x6c, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0xac, 0x6, [@m_nat={0x7c, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @broadcast}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x16c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x1f, 0x80000001, 0xffffff5d, 0x2161, 0x1, 0xfffffc00, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@generic={&(0x7f00000005c0)='./file0\x00', 0x0, 0x10}, 0x18) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {0x4}}}, &(0x7f0000000200)='syzkaller\x00', 0x4, 0xf7, &(0x7f0000001e40)=""/4093}, 0x21) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) pipe(&(0x7f0000000300)) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0xc0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4}, 0x48) bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@o_path={&(0x7f0000000600)='./file0\x00', 0x0, 0x4000, r2}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{0x1}, &(0x7f0000000800), &(0x7f0000000840)='%pI4 \x00'}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000000)={0x0, 0x1000}) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x2f08, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000000200000000deffe765db42db1f2248bd76a500000000000c00018006000340000000000c000380"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x7b}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.338565993s ago: executing program 3 (id=427): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000016c0)={0x0, 0x40000000, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r1, 0x1}, 0x1c}}, 0x0) 2.224658939s ago: executing program 4 (id=429): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) socket$nl_route(0x10, 0x3, 0x0) poll(&(0x7f0000000340)=[{}, {0xffffffffffffffff, 0x4542}, {r2}], 0x3, 0xfffffbff) 2.200312175s ago: executing program 3 (id=430): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) recvmsg$unix(r1, &(0x7f0000000140)={0x0, 0x5000000, 0x0, 0x0, 0x0, 0x30}, 0x181) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000002c0), 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000010c0)={&(0x7f0000001580)=ANY=[], 0x0, 0xfb, 0x0, 0x0, 0x80}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x1a, 0x7, 0x80000000, 0x0, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) 2.0358714s ago: executing program 0 (id=432): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x4}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}]}]}, 0x30}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000c6000100250000008510000001000000"], &(0x7f0000000100)='GPL\x00', 0x5, 0xf6, &(0x7f0000000180)=""/246}, 0x90) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000001b80)={0x1, 0x6, @status={[0x7fffffffffffffff, 0x5, 0x1, 0x8, 0x7, 0x3f]}, [0x4, 0x6, 0x7, 0x200000ed1, 0x7fffffff, 0x9, 0x4, 0x8, 0x0, 0x2, 0x1, 0x0, 0xfffffffffffffffe, 0x1e, 0xfffffffffffffffb, 0x0, 0x0, 0x5, 0x100, 0x401, 0x1ff, 0x6, 0xa9, 0x7, 0x3f, 0xfffffffffffffff7, 0x9a39, 0x81, 0x7d, 0x2, 0x1, 0x1, 0x4c6, 0x4, 0xec, 0x1, 0x40, 0x1, 0xfffffffffffffffe, 0x8000ad70, 0xa82, 0xff, 0x80000001, 0x3, 0xffffffffffffffe1, 0x8, 0x10ffff, 0xd9d, 0x200000000000009, 0x1, 0x200003, 0xffffffffffffffff, 0x1, 0x100, 0x2, 0x8000000000000000, 0x3, 0x7, 0x7f, 0x8, 0x1, 0x0, 0x5, 0xfffffffffffff801]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x22, 0x2, 0x4) syz_80211_inject_frame(&(0x7f0000000480)=@device_b, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1c8) getsockname$llc(r6, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c200000020603000000000010000000001f000318e3148331ee6cd5e2b6dac94100001cf300"/51], 0x1c}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000140), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x8004}, 0xc1) getsockopt$sock_buf(r8, 0x1, 0x1c, &(0x7f0000000b80)=""/4096, &(0x7f0000000240)=0x1000) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00'}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r11, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d00)={0x3c, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x3c}}, 0x0) 1.928053571s ago: executing program 1 (id=433): syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_emit_ethernet(0x93, &(0x7f0000000d40)={@random="72a6de6fdf13", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x3, 0x7, 0x3d, 0x64, 0x0, 0x12, 0x6, 0x0, @loopback, @empty, {[@timestamp_addr={0x44, 0x4}, @ssrr={0x89, 0x7, 0x8c, [@multicast1]}, @timestamp_prespec={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {[@eol]}}, {','}}}}}}, 0x0) 1.81587877s ago: executing program 1 (id=434): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000002c0)={0x3f, 0x2, 0xc000, 0xfffffff7, 0x80, 0x100, 0x5, 0x44b5, 0x0}, &(0x7f0000000300)=0x20) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000340)={r2, 0x8}, &(0x7f0000000380)=0x8) sendmmsg(r0, &(0x7f0000007fc0), 0x2d, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_buf(r3, 0x0, 0x15, &(0x7f0000000000)='b', 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="280000001300f5d1000000000900000000000100", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00\x00\x00\x00\x00'], 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000825bd7000fe0c009900d308000007000000130013008505b060b205020c0196ec16ecb024001600bd00060000020100ff010800b60fff"], 0x4c}, 0x1, 0x0, 0x0, 0x44881}, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x44, r10, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r12}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}]]}, 0x44}}, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb79, 0xb0}, 0x48) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r14}, 0x10) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000200)=r15, 0x4) sendmsg$sock(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) 1.629669316s ago: executing program 1 (id=435): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="ad42ac099088b6bc1e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000004900)="e8", 0x1}], 0x1}, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x10022, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x24, 0x4, 0x2}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r3, &(0x7f00000002c0)="d2", 0x20000000}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r3, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r4, &(0x7f0000000300), &(0x7f00000005c0)=""/255}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r5}, 0x8) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xf, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0xba}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$tipc(0x1e, 0x5, 0x0) socket$inet6(0xa, 0x800, 0x3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) socket(0x10, 0x80803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180), 0x48) socket$nl_route(0x10, 0x3, 0x0) 1.270754005s ago: executing program 0 (id=437): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) connect$pppl2tp(r2, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) r5 = epoll_create1(0x80000) epoll_pwait(r5, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xd9c4, &(0x7f0000000100)={[0x5]}, 0x8) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x1, 0x3}}, 0x26) socket$phonet(0x23, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r8, @ANYBLOB="01000000000000000000010000000c00050000000000000000000c0002000000000000000000040007800c000800000000000000000008000100000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r9, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES64=r7], 0x90}}, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x111, 0x4, 0x0, 0x20001f00) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"/400], 0x190) 1.2698329s ago: executing program 4 (id=438): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000040)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x101, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb646, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0xffffffff, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x7}, 0x20) sendmsg$inet6(r1, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev, 0x800}, 0x1c, 0x0, 0x0, &(0x7f0000000d80)=ANY=[], 0x50}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = accept4$unix(0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000580)=0x6e, 0xc00) recvmsg$unix(r5, &(0x7f0000000d40)={&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000740)=""/224, 0xe0}, {&(0x7f0000000840)=""/116, 0x74}, {&(0x7f0000000640)=""/22, 0x15}, {&(0x7f00000008c0)=""/202, 0xca}, {&(0x7f00000009c0)=""/196, 0xc4}, {&(0x7f0000000ac0)}, {&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/60, 0x3c}], 0x8, &(0x7f0000000cc0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}, 0x40002020) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000000101040000ff0f0000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000100005"], 0x48}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000008700850000007b000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYRESOCT=r7], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x15}, 0x90) socket$inet6(0xa, 0x0, 0x761) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8991, &(0x7f0000000700)={'bond0\x00'}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) 1.231723837s ago: executing program 1 (id=439): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001700)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xdc, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x14, 0x49, [0xfac0d, 0xfac06, 0xfac09, 0xfac01]}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_AKM_SUITES={0xc, 0x4c, [0xfac13, 0xfac01]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x18, 0x49, [0xfac09, 0xfac08, 0xfac04, 0xfac01, 0xfac0d]}, @NL80211_ATTR_AKM_SUITES={0x10, 0x4c, [0xfac10, 0xfac07, 0xfac11]}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_PMK={0x17, 0xfe, "4174c02b9c3286d51e61fb63a67d605d650319"}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x6ca1f1f756f3e91d}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x46}, @NL80211_ATTR_HE_OBSS_PD={0x34, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0xc}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x8}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x6}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "9809e669dc05bce3"}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000094}, 0x11) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r3 = socket$inet(0x2, 0x3, 0x2) socket$packet(0x11, 0x0, 0x300) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000006c0), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0x100, r4, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1c}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x100}}, 0x40101) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x0, 0x11, 0x148, 0x0, 0x10, 0x178, 0x2a8, 0x2a8, 0x178, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {0xffffffffffffffff, 0x7}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'vlan0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x20000000}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) accept4$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 1.097843074s ago: executing program 3 (id=441): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000100)=0x2cd5, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x12, &(0x7f00000007c0)=@raw=[@func, @func, @func, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @func, @snprintf], &(0x7f0000000780)='GPL\x00'}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x44, r3, 0x1, 0x0, 0x0, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010ffe50400"/20, @ANYRES32=0x0, @ANYBLOB="00000000310000001400128009000100626f6e6400000000040002800a000100aaaaaaaaaa000000"], 0x40}}, 0x0) accept$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @netrom}, [@netrom, @bcast, @netrom, @remote, @default, @default, @null]}, &(0x7f00000000c0)=0x48) 1.010797856s ago: executing program 3 (id=442): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r1) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000f00)=@delchain={0x730, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffe0}}, [@f_tcindex={{0xc}, {0x700, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_ACT={0x6f4, 0x7, [@m_ctinfo={0x110, 0x0, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x3f, 0x40, 0x0, 0x0, 0x600000}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x0, 0x0, 0x401}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x81, 0x6, "d18f3650879332999291258ad6ffa12814150c72a0533a02292c0479d256381c7203ced6288bfaba82a69933500a60ac3e5b706812f6a839d3858e86eca4a253250983a2b154c912ed054adb1192aa1426ef984de92ec581f4c3ce607dd1d481cb2ddac4878a4ab28dd1c803fba18ae529ad6a840f7924719398597fac"}, {0xc}, {0xc}}}, @m_ctinfo={0xec, 0x0, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x2}, @TCA_CTINFO_ZONE={0x6}, @TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0xffffffffffffffff}}, @TCA_CTINFO_ZONE={0x6}]}, {0x6d, 0x6, "d5e4f3d62f7b94686583c8e4cae9c16bd9bf05cfc0ee1d62fe2902b9727278fcb4f61cd4ecdd7945addc60fd249a4e586d2a695a1c6798eeb8982f2afb8c11c06ddd49374d3c6a791dec041e805abdb6c220e82418cfd3f62e21b15ec61d152c2ce2806d58cc932071"}, {0xc}, {0xc}}}, @m_mpls={0xec, 0x0, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0xa5, 0x6, "5e532d48e85cbf25c322c210ef95676bc8c353a55a444544dad0690774b9bce1dbbf7cd3e593aac4ad36d2d5f90212fd0a0eabd992c300dc6e8ba3574714a0bc1888c026fcea34eca1dfbb03faafd5e137faadce1645a66116b175ce26e22c526537b7f9c2d360f430c2eefce0b96adfe24b56320b2bc3e7b02504c3a6f3ce6074e438968d9e132556d5d9d126c2c91eb1590703f3215f67b7c5ee864590a41d0e"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mirred={0x408, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xc62b, 0x5, 0x6, 0x3f, 0xffffb822}, 0x3}}]}, {0x3b9, 0x6, "72a3fb59ce5776b67aedacffbfb88ae949688d113f5b64214372d872c22a0ee46cbe572b437776bfb8d1409ccaa6ac375553cf697e01e293bedffbd6d44a95ea4fb4c3ea5e752c35033587181632ae6e0b05af84907d28ae7fdb28c86263447e5100f94209bc35f25be7e0843f53a95791e722a3345e4b7a8c1c3ea9c57fc2658b2e968857808e9eb152cd4321f4985af5fea60ca8e796ef941c72b579dd58cd29daaebeaee87ffc95aa7cf7653faf0f364d975ed582b76be9163d9611bc025c8d98e39e2bd9450fc579382be5585ce382ba118b017cfef5cf4ac486d195d390c8a10381c02242635c72aeec50001e05dc9adefa9aa7a2ffe9eef2a7c3e8ced449662729a87c1ccf8fe7b9925512765a3b781ad7d31fd26693e38f423945cc87c65a458e0c08c9a1a334ffef2ee112b0f436837333df441b97c6995e544eb13bb394f903bef3b0f0b83926da9b845457fd66f3ead3de7f394a024bf6cd8bc6055ece655b585a14735c4996dd1ee3328352c970e616ac41596542077202edfbffec65e493db6cf8648fc656456e66cfa7d6b97636b4f38936f4493b5c1f84083060159d50143351595c4801cdc788da50d0527f608cc30068195d52f49f624abf15d2b01979265289d26e8b377146f6107b3aa6618e61fcf86068c93ba2609f6b9e76f832a8e4ec6eff4e6c35e844151b6385bac58c55a4181492cac144fd9437553f1e2b8ec36ee810073e6db69172ab2a8b963d4103c34a4459e47cc3b9753d469ef2c8ea02fae6f009ac5fa2f42bbeaa6b367e58eb920f7e9eec0d9e1cc67e75a1a4853f98ce26b2eaa557bd49ba2e8854c1288bc829602d8357949ca77fc7fbf9c0c1414a94f926f6010baf58740f6eebdfa5b7bc7b58e635bb59082cc89f41a9f5b35e8c6cfa2aa6ded118af245152bcce6394bd00b6438b9d2b9003501e5c9aa3d5ace1298c6c7c62518ecef313360f992dce3ce1d135841163300c072c51ca95891dc1b55c50f9e1924748badca63776e578c5a0dea5101851b633ab823e11c2fde11cffae4a2eabeb2f3bba946a4583a11a3fd4818a7103e51241113ff5124369ad0c5139c291892f01f40dca85ed9df3ad462f57fe4d9e4f2ab9edff440d29c217871288c37d85c9d4209cf8f75829f445e8f8c931b4907ef47584f460adedf6a09b4fee812d8a3c0ebc22a218549c3f2de298b715a49169408c1e0494b07e69a4a898b948e715ada71202ba3f15d093e113b128ddb6393b517bdf3a69b479ebae815d1f8ce524ea3a1bddbcd5c51d2993a3a804c0c4043320c9ead8e64cbf8d5744aeb8f06a6538b0e45b4e85508477b3"}, {0xc}, {0xc}}}]}]}}]}, 0x730}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) recvmsg(r2, &(0x7f0000000340)={&(0x7f0000000000)=@isdn, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)=""/13, 0xd}, {&(0x7f0000000140)=""/246, 0xf6}], 0x2, &(0x7f0000000300)=""/48, 0x30}, 0x23) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) connect$vsock_stream(r1, &(0x7f00000003c0)={0x28, 0x0, 0xffffffff}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f0000000380)) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)={0x3c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_FLAGS2={0xc}]}, 0x3c}}, 0x0) 987.641327ms ago: executing program 1 (id=443): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000300)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000015000000"], 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r4, 0x300, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000006af9000000000000001ff0000000000000000000"], 0x18}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x2, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x1d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000300), 0x75, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="38000000000000000000f0fffffffffff51110445aaf0e717798cbf4070a8f38a203a29e7f2fc7db1e10d05004d93f", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x20, r6, 0x333, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x400002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='ext4_ext_handle_unwritten_extents\x00', r8}, 0x9) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000004c0), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r10, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0x24, r11, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x24}}, 0x800) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x6, 0x4, 0x4001}, 0x48) 971.307073ms ago: executing program 4 (id=444): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) connect$pppl2tp(r2, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) r5 = epoll_create1(0x80000) epoll_pwait(r5, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xd9c4, &(0x7f0000000100)={[0x5]}, 0x8) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x1, 0x3}}, 0x26) socket$phonet(0x23, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r8, @ANYBLOB="01000000000000000000010000000c00050000000000000000000c0002000000000000000000040007800c000800000000000000000008000100000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r9, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES64=r7], 0x90}}, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x111, 0x4, 0x0, 0x20001f00) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"/400], 0x190) 790.496662ms ago: executing program 2 (id=445): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000002c0)={0x3f, 0x2, 0xc000, 0xfffffff7, 0x80, 0x100, 0x5, 0x44b5, 0x0}, &(0x7f0000000300)=0x20) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000340)={r2, 0x8}, &(0x7f0000000380)=0x8) sendmmsg(r0, &(0x7f0000007fc0), 0x2d, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_buf(r3, 0x0, 0x15, &(0x7f0000000000)='b', 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="280000001300f5d1000000000900000000000100", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00\x00\x00\x00\x00'], 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000825bd7000fe0c009900d308000007000000130013008505b060b205020c0196ec16ecb024001600bd00060000020100ff010800b60fff"], 0x4c}, 0x1, 0x0, 0x0, 0x44881}, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x44, r10, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r12}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}]]}, 0x44}}, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb79, 0xb0}, 0x48) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r14}, 0x10) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000200)=r15, 0x4) sendmsg$sock(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) 624.21068ms ago: executing program 3 (id=446): socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x0, 0x2}, 0x8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x200000000000000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 558.81573ms ago: executing program 1 (id=447): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x4}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}]}]}, 0x30}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000c6000100250000008510000001000000"], &(0x7f0000000100)='GPL\x00', 0x5, 0xf6, &(0x7f0000000180)=""/246}, 0x90) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000001b80)={0x1, 0x6, @status={[0x7fffffffffffffff, 0x5, 0x1, 0x8, 0x7, 0x3f]}, [0x4, 0x6, 0x7, 0x200000ed1, 0x7fffffff, 0x9, 0x4, 0x8, 0x0, 0x2, 0x1, 0x0, 0xfffffffffffffffe, 0x1e, 0xfffffffffffffffb, 0x0, 0x0, 0x5, 0x100, 0x401, 0x1ff, 0x6, 0xa9, 0x7, 0x3f, 0xfffffffffffffff7, 0x9a39, 0x81, 0x7d, 0x2, 0x1, 0x1, 0x4c6, 0x4, 0xec, 0x1, 0x40, 0x1, 0xfffffffffffffffe, 0x8000ad70, 0xa82, 0xff, 0x80000001, 0x3, 0xffffffffffffffe1, 0x8, 0x10ffff, 0xd9d, 0x200000000000009, 0x1, 0x200003, 0xffffffffffffffff, 0x1, 0x100, 0x2, 0x8000000000000000, 0x3, 0x7, 0x7f, 0x8, 0x1, 0x0, 0x5, 0xfffffffffffff801]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x22, 0x2, 0x4) syz_80211_inject_frame(&(0x7f0000000480)=@device_b, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1c8) getsockname$llc(r6, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c200000020603000000000010000000001f000318e3148331ee6cd5e2b6dac94100001cf300"/51], 0x1c}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000140), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40010000150a0101000000000000000002000001fe0008000f2e19b9ec7251e4d3f7d09c0e46adadb0478dfecd961590c7d7d07d4426a818feffd2a06567f79ee43c26380930e7331838cca8aa60b8141356fc0ac303aa2702040b6d5601f383bad066750155c052041de427f442b2fc772cf77d9f0f40804afe7e666f4e95b689b645125e8d2bbdc4f4946c0ffa524f6f488bbf225ad82d69859578612a58da1f9f639cb1d2e95de9eab2a8e3c18b631f534ec68d011713f4fa14c960705175ec35030607de620fe57859eefe2f566350ac73c7a3fe042b8448cc13143a5961f14df260d145c0087da7bb0448b9ecd440af93170bca3d77f1faa20bfba4b69723535520f9ae767b4d9dc353f22e8600000900010073797a31000000000900010073797a3100000000110008001004a8ce4906b1f88a06768371000000"], 0x140}, 0x1, 0x0, 0x0, 0x8004}, 0xc1) getsockopt$sock_buf(r8, 0x1, 0x1c, &(0x7f0000000b80)=""/4096, &(0x7f0000000240)=0x1000) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00'}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r11, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d00)={0x3c, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x3c}}, 0x0) 542.672133ms ago: executing program 2 (id=448): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="200018bd7000fbdbdf25810000000c009900010000005391cdba84d2471809510000"], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x980) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="40000000f200010000000000000080070a000000", @ANYRES32=r2, @ANYBLOB="14000200fc02000000000000000000000000000014000100fc00"/40], 0x40}}, 0x0) 410.600632ms ago: executing program 2 (id=449): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x5}, 0x10) write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000000000200020000", 0x1c) unshare(0x8040480) r3 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) poll(&(0x7f0000000180)=[{r3}], 0x1, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x2000}, 0x4) sendmmsg$inet(r1, &(0x7f0000001c40)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000600)="a90900000000746400006277000000003552bde5c064c6", 0x17}, {&(0x7f0000000640)="174640b6d80fb2e6dca3af8832", 0xd}], 0x2}}], 0x1, 0x0) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 406.984806ms ago: executing program 2 (id=450): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005080)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="09dea4afb76288fa135537845f3188b4cb06", 0x12}, {&(0x7f0000000340)="d5bb69fd2ec3a88c5df48b69469a", 0xe}], 0x2}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003a40)=[{{0x0, 0xffffffffffffff79, &(0x7f0000000580)=[{&(0x7f0000000980)=""/189, 0xbd}, {&(0x7f0000000040)=""/230}, {&(0x7f0000000140)=""/124}, {&(0x7f00000001c0)=""/192}, {&(0x7f0000000280)=""/57}, {&(0x7f0000000380)=""/88}]}}], 0x4000064, 0x0, 0x0) 362.907602ms ago: executing program 2 (id=451): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001700)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xdc, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x14, 0x49, [0xfac0d, 0xfac06, 0xfac09, 0xfac01]}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_AKM_SUITES={0xc, 0x4c, [0xfac13, 0xfac01]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x18, 0x49, [0xfac09, 0xfac08, 0xfac04, 0xfac01, 0xfac0d]}, @NL80211_ATTR_AKM_SUITES={0x10, 0x4c, [0xfac10, 0xfac07, 0xfac11]}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_PMK={0x17, 0xfe, "4174c02b9c3286d51e61fb63a67d605d650319"}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x6ca1f1f756f3e91d}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x46}, @NL80211_ATTR_HE_OBSS_PD={0x34, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0xc}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x8}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x6}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "9809e669dc05bce3"}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000094}, 0x11) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$inet(0x2, 0x3, 0x2) socket$packet(0x11, 0x0, 0x300) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000006c0), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0x100, r5, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1c}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x100}}, 0x40101) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x0, 0x11, 0x148, 0x0, 0x10, 0x178, 0x2a8, 0x2a8, 0x178, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {0xffffffffffffffff, 0x7}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'vlan0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x0, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x20000000}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) accept4$inet(r7, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 333.023955ms ago: executing program 0 (id=452): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x18, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x810) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x0, 0x3}, 0x10) bind$tipc(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r3, 0xc) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @local}, 0x10) getsockopt$inet_int(r4, 0x10d, 0x8a, &(0x7f0000000040), &(0x7f0000000080)=0x4) 206.281011ms ago: executing program 2 (id=453): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x4) r2 = socket$kcm(0x29, 0xf, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f0000000140)) sendmsg$kcm(r2, &(0x7f0000000180)={&(0x7f0000000200)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000580)="cfd97c09ba5b4f95831e3274a4ac6a920a1406204a3adae9c403fb1aa1786ed339a05d4edf9d609c35750e38df8698cc66698eb5a143db9612ba8e20dc802eb46e53debe64b68454c93ee5d54414bd97acaac112d1562aa176c392f9d7091ec2a329f70aadc5e41cb6eb944c1408ef1150fe89e5d313aa0e13c1565ac496715e8cfba1a91201e0a57475174a4c54accb42c1ac520dd711869bb1b8845c4d8030d6a58526c1718f", 0xa7}, {&(0x7f0000000000)="4a962da67200b25fa6", 0x9}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000740)="1900ee968039bd36fba164de7de7cfa8c37aef749baa9748c686a668056f1236866e53b47de0ad9fc3d2090ef15914226494503a92971d6a956753fd849298025f42e778ae544d978e20987404cf14a8d3dc897cbabbda5c865428a404ce07b8620635604bc06492a4ab12b2ca39fcd0bcef50096b1c15dd7b180ac5c723352abdca7a5f13fd71b80614abdc1e4139ffededf84842804e65cc9b50f7eb4ee44097915fd5e540e743", 0xa8}, {&(0x7f0000000800)="4112139f061284b96c5afccaffc3533920169a16965849a5465449f5991713d23a61c01b9588327df8d7255b56995333b2b14bcab826a0a794966d2b3de72899849f2f5078a4597e5a8703a3afdca491244e2c08c0defe90828745bd406e28b1738ffc2dfa1789d36a93e4cb4abcf7bfa214592e35be1c99869c8a3cbd3b9df0b45a1cdd78471aa5c255f1343a758a8d6b3fd945f8091a76fb0427815a2906327cbac8d9c3195e320fdbfbc09841803fb9a3af0fbbc5d14f8a4e5f83935b", 0xbe}], 0x6}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)={0x6c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x3e, 0x33, @assoc_resp={{{}, {}, @device_b, @broadcast}, 0x400, 0x1a, @default, @void, @val={0x2d, 0x1a, {0xc, 0x1, 0x3, 0x0, {0x7fffffff, 0x1f, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0, 0x1f, 0x5}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0xe688, 0x81f0, 0x0, 0x7, 0x1]}]}, 0x6c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x54, 0x30, 0xb, 0x0, 0x0, {}, [{0x40, 0x1, [@m_ct={0x3c, 0x1, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @private=0xa010102}, @TCA_CT_ACTION={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x54}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000200000000000079104000000000009500000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0x17, 0xffff}, {0x2, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x4}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x4}, @TCA_FQ_FLOW_PLIMIT={0x8}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0xe}]}}]}, 0x50}}, 0x0) r10 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r10, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r10, &(0x7f0000000200)={&(0x7f0000000500)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, 0x0}, 0x0) recvmmsg(r10, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/188, 0xbc}], 0x1, &(0x7f0000000340)=""/69, 0x45}, 0xe36}, {{&(0x7f0000000740)=@l2, 0x80, &(0x7f0000000bc0)=[{&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f0000000980)=""/190, 0xbe}, {&(0x7f0000000d00)=""/232, 0xe8}, {&(0x7f00000008c0)=""/169, 0xa9}, {&(0x7f0000000040)=""/36, 0x24}, {0x0}, {&(0x7f0000000140)=""/60, 0x3c}, {&(0x7f0000000a80)=""/168, 0xa8}, {&(0x7f0000000b40)=""/89, 0x59}, {&(0x7f0000000440)=""/17, 0x11}], 0xa}, 0x3}], 0x2, 0x40000021, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0300120006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) 155.79355ms ago: executing program 0 (id=454): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001700)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xdc, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x14, 0x49, [0xfac0d, 0xfac06, 0xfac09, 0xfac01]}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_AKM_SUITES={0xc, 0x4c, [0xfac13, 0xfac01]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x18, 0x49, [0xfac09, 0xfac08, 0xfac04, 0xfac01, 0xfac0d]}, @NL80211_ATTR_AKM_SUITES={0x10, 0x4c, [0xfac10, 0xfac07, 0xfac11]}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_PMK={0x17, 0xfe, "4174c02b9c3286d51e61fb63a67d605d650319"}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x6ca1f1f756f3e91d}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x46}, @NL80211_ATTR_HE_OBSS_PD={0x34, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0xc}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x8}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x6}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "9809e669dc05bce3"}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000094}, 0x11) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r3 = socket$inet(0x2, 0x3, 0x2) socket$packet(0x11, 0x0, 0x300) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000006c0), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0x100, r4, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1c}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x100}}, 0x40101) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x0, 0x11, 0x148, 0x0, 0x10, 0x178, 0x2a8, 0x2a8, 0x178, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {0xffffffffffffffff, 0x7}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'vlan0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x20000000}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) accept4$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 10.16539ms ago: executing program 4 (id=455): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117a004c1000"/32], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x38) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001800010300000000000000000a800000000300070000000014000100fe8000000000000086"], 0x30}}, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x10) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000001040), 0x8) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001080)={'ipvlan1\x00', 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @private2, @local, {[@routing={0x84}], "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"}}}}}, 0x0) write$binfmt_script(r5, &(0x7f0000001000)={'#! ', '', [], 0xa, "5bac4ea55ee61d2f7ea330f73abf7e839916baa5b49253f8"}, 0x1c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000fc0)={@private2, 0x7ff, 0x0, 0x2, 0x8, 0x8}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x3ff, 0x9, 0x0, 0xa04, r5, 0xf0ad, '\x00', 0x0, r1, 0x2, 0x1, 0x4}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$EXT4_IOC_SETFSUUID(r4, 0x4008662c, &(0x7f00000000c0)={0x10, 0x0, "76787e3885e348aefc1f5fd41f8d20f2"}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)={0x1c, r7, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) 0s ago: executing program 0 (id=456): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0x8}}]}, &(0x7f0000000200)='syzkaller\x00', 0x8, 0xff9, &(0x7f0000002300)=""/4089}, 0x90) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000640), 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r2, 0x400, 0x0, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x34}}, 0x40945) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x44, 0x4, 0x4b0, 0xffffffff, 0x310, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x3e0, 0x3e0, 0x3e0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [], [], 'nr0\x00', 'nr0\x00'}, 0x203, 0xa8, 0xd0, 0x8502}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0x118, 0x240, 0x0, {0x0, 0x11}, [@common=@ipv6header={{0x28}}, @common=@hbh={{0x48}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:modules_conf_t:s0\x00'}}}, {{@ipv6={@private2, @mcast2, [], [], 'hsr0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x1a0, 0x0, 0x1a0, 0x0, 0x340, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'ip_vti0\x00', 'veth1_vlan\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [], [0x0, 0x0, 0xffffffff], 'team0\x00', 'macvlan1\x00', {}, {}, 0x2, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@local, @empty, [], [], 'wg0\x00', 'caif0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [], [], 'veth1_virt_wifi\x00', 'pimreg\x00', {}, {}, 0x0, 0x0, 0x2, 0x24}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x38}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@private0}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) bpf$MAP_CREATE(0x16, &(0x7f00000009c0), 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.80' (ED25519) to the list of known hosts. [ 65.543662][ T5083] cgroup: Unknown subsys name 'net' [ 65.684572][ T5083] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.328080][ T5083] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.078554][ T5095] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.103148][ T5097] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.122193][ T5107] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.124886][ T5108] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.131918][ T5097] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.144602][ T5107] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.146597][ T5108] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.153881][ T5107] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.162568][ T5110] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.176917][ T5108] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.181350][ T5097] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.187124][ T5108] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.192375][ T5107] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.198820][ T5108] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.205945][ T5097] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.213729][ T5108] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.219591][ T5107] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.226654][ T5110] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.233391][ T5107] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.240296][ T5108] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.257813][ T5107] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.258099][ T5110] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 68.272119][ T5107] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.272460][ T5110] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.279799][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.294795][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.295057][ T5107] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.314522][ T4489] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.325128][ T5110] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.335224][ T5110] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.874178][ T5092] chnl_net:caif_netlink_parms(): no params data found [ 68.958321][ T5093] chnl_net:caif_netlink_parms(): no params data found [ 68.996026][ T5098] chnl_net:caif_netlink_parms(): no params data found [ 69.110256][ T5099] chnl_net:caif_netlink_parms(): no params data found [ 69.213193][ T5092] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.220495][ T5092] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.228358][ T5092] bridge_slave_0: entered allmulticast mode [ 69.235780][ T5092] bridge_slave_0: entered promiscuous mode [ 69.301339][ T5092] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.308694][ T5092] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.316383][ T5092] bridge_slave_1: entered allmulticast mode [ 69.323419][ T5092] bridge_slave_1: entered promiscuous mode [ 69.342474][ T5098] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.349857][ T5098] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.357345][ T5098] bridge_slave_0: entered allmulticast mode [ 69.364342][ T5098] bridge_slave_0: entered promiscuous mode [ 69.372295][ T5098] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.379705][ T5098] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.387207][ T5098] bridge_slave_1: entered allmulticast mode [ 69.394225][ T5098] bridge_slave_1: entered promiscuous mode [ 69.418167][ T5093] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.425548][ T5093] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.432774][ T5093] bridge_slave_0: entered allmulticast mode [ 69.440827][ T5093] bridge_slave_0: entered promiscuous mode [ 69.465261][ T5104] chnl_net:caif_netlink_parms(): no params data found [ 69.494075][ T5093] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.501424][ T5093] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.508758][ T5093] bridge_slave_1: entered allmulticast mode [ 69.516431][ T5093] bridge_slave_1: entered promiscuous mode [ 69.531206][ T5092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.544758][ T5092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.565118][ T5098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.640390][ T5098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.665201][ T5093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.702770][ T5092] team0: Port device team_slave_0 added [ 69.731206][ T5098] team0: Port device team_slave_0 added [ 69.739887][ T5093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.760844][ T5099] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.768513][ T5099] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.775811][ T5099] bridge_slave_0: entered allmulticast mode [ 69.782868][ T5099] bridge_slave_0: entered promiscuous mode [ 69.793140][ T5092] team0: Port device team_slave_1 added [ 69.816532][ T5098] team0: Port device team_slave_1 added [ 69.851094][ T5099] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.858647][ T5099] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.866604][ T5099] bridge_slave_1: entered allmulticast mode [ 69.873529][ T5099] bridge_slave_1: entered promiscuous mode [ 69.941126][ T5093] team0: Port device team_slave_0 added [ 69.961791][ T5092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.968926][ T5092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.995546][ T5092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.008875][ T5092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.016478][ T5092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.042719][ T5092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.054555][ T5098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.061891][ T5098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.088481][ T5098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.101515][ T5098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.108976][ T5098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.141620][ T5098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.153235][ T5104] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.160433][ T5104] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.167946][ T5104] bridge_slave_0: entered allmulticast mode [ 70.175020][ T5104] bridge_slave_0: entered promiscuous mode [ 70.184545][ T5093] team0: Port device team_slave_1 added [ 70.218902][ T5099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.242121][ T5104] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.249551][ T5104] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.257614][ T5104] bridge_slave_1: entered allmulticast mode [ 70.264642][ T5104] bridge_slave_1: entered promiscuous mode [ 70.271366][ T5110] Bluetooth: hci1: command tx timeout [ 70.297181][ T5093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.304184][ T5093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.330227][ T5093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.345587][ T5099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.347272][ T5110] Bluetooth: hci0: command tx timeout [ 70.360863][ T5095] Bluetooth: hci4: command tx timeout [ 70.410406][ T5093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.417556][ T5093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.444141][ T5093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.449781][ T5110] Bluetooth: hci2: command tx timeout [ 70.454788][ T5095] Bluetooth: hci3: command tx timeout [ 70.493903][ T5092] hsr_slave_0: entered promiscuous mode [ 70.500778][ T5092] hsr_slave_1: entered promiscuous mode [ 70.512701][ T5104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.532353][ T5104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.544905][ T5099] team0: Port device team_slave_0 added [ 70.567525][ T5098] hsr_slave_0: entered promiscuous mode [ 70.573912][ T5098] hsr_slave_1: entered promiscuous mode [ 70.580377][ T5098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.590214][ T5098] Cannot create hsr debugfs directory [ 70.640121][ T5099] team0: Port device team_slave_1 added [ 70.686465][ T5104] team0: Port device team_slave_0 added [ 70.709345][ T5099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.716481][ T5099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.742948][ T5099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.773404][ T5093] hsr_slave_0: entered promiscuous mode [ 70.780047][ T5093] hsr_slave_1: entered promiscuous mode [ 70.786928][ T5093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.794516][ T5093] Cannot create hsr debugfs directory [ 70.814621][ T5104] team0: Port device team_slave_1 added [ 70.834692][ T5099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.841786][ T5099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.867810][ T5099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.008946][ T5099] hsr_slave_0: entered promiscuous mode [ 71.016151][ T5099] hsr_slave_1: entered promiscuous mode [ 71.022318][ T5099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.030014][ T5099] Cannot create hsr debugfs directory [ 71.064948][ T5104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.072499][ T5104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.099287][ T5104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.165000][ T5104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.172156][ T5104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.198851][ T5104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.428039][ T5104] hsr_slave_0: entered promiscuous mode [ 71.434583][ T5104] hsr_slave_1: entered promiscuous mode [ 71.442335][ T5104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.449976][ T5104] Cannot create hsr debugfs directory [ 71.601734][ T5092] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.613611][ T5092] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.632163][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.639646][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.657323][ T5092] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.669082][ T5092] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.757493][ T5093] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.782555][ T5093] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.795096][ T5093] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.819388][ T5093] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.859711][ T5098] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.872058][ T5098] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.892533][ T5098] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.925248][ T5098] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.998374][ T5099] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.020116][ T5099] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.030638][ T5099] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.045082][ T5099] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.192120][ T5092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.206171][ T5104] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.234005][ T5104] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.264699][ T5104] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.280293][ T5104] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.314973][ T5092] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.350510][ T5140] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.358170][ T5140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.366589][ T5095] Bluetooth: hci1: command tx timeout [ 72.403059][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.410270][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.425523][ T5110] Bluetooth: hci4: command tx timeout [ 72.431057][ T5095] Bluetooth: hci0: command tx timeout [ 72.483183][ T5098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.505571][ T5110] Bluetooth: hci3: command tx timeout [ 72.511110][ T5095] Bluetooth: hci2: command tx timeout [ 72.521943][ T5093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.555057][ T5098] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.579139][ T5099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.611980][ T5099] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.648438][ T5093] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.668397][ T5146] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.675686][ T5146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.686851][ T5146] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.693993][ T5146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.721946][ T5092] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.744429][ T5146] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.751658][ T5146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.762805][ T5146] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.770017][ T5146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.801218][ T5146] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.808810][ T5146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.851271][ T5146] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.858632][ T5146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.989523][ T5104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.043777][ T5099] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.056619][ T5099] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.115918][ T5098] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.156559][ T5104] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.241458][ T5092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.270998][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.278234][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.299995][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.307307][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.489517][ T5104] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.579746][ T5092] veth0_vlan: entered promiscuous mode [ 73.654325][ T5099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.673868][ T5093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.700061][ T5092] veth1_vlan: entered promiscuous mode [ 73.728176][ T5098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.826509][ T5104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.924774][ T5092] veth0_macvtap: entered promiscuous mode [ 73.956782][ T5098] veth0_vlan: entered promiscuous mode [ 73.966134][ T5099] veth0_vlan: entered promiscuous mode [ 73.994975][ T5092] veth1_macvtap: entered promiscuous mode [ 74.038323][ T5099] veth1_vlan: entered promiscuous mode [ 74.053236][ T5093] veth0_vlan: entered promiscuous mode [ 74.068558][ T5098] veth1_vlan: entered promiscuous mode [ 74.120646][ T5092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.141477][ T5092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.170941][ T5093] veth1_vlan: entered promiscuous mode [ 74.184557][ T5092] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.212519][ T5092] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.221493][ T5092] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.230782][ T5092] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.321431][ T5098] veth0_macvtap: entered promiscuous mode [ 74.348513][ T5098] veth1_macvtap: entered promiscuous mode [ 74.369728][ T5099] veth0_macvtap: entered promiscuous mode [ 74.410491][ T5099] veth1_macvtap: entered promiscuous mode [ 74.426522][ T5095] Bluetooth: hci1: command tx timeout [ 74.437319][ T5093] veth0_macvtap: entered promiscuous mode [ 74.461267][ T5104] veth0_vlan: entered promiscuous mode [ 74.500321][ T5093] veth1_macvtap: entered promiscuous mode [ 74.507539][ T5095] Bluetooth: hci0: command tx timeout [ 74.513191][ T5095] Bluetooth: hci4: command tx timeout [ 74.527778][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.540293][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.552333][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.568335][ T5104] veth1_vlan: entered promiscuous mode [ 74.582407][ T2881] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.590703][ T5110] Bluetooth: hci2: command tx timeout [ 74.590751][ T5110] Bluetooth: hci3: command tx timeout [ 74.592551][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.613530][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.624371][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.634998][ T2881] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.635830][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.657196][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.675037][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.685912][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.701709][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.738111][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.749178][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.762467][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.774621][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.784958][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.795784][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.807508][ T5099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.823169][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.834133][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.844214][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.854678][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.867239][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.880281][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.891175][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.901444][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.912407][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.922411][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.932935][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.944661][ T5099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.953812][ T5098] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.962699][ T5098] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.972557][ T5098] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.981612][ T5098] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.002075][ T5093] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.011440][ T5093] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.020430][ T5093] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.029512][ T5093] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.043536][ T1037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.052675][ T1037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.057759][ T5099] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.073002][ T5099] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.081952][ T5099] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.091976][ T5099] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.160110][ T5104] veth0_macvtap: entered promiscuous mode [ 75.221186][ T5104] veth1_macvtap: entered promiscuous mode [ 75.333565][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.344823][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.356016][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.366560][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.377119][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.388771][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.399181][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.416467][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.433721][ T5104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.462986][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.487527][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.498772][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.515255][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.525168][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.544223][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.561068][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.578637][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.593292][ T5104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.621942][ T2881] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.636748][ T2881] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.669113][ T5104] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.687766][ T5104] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.697192][ T5104] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.706352][ T5104] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.757689][ T2881] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.781202][ T2881] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.843813][ T1058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.852250][ T1058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.907392][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.920049][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.969298][ T2881] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.002187][ T2881] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.028663][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.041387][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.231517][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.272995][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.363886][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 76.379427][ T5188] netlink: 'syz.3.4': attribute type 11 has an invalid length. [ 76.425250][ T5188] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.445752][ T2881] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.464269][ T2881] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.507430][ T5095] Bluetooth: hci1: command tx timeout [ 76.586264][ T5095] Bluetooth: hci4: command tx timeout [ 76.586380][ T5110] Bluetooth: hci0: command tx timeout [ 76.665655][ T5110] Bluetooth: hci3: command tx timeout [ 76.665688][ T5095] Bluetooth: hci2: command tx timeout [ 77.312458][ T5210] netlink: 'syz.3.11': attribute type 1 has an invalid length. [ 77.512948][ T5214] Zero length message leads to an empty skb [ 77.620044][ T5220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.730124][ T5230] raw_sendmsg: syz.4.19 forgot to set AF_INET. Fix it! [ 77.853922][ T5235] netlink: 16 bytes leftover after parsing attributes in process `syz.1.21'. [ 78.379903][ T5268] netlink: 20 bytes leftover after parsing attributes in process `syz.1.30'. [ 78.879043][ T5292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.220360][ T5313] netpci0: tun_chr_ioctl cmd 2148553947 [ 79.246447][ T5313] veth1_macvtap: left promiscuous mode [ 79.251982][ T5313] macsec0: entered allmulticast mode [ 79.286701][ T5313] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 79.321397][ T5313] warning: `syz.2.44' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 79.353824][ T5313] mac80211_hwsim hwsim4 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 79.375596][ T5318] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.613195][ T5327] netlink: 'syz.0.48': attribute type 11 has an invalid length. [ 79.746045][ T5331] syz.4.50 uses obsolete (PF_INET,SOCK_PACKET) [ 79.789725][ T5335] SET target dimension over the limit! [ 79.829043][ T5343] netlink: 24 bytes leftover after parsing attributes in process `syz.3.53'. [ 80.126214][ T5360] ax25_connect(): syz.1.59 uses autobind, please contact jreuter@yaina.de [ 80.572829][ T5381] SET target dimension over the limit! [ 80.614403][ T5381] tipc: Started in network mode [ 80.623163][ T5381] tipc: Node identity ac1414aa, cluster identity 4711 [ 80.644546][ T5381] tipc: Enabled bearer , priority 10 [ 80.754286][ T5391] netlink: 16 bytes leftover after parsing attributes in process `syz.2.71'. [ 80.822722][ T5393] syz_tun: entered promiscuous mode [ 80.853892][ T5399] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 80.867096][ T5393] syz_tun: left promiscuous mode [ 80.912578][ T5404] xt_CONNSECMARK: invalid mode: 0 [ 81.064683][ T5400] netlink: 22 bytes leftover after parsing attributes in process `syz.4.74'. [ 81.116003][ T5415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.77'. [ 81.192570][ T5426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.76'. [ 81.486338][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 81.562078][ T5442] ip6gre0: Master is either lo or non-ether device [ 81.753079][ T5450] SET target dimension over the limit! [ 81.766715][ T5145] tipc: Node number set to 2886997162 [ 81.771431][ T5450] tipc: Started in network mode [ 81.782223][ T5450] tipc: Node identity ac1414aa, cluster identity 4711 [ 81.811224][ T5450] tipc: Enabled bearer , priority 10 [ 81.905184][ T5456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.87'. [ 81.931259][ T5457] sctp: [Deprecated]: syz.0.85 (pid 5457) Use of struct sctp_assoc_value in delayed_ack socket option. [ 81.931259][ T5457] Use struct sctp_sack_info instead [ 82.097796][ T5465] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 82.117507][ T2881] wlan0: Trigger new scan to find an IBSS to join [ 82.425946][ T5478] netlink: 'syz.3.96': attribute type 1 has an invalid length. [ 82.432889][ T5477] netlink: 160 bytes leftover after parsing attributes in process `syz.4.95'. [ 82.511142][ T5482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.94'. [ 82.734282][ T5489] bond0: entered promiscuous mode [ 82.764358][ T5489] bond_slave_0: entered promiscuous mode [ 82.776303][ T5491] SET target dimension over the limit! [ 82.784887][ T5489] bond_slave_1: entered promiscuous mode [ 82.824021][ T5489] team0: entered promiscuous mode [ 82.835430][ T5489] team_slave_0: entered promiscuous mode [ 82.856319][ T5489] team_slave_1: entered promiscuous mode [ 82.887944][ T5496] tipc: Enabling of bearer rejected, already enabled [ 82.925989][ T5146] tipc: Node number set to 2886997162 [ 83.106671][ T5509] delete_channel: no stack [ 83.191150][ T5513] Bluetooth: MGMT ver 1.22 [ 83.212049][ T5513] Bluetooth: hci3: invalid length 0, exp 2 for type 24 [ 83.259641][ T5515] Bluetooth: hci3: invalid length 0, exp 2 for type 24 [ 83.554311][ T5531] netlink: 'syz.2.110': attribute type 2 has an invalid length. [ 83.570572][ T5531] netlink: 'syz.2.110': attribute type 8 has an invalid length. [ 83.584826][ T5531] netlink: 'syz.2.110': attribute type 1 has an invalid length. [ 83.595955][ T5531] netlink: 80 bytes leftover after parsing attributes in process `syz.2.110'. [ 83.610907][ T5531] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.663013][ T5527] netlink: 36 bytes leftover after parsing attributes in process `syz.0.109'. [ 83.827354][ T5542] SET target dimension over the limit! [ 83.856856][ T5542] tipc: Enabling of bearer rejected, already enabled [ 83.998304][ T29] audit: type=1804 audit(1719686037.230:2): pid=5545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.116" name="/root/syzkaller.SrgxsD/23/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 84.955885][ T5597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.132'. [ 85.092054][ T5602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.134'. [ 85.152687][ T11] wlan0: Trigger new scan to find an IBSS to join [ 85.410579][ T5625] Bluetooth: hci3: invalid len left 7, exp >= 121 [ 85.585525][ T5627] sctp: [Deprecated]: syz.2.142 (pid 5627) Use of struct sctp_assoc_value in delayed_ack socket option. [ 85.585525][ T5627] Use struct sctp_sack_info instead [ 85.617994][ T5627] sctp: [Deprecated]: syz.2.142 (pid 5627) Use of struct sctp_assoc_value in delayed_ack socket option. [ 85.617994][ T5627] Use struct sctp_sack_info instead [ 85.686792][ T5642] netlink: 'syz.3.143': attribute type 10 has an invalid length. [ 85.727320][ T5642] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 86.268581][ T5660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.150'. [ 86.318586][ T5627] syz.2.142 (5627) used greatest stack depth: 17808 bytes left [ 86.335811][ T5660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.150'. [ 86.379063][ T5660] netlink: 20 bytes leftover after parsing attributes in process `syz.3.150'. [ 86.612957][ T5669] netlink: 88 bytes leftover after parsing attributes in process `syz.0.157'. [ 86.935717][ T5677] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 87.002292][ T1149] cfg80211: failed to load regulatory.db [ 87.015037][ T5696] netlink: 'syz.2.161': attribute type 10 has an invalid length. [ 87.064156][ T5677] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 87.094709][ T5696] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 87.629508][ T5722] netlink: 88 bytes leftover after parsing attributes in process `syz.3.172'. [ 87.781348][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880623a1800: rx timeout, send abort [ 87.975839][ T5737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.176'. [ 88.117000][ T2881] wlan0: Creating new IBSS network, BSSID 72:9f:43:8d:5a:7f [ 88.267811][ T5748] netlink: 'syz.2.180': attribute type 2 has an invalid length. [ 88.290525][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880623a1800: abort rx timeout. Force session deactivation [ 89.006303][ T5774] __nla_validate_parse: 1 callbacks suppressed [ 89.006324][ T5774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.189'. [ 89.227442][ T5782] netlink: 84 bytes leftover after parsing attributes in process `syz.1.193'. [ 89.943426][ T5819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.200'. [ 90.663729][ T5860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.213'. [ 90.694074][ T5861] netlink: 'syz.3.214': attribute type 8 has an invalid length. [ 90.726039][ T5861] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 90.885742][ T5868] netlink: 28 bytes leftover after parsing attributes in process `syz.4.217'. [ 92.762450][ T5940] netlink: 'syz.2.232': attribute type 5 has an invalid length. [ 92.879470][ T5945] trusted_key: syz.4.234 sent an empty control message without MSG_MORE. [ 93.130324][ T5951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.237'. [ 93.614239][ T5972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.772496][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.245'. [ 93.897908][ T5978] wg2: entered promiscuous mode [ 93.913497][ T5978] wg2: entered allmulticast mode [ 93.971104][ T5983] netlink: 'syz.2.248': attribute type 3 has an invalid length. [ 93.981807][ T5985] netlink: 'syz.3.249': attribute type 3 has an invalid length. [ 93.985843][ T5983] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.248'. [ 94.153868][ T5991] netlink: 'syz.3.250': attribute type 5 has an invalid length. [ 94.633669][ T6009] netlink: 224 bytes leftover after parsing attributes in process `syz.1.254'. [ 94.830336][ T6036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.261'. [ 95.050669][ T6044] atomic_op ffff88802bfff998 conn xmit_atomic 0000000000000000 [ 95.062664][ T6045] Bluetooth: MGMT ver 1.22 [ 95.121185][ T6044] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 95.161917][ T6044] bridge0: port 3(vlan2) entered blocking state [ 95.176694][ T6044] bridge0: port 3(vlan2) entered disabled state [ 95.192585][ T6044] vlan2: entered allmulticast mode [ 95.209499][ T6044] vlan2: entered promiscuous mode [ 95.257177][ T6051] netlink: 'syz.0.267': attribute type 1 has an invalid length. [ 95.276128][ T6051] netlink: 'syz.0.267': attribute type 1 has an invalid length. [ 95.295845][ T6051] netlink: 9328 bytes leftover after parsing attributes in process `syz.0.267'. [ 95.339075][ T6051] netlink: 'syz.0.267': attribute type 1 has an invalid length. [ 95.342455][ T6054] netlink: 'syz.0.267': attribute type 2 has an invalid length. [ 95.666400][ T6061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.269'. [ 95.822609][ T6069] netlink: 6204 bytes leftover after parsing attributes in process `syz.1.272'. [ 95.863125][ T6069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.272'. [ 95.866251][ T6074] netlink: 'syz.2.273': attribute type 5 has an invalid length. [ 95.880183][ T6069] netlink: 6204 bytes leftover after parsing attributes in process `syz.1.272'. [ 95.948442][ T6069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.272'. [ 96.060451][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.274'. [ 96.076467][ T6079] netlink: 47 bytes leftover after parsing attributes in process `syz.2.275'. [ 96.353378][ T6090] netlink: 'syz.3.279': attribute type 1 has an invalid length. [ 96.552461][ T6103] veth1_macvtap: entered promiscuous mode [ 96.585616][ T6103] veth1_macvtap: entered allmulticast mode [ 96.605294][ T6108] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 97.439572][ T6154] smc: adding net device pimreg with user defined pnetid SYZ1 [ 97.486213][ T6154] pimreg: entered allmulticast mode [ 97.984779][ T6181] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.994661][ T6181] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.003731][ T6181] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.012499][ T6181] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.266639][ T29] audit: type=1804 audit(1719686051.510:3): pid=6198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.316" name="/root/syzkaller.SrgxsD/71/memory.events" dev="sda1" ino=1971 res=1 errno=0 [ 98.484996][ T6206] netlink: 'syz.1.320': attribute type 1 has an invalid length. [ 98.652179][ T6212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.190457][ T6228] validate_nla: 3 callbacks suppressed [ 99.190480][ T6228] netlink: 'syz.4.328': attribute type 1 has an invalid length. [ 99.522382][ T6248] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 99.911747][ T6268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.034727][ T6272] __nla_validate_parse: 11 callbacks suppressed [ 100.034747][ T6272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.346'. [ 100.192643][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.348'. [ 100.216592][ T6278] netlink: 64 bytes leftover after parsing attributes in process `syz.4.348'. [ 100.229171][ T6278] netlink: 44 bytes leftover after parsing attributes in process `syz.4.348'. [ 100.377848][ T6286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.351'. [ 100.749260][ T6303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.358'. [ 101.339516][ T6336] netlink: 20 bytes leftover after parsing attributes in process `syz.4.363'. [ 101.374670][ T6340] bridge_slave_1: left allmulticast mode [ 101.395405][ T6340] bridge_slave_1: left promiscuous mode [ 101.401281][ T6340] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.457941][ T6340] netlink: 'syz.4.363': attribute type 2 has an invalid length. [ 101.497293][ T6340] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 101.584836][ T6348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.716276][ T6354] bridge0: port 2(bridge_slave_1) entered listening state [ 101.917032][ T6357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.368'. [ 102.070575][ T29] audit: type=1804 audit(1719686055.310:4): pid=6361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.369" name="/root/syzkaller.KFnpw3/80/cgroup.controllers" dev="sda1" ino=1970 res=1 errno=0 [ 102.182040][ T6377] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 102.331525][ T6384] netlink: 40 bytes leftover after parsing attributes in process `syz.0.376'. [ 102.641676][ T6395] netlink: 28 bytes leftover after parsing attributes in process `syz.4.378'. [ 102.912049][ T6398] syzkaller0: entered promiscuous mode [ 102.965474][ T6398] syzkaller0: entered allmulticast mode [ 103.936793][ T29] audit: type=1804 audit(1719686057.180:5): pid=6467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.389" name="/root/syzkaller.gJNnNp/74/cgroup.controllers" dev="sda1" ino=1970 res=1 errno=0 [ 104.077288][ T6475] Driver unsupported XDP return value 0 on prog (id 157) dev N/A, expect packet loss! [ 105.383781][ T6480] __nla_validate_parse: 4 callbacks suppressed [ 105.383803][ T6480] netlink: 28 bytes leftover after parsing attributes in process `syz.4.394'. [ 105.554469][ T6493] netlink: 3 bytes leftover after parsing attributes in process `syz.2.397'. [ 105.768056][ T6506] netlink: 24 bytes leftover after parsing attributes in process `syz.1.402'. [ 105.781781][ T6501] netlink: 20 bytes leftover after parsing attributes in process `syz.3.398'. [ 105.791340][ T6498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.399'. [ 105.818886][ T6510] netlink: 24 bytes leftover after parsing attributes in process `syz.1.402'. [ 105.838139][ T6504] bridge_slave_1: left allmulticast mode [ 105.848635][ T6504] bridge_slave_1: left promiscuous mode [ 105.883708][ T6504] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.908293][ T6504] netlink: 'syz.3.398': attribute type 2 has an invalid length. [ 105.919115][ T6513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.945143][ T6504] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 105.989549][ T6516] macsec0: entered allmulticast mode [ 106.002678][ T6516] veth1_macvtap: entered allmulticast mode [ 106.150934][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.407'. [ 106.161996][ T6530] netlink: 830 bytes leftover after parsing attributes in process `syz.1.407'. [ 106.317834][ T6529] syzkaller0: entered promiscuous mode [ 106.323403][ T6529] syzkaller0: entered allmulticast mode [ 106.340776][ T6532] netlink: 28 bytes leftover after parsing attributes in process `syz.0.410'. [ 106.389131][ T6538] bridge0: port 3(gretap0) entered blocking state [ 106.397899][ T6538] bridge0: port 3(gretap0) entered disabled state [ 106.406237][ T6538] gretap0: entered allmulticast mode [ 106.415094][ T6538] gretap0: entered promiscuous mode [ 106.422569][ T6538] bridge0: port 3(gretap0) entered blocking state [ 106.429470][ T6538] bridge0: port 3(gretap0) entered forwarding state [ 106.499315][ T6545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.408'. [ 106.888093][ T6550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.146228][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 107.903059][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807eea3000: rx timeout, send abort [ 108.411448][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807eea3000: abort rx timeout. Force session deactivation [ 108.684841][ T6574] bridge0: port 3(gretap0) entered blocking state [ 108.702384][ T6574] bridge0: port 3(gretap0) entered disabled state [ 108.725666][ T6574] gretap0: entered allmulticast mode [ 108.744504][ T6574] gretap0: entered promiscuous mode [ 108.770844][ T6574] bridge0: port 3(gretap0) entered blocking state [ 108.777634][ T6574] bridge0: port 3(gretap0) entered forwarding state [ 108.801071][ T6584] gretap0: left allmulticast mode [ 108.815076][ T6584] gretap0: left promiscuous mode [ 108.825272][ T6584] bridge0: port 3(gretap0) entered disabled state [ 108.895162][ T6592] netlink: 'syz.1.428': attribute type 8 has an invalid length. [ 109.178171][ T6602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.726834][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 109.733468][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 109.805271][ T6614] SET target dimension over the limit! [ 109.837783][ T6614] tipc: Enabling of bearer rejected, already enabled [ 109.934895][ T6620] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 109.947363][ T6618] SET target dimension over the limit! [ 109.976471][ T6618] tipc: Started in network mode [ 109.982335][ T6618] tipc: Node identity ac1414aa, cluster identity 4711 [ 109.994268][ T6618] tipc: Enabled bearer , priority 10 [ 110.168847][ T6633] netlink: 'syz.1.443': attribute type 10 has an invalid length. [ 110.238851][ T6633] batman_adv: batadv0: Adding interface: team0 [ 110.245086][ T6633] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.292919][ T6633] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 110.305088][ T6637] netlink: 'syz.1.443': attribute type 10 has an invalid length. [ 110.323368][ T6637] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.330769][ T6637] batman_adv: batadv0: Interface activated: team0 [ 110.337595][ T6637] batman_adv: batadv0: Interface deactivated: team0 [ 110.344480][ T6637] batman_adv: batadv0: Removing interface: team0 [ 110.353408][ T6637] bridge0: port 4(team0) entered blocking state [ 110.371107][ T6637] bridge0: port 4(team0) entered disabled state [ 110.377794][ T6637] team0: entered allmulticast mode [ 110.382934][ T6637] team_slave_0: entered allmulticast mode [ 110.388830][ T6637] team_slave_1: entered allmulticast mode [ 110.396473][ T6637] team0: left allmulticast mode [ 110.401367][ T6637] team_slave_0: left allmulticast mode [ 110.406914][ T6637] team_slave_1: left allmulticast mode [ 110.490030][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ca47800: rx timeout, send abort [ 110.552146][ T6646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.757659][ T6655] SET target dimension over the limit! [ 110.771886][ T6655] tipc: Enabling of bearer rejected, already enabled [ 110.961266][ T6664] SET target dimension over the limit! [ 110.971233][ T6664] tipc: Started in network mode [ 110.977390][ T6664] tipc: Node identity ac1414aa, cluster identity 4711 [ 110.990961][ T6664] tipc: Enabled bearer , priority 10 [ 110.997307][ T5148] tipc: Node number set to 2886997162 [ 110.998369][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ca47800: abort rx timeout. Force session deactivation [ 111.066434][ T3837] ================================================================== [ 111.074733][ T3837] BUG: KASAN: slab-use-after-free in l2tp_tunnel_del_work+0xe5/0x330 [ 111.082855][ T3837] Read of size 8 at addr ffff88807cdaa8b8 by task kworker/u8:9/3837 [ 111.090857][ T3837] [ 111.093204][ T3837] CPU: 1 PID: 3837 Comm: kworker/u8:9 Not tainted 6.10.0-rc5-syzkaller-01115-g30972a4ea092 #0 [ 111.103463][ T3837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 111.113546][ T3837] Workqueue: l2tp l2tp_tunnel_del_work [ 111.119058][ T3837] Call Trace: [ 111.122357][ T3837] [ 111.125309][ T3837] dump_stack_lvl+0x241/0x360 [ 111.130028][ T3837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.135340][ T3837] ? __pfx__printk+0x10/0x10 [ 111.139985][ T3837] ? _printk+0xd5/0x120 [ 111.143549][ T6667] xt_CONNSECMARK: invalid mode: 0 [ 111.144167][ T3837] ? __virt_addr_valid+0x183/0x520 [ 111.144203][ T3837] ? __virt_addr_valid+0x183/0x520 [ 111.159451][ T3837] print_report+0x169/0x550 [ 111.161414][ T6667] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 111.163985][ T3837] ? __virt_addr_valid+0x183/0x520 [ 111.164034][ T3837] ? __virt_addr_valid+0x183/0x520 [ 111.184332][ T6667] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 111.185674][ T3837] ? __virt_addr_valid+0x44e/0x520 [ 111.185707][ T3837] ? __phys_addr+0xba/0x170 [ 111.185734][ T3837] ? l2tp_tunnel_del_work+0xe5/0x330 [ 111.211595][ T3837] kasan_report+0x143/0x180 [ 111.216238][ T3837] ? l2tp_tunnel_del_work+0xe5/0x330 [ 111.221546][ T3837] l2tp_tunnel_del_work+0xe5/0x330 [ 111.226678][ T3837] ? process_scheduled_works+0x945/0x1830 [ 111.232425][ T3837] process_scheduled_works+0xa2c/0x1830 [ 111.238047][ T3837] ? __pfx_process_scheduled_works+0x10/0x10 [ 111.244064][ T3837] ? assign_work+0x364/0x3d0 [ 111.248674][ T3837] worker_thread+0x86d/0xd50 [ 111.253274][ T3837] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 111.259182][ T3837] ? __kthread_parkme+0x169/0x1d0 [ 111.264233][ T3837] ? __pfx_worker_thread+0x10/0x10 [ 111.269357][ T3837] kthread+0x2f0/0x390 [ 111.273441][ T3837] ? __pfx_worker_thread+0x10/0x10 [ 111.278584][ T3837] ? __pfx_kthread+0x10/0x10 [ 111.283226][ T3837] ret_from_fork+0x4b/0x80 [ 111.287661][ T3837] ? __pfx_kthread+0x10/0x10 [ 111.292290][ T3837] ret_from_fork_asm+0x1a/0x30 [ 111.297072][ T3837] [ 111.300101][ T3837] [ 111.302427][ T3837] Allocated by task 6632: [ 111.306768][ T3837] kasan_save_track+0x3f/0x80 [ 111.311447][ T3837] __kasan_kmalloc+0x98/0xb0 [ 111.316048][ T3837] __kmalloc_noprof+0x1f9/0x400 [ 111.320913][ T3837] l2tp_session_create+0x3b/0xc20 [ 111.325947][ T3837] pppol2tp_connect+0xca3/0x17a0 [ 111.330889][ T3837] __sys_connect+0x2df/0x310 [ 111.335512][ T3837] __x64_sys_connect+0x7a/0x90 [ 111.340304][ T3837] do_syscall_64+0xf3/0x230 [ 111.344829][ T3837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.350718][ T3837] [ 111.353035][ T3837] Freed by task 5098: [ 111.357011][ T3837] kasan_save_track+0x3f/0x80 [ 111.361703][ T3837] kasan_save_free_info+0x40/0x50 [ 111.366738][ T3837] poison_slab_object+0xe0/0x150 [ 111.371772][ T3837] __kasan_slab_free+0x37/0x60 [ 111.376557][ T3837] kfree+0x149/0x360 [ 111.380481][ T3837] __sk_destruct+0x58/0x5f0 [ 111.384998][ T3837] rcu_core+0xafd/0x1830 [ 111.389247][ T3837] handle_softirqs+0x2c4/0x970 [ 111.394018][ T3837] __irq_exit_rcu+0xf4/0x1c0 [ 111.398876][ T3837] irq_exit_rcu+0x9/0x30 [ 111.403131][ T3837] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 111.408771][ T3837] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 111.414768][ T3837] [ 111.417100][ T3837] Last potentially related work creation: [ 111.422813][ T3837] kasan_save_stack+0x3f/0x60 [ 111.427490][ T3837] __kasan_record_aux_stack+0xac/0xc0 [ 111.432881][ T3837] call_rcu+0x167/0xa70 [ 111.437047][ T3837] pppol2tp_release+0x24b/0x350 [ 111.441914][ T3837] sock_close+0xbc/0x240 [ 111.446162][ T3837] __fput+0x406/0x8b0 [ 111.450134][ T3837] task_work_run+0x24f/0x310 [ 111.454753][ T3837] syscall_exit_to_user_mode+0x168/0x370 [ 111.460484][ T3837] do_syscall_64+0x100/0x230 [ 111.465112][ T3837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.471017][ T3837] [ 111.473335][ T3837] The buggy address belongs to the object at ffff88807cdaa800 [ 111.473335][ T3837] which belongs to the cache kmalloc-1k of size 1024 [ 111.487428][ T3837] The buggy address is located 184 bytes inside of [ 111.487428][ T3837] freed 1024-byte region [ffff88807cdaa800, ffff88807cdaac00) [ 111.501336][ T3837] [ 111.503725][ T3837] The buggy address belongs to the physical page: [ 111.510142][ T3837] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7cda8 [ 111.518919][ T3837] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 111.527433][ T3837] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 111.535435][ T3837] page_type: 0xffffefff(slab) [ 111.540133][ T3837] raw: 00fff00000000040 ffff888015041dc0 0000000000000000 dead000000000001 [ 111.548723][ T3837] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 111.557328][ T3837] head: 00fff00000000040 ffff888015041dc0 0000000000000000 dead000000000001 [ 111.566009][ T3837] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 111.574676][ T3837] head: 00fff00000000003 ffffea0001f36a01 ffffffffffffffff 0000000000000000 [ 111.583353][ T3837] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 111.592034][ T3837] page dumped because: kasan: bad access detected [ 111.598481][ T3837] page_owner tracks the page as allocated [ 111.604199][ T3837] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5146, tgid 5146 (kworker/0:5), ts 75144388947, free_ts 75127715035 [ 111.626339][ T3837] post_alloc_hook+0x1f3/0x230 [ 111.631112][ T3837] get_page_from_freelist+0x2e4c/0x2f10 [ 111.636662][ T3837] __alloc_pages_noprof+0x256/0x6c0 [ 111.641881][ T3837] alloc_slab_page+0x5f/0x120 [ 111.646601][ T3837] allocate_slab+0x5a/0x2f0 [ 111.651165][ T3837] ___slab_alloc+0xcd1/0x14b0 [ 111.655861][ T3837] __slab_alloc+0x58/0xa0 [ 111.660200][ T3837] kmalloc_node_track_caller_noprof+0x281/0x440 [ 111.666453][ T3837] kmalloc_reserve+0x111/0x2a0 [ 111.671218][ T3837] __alloc_skb+0x1f3/0x440 [ 111.675651][ T3837] inet6_rt_notify+0xdf/0x290 [ 111.680342][ T3837] fib6_add+0x1e33/0x4430 [ 111.684680][ T3837] ip6_route_add+0x8b/0x160 [ 111.689212][ T3837] addrconf_add_linklocal+0x61a/0xa30 [ 111.694598][ T3837] addrconf_addr_gen+0x510/0xbb0 [ 111.699560][ T3837] addrconf_init_auto_addrs+0x96a/0xeb0 [ 111.705134][ T3837] page last free pid 5098 tgid 5098 stack trace: [ 111.711481][ T3837] free_unref_page+0xd22/0xea0 [ 111.716268][ T3837] __put_partials+0xeb/0x130 [ 111.720887][ T3837] put_cpu_partial+0x17c/0x250 [ 111.725676][ T3837] __slab_free+0x2ea/0x3d0 [ 111.730102][ T3837] qlist_free_all+0x9e/0x140 [ 111.734698][ T3837] kasan_quarantine_reduce+0x14f/0x170 [ 111.740175][ T3837] __kasan_slab_alloc+0x23/0x80 [ 111.745052][ T3837] __kmalloc_noprof+0x1a3/0x400 [ 111.749901][ T3837] fib6_info_alloc+0x2e/0xf0 [ 111.754496][ T3837] ip6_route_info_create+0x445/0x12b0 [ 111.759885][ T3837] ip6_route_add+0x28/0x160 [ 111.764413][ T3837] addrconf_add_dev+0x35b/0x540 [ 111.769277][ T3837] addrconf_init_auto_addrs+0x85f/0xeb0 [ 111.774840][ T3837] addrconf_notify+0xaff/0x1020 [ 111.779719][ T3837] notifier_call_chain+0x19f/0x3e0 [ 111.784853][ T3837] __dev_notify_flags+0x207/0x400 [ 111.789894][ T3837] [ 111.792213][ T3837] Memory state around the buggy address: [ 111.797844][ T3837] ffff88807cdaa780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 111.805916][ T3837] ffff88807cdaa800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.813971][ T3837] >ffff88807cdaa880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.822049][ T3837] ^ [ 111.827939][ T3837] ffff88807cdaa900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.836005][ T3837] ffff88807cdaa980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.844067][ T3837] ================================================================== [ 111.852306][ T3837] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 111.859537][ T3837] CPU: 1 PID: 3837 Comm: kworker/u8:9 Not tainted 6.10.0-rc5-syzkaller-01115-g30972a4ea092 #0 [ 111.869822][ T3837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 111.880000][ T3837] Workqueue: l2tp l2tp_tunnel_del_work [ 111.885498][ T3837] Call Trace: [ 111.888791][ T3837] [ 111.891737][ T3837] dump_stack_lvl+0x241/0x360 [ 111.896631][ T3837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.901853][ T3837] ? __pfx__printk+0x10/0x10 [ 111.906460][ T3837] ? vscnprintf+0x5d/0x90 [ 111.910800][ T3837] panic+0x349/0x860 [ 111.914714][ T3837] ? check_panic_on_warn+0x21/0xb0 [ 111.919869][ T3837] ? __pfx_panic+0x10/0x10 [ 111.924300][ T3837] ? mark_lock+0x9a/0x350 [ 111.928661][ T3837] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 111.934576][ T3837] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 111.940475][ T3837] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 111.946829][ T3837] ? print_report+0x502/0x550 [ 111.951524][ T3837] check_panic_on_warn+0x86/0xb0 [ 111.956515][ T3837] ? l2tp_tunnel_del_work+0xe5/0x330 [ 111.961800][ T3837] end_report+0x77/0x160 [ 111.966041][ T3837] kasan_report+0x154/0x180 [ 111.970615][ T3837] ? l2tp_tunnel_del_work+0xe5/0x330 [ 111.975925][ T3837] l2tp_tunnel_del_work+0xe5/0x330 [ 111.981041][ T3837] ? process_scheduled_works+0x945/0x1830 [ 111.986761][ T3837] process_scheduled_works+0xa2c/0x1830 [ 111.992343][ T3837] ? __pfx_process_scheduled_works+0x10/0x10 [ 111.998350][ T3837] ? assign_work+0x364/0x3d0 [ 112.002945][ T3837] worker_thread+0x86d/0xd50 [ 112.007556][ T3837] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 112.013456][ T3837] ? __kthread_parkme+0x169/0x1d0 [ 112.018521][ T3837] ? __pfx_worker_thread+0x10/0x10 [ 112.023636][ T3837] kthread+0x2f0/0x390 [ 112.027714][ T3837] ? __pfx_worker_thread+0x10/0x10 [ 112.032840][ T3837] ? __pfx_kthread+0x10/0x10 [ 112.037436][ T3837] ret_from_fork+0x4b/0x80 [ 112.041866][ T3837] ? __pfx_kthread+0x10/0x10 [ 112.046461][ T3837] ret_from_fork_asm+0x1a/0x30 [ 112.051239][ T3837] [ 112.054578][ T3837] Kernel Offset: disabled [ 112.058903][ T3837] Rebooting in 86400 seconds..