last executing test programs: 44.367551767s ago: executing program 4 (id=685): socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2}, 0x10) socket$l2tp6(0x2, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x6c}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) 44.172921783s ago: executing program 4 (id=688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000540)={0x0, 0x9, 0x0, [0x200, 0x2, 0x2, 0x6, 0x7], [0x42, 0x16000, 0x97, 0x7, 0xa, 0xfffffffffffffe01, 0x4, 0xf1, 0x864d, 0x5, 0x21371492, 0x3c176718, 0xfff, 0x1d4d, 0xda8, 0x6, 0x40, 0x60, 0x1, 0x42104808, 0x11f1, 0x8, 0x800, 0x50, 0x100, 0x5f6, 0x6, 0x5, 0x0, 0x9, 0x5, 0x4, 0x0, 0x9, 0x9, 0x49, 0x2, 0x8, 0x2, 0x400, 0x40, 0x13c, 0x81, 0x100, 0x5, 0x9, 0x5f7, 0x5, 0x8000, 0x218b, 0x600000, 0x81, 0xfffffffffffffffd, 0xf805, 0x5, 0x6, 0x2, 0x0, 0x6, 0x7, 0x4, 0x7, 0x498, 0x34, 0x101, 0x4, 0xffffffffffffffff, 0x301, 0x8, 0x0, 0x1, 0x4, 0x1, 0x6, 0x9, 0x2, 0x1, 0x80, 0x9, 0x5e0, 0x3, 0x6, 0xb49, 0x2, 0x5, 0xffffffffffffff7f, 0x100000001, 0x3, 0x6, 0x800, 0x4, 0x9, 0x1, 0x10, 0xd393, 0x6, 0x1, 0x7db7, 0x0, 0x1, 0x9, 0x5, 0x1, 0xffffffff00000001, 0x8, 0x23f0216a, 0x200, 0x4931, 0x1, 0x2, 0x3, 0x6, 0x0, 0x9, 0x1, 0xee6, 0x9, 0x6, 0x4, 0x4, 0x5]}) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x8, 0xc, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f00000001c0)=0x7f00, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='scalable\x00', 0xee2523a103936e9f) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r3, &(0x7f0000000080), 0x76e5467) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a00010000060a0b040000000000000000020000002400048020000180070001006374000014000280080001400000001508000240000000060900010073797a30000000000900020073797a32"], 0x128}}, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000240)={0xfffffffffffffff9, 0xffffffffffffb2bd, 0x6, 0x0, 0x0, [{{r0}, 0x4}, {{r0}, 0x7}, {{r0}, 0x8}, {{r0}, 0x2}, {{r0}, 0x8}, {{r0}}]}) 43.929048145s ago: executing program 4 (id=690): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffff9c, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x3, &(0x7f0000000140)=0x6, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f05fe7f7028120006001e0089e9aaa921d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500001c000000000033907800000000eaffffff00000000000890788fd256548ece36a7f5cc85ba80e529ef00103b46a2dedaedf8568c0025fd91d4c2c038e47405f81703e977b58e58e159dffbad3d7dcf0be14d8c54ef3efe2c7e15368683e9c36a1b55e1a8f23bee2fa37af7c4f1feea60aef8aad98c48b11020561490641ae6a2041953648bcf546c9389f7deb252a8b27b16c1be93744a33746ef58a69f9d273f2164a293f5eecac2384c6da9c5b074c315a119999"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = getpid() sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)={0x30, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x13, 0x0, 0x0, @pid=r5}, @nested={0x8, 0x31, 0x0, 0x1, [@generic="33e1d16d"]}]}, 0x30}], 0x1}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r5, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\b0\x04\x00\x00\x82q\xee'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPOIB_MODE={0x6, 0x2, 0x1}]}}}, @IFLA_EXT_MASK={0x8, 0x1d, 0x2}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x802}]}, 0x4c}}, 0x20000040) ioctl$int_out(r6, 0x0, &(0x7f0000000480)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000440)={0x3, [0x3, 0xff, 0xff]}, 0xa) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='mm_page_pcpu_drain\x00'}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x6, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000180), &(0x7f0000000200)=0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'geneve1\x00'}) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0xe80, 0x4) 29.731677522s ago: executing program 4 (id=690): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffff9c, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x3, &(0x7f0000000140)=0x6, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f05fe7f7028120006001e0089e9aaa921d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500001c000000000033907800000000eaffffff00000000000890788fd256548ece36a7f5cc85ba80e529ef00103b46a2dedaedf8568c0025fd91d4c2c038e47405f81703e977b58e58e159dffbad3d7dcf0be14d8c54ef3efe2c7e15368683e9c36a1b55e1a8f23bee2fa37af7c4f1feea60aef8aad98c48b11020561490641ae6a2041953648bcf546c9389f7deb252a8b27b16c1be93744a33746ef58a69f9d273f2164a293f5eecac2384c6da9c5b074c315a119999"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = getpid() sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)={0x30, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x13, 0x0, 0x0, @pid=r5}, @nested={0x8, 0x31, 0x0, 0x1, [@generic="33e1d16d"]}]}, 0x30}], 0x1}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r5, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\b0\x04\x00\x00\x82q\xee'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPOIB_MODE={0x6, 0x2, 0x1}]}}}, @IFLA_EXT_MASK={0x8, 0x1d, 0x2}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x802}]}, 0x4c}}, 0x20000040) ioctl$int_out(r6, 0x0, &(0x7f0000000480)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000440)={0x3, [0x3, 0xff, 0xff]}, 0xa) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='mm_page_pcpu_drain\x00'}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x6, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000180), &(0x7f0000000200)=0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'geneve1\x00'}) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0xe80, 0x4) 17.993889193s ago: executing program 4 (id=690): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffff9c, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x3, &(0x7f0000000140)=0x6, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f05fe7f7028120006001e0089e9aaa921d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500001c000000000033907800000000eaffffff00000000000890788fd256548ece36a7f5cc85ba80e529ef00103b46a2dedaedf8568c0025fd91d4c2c038e47405f81703e977b58e58e159dffbad3d7dcf0be14d8c54ef3efe2c7e15368683e9c36a1b55e1a8f23bee2fa37af7c4f1feea60aef8aad98c48b11020561490641ae6a2041953648bcf546c9389f7deb252a8b27b16c1be93744a33746ef58a69f9d273f2164a293f5eecac2384c6da9c5b074c315a119999"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = getpid() sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)={0x30, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x13, 0x0, 0x0, @pid=r5}, @nested={0x8, 0x31, 0x0, 0x1, [@generic="33e1d16d"]}]}, 0x30}], 0x1}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r5, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\b0\x04\x00\x00\x82q\xee'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPOIB_MODE={0x6, 0x2, 0x1}]}}}, @IFLA_EXT_MASK={0x8, 0x1d, 0x2}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x802}]}, 0x4c}}, 0x20000040) ioctl$int_out(r6, 0x0, &(0x7f0000000480)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000440)={0x3, [0x3, 0xff, 0xff]}, 0xa) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='mm_page_pcpu_drain\x00'}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x6, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000180), &(0x7f0000000200)=0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'geneve1\x00'}) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0xe80, 0x4) 2.684904727s ago: executing program 1 (id=1088): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b70000000000000d7f0a0000000000001d000000010000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xb579, &(0x7f000000cf3d)=""/195}, 0x21) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x9, 0x401}, 0x14}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000004c0)={r8, 0x200, 0x0, 0x3, 0x3, 0x7}, 0x14) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="fdffffff1000550400000000001e000010000000438da3", @ANYRES32=r10, @ANYRES32=r8], 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x40800) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r11, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000580)={0xe8, r12, 0x8, 0x0, 0x3, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0xe8}}, 0x40) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x38, r12, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@pci={{0x8}, {0x11}}]}, 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d0802070000008181ffa1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1.741724974s ago: executing program 2 (id=1102): r0 = socket$alg(0x26, 0x5, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000940)="d744784ca67c0398246d848e6df22054de2bd8ca3da64dfdea7d8eb74ffe057d7469066c6ca034a2677ce0c1c25e2b2a825d677e0fbac312a7da165cd5db94fa38cdf3a3f3f93b912a7515e0b1e441a3be644a296bcc765e7adc9ddb4d14376a69cbfcd2ddd156ba432349e96debeda26ee8914c28f4", 0x7ffff000}, {&(0x7f00000009c0)="d86e5c29ab2c0dce2b79f95d543a0d6b45dec9dab7afbc0d6d678feb7a652e67638c3ee007937917fad76308e99818f8f112b73a3c3e3c5ed80c49fab6e0593e95008b4a47aebdde3e28cea1cec26385f3d03b872970dfb69a63a6384a9be5b9419ff8ea6d9c2a730307894adb589d11a1ec59255d10acb1fbef", 0x7a}], 0x2}, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) 1.714813766s ago: executing program 1 (id=1103): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan0\x00'}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)={0x3, 'veth1_to_team\x00', {0xc}, 0x8657}) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) syz_emit_ethernet(0xc9, &(0x7f0000000a80)={@multicast, @local, @void, {@generic={0x805, "19e9434829d969181888e582e94df721128310ad51dc8d263d034b87e7b62c7ed1b3eafdfbbc448fb3f47d3e9e3b451ff463f567a1483b9459fe7e18fea09f90ac7d4b0f6ba14cf8b38f275f7cc7d49a3aabdf8ff16fc0ee363777702bd5d778161566ed2494f586a4f8fa8246531e42dc9b04145654fd097b62886d0717c8828e6a83c8ab8b79e71b3f442518232a16dea7b68922b89d648192b0064a32634afeaf66f66982c358c455e8c44a6d6b8cd802fe6a6a50f7d61368b7"}}}, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r2, 0x8917, 0x0) r3 = socket(0x2, 0x6, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000000)={0x1, 'syzkaller0\x00', {}, 0x3ff}) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000500)={0x0, {0x2, 0x0, @multicast2}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e20, @multicast2}, 0x24c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)='xfrm0\x00', 0x1f, 0x0, 0xfff8}) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4001, 0x3, 0x308, 0x148, 0x0, 0x148, 0x148, 0x148, 0x270, 0x240, 0x240, 0x270, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback=0x7f002600, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00', {}, {}, 0x11}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@local, @private, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) socket(0x9, 0xa, 0x200) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x2c, &(0x7f0000000040)=0x800, 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r7, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r7, 0x0) write$cgroup_subtree(r7, &(0x7f0000000480)={[{0x2d, 'cpuacct'}, {0x2d, 'io'}, {0x2b, 'rdma'}, {0x2b, 'cpuset'}]}, 0x1b) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0xe8, r8, 0x1, 0x4, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0xc4, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6447}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x334b16c5}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcde3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x889f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68cd0034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc742}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6c62e95}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2b7e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x49e4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18af1f1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdbca}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x999b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63d0225e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc9f58c4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3be7c0bd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x659e4207}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x15ee09ad}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x80c7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5428e0e4}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1711e096}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x38db4f1a}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0xe8}}, 0x0) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="120228bd7000fedbdf250b2744d5fd000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x2004085}, 0x40000) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@empty, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) pipe(&(0x7f0000002e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r9, 0x5452, &(0x7f0000001280)=0x8) write$cgroup_subtree(r10, &(0x7f00000013c0)={[{0x0, 'net'}]}, 0x5) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000006c00)={@default, @null, 0x2, 0x56}) 1.63421889s ago: executing program 0 (id=1104): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000100)={@loopback, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000680)={0x6, 'rose0\x00', {0x7aa}, 0xeb}) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000180)={0x450, r2, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x3}, @ETHTOOL_A_LINKMODES_OURS={0x274, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xa0, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ',\xa4-/!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '^[^./\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '+%\r\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '^\x91\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '(\x1c$,&,+.%\\\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1da}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ']}^\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_MASK={0xaf, 0x5, "2efbe7704f9fa5b9778b36595a40a9a52aff88b8619671417fa9361246fbb8335fe7e0eed25943f4a94e31bd4013162acf048a18e2c3fa3b104c0930599e627b453103eca77a5e2d3cd757107dff66f16ec59bd8528ff7a24c54505bdc8efb77271decf2fc579c4b1ad99675e27b612c11e9d71876b3d7ac31d8bbbe84c70defc037e97f9ebe984a305f26ec56e6dd6b9bc6aa4e940d91031b2cc851a915bbb6e0036b51d79cbab7389b35"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_BITS={0x10c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '*@+.-,%.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '.o@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xf0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x83ba}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff1f}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '^%%-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '}*$%[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x4}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '},,\xf5\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x22}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}, @ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xc}, @ETHTOOL_A_LINKMODES_OURS={0x120, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xe7, 0x4, "73778228d91492549259661251e0476148bc558b00b5655270328b6586d6a21a9751596accbbbc530f2755bb0659e76039a0609b2fff8543d47c58daf872a4f6541c44f74640b39babe55ee3d0d1a25b613710d7fd1da1aa2acb577c564d7adf5003b1e911f65920a348bac94d1888decce2cb87492d4d7ee4d5f4bfa8df9c040ea1a9860814c2074a50b45f0492a1efa7e513152d12c3dd18fba71aa053a4a826fbe515013fbc2942610938ceaba03ab96b2704e91f3e900058438008d5c1bfcb310b40df7eb3595ce3fc95b87eeaec78e412d048479dec6197e63333b34c489b9ddb"}, @ETHTOOL_A_BITSET_VALUE={0x2e, 0x4, "8ce3f0e8b9bcfb2a6820ea1bc4f2721a563593e47269f638e45329a0a99924757f52f8357ce2b0c3473e"}]}, @ETHTOOL_A_LINKMODES_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x450}}, 0x20004004) (async) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) 1.633504869s ago: executing program 2 (id=1105): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000300)={{{@in=@broadcast, @in=@multicast1}}, {{@in6=@dev}, 0x0, @in6=@empty}}, &(0x7f00000000c0)=0xe8) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0xde, "5bffd43a8fca8a1cff25c6d4f2370016d1b9c64162c4023c5f4378bbb2b10869361dc4147547194f72cfc814243838bc91ffae1c75238fed910af13161cf7981c6e53bf0a3bc23e6ea8d04ed95f09348a4b42ef8fa6f8ad71cfbf4e319ea7925ff2d964b590432d8d9a94cc4f49aa1184f51b93477074f4db4065b7bd34816dab61649a3efc64f41b7a33833fc9412dee056e2237fd057ec26086774951443459820dbf209541207b086d6645d6ff3eb9b0d14aca8da7e2337de9234093521417930dc6b13270e6602fae1d983da89c1cc9b1581e0849c0aea37d7b0d671"}, &(0x7f0000000000)=0xe6) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x2, 0xc}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f0000000280), &(0x7f0000000300)}, 0x20) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000002180)={@loopback={0xfec0ffff00000000}, @empty, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2020013}) (async) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r3, 0x5}, 0x8) (async) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)={0x20, 0x5e, 0xe25, 0x70bd28, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}]}, @nested={0x4, 0x1}]}, 0x20}], 0x1}, 0x0) (async) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000100), &(0x7f0000000180)=0x4) 1.632990765s ago: executing program 3 (id=1106): r0 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) (async) readv(r0, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/53, 0x35}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) (async) r1 = socket$kcm(0xa, 0x2, 0x3a) (async) r2 = socket(0x10, 0x3, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000008, 0x30, r0, 0x614cd000) (async) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="3ce1ca93b49b3c000000100005ff00000000000000000000004a35649e100d27216f1a5ef44d0434b55aee9ff31c0d51f7c1ce90216a6ab4f5c10de9d5f7c438b9372aed13266ed86f64f3093bf48786c2a0d9c0f2442e95705966", @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002800800200009000000"], 0x3c}}, 0x0) (async) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x4, 0x1, 0x2, {0xa, 0x4e22, 0xffffffff, @local, 0x9}}}, 0x3a) (async) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f00000000c0), 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000028000bff7f000000000000000024fc60", 0x14}], 0x1}, 0x0) 1.481506657s ago: executing program 4 (id=690): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffff9c, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x3, &(0x7f0000000140)=0x6, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f05fe7f7028120006001e0089e9aaa921d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500001c000000000033907800000000eaffffff00000000000890788fd256548ece36a7f5cc85ba80e529ef00103b46a2dedaedf8568c0025fd91d4c2c038e47405f81703e977b58e58e159dffbad3d7dcf0be14d8c54ef3efe2c7e15368683e9c36a1b55e1a8f23bee2fa37af7c4f1feea60aef8aad98c48b11020561490641ae6a2041953648bcf546c9389f7deb252a8b27b16c1be93744a33746ef58a69f9d273f2164a293f5eecac2384c6da9c5b074c315a119999"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = getpid() sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)={0x30, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x13, 0x0, 0x0, @pid=r5}, @nested={0x8, 0x31, 0x0, 0x1, [@generic="33e1d16d"]}]}, 0x30}], 0x1}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r5, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\b0\x04\x00\x00\x82q\xee'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPOIB_MODE={0x6, 0x2, 0x1}]}}}, @IFLA_EXT_MASK={0x8, 0x1d, 0x2}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x802}]}, 0x4c}}, 0x20000040) ioctl$int_out(r6, 0x0, &(0x7f0000000480)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000440)={0x3, [0x3, 0xff, 0xff]}, 0xa) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='mm_page_pcpu_drain\x00'}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x6, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000180), &(0x7f0000000200)=0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'geneve1\x00'}) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0xe80, 0x4) 1.462323248s ago: executing program 0 (id=1107): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000140)=0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r2, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0xfe, 0x0}}, 0x10, 0x0}, 0x0) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x4}, 0x90) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0x1000000, @broadcast}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x10002, 0x0, 0x40}}}}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0xfffffffffffffffc, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x800}, &(0x7f0000000100)=0x90) 1.461707757s ago: executing program 1 (id=1108): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) (async) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000ff9, &(0x7f0000000240)={0x2, 0x4e23, @remote}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) (async) sendto$inet(r1, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='scalable\x00', 0xffffffffffffff39) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff}) (async) r4 = socket$netlink(0x10, 0x3, 0x6) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x64}}, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@cgroup=r5, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0xa, &(0x7f0000000280)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="14000000270001"], 0x14}], 0x1}, 0x0) (async) sendmsg$inet(r3, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) 1.46108782s ago: executing program 2 (id=1109): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x15, 0x7, 0x0, 0x7}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000900)=@ethtool_rxfh={0x1, 0x0, 0x0, 0x0, 0x0, "f9ffe6"}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000001200)={0x1d, r4}, 0x18) connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r4}, 0x18) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000700)=[{0x2, 0x0, {0x1}}, {0x0, 0x0, {0x0, 0x0, 0x3}}], 0x40) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x844}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r8, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000bc0)={'sit0\x00', &(0x7f0000000b40)={'erspan0\x00', r4, 0x20, 0x10, 0x80000001, 0x7, {{0x11, 0x4, 0x0, 0x35, 0x44, 0x66, 0x0, 0x2, 0x2f, 0x0, @rand_addr=0x64010102, @private=0xa010100, {[@timestamp_prespec={0x44, 0x2c, 0xea, 0x3, 0x0, [{@multicast2, 0xc}, {@remote, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@local, 0x5}, {@loopback}]}, @end]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c00)={&(0x7f0000001400)={0x1780, 0x0, 0x200, 0x4, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xec, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x84, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '*#:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}]}, {0x4}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x58, 0x3, 0x0, 0x1, [{0x4}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1f4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'bond0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe89d}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x1c0, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xfb!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3a}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ']-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xf0+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7b6f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'bond0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x66345c45}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'bond0\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xbd\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfa}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@]*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x711}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x02\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x42}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'bond0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '!!$\x00'}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x105c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4f, 0x5, "bd5c14dca8c950ac4aec0de0341d799a9be60bc7294e044fa00815e6c2f5b022709a9b10b3d724c321eebd08d775c371246d459474d78c20ace9ca66a4f710c608b113a1d4fa5fde229356"}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "044ce3a9090327bbc28d3952811c50300ec9b62c96518150adaf87c98de68493a2a80ffce63b333807cbf67385bbafa5504bcef2e4e90c773d90b433b43a6b4208e3aacf85338abff309d3b807ff1ee321d8a202342e05c044c732fa11a374beebf854dcfa443fd38d72bbd9b6f766bbe655f493fb09756b55dd84ff76cbddb6f75a1226150866164e76e8e1c86c612fb4b8722e68dbb58d2610bfe176cb85a272aeb4148d83ac9714de33604c919666caa69bf55e5c5ddb4a7bb486d8088ad477a36ffc1444bbd2b9cf60e8239a22e008d0fdfb92dee5285d9d57a30945fabc91f9f9e3beaa00598cc748c583839722964afa2e397d372ccf26a8296ad1a11c8cfa767e4ef0bf6ce3c8e3a2b5b2a70de085c6c6313d2d53a7f35b40b261940236563162f443033ae3bb2696cf8c9239f4f51f1107b183e7a0c401b264bf65a05033f87701dd996d49dae761c585b8b22140c4d7b8d5d06a3b97618bf1ed88194fdc131b604a2c7592626a5f79a2eec230e0a32760a8935fc7dd832b39b8f2161218884cca75e85309792b2d91b765b0d04e6e12f62e4e292f2b16385486b6ddae8b0d986579df9a213e091b8dd5c028a18c81584c4a510a9ec328ed56a0eb0d3aca6c4095b713d64db8a2a1409841d1ca8271d4e537457280e4b27429101714c39548b7e6b4158fce7ce0b1cb2dd5cb53b131360fab9c64508229272cb90307b27b19f25a22bb3a778c83bd06129af1c8d6e6845f820e39067fafee6adf01ac5c808ddcacf332dd75178df6516639b9c65844ee6bccb8c7ac07296b2b43641f5aa1dfe977aba994aea975145439b9c57e72c74f03dcdf647d8a092768e18dbdfe05e9cedae09192f775eae2a7411e97e30608a96de19bd9241a2bf746fe36916b3fdc8a6294e19b2bbe5009e6e95d4362e00b6d36d6ed25e3beade067fcfa6e937a1df44681ee423202e31d387269d8b6508e41c66a39236154381abe0194ab20f5687b9c8b1ddf7d5a9ddee4bd5bd2622f5e68490b2268b4d1b8186d1d4e382bdda887dc4c4d94e869c67be18b40cccd36c3b0929c423b9f8e5e567c50cf487908c5beb9bb43b04384e376b9c320cdad4d71784fb7fe06b62c135bc590e6129538d3fac81a55c7086768d3898cc0097c5a7c1fba921c907bcdbb973b4b22cbb2c03b03996c25458ff4cdaceec266fa6a54cf1867afd778bb57d2e0e6f55545c0f5f1153fc249c32d602dbfda0fef6d42c4cb1b0b0733388653b69c443c4455ed1469fded711c7f954bb1fa84d8372b868b51e43ce67c81602c71b4c84c89ae765a580c4bcf4436ffcb1f726620ae1cae5751d6ca16eb2ad9938ed50bc08cb9b4c96cee8cf2dfcc85ccb3b2bdadc4c48cc31cc92430ebe5bc0085d797d7d36deaeb7c28dd325e2ce2e0fe49cfd3cd1f879af09eb52b757dbfffa11a029768ef57dace282a7136647aa9a9eb2c3d7871d4fb6011080bc6e1746b713a16a4d05b981a8e062f628e4cbf58cd53f40761b194070cb8320e8dd5acbbdb92e4a1a0839ec51163d4cf21ea0c5c7e86c41116757ce3f64baf35d176c8b91cfa66f2c9187684472a3b23ea4f053e15d9f280e71e1ca67a50984dfc5042dd4f979fdbbb4ceed0a0780f3ee5a850134a07027df50bad3203d5caa638c886bfb6dc3ee8f892cc6575c98fe57b2a2bd641c5ee811108203ea95be92a34c2c109f38754f3ddad2198262cb75ba9e39fc47635162a586fc0bd73dad028cc04e6b1c3f9b0f33e3003684e7f5d05cc16a40d096cc0f51a364ef658b2ffcb5742ea8fc06646c9416099a48f371fa36da880a21dd98d6c701e40e51c9593639598b8b2c368edc0e899663c76fd9d26eb433b114a55f77176338af682d71251cb421d78703b71433f8d8e3d8fe90480a2763f7236bc1d256d6dba6275a4ff160bc1786bb3fbd6945a907e42a2b007f2e514faac2fd5bd87bf7666e7fc97e13929a17b189adb69d9937c56f0a1436bed1504b7abb1d9245fe538a66af05b0a2bce61750baa86532548a8cbe9369c42f0ebc8bd536ca59ea4e363e79c7edc78675d3681fdb627bb44c7d1fd1253e91e32ed6223efc9cd9743612072edb43233ea942f365560bb715b7f468429bb604beca7624f98ab48d2e81ec5bb554d8a65d9872c4315c2d1b84aa39191a602a3814302570d09012787f5e6f0b8ea7b594e0bcd473b0e77289a1a2525e7acd4a98872301a646c658015b285745d83059a2d890ba844c1e9e12dcbdf611e061e6009707dad221cc2400e3f62c6287edc441579fe6175e08d39548514c448898b9f16357b856a2256df384f052e8bde53abbccdd359806be6457a8de25791f4ee2bf97085e9f9496c8ee2cb8a288463a9d451f9c3c2bf923d957ac4e384fdb8cec52b2c16dbbdf4916f986a9bc58bc234e5d21366b481d94dd29767bd59e72ec6b9ff63b7627596d6a8a8a262e4787763ec371a833040728768a9538f4ff11365c4701992e443815d633866672d7887ff850683b52e220574ea30cb7bea2a301edd6fe003b20284dbb053ca52c4cf3b02ecceb605c3600090551b65a20789df1732b5f7ee6d0bb2438e53f389e6e35a86a4d1547617cb2765167453e289ddab0263a0f9a0b0b54e2da9d747012d5777b81d2b61b3673ce383080a509ffb6bb7b5fce882227e0492ba1ba5c4a354aa641e1e03abcd33382e8a44a020e96c6b02dcf1d1a8110f6bcac0ddb7f1c16d4e13cc007dc5b2a3616a84ddd121591966134cad54f36f0234f64f5bbae7329ee7735dcddc36ee8e4670ef6803f2fb19072e733cd7b7286060b0ae0a5a57de2440e4c5a8f32904327b0f7140823b1fb9d41abbcfda4c1f3adbf14cabc78f8b35bae16e70ef3f7a08f0ee07b088810f3216af244176f24b72818eaa128f132e6287a90d9744cc1785afb9ab97f41a9c4fd62324211ebb1829b329ce28987c8514f43e114a1d492725c26c6db5ead2390d0f9ebbd19179b7c5af777038ff92189ede2a36683c2726e3c57820e5f47ad892d45a1b3a612db8c0713e0a0afdf04158e6e7110307b6ca5d8d7bbb5535cbe98b017e0da69034c632a09eaf9ff6269546ef719d097add5156d054aceda89652e0746c74d671fb72d4c023aa931c33e88198425861275255e5e3c22fa3e0cfac7a277213730357bc59b09d5027b8082087f85bd93009ab11a8cb46f629983daf6f192f0fbf187913fe7be79e530c0c64a31c7dee0cc89d0fdecd1987c670ab1489ed88a6999d051a37fc825d9f1b23479bf54b94f654dca7cd4bcf6141794d6d16914d630dfafc2f8c1b8661533957ff15c73a105c3ca2ec589c3a92787b27cc76275a028163b02e6aa620cfa61c5100b2950e24c25546a7d9cb2362a0037a7d43cffc07a54940d92867a12873af463fa8ced746eaf167f119c10194256f9ff7ca37fd1ac7fbf624d510d10a0f48bfb1cce68722dffb074c925906b423f3d9af73f2f2d43d031b8d07a4fdfe8335a9c4aa572d8a9f372463aeb8442cb4e4bc2f53394d3e40e449d159789eddd468842356df4590161fd18bf4873be2f148a1748c89d44daad81bbb7d738c23ad1a5aabfd83e52f8d84ca1c746800c570756525cab7692b430038a043d51d7441aea249fbfc4a5683d08b9461a7ebea6091163c4fc968876cae7c3c077dfadabb985871aefa56f55637ff2eab9c8dc7e48f5910d32f8209eaa95cdcc74ae8e55a08065d875896cbf1c1deb81e58add158282b831661b94f9ab4a1b929687536f1b431dc04ecdc934c7260c589e113381d8e4c9616ccf2f965a50990a54390292ca2f5b4ec0848483711231be6427e86f4e281cdc16ba259b459b2ccfb09c93eb3b50b778d9e285a106529fe537fc4e3f2fe0e3c99047368ebcdf0e5d4ecc24f29a52515153b4b5146f7aea75ed433f313a0521025d4edeb214be5032b9337dad817dee864fd27ddc88729718cd11f7acc446d3a1f69f7bca188f69fdd981393e1a45de7bd0c0fca5395551d840604c155115a1d706d0fbe59da8ce545fff813a269b29d34aaa2989118bf25084e742373f948c78add09160ed04afeaa923be1d3f0f3fd2c511e8fd288b83baae0d1af56051c904a10ff3068f7dc15b5a0b54dec7b6fc67962f6afa4765c6e05f8c9b7b03e22476d5250ea8e48a2ece110436772748d615e50dc4f360792622cdfd508a5546f6bdc460acaace73f8dc2071124a245e23462cf8f64affb018c971f6b6a412d334f468aa6cea3513f5266f4a73893393db70a714b5d5952bf0aa6d680e8bfc99cf04c1355134d3c1b84b82fdf433cd2511ff6adf7cce62897775d31475acdb2c651da56d165e1e31531158ad0a3af760917924df497f4c5eba55721c4c8789ed4b1210b4b50af9c66ae9522e4d929d935b1fdb6fd26de2a65816d80e1e95b44dd3f2709f84d71add33c989471213dcda4454b700d979bd8ecbf66aa57ac563916beb4957d61900a28fb10c754135df84f178c95668200f48b3dbda18b16de03b8be90e1ea635d21b363ec00d2855008afd041c448a7228e774d896ed728f6cc846191e15ac6f892e459ac15c53011acb2f6c47211fc8b8aa05de670d8694ccec9f9951c1f2a1950b42af50d565d1f730a373b231df2400417c834792dc4c6dfcf5483fd6bb10362e2644e3600ad8bb47d89f9955b8d24705702c636b6d325bea0128b9806ab2699f59381276ffb10d92954ef03b0e2ca0be168b0da6dc3a1beb2a21c05b5df65e5aac0921a70ee6d9db3eaed6d5d91475e44c583c916f7797ce95a86eaa11e71c32d9114a45aba00392c413c4ee7c0d59b1e600eb80e3e66ab07c3af432cae1f9278ca58793e3950b421d4cac360d0f7e527ad021488a924b816c0859b54bf5c8dd9d13db5b42e7f91a0ed69327a7b7b1d46bbb16023467e98d03aad4bda56776d8c21dfc450ab18eac9b1b3af702c4eb0cd8e3a7ec41b352d3cfd06c3a27af4679f55fe9cbdc5e5bc94425b8ccbc4a175bfba23bfc4069b41bb788a8c0eac3be2f1f8d978e09f3954412da5604da1b995c50f44233fa502fa2059d00360077463fe190ad85a591907f202e21bfcb6a727268cb2ed92b12943286fde95d154340a5d475d571200fcdf75bd1468630e3124ef5197130330b7098e00fd4280abcd63e2fcf5630c52cacb9be0077db78847083b8bc25cfe286cc78a07980eb4c8a3eacc34eade5bbeb46fc29a10a3da21730b37d0ec1c41b6d8246643e01614106d5e94bdcfe6eeb2835969147682c132eac20e47511e9f0f725dd0c8f66180eb284f59df502382611322dd1baabae2762f642cf2cb3770a6e52fa97e463011013677acdd568e9122148545c8926c45a36e7fa55df789b29cc89e7b242445ef29e555d8abbaf644150e4b11fc3cd333303ab22f7a67b1a0d76cbdb6d20fff2645349def722409535051b4f1e4cce100ec9215c1e489e242a727e300871e014516065b511c9a084ab124337b6493fb8811594bd291c18a1cd9e0cc34f8bb7f19677114893d8897c18fe43493879659d0a41c2566a933ab3632106add26780e29dd223c9cbdb232570f02951b7a0a49f17fd385537c0f57a1fd7c6612dea0c58240061eccc9eb5d0aae548b0e53b03ea75c6eb1231886e6de682e6db3effe18a133f6185323ebacd8a0489e9f0d17de22558647af68975f61e80c1be68d5fd7680208a72e846c0971c15b07047442a70109e65e24aef2de38b6da2b45ca64e72ca2304851e213abb7312d698ce4579ec16a462c108a0cdd3cc3addf85bf48"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x29c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x5c, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x489}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x91, 0x4, "045039026dbf4175c4d00549c84eaa44e380522a05f910db9e258931cdb0d421589edcf124264703d4b464f66f63ddef8dc2b8e28c0c9630e974bf50ae187b9338a933ca4dbb6db6a0e83c32a31680ead54567d3a5371bcba6c540537c9946f21d1557cfb5f73039f9dc0d3f781aa1aec049e6c14ae48a56b76e677b1bf495e191bc0f443fbb4d261917653e90"}, @ETHTOOL_A_BITSET_BITS={0x1a8, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x82}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '}!j$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '[]-&^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xef6}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '+@**@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, ')}[[{)}8$]\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'bond0\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '^+&)\x00'}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x1780}, 0x1, 0x0, 0x0, 0x8001}, 0x80) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000180)) syz_emit_ethernet(0x4e, &(0x7f0000000a40)=ANY=[@ANYBLOB="aaaaaa9646001806000000000000000000000000000000000005800000000000000000000000e8ffa900a9fc5b542636924bd7c7da8361dff380fe0d4e6d004e2200000000000000000000000080d3fb0000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6002000090780000fe04f989"], 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x7b, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000002007910480000000000710427180000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xffffffffffffff11, &(0x7f000000cf3d)=""/195}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0x24, &(0x7f0000001300)=ANY=[@ANYRESHEX=r5, @ANYRES32, @ANYBLOB="0000000000000000b702100014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000852000000200000085100000feffffff18390000040000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000060000001800000002000000000000000b000000ca27feff0000000018190000", @ANYRES32=r10, @ANYBLOB="000000000000000018110000", @ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x100b, &(0x7f0000003140)=""/4107}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="a400", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fcdbdf2515000000280001801400020070696d72656731000000000000000000080003000300", @ANYRES32=r11, @ANYBLOB="1800018014000200678565746170300000100000000000005000018014000200766574683000000000000000000000001400020030696d72656731000000000000000000140002006d6163767461703000000000000000000800bd03000000000008"], 0xa4}, 0x1, 0x0, 0x0, 0x404c050}, 0x810) sendto$packet(0xffffffffffffffff, &(0x7f0000000240)="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", 0x800, 0x40804, &(0x7f0000000040)={0x11, 0x1a, r11, 0x1, 0x9, 0x6, @multicast}, 0x14) 1.361707621s ago: executing program 3 (id=1110): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x1, &(0x7f0000000180)=@raw=[@ldst={0x0, 0x0, 0x6, 0xa, 0x4, 0x50}], &(0x7f0000000000)='GPL\x00', 0x3}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) 726.590213ms ago: executing program 0 (id=1111): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtaction={0xfc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xe8, 0x1, [@m_police={0x90, 0x1, 0x0, 0x0, {{0xb}, {0xffffffffffffff98}, {0x61, 0x6, "fb97564f8f470910dd75fcd24a81607f5323d13806d7a349d6c55ebc78f02f1a38c9a920041c793cca89ef5c00000000000000002c032f52f86e65b25b12aa602ed4677fe8255909630e02edcba2f47f75b45f0a50ece7857ea7587dd2"}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0xe7b}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d46, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xfc}}, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x0, {0x1, 0xff, 0xe0abc0aa0f9d0633}, 0x1}, 0x18) 725.747405ms ago: executing program 1 (id=1112): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x6c, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004502005e00000000002f907800000000e000000124808100000200000000ee0010000800000c000086dd080088be00000000100000000100000000000000080022eb00003f00002000000002000000000000000000000008006558000000"], 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, @loopback={0x29}, @mcast2={0xff, 0x5}}}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="020029bd7000fcdbdf25010000000000000001410000001800170017000a0000000069623a64766d727031000000"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x86) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000000)={r4}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000001c0)=r4, 0x4) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000dc0)={0x5c, 0x15, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @generic={0x40, 0xa5, "5763b52263921d1acc2ac0bba228d629221b261656632f919ea1c877438e3cb6b4535e88620af111a8c0b6034d39b4e1eebe1d9a2ab0f73661961f400186b75bf5da04863ac881d5d552af74ff8e1afdd7da05bceab2882f5a356c18607fd6afcc3a5591bb69302d337280bbe0fd17c973760b6f22938fa5a3f695649d3ffd2eee8adcc0e546f7f5e7c0e0b12153b7649314f4f9b309fc950e5a1a325d76363bab301e4172"}]}, 0xb8) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000280)=0x0) accept$alg(r1, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000440)={{{@in, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000d80)=0xe8) r10 = getgid() sendmmsg$unix(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000380)="2f1569e6fba4c204f871061ca45e95500412f3954c03e5fc2788a9c24ab81c8bf65f00882835da6960cb604e357bbc82a36366f9665ebb1618a0ebaf93a6380f4d48d4c92454f6b5c9e2538b44e485ed1e732563644cc39519a3514d8888efdfd43c259eb6c9ce25791347bd818ca0ca7fe1fd583760777eb1e24ce3e9d6bf4617db2d88c1285fc78001747d5264847b369abc41794b36f34bf5b70cba004c7b43b5493c796088945e37a140ac35c6d8ea6268347d", 0xb5}], 0x1, &(0x7f0000000580)=[@rights={{0x30, 0x1, 0x1, [r0, r1, r6, r0, r0, r7, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x68, 0x20000800}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)="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", 0xfc}, {&(0x7f0000000f40)="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", 0x1000}, {&(0x7f0000000700)="1a562374037bad7b1edc6d65b2ebdeedab23210291f9b2c33105cab72c8b21a6260c9f417e956e585fa37eba587b631cac0c7d1e006d1260865257a4266fe04dc692d06b192d279fa46bd554", 0x4c}, {&(0x7f0000000780)="eee0e949eef3ae3b1d564aa46507", 0xe}, {&(0x7f00000007c0)="40719f8a9c798489ca457a1ba714fac66dca114fc8569b47db74bd9061b026d09ac382da98ad5e1528a5327ccb22f2ec8ec9114213893d24a1aacec6bfd2d65ad4f1e16964bc7528bb0e9c8d14b85381e745d4d151370e672c127caf04eff9a38f3a9965c1056db33a2e8488ad4651eca2cf2b2947a48b1bd1926debc7aec188d0b10e509d0dbf7e0287a7e60c2cbbef2bf15f", 0x93}], 0x5, 0x0, 0x0, 0x4040001}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000900)="3d37057cdf058f26f600d2c71844265535981883cf1a2c4d969ba5c9d24bb2230ba4886f83a089e7130b0476600965e905de0f5185f5905196abaffe25b73bfe606a5612babd8f50457b53422d11b5699dae76764d2bcc551bb6a500568dbed002a11b73373868403e3a8a", 0x6b}, {&(0x7f0000000980)="9a47d42911f883ee999d3fa58be77ea6a86ab54ad88800dfcb9b480c2689f293d2617e7e25dea1d2a117333e85ab95fc52210a42ec2dc1c406bf4342b12d577726d5230618b58b33d548f82c9bbe8007a27cefe76d7e001ab8f1c1bccaeda39bdeb0d3a62a9fbcb9e8ce26dce65ffc1feccb5fc9dfc152b267ac27ec3ba5b198ee312fdb08e5c2663787a41febd48bbdd3e10ee6843d62b2ffb4e7b5e8d65a51abddc83d98b8a6aef8435397e47a8a9d", 0xb0}, {&(0x7f0000000a40)="a91c63407db0c3eca84ad3d9821b7d66eea6c35aed43bf2a34d936b7e872b0144b7eedb9aba9a95cdc187b5c1f35a5426b8cff046077d79d60d276b7318c63e4bb8ae4dc0016ab43c7dac703e786719433a6e52a64c389e76546298cf84508a034cc90b3dc69fcbaebb208067f13bbca3c9d2f2c274eace90e9ef7f50bc1f90123e9fa33963baf051328cf9a89aa8e3f618d9093c966e05283b451b7f4f0aa5fee4c92d03347cf0e66f6ad0d495d3e", 0xaf}, {&(0x7f0000000b00)="2a0e61cbdfc15c804cc73b483cc5fc4b5c1c88dcdabab5a5f8a20fa82af00173ae8811843e07fcdd1d0e1554645aebeaa572d71e8a088b64c0a5ddf5e2483af800ed66a2f85876ef823c1c561991036b1c4054f54a2ff66610a4d241", 0x5c}, {&(0x7f0000000b80)="3b8a4e082b714cbd5959237690dafb68764daa671afeaf552539637f8738bbc324055c41f34e9d636d3029f78a72dc47e86b0593866ed87027eabbde86c2fbfc3e59ff084dad46e890ad12b50b91151ca32a85b34bd795ebdba732f2e14ae6b0855185442e00a869e9d7bf417d7425214e57ecbb7794273c51cb08aa755ea8789a", 0x81}], 0x5, 0x0, 0x0, 0x10}}], 0x3, 0x48080) socket$inet6(0xa, 0x2, 0xffffffff) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="580000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800b000100697036746e6c0000280002800500090000000000050004008000000014000300ff"], 0x58}}, 0x0) 725.100136ms ago: executing program 2 (id=1113): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0xa28, [0x0, 0x200005c0, 0x200005f0, 0x20000fb8], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0xaa0) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x18}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) 724.08805ms ago: executing program 3 (id=1114): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0xf1, &(0x7f0000000000), &(0x7f00000001c0)=0x4) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0}, 0x78) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000440)=0x3, 0x4) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0x1) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/167, 0xa7}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000000040)=""/114, 0x72}, {&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f0000000200)=""/152, 0x98}, {&(0x7f00000002c0)=""/210, 0xd2}], 0x6}}], 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000074c0000000c0a01020000000000000000010000000900020073797a3200000000200003801c0000800400018008000340000000020000004000000000000000000900010073797a30"], 0xd8}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x557081, 0x100408) 551.624703ms ago: executing program 3 (id=1115): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) unshare(0x6020400) ioctl$FICLONE(r2, 0x40049409, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x40, r7, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x400}]}, 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x44000) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_int(r8, &(0x7f0000000100)='net_cls.classid\x00', 0x2, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x30, r5, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_IDX={0x5}]}]}, 0x30}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000001500)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 429.591376ms ago: executing program 2 (id=1116): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x13, r1, 0xa773a000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023", 0x5}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) r3 = socket(0x10, 0x80002, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925000900070007ab08000c000000f0007e93210001c000000000000000000000000000039915fa2c1ec28670e9889bb94b46fe0000000a00", 0x42) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492856, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0x8001}, {0x6}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x13, r1, 0xa773a000) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023", 0x5}], 0x1}, 0x0) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) listen(r2, 0x0) (async) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) (async) socket(0x10, 0x80002, 0x0) (async) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925000900070007ab08000c000000f0007e93210001c000000000000000000000000000039915fa2c1ec28670e9889bb94b46fe0000000a00", 0x42) (async) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492856, 0x0) (async) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0x8001}, {0x6}]}, 0x10) (async) 428.499311ms ago: executing program 0 (id=1117): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001fc0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000002000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000280000000c0005000000000000000000060006000000000008000200", @ANYRES32=r2, @ANYBLOB="05002b005f"], 0x38}}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r3, 0x3d, 0x0}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r5, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008c99}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000006800010000000000000000000a00000000000000280008802400010000000000000000000000040000000000fe8000000000000000000000000000aa060007000500000008000500", @ANYRES32=r4], 0x50}}, 0x0) 385.335279ms ago: executing program 1 (id=1118): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\b', @ANYRES16=r1, @ANYBLOB="010000000000000000002500000008000300", @ANYRES32=r2, @ANYBLOB="0a000600d7872ac05d8c00000800350004000000080026006c0900000400340008002201840300000800270000000000"], 0x4c}}, 0x0) 321.024232ms ago: executing program 0 (id=1119): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, r3, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000000c0)="c4", 0x1}], 0x1}, 0x0) recvmmsg(r6, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/120, 0x78}], 0x1, &(0x7f0000000340)=""/213, 0x45}}], 0x1, 0x0, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r7, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e}}]}, 0x4c}}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0xec, r4, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x9}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0xe}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x3}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x7}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xa0, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6f67}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x100}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0xec}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(r10, 0x8903, 0xfffffffffffffffe) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$sock(r6, &(0x7f0000001c00)=[{{&(0x7f00000001c0)=@phonet={0x23, 0xaa, 0x8, 0x5}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ec0)="7448a5364234d8373718925f4cf6d81c8fd1d01ed863edaedbbe0505bbfb41d2566c84ef3808a8d22da8c8f3c64531ae40f40fe948ab36b472f1e0b41bcc5b12c286148230d1de8bf3690f9f6b6f0917f5ba3004b94b6566d451b900ad45b660118a704dd27eba3cf25e2baa0d49ed56ee61435c78968fec5fcae98cdaac7244655faf16f9891a5d8ad11c168fd77b4aebd1a349569670dbcd39b130", 0x9c}, {&(0x7f0000000d00)="214b0117418ff3f1dc5b4ffdb7d5127fdb974e9d5f8c052093be3bdd7efa05fbf19205bd25040000003c7722224d34fb22e17eb0e7d066a21b511944f3c60ebc5d9a20f0b4425187309793ba1e1beea3657b322b0aab8defee2eadd81209f3575feeeff68f57052a8277a10e0e4077033c7db49f0915f6ad2c31a95ebb9f066628dfaa3fbde852547b469fea2cdce53f909fb65839167fddc2a4af35bfb0dc4398315f5816040a28aa26e5a21b9007c7b5633473a98c06bbc3a73b8058f8ebdcdb35a2cea6b7bfc1541f7ad0c3004102765dbff3becd34ecfcd1a56af6438d221b773b42d189325c9ff61bd77845bd671f988f7afda4d4a7aca7965e03704b70b96d2970", 0x104}], 0x2, &(0x7f0000000780)=[@txtime={{0x18, 0x1, 0x3d, 0xd9}}, @mark={{0x14, 0x1, 0x24, 0x101}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x48}}, {{&(0x7f0000000800)=@hci={0x1f, 0x3}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000880)="10d1c55bd55a4c5ea71d154cefbd03cddbb246098e85f7751f042ccc1c325982359b7ea9c16e23ca4e9bb4164a87b73c90db76e7ed0edeb3e66f1d5646808ee9be02de01b2d34a8851750d68403e297f5f3757c8270a440bfa2a776448e23d096851c53cf3f7566337d55c6e26930a086fe3ee9c7c8ef9b973ac144af8a0f40e07dbe6e21d5e4479fde8e331d8e75b2956abe98c88873a1d5b3d88581c5d92a47b4c328c5dba69048b3c90d35f3d6607df72180da13124f374755f4c0579cd083a7f4adb50e6dbd6ce40", 0xca}, {&(0x7f0000000080)="5cb31fce0ddcc9d4b0aaeb105365a537a474e1a53532f92057dcccaa3405b73e7c0766f1bd6e3c40fa31db50ed92743f26c2", 0x32}, {&(0x7f0000000a40)="5b6249da0b4d915394628ba148b8b948d96e2d030315526e6347fa30b213b7235d7cbd0077d8293ad187dfdfb86e05666d5c35b5d8326ab90bbd2e3f41e7404927db4dc26098b393b5d4b7580bff369080983ea53276325fbffabf2e9f6cdbd8cde6b487d52d97d4d7eaa9ad41ec2062dae0997ec87379c7add8b91165", 0x7d}, {&(0x7f0000000600)="6b2cda28ecc26ccaf9e5dfe4a4f66d3e66861438ca565dc4c026ef27bfbb2a207489e6069f47e8a158579b4d07e2ef4885e9dd7c4ed6086c8dce343695cc9e6f6147477588af23373dc17f4bce0f9b0585fa53194d2a2e2b2ca5ca7ffe7ce42f056656178d2206de711fe23291f4078fbeccbe3763fad926dd2459b8f3aa6fa01143dfb0a27a1616956e4dad0431a1788db8c9ed94987cef182dbf3689b7bccb40bbe5bacdacd66f646be0d1a0c67835574230c3968595dbd921e251757a47815d863863c827759e0bd8601ad4820018c806b5818c641fe5da347b1fda24b21b7e7503443fe1f57c", 0xe8}, {&(0x7f0000000700)="b350dad64dd806d2c900c5b5e3fb44a5d40c735555edd321f0f17cd325d68495ca62d84827c51e8dde92d1", 0x2b}], 0x5, &(0x7f0000000ac0)=[@mark={{0x14, 0x1, 0x24, 0x7ff}}, @mark={{0x0, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x0, 0x1, 0x3d, 0xffffffffffffffff}}, @mark={{0x14, 0x1, 0x24, 0xe8}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x8000}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0xd8}}, {{&(0x7f0000000f80)=@l2={0x1f, 0x9, @none, 0x8}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001000)="c19229b1ad83e93cd7cc91a0198e12cc8f2bfc66ca22c7bfcd49b03985d31abc526934e83f519227ed9733833e11297224cf80571734e4b29792ba46dfb9eddc67b860d4dacb98c5b964d9f17fabdf139fbf09db5af106c0c1ab2c766a727df04181da8d3e750f9229ab4b45e7c3504c9b3eb59cd7e968d8c1acaabf2e3b85dac4ca358bc7c37eb85f27fd6a2246885419831a4edd082595e85a56ffcd", 0x9d}, {&(0x7f0000000740)="bc2a1fd762e372122f157af6264c9ac3c5f6e672a164c7cb408941", 0xffffffffffffff5e}, {&(0x7f00000010c0)="5ae7c06047f1fbd00c33627b846415a8b60b160f3fdb6f9232f274fef588bcdaafc10427f60ccadd41af57b6363a5d2c528f3a8f443c4b4343260640d146c2db8c57c7d7a21040161b16d8327a96492a7baa68ba770895527a577b3e53a5d8e3e46f904f52ec8d89ddf1df41d2963f241a025daac1d0354633816f738011ff8de831dfb29eb58dad008322f8d902bb68691013a47ae01fa8da34cb3e5e2c0acdd60e3fcb65d45b596eeaf0c712838df79483ceb3a1bcc0cf6a1721e7780a7c4bbd297378630e", 0xc6}, {&(0x7f00000011c0)="d779d2ef896fd1b59cf059388339cbf41f31eddfc658b7de054332b0d98567bfe26128153cb99ba8078b219600a902aaea478758abb9bcd2309f9f17c9c317de0f4d9d107a4d6deed086cc39a70cd0520d4b2a823ae6a20cd5f0f143bafa49b7e50ef273f8cdfbbca53e0ee321bf1bb818fd2fbc09045ef1077336d3e91058b6987cf313f236b358607c9d5b37daa3ee643e9e", 0x93}, {&(0x7f0000001280)="dcfbcc8324917bc08a21a3a5585397f79578c1f5e3ac06bd4b25ddb775829a17c1da85cb77c3078d96f50225c7debd1a86ff2a083e923f3b029dc8d1de1a18bbf9052aa33c55286309e5b2015cde78bb1c9965393b322ff622183b34a0019756a7b3e7ec039be00e53f658ae546bb71ca6bee2f9f3", 0x75}, {&(0x7f0000001cc0)="3a7e2b6a3318cf435dad1c55512e124ed191ad840ade5e7238ca7ec4686439761849a0112c774d0d0bcb8b27838e8d9e7faf368bea8865afd476b894d49693cd406e0a096e08000000b32cf09f1a45ea7add6061f05401b75c9f8c2ab48c28c0b8d413f87d063740bc71aa1191add3d12742d466cb2f666a4504d79d9497a85d2843bea0244435d437ac6dc1c1cf314ebb29065cece337e82c4846", 0x9b}, {&(0x7f0000001380)="3fb5d247b29abb57006a8a88b1344995a4806ff626590b4021c320dfa03f65f241f4fd1779cf5ee64505322de82e7826e2569f22b7fd59a8754ed823f621bdddb8b9919b19c1c48f5707e7d651dfc20367af2be812dbc300000ef37d96", 0x5d}], 0x7, &(0x7f0000001480)=[@txtime={{0x18, 0x1, 0x3d, 0x10003}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x99ab}}, @timestamping={{0x14}}], 0x90}}], 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000015c0)=@mangle={'mangle\x00', 0x10, 0x6, 0x5b8, 0x0, 0x418, 0x348, 0x278, 0x418, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28, 'HL\x00', 0x0, {0x3}}}, {{@ipv6={@dev, @loopback, [], [], 'pim6reg\x00', 'veth1_macvtap\x00'}, 0x0, 0x180, 0x1a8, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @common=@dst={{0x48}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) socket$nl_route(0x10, 0x3, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000300000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 237.739791ms ago: executing program 3 (id=1120): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) unshare(0x26020480) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000007c0), 0x10) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'macsec0\x00', 0x6}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a300000001b0a01080000000000000000020000000900010073797a30000000000c000240000000000000000104000480140054cd441097b530350000000000000000000a"], 0x58}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2ccf3766}, 0x48) 224.255319ms ago: executing program 2 (id=1121): socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x305}, '\x00', "bcbd13b603e0f7b3bfa8909ef43c0aeb", "0000fd9f", "283271c502c7fc4f"}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r1, 0x5, 0x0, 0x0, {0x8}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001ec0)={0x0, 0x4, &(0x7f0000001a80)=ANY=[@ANYBLOB="1800000000040000ca821a000500009500"/30], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x48, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "ca0c734891a263a2ef1df715fb24b095"}, @timestamp={0x8, 0xa}, @md5sig={0x13, 0x12, "2bdd4b74a1f6aa675459bc4d77085aa8"}, @exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00'}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="240000000706010200000000000000000000000005000100070000000800064000000004"], 0x24}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000020000000000002c40df000000000095", @ANYRES32=r3, @ANYRESDEC=r3, @ANYRES32=r2, @ANYRESDEC=r3], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmsg$unix(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x181) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)=@ipv4_newaddr={0x18, 0x14, 0x104, 0x70bd2b, 0x25dfdbfe, {0x2, 0x78, 0x21}}, 0xfffffffffffffe0a}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 223.853978ms ago: executing program 1 (id=1122): r0 = epoll_create1(0x0) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000440000004400000005000000000000000400000d000000000a000000020000000d000000040000000d0000000200000006000000050000040000000001000004f7ff000002000000030000000400000000005f5f"], 0x0, 0x61}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000280)) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x30, &(0x7f00000001c0)={0x2}, 0x10}, 0x90) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) close(r2) shutdown(r1, 0x0) close(r0) 91.466312ms ago: executing program 0 (id=1123): unshare(0x28000600) r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x22, 0x0, {0xa, 0x4e21, 0x0, @loopback, 0x4}}}, 0x3a) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) write(0xffffffffffffffff, 0x0, 0x0) r1 = accept4(r0, &(0x7f0000000240)=@phonet, &(0x7f00000002c0)=0x80, 0x80800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)={0x88, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xa}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}]}, 0x88}, 0x1, 0x0, 0x0, 0x44001}, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r3, 0x0, 0x0) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$SIOCAX25GETUID(r3, 0x89e0, &(0x7f00000009c0)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}) ioctl$SIOCAX25NOUID(r3, 0x89e3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xc0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0x800}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000003b80)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="d53909000000000000001eb782ad7f310a06c610418e1e76d5ef7dd11fefa8fe7147987b7ead01aa2f80"], 0x10}}], 0x1, 0x50) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f00000002c0)={@val, @void, @eth={@random="d3c22fb73e47", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x26, 0x0, @wg=@data={0x4, 0x0, 0x8, "5737521fefd37419594412a01cc1"}}}}}}}, 0x4c) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 3 (id=1124): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="b6b7", 0x2}], 0x1, 0x0, 0x0, 0x20000000}, 0x4005) (async, rerun: 32) recvmsg$unix(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)}, 0x2000) (async, rerun: 32) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f0000000000), 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x1a, 0x3, &(0x7f0000000f80)=@framed, &(0x7f0000000fc0)='syzkaller\x00', 0x8}, 0x90) (async, rerun: 64) r3 = socket(0x1d, 0x2, 0x6) (rerun: 64) recvfrom$rxrpc(r3, 0x0, 0x0, 0x2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001800010000000000000000001d01000008000a0038dc551df63197c4e6918469b28a1135ffb0ff901f9429f683d7dc2059a04dc29539ce654a1f9fa83da6a2a2d7eb8f52fab02ca2d4ac23471a84cd8c55eed506f20f80570d117731f4ff37b8d4867884ad70d80d7069d7e24f3f15620ab71c4ce8635efe1b21671210b7ace928f0984b96e281198881", @ANYRES32=r6, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r7, @ANYBLOB], 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@gettfilter={0x4c, 0x2e, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x6, 0xffff}, {0x3, 0xfff2}, {0x2, 0xf}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0x4008000) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0xbdc, 0x0}, 0x8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r8, 0x4) kernel console output (not intermixed with test programs): 229] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.312505][ T5239] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.909157][ T5242] chnl_net:caif_netlink_parms(): no params data found [ 63.937616][ T5237] chnl_net:caif_netlink_parms(): no params data found [ 64.001488][ T5226] chnl_net:caif_netlink_parms(): no params data found [ 64.021750][ T5228] chnl_net:caif_netlink_parms(): no params data found [ 64.130095][ T5232] chnl_net:caif_netlink_parms(): no params data found [ 64.230618][ T5242] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.240457][ T5242] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.249207][ T5242] bridge_slave_0: entered allmulticast mode [ 64.257705][ T5242] bridge_slave_0: entered promiscuous mode [ 64.268332][ T5242] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.276328][ T5242] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.284025][ T5242] bridge_slave_1: entered allmulticast mode [ 64.294613][ T5242] bridge_slave_1: entered promiscuous mode [ 64.355192][ T5237] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.363896][ T5237] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.373444][ T5237] bridge_slave_0: entered allmulticast mode [ 64.381069][ T5237] bridge_slave_0: entered promiscuous mode [ 64.415783][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.423280][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.430721][ T5228] bridge_slave_0: entered allmulticast mode [ 64.438739][ T5228] bridge_slave_0: entered promiscuous mode [ 64.447531][ T5237] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.455585][ T5237] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.464943][ T5237] bridge_slave_1: entered allmulticast mode [ 64.473169][ T5237] bridge_slave_1: entered promiscuous mode [ 64.502463][ T5226] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.510674][ T5226] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.518012][ T5226] bridge_slave_0: entered allmulticast mode [ 64.525292][ T5226] bridge_slave_0: entered promiscuous mode [ 64.536921][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.544267][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.556754][ T5228] bridge_slave_1: entered allmulticast mode [ 64.565167][ T5228] bridge_slave_1: entered promiscuous mode [ 64.587120][ T5242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.602471][ T5242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.614311][ T5226] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.621975][ T5226] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.630948][ T5226] bridge_slave_1: entered allmulticast mode [ 64.638960][ T5226] bridge_slave_1: entered promiscuous mode [ 64.688704][ T5237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.704140][ T5237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.749840][ T5232] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.758750][ T5232] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.766786][ T5232] bridge_slave_0: entered allmulticast mode [ 64.774345][ T5232] bridge_slave_0: entered promiscuous mode [ 64.785146][ T5228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.800498][ T5228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.834070][ T5226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.844035][ T5232] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.852142][ T5232] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.860848][ T5232] bridge_slave_1: entered allmulticast mode [ 64.868344][ T5232] bridge_slave_1: entered promiscuous mode [ 64.900702][ T5237] team0: Port device team_slave_0 added [ 64.910392][ T5242] team0: Port device team_slave_0 added [ 64.919814][ T5226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.981757][ T5237] team0: Port device team_slave_1 added [ 65.003603][ T5242] team0: Port device team_slave_1 added [ 65.040939][ T5226] team0: Port device team_slave_0 added [ 65.050499][ T5232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.064764][ T5232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.079431][ T5228] team0: Port device team_slave_0 added [ 65.110180][ T5226] team0: Port device team_slave_1 added [ 65.146774][ T5228] team0: Port device team_slave_1 added [ 65.156486][ T5232] team0: Port device team_slave_0 added [ 65.163453][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.171487][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.198079][ T5237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.210636][ T5242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.218233][ T5242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.244474][ T5242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.266803][ T5229] Bluetooth: hci0: command tx timeout [ 65.292474][ T5232] team0: Port device team_slave_1 added [ 65.299477][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.306670][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.333648][ T5237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.346001][ T5238] Bluetooth: hci2: command tx timeout [ 65.346051][ T4624] Bluetooth: hci1: command tx timeout [ 65.357663][ T5229] Bluetooth: hci4: command tx timeout [ 65.368142][ T5242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.375116][ T5242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.401302][ T5242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.413184][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.420623][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.447246][ T5226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.458120][ T5229] Bluetooth: hci3: command tx timeout [ 65.463995][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.471201][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.498029][ T5226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.509953][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.517184][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.543399][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.589846][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.597637][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.624577][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.642087][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.649354][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.675827][ T5232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.723892][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.730925][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.757855][ T5232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.784142][ T5237] hsr_slave_0: entered promiscuous mode [ 65.790868][ T5237] hsr_slave_1: entered promiscuous mode [ 65.822292][ T5226] hsr_slave_0: entered promiscuous mode [ 65.829294][ T5226] hsr_slave_1: entered promiscuous mode [ 65.835660][ T5226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.843614][ T5226] Cannot create hsr debugfs directory [ 65.887141][ T5242] hsr_slave_0: entered promiscuous mode [ 65.893474][ T5242] hsr_slave_1: entered promiscuous mode [ 65.900066][ T5242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.908402][ T5242] Cannot create hsr debugfs directory [ 65.934385][ T5228] hsr_slave_0: entered promiscuous mode [ 65.940741][ T5228] hsr_slave_1: entered promiscuous mode [ 65.947603][ T5228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.955288][ T5228] Cannot create hsr debugfs directory [ 66.093357][ T5232] hsr_slave_0: entered promiscuous mode [ 66.102218][ T5232] hsr_slave_1: entered promiscuous mode [ 66.109032][ T5232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.116984][ T5232] Cannot create hsr debugfs directory [ 66.493217][ T5237] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.517933][ T5237] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.533428][ T5237] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.557800][ T5237] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.618740][ T5242] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.641673][ T5242] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.660730][ T5242] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.686771][ T5242] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.711705][ T5226] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.721835][ T5226] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.734219][ T5226] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.744794][ T5226] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.842836][ T5228] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.852684][ T5228] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.892953][ T5228] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.940643][ T5228] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.997312][ T5232] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.007615][ T5232] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.020361][ T5232] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.056324][ T5232] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.114650][ T5237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.161618][ T5242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.182036][ T5226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.217017][ T5237] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.248477][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.256190][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.275393][ T5226] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.293523][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.300712][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.323894][ T5242] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.336559][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.343672][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.351631][ T5229] Bluetooth: hci0: command tx timeout [ 67.378311][ T1070] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.385491][ T1070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.405585][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.412766][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.427868][ T4624] Bluetooth: hci4: command tx timeout [ 67.427931][ T5238] Bluetooth: hci1: command tx timeout [ 67.433336][ T5229] Bluetooth: hci2: command tx timeout [ 67.466406][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.473554][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.507694][ T5229] Bluetooth: hci3: command tx timeout [ 67.603924][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.700665][ T5232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.738965][ T5228] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.784207][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.791435][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.831755][ T5232] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.862666][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.869903][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.949150][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.956410][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.973340][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.980651][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.100875][ T5242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.163827][ T5237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.252363][ T5226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.329935][ T5242] veth0_vlan: entered promiscuous mode [ 68.385606][ T5242] veth1_vlan: entered promiscuous mode [ 68.454192][ T5237] veth0_vlan: entered promiscuous mode [ 68.490898][ T5242] veth0_macvtap: entered promiscuous mode [ 68.520637][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.537910][ T5242] veth1_macvtap: entered promiscuous mode [ 68.555417][ T5226] veth0_vlan: entered promiscuous mode [ 68.576778][ T5237] veth1_vlan: entered promiscuous mode [ 68.593159][ T5232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.638783][ T5242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.683631][ T5242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.694260][ T5226] veth1_vlan: entered promiscuous mode [ 68.720236][ T5228] veth0_vlan: entered promiscuous mode [ 68.729944][ T5242] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.742036][ T5242] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.752308][ T5242] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.761811][ T5242] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.795478][ T5228] veth1_vlan: entered promiscuous mode [ 68.880280][ T5226] veth0_macvtap: entered promiscuous mode [ 68.904449][ T5237] veth0_macvtap: entered promiscuous mode [ 68.915077][ T5226] veth1_macvtap: entered promiscuous mode [ 68.939944][ T5237] veth1_macvtap: entered promiscuous mode [ 68.960017][ T5228] veth0_macvtap: entered promiscuous mode [ 68.975413][ T5228] veth1_macvtap: entered promiscuous mode [ 69.024236][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.037026][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.050819][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.069331][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.081285][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.092817][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.104390][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.118284][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.140430][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.158373][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.170303][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.182969][ T5228] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.193710][ T5228] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.206121][ T5228] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.214886][ T5228] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.241447][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.252448][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.262668][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.275345][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.287461][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.297000][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.310827][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.321108][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.331958][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.342137][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.353861][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.364948][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.386289][ T1070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.387054][ T5232] veth0_vlan: entered promiscuous mode [ 69.394284][ T1070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.415182][ T5226] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.425894][ T5226] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.434625][ T5226] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.445731][ T5229] Bluetooth: hci0: command tx timeout [ 69.451248][ T5226] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.506013][ T5229] Bluetooth: hci1: command tx timeout [ 69.518690][ T5229] Bluetooth: hci2: command tx timeout [ 69.518699][ T5238] Bluetooth: hci4: command tx timeout [ 69.544322][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.556789][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.568927][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.579512][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.589585][ T5238] Bluetooth: hci3: command tx timeout [ 69.597452][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.608252][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.619747][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.631616][ T5237] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.641115][ T5237] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.649960][ T5237] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.658734][ T5237] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.680306][ T5232] veth1_vlan: entered promiscuous mode [ 69.699492][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.714863][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.781930][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.792344][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.843985][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.864658][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.911076][ T5232] veth0_macvtap: entered promiscuous mode [ 69.926601][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.934434][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.948814][ T5232] veth1_macvtap: entered promiscuous mode [ 70.028086][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.053309][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.088444][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.099359][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.109614][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.121976][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.132389][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.143806][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.153937][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.164707][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.178315][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.194089][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.221987][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.240230][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.259954][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.305593][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.338575][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.365657][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.385931][ T5322] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 70.399180][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.410921][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.421749][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.434721][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.479816][ T5232] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.497494][ T5232] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.527752][ T5232] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.531163][ T5326] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.7'. [ 70.538747][ T5232] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.563483][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.606952][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.812156][ T5333] Zero length message leads to an empty skb [ 70.924290][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.964859][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.177481][ T1070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.185344][ T1070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.364064][ T5360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.369980][ T5349] syzkaller0: entered promiscuous mode [ 71.380767][ T5349] syzkaller0: entered allmulticast mode [ 71.407542][ T5348] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 71.440876][ T5356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.517755][ T5238] Bluetooth: hci0: command tx timeout [ 71.566007][ T5364] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.587152][ T5238] Bluetooth: hci4: command tx timeout [ 71.587286][ T5229] Bluetooth: hci2: command tx timeout [ 71.593110][ T5238] Bluetooth: hci1: command tx timeout [ 71.666816][ T5238] Bluetooth: hci3: command tx timeout [ 71.681635][ T5366] netlink: 'syz.0.15': attribute type 3 has an invalid length. [ 71.689855][ T5366] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.15'. [ 71.838049][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.844868][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.009374][ T5370] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16'. [ 73.019223][ T5370] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16'. [ 73.030619][ T5370] netlink: 32 bytes leftover after parsing attributes in process `syz.0.16'. [ 73.164485][ T5379] netem: incorrect ge model size [ 73.184677][ T5379] netem: change failed [ 73.203395][ T5379] netem: incorrect ge model size [ 73.211327][ T5379] netem: change failed [ 73.535134][ T5393] netlink: 'syz.1.23': attribute type 11 has an invalid length. [ 73.545202][ T5397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25'. [ 73.649210][ T5396] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.043950][ T5417] ax25_connect(): syz.3.31 uses autobind, please contact jreuter@yaina.de [ 74.087967][ T5419] netlink: 12 bytes leftover after parsing attributes in process `syz.2.29'. [ 74.394308][ T5429] netlink: 80 bytes leftover after parsing attributes in process `syz.1.33'. [ 74.679368][ T5442] netlink: 156 bytes leftover after parsing attributes in process `syz.1.38'. [ 74.756510][ T5447] netlink: 'syz.0.40': attribute type 5 has an invalid length. [ 74.818548][ T5453] netlink: 'syz.2.42': attribute type 10 has an invalid length. [ 74.856005][ T5453] netlink: 212412 bytes leftover after parsing attributes in process `syz.2.42'. [ 74.869641][ T5453] openvswitch: netlink: Flow key attr not present in new flow. [ 75.131107][ T5470] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 75.172170][ T5468] tipc: Enabling of bearer rejected, failed to enable media [ 75.241278][ T5477] af_packet: tpacket_rcv: packet too big, clamped from 20 to 4294967272. macoff=96 [ 75.552803][ T5493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.53'. [ 75.563152][ T5491] trusted_key: syz.4.52 sent an empty control message without MSG_MORE. [ 75.898849][ T5510] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 75.951025][ T5515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.59'. [ 75.954999][ T5503] IPVS: length: 215 != 24 [ 76.530788][ T5545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.69'. [ 76.549815][ T5545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.575836][ T5545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.585381][ T5545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.605346][ T5545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.004634][ T5568] wg2: entered promiscuous mode [ 77.024996][ T5568] wg2: entered allmulticast mode [ 77.348607][ T5585] IPVS: set_ctl: invalid protocol: 2 224.0.0.1:20001 [ 77.406222][ T5585] IPVS: set_ctl: invalid protocol: 2 224.0.0.1:20001 [ 77.575798][ T5585] IPVS: set_ctl: invalid protocol: 256 0.0.0.0:16399 [ 77.582569][ T5585] IPVS: set_ctl: invalid protocol: 256 0.0.0.0:16399 [ 77.647588][ T5585] IPVS: set_ctl: invalid protocol: 256 0.0.0.0:16399 [ 77.654351][ T5585] IPVS: set_ctl: invalid protocol: 256 0.0.0.0:16399 [ 77.772772][ T5585] IPVS: set_ctl: invalid protocol: 256 0.0.0.0:16399 [ 77.915868][ T5585] IPVS: set_ctl: invalid protocol: 256 0.0.0.0:16399 [ 78.541938][ T5585] IPVS: set_ctl: invalid protocol: 256 0.0.0.0:16399 [ 78.572024][ T5585] IPVS: set_ctl: invalid protocol: 256 0.0.0.0:16399 [ 78.589500][ T5585] IPVS: set_ctl: invalid protocol: 256 0.0.0.0:16399 [ 78.645850][ T5585] IPVS: set_ctl: invalid protocol: 256 0.0.0.0:16399 [ 78.652609][ T5585] IPVS: set_ctl: invalid protocol: 256 0.0.0.0:16399 [ 78.762620][ T5585] IPVS: set_ctl: invalid protocol: 256 0.0.0.0:16399 [ 78.781299][ T5585] IPVS: set_ctl: invalid protocol: 256 0.0.0.0:16399 [ 78.836128][ T5617] netlink: 24 bytes leftover after parsing attributes in process `syz.2.85'. [ 78.935138][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.943652][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.119211][ T5630] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 79.574654][ T5652] netlink: 'syz.0.98': attribute type 4 has an invalid length. [ 79.628621][ T5659] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 79.653950][ T5659] netlink: 171112 bytes leftover after parsing attributes in process `syz.1.100'. [ 79.700136][ T5659] openvswitch: netlink: ufid size 2296 bytes exceeds the range (1, 16) [ 79.772847][ T5619] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 79.816888][ T5673] warning: `syz.4.101' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 79.906344][ T5666] ebtables: ebtables: counters copy to user failed while replacing table [ 80.120526][ T5683] netlink: 32 bytes leftover after parsing attributes in process `syz.3.104'. [ 80.173846][ T5683] netlink: 'syz.3.104': attribute type 1 has an invalid length. [ 80.380910][ T5700] openvswitch: netlink: IP tunnel attribute has 2 unknown bytes. [ 80.599367][ T5712] IPVS: set_ctl: invalid protocol: 115 0.0.0.0:20000 [ 80.644781][ T5716] tipc: Enabling of bearer rejected, failed to enable media [ 81.416551][ T5768] xt_hashlimit: invalid interval [ 81.679258][ T5783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.122'. [ 81.742318][ T5783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.122'. [ 81.785608][ T1170] IPVS: starting estimator thread 0... [ 81.792634][ T5785] tipc: Started in network mode [ 81.813588][ T5785] tipc: Node identity ac1414aa, cluster identity 4711 [ 81.857656][ T5785] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 81.864841][ T5785] tipc: Enabled bearer , priority 10 [ 81.886052][ T5786] IPVS: using max 23 ests per chain, 55200 per kthread [ 81.997721][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 82.034195][ T5805] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 82.041756][ T5805] tipc: Enabled bearer , priority 10 [ 82.077339][ T25] cfg80211: failed to load regulatory.db [ 82.094885][ T5801] netlink: 16 bytes leftover after parsing attributes in process `syz.4.127'. [ 82.127679][ T5802] netlink: 16 bytes leftover after parsing attributes in process `syz.4.127'. [ 82.146016][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 82.154722][ T5793] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 82.165989][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 82.282141][ T5813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.292278][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 82.305154][ T5815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.132'. [ 82.315924][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 82.426107][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 82.470374][ T5822] batadv1: entered allmulticast mode [ 82.494012][ T5823] netlink: 'syz.4.134': attribute type 10 has an invalid length. [ 82.505621][ T5823] geneve0: entered promiscuous mode [ 82.550344][ T5823] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 82.563244][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807e0f3400: rx timeout, send abort [ 82.733015][ T5827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.135'. [ 82.763237][ T5827] netlink: 44 bytes leftover after parsing attributes in process `syz.3.135'. [ 82.780825][ T5827] netlink: 43 bytes leftover after parsing attributes in process `syz.3.135'. [ 82.807524][ T5827] netlink: 'syz.3.135': attribute type 6 has an invalid length. [ 82.819395][ T5827] netlink: 'syz.3.135': attribute type 5 has an invalid length. [ 82.829735][ T5827] netlink: 43 bytes leftover after parsing attributes in process `syz.3.135'. [ 83.037137][ T5283] tipc: Node number set to 2886997162 [ 83.072629][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807e0f3400: abort rx timeout. Force session deactivation [ 83.108510][ T5838] Bluetooth: MGMT ver 1.23 [ 83.363597][ T5848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.142'. [ 83.927817][ T5873] xt_CT: You must specify a L4 protocol and not use inversions on it [ 84.024742][ T5886] netlink: 'syz.3.153': attribute type 1 has an invalid length. [ 84.059030][ T5888] netlink: 'syz.4.154': attribute type 10 has an invalid length. [ 84.215539][ T5899] netlink: 'syz.2.155': attribute type 4 has an invalid length. [ 84.235778][ T5903] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 84.382075][ T5911] xt_CT: You must specify a L4 protocol and not use inversions on it [ 84.764813][ T5921] netdevsim netdevsim4 netdevsim1: Unsupported IPsec algorithm [ 85.025846][ C0] net_ratelimit: 16 callbacks suppressed [ 85.025865][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 85.038696][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 85.547953][ T5972] netlink: 'syz.2.178': attribute type 32 has an invalid length. [ 85.653895][ T5979] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 85.671552][ T5979] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 85.736853][ T5983] netlink: 'syz.4.182': attribute type 21 has an invalid length. [ 85.832144][ T5985] netlink: 'syz.2.183': attribute type 4 has an invalid length. [ 85.890585][ T5985] netlink: 'syz.2.183': attribute type 4 has an invalid length. [ 85.920392][ T5985] tc_dump_action: action bad kind [ 86.065810][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 86.072890][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 86.089837][ T5999] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 86.206718][ T6002] cannot load conntrack support for proto=3 [ 86.833159][ T6040] __nla_validate_parse: 21 callbacks suppressed [ 86.833177][ T6040] netlink: 592 bytes leftover after parsing attributes in process `syz.3.198'. [ 87.024565][ T6050] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 87.106089][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 87.113208][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 87.584001][ T6065] netlink: 'syz.2.204': attribute type 29 has an invalid length. [ 87.719379][ T6071] Bluetooth: MGMT ver 1.23 [ 88.124010][ T6085] ipt_rpfilter: unknown options [ 88.155827][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 88.162988][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 88.594995][ T6094] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 88.774732][ T6107] netlink: 'syz.4.214': attribute type 13 has an invalid length. [ 88.783949][ T6107] veth0_macvtap: left promiscuous mode [ 88.814693][ T6074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.205'. [ 88.824005][ T6107] macvtap0: entered allmulticast mode [ 88.860333][ T6107] macvtap0: refused to change device tx_queue_len [ 88.909436][ T6074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.205'. [ 89.001092][ T6074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.205'. [ 89.041566][ T6074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.205'. [ 89.091839][ T6074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.205'. [ 89.195585][ T6074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.205'. [ 89.195833][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 89.304689][ T6074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.205'. [ 89.342267][ T6074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.205'. [ 89.384157][ T6074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.205'. [ 89.639551][ T6135] Bluetooth: hci3: invalid length 0, exp 2 for type 6 [ 89.799722][ T6143] tipc: Bearer : already 2 bearers with priority 10 [ 89.809873][ T6143] tipc: Bearer : trying with adjusted priority [ 89.823952][ T6143] tipc: Enabling of bearer rejected, failed to enable media [ 89.841124][ T6147] netlink: 'syz.2.225': attribute type 12 has an invalid length. [ 90.226004][ C0] net_ratelimit: 1 callbacks suppressed [ 90.226031][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 90.238829][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 90.259330][ T6156] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 90.535796][ T6167] macvtap0: entered promiscuous mode [ 90.553539][ T6167] macvtap0: left promiscuous mode [ 90.881440][ T6197] dccp_invalid_packet: P.Data Offset(100) too large [ 91.265861][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 91.272948][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 91.797535][ T6247] batadv0: entered promiscuous mode [ 91.844313][ T6252] __nla_validate_parse: 31 callbacks suppressed [ 91.844330][ T6252] netlink: 32 bytes leftover after parsing attributes in process `syz.2.254'. [ 91.889568][ T6247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.066525][ T6261] netlink: 20 bytes leftover after parsing attributes in process `syz.1.256'. [ 92.168400][ T6269] FAULT_INJECTION: forcing a failure. [ 92.168400][ T6269] name failslab, interval 1, probability 0, space 0, times 1 [ 92.206782][ T6269] CPU: 1 UID: 0 PID: 6269 Comm: syz.2.260 Not tainted 6.11.0-rc6-syzkaller-00178-gd759ee240d3c #0 [ 92.217426][ T6269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 92.227508][ T6269] Call Trace: [ 92.230807][ T6269] [ 92.233752][ T6269] dump_stack_lvl+0x241/0x360 [ 92.238470][ T6269] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.243706][ T6269] ? __pfx__printk+0x10/0x10 [ 92.248752][ T6269] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 92.254234][ T6269] ? __pfx___might_resched+0x10/0x10 [ 92.259547][ T6269] should_fail_ex+0x3b0/0x4e0 [ 92.264254][ T6269] should_failslab+0xac/0x100 [ 92.268963][ T6269] ? apparmor_sk_alloc_security+0x77/0x100 [ 92.274804][ T6269] __kmalloc_cache_noprof+0x6c/0x2c0 [ 92.280132][ T6269] apparmor_sk_alloc_security+0x77/0x100 [ 92.285796][ T6269] security_sk_alloc+0x75/0xb0 [ 92.290598][ T6269] sk_prot_alloc+0xfa/0x210 [ 92.295140][ T6269] sk_alloc+0x38/0x370 [ 92.299241][ T6269] unix_create1+0xb4/0x7a0 [ 92.303698][ T6269] unix_stream_connect+0x321/0x10e0 [ 92.308955][ T6269] ? __might_fault+0xaa/0x120 [ 92.313655][ T6269] ? __pfx_unix_stream_connect+0x10/0x10 [ 92.317008][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 92.319296][ T6269] ? bpf_lsm_socket_connect+0x9/0x10 [ 92.326345][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 92.331471][ T6269] ? security_socket_connect+0x87/0xb0 [ 92.343779][ T6269] __sys_connect+0x2df/0x310 [ 92.348375][ T6269] ? __pfx___sys_connect+0x10/0x10 [ 92.353512][ T6269] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 92.359841][ T6269] ? do_syscall_64+0x100/0x230 [ 92.364599][ T6269] __x64_sys_connect+0x7a/0x90 [ 92.369357][ T6269] do_syscall_64+0xf3/0x230 [ 92.373850][ T6269] ? clear_bhb_loop+0x35/0x90 [ 92.378536][ T6269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.384468][ T6269] RIP: 0033:0x7f379c57cef9 [ 92.388886][ T6269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.408502][ T6269] RSP: 002b:00007f379d41a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 92.416928][ T6269] RAX: ffffffffffffffda RBX: 00007f379c735f80 RCX: 00007f379c57cef9 [ 92.424889][ T6269] RDX: 000000000000006e RSI: 0000000020000280 RDI: 0000000000000005 [ 92.432948][ T6269] RBP: 00007f379d41a090 R08: 0000000000000000 R09: 0000000000000000 [ 92.440917][ T6269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.448885][ T6269] R13: 0000000000000000 R14: 00007f379c735f80 R15: 00007ffecc3eb938 [ 92.456864][ T6269] [ 92.517911][ T6275] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 92.526923][ T6277] netlink: 130084 bytes leftover after parsing attributes in process `syz.4.259'. [ 92.699898][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.262'. [ 92.826654][ T6287] netlink: 88 bytes leftover after parsing attributes in process `syz.2.262'. [ 92.846346][ T6287] netem: invalid attributes len -24 [ 92.866000][ T6287] netem: change failed [ 93.032636][ T6297] xt_hashlimit: max too large, truncated to 1048576 [ 93.321671][ T6309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.266'. [ 93.344704][ T6308] sock: sock_set_timeout: `syz.0.267' (pid 6308) tries to set negative timeout [ 93.345373][ T6307] netlink: 16 bytes leftover after parsing attributes in process `syz.1.266'. [ 93.354215][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 93.401867][ T6309] tipc: Started in network mode [ 93.415278][ T6309] tipc: Node identity 5f000000000000000000000000000001, cluster identity 4711 [ 93.441653][ T6309] tipc: Enabling of bearer rejected, failed to enable media [ 93.540647][ T6312] netlink: 24 bytes leftover after parsing attributes in process `syz.3.268'. [ 93.843626][ T6325] netlink: 152 bytes leftover after parsing attributes in process `syz.3.272'. [ 93.895972][ T6335] netlink: 'syz.2.274': attribute type 1 has an invalid length. [ 93.932811][ T6338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.273'. [ 93.952223][ T6335] netlink: 'syz.2.274': attribute type 1 has an invalid length. [ 94.029019][ T6335] netlink: 'syz.2.274': attribute type 2 has an invalid length. [ 94.366976][ T6348] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 94.881206][ T6367] syz.1.285 (6367) used greatest stack depth: 18360 bytes left [ 95.090089][ T6382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.121296][ T6382] team0: Port device bond0 added [ 95.346868][ T6398] netlink: 'syz.0.291': attribute type 2 has an invalid length. [ 95.405253][ T6397] pimreg: entered allmulticast mode [ 95.421468][ T6397] pimreg: left allmulticast mode [ 95.435816][ C0] net_ratelimit: 5 callbacks suppressed [ 95.435835][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 95.448651][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 95.547384][ T6405] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.554087][ T6406] x_tables: duplicate underflow at hook 1 [ 95.556465][ T6405] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.556547][ T6405] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.581902][ T6405] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.597463][ T6405] vxlan0: entered promiscuous mode [ 95.602780][ T6405] vxlan0: entered allmulticast mode [ 95.616812][ T6405] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.625812][ T6405] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.634699][ T6405] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.643689][ T6405] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.082317][ T6421] dvmrp0: entered allmulticast mode [ 96.142031][ T6425] nbd: must specify an index to disconnect [ 96.167470][ T6426] nbd: must specify an index to disconnect [ 96.250355][ T6431] netlink: 'syz.0.303': attribute type 1 has an invalid length. [ 96.465919][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 96.473246][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 96.859692][ T6462] unknown channel width for channel at 909000KHz? [ 96.873451][ T6462] unknown channel width for channel at 909000KHz? [ 96.889114][ T6462] unknown channel width for channel at 909000KHz? [ 97.505822][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 97.512939][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 97.558338][ T6482] FAULT_INJECTION: forcing a failure. [ 97.558338][ T6482] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 97.606103][ T6482] CPU: 0 UID: 0 PID: 6482 Comm: syz.0.316 Not tainted 6.11.0-rc6-syzkaller-00178-gd759ee240d3c #0 [ 97.616742][ T6482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 97.626812][ T6482] Call Trace: [ 97.630111][ T6482] [ 97.633056][ T6482] dump_stack_lvl+0x241/0x360 [ 97.637761][ T6482] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.643025][ T6482] ? __pfx__printk+0x10/0x10 [ 97.647642][ T6482] ? snprintf+0xda/0x120 [ 97.651578][ T6486] __nla_validate_parse: 22 callbacks suppressed [ 97.651594][ T6486] netlink: 20 bytes leftover after parsing attributes in process `syz.2.317'. [ 97.651894][ T6482] should_fail_ex+0x3b0/0x4e0 [ 97.671640][ T6482] _copy_to_user+0x2f/0xb0 [ 97.676082][ T6482] simple_read_from_buffer+0xca/0x150 [ 97.681478][ T6482] proc_fail_nth_read+0x1ec/0x260 [ 97.686529][ T6482] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 97.692096][ T6482] ? rw_verify_area+0x520/0x6b0 [ 97.696964][ T6482] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 97.702534][ T6482] vfs_read+0x204/0xbc0 [ 97.706710][ T6482] ? __pfx_lock_release+0x10/0x10 [ 97.711755][ T6482] ? __pfx_vfs_read+0x10/0x10 [ 97.716453][ T6482] ? __fget_files+0x29/0x470 [ 97.721056][ T6482] ? __fget_files+0x3f6/0x470 [ 97.725740][ T6482] ksys_read+0x1a0/0x2c0 [ 97.729984][ T6482] ? __pfx_ksys_read+0x10/0x10 [ 97.734745][ T6482] ? do_syscall_64+0x100/0x230 [ 97.739506][ T6482] ? do_syscall_64+0xb6/0x230 [ 97.744178][ T6482] do_syscall_64+0xf3/0x230 [ 97.748695][ T6482] ? clear_bhb_loop+0x35/0x90 [ 97.753370][ T6482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.759258][ T6482] RIP: 0033:0x7f40bab7b93c [ 97.763667][ T6482] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 97.783347][ T6482] RSP: 002b:00007f40ba5ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 97.791752][ T6482] RAX: ffffffffffffffda RBX: 00007f40bad35f80 RCX: 00007f40bab7b93c [ 97.799713][ T6482] RDX: 000000000000000f RSI: 00007f40ba5ff0a0 RDI: 0000000000000006 [ 97.807671][ T6482] RBP: 00007f40ba5ff090 R08: 0000000000000000 R09: 0000000000000000 [ 97.815626][ T6482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.823588][ T6482] R13: 0000000000000000 R14: 00007f40bad35f80 R15: 00007ffd58f0dea8 [ 97.831568][ T6482] [ 98.145651][ T6501] bridge_slave_0: left allmulticast mode [ 98.170713][ T6501] bridge_slave_0: left promiscuous mode [ 98.191575][ T6501] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.213488][ T6501] bridge_slave_1: left allmulticast mode [ 98.221397][ T6501] bridge_slave_1: left promiscuous mode [ 98.239250][ T6501] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.249757][ T6505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.321'. [ 98.263170][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.321'. [ 98.283648][ T6501] bond0: (slave bond_slave_0): Releasing backup interface [ 98.304788][ T6501] bond0: (slave bond_slave_1): Releasing backup interface [ 98.403163][ T6501] team0: Port device team_slave_0 removed [ 98.440280][ T6501] team0: Port device team_slave_1 removed [ 98.464051][ T6501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.471906][ T6501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.488103][ T6501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.496561][ T6501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.527596][ T6503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.541123][ T6503] team0: Port device bond0 added [ 98.550607][ T6513] netlink: 'syz.4.324': attribute type 11 has an invalid length. [ 98.555801][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 98.565392][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 98.799306][ T6533] netlink: 'syz.0.330': attribute type 21 has an invalid length. [ 98.824987][ T6533] netlink: 132 bytes leftover after parsing attributes in process `syz.0.330'. [ 98.976265][ T6549] netlink: 76 bytes leftover after parsing attributes in process `syz.4.333'. [ 99.524340][ T6575] netlink: 'syz.0.341': attribute type 10 has an invalid length. [ 99.575945][ T6575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.585811][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 99.592865][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 99.639797][ T6575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.666831][ T6588] netlink: 24 bytes leftover after parsing attributes in process `syz.3.346'. [ 99.687114][ T6575] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 99.724372][ T6580] ieee802154 phy0 wpan0: encryption failed: -22 [ 99.827837][ T6594] ipvlan2: entered promiscuous mode [ 99.974019][ T6605] netlink: 'syz.3.351': attribute type 12 has an invalid length. [ 100.313792][ T6629] IPv6: NLM_F_CREATE should be specified when creating new route [ 100.431412][ T6633] netlink: 'syz.1.360': attribute type 1 has an invalid length. [ 100.460145][ T6633] netlink: 244 bytes leftover after parsing attributes in process `syz.1.360'. [ 100.627746][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 100.635015][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 100.819575][ T6654] syzkaller0: entered promiscuous mode [ 100.825385][ T6654] syzkaller0: entered allmulticast mode [ 100.861696][ T6653] syzkaller0: create flow: hash 1970608165 index 1 [ 100.994665][ T6652] syzkaller0: delete flow: hash 1970608165 index 1 [ 101.668795][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 101.675972][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 102.631365][ T6681] netlink: 'syz.2.373': attribute type 10 has an invalid length. [ 102.639596][ T6681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.654871][ T6681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.670154][ T6681] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 102.705915][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 102.713163][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 103.025061][ T6702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.380'. [ 103.280258][ T6715] netlink: 'syz.4.385': attribute type 1 has an invalid length. [ 103.286999][ T6717] netlink: zone id is out of range [ 103.309416][ T6716] netlink: zone id is out of range [ 103.361962][ T6721] netlink: 24 bytes leftover after parsing attributes in process `syz.1.388'. [ 103.745911][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 103.753167][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 103.776926][ T6741] netlink: 'syz.0.393': attribute type 11 has an invalid length. [ 103.785052][ T6743] netlink: 228 bytes leftover after parsing attributes in process `syz.1.395'. [ 103.794334][ T6741] netlink: 20 bytes leftover after parsing attributes in process `syz.0.393'. [ 103.803461][ T6743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'. [ 104.078443][ T6757] netlink: 'syz.3.396': attribute type 1 has an invalid length. [ 104.104128][ T6757] netlink: 'syz.3.396': attribute type 2 has an invalid length. [ 104.132936][ T6757] netlink: 'syz.3.396': attribute type 1 has an invalid length. [ 104.256606][ T6767] sctp: [Deprecated]: syz.1.400 (pid 6767) Use of struct sctp_assoc_value in delayed_ack socket option. [ 104.256606][ T6767] Use struct sctp_sack_info instead [ 104.297816][ T6769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.403'. [ 104.352831][ T6769] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 104.360535][ T6769] IPv6: NLM_F_CREATE should be set when creating new route [ 104.367880][ T6769] IPv6: NLM_F_CREATE should be set when creating new route [ 104.597348][ T6786] IPVS: set_ctl: invalid protocol: 47 172.20.20.38:20003 [ 104.658800][ T6790] netlink: 'syz.3.407': attribute type 3 has an invalid length. [ 104.673881][ T6790] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.407'. [ 104.774209][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.407'. [ 104.802129][ T6797] netlink: 188 bytes leftover after parsing attributes in process `syz.4.412'. [ 104.826236][ T6797] netlink: 56 bytes leftover after parsing attributes in process `syz.4.412'. [ 104.901271][ T6800] cannot load conntrack support for proto=3 [ 105.148035][ T6812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.475190][ T6825] netlink: 'syz.0.420': attribute type 1 has an invalid length. [ 105.826154][ C0] net_ratelimit: 4 callbacks suppressed [ 105.826177][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 105.839143][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 105.936800][ T6847] TCP: out of memory -- consider tuning tcp_mem [ 105.968431][ T6857] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 105.994153][ T6857] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.002994][ T6857] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.409053][ T6870] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.435135][ T6862] delete_channel: no stack [ 106.865945][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 106.873189][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 107.762561][ T6932] team1: Mode changed to "roundrobin" [ 107.905834][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 107.912947][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 108.143899][ T6963] netlink: 'syz.4.459': attribute type 4 has an invalid length. [ 108.298444][ T6968] sock: sock_timestamping_bind_phc: sock not bind to device [ 108.734453][ T6989] __nla_validate_parse: 13 callbacks suppressed [ 108.734471][ T6989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.470'. [ 108.755417][ T6989] netlink: 16 bytes leftover after parsing attributes in process `syz.1.470'. [ 108.945886][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 108.952980][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 108.995491][ T7003] netlink: 'syz.1.475': attribute type 3 has an invalid length. [ 109.005781][ T7001] netlink: 16 bytes leftover after parsing attributes in process `syz.4.474'. [ 109.009137][ T7003] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.475'. [ 109.031078][ T7001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.474'. [ 109.043978][ T7001] netlink: 16 bytes leftover after parsing attributes in process `syz.4.474'. [ 109.099977][ T7006] netlink: 'syz.0.476': attribute type 23 has an invalid length. [ 109.116132][ T7006] netlink: 'syz.0.476': attribute type 8 has an invalid length. [ 109.183901][ T7008] bridge_slave_0: entered promiscuous mode [ 109.332205][ T7017] netlink: 20 bytes leftover after parsing attributes in process `syz.0.479'. [ 109.376238][ T7018] netlink: 20 bytes leftover after parsing attributes in process `syz.0.479'. [ 109.626676][ T7038] netlink: 24 bytes leftover after parsing attributes in process `syz.2.486'. [ 109.766249][ T7051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.490'. [ 111.031026][ C0] net_ratelimit: 2 callbacks suppressed [ 111.031047][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 111.043702][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 111.797774][ T7109] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 111.849020][ T7109] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 111.914447][ T7109] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 112.064164][ T7089] syz.0.500 (7089) used greatest stack depth: 18256 bytes left [ 112.085078][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 112.092192][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 112.968137][ T7148] €Â: renamed from bridge_slave_0 [ 113.030252][ T7154] xt_l2tp: invalid flags combination: c [ 113.105815][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 113.112946][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 113.113069][ T7156] netlink: 'syz.0.522': attribute type 10 has an invalid length. [ 113.151688][ T7156] syz_tun: entered promiscuous mode [ 113.191039][ T7156] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 113.234284][ T7160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.299326][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880333c8c00: rx timeout, send abort [ 113.307930][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880333ca000: rx timeout, send abort [ 113.316426][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880333c8c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 113.332092][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880333ca000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 113.484365][ T7168] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 113.505922][ T7168] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 113.693359][ T7185] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 3, id = 0 [ 113.810178][ T7188] __nla_validate_parse: 6 callbacks suppressed [ 113.810196][ T7188] netlink: 36 bytes leftover after parsing attributes in process `syz.1.528'. [ 113.844450][ T7188] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 113.913203][ T7192] netlink: 76 bytes leftover after parsing attributes in process `syz.0.530'. [ 113.943214][ T7192] netem: incorrect gi model size [ 113.951784][ T7192] netem: change failed [ 114.155963][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 114.163201][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 114.194091][ T7206] netlink: 12 bytes leftover after parsing attributes in process `syz.4.534'. [ 114.314533][ T7210] pim6reg: entered allmulticast mode [ 114.322637][ T7210] pim6reg: left allmulticast mode [ 114.719078][ T7228] netlink: 24 bytes leftover after parsing attributes in process `syz.3.540'. [ 114.759701][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.542'. [ 114.848374][ T7242] netlink: 32 bytes leftover after parsing attributes in process `syz.3.545'. [ 115.054356][ T7245] syzkaller0: entered promiscuous mode [ 115.061470][ T7245] syzkaller0: entered allmulticast mode [ 115.098261][ T7245] syzkaller0: create flow: hash 1996348387 index 1 [ 115.185924][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 115.193181][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 115.228735][ T7244] syzkaller0: delete flow: hash 1996348387 index 1 [ 116.235887][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 116.242939][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 117.201916][ T7299] sctp: [Deprecated]: syz.1.557 (pid 7299) Use of int in max_burst socket option. [ 117.201916][ T7299] Use struct sctp_assoc_value instead [ 117.265816][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 117.272907][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 117.281699][ T7305] delete_channel: no stack [ 117.308551][ T7299] netlink: 28 bytes leftover after parsing attributes in process `syz.1.557'. [ 117.375418][ T7310] netlink: 24 bytes leftover after parsing attributes in process `syz.3.559'. [ 117.838642][ T7321] netlink: 224 bytes leftover after parsing attributes in process `syz.3.561'. [ 118.046133][ T7337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.566'. [ 118.306064][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 118.313257][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 118.624951][ T7364] netlink: 'syz.1.573': attribute type 14 has an invalid length. [ 118.787652][ T5279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.026355][ T5310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.058473][ T7387] netlink: 'syz.4.578': attribute type 8 has an invalid length. [ 119.110194][ T7386] netlink: 'syz.4.578': attribute type 8 has an invalid length. [ 119.345843][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 119.352969][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 119.424716][ T7415] ax25_connect(): syz.1.585 uses autobind, please contact jreuter@yaina.de [ 119.988078][ T7452] __nla_validate_parse: 5 callbacks suppressed [ 119.988097][ T7452] netlink: 40 bytes leftover after parsing attributes in process `syz.0.596'. [ 120.174824][ T5283] IPVS: starting estimator thread 0... [ 120.287877][ T7465] IPVS: using max 17 ests per chain, 40800 per kthread [ 120.985549][ T7492] netlink: 24 bytes leftover after parsing attributes in process `syz.4.606'. [ 121.054183][ T7494] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 121.066847][ T7500] xt_CT: You must specify a L4 protocol and not use inversions on it [ 121.117788][ T7500] netlink: 'syz.1.608': attribute type 1 has an invalid length. [ 121.320237][ T7511] netlink: 'syz.1.612': attribute type 34 has an invalid length. [ 121.367967][ T7511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.612'. [ 121.424441][ T7512] ipt_REJECT: ECHOREPLY no longer supported. [ 121.431032][ C0] net_ratelimit: 10 callbacks suppressed [ 121.431052][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 121.431285][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 121.460233][ T7519] ipt_REJECT: ECHOREPLY no longer supported. [ 121.464142][ T7522] netlink: 32 bytes leftover after parsing attributes in process `syz.3.616'. [ 121.717681][ T7533] netlink: 256 bytes leftover after parsing attributes in process `syz.1.619'. [ 121.779805][ T7536] netlink: 9396 bytes leftover after parsing attributes in process `syz.1.620'. [ 121.896386][ T7542] netlink: 108 bytes leftover after parsing attributes in process `syz.3.621'. [ 121.916079][ T5279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.958516][ T7544] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 122.465836][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 122.472915][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 122.948805][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.505830][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 123.512982][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 124.006999][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.076062][ T5343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.295143][ T7561] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 124.324991][ T7561] netlink: 'syz.0.628': attribute type 1 has an invalid length. [ 124.591717][ T7563] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 124.602241][ T7563] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 124.767550][ T4624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 124.780285][ T4624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 124.793165][ T4624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 124.811099][ T4624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 124.824832][ T4624] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 124.832747][ T4624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 125.063578][ T7593] netlink: 16 bytes leftover after parsing attributes in process `syz.3.636'. [ 125.077465][ T7593] netlink: 52 bytes leftover after parsing attributes in process `syz.3.636'. [ 125.124179][ T7593] vlan2: entered allmulticast mode [ 125.140082][ T7593] bridge0: port 3(vlan2) entered blocking state [ 125.153693][ T7593] bridge0: port 3(vlan2) entered disabled state [ 125.349556][ T7607] netlink: 20 bytes leftover after parsing attributes in process `syz.3.639'. [ 125.432189][ T7610] netlink: 216 bytes leftover after parsing attributes in process `syz.4.640'. [ 125.548964][ T7577] chnl_net:caif_netlink_parms(): no params data found [ 125.614080][ T7618] veth1_macvtap: left promiscuous mode [ 125.619905][ T7618] macsec0: entered promiscuous mode [ 125.625232][ T7618] macsec0: entered allmulticast mode [ 125.660105][ T7619] veth1_macvtap: entered promiscuous mode [ 125.667284][ T7619] veth1_macvtap: entered allmulticast mode [ 125.673910][ T7619] macsec0: left promiscuous mode [ 125.679407][ T7619] macsec0: left allmulticast mode [ 125.684497][ T7619] veth1_macvtap: left allmulticast mode [ 125.779182][ T7624] xt_NFQUEUE: number of total queues is 0 [ 125.848462][ T7577] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.857063][ T7577] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.864397][ T7577] bridge_slave_0: entered allmulticast mode [ 125.873668][ T7577] bridge_slave_0: entered promiscuous mode [ 125.883745][ T7577] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.891565][ T7577] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.899396][ T7577] bridge_slave_1: entered allmulticast mode [ 125.908545][ T7577] bridge_slave_1: entered promiscuous mode [ 125.974389][ T7577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.005198][ T7577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.129579][ T7577] team0: Port device team_slave_0 added [ 126.159930][ T7577] team0: Port device team_slave_1 added [ 126.219747][ T7635] syz.0.647 uses old SIOCAX25GETINFO [ 126.308990][ T7577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.333104][ T7577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.403409][ T7650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.651'. [ 126.413589][ T7577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.430616][ T7650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.651'. [ 126.466849][ T5279] net_ratelimit: 130 callbacks suppressed [ 126.466868][ T5279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.559162][ T7652] team0: Port device bond0 removed [ 126.625800][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 126.632883][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 126.656979][ T7662] netlink: 24 bytes leftover after parsing attributes in process `syz.4.655'. [ 126.666627][ T7577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.673615][ T7577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.730971][ T7577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.758340][ T7654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.652'. [ 126.787832][ T7662] netlink: 20 bytes leftover after parsing attributes in process `syz.4.655'. [ 126.877322][ T4624] Bluetooth: hci5: command tx timeout [ 126.896428][ T7663] hsr_slave_0: left promiscuous mode [ 126.971640][ T7663] hsr_slave_1: left promiscuous mode [ 127.114128][ T5343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.209786][ T7680] ip6t_srh: unknown srh invflags A757 [ 127.233224][ T7678] ipip1: entered promiscuous mode [ 127.272843][ T7577] hsr_slave_0: entered promiscuous mode [ 127.293686][ T7577] hsr_slave_1: entered promiscuous mode [ 127.347399][ T7577] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.367543][ T7577] Cannot create hsr debugfs directory [ 127.375285][ T7692] netlink: 60 bytes leftover after parsing attributes in process `syz.0.661'. [ 127.426901][ T7694] netlink: 'syz.3.665': attribute type 1 has an invalid length. [ 127.438799][ T7694] netlink: 'syz.3.665': attribute type 3 has an invalid length. [ 127.456941][ T7694] NCSI netlink: No device for ifindex 131080 [ 127.509080][ T5279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.664239][ T7699] veth1: mtu less than device minimum [ 127.670053][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 127.670307][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 127.727968][ T7700] veth1: mtu less than device minimum [ 127.862216][ T7577] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.106785][ T7577] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.335455][ T7577] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.528563][ T7577] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.555895][ T5279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.575021][ T7733] netlink: 'syz.1.677': attribute type 13 has an invalid length. [ 128.609756][ T7733] netlink: 'syz.1.677': attribute type 58 has an invalid length. [ 128.770037][ T7746] netlink: 'syz.1.683': attribute type 4 has an invalid length. [ 128.912164][ T7750] IPv6: Can't replace route, no match found [ 128.946390][ T4624] Bluetooth: hci5: command tx timeout [ 129.083587][ T7577] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 129.187527][ T7577] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 129.221376][ T7577] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 129.287000][ T7577] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 129.432963][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.733256][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.865336][ T7783] xt_l2tp: v2 doesn't support IP mode [ 129.887969][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.032616][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 130.051752][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 130.063859][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 130.080117][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 130.104263][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 130.119689][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 130.148015][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.248122][ T7577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.400379][ T7577] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.560396][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.567620][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.689053][ T52] bridge_slave_1: left allmulticast mode [ 130.714000][ T52] bridge_slave_1: left promiscuous mode [ 130.747885][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.781057][ T52] bridge_slave_0: left allmulticast mode [ 130.787196][ T52] bridge_slave_0: left promiscuous mode [ 130.802037][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.026329][ T4624] Bluetooth: hci5: command tx timeout [ 131.308434][ T52] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 131.644535][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.660941][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.670128][ T25] net_ratelimit: 14 callbacks suppressed [ 131.670143][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.687801][ T52] bond0 (unregistering): Released all slaves [ 131.731572][ T7828] __nla_validate_parse: 4 callbacks suppressed [ 131.731592][ T7828] netlink: 16 bytes leftover after parsing attributes in process `syz.0.704'. [ 131.830044][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 131.837242][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 131.871229][ T7831] syzkaller1: entered promiscuous mode [ 131.880260][ T7831] syzkaller1: entered allmulticast mode [ 131.901057][ T5556] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.908244][ T5556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.226118][ T4624] Bluetooth: hci2: command tx timeout [ 132.486087][ T7793] chnl_net:caif_netlink_parms(): no params data found [ 132.528281][ T7866] netlink: 12 bytes leftover after parsing attributes in process `syz.3.710'. [ 132.710747][ T52] veth1_macvtap: left promiscuous mode [ 132.716892][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.731373][ T52] veth1_vlan: left promiscuous mode [ 132.754689][ T52] veth0_vlan: left promiscuous mode [ 132.875927][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 132.883205][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 133.112888][ T4624] Bluetooth: hci5: command tx timeout [ 133.193170][ T5310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.281691][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.288224][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.288583][ T5310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.514137][ T52] team0 (unregistering): Port device team_slave_1 removed [ 133.563346][ T52] team0 (unregistering): Port device team_slave_0 removed [ 133.749756][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.917953][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 134.041828][ T7876] netlink: 52 bytes leftover after parsing attributes in process `syz.3.714'. [ 134.051142][ T7881] netlink: 'syz.0.715': attribute type 10 has an invalid length. [ 134.089928][ T7881] batman_adv: batadv0: Adding interface: team0 [ 134.112413][ T7881] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.121351][ T7898] netlink: 48 bytes leftover after parsing attributes in process `syz.3.717'. [ 134.140964][ T7881] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 134.306725][ T4624] Bluetooth: hci2: command tx timeout [ 134.414848][ T7912] netlink: 16 bytes leftover after parsing attributes in process `syz.1.720'. [ 134.548444][ T7913] netlink: 'syz.0.718': attribute type 1 has an invalid length. [ 134.575526][ T7793] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.585103][ T7793] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.592762][ T7793] bridge_slave_0: entered allmulticast mode [ 134.600091][ T7793] bridge_slave_0: entered promiscuous mode [ 134.628859][ T7793] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.653589][ T7793] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.671663][ T7793] bridge_slave_1: entered allmulticast mode [ 134.697268][ T7793] bridge_slave_1: entered promiscuous mode [ 134.835469][ T7793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.918185][ T7793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.963214][ T7577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.083144][ T7793] team0: Port device team_slave_0 added [ 135.095052][ T7793] team0: Port device team_slave_1 added [ 135.136679][ T7942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.726'. [ 135.289974][ T7951] netlink: 16 bytes leftover after parsing attributes in process `syz.3.728'. [ 135.307876][ T7793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.335837][ T7793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.388196][ T7793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.428581][ T7945] syz.1.726 (7945) used greatest stack depth: 16048 bytes left [ 135.488676][ T7793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.532523][ T7793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.598458][ T7793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.764722][ T7968] netlink: 'syz.3.731': attribute type 23 has an invalid length. [ 135.788550][ T7968] netlink: 'syz.3.731': attribute type 9 has an invalid length. [ 135.849601][ T7970] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 135.944334][ T7976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.731'. [ 136.009398][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.731'. [ 136.140924][ T7793] hsr_slave_0: entered promiscuous mode [ 136.197049][ T7793] hsr_slave_1: entered promiscuous mode [ 136.215003][ T7793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.243999][ T7793] Cannot create hsr debugfs directory [ 136.251170][ T7988] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 136.260495][ T7992] netlink: 'syz.3.739': attribute type 2 has an invalid length. [ 136.276171][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.739'. [ 136.307478][ T7577] veth0_vlan: entered promiscuous mode [ 136.368214][ T7988] ip6tnl0: entered promiscuous mode [ 136.385983][ T4624] Bluetooth: hci2: command tx timeout [ 136.404425][ T7577] veth1_vlan: entered promiscuous mode [ 136.483583][ T7997] netlink: 'syz.0.741': attribute type 4 has an invalid length. [ 136.542410][ T7987] ip6tnl0: left promiscuous mode [ 136.615763][ T8004] netlink: 'syz.0.741': attribute type 4 has an invalid length. [ 136.813540][ T8012] netlink: 'syz.1.742': attribute type 11 has an invalid length. [ 136.871807][ T51] net_ratelimit: 12 callbacks suppressed [ 136.871828][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.939278][ T7577] veth0_macvtap: entered promiscuous mode [ 137.026068][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 137.033295][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 137.090765][ T7577] veth1_macvtap: entered promiscuous mode [ 137.199924][ T7577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.213439][ T7577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.233218][ T7577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.453920][ T7577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.491096][ T7577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.525873][ T7577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.573997][ T7577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.601875][ T7577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.620519][ T7577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.638992][ T7577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.826150][ T7577] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.839205][ T7577] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.848795][ T7577] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.859026][ T7577] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.910688][ T5280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.075863][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 138.082884][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 138.280703][ T7793] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 138.311676][ T7793] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 138.343701][ T7793] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 138.379098][ T7793] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 138.433038][ T1070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.441961][ T1070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.467232][ T4624] Bluetooth: hci2: command tx timeout [ 138.553449][ T8086] nlmon0: Master is either lo or non-ether device [ 138.670463][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.717344][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.729917][ T8095] __nla_validate_parse: 1 callbacks suppressed [ 138.729938][ T8095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.757'. [ 138.767999][ T8095] netlink: 40 bytes leftover after parsing attributes in process `syz.3.757'. [ 138.965735][ T5280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.994793][ T7793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.105914][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 139.113129][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 139.307124][ T8116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.325127][ T7793] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.428343][ T5558] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.435571][ T5558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.486728][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.763'. [ 139.524935][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.532181][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.673093][ T8123] netlink: 188 bytes leftover after parsing attributes in process `syz.2.762'. [ 139.984566][ T8153] netlink: 'syz.1.766': attribute type 4 has an invalid length. [ 139.995386][ T8154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.768'. [ 140.314090][ T7793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.320025][ T8165] xt_CT: No such helper "syz1" [ 140.618170][ T8182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.770'. [ 140.744858][ T8158] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 140.919047][ T7793] veth0_vlan: entered promiscuous mode [ 140.993129][ T7793] veth1_vlan: entered promiscuous mode [ 141.128857][ T7793] veth0_macvtap: entered promiscuous mode [ 141.168062][ T7793] veth1_macvtap: entered promiscuous mode [ 141.216603][ T8213] veth0_vlan: left promiscuous mode [ 141.266555][ T8212] netlink: 26 bytes leftover after parsing attributes in process `syz.3.776'. [ 141.377176][ T7793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.414709][ T7793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.433841][ T7793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.454529][ T7793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.492723][ T7793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.525275][ T8230] netlink: 'syz.3.779': attribute type 10 has an invalid length. [ 141.608675][ T8230] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 141.651112][ T7793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.682309][ T7793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.712734][ T7793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.738827][ T7793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.782118][ T7793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.813067][ T7793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.850260][ T7793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.873838][ T7793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.918293][ T7793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.973214][ T7793] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.999106][ T7793] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.044036][ T7793] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.063904][ T8269] net_ratelimit: 11 callbacks suppressed [ 142.063923][ T8269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.075869][ T7793] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.100273][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.225891][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 142.233107][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 142.349086][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.368692][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.406295][ T5343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.414676][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.456739][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.488134][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.550208][ T8288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.790'. [ 142.835963][ T8299] netlink: 'syz.1.792': attribute type 3 has an invalid length. [ 142.853771][ T8299] netlink: 44 bytes leftover after parsing attributes in process `syz.1.792'. [ 143.107659][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.265889][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 143.273227][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 143.307682][ T8334] bridge0: port 1(syz_tun) entered blocking state [ 143.329320][ T8334] bridge0: port 1(syz_tun) entered disabled state [ 143.350406][ T8334] syz_tun: entered allmulticast mode [ 143.375369][ T8334] syz_tun: entered promiscuous mode [ 143.420436][ T8334] bridge0: port 1(syz_tun) entered blocking state [ 143.427606][ T8334] bridge0: port 1(syz_tun) entered forwarding state [ 143.581160][ T1070] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.618893][ T8341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.129078][ T1070] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.173127][ T8359] netlink: 'syz.0.802': attribute type 7 has an invalid length. [ 144.226533][ T8359] netlink: 'syz.0.802': attribute type 39 has an invalid length. [ 144.357094][ T1070] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.366813][ T8367] ip6t_REJECT: ECHOREPLY is not supported [ 144.407432][ T8367] netlink: 'syz.1.805': attribute type 1 has an invalid length. [ 144.436098][ T8367] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.805'. [ 144.445729][ T8367] netlink: 'syz.1.805': attribute type 1 has an invalid length. [ 144.494108][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 144.507399][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 144.520224][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 144.536070][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 144.549716][ T1070] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.568407][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 144.583169][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 144.777348][ T8394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.810'. [ 144.784668][ T8393] gtp0: entered promiscuous mode [ 144.796151][ T8397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.810'. [ 144.822107][ T8393] gtp0: entered allmulticast mode [ 144.932829][ T8407] netlink: 'syz.2.814': attribute type 8 has an invalid length. [ 145.255948][ T1070] bridge_slave_1: left allmulticast mode [ 145.275822][ T1070] bridge_slave_1: left promiscuous mode [ 145.281621][ T1070] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.305598][ T1070] bridge_slave_0: left allmulticast mode [ 145.325349][ T1070] bridge_slave_0: left promiscuous mode [ 145.347982][ T1070] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.847519][ T1070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.859984][ T1070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.871168][ T1070] bond0 (unregistering): Released all slaves [ 145.890105][ T8432] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 145.907210][ T8376] chnl_net:caif_netlink_parms(): no params data found [ 145.927832][ T8439] netlink: 24 bytes leftover after parsing attributes in process `syz.0.823'. [ 145.962928][ T8443] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 145.979287][ T8443] macvtap1: entered promiscuous mode [ 145.985473][ T8443] macvtap1: entered allmulticast mode [ 145.992045][ T8443] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 146.012914][ T8443] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 146.027347][ T8443] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 146.264871][ T8457] netlink: 830 bytes leftover after parsing attributes in process `syz.2.829'. [ 146.274726][ T8463] bond0: option updelay: invalid value (18446744073709551615) [ 146.296422][ T8463] bond0: option updelay: allowed values 0 - 2147483647 [ 146.445036][ T8479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.833'. [ 146.460079][ T8479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.833'. [ 146.524901][ T8479] netlink: 20 bytes leftover after parsing attributes in process `syz.1.833'. [ 146.598280][ T8376] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.608933][ T8376] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.626882][ T4624] Bluetooth: hci2: command tx timeout [ 146.627882][ T8376] bridge_slave_0: entered allmulticast mode [ 146.653899][ T8376] bridge_slave_0: entered promiscuous mode [ 146.728910][ T1070] hsr_slave_0: left promiscuous mode [ 146.742055][ T1070] hsr_slave_1: left promiscuous mode [ 146.755523][ T1070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.763077][ T8495] netlink: 'syz.1.836': attribute type 12 has an invalid length. [ 146.763100][ T8495] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.836'. [ 146.786045][ T1070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.794773][ T1070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.803519][ T1070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.838077][ T1070] veth1_macvtap: left promiscuous mode [ 146.843650][ T1070] veth0_macvtap: left promiscuous mode [ 146.857513][ T1070] veth1_vlan: left promiscuous mode [ 146.862976][ T1070] veth0_vlan: left promiscuous mode [ 146.957758][ T8508] netlink: 20 bytes leftover after parsing attributes in process `syz.2.839'. [ 147.270416][ T25] net_ratelimit: 19 callbacks suppressed [ 147.270442][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.435932][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 147.443146][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 147.460759][ T1070] team0 (unregistering): Port device team_slave_1 removed [ 147.503659][ T1070] team0 (unregistering): Port device team_slave_0 removed [ 147.959513][ T8376] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.996209][ T8376] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.032834][ T8376] bridge_slave_1: entered allmulticast mode [ 148.049450][ T8376] bridge_slave_1: entered promiscuous mode [ 148.118786][ T8511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.158373][ T8376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.189258][ T8376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.302480][ T8376] team0: Port device team_slave_0 added [ 148.309051][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.320719][ T8376] team0: Port device team_slave_1 added [ 148.423602][ T8376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.438280][ T8376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.465826][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 148.472970][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 148.474034][ T8376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.494951][ T5310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.503529][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.588458][ T8376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.615740][ T8376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.647799][ T78] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.686848][ T8376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.705991][ T4624] Bluetooth: hci2: command tx timeout [ 148.911613][ T8376] hsr_slave_0: entered promiscuous mode [ 148.932895][ T8376] hsr_slave_1: entered promiscuous mode [ 148.941973][ T8376] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.961018][ T8376] Cannot create hsr debugfs directory [ 148.967580][ T8564] netlink: 'syz.0.852': attribute type 21 has an invalid length. [ 148.978139][ T8564] netlink: 'syz.0.852': attribute type 5 has an invalid length. [ 148.988380][ T8572] team0: entered promiscuous mode [ 148.994281][ T8568] netlink: 'syz.0.852': attribute type 21 has an invalid length. [ 149.002690][ T8568] netlink: 'syz.0.852': attribute type 5 has an invalid length. [ 149.054667][ T8566] team_slave_0: entered promiscuous mode [ 149.070261][ T8566] team_slave_0: entered allmulticast mode [ 149.124903][ T8565] team0: left promiscuous mode [ 149.392096][ T8586] netlink: 'syz.1.858': attribute type 10 has an invalid length. [ 149.402970][ T8586] geneve0: entered promiscuous mode [ 149.435377][ T8586] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 149.454578][ T8594] __nla_validate_parse: 13 callbacks suppressed [ 149.454596][ T8594] netlink: 165 bytes leftover after parsing attributes in process `syz.2.860'. [ 149.490982][ T8594] netlink: 'syz.2.860': attribute type 8 has an invalid length. [ 149.491238][ T8593] bridge0: entered promiscuous mode [ 149.498869][ T8594] netlink: 'syz.2.860': attribute type 7 has an invalid length. [ 149.498892][ T8594] netlink: 187184 bytes leftover after parsing attributes in process `syz.2.860'. [ 149.529705][ T8593] macvlan2: entered allmulticast mode [ 149.535311][ T8593] bridge0: entered allmulticast mode [ 149.700707][ T1170] IPVS: starting estimator thread 0... [ 149.795994][ T8608] IPVS: using max 19 ests per chain, 45600 per kthread [ 150.114742][ T8376] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 150.141100][ T8376] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 150.173346][ T8376] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 150.212550][ T8376] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 150.384402][ T8637] tipc: Enabling of bearer rejected, failed to enable media [ 150.491965][ T8376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.543676][ T8642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.877'. [ 150.586334][ T8644] batadv0: entered promiscuous mode [ 150.622771][ T8376] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.648451][ T1070] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.655688][ T1070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.692767][ T1070] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.700120][ T1070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.750099][ T8642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.877'. [ 150.786339][ T4624] Bluetooth: hci2: command tx timeout [ 150.931986][ T8660] netlink: 28 bytes leftover after parsing attributes in process `syz.0.882'. [ 151.123409][ T8376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.167494][ T8669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.886'. [ 151.192744][ T8676] netlink: 'syz.1.885': attribute type 21 has an invalid length. [ 151.216887][ T8676] netlink: 156 bytes leftover after parsing attributes in process `syz.1.885'. [ 151.661098][ T8376] veth0_vlan: entered promiscuous mode [ 151.703306][ T8701] netlink: 24 bytes leftover after parsing attributes in process `syz.1.893'. [ 151.714718][ T8376] veth1_vlan: entered promiscuous mode [ 151.784983][ T8376] veth0_macvtap: entered promiscuous mode [ 151.816225][ T8376] veth1_macvtap: entered promiscuous mode [ 151.867610][ T8376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.888133][ T8376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.915753][ T8376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.933519][ T8376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.961128][ T8376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.023001][ T8376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.045480][ T8376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.068602][ T8376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.082199][ T8376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.092672][ T8376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.104268][ T8376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.114189][ T8376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.124799][ T8376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.139757][ T8376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.149228][ T8720] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 152.171268][ T8720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.900'. [ 152.181611][ T8720] netlink: 'syz.3.900': attribute type 13 has an invalid length. [ 152.212599][ T8720] netlink: 'syz.3.900': attribute type 14 has an invalid length. [ 152.267738][ T8720] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.277133][ T8720] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.286510][ T8720] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.295835][ T8720] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.321208][ T8720] vxlan0: entered promiscuous mode [ 152.348939][ T8376] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.374895][ T8376] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.386662][ T8376] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.396982][ T8376] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.409761][ T8727] netlink: 'syz.0.903': attribute type 4 has an invalid length. [ 152.436312][ T8732] netlink: 'syz.0.903': attribute type 4 has an invalid length. [ 152.467902][ T5280] net_ratelimit: 18 callbacks suppressed [ 152.467922][ T5280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.626087][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 152.633323][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 152.689784][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.706433][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.790244][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.802375][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.866941][ T4624] Bluetooth: hci2: command tx timeout [ 152.986104][ T8761] netlink: 211388 bytes leftover after parsing attributes in process `syz.0.912'. [ 153.032935][ T8759] netlink: 'syz.1.913': attribute type 10 has an invalid length. [ 153.078683][ T8759] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 153.134844][ T8767] netlink: 'syz.3.915': attribute type 5 has an invalid length. [ 153.203564][ T8767] : entered promiscuous mode [ 153.507044][ T5279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.615379][ T8802] netlink: 'syz.3.925': attribute type 5 has an invalid length. [ 153.666042][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 153.673149][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 153.685858][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.703228][ T5310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.862030][ T8815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.870791][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.921811][ T8823] x_tables: duplicate underflow at hook 3 [ 154.417260][ T8854] netlink: 'syz.0.941': attribute type 3 has an invalid length. [ 154.540112][ T8856] __nla_validate_parse: 2 callbacks suppressed [ 154.540129][ T8856] netlink: 44 bytes leftover after parsing attributes in process `syz.1.942'. [ 154.667528][ T8861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.943'. [ 154.884154][ T8871] netlink: 'syz.2.946': attribute type 11 has an invalid length. [ 154.999787][ T8877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.947'. [ 155.012534][ T8877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.947'. [ 155.022874][ T8877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.947'. [ 155.325227][ T5559] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.832858][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 155.847026][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 155.855615][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 155.865384][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 155.875351][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 155.883712][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 156.013274][ T8931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.963'. [ 156.030901][ T5559] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.113520][ T8939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.965'. [ 156.124028][ T8939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.965'. [ 156.137148][ T5559] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.236289][ T8932] syzkaller0: create flow: hash 1619668288 index 3 [ 156.313936][ T5559] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.434303][ T8946] netlink: 'syz.1.968': attribute type 10 has an invalid length. [ 156.443326][ T8946] bridge0: port 1(syz_tun) entered disabled state [ 156.464290][ T8946] bridge0: port 1(syz_tun) entered blocking state [ 156.471015][ T8946] bridge0: port 1(syz_tun) entered forwarding state [ 156.495014][ T8946] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 156.503996][ T8955] syzkaller0: delete flow: hash 1619668288 index 3 [ 157.597946][ T5558] net_ratelimit: 20 callbacks suppressed [ 157.597967][ T5558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.612703][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.671170][ T5280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.835861][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 157.843037][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 157.917984][ T4624] Bluetooth: hci2: command tx timeout [ 158.538422][ T8964] netlink: 'syz.1.970': attribute type 10 has an invalid length. [ 158.550341][ T8964] bridge0: port 1(syz_tun) entered disabled state [ 158.645268][ T8917] chnl_net:caif_netlink_parms(): no params data found [ 158.713428][ T5311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.786596][ T78] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.795607][ T5311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.866179][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 158.873324][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 158.956920][ T8991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.974'. [ 158.970539][ T8976] netlink: 28 bytes leftover after parsing attributes in process `syz.0.973'. [ 158.990911][ T8976] netlink: 'syz.0.973': attribute type 7 has an invalid length. [ 159.003412][ T8976] netlink: 'syz.0.973': attribute type 8 has an invalid length. [ 159.042867][ T8976] ip6gretap0: entered promiscuous mode [ 159.074832][ T8976] batadv_slave_1: entered promiscuous mode [ 159.096022][ T8976] gretap0: entered promiscuous mode [ 159.116949][ T5559] bridge_slave_1: left allmulticast mode [ 159.122820][ T5559] bridge_slave_1: left promiscuous mode [ 159.138539][ T5559] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.158097][ T5559] bridge_slave_0: left allmulticast mode [ 159.164028][ T5559] bridge_slave_0: left promiscuous mode [ 159.173335][ T9010] netlink: 'syz.1.979': attribute type 1 has an invalid length. [ 159.181959][ T5559] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.190139][ T9010] netlink: 'syz.1.979': attribute type 1 has an invalid length. [ 159.771893][ T5559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.784481][ T5559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.796086][ T5559] bond0 (unregistering): Released all slaves [ 159.822292][ T9021] __nla_validate_parse: 1 callbacks suppressed [ 159.822312][ T9021] netlink: 20 bytes leftover after parsing attributes in process `syz.1.979'. [ 159.847717][ T9021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.979'. [ 159.863338][ T9021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.979'. [ 159.986923][ T4624] Bluetooth: hci2: command tx timeout [ 160.167276][ T9042] netlink: 32 bytes leftover after parsing attributes in process `syz.3.988'. [ 160.892752][ T9063] nbd: must specify a size in bytes for the device [ 162.068199][ T4624] Bluetooth: hci2: command tx timeout [ 162.441930][ T9058] netlink: 52 bytes leftover after parsing attributes in process `syz.3.991'. [ 162.484029][ T8917] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.504013][ T8917] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.511508][ T8917] bridge_slave_0: entered allmulticast mode [ 162.520364][ T8917] bridge_slave_0: entered promiscuous mode [ 162.546329][ T9062] netlink: 48 bytes leftover after parsing attributes in process `syz.0.992'. [ 162.555478][ T9062] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 162.585014][ T9065] ip6t_srh: unknown srh match flags 4020 [ 162.602396][ T9068] netlink: 32 bytes leftover after parsing attributes in process `syz.1.993'. [ 162.642175][ T8917] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.662428][ T8917] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.680046][ T8917] bridge_slave_1: entered allmulticast mode [ 162.695329][ T8917] bridge_slave_1: entered promiscuous mode [ 162.869804][ T5280] net_ratelimit: 1039 callbacks suppressed [ 162.869824][ T5280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.025815][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 163.032998][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 163.088885][ T9097] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.196296][ T8917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.203433][ T5283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.213759][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.243199][ T8917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.282551][ T9100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1000'. [ 163.294174][ T9100] bridge_slave_1: left allmulticast mode [ 163.307961][ T9100] bridge_slave_1: left promiscuous mode [ 163.326469][ T9100] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.344111][ T9100] bridge_slave_0: left allmulticast mode [ 163.351183][ T9100] bridge_slave_0: left promiscuous mode [ 163.357986][ T5558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.365320][ T9100] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.366929][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.473096][ T5559] hsr_slave_0: left promiscuous mode [ 163.483357][ T5559] hsr_slave_1: left promiscuous mode [ 163.513614][ T5559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.531361][ T9120] netlink: 'syz.0.1008': attribute type 1 has an invalid length. [ 163.536095][ T5559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.540700][ T9120] netlink: 9116 bytes leftover after parsing attributes in process `syz.0.1008'. [ 163.559382][ T5559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.565937][ T9120] netlink: 'syz.0.1008': attribute type 2 has an invalid length. [ 163.573595][ T5559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.575068][ T9120] netlink: 185 bytes leftover after parsing attributes in process `syz.0.1008'. [ 163.612734][ T5559] veth1_macvtap: left promiscuous mode [ 163.619337][ T5559] veth0_macvtap: left promiscuous mode [ 163.625261][ T5559] veth1_vlan: left promiscuous mode [ 163.630866][ T5559] veth0_vlan: left promiscuous mode [ 163.757540][ T9129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.767414][ T9129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.777363][ T9129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.793546][ T9129] IPVS: set_ctl: invalid protocol: 22 224.0.0.1:20000 [ 164.152112][ T4624] Bluetooth: hci2: command tx timeout [ 164.303482][ T5559] team0 (unregistering): Port device team_slave_1 removed [ 164.351972][ T5559] team0 (unregistering): Port device team_slave_0 removed [ 164.875326][ T9117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1007'. [ 164.898771][ T9122] netlink: 'syz.0.1008': attribute type 46 has an invalid length. [ 164.929051][ T8917] team0: Port device team_slave_0 added [ 164.981258][ T8917] team0: Port device team_slave_1 added [ 165.166647][ T8917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.185870][ T8917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.239817][ T8917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.339643][ T8917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.350556][ T8917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.385983][ T8917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.491918][ T9159] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1018'. [ 165.588757][ T9166] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1019'. [ 165.632613][ T8917] hsr_slave_0: entered promiscuous mode [ 165.647749][ T8917] hsr_slave_1: entered promiscuous mode [ 165.662348][ T8917] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.682667][ T8917] Cannot create hsr debugfs directory [ 165.691848][ T9164] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1021'. [ 165.902265][ T9180] netlink: 'syz.1.1023': attribute type 21 has an invalid length. [ 165.925270][ T9180] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1023'. [ 165.943164][ T9180] netlink: 'syz.1.1023': attribute type 4 has an invalid length. [ 165.951667][ T9180] netlink: 'syz.1.1023': attribute type 5 has an invalid length. [ 165.962002][ T9180] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1023'. [ 166.205324][ T9199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1029'. [ 166.254418][ T9199] pimreg: entered allmulticast mode [ 166.264242][ T9199] pimreg: left allmulticast mode [ 166.570884][ T8917] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 166.589995][ T9210] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1031'. [ 166.592331][ T8917] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 166.611554][ T8917] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 166.621883][ T8917] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 166.634206][ T9210] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1031'. [ 166.748113][ T8917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.804345][ T8917] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.854295][ T1062] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.861538][ T1062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.894302][ T1062] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.901525][ T1062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.028736][ T9225] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1035'. [ 167.057367][ T9224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.298033][ T8917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.679732][ T9259] netlink: 'syz.1.1043': attribute type 10 has an invalid length. [ 167.716272][ T9260] netlink: 'syz.1.1043': attribute type 10 has an invalid length. [ 167.743320][ T9263] netlink: 'syz.0.1044': attribute type 1 has an invalid length. [ 167.873053][ T8917] veth0_vlan: entered promiscuous mode [ 167.938337][ T8917] veth1_vlan: entered promiscuous mode [ 167.974389][ T9270] netlink: 'syz.1.1047': attribute type 22 has an invalid length. [ 168.044028][ T8917] veth0_macvtap: entered promiscuous mode [ 168.066345][ T5279] net_ratelimit: 23 callbacks suppressed [ 168.066362][ T5279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.066501][ T9283] veth1_macvtap: left promiscuous mode [ 168.098870][ T9283] macsec0: entered promiscuous mode [ 168.114309][ T9283] macsec0: entered allmulticast mode [ 168.150839][ T8917] veth1_macvtap: entered promiscuous mode [ 168.163736][ T9286] veth1_macvtap: entered promiscuous mode [ 168.171328][ T9286] veth1_macvtap: entered allmulticast mode [ 168.184876][ T9286] macsec0: left promiscuous mode [ 168.191923][ T9286] macsec0: left allmulticast mode [ 168.199967][ T9286] veth1_macvtap: left allmulticast mode [ 168.229715][ T9283] ipvlan2: entered allmulticast mode [ 168.235036][ T9283] veth0_vlan: entered allmulticast mode [ 168.240894][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 168.241079][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 168.293108][ T8917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.346417][ T8917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.375710][ T8917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.401773][ T8917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.429748][ T8917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.455385][ T8917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.469759][ T1062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.478426][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.495246][ T8917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.521448][ T8917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.540943][ T8917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.560548][ T9304] netlink: 'syz.2.1058': attribute type 5 has an invalid length. [ 168.568345][ T8917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.568414][ T8917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.568442][ T8917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.568455][ T8917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.570079][ T8917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.631181][ T8917] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.649908][ T8917] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.663963][ T9306] netlink: 'syz.0.1061': attribute type 9 has an invalid length. [ 168.674392][ T8917] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.690701][ T9306] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 168.704699][ T8917] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.769616][ T9309] netlink: 'syz.1.1062': attribute type 2 has an invalid length. [ 168.956697][ T5310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.965181][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.002450][ T9321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.019102][ T9321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.038862][ T9321] netlink: 'syz.3.1065': attribute type 1 has an invalid length. [ 169.063679][ T9325] netlink: 'syz.0.1064': attribute type 10 has an invalid length. [ 169.132739][ T9325] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 169.150208][ T5558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.162643][ T5558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.212968][ T5745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.224301][ T5745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.074812][ T9372] __nla_validate_parse: 13 callbacks suppressed [ 170.074833][ T9372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1078'. [ 170.221789][ T9381] xt_CT: You must specify a L4 protocol and not use inversions on it [ 170.243506][ T9379] netlink: 'syz.1.1081': attribute type 13 has an invalid length. [ 170.266371][ T9386] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1082'. [ 170.704843][ T9424] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1088'. [ 170.805254][ T9429] ieee802154 phy0 wpan0: encryption failed: -22 [ 171.213159][ T9446] netlink: 'syz.3.1099': attribute type 7 has an invalid length. [ 171.216715][ T9445] netlink: 'syz.2.1100': attribute type 5 has an invalid length. [ 171.224117][ T9446] netlink: 'syz.3.1099': attribute type 8 has an invalid length. [ 171.233907][ T9445] : entered promiscuous mode [ 171.244170][ T9446] netlink: 'syz.3.1099': attribute type 1 has an invalid length. [ 171.252677][ T9446] netlink: 9336 bytes leftover after parsing attributes in process `syz.3.1099'. [ 171.262192][ T9446] netlink: 'syz.3.1099': attribute type 1 has an invalid length. [ 171.915499][ T78] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.996079][ T9487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1109'. [ 172.557844][ T78] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.605132][ T9498] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1111'. [ 172.625985][ T9498] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1111'. [ 172.757924][ T78] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.807012][ T9515] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1116'. [ 172.836276][ T9515] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1116'. [ 172.998077][ T78] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.148516][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 173.159254][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 173.173410][ C0] ------------[ cut here ]------------ [ 173.178966][ C0] WARNING: CPU: 0 PID: 9533 at net/hsr/hsr_forward.c:602 hsr_fill_frame_info+0x3da/0x570 [ 173.188873][ C0] Modules linked in: [ 173.192830][ C0] CPU: 0 UID: 0 PID: 9533 Comm: syz.0.1123 Not tainted 6.11.0-rc6-syzkaller-00178-gd759ee240d3c #0 [ 173.203585][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 173.213719][ C0] RIP: 0010:hsr_fill_frame_info+0x3da/0x570 [ 173.219739][ C0] Code: 00 31 c0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 e5 16 f9 f5 90 0f 0b 90 e9 09 ff ff ff e8 d7 16 f9 f5 90 <0f> 0b 90 eb 93 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c a3 fc ff ff 48 [ 173.239888][ C0] RSP: 0018:ffffc90000007278 EFLAGS: 00010246 [ 173.246024][ C0] RAX: ffffffff8b9a75d9 RBX: 0000000000000000 RCX: ffff88806a1d1e00 [ 173.254041][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 173.262081][ C0] RBP: ffff8880298a6cc0 R08: ffffffff8b9a7429 R09: 0000000000000000 [ 173.266645][ T5311] net_ratelimit: 146 callbacks suppressed [ 173.266661][ T5311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.270108][ C0] R10: ffffc900000073c8 R11: fffff52000000e7b R12: dffffc0000000000 [ 173.291918][ C0] R13: 0000000000000008 R14: ffff888033667020 R15: ffffc900000073c0 [ 173.299974][ C0] FS: 00007f40ba5ff6c0(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 173.309070][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 173.315719][ C0] CR2: 0000000020003b80 CR3: 0000000023e90000 CR4: 00000000003506f0 [ 173.323836][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 173.331896][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 173.338676][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 173.339998][ C0] Call Trace: [ 173.350233][ C0] [ 173.353101][ C0] ? __warn+0x163/0x4e0 [ 173.357350][ C0] ? hsr_fill_frame_info+0x3da/0x570 [ 173.362683][ C0] ? report_bug+0x2b3/0x500 [ 173.367267][ C0] ? hsr_fill_frame_info+0x3da/0x570 [ 173.372585][ C0] ? handle_bug+0x3e/0x70 [ 173.376983][ C0] ? exc_invalid_op+0x1a/0x50 [ 173.381691][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 173.386793][ C0] ? hsr_fill_frame_info+0x229/0x570 [ 173.392128][ C0] ? hsr_fill_frame_info+0x3d9/0x570 [ 173.397580][ C0] ? hsr_fill_frame_info+0x3da/0x570 [ 173.402890][ C0] ? hsr_fill_frame_info+0x3d9/0x570 [ 173.408247][ C0] hsr_forward_skb+0x847/0x2b60 [ 173.413182][ C0] ? validate_chain+0x11e/0x5900 [ 173.418300][ C0] ? hsr_forward_skb+0xaf/0x2b60 [ 173.423281][ C0] ? __pfx_hsr_forward_skb+0x10/0x10 [ 173.428665][ C0] ? skb_push+0x97/0x100 [ 173.432943][ C0] hsr_handle_frame+0x51b/0x7d0 [ 173.437878][ C0] ? __pfx_hsr_handle_frame+0x10/0x10 [ 173.443288][ C0] __netif_receive_skb_core+0x13e8/0x4570 [ 173.449123][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 173.455221][ C0] ? validate_chain+0x11e/0x5900 [ 173.460234][ C0] ? mark_lock+0x9a/0x350 [ 173.464650][ C0] ? __lock_acquire+0x137a/0x2040 [ 173.469815][ C0] __netif_receive_skb_list_core+0x2b7/0x980 [ 173.475874][ C0] ? mark_lock+0x9a/0x350 [ 173.480268][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 173.486860][ C0] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 173.493234][ C0] netif_receive_skb_list_internal+0xa51/0xe30 [ 173.499476][ C0] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 173.505862][ C0] ? dev_gro_receive+0x108f/0x24b0 [ 173.511010][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 173.517786][ C0] napi_complete_done+0x310/0x8e0 [ 173.523031][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 173.528664][ C0] ? rcu_is_watching+0x15/0xb0 [ 173.533464][ C0] ? napi_gro_receive+0x6f3/0xc90 [ 173.538562][ C0] gro_cell_poll+0x19a/0x1c0 [ 173.543271][ C0] __napi_poll+0xcb/0x490 [ 173.547669][ C0] net_rx_action+0x89b/0x1240 [ 173.552408][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 173.557596][ C0] ? sched_clock+0x4a/0x70 [ 173.562091][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 173.568499][ C0] handle_softirqs+0x2c4/0x970 [ 173.573396][ C0] ? do_softirq+0x11b/0x1e0 [ 173.577981][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 173.583307][ C0] do_softirq+0x11b/0x1e0 [ 173.587700][ C0] [ 173.590654][ C0] [ 173.593605][ C0] ? __pfx_do_softirq+0x10/0x10 [ 173.598543][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 173.604261][ C0] ? rcu_is_watching+0x15/0xb0 [ 173.609280][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 173.614515][ C0] ? napi_gro_frags+0x9c9/0x12a0 [ 173.619513][ C0] ? tun_get_user+0x2a78/0x4720 [ 173.624391][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 173.630200][ C0] ? tun_get_user+0x2a78/0x4720 [ 173.635084][ C0] tun_get_user+0x2d63/0x4720 [ 173.639853][ C0] ? tun_get_user+0x2a78/0x4720 [ 173.644746][ C0] ? __lock_acquire+0x137a/0x2040 [ 173.649837][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 173.654916][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 173.660449][ C0] ? tun_get+0x1e/0x2f0 [ 173.664652][ C0] ? __pfx_lock_release+0x10/0x10 [ 173.669791][ C0] ? tun_get+0x1e/0x2f0 [ 173.674166][ C0] ? tun_get+0x27d/0x2f0 [ 173.678479][ C0] tun_chr_write_iter+0x113/0x1f0 [ 173.683536][ C0] vfs_write+0xa72/0xc90 [ 173.687847][ C0] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 173.693421][ C0] ? __pfx_vfs_write+0x10/0x10 [ 173.698258][ C0] ? do_futex+0x392/0x560 [ 173.702650][ C0] ksys_write+0x1a0/0x2c0 [ 173.707044][ C0] ? __pfx_ksys_write+0x10/0x10 [ 173.711918][ C0] ? do_syscall_64+0x100/0x230 [ 173.716754][ C0] ? do_syscall_64+0xb6/0x230 [ 173.721460][ C0] do_syscall_64+0xf3/0x230 [ 173.726012][ C0] ? clear_bhb_loop+0x35/0x90 [ 173.730758][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.736710][ C0] RIP: 0033:0x7f40bab7cef9 [ 173.741185][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.760875][ C0] RSP: 002b:00007f40ba5ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 173.769366][ C0] RAX: ffffffffffffffda RBX: 00007f40bad35f80 RCX: 00007f40bab7cef9 [ 173.777436][ C0] RDX: 000000000000004c RSI: 00000000200002c0 RDI: 0000000000000006 [ 173.785431][ C0] RBP: 00007f40babef01e R08: 0000000000000000 R09: 0000000000000000 [ 173.793453][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.801573][ C0] R13: 0000000000000000 R14: 00007f40bad35f80 R15: 00007ffd58f0dea8 [ 173.809617][ C0] [ 173.812658][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 173.819964][ C0] CPU: 0 UID: 0 PID: 9533 Comm: syz.0.1123 Not tainted 6.11.0-rc6-syzkaller-00178-gd759ee240d3c #0 [ 173.830657][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 173.840748][ C0] Call Trace: [ 173.844023][ C0] [ 173.846862][ C0] dump_stack_lvl+0x241/0x360 [ 173.851541][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.856829][ C0] ? __pfx__printk+0x10/0x10 [ 173.861424][ C0] ? _printk+0xd5/0x120 [ 173.865579][ C0] ? vscnprintf+0x5d/0x90 [ 173.869947][ C0] panic+0x349/0x860 [ 173.873923][ C0] ? __warn+0x172/0x4e0 [ 173.878073][ C0] ? __pfx_panic+0x10/0x10 [ 173.882487][ C0] ? show_trace_log_lvl+0x4e6/0x520 [ 173.887701][ C0] __warn+0x346/0x4e0 [ 173.891674][ C0] ? hsr_fill_frame_info+0x3da/0x570 [ 173.896951][ C0] report_bug+0x2b3/0x500 [ 173.901279][ C0] ? hsr_fill_frame_info+0x3da/0x570 [ 173.906567][ C0] handle_bug+0x3e/0x70 [ 173.910717][ C0] exc_invalid_op+0x1a/0x50 [ 173.915217][ C0] asm_exc_invalid_op+0x1a/0x20 [ 173.920062][ C0] RIP: 0010:hsr_fill_frame_info+0x3da/0x570 [ 173.925946][ C0] Code: 00 31 c0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 e5 16 f9 f5 90 0f 0b 90 e9 09 ff ff ff e8 d7 16 f9 f5 90 <0f> 0b 90 eb 93 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c a3 fc ff ff 48 [ 173.946346][ C0] RSP: 0018:ffffc90000007278 EFLAGS: 00010246 [ 173.952408][ C0] RAX: ffffffff8b9a75d9 RBX: 0000000000000000 RCX: ffff88806a1d1e00 [ 173.960369][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 173.968330][ C0] RBP: ffff8880298a6cc0 R08: ffffffff8b9a7429 R09: 0000000000000000 [ 173.976387][ C0] R10: ffffc900000073c8 R11: fffff52000000e7b R12: dffffc0000000000 [ 173.984349][ C0] R13: 0000000000000008 R14: ffff888033667020 R15: ffffc900000073c0 [ 173.992350][ C0] ? hsr_fill_frame_info+0x229/0x570 [ 173.997637][ C0] ? hsr_fill_frame_info+0x3d9/0x570 [ 174.002927][ C0] ? hsr_fill_frame_info+0x3d9/0x570 [ 174.008216][ C0] hsr_forward_skb+0x847/0x2b60 [ 174.013115][ C0] ? validate_chain+0x11e/0x5900 [ 174.018154][ C0] ? hsr_forward_skb+0xaf/0x2b60 [ 174.023087][ C0] ? __pfx_hsr_forward_skb+0x10/0x10 [ 174.028380][ C0] ? skb_push+0x97/0x100 [ 174.032623][ C0] hsr_handle_frame+0x51b/0x7d0 [ 174.037497][ C0] ? __pfx_hsr_handle_frame+0x10/0x10 [ 174.042957][ C0] __netif_receive_skb_core+0x13e8/0x4570 [ 174.048732][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 174.054925][ C0] ? validate_chain+0x11e/0x5900 [ 174.059862][ C0] ? mark_lock+0x9a/0x350 [ 174.064196][ C0] ? __lock_acquire+0x137a/0x2040 [ 174.069255][ C0] __netif_receive_skb_list_core+0x2b7/0x980 [ 174.075240][ C0] ? mark_lock+0x9a/0x350 [ 174.079672][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 174.086184][ C0] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 174.092514][ C0] netif_receive_skb_list_internal+0xa51/0xe30 [ 174.098670][ C0] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 174.104991][ C0] ? dev_gro_receive+0x108f/0x24b0 [ 174.110102][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 174.116792][ C0] napi_complete_done+0x310/0x8e0 [ 174.121833][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 174.127509][ C0] ? rcu_is_watching+0x15/0xb0 [ 174.132398][ C0] ? napi_gro_receive+0x6f3/0xc90 [ 174.137447][ C0] gro_cell_poll+0x19a/0x1c0 [ 174.142049][ C0] __napi_poll+0xcb/0x490 [ 174.146388][ C0] net_rx_action+0x89b/0x1240 [ 174.151087][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 174.156205][ C0] ? sched_clock+0x4a/0x70 [ 174.160667][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 174.167004][ C0] handle_softirqs+0x2c4/0x970 [ 174.171776][ C0] ? do_softirq+0x11b/0x1e0 [ 174.176276][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 174.181570][ C0] do_softirq+0x11b/0x1e0 [ 174.185912][ C0] [ 174.188834][ C0] [ 174.191754][ C0] ? __pfx_do_softirq+0x10/0x10 [ 174.196598][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 174.202234][ C0] ? rcu_is_watching+0x15/0xb0 [ 174.207002][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 174.212211][ C0] ? napi_gro_frags+0x9c9/0x12a0 [ 174.217142][ C0] ? tun_get_user+0x2a78/0x4720 [ 174.221986][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 174.227726][ C0] ? tun_get_user+0x2a78/0x4720 [ 174.232573][ C0] tun_get_user+0x2d63/0x4720 [ 174.237247][ C0] ? tun_get_user+0x2a78/0x4720 [ 174.242098][ C0] ? __lock_acquire+0x137a/0x2040 [ 174.247125][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 174.252158][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 174.257611][ C0] ? tun_get+0x1e/0x2f0 [ 174.261758][ C0] ? __pfx_lock_release+0x10/0x10 [ 174.266881][ C0] ? tun_get+0x1e/0x2f0 [ 174.271050][ C0] ? tun_get+0x27d/0x2f0 [ 174.275283][ C0] tun_chr_write_iter+0x113/0x1f0 [ 174.280597][ C0] vfs_write+0xa72/0xc90 [ 174.284882][ C0] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 174.290426][ C0] ? __pfx_vfs_write+0x10/0x10 [ 174.295190][ C0] ? do_futex+0x392/0x560 [ 174.299536][ C0] ksys_write+0x1a0/0x2c0 [ 174.303868][ C0] ? __pfx_ksys_write+0x10/0x10 [ 174.308714][ C0] ? do_syscall_64+0x100/0x230 [ 174.313504][ C0] ? do_syscall_64+0xb6/0x230 [ 174.318251][ C0] do_syscall_64+0xf3/0x230 [ 174.322747][ C0] ? clear_bhb_loop+0x35/0x90 [ 174.327421][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.333311][ C0] RIP: 0033:0x7f40bab7cef9 [ 174.337720][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.357411][ C0] RSP: 002b:00007f40ba5ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 174.365904][ C0] RAX: ffffffffffffffda RBX: 00007f40bad35f80 RCX: 00007f40bab7cef9 [ 174.373962][ C0] RDX: 000000000000004c RSI: 00000000200002c0 RDI: 0000000000000006 [ 174.381927][ C0] RBP: 00007f40babef01e R08: 0000000000000000 R09: 0000000000000000 [ 174.389892][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.397853][ C0] R13: 0000000000000000 R14: 00007f40bad35f80 R15: 00007ffd58f0dea8 [ 174.405827][ C0] [ 174.409238][ C0] Kernel Offset: disabled [ 174.413648][ C0] Rebooting in 86400 seconds..