last executing test programs: 2.893181756s ago: executing program 1 (id=490): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) listen(r2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="00000000000000030003000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3}, &(0x7f00000004c0), &(0x7f0000000500)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, 0x0, &(0x7f00000003c0)=r4}, 0x20) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)=0x7, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r6, 0x1, 0x0, 0x0, {0x4, 0x0, 0xfffc}}, 0x14}, 0x1, 0xfcffffff00000000}, 0x0) 2.541526291s ago: executing program 2 (id=497): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000240)={0x1d, r2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000100)={0x1d, r3}, 0x10) 2.319537686s ago: executing program 2 (id=500): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002cc0)=[{{&(0x7f0000000300)={0x2, 0x4e24, @private=0x6400}, 0x10, 0x0, 0x0, &(0x7f0000002ec0)=[@ip_retopts={{0x18, 0xc000000, 0x7, {[@cipso={0x86, 0x8, 0x3, [{0x0, 0x2}]}]}}}], 0x18}}], 0x1, 0x0) 2.154337756s ago: executing program 2 (id=501): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x5000, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8}]}], {0x14, 0x10}}, 0x64}}, 0x0) 2.090855701s ago: executing program 3 (id=502): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="05000001040000000000210000a143130600"], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.003486113s ago: executing program 2 (id=503): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xd) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000043c0)={&(0x7f00000042c0)=ANY=[@ANYBLOB="180000000000db6264fb0000000000000000200004000082"], 0x18}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xb}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000900000000000500200001000000050008"], 0x7c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b15, &(0x7f0000000500)={'wlan1\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7b1, @vifc_lcl_ifindex, @empty}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000039000900000000000000000001000000040000000c000180060000000547000008000200", @ANYRES32, @ANYBLOB="0c00058006"], 0x38}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000004c0)={&(0x7f0000000300), 0xc, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="940000001100010026bd7000fcdbdf2500000000", @ANYRES32=r9, @ANYRES32=0x0, @ANYBLOB], 0x94}}, 0x0) sendto$inet6(r0, &(0x7f0000000280)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x4e, 0x0, 0x2000000) 1.932301277s ago: executing program 4 (id=505): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) sendmmsg$inet(r0, &(0x7f0000006d40)=[{{&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10, &(0x7f0000001980)}}, {{&(0x7f0000000080)={0x2, 0x6e22, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000040)}}], 0x2, 0x801) 1.918546521s ago: executing program 1 (id=506): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000001300)="ddd624574b168cf564b6a8072817fb6d9a1c02d6de13474a8f5bd6c0850790cbd92c6423af85598032a1cbc351072dce2db8c2e1bac0399d27bb74715c7d0389cc1e710336fceda35b78754f27f6925605076083526e8a0448701acce13856662e95fe229581703cbbab1319365f002a800c9b610070f9c0cad4274676b4fcc3d02a42407b5fb3a48da6a6626c4911c7798221d496f6f42a4dd82d6921f3e7ac2e4557fded1f19925e2931beb357ccd3553b5c09f297677fe93f0546ff10f39c5d8d4f5bf66dd9c07dbd1da4474b3178f55d86f6fa0f2720d0fd8a63ecebb7e2f0c3d125e4b4681ee0e40cc3cfdc77aeeeeb6449db338b26df40631d1c9cbe8ceaf0a594a6ab9ce600bb93978409d509be078ed404efc1166a9059b6b5e731bc83f8bb713f4feea721d6a57f6ee279d9dbb6874b7c9e838a1b23dee8cb6b17f8dd0e60c4183c4f3cf8ac9bf8a330e6f8925190fb4a41fb698205710cae51f9ed1f54e49eb580add1eaa4c2a7bb0797172aabc1ca8d8b4f00be5a174ede1e0f416ff16be542fb395e3f4a789861058ca087dbafc4328a23622759942a946dfd7861d4422df28f5e880d74954af0ff64a83014abbc4624dbc4b08c85be3579384e31ae6b04e5a551837bbcce841b3e7da052fcbb72b7257c5b4cc52aba7a78152f461b88d5665264d522bd55fb5f14441d8f3a272d57e4d8d6f45c46b674593d48b5456c8bddda51af393f0c7cc4fc3b90ec1474a9de461b8fcc6c47dad26b5e285520f08bb81f157e829c1136e4d69be7d10aecc6af2af4e425510848b59bdfda7b4deaeb179a0712dc4cace64b66d34e003f2ede049e38119a7bfee9452ffec4ceb7a9dc11d6375f1f2a0c9a23a9bf9309222ac3b1fcca3d2dc06447af4bd270438fce7050e60c81a18a1e68550cec3dfa31d326a57c99611ab3bbd515648e59bef8dee6c0202e7eda9da8bb2126c40380c157949b7c93a6f8284177824665933e2e37413eb7619770c3a6bc1e35a4b95acc0f6b74df651c58a302453818014dca943c36d16bc90a02f22897038c408eb268f01ecc5b7db1ae502776ef46c17362e638144c707736ff261af90d402d9284124f5e2344593bee3f860c8db799991d3c6f6a17b807984ce9118e2504e45486dc17eb9ae040e57b0dfffe219cb98caaa230d07a1848d5c83115d8242d4acdc6df96c61ea2c1e653406ac8830af2bd3fa5d4d58aa18539cd2e1383f21b39bccb5d8badcbd3eda1f078e1c2825465438cc4936912a0a3ec14d240d32a2825ae27cada4a0ed37127a48072ead46c05ca4b5af6eb62f5b8910db5ab5f05fb5d21aa4ff42927bc89b0834ca9570d1a13e357645f0d15484e7e4abbcffd7e195d8f3efff9c4cc8db71ff2881285da2d7714aac6b15267ae3ea466d03b644bc4b8882979586fc1f5cdf163971dbc040105a263f495e2ae2ae38b26439a177553eef1870ea27e39273527c385e44f73468e5e40ef16350374c7d5f8bdc3a24a0b58eb95d9ae27909314535e77a48b073b332b700eb17e3dffb563a3d1095e1366b948c7d1cf88b552ef3c310ee8893262750013326b73a07051fa265fbd2ec5be9adfd2b34fb31ca53051a51408e6ef51438fddbce843cde0516f3d02afc5991d3b374d788a43940784c83e1c1af56f0903a0fb11b5f1e515e64e745066bd50a7bb050a7a39fb8a9b06520d0c9ef18f03c02bd8532b06005f1ca9db90e6cc00ccad1d0681281109e0857b3faf037e49518aa11e0c7049abd80e58a911f16791c76a71467eec57ce010f585822a650c9d91d77810860198fef74a88e0b523ee3c8048563bb89305f42d0dbb368bb1d5edbe62d20be4fe0359abfa5eb6941028518ffe92b505b8a1469912078fb02fcba4b58227fd10f80935a9d1746860fa81747cae593612d7ed9bbb064b3ca47f8a4d4d91c2effe61cf92d89ef634b08f6ca5ff5f91262918eb8faac403aac6c4ae65e57b71b", 0x581}], 0x1}}, {{0x0, 0xd00, &(0x7f00000000c0)=[{&(0x7f0000000140)="d281", 0x2}], 0x1}}], 0x2, 0x4404c000) 1.918218758s ago: executing program 3 (id=507): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x7, &(0x7f0000000240)={&(0x7f0000000180)={0x34, r1, 0x1, 0x0, 0xffa1, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'batadv0\x00'}}}}}, 0x34}}, 0x0) 1.831032683s ago: executing program 4 (id=508): getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@initdev, @in=@multicast1}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000002b80)=[{{&(0x7f0000000000)={0xa, 0x101, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1400679200000000290000000b00000000000006000000001400000000000000290000e1ebaa2f4600d30b0043000000ffffffff00000000"], 0x30}}], 0x1, 0x0) socket$kcm(0x21, 0x2, 0x2) r2 = socket(0x22, 0x2, 0x5) ioctl$PPPOEIOCDFWD(r2, 0x80044944, 0x1000000000000) close(r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="f56119cb06d5bc1f80ea5714638d6d85464fe4e5be24ddaab8411ae8f52df2b0d7266ab65baacbfd14e53abb915b7dcbdc7fecadf1957e81979c9743d789a98992e5f81244203e791a0a26c69213e054c8e5d7478eb71f6dda26bd8a3945144a8919a2a402fde8fad10ed5c356b3f947c343648b6f849439", @ANYRES16=0x0, @ANYBLOB="00042abd7000fddbdf25030000000500050004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0xc0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16=0x0, @ANYRES8], 0x50}}, 0x8840) r3 = socket(0x9, 0x80000, 0x7) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) socket$inet6(0xa, 0x80002, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001940)={0x114, 0x2b, 0x9f2d3d3f99cf9fb9, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 1.684058072s ago: executing program 0 (id=509): r0 = socket$inet_sctp(0x2, 0x5, 0x84) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x44, 0x1a, 0x1, 0x0, 0x0, {}, [@FRA_SRC={0x14, 0x2, @empty}, @FRA_DST={0x7, 0x1, @private1}]}, 0x44}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f000099e000)={0x2, 0x4e20, @local}, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4}, 0xe) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0xa, 0x2}}, 0x14}}, 0x0) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f00000002c0)={0x2, @null, @netrom={'nr', 0x0}, 0x8000, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null]}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040)={0x0, 0xfffc, 0x0, 0x3}, 0xc) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000040)={0x6, 'wg0\x00', {0x2}}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'macsec0\x00', {0x2}}) 1.682873641s ago: executing program 1 (id=510): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GETFSUUID(r0, 0xc0c0583b, &(0x7f0000000000)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f0000000180)={0x5e38, 0x50, '\x00', 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008108040f9becdb4cb92e0a28b137140000004abd6efb2503eaff0d000100020072bf050005001201", 0x2e}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x2, 0x11e, 0xf29, 0x1c04, 0xffffffffffffffff, 0x40, '\x00', 0x0, r1, 0x4, 0x2, 0x0, 0x3}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704003212812e672ccff62c6524000000000085000000bb00000095000000000000007dd3e0e5fdeb0c94ec81fa39f8d82a35"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) r6 = socket(0x2b, 0x5, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0), 0x78}}, 0x0) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendmsg$nl_route_sched(r6, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00), 0x9c}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) shutdown(r5, 0x1) recvmsg(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000800)=""/137}], 0x5}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600), 0x8, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r5, @ANYRESOCT=r6, @ANYRES64=r6], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40048d2) sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x41517f18f97c4463}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082cbd7000ffdbdf2505000000050038000100000008000600", @ANYRES32=r8, @ANYBLOB="20e04e0720e1213a10b0891a44432b1ac48bccd659cc0c7cc1868e6d7d0175aadd0ad086e97dcaf2cb"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x20, &(0x7f0000000440)={&(0x7f00000002c0)=""/179, 0xb3, 0x0, &(0x7f0000000380)=""/138, 0x8a}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x6f, 0x53, 0x0, 0x41100, 0x8, '\x00', r8, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0xffffffff, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x5, 0x700, 0x40}, 0x10, r9, r4, 0x0, &(0x7f0000000b00)=[0x1, r3, r3], 0x0, 0x10, 0x3f}, 0x90) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0}, &(0x7f0000000700)=0xc) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000d00)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e24, 0x0, 0x4e23, 0x0, 0x2, 0x20, 0x80, 0x29, r8, r10}, {0xfffffffffffffffd, 0x7, 0x5, 0x52b4, 0x59, 0x9, 0x2, 0x3}, {0xffffffff, 0x0, 0xfed, 0x8}, 0x0, 0x6e6bb4, 0x1, 0x1, 0x3, 0x3}, {{@in=@broadcast, 0x4d2, 0x33}, 0x2, @in=@rand_addr=0x64010100, 0x3500, 0x0, 0x3, 0x20, 0xfff, 0x0, 0xff}}, 0xe8) getgid() socket$nl_crypto(0x10, 0x3, 0x15) socket(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000e40)=ANY=[@ANYBLOB="620ac4ff0000000071103a0000000000950000000000000076dc0e1467c58bbb604a7a9a12034165e6482341e6fdd6167c346fb4e2e8112ae2b0acbc51fa00333bf91b6cc84f65c7fa28c80a450bb82023476fd1ff1f3323e7f7cfe0cb5192a4a2e4866db274b7a0f6b61f3bcd151111df8848f065165f084eafb7e74a48535448b9d2b1e4c8b127fdb7a0edd3bcb7eace74a0be16938749cc85facf17554dcfe83551877d28964f119ae2034caa79a4160257d0f6a9c6c6b613529a231c101454ecbde5793f3f10c394d0127f"], &(0x7f0000000480)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x90) 1.331968306s ago: executing program 3 (id=511): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x28}}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="050000000508"], 0x80}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) r9 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000600)) getsockopt$bt_sco_SCO_OPTIONS(r9, 0x11, 0x1, &(0x7f00000005c0)=""/4096, &(0x7f00000015c0)=0x1000) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r7, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x14, r8, 0x4, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40805) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x110, 0x0, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz1\x00'}, @CTA_EXPECT_NAT={0xf0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0xdc, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x20048019}, 0x40) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x734f13fc1965a4f5, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x3c}}, 0x0) 1.318626436s ago: executing program 4 (id=512): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit, @alu={0x7}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x90) 1.235939133s ago: executing program 2 (id=513): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r4, @ANYBLOB="24002d80080002000300000005000100000000000500040000000000080003"], 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x7c, r5, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x50, r8, 0x2b8ee6cf79dab3f, 0x0, 0x0, {0x2e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}}, 0x0) pselect6(0x0, 0x0, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x1}, 0xfe}, 0x18) syz_emit_ethernet(0x36, &(0x7f0000000440)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @timestamp_reply={0xe, 0x0, 0x0, 0x3, 0xfff7}}}}}, 0x0) socket$inet(0x2, 0x6, 0x2) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, 0x0, 0xb, 0x5, 0x0, 0x0, {0x3}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}]}, 0x2c}}, 0x0) 1.230846631s ago: executing program 0 (id=514): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x0, 0x1400, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x200}}}}}}]}, 0x48}}, 0x0) 1.138271598s ago: executing program 1 (id=515): socket$kcm(0xa, 0x2, 0x73) r0 = socket$can_raw(0x1d, 0x3, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0x2, 0x1, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) r1 = socket$inet6(0x10, 0x0, 0x0) write(r1, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b00", 0x20) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x44, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote, 0xeb2}}}, 0x108) socket(0x3, 0x0, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000180)={@empty}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x50, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xe1}]}]}, 0x50}}, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000100)=0x3, 0x4) r5 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000200)=0x60) getsockopt$nfc_llcp(r5, 0x118, 0x1, &(0x7f0000000500)=""/212, 0xd4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10, 0x0}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x371, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010300400000002200001f0000000c0006000100000001000000"], 0x20}, 0x1, 0x3000000}, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000006c0)="de38d3a413e8127997f7bf6ca59bc97bce9df2303bc85a024f63e90baee35b98f6b87c127853349332d6624ea75a69a4513128cf809dce2c0791cf6452a4eade5d26a3755656a9d9faa98715d74dbfc8f0b8e086cf96e19a12c97aaa9191b3741affcf6cf393cd23963d2c651ed0198ec74f39ef1072193c476690ab25a064518dc230362c13b51c6e3444859b7e8c586ea847de9845eb8f48abb00232ded52926366a3a4c4a601d35cbac08d544a45ed1c84f7710903ad2c07ab6536dfe9ce10249920a4c7fb4de36e886d9a2cc8e09393aba62a2f3f6820a3db3bbcb6befdbc555ff1b80ef887caa510b576c47f2825d6d718f96c8cb5e22210c567dfcdc2047275ea24fb3539900dcc46ab0c2d010186c9eab42d2540dfd6397c9101f2dbcaff829f47636ef6beea1e01fb6350b02cb12cc38df58c6c91cd5c66c762369dfe22293865ad61393ba130895b52f981155", 0x151) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r6, 0x8030942b, &(0x7f0000000040)={0x0, {0x36, 0x0, 0x1ff, 0x0, 0x4}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0}, 0x90) close(r0) socket(0xa, 0x80003, 0x81) 1.092455186s ago: executing program 4 (id=516): socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}]}, 0x40}}, 0x0) sendmmsg$inet(r0, &(0x7f00000008c0)=[{{&(0x7f0000000040)={0x2, 0x64, @remote}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty=0xc000000, @empty}}}], 0x20}}], 0x1, 0x0) 988.157471ms ago: executing program 3 (id=517): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time_for_children\x00') (async, rerun: 64) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 64) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0x13, 0x4) (async) unshare(0x6060600) (async) pread64(r0, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061104b0000000000950000e8ff000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd}}, 0x2e) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x5, 0x0, 0x4) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (rerun: 64) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) (async, rerun: 32) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) (async, rerun: 32) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (rerun: 32) unshare(0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000001300)=@filter={'filter\x00', 0xe, 0x4, 0x350, 0xffffffff, 0x138, 0x0, 0x138, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, &(0x7f00000001c0), {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x18}, 0xff, 0xffffffff, 'wlan1\x00', 'macvtap0\x00', {0xff}, {}, 0x1d, 0x0, 0x1a}, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x3, 0x1, 0x1, 0x6, 0x5, 0x1], 0x25, 0xc}}}, @common=@inet=@socket2={{0x28}, 0x3}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x800, 0xd, [0x21, 0x28, 0x1e, 0x34, 0x12, 0x16, 0x1c, 0x10, 0x29, 0x5, 0x2d, 0x40, 0x34, 0x29, 0x25], 0x2, 0x1c, 0x9}}}, {{@ip={@rand_addr=0x64010102, @broadcast, 0xffffffff, 0xff, 'vlan0\x00', 'veth1_vlan\x00', {0xff}, {0xff}, 0x2, 0x3}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x33}, @rand_addr=0x64010100, 0xffffffff, 0x0, 'veth1_macvtap\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x82, 0x2, 0x40}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x3, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r9], 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x48001}, 0x0) ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f0000000700)={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @mcast1, 0xfff, 0x3ff, 0x4, 0x0, 0x2b, 0x800004, r6}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x6ada, 0x8, 0xfffffffa, 0x32e, r7, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3, 0x2}, 0x48) 977.080886ms ago: executing program 1 (id=518): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c000400", @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000100", @ANYRES32=0x0, @ANYBLOB="400002"], 0x5c}, 0x1, 0xf000}, 0x0) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002b000100000000000002001808"], 0x114}], 0x1}, 0x0) 875.974052ms ago: executing program 4 (id=519): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000540)={@empty, @broadcast, @val={@void, {0x8100, 0x3, 0x1, 0x4}}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0xc4, 0x2f, 0x0, @empty, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, {}, {}, {0x8, 0x22eb, 0x4}, {0x8, 0x6558, 0x2}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60350005000a000200053582c137153e37000c0980fc0b10000300", 0x2e}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650088a8ffff0500070009000000"], 0x44}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000007110a800000000000095000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff2}}}, 0x24}}, 0x4000) unshare(0x20000400) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$inet(0x2, 0x3, 0x2) socket$inet(0x2, 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES64=r3, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="0800320024c900000500330005"], 0x2c}}, 0x0) socket$kcm(0x10, 0x2, 0x10) r7 = socket$isdn_base(0x22, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x4}]}}}]}, 0x3c}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r7, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000100)=0x40) 875.76869ms ago: executing program 0 (id=520): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="034886dd010000050000000000006000000001002100fe880001000000000000060000007d01ff020000000000000000000000000001", @ANYRESOCT=r1], 0xfdef) 712.433124ms ago: executing program 1 (id=521): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x10b}], {0x14}}, 0x9c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fcffffff060000000000000085000000417d0000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0xc36}, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e40)={r3, 0xe0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000ac0)=[0x0, 0x0], &(0x7f0000000bc0)=[0x0, 0x0], 0x0, 0xdb, &(0x7f0000000c00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000c80), &(0x7f0000000cc0), 0x8, 0x85, 0x8, 0x8, &(0x7f0000000d00)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000ec0)={'gretap0\x00', &(0x7f0000000f80)={'ip_vti0\x00', 0x0, 0x40, 0x700, 0xa, 0x0, {{0x27, 0x4, 0x2, 0x5, 0x9c, 0x68, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@cipso={0x86, 0x3b, 0x0, [{0x1, 0x2}, {0x5, 0x6, "ebf6b418"}, {0x1, 0x5, "69a08c"}, {0x0, 0x12, "ceabdf4898355070c3a2eea9f37bd4b4"}, {0x5, 0x7, "22cab2fcb8"}, {0x2, 0xf, "3de8d7716115c48e5d2219cbf3"}]}, @end, @noop, @rr={0x7, 0x13, 0x79, [@broadcast, @multicast2, @empty, @rand_addr=0x64010102]}, @generic={0x88, 0xc, "b7aac6fc0d33ebf1cb72"}, @end, @generic={0x82, 0x7, "ce68cf184d"}, @timestamp_addr={0x44, 0x24, 0x72, 0x1, 0x2, [{@local, 0x5}, {@multicast2, 0x3}, {@multicast2, 0x9}, {@private=0xa010100, 0xffff}]}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r9, @ANYBLOB="00fa7b6fa19be554fa00128009000100626f6e64000000000c0002800600190000000000"], 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000440), 0xc, &(0x7f0000001180)={&(0x7f0000001040)={0x10c, 0x0, 0x624, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4008011}, 0x8de4a638e37d4eec) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffd88) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r11}, &(0x7f0000000140), &(0x7f0000000180)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x14, 0x13, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0xe0, &(0x7f0000000580)=""/224, 0x40f00, 0x0, '\x00', r10, 0x1c, r11, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000800)=[{0x0, 0x2, 0x10, 0x2}, {0x3, 0x1, 0xb, 0xa}, {0x2, 0x4, 0x9, 0x5}], 0x10, 0x2b04a862}, 0x90) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="a40000001e00431b2bbd70000000000007000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000840018800c00018008000100060000005c0001800800010009000000050006000000000014001a00bc153df87b9499c71ab867c3b34b66a914000500eeddd80dfffae1e21f4cf49c1cb4f6e566a3199a20000200e8571122216a6b6a4be38030a12af08bdce9c48bb4305f5351c53d00180001801400100000000000000074e747f27620f33746e4"], 0xa4}}, 0x0) r12 = socket$kcm(0x10, 0x400000002, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x13, 0xffffffffffffffff, 0x0) sendmsg$inet(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b000000016007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d522ac78876a4595146add31b35355848794ca3f8b38aef1e114ab9fb0200000000000000a3b0c81c6f8144e74fe13b80ca46c1a6c04ad73c9d44b605f900"/158, 0x9e}, {&(0x7f00000000c0)="68c32a7de6a2395800000000000000000000894faaf39ffe271f432f", 0x1c}], 0x2}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e80)={0x24, 0x1402, 0x1, 0x0, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}}, 0x0) 674.691579ms ago: executing program 3 (id=522): getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@initdev, @in=@multicast1}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000002b80)=[{{&(0x7f0000000000)={0xa, 0x101, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1400679200000000290000000b00000000000006000000001400000000000000290000e1ebaa2f4600d30b0043000000ffffffff00000000"], 0x30}}], 0x1, 0x0) socket$kcm(0x21, 0x2, 0x2) r2 = socket(0x22, 0x2, 0x5) ioctl$PPPOEIOCDFWD(r2, 0x80044944, 0x1000000000000) close(r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="f56119cb06d5bc1f80ea5714638d6d85464fe4e5be24ddaab8411ae8f52df2b0d7266ab65baacbfd14e53abb915b7dcbdc7fecadf1957e81979c9743d789a98992e5f81244203e791a0a26c69213e054c8e5d7478eb71f6dda26bd8a3945144a8919a2a402fde8fad10ed5c356b3f947c343648b6f849439", @ANYRES16=0x0, @ANYBLOB="00042abd7000fddbdf25030000000500050004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0xc0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16=0x0, @ANYRES8], 0x50}}, 0x8840) r3 = socket(0x9, 0x80000, 0x7) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) socket$inet6(0xa, 0x80002, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001940)={0x114, 0x2b, 0x9f2d3d3f99cf9fb9, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 492.529795ms ago: executing program 4 (id=523): socket(0x10, 0x3, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in=@dev, @in6=@dev}, {@in=@multicast1, 0x0, 0x32}, @in6=@empty}}, [@mark={0xc}]}, 0x104}}, 0x0) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x3}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) 483.052834ms ago: executing program 3 (id=524): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x14}]}}, 0x0, 0x42}, 0x20) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80800) r0 = socket(0x2000000015, 0x80005, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x20000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004000000000000335faff3ada40dda49b3b67b20edf8ddc3a489e1000e97ebb5a07477949fcba823d0fd0d9fb8437766aea843b44300864b83e3d5a7fef8bdbf80b822031a31de1c9a0da0bb3a95583c924f2099b14ac8a90a78308b476313762846a4f14a415cf4a92b6c006ed6dca4bcea84f2e10f782823aea7c70c0458258c1453430581c069780c6886b0b77aa280a1331c52315d51092e106f0011a2d2ac83"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018200000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500004000000000fbc04bbe0690592f2c376fefce90181fb830eee7feae140cb23f7f88bfac5be73f10586e630698bc4f1fcf3a1ca8427c99d3754f88fc734b6955aa6407d26723306949f8cd611425e13ce134c1287662df3c18567330e7c6c17f84d6d58bc5d76e9bc8aa0b2d66a15603f491835977b12c5c"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x8, 0x4}, 0x10}, 0x90) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'pim6reg1\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xffff, '\x00', 0x0, r3, 0x3, 0x5, 0x3}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000000)=0x3) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)=@o_path={&(0x7f00000005c0)='./file0\x00', 0x0, 0x8, r2}, 0x18) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0xffffffffffffffff, 0x5}, 0xc) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) pwrite64(r8, &(0x7f00000002c0)="8c", 0x1, 0x7fffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff014}, {0x6}]}, 0x10) sendmsg$key(r2, &(0x7f0000000040)={0xcd, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000e9255bb992464e73a02159d3720df19f7a1dfec30000000003000600000000000200000000000000000000000000000002000100000000fffffffb0d00000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0) bind$inet(r1, 0x0, 0x0) 383.461133ms ago: executing program 0 (id=525): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a40)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x58, 0x18, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELTABLE={0x274, 0x2, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0xfa, 0x6, "6fbcd03abf2a0f3c32691d606dcc604b85ebf24e1f7bc5a1af57d8888624530f1d71ead5b1177a2161736ed585e8ccef0ea9aac7f5d58e9dd50d6f3297aa4f447324b4e906062efa708c6057eca6086b78ce41db1f3c10f24f729f31dc4c755168f1d0c047bc285b2720ca40afb8cbc0c1a99680108023471cfffc3439e9bc84103ed0fd2054c8692f52e6ff489a16247f7f104d8d650b2abcd674a4c2dc04c23899e792bceb5ba6ccc1f9003283ed1c2df63eefc11f1d8521fbd6535ff777893ea88902be330202b80c6207958f79102785a41162960aadde1e5c6fa6a1ed29eeb0ead7d79a74edaa885d3ecf2b0f15e13aeecfa9e6"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xb1, 0x6, "41be26000bd116fc8bc3651ec5b4ccaea6023cfa0591be3b24a65829934b92b2e11c79ee8e91b21c9a5504995d9bf617da04bef6b7ed4a5ef01be8a8a8099b106baf81ad11c175fe190af5a7dc2ab23ba2bdf012194d13675303414198af2c1370818fc5bc4c0463dc804371c8b23f6ff1501b307f22df8ad0edba5399644e714414c460dd5c17f605177f3dfee842842bff3e3809146d8b971573208e4197d0a7c70c2d5c9a6e144959e86802"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x63, 0x6, "c7d5cd953f20a72dfc9b3d443c896f3f2c7e40a5c7b502e0321c715a8b407ebbaae49d7da4d016be126e4a9b102efb4f7aebbe089bfd36adbd276a0520707214eb722037bc5d64391cfd4a8bca333365822bb4e7218778fa392103effe9977"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x154, 0xb, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x20}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_USERDATA={0xe3, 0xd, 0x1, 0x0, "b9068d9211217a3dfec6bd1937774a43bed16abd6fe2ac1feab5cd291ea4680f31877cb39e67e48ac4888012581864ef67547c64aec30224a829ac69df4eb1fcf1f0b69a17ca83c654e538c2c70c63092c0e19bcccddda36cbad7bac8ad2a19499fb02f2e568a4b9c419cc030317769b24876bdd9daf28bd33eb09ac3a5d2f4b807176c111689374c0ec65b06cc4547274cdf8d527cc4cd77461a1a25ced603de143a187238ec374a2e9e90bdbc6990e65b26b46132704a60ec5ebf1e77e4d7f8290f7989d977772e0d15177a4a2c30ab099608a913d19e8d07aba171b93f6"}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x6}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFT_MSG_NEWSETELEM={0x231c, 0xc, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x2308, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}, {0x15bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x800}, @NFTA_SET_ELEM_EXPRESSIONS={0x178, 0xb, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xa}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x38}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x10000000}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x8000}]}}}, {0x28, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x50, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_FWD_NFPROTO={0x8}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}}}, {0x38, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x400}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xea}]}}}]}, @NFTA_SET_ELEM_USERDATA={0xc1, 0x6, 0x1, 0x0, "74c15e5a0db769dc2327ed9812a171aec2294be43261fa0e702e6168c60f8e1195b8a91bed8789a5edf8e16493c516b4a6712133428ca99fba7d666c5c66b5b6265cd4af0f6be05267b80b0089874aef3ddf9a45709037adb11427d9bb1656e5f622793401625930d505d0490ab667b4f561feca94af7044cd47c8b7a7c0130f793af56cfb02e94bbc47ee78161fe39475e888d39782609b2a27c561b46527086be8ee7da6e0a6c938f6290d6c09288cffeb57521948730fdcba1d0ecb"}, @NFTA_SET_ELEM_EXPRESSIONS={0x10d0, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, {0x1c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x200}]}}}, {0x1018, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1008, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x1004, 0x3, "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"}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_DATA={0x114, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x9b, 0x1, "ea6bc8ac3ac38bb27bd12a6e451ef1be5c16a52397c5434c193c6fcb38a011679e94cab8f998b4c797f02ddd6b1a8b9d51ed22d77bf8879d925a97884ab56e58c39055c4a66a7a3b52fa3e472e358cef0d0dd766f3e52fdace8ed2190e447ccaaacb28db234802e8f4b397a19532ebda6e6e259a7fc31de0b590901527876a283a0ec66158e584dfd66dc2d00ce45c5cee745f6051a9a7"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_DATA={0x180, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xa9, 0x1, "c4b59e9b282fbc8f34edb220fd2e14bddbf1b4408b58acddd4121052143b9a122291f04101b4df54f54cf2a3e1fb3ab8020949b5ad843b6f7276963947a355cdd71750d225c001d92ae1b80e20977bd71f0302db3e414abdd91ddb4cde5682e3f77937c55aa55500b41d5c65cbb5f05f8ab386e00a00f687b46075830d8ad2bdee4eab3f786efaeaa443a66cfa6d1f8f72e592286c380f1cf5adb47003029cb6d13d3713f1"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5180}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x400}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1800}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x10100000}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x400}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x4}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x3cc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x19, 0x6, 0x1, 0x0, "3aa63e87d23f7815ed4e96a20e06414f32e0571c64"}, @NFTA_SET_ELEM_EXPRESSIONS={0x3ac, 0xb, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x7}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x8001}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x10000}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}, {0x50, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7ba7512bc3f09898}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x21}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xb}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x308, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x2f4, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x130, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xe3, 0x1, "880dda1177851cd203626e5dface7f8cdd3701be9fd6fa0a1fbb25e3d2d184b690bd86dc8c5bf34f2733b833d3e527920165d6bf936ae8d477ce34242abfee38c9b9d0f4fb2364d302740b0dd68483b7122289d76895aa0346deb3e99bb17c543250536c4bcc7ef5c5045aad76d62bd25ef92b8baab70ba84079363122771c3fa18a4556276ac417863fa9f600e472e39adfd1fe4e0cba992bcc68635293c5456ed97331322d433fbba2c38b643c239450d4ece2fcb0b5c03d03d5242bfed6f454d5bc8d824cfe12f442bd845fe95a5806be5dc6399848b715c10a8198504f"}]}, @NFTA_IMMEDIATE_DATA={0x130, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x19, 0x1, "73e9f75be67cc912436cf91b7b976c412f29cd2d60"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x49, 0x1, "237375a3de943a4fd34da8117f83cbd09cdfa7b9efe61ca2184289880e9b169ac3914c4b5ea2d9e8e70b86bad7d97296328416a07dfd1b3c274d8cbc83bacccef57918ecb0"}, @NFTA_DATA_VALUE={0x34, 0x1, "b14b5975af9abba2aca1f68000249dd103a7993e31e6c7d3429c3d090271ad44f8ebdfbbe5edc82252dd7075e5252fe0"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}]}, @NFTA_DATA_VALUE={0x31, 0x1, "202a69634b27fe447c49b752ffddcc3097ecda0fee31ecb340048052300ab81df19de9068f817c9e59219cee8b"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_IMMEDIATE_DATA={0x88, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x74, 0x1, "afb67da3675eeed7508e70bc933980e11563dbcdf42c6869b0850ae9d7d706ebc6052321f2d91a99a6007c07ad8d3a647f3943bedd816fb5650b4632b8b1b31f4c3902ac5602542a633667eb8b8f878eab1ad9028cd2bd604b78f18a1fdfc2b5d6791df4c1a34dafcff8315929a46577"}]}]}}}]}]}, {0x1e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x10}, @NFTA_SET_ELEM_KEY={0x1d8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1ff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x10000}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}]}, @NFTA_DATA_VALUE={0xa7, 0x1, "5713187579919123d0164ace3c1e62e586d812208827a5b5d0935a9d22f92977575b78ced7d9f615e3d0fc0663b8cd09cf9810d5a925bbb411e8d728d15543017965b38891fb9efdf6ad73d6d1ed4bf0e321eca0ea051d8693c27c1474efbc6331ac99713df566f073942fd966bd9d2051cc7f2620cba532bf9e863b3833a0061176ea75e1338bac47681a09cda967d151ec13e1860eeeac52a9e01865b05f3d513e66"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xb8, 0x1, "2557ee69a06a56f73e68a5ef5ca92ff82ba851c47f844ff5551bb4be03fc21afe194c98b2fa74d34e74712be980f5934f28e60815243c120da4b2e5378911f8838879630d578a9e0fde22ffe33eddc7ed1cc0d00e2fce8a016ca13afb6e918c1fea8899128ef03618556fcf80460792ff7fb4adf01855bce76dd05411196c3ff19c3db1159c354aa706ba682998704852fef752b0fe8df6f593e59bdd9ff2b71a67368c61b19050b2f9dabc556e9ee6703a5e9eb"}]}]}, {0x528, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0xc4, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x58, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}, {0x58, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_ELEM_KEY={0x31c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xc4, 0x1, "741b9deb4929a7cac7a413812f9d9604729892d63baeae6a464b3c4d7e6c06e689b9e48152ce970b721ff260f3caac33fd637b457bbfdc39e605604fdbb79dfae72f1796bbae80b64c2ae18bf81408a5eb8fc1ae7ef52dd6b4636d23d5fe8084ab688a28f6b8974f2f5d43401f3445186d2b9c6a719f2b383e169f0db6ddf2b4392fc70040cd903eb6338d1990a94799cb73fe40c46678b3e4a29948bf032bcae4d6838d4a49c13feef4cf65ddff78a97f9b872044c41bc5528f363639c040aa"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xd5e}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xa3, 0x1, "0ffc5a430abf8037871b7c158d0cd6bfcda31755813046d5444d51007dfef6a74d2b89549f759d23e07c10056e934d464636dd6f36b234525e1bc8139eb91fcc2cbbf4a8fa82cb10fb9fa7e6dea029bc0122735f50208b38ef954f908a05970705bc6e5c171087b5593e58be57669e2b5ed8dd5891d1daa874e1e555c99da446d2e74f96ea2ad57bed9bccd7b17622c4c540fa681d689a9c705fb65364a1b1"}, @NFTA_DATA_VALUE={0x9f, 0x1, "6222fd728e67fa42625b4cb9bfdb5d901c7e16852c331290be2ef1f654078383eda8e1fbc37bdf820696efed2c1a51136339a5db89e24cf774d3a5239214a2c7250c5337e9167a49324db973a5012eb76b7efcfad4441246b4565bc7dfda69f6ef9b0ee0e22c9de3036bd9670a3db175dd0796dae1d849529703656de4ce1b32dbc26c51fb562bc99a047beea5656e241a8175d0128d8c89f98d28"}, @NFTA_DATA_VALUE={0x98, 0x1, "01c45668a71ace9a6554aa00f03adfd2f12f20bc13c384cae95264cce91772d25028cff308e822614045b56f03ba99658ef3bc3fc812a3d9b96dc2694bfd4af2c4a454a8df48d10e1964230bce55f639058d19e883fcee4732d1447b8c254aa860aea4164a4615121fa743710ec685bf37217df739cf846a5813e308ef39a1d03bb35b9d9a5eaffb30ce1d2e921e2291a486d4b0"}]}, @NFTA_SET_ELEM_KEY_END={0x130, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x401}]}, @NFTA_DATA_VALUE={0x66, 0x1, "03458b11053a39213126ed58fe99f9ce6b5bc9a0e72b35381b754507d66906a45cf0ae59884548ccb29a0709a40ded9e827062f754720efa9ff2d5827ab605acf48d8abb8f143961707fecc8f9922839144e20007ae5e5e1f5d70a1615b964f5bf9c"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xfffffff8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xc6}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3dbc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}, {0x21c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xfb, 0x6, 0x1, 0x0, "d4b7151da751705e91d44f4fe7302582e86f1b616cf0d4f936d7bca3911de98b6c912e9859958141d4fbd4d6007b015569b1e6b7475f3c51cb5bc5a95b1dd886b3f75c333ec97b0f388b881b5874c74a1818949c4eee14a4e6a8026fb5e6d753acfd9c4ceb997c0950bbafb1ff8f0b208df1fde885271b422a39866c39d82edda4a0214b221a5ac6ddf3392a8ee507e3ec59fb85e182cb59e570fd0f12b68f4cc1851020561a8b6c2288ff4956ecba99a51f042add3236350f2b690dcf9b8976723ae9190f432d2eb004b842fb6fe7694aa020e27a593aa8b670c6a057a98486816b97092b521e801753ff9f94126a73fc9905a453c460"}, @NFTA_SET_ELEM_KEY={0x14, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0x105, 0x6, 0x1, 0x0, "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"}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x2764}}, 0x0) 356.64638ms ago: executing program 2 (id=526): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r2, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x1, 0x3}}, 0x26) getsockopt$bt_BT_SECURITY(r2, 0x111, 0x4, 0x0, 0x20001f00) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0xf, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b80)={0x14, 0x5e, 0x601, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206030000000000000000000000000005000100070000000900020073797a30000000000500050005000000050005000000000005002500000000000d000300686173683a6d616300000000"], 0x50}}, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000100)={'batadv0\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "ea5f008f1f74207c25d86ef81d48654145dd95eeeb39fa84a9efb293a96b2bb4", "f7082f025f34206271db0a3dc898afbe58115b279d3c4bc7903eb1dc80372298", "7eb0e7ff88d86b3a99720deba58f0066783e5fff2a2b89e1099ebc2b20803075", "1c0b5f21005efb743992dcac7d5b20b0fcd7e11c318bdd0de7fb0d750ba13886", "125efed71f8203952c134123dc644dff4e8f4276412ad669f38207d85e464f6c", "e77b1a10fdbf2f5ba5b54412"}}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r12}, &(0x7f0000000040), &(0x7f0000000140)=r11}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x1b5, &(0x7f0000000300)=ANY=[@ANYRES64=r2], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='ext4_da_reserve_space\x00', r13}, 0x10) 194.06753ms ago: executing program 0 (id=527): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0xb8, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 0s ago: executing program 0 (id=528): r0 = socket$l2tp6(0xa, 0x2, 0x73) read$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000100)={0xa, 0x7a00, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@rthdrdstopts={{0xfffffe1a}}, @hopopts={{0x0, 0x29, 0x36, {0x0, 0x0, '\x00', [@calipso={0x7, 0x0, {0x2, 0x0, 0x61, 0x6, [0x0, 0x0, 0x1d9]}}, @enc_lim, @enc_lim, @enc_lim, @enc_lim, @calipso={0x7, 0x0, {0x1, 0x0, 0x0, 0x1, [0x0]}}]}}}, @dstopts_2292={{0x78, 0x29, 0x4, {0xab, 0xb, '\x00', [@calipso={0x7, 0x40, {0x0, 0xe, 0x0, 0x7e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, @enc_lim={0x4, 0x1, 0x7}, @pad1, @enc_lim, @calipso={0x7, 0x8, {0x1}}]}}}], 0xa8}}], 0x2, 0x0) kernel console output (not intermixed with test programs): forked to background, child pid 4758 [ 47.879975][ T4759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.899580][ T4759] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: [ 48.422505][ T4841] sshd (4841) used greatest stack depth: 19032 bytes left OK syzkaller Warning: Permanently added '10.128.1.86' (ED25519) to the list of known hosts. syzkaller login: [ 67.779782][ T5080] cgroup: Unknown subsys name 'net' [ 67.918183][ T5080] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.710837][ T5080] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.732033][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.738788][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.901988][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.922857][ T5097] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.931285][ T5097] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.939178][ T5097] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.948292][ T5097] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.958325][ T5094] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.966520][ T5097] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.987067][ T5097] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.995052][ T5097] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.002303][ T5094] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.049037][ T5094] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.058568][ T5094] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.067228][ T5094] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.075051][ T5094] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.084125][ T5094] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.097682][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.111511][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.119486][ T5103] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.120527][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.130363][ T5098] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.135738][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.141355][ T5098] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.156948][ T5108] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.165463][ T5108] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.173914][ T5108] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.186291][ T5109] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.194820][ T5108] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 74.203318][ T5108] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.205037][ T4489] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.218742][ T4489] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.554086][ T5091] chnl_net:caif_netlink_parms(): no params data found [ 74.881676][ T5091] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.889395][ T5091] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.896771][ T5091] bridge_slave_0: entered allmulticast mode [ 74.905724][ T5091] bridge_slave_0: entered promiscuous mode [ 74.955732][ T5091] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.963048][ T5091] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.970357][ T5091] bridge_slave_1: entered allmulticast mode [ 74.978153][ T5091] bridge_slave_1: entered promiscuous mode [ 75.003755][ T5101] chnl_net:caif_netlink_parms(): no params data found [ 75.037881][ T5100] chnl_net:caif_netlink_parms(): no params data found [ 75.094814][ T5091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.140672][ T5091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.227231][ T5091] team0: Port device team_slave_0 added [ 75.245606][ T5105] chnl_net:caif_netlink_parms(): no params data found [ 75.265889][ T5091] team0: Port device team_slave_1 added [ 75.330360][ T5095] chnl_net:caif_netlink_parms(): no params data found [ 75.376804][ T5101] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.384611][ T5101] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.392448][ T5101] bridge_slave_0: entered allmulticast mode [ 75.400140][ T5101] bridge_slave_0: entered promiscuous mode [ 75.407789][ T5100] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.414946][ T5100] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.422420][ T5100] bridge_slave_0: entered allmulticast mode [ 75.429733][ T5100] bridge_slave_0: entered promiscuous mode [ 75.443088][ T5100] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.450398][ T5100] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.458743][ T5100] bridge_slave_1: entered allmulticast mode [ 75.466017][ T5100] bridge_slave_1: entered promiscuous mode [ 75.474005][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.481205][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.507511][ T5091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.533116][ T5101] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.540433][ T5101] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.547968][ T5101] bridge_slave_1: entered allmulticast mode [ 75.555037][ T5101] bridge_slave_1: entered promiscuous mode [ 75.601681][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.608976][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.635630][ T5091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.701625][ T5100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.729713][ T5101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.742863][ T5101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.754498][ T5100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.877814][ T5101] team0: Port device team_slave_0 added [ 75.887335][ T5100] team0: Port device team_slave_0 added [ 75.897247][ T5100] team0: Port device team_slave_1 added [ 75.908862][ T5091] hsr_slave_0: entered promiscuous mode [ 75.915712][ T5091] hsr_slave_1: entered promiscuous mode [ 75.965004][ T5101] team0: Port device team_slave_1 added [ 75.999585][ T5105] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.006793][ T5105] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.014611][ T5105] bridge_slave_0: entered allmulticast mode [ 76.022254][ T5105] bridge_slave_0: entered promiscuous mode [ 76.030221][ T5095] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.037382][ T5095] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.044973][ T5095] bridge_slave_0: entered allmulticast mode [ 76.051969][ T5103] Bluetooth: hci0: command tx timeout [ 76.059243][ T5095] bridge_slave_0: entered promiscuous mode [ 76.094395][ T5100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.101714][ T5100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.128179][ T5100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.140585][ T5105] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.147969][ T5105] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.155204][ T5105] bridge_slave_1: entered allmulticast mode [ 76.163028][ T5105] bridge_slave_1: entered promiscuous mode [ 76.170657][ T5095] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.178036][ T5095] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.185236][ T5095] bridge_slave_1: entered allmulticast mode [ 76.192811][ T5095] bridge_slave_1: entered promiscuous mode [ 76.207699][ T5103] Bluetooth: hci2: command tx timeout [ 76.236856][ T5101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.244067][ T5101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.270126][ T5101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.282496][ T5100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.289650][ T5103] Bluetooth: hci3: command tx timeout [ 76.289962][ T5103] Bluetooth: hci1: command tx timeout [ 76.300644][ T5110] Bluetooth: hci4: command tx timeout [ 76.301024][ T5100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.332148][ T5100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.373043][ T5095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.395924][ T5101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.403193][ T5101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.429549][ T5101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.461327][ T5095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.509295][ T5105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.571384][ T5105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.585500][ T5101] hsr_slave_0: entered promiscuous mode [ 76.592284][ T5101] hsr_slave_1: entered promiscuous mode [ 76.599731][ T5101] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.608575][ T5101] Cannot create hsr debugfs directory [ 76.633249][ T5095] team0: Port device team_slave_0 added [ 76.698447][ T5095] team0: Port device team_slave_1 added [ 76.743632][ T5105] team0: Port device team_slave_0 added [ 76.752821][ T5105] team0: Port device team_slave_1 added [ 76.796256][ T5100] hsr_slave_0: entered promiscuous mode [ 76.802889][ T5100] hsr_slave_1: entered promiscuous mode [ 76.809805][ T5100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.817377][ T5100] Cannot create hsr debugfs directory [ 76.857749][ T5095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.864743][ T5095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.891411][ T5095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.962949][ T5105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.970133][ T5105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.996632][ T5105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.008957][ T5095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.015928][ T5095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.042710][ T5095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.090289][ T5105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.097277][ T5105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.123594][ T5105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.286845][ T5105] hsr_slave_0: entered promiscuous mode [ 77.296076][ T5105] hsr_slave_1: entered promiscuous mode [ 77.302629][ T5105] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.310747][ T5105] Cannot create hsr debugfs directory [ 77.343574][ T5095] hsr_slave_0: entered promiscuous mode [ 77.350446][ T5095] hsr_slave_1: entered promiscuous mode [ 77.356780][ T5095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.364650][ T5095] Cannot create hsr debugfs directory [ 77.372163][ T5091] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.440052][ T5091] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.451485][ T5091] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.506067][ T5091] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.732710][ T5101] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.746300][ T5101] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.787167][ T5101] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.835541][ T5101] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.885010][ T5100] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.904522][ T5100] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.920389][ T5100] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.945843][ T5100] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.054650][ T5095] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.081370][ T5095] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.092232][ T5095] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.127988][ T5110] Bluetooth: hci0: command tx timeout [ 78.147083][ T5095] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.199255][ T5091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.276775][ T5105] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.287669][ T5110] Bluetooth: hci2: command tx timeout [ 78.305124][ T5091] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.325798][ T5101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.342601][ T5105] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.353626][ T5105] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.366903][ T5105] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.375073][ T5110] Bluetooth: hci4: command tx timeout [ 78.381476][ T5103] Bluetooth: hci3: command tx timeout [ 78.381487][ T4489] Bluetooth: hci1: command tx timeout [ 78.424579][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.432005][ T5143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.476104][ T5143] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.483325][ T5143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.545499][ T5101] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.595063][ T5100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.629359][ T5146] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.636661][ T5146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.647878][ T5146] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.655013][ T5146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.756801][ T5100] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.832405][ T5146] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.839690][ T5146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.861441][ T5146] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.868720][ T5146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.915454][ T5095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.013912][ T5095] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.055690][ T5100] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.095369][ T5105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.107219][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.114501][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.133275][ T5147] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.140521][ T5147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.164036][ T5091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.271621][ T5105] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.330263][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.337596][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.395677][ T5147] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.402909][ T5147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.603296][ T5101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.784460][ T5101] veth0_vlan: entered promiscuous mode [ 79.847112][ T5100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.866763][ T5101] veth1_vlan: entered promiscuous mode [ 80.012190][ T5095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.037102][ T5091] veth0_vlan: entered promiscuous mode [ 80.106065][ T5100] veth0_vlan: entered promiscuous mode [ 80.113635][ T5091] veth1_vlan: entered promiscuous mode [ 80.145072][ T5101] veth0_macvtap: entered promiscuous mode [ 80.185573][ T5101] veth1_macvtap: entered promiscuous mode [ 80.194983][ T5100] veth1_vlan: entered promiscuous mode [ 80.209340][ T5103] Bluetooth: hci0: command tx timeout [ 80.222613][ T5095] veth0_vlan: entered promiscuous mode [ 80.254320][ T5095] veth1_vlan: entered promiscuous mode [ 80.315563][ T5105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.345541][ T5101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.360366][ T5100] veth0_macvtap: entered promiscuous mode [ 80.369941][ T5091] veth0_macvtap: entered promiscuous mode [ 80.375748][ T5103] Bluetooth: hci2: command tx timeout [ 80.396182][ T5101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.410367][ T5101] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.422302][ T5101] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.432520][ T5101] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.442207][ T5101] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.451698][ T5103] Bluetooth: hci4: command tx timeout [ 80.457130][ T5103] Bluetooth: hci1: command tx timeout [ 80.463080][ T5110] Bluetooth: hci3: command tx timeout [ 80.464198][ T5091] veth1_macvtap: entered promiscuous mode [ 80.493896][ T5100] veth1_macvtap: entered promiscuous mode [ 80.574081][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.585667][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.598348][ T5100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.635026][ T5095] veth0_macvtap: entered promiscuous mode [ 80.679081][ T5095] veth1_macvtap: entered promiscuous mode [ 80.686431][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.699218][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.713733][ T5100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.724434][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.735562][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.748450][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.759278][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.772512][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.780435][ T5105] veth0_vlan: entered promiscuous mode [ 80.794482][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.808252][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.819177][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.830083][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.842257][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.862927][ T5091] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.871859][ T5091] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.881106][ T5091] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.890197][ T5091] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.953001][ T2811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.963253][ T5100] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.967525][ T2811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.981664][ T5100] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.990674][ T5100] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.999604][ T5100] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.014995][ T5105] veth1_vlan: entered promiscuous mode [ 81.100768][ T2811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.123958][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.128238][ T2811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.141038][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.152338][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.163236][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.174217][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.185054][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.201132][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.226789][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.243788][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.254661][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.268839][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.279087][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.289972][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.303046][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.331777][ T5105] veth0_macvtap: entered promiscuous mode [ 81.373113][ T5095] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.382001][ T5095] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.391417][ T5095] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.400442][ T5095] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.466899][ T5105] veth1_macvtap: entered promiscuous mode [ 81.521137][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.563464][ T996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.565234][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.583156][ T996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.660893][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.673534][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.688122][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.699005][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.709257][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.721541][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.731730][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.742457][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.754432][ T5105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.776394][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.784902][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.817796][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.835553][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.848404][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.876261][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.905839][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.917692][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.927661][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.938212][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.950046][ T5105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.960109][ T5185] syz.2.7 uses obsolete (PF_INET,SOCK_PACKET) [ 81.976504][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.008092][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.028239][ T5105] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.037005][ T5105] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.073858][ T5105] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.086368][ T5105] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.303331][ T5103] Bluetooth: hci0: command tx timeout [ 82.312557][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.327937][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.448089][ T5103] Bluetooth: hci2: command tx timeout [ 82.527903][ T5103] Bluetooth: hci1: command tx timeout [ 82.528237][ T5110] Bluetooth: hci3: command tx timeout [ 82.533931][ T5103] Bluetooth: hci4: command tx timeout [ 82.763875][ T5200] veth1_to_bridge: entered allmulticast mode [ 82.767731][ T996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.783421][ T5198] veth1_to_bridge: left allmulticast mode [ 82.827590][ T996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.867283][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.933353][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.097107][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.158777][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.391392][ T5213] netlink: 'syz.4.16': attribute type 8 has an invalid length. [ 83.458206][ T5216] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.994074][ T5236] netlink: 'syz.1.23': attribute type 10 has an invalid length. [ 83.995739][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 84.092233][ T5242] netlink: 'syz.0.24': attribute type 1 has an invalid length. [ 84.107342][ T5242] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.24'. [ 84.118738][ T5236] team0: Failed to send options change via netlink (err -105) [ 84.126287][ T5236] team0: Port device netdevsim0 added [ 84.188306][ T5240] netlink: 'syz.1.23': attribute type 10 has an invalid length. [ 84.229982][ T5240] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 84.264605][ T5240] team0: Failed to send options change via netlink (err -105) [ 84.291373][ T5240] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 84.315917][ T5240] team0: Port device netdevsim0 removed [ 84.362136][ T5240] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 84.743261][ T5265] netlink: 36 bytes leftover after parsing attributes in process `syz.0.33'. [ 84.777520][ T5266] netlink: 'syz.3.35': attribute type 1 has an invalid length. [ 84.800828][ T5266] netlink: 224 bytes leftover after parsing attributes in process `syz.3.35'. [ 84.816201][ T5268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.34'. [ 85.754083][ T5312] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.383598][ T5337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.59'. [ 86.535544][ T5342] Illegal XDP return value 4294967282 on prog (id 9) dev N/A, expect packet loss! [ 86.766979][ T5356] netlink: 184 bytes leftover after parsing attributes in process `syz.3.66'. [ 86.808060][ T5356] netlink: 'syz.3.66': attribute type 1 has an invalid length. [ 87.004962][ T5366] ip6gretap0: entered promiscuous mode [ 87.030829][ T5366] batadv_slave_0: entered promiscuous mode [ 87.084600][ T5371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.73'. [ 87.132733][ T58] cfg80211: failed to load regulatory.db [ 88.178848][ T5414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.90'. [ 88.350376][ T5414] netlink: 28 bytes leftover after parsing attributes in process `syz.3.90'. [ 88.484752][ T5420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.93'. [ 89.363099][ T5410] Zero length message leads to an empty skb [ 89.553016][ T5454] __nla_validate_parse: 2 callbacks suppressed [ 89.553037][ T5454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.105'. [ 89.631590][ T5452] gretap1: entered promiscuous mode [ 89.710058][ T5452] gretap1: entered allmulticast mode [ 89.811780][ T5459] netlink: 28 bytes leftover after parsing attributes in process `syz.4.105'. [ 90.736950][ T5443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.720079][ T5531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.128'. [ 91.834505][ T5533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.131'. [ 91.882595][ T5536] netlink: 'syz.3.132': attribute type 10 has an invalid length. [ 91.958379][ T5538] netlink: 'syz.0.131': attribute type 21 has an invalid length. [ 91.997715][ T5538] netlink: 128 bytes leftover after parsing attributes in process `syz.0.131'. [ 92.035511][ T5538] netlink: 'syz.0.131': attribute type 5 has an invalid length. [ 92.059724][ T5538] netlink: 3 bytes leftover after parsing attributes in process `syz.0.131'. [ 92.489057][ T5562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.141'. [ 92.541375][ T5562] netlink: 28 bytes leftover after parsing attributes in process `syz.4.141'. [ 92.722115][ T5567] geneve2: entered promiscuous mode [ 92.735807][ T5567] geneve2: entered allmulticast mode [ 93.184708][ T5582] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.148'. [ 93.198061][ T5582] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 93.206896][ T5582] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 93.472372][ T5592] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 94.172068][ T5628] netlink: 28 bytes leftover after parsing attributes in process `syz.4.168'. [ 94.183550][ T5628] netlink: 'syz.4.168': attribute type 4 has an invalid length. [ 94.391168][ T5634] netlink: 'syz.4.170': attribute type 29 has an invalid length. [ 94.405397][ T5634] netlink: 'syz.4.170': attribute type 29 has an invalid length. [ 94.431406][ T5634] netlink: 'syz.4.170': attribute type 29 has an invalid length. [ 94.449365][ T5634] netlink: 'syz.4.170': attribute type 29 has an invalid length. [ 94.500779][ T5634] netlink: 'syz.4.170': attribute type 29 has an invalid length. [ 94.524099][ T5634] netlink: 'syz.4.170': attribute type 29 has an invalid length. [ 95.081187][ T5660] Bluetooth: MGMT ver 1.22 [ 95.099970][ T5660] Bluetooth: hci3: invalid length 0, exp 2 for type 19 [ 95.135157][ T5669] __nla_validate_parse: 2 callbacks suppressed [ 95.135180][ T5669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.181'. [ 95.172995][ T5660] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 95.197789][ T5660] macsec1: entered promiscuous mode [ 95.203381][ T5660] macsec1: entered allmulticast mode [ 95.217748][ T5660] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 95.246259][ T5674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.183'. [ 95.263503][ T5674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.183'. [ 95.284527][ T5660] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 95.294931][ T5660] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 95.357263][ T5678] netlink: 28 bytes leftover after parsing attributes in process `syz.1.181'. [ 96.398787][ T5724] xt_TCPMSS: Only works on TCP SYN packets [ 96.919085][ T5749] vlan2: entered promiscuous mode [ 96.924452][ T5749] syz_tun: entered promiscuous mode [ 96.965315][ T5749] syz_tun: left promiscuous mode [ 97.486671][ T5770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.216'. [ 97.541764][ T5778] netlink: 40 bytes leftover after parsing attributes in process `syz.1.217'. [ 97.780897][ T5789] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 98.258242][ T5147] IPVS: starting estimator thread 0... [ 98.268771][ T5810] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 98.348920][ T5811] IPVS: using max 15 ests per chain, 36000 per kthread [ 98.363888][ T5813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.232'. [ 98.485503][ T5820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.235'. [ 98.512621][ T5813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.232'. [ 98.523767][ T5813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.232'. [ 98.720723][ T5827] bond0: (slave bond_slave_0): Releasing backup interface [ 99.817043][ T5864] syzkaller0: entered promiscuous mode [ 99.847680][ T5864] syzkaller0: entered allmulticast mode [ 100.319216][ T5895] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 102.000074][ T5924] validate_nla: 2 callbacks suppressed [ 102.000096][ T5924] netlink: 'syz.0.284': attribute type 29 has an invalid length. [ 102.051662][ T5924] netlink: 'syz.0.284': attribute type 29 has an invalid length. [ 102.206778][ T5940] FAULT_INJECTION: forcing a failure. [ 102.206778][ T5940] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 102.250026][ T5940] CPU: 1 PID: 5940 Comm: syz.3.292 Not tainted 6.10.0-rc6-syzkaller-01218-g390b14b5e9f6 #0 [ 102.260168][ T5940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 102.270273][ T5940] Call Trace: [ 102.273589][ T5940] [ 102.276556][ T5940] dump_stack_lvl+0x241/0x360 [ 102.281382][ T5940] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.286629][ T5940] ? __pfx__printk+0x10/0x10 [ 102.291328][ T5940] ? snprintf+0xda/0x120 [ 102.295620][ T5940] should_fail_ex+0x3b0/0x4e0 [ 102.295861][ T5935] vlan2: entered promiscuous mode [ 102.300325][ T5940] _copy_to_user+0x2f/0xb0 [ 102.300383][ T5940] simple_read_from_buffer+0xca/0x150 [ 102.300414][ T5940] proc_fail_nth_read+0x1e9/0x250 [ 102.300443][ T5940] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 102.300471][ T5940] ? rw_verify_area+0x520/0x6b0 [ 102.330932][ T5940] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 102.336542][ T5940] vfs_read+0x204/0xbc0 [ 102.340749][ T5940] ? __pfx_lock_release+0x10/0x10 [ 102.345876][ T5940] ? __pfx_vfs_read+0x10/0x10 [ 102.350608][ T5940] ? __fget_files+0x29/0x470 [ 102.355254][ T5940] ? __fget_files+0x3f6/0x470 [ 102.357123][ T5935] syz_tun: entered promiscuous mode [ 102.359972][ T5940] ksys_read+0x1a0/0x2c0 [ 102.360012][ T5940] ? __pfx_ksys_read+0x10/0x10 [ 102.360041][ T5940] ? do_syscall_64+0x100/0x230 [ 102.360068][ T5940] ? do_syscall_64+0xb6/0x230 [ 102.360094][ T5940] do_syscall_64+0xf3/0x230 [ 102.360118][ T5940] ? clear_bhb_loop+0x35/0x90 [ 102.393537][ T5940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.399577][ T5940] RIP: 0033:0x7f0cb0d746bc [ 102.404043][ T5940] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 102.423697][ T5940] RSP: 002b:00007f0cb1bf0040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 102.432166][ T5940] RAX: ffffffffffffffda RBX: 00007f0cb0f03f60 RCX: 00007f0cb0d746bc [ 102.440272][ T5940] RDX: 000000000000000f RSI: 00007f0cb1bf00b0 RDI: 0000000000000005 [ 102.448292][ T5940] RBP: 00007f0cb1bf00a0 R08: 0000000000000000 R09: 0000000000000000 [ 102.456304][ T5940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.464314][ T5940] R13: 000000000000000b R14: 00007f0cb0f03f60 R15: 00007ffdba3b2ea8 [ 102.472349][ T5940] [ 102.479534][ T5935] syz_tun: left promiscuous mode [ 102.592453][ T5944] __nla_validate_parse: 3 callbacks suppressed [ 102.592475][ T5944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.291'. [ 102.650711][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.726891][ T5999] warning: `syz.2.310' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.136632][ T6019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.319'. [ 104.265074][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.321'. [ 104.681954][ T6041] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.330'. [ 104.723230][ T6041] openvswitch: netlink: VXLAN extension 1024 out of range max 1 [ 104.798669][ T6045] netlink: 184 bytes leftover after parsing attributes in process `syz.0.331'. [ 104.903703][ T6054] nbd: must specify a size in bytes for the device [ 104.964910][ T6056] netlink: 12 bytes leftover after parsing attributes in process `syz.3.333'. [ 105.101807][ T6055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.335'. [ 105.128638][ T6055] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.761080][ T6088] netlink: 'syz.2.349': attribute type 21 has an invalid length. [ 105.824613][ T6088] netlink: 128 bytes leftover after parsing attributes in process `syz.2.349'. [ 105.828042][ T6090] Cannot find add_set index 0 as target [ 105.857108][ T6088] netlink: 'syz.2.349': attribute type 4 has an invalid length. [ 105.867199][ T6088] netlink: 'syz.2.349': attribute type 3 has an invalid length. [ 105.881469][ T6088] netlink: 3 bytes leftover after parsing attributes in process `syz.2.349'. [ 105.938436][ T6090] tun0: tun_chr_ioctl cmd 1074025677 [ 105.945476][ T6090] tun0: linktype set to 773 [ 106.137989][ T6104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.348'. [ 106.289201][ T51] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 106.743131][ T6094] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 106.851453][ T6122] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 106.942297][ T8] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 107.213151][ T6135] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 107.807011][ T6158] __nla_validate_parse: 4 callbacks suppressed [ 107.807033][ T6158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.375'. [ 107.807732][ T6159] xt_CT: You must specify a L4 protocol and not use inversions on it [ 108.031571][ T6165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.374'. [ 108.042674][ T6167] FAULT_INJECTION: forcing a failure. [ 108.042674][ T6167] name failslab, interval 1, probability 0, space 0, times 1 [ 108.084928][ T6167] CPU: 0 PID: 6167 Comm: syz.2.378 Not tainted 6.10.0-rc6-syzkaller-01218-g390b14b5e9f6 #0 [ 108.094986][ T6167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 108.105254][ T6167] Call Trace: [ 108.108569][ T6167] [ 108.111534][ T6167] dump_stack_lvl+0x241/0x360 [ 108.116257][ T6167] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.121498][ T6167] ? __pfx__printk+0x10/0x10 [ 108.126129][ T6167] ? __pfx___might_resched+0x10/0x10 [ 108.131432][ T6167] should_fail_ex+0x3b0/0x4e0 [ 108.136134][ T6167] should_failslab+0x9/0x20 [ 108.140746][ T6167] __kmalloc_node_noprof+0xdf/0x440 [ 108.145988][ T6167] ? alloc_slab_obj_exts+0x3a/0xa0 [ 108.151128][ T6167] alloc_slab_obj_exts+0x3a/0xa0 [ 108.156086][ T6167] __memcg_slab_post_alloc_hook+0x31c/0x7e0 [ 108.162090][ T6167] ? __alloc_skb+0x1c3/0x440 [ 108.166714][ T6167] kmem_cache_alloc_node_noprof+0x222/0x320 [ 108.172656][ T6167] __alloc_skb+0x1c3/0x440 [ 108.177093][ T6167] ? __pfx___alloc_skb+0x10/0x10 [ 108.182053][ T6167] alloc_skb_with_frags+0xc3/0x770 [ 108.187189][ T6167] sock_alloc_send_pskb+0x91a/0xa60 [ 108.192423][ T6167] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 108.198163][ T6167] ? do_raw_spin_unlock+0x13c/0x8b0 [ 108.203387][ T6167] unix_dgram_sendmsg+0x6d3/0x1f80 [ 108.208522][ T6167] ? aa_sk_perm+0x967/0xab0 [ 108.213146][ T6167] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 108.218701][ T6167] ? __pfx_lock_release+0x10/0x10 [ 108.223734][ T6167] ? aa_sock_msg_perm+0x91/0x160 [ 108.228697][ T6167] ? unix_seqpacket_sendmsg+0x110/0x1e0 [ 108.234253][ T6167] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 108.240163][ T6167] __sock_sendmsg+0x221/0x270 [ 108.244856][ T6167] ____sys_sendmsg+0x525/0x7d0 [ 108.249645][ T6167] ? __pfx_____sys_sendmsg+0x10/0x10 [ 108.254958][ T6167] __sys_sendmsg+0x2b0/0x3a0 [ 108.259571][ T6167] ? __pfx___sys_sendmsg+0x10/0x10 [ 108.264694][ T6167] ? vfs_write+0x7c4/0xc90 [ 108.269162][ T6167] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 108.275499][ T6167] ? do_syscall_64+0x100/0x230 [ 108.280280][ T6167] ? do_syscall_64+0xb6/0x230 [ 108.284969][ T6167] do_syscall_64+0xf3/0x230 [ 108.289484][ T6167] ? clear_bhb_loop+0x35/0x90 [ 108.294280][ T6167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.300185][ T6167] RIP: 0033:0x7f8d25775bd9 [ 108.304630][ T6167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.324242][ T6167] RSP: 002b:00007f8d265ee048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.332670][ T6167] RAX: ffffffffffffffda RBX: 00007f8d25903f60 RCX: 00007f8d25775bd9 [ 108.340651][ T6167] RDX: 0000000000000000 RSI: 0000000020004b80 RDI: 0000000000000003 [ 108.348627][ T6167] RBP: 00007f8d265ee0a0 R08: 0000000000000000 R09: 0000000000000000 [ 108.356604][ T6167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.364581][ T6167] R13: 000000000000000b R14: 00007f8d25903f60 R15: 00007ffcd6cb4288 [ 108.372663][ T6167] [ 108.592244][ T6175] netlink: 168 bytes leftover after parsing attributes in process `syz.3.382'. [ 108.654792][ T6175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.382'. [ 108.693497][ T6178] netlink: 28 bytes leftover after parsing attributes in process `syz.3.382'. [ 109.222335][ T6206] Cannot find add_set index 0 as target [ 109.328967][ T6211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.393'. [ 109.462531][ T6221] netlink: 'syz.2.397': attribute type 4 has an invalid length. [ 109.707225][ T6233] netlink: 32 bytes leftover after parsing attributes in process `syz.2.400'. [ 109.735734][ T6233] netlink: 22 bytes leftover after parsing attributes in process `syz.2.400'. [ 109.776769][ T6236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.399'. [ 110.035092][ T6245] netlink: 44 bytes leftover after parsing attributes in process `syz.0.408'. [ 110.132858][ T8] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 111.369345][ T6300] netlink: 'syz.4.427': attribute type 64 has an invalid length. [ 111.651441][ T6318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.054892][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 112.865397][ T6362] __nla_validate_parse: 12 callbacks suppressed [ 112.865419][ T6362] netlink: 16 bytes leftover after parsing attributes in process `syz.2.448'. [ 112.908817][ T6365] Cannot find add_set index 0 as target [ 113.100702][ T6369] batadv_slave_0: mtu less than device minimum [ 113.123823][ T6376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.454'. [ 113.290096][ T6380] netlink: 28 bytes leftover after parsing attributes in process `syz.4.454'. [ 113.660132][ T6395] netlink: 12 bytes leftover after parsing attributes in process `syz.4.460'. [ 114.071711][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.470'. [ 114.141978][ T6414] netlink: 28 bytes leftover after parsing attributes in process `syz.0.470'. [ 114.240804][ T6417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.471'. [ 114.326446][ T6417] netlink: 28 bytes leftover after parsing attributes in process `syz.3.471'. [ 114.885115][ T6423] FAULT_INJECTION: forcing a failure. [ 114.885115][ T6423] name failslab, interval 1, probability 0, space 0, times 0 [ 114.897886][ T6423] CPU: 0 PID: 6423 Comm: syz.2.473 Not tainted 6.10.0-rc6-syzkaller-01218-g390b14b5e9f6 #0 [ 114.907910][ T6423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 114.918007][ T6423] Call Trace: [ 114.921326][ T6423] [ 114.924296][ T6423] dump_stack_lvl+0x241/0x360 [ 114.929025][ T6423] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.934362][ T6423] ? __pfx__printk+0x10/0x10 [ 114.939025][ T6423] ? __asan_memset+0x23/0x50 [ 114.943676][ T6423] should_fail_ex+0x3b0/0x4e0 [ 114.948414][ T6423] should_failslab+0x9/0x20 [ 114.952968][ T6423] kmalloc_node_track_caller_noprof+0xda/0x440 [ 114.959183][ T6423] ? nf_ct_ext_add+0x1a2/0x3e0 [ 114.964007][ T6423] krealloc_noprof+0x7d/0x120 [ 114.968738][ T6423] nf_ct_ext_add+0x1a2/0x3e0 [ 114.973361][ T6423] init_conntrack+0x8bf/0x1310 [ 114.978155][ T6423] ? __pfx_init_conntrack+0x10/0x10 [ 114.983376][ T6423] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 114.989371][ T6423] ? __local_bh_enable_ip+0x168/0x200 [ 114.994767][ T6423] nf_conntrack_in+0xd59/0x1880 [ 114.999657][ T6423] ? __pfx_nf_conntrack_in+0x10/0x10 [ 115.004965][ T6423] ? ipt_do_table+0x312/0x1860 [ 115.009745][ T6423] ? __pfx_ipt_do_table+0x10/0x10 [ 115.014790][ T6423] ? ipv4_conntrack_defrag+0x2a2/0x5a0 [ 115.020265][ T6423] ? ip_sabotage_in+0x55/0x290 [ 115.025045][ T6423] ? __pfx_ipv4_conntrack_in+0x10/0x10 [ 115.030527][ T6423] nf_hook_slow+0xc3/0x220 [ 115.034992][ T6423] ? __pfx_ip_rcv_finish+0x10/0x10 [ 115.040122][ T6423] ? __pfx_ip_rcv_finish+0x10/0x10 [ 115.045250][ T6423] NF_HOOK+0x29e/0x450 [ 115.049342][ T6423] ? NF_HOOK+0x9a/0x450 [ 115.053512][ T6423] ? __pfx_NF_HOOK+0x10/0x10 [ 115.058116][ T6423] ? ip_rcv_core+0x801/0xd10 [ 115.062723][ T6423] ? __pfx_ip_rcv_finish+0x10/0x10 [ 115.067857][ T6423] ? __pfx_ip_rcv+0x10/0x10 [ 115.072376][ T6423] __netif_receive_skb+0x2bf/0x650 [ 115.077514][ T6423] ? __pfx_lock_acquire+0x10/0x10 [ 115.082550][ T6423] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 115.088811][ T6423] ? __pfx___netif_receive_skb+0x10/0x10 [ 115.094466][ T6423] ? read_tsc+0x9/0x20 [ 115.098550][ T6423] ? timekeeping_get_ns+0x2c0/0x420 [ 115.103773][ T6423] ? netif_receive_skb+0x131/0x890 [ 115.108902][ T6423] ? netif_receive_skb+0x131/0x890 [ 115.114034][ T6423] netif_receive_skb+0x1e8/0x890 [ 115.118996][ T6423] ? tun_rx_batched+0x160/0x8f0 [ 115.123865][ T6423] ? __pfx_netif_receive_skb+0x10/0x10 [ 115.129364][ T6423] ? tun_rx_batched+0x160/0x8f0 [ 115.134242][ T6423] tun_rx_batched+0x1b7/0x8f0 [ 115.138942][ T6423] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 115.145319][ T6423] ? __pfx_lock_acquire+0x10/0x10 [ 115.150376][ T6423] ? __pfx_tun_rx_batched+0x10/0x10 [ 115.155649][ T6423] tun_get_user+0x2f3b/0x4560 [ 115.160364][ T6423] ? tun_get_user+0x2a35/0x4560 [ 115.165252][ T6423] ? __pfx_tun_get_user+0x10/0x10 [ 115.170304][ T6423] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 115.175786][ T6423] ? tun_get+0x1e/0x2f0 [ 115.180005][ T6423] ? tun_get+0x1e/0x2f0 [ 115.184200][ T6423] ? tun_get+0x27d/0x2f0 [ 115.188477][ T6423] tun_chr_write_iter+0x113/0x1f0 [ 115.193540][ T6423] vfs_write+0xa72/0xc90 [ 115.197812][ T6423] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 115.203377][ T6423] ? __pfx_vfs_write+0x10/0x10 [ 115.208198][ T6423] ksys_write+0x1a0/0x2c0 [ 115.212563][ T6423] ? __pfx_ksys_write+0x10/0x10 [ 115.217430][ T6423] ? do_syscall_64+0x100/0x230 [ 115.222215][ T6423] ? do_syscall_64+0xb6/0x230 [ 115.226904][ T6423] do_syscall_64+0xf3/0x230 [ 115.231417][ T6423] ? clear_bhb_loop+0x35/0x90 [ 115.236112][ T6423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.242026][ T6423] RIP: 0033:0x7f8d25775bd9 [ 115.246559][ T6423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.266190][ T6423] RSP: 002b:00007f8d265ee048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 115.274641][ T6423] RAX: ffffffffffffffda RBX: 00007f8d25903f60 RCX: 00007f8d25775bd9 [ 115.282627][ T6423] RDX: 000000000000004e RSI: 0000000020000280 RDI: 0000000000000003 [ 115.290609][ T6423] RBP: 00007f8d265ee0a0 R08: 0000000000000000 R09: 0000000000000000 [ 115.298590][ T6423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.306569][ T6423] R13: 000000000000000b R14: 00007f8d25903f60 R15: 00007ffcd6cb4288 [ 115.314569][ T6423] [ 115.850799][ T6443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.482'. [ 115.886167][ T6447] sctp: [Deprecated]: syz.1.483 (pid 6447) Use of struct sctp_assoc_value in delayed_ack socket option. [ 115.886167][ T6447] Use struct sctp_sack_info instead [ 116.232617][ T6464] tipc: Started in network mode [ 116.257711][ T6464] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 116.288354][ T6464] tipc: Enabled bearer , priority 0 [ 116.298077][ T6467] netlink: 32 bytes leftover after parsing attributes in process `syz.3.492'. [ 117.060817][ T6500] netlink: 'syz.2.503': attribute type 5 has an invalid length. [ 117.123523][ T6500] : entered promiscuous mode [ 117.143904][ T6509] bridge_slave_1: left allmulticast mode [ 117.165407][ T6509] bridge_slave_1: left promiscuous mode [ 117.188347][ T6509] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.335954][ T6509] bridge_slave_0: left allmulticast mode [ 117.358322][ T6509] bridge_slave_0: left promiscuous mode [ 117.364167][ T6509] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.408767][ T9] tipc: Node number set to 8432298 [ 117.512153][ T6507] tipc: Started in network mode [ 117.517316][ T6507] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 117.525373][ T6507] tipc: Enabled bearer , priority 0 [ 117.535634][ T6517] batadv0: entered promiscuous mode [ 117.873620][ T6531] vxcan2: entered allmulticast mode [ 118.098643][ T6539] __nla_validate_parse: 7 callbacks suppressed [ 118.098665][ T6539] netlink: 184 bytes leftover after parsing attributes in process `syz.1.518'. [ 118.143218][ T6545] netlink: 20 bytes leftover after parsing attributes in process `syz.4.519'. [ 118.171428][ T6539] netlink: 60 bytes leftover after parsing attributes in process `syz.1.518'. [ 118.235283][ T6546] syzkaller1: entered promiscuous mode [ 118.255221][ T6546] syzkaller1: entered allmulticast mode [ 118.315926][ T6546] dccp_invalid_packet: P.type (SYNC) not Data || [Data]Ack, while P.X == 0 [ 118.483745][ T6558] netlink: 28 bytes leftover after parsing attributes in process `syz.1.521'. [ 118.535778][ T6558] bond0: entered allmulticast mode [ 118.574407][ T6558] bond_slave_0: entered allmulticast mode [ 118.594034][ T6558] bond_slave_1: entered allmulticast mode [ 118.624440][ T6558] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 118.638737][ T8] tipc: Node number set to 8432298 [ 119.018847][ T2795] ================================================================== [ 119.026979][ T2795] BUG: KASAN: slab-use-after-free in l2tp_tunnel_del_work+0x114/0x330 [ 119.035181][ T2795] Read of size 8 at addr ffff88807b9640c0 by task kworker/u8:7/2795 [ 119.043185][ T2795] [ 119.045532][ T2795] CPU: 0 PID: 2795 Comm: kworker/u8:7 Not tainted 6.10.0-rc6-syzkaller-01218-g390b14b5e9f6 #0 [ 119.055802][ T2795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 119.065891][ T2795] Workqueue: l2tp l2tp_tunnel_del_work [ 119.071394][ T2795] Call Trace: [ 119.074701][ T2795] [ 119.077664][ T2795] dump_stack_lvl+0x241/0x360 [ 119.082382][ T2795] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.087618][ T2795] ? __pfx__printk+0x10/0x10 [ 119.092258][ T2795] ? _printk+0xd5/0x120 [ 119.096468][ T2795] ? __virt_addr_valid+0x183/0x520 [ 119.101899][ T2795] ? __virt_addr_valid+0x183/0x520 [ 119.107058][ T2795] print_report+0x169/0x550 [ 119.111619][ T2795] ? __virt_addr_valid+0x183/0x520 [ 119.116773][ T2795] ? __virt_addr_valid+0x183/0x520 [ 119.121926][ T2795] ? __virt_addr_valid+0x44e/0x520 [ 119.127065][ T2795] ? __phys_addr+0xba/0x170 [ 119.131606][ T2795] ? l2tp_tunnel_del_work+0x114/0x330 [ 119.136987][ T2795] kasan_report+0x143/0x180 [ 119.141503][ T2795] ? l2tp_tunnel_del_work+0x114/0x330 [ 119.146882][ T2795] l2tp_tunnel_del_work+0x114/0x330 [ 119.152088][ T2795] ? process_scheduled_works+0x945/0x1830 [ 119.157812][ T2795] process_scheduled_works+0xa2c/0x1830 [ 119.163393][ T2795] ? __pfx_process_scheduled_works+0x10/0x10 [ 119.169386][ T2795] ? assign_work+0x364/0x3d0 [ 119.174001][ T2795] worker_thread+0x86d/0xd50 [ 119.178607][ T2795] ? __kthread_parkme+0x169/0x1d0 [ 119.183651][ T2795] ? __pfx_worker_thread+0x10/0x10 [ 119.188790][ T2795] kthread+0x2f0/0x390 [ 119.192877][ T2795] ? __pfx_worker_thread+0x10/0x10 [ 119.197996][ T2795] ? __pfx_kthread+0x10/0x10 [ 119.202592][ T2795] ret_from_fork+0x4b/0x80 [ 119.207019][ T2795] ? __pfx_kthread+0x10/0x10 [ 119.211613][ T2795] ret_from_fork_asm+0x1a/0x30 [ 119.216415][ T2795] [ 119.219520][ T2795] [ 119.221844][ T2795] Allocated by task 6570: [ 119.226172][ T2795] kasan_save_track+0x3f/0x80 [ 119.230880][ T2795] __kasan_kmalloc+0x98/0xb0 [ 119.235478][ T2795] __kmalloc_noprof+0x1f9/0x400 [ 119.240339][ T2795] l2tp_session_create+0x3b/0xc20 [ 119.245365][ T2795] pppol2tp_connect+0xca3/0x17a0 [ 119.250311][ T2795] __sys_connect+0x2df/0x310 [ 119.254909][ T2795] __x64_sys_connect+0x7a/0x90 [ 119.259676][ T2795] do_syscall_64+0xf3/0x230 [ 119.264180][ T2795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.270096][ T2795] [ 119.272417][ T2795] Freed by task 24: [ 119.276218][ T2795] kasan_save_track+0x3f/0x80 [ 119.280906][ T2795] kasan_save_free_info+0x40/0x50 [ 119.285942][ T2795] poison_slab_object+0xe0/0x150 [ 119.290887][ T2795] __kasan_slab_free+0x37/0x60 [ 119.295663][ T2795] kfree+0x149/0x360 [ 119.299568][ T2795] __sk_destruct+0x58/0x5f0 [ 119.304525][ T2795] rcu_core+0xafd/0x1830 [ 119.308854][ T2795] handle_softirqs+0x2c4/0x970 [ 119.313621][ T2795] run_ksoftirqd+0xca/0x130 [ 119.318127][ T2795] smpboot_thread_fn+0x544/0xa30 [ 119.323064][ T2795] kthread+0x2f0/0x390 [ 119.327141][ T2795] ret_from_fork+0x4b/0x80 [ 119.331585][ T2795] ret_from_fork_asm+0x1a/0x30 [ 119.336361][ T2795] [ 119.338684][ T2795] Last potentially related work creation: [ 119.344397][ T2795] kasan_save_stack+0x3f/0x60 [ 119.349086][ T2795] __kasan_record_aux_stack+0xac/0xc0 [ 119.354493][ T2795] call_rcu+0x167/0xa70 [ 119.358652][ T2795] pppol2tp_release+0x24b/0x350 [ 119.363509][ T2795] sock_close+0xbc/0x240 [ 119.367758][ T2795] __fput+0x24a/0x8a0 [ 119.371754][ T2795] task_work_run+0x24f/0x310 [ 119.376353][ T2795] syscall_exit_to_user_mode+0x168/0x360 [ 119.381998][ T2795] do_syscall_64+0x100/0x230 [ 119.386588][ T2795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.392485][ T2795] [ 119.394811][ T2795] The buggy address belongs to the object at ffff88807b964000 [ 119.394811][ T2795] which belongs to the cache kmalloc-1k of size 1024 [ 119.408862][ T2795] The buggy address is located 192 bytes inside of [ 119.408862][ T2795] freed 1024-byte region [ffff88807b964000, ffff88807b964400) [ 119.422783][ T2795] [ 119.425110][ T2795] The buggy address belongs to the physical page: [ 119.431528][ T2795] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807b961800 pfn:0x7b960 [ 119.441614][ T2795] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 119.450141][ T2795] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 119.458655][ T2795] page_type: 0xffffefff(slab) [ 119.463336][ T2795] raw: 00fff00000000240 ffff888015041dc0 ffffea0001e79c10 ffffea0001995a10 [ 119.472532][ T2795] raw: ffff88807b961800 000000000010000c 00000001ffffefff 0000000000000000 [ 119.481119][ T2795] head: 00fff00000000240 ffff888015041dc0 ffffea0001e79c10 ffffea0001995a10 [ 119.489793][ T2795] head: ffff88807b961800 000000000010000c 00000001ffffefff 0000000000000000 [ 119.498468][ T2795] head: 00fff00000000003 ffffea0001ee5801 ffffffffffffffff 0000000000000000 [ 119.507168][ T2795] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 119.515832][ T2795] page dumped because: kasan: bad access detected [ 119.522258][ T2795] page_owner tracks the page as allocated [ 119.527970][ T2795] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 24, tgid 24 (ksoftirqd/1), ts 83694297970, free_ts 83618046789 [ 119.548212][ T2795] post_alloc_hook+0x1f3/0x230 [ 119.552995][ T2795] get_page_from_freelist+0x2e4c/0x2f10 [ 119.558554][ T2795] __alloc_pages_noprof+0x256/0x6c0 [ 119.563774][ T2795] alloc_slab_page+0x5f/0x120 [ 119.568547][ T2795] allocate_slab+0x5a/0x2f0 [ 119.573056][ T2795] ___slab_alloc+0xcd1/0x14b0 [ 119.577737][ T2795] __slab_alloc+0x58/0xa0 [ 119.582071][ T2795] __kmalloc_noprof+0x257/0x400 [ 119.586931][ T2795] ieee802_11_parse_elems_full+0xdb/0x2880 [ 119.592754][ T2795] ieee80211_inform_bss+0x15f/0x1080 [ 119.598070][ T2795] cfg80211_inform_single_bss_data+0xe93/0x2030 [ 119.604364][ T2795] cfg80211_inform_bss_data+0x3dd/0x5a70 [ 119.610025][ T2795] cfg80211_inform_bss_frame_data+0x3bc/0x720 [ 119.616120][ T2795] ieee80211_bss_info_update+0x8a7/0xbc0 [ 119.621785][ T2795] ieee80211_scan_rx+0x526/0x9c0 [ 119.626757][ T2795] ieee80211_rx_list+0x2b02/0x3780 [ 119.631885][ T2795] page last free pid 785 tgid 785 stack trace: [ 119.638049][ T2795] free_unref_page+0xd22/0xea0 [ 119.642845][ T2795] __slab_free+0x31b/0x3d0 [ 119.647267][ T2795] qlist_free_all+0x9e/0x140 [ 119.651865][ T2795] kasan_quarantine_reduce+0x14f/0x170 [ 119.657334][ T2795] __kasan_slab_alloc+0x23/0x80 [ 119.662190][ T2795] kmalloc_trace_noprof+0x132/0x2c0 [ 119.667399][ T2795] nsim_fib_event_work+0x19c2/0x4130 [ 119.672718][ T2795] process_scheduled_works+0xa2c/0x1830 [ 119.678375][ T2795] worker_thread+0x86d/0xd50 [ 119.683004][ T2795] kthread+0x2f0/0x390 [ 119.687097][ T2795] ret_from_fork+0x4b/0x80 [ 119.691556][ T2795] ret_from_fork_asm+0x1a/0x30 [ 119.696347][ T2795] [ 119.698669][ T2795] Memory state around the buggy address: [ 119.704298][ T2795] ffff88807b963f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 119.712538][ T2795] ffff88807b964000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 119.720607][ T2795] >ffff88807b964080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 119.728670][ T2795] ^ [ 119.734821][ T2795] ffff88807b964100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 119.742930][ T2795] ffff88807b964180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 119.751014][ T2795] ================================================================== [ 119.759215][ T2795] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 119.766535][ T2795] CPU: 0 PID: 2795 Comm: kworker/u8:7 Not tainted 6.10.0-rc6-syzkaller-01218-g390b14b5e9f6 #0 [ 119.776812][ T2795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 119.786899][ T2795] Workqueue: l2tp l2tp_tunnel_del_work [ 119.792411][ T2795] Call Trace: [ 119.795728][ T2795] [ 119.798719][ T2795] dump_stack_lvl+0x241/0x360 [ 119.803435][ T2795] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.808677][ T2795] ? __pfx__printk+0x10/0x10 [ 119.813320][ T2795] ? vscnprintf+0x5d/0x90 [ 119.817693][ T2795] panic+0x349/0x860 [ 119.821631][ T2795] ? check_panic_on_warn+0x21/0xb0 [ 119.826786][ T2795] ? __pfx_panic+0x10/0x10 [ 119.831238][ T2795] ? mark_lock+0x9a/0x350 [ 119.835590][ T2795] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 119.841516][ T2795] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 119.847433][ T2795] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 119.853784][ T2795] ? print_report+0x502/0x550 [ 119.858568][ T2795] check_panic_on_warn+0x86/0xb0 [ 119.863521][ T2795] ? l2tp_tunnel_del_work+0x114/0x330 [ 119.868905][ T2795] end_report+0x77/0x160 [ 119.873173][ T2795] kasan_report+0x154/0x180 [ 119.877697][ T2795] ? l2tp_tunnel_del_work+0x114/0x330 [ 119.883166][ T2795] l2tp_tunnel_del_work+0x114/0x330 [ 119.888393][ T2795] ? process_scheduled_works+0x945/0x1830 [ 119.894118][ T2795] process_scheduled_works+0xa2c/0x1830 [ 119.899691][ T2795] ? __pfx_process_scheduled_works+0x10/0x10 [ 119.905684][ T2795] ? assign_work+0x364/0x3d0 [ 119.910279][ T2795] worker_thread+0x86d/0xd50 [ 119.914882][ T2795] ? __kthread_parkme+0x169/0x1d0 [ 119.919921][ T2795] ? __pfx_worker_thread+0x10/0x10 [ 119.925042][ T2795] kthread+0x2f0/0x390 [ 119.929121][ T2795] ? __pfx_worker_thread+0x10/0x10 [ 119.934239][ T2795] ? __pfx_kthread+0x10/0x10 [ 119.938867][ T2795] ret_from_fork+0x4b/0x80 [ 119.943299][ T2795] ? __pfx_kthread+0x10/0x10 [ 119.947908][ T2795] ret_from_fork_asm+0x1a/0x30 [ 119.952707][ T2795] [ 119.956025][ T2795] Kernel Offset: disabled [ 119.960352][ T2795] Rebooting in 86400 seconds..