last executing test programs: 58.877223588s ago: executing program 1 (id=1042): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@rand_addr=0x4, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x80, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x40, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random}) close(0x3) 48.424170146s ago: executing program 1 (id=1042): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@rand_addr=0x4, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x80, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x40, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random}) close(0x3) 37.273890487s ago: executing program 1 (id=1042): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@rand_addr=0x4, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x80, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x40, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random}) close(0x3) 25.27890911s ago: executing program 1 (id=1042): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@rand_addr=0x4, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x80, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x40, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random}) close(0x3) 13.97942261s ago: executing program 1 (id=1042): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@rand_addr=0x4, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x80, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x40, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random}) close(0x3) 4.114279894s ago: executing program 4 (id=2028): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r1, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000020c00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) 3.684688953s ago: executing program 3 (id=2032): socketpair(0x26, 0x6, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) accept$nfc_llcp(r0, &(0x7f0000000280), &(0x7f0000000340)=0x60) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0xa, 0xbc}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x200000, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000600)={0x1, 0x4, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @random="c8ec1d8ff344", @remote, @empty]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r6 = socket(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x0, 0x4, 0x1, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x80, 0xcb4, 0x800000}}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xc}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x47}, @NL80211_ATTR_PMKID={0x14, 0x55, "94404d2f706611ac4c9b56bc8320a958"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10000}, 0x8000) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0x0, @void, @value, @void, @value}, 0x1b) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r9, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0xa8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x50, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x8}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.554400747s ago: executing program 0 (id=2035): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) accept4$inet6(r0, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x26, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) sendto$inet6(r0, &(0x7f00000000c0)="e9", 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x4e22, 0x1000, @empty}, 0x1c) shutdown(r0, 0x2) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf}}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000100)=0xfff, 0x4) socket$igmp(0x2, 0x3, 0x2) listen(r1, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r4, &(0x7f0000000000)={0x2c, 0x2, 0x0, 0xa}, 0x10) 3.34411134s ago: executing program 0 (id=2038): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) sendto$inet6(r1, &(0x7f0000000000)='X', 0x1, 0x20000000, &(0x7f0000000080)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x18}, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newsa={0x1c8, 0x10, 0x633, 0x0, 0x0, {{@in=@broadcast, @in=@dev}, {@in6=@loopback, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x8d, 0x14, {{'rmd160\x00'}, 0x208, 0x0, "e863654b40a7ad42118bc1dd69d07e3b05cf0dbc9a9aac6130f0d060cb0c958c133115ff9cbb79de1007f5583249a62fe4273013ec2c2cca44c3a2d388d9483ca3"}}]}, 0x1c8}}, 0x0) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x2, @multicast, 'ip6gretap0\x00'}}, 0x1e) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000045c0)={'tunl0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x26, 0x1, 0x3, 0x7f, 0x81, 0x9, 0x0, 0xf, 0xb, 0xe9, [0x674, 0x5, 0x2, 0x8000, 0x7fffffff, 0x7, 0x80, 0x3]}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f00008c4000/0x1000)=nil, 0x1000, 0x3, 0x11, r5, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x300000e, 0x28012, r5, 0x1000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x40047452, &(0x7f0000000040)={0x18, 0x0, {0x2, @multicast, 'veth1_to_team\x00'}}) 3.166889728s ago: executing program 4 (id=2040): r0 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000500)={0x0, 'veth1\x00', {0x4}, 0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffe47, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="1000000000000000240012800b00010062726964676500001400028008000200060000000500190084000000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0xff, 0x7fffffff, 0x34, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x700, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x2f, 0x8, 0x0, 0x1, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x7, 0x8, 0x60000, 0xa}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xc8, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.060930916s ago: executing program 1 (id=1042): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@rand_addr=0x4, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x80, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x40, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random}) close(0x3) 3.004791961s ago: executing program 4 (id=2041): syz_emit_ethernet(0x2a, &(0x7f0000000040)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x4, 0x2, 0x0, @private=0xa010102, @broadcast}, {0x16, 0x81, 0x0, @multicast2=0xe0000001}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="680000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800e00010069703665727370616e000000340002801400050000000000000000000000000000000001040012066600140083be000005001700010000000500160002000000"], 0x68}}, 0x0) 3.000407113s ago: executing program 2 (id=2042): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @multicast1}, 0x2, 0x1, 0x3, 0x7}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r1, 0x40047452, 0xfffffffffffffffd) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'tunl0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) read(0xffffffffffffffff, &(0x7f00000001c0)=""/64, 0x40) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x38, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x38}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000000440)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e1f, @empty}}, 0xfffd}, 0x90) sendmsg$NL80211_CMD_ASSOCIATE(r3, 0x0, 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00e0ff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$inet6(0xa, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r8, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) listen(r8, 0xfff) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r9, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}]}, 0x34}}, 0x0) 1.282976882s ago: executing program 0 (id=2043): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00001000000000000000000000000800120002000200000000000000000010002f0003000000000000000000000010003300000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0xf000000, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_x_policy={0x2, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private1, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0) 1.281660923s ago: executing program 2 (id=2044): r0 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=@newtaction={0x488, 0x13, 0x53b, 0x0, 0x0, {}, [{0x474, 0x1, [@m_ife={0x74, 0xe, 0x0, 0x0, {{0x8}, {0x4c, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xc8a}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7ff, 0xffff, 0x4, 0x200, 0x7}}}, @TCA_IFE_DMAC={0xa, 0x3, @random="543eced80ad3"}, @TCA_IFE_TYPE={0x6, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_tunnel_key={0xb8, 0x4, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2}]}, {0x6b, 0x6, "b6651b2cde06730b4feb29fdb7c1f3a11b3ecb4af81aadbf0ee166ed6561a3dbc79f038a2db76bea3086efd61e73a57ab981bf7d12432ac82960aa7d2b52a41d6f55826ae72906793103a6aeec841209dcf56829f7256c1521609458fa938a9b767db990cf0799"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5}}}}, @m_ife={0xc4, 0x8, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0xf7ee, 0x6, 0x3, 0x3}, 0x1}}]}, {0x7e, 0x6, "8418a34a2b12207e95b572d5fb32064c2c08d98f23c2eba8352c1909f6bba503aef910ac47cf55d64b45981fae62550507f9dbe6ca14e250adfe450457f4ecc66e3066479a81f537fb772de2731845810a28b4426b0363d23cf5bbaabca80ee308271bbc713dbdf77be45492a54c989c2730b3d42442d80ccdb9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x5}}}}, @m_skbedit={0xe4, 0x5, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2a9a}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfd0a}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}]}, {0x8e, 0x6, "1585d7678ab6ac5ed85008734e0ac1372001674cfa1e98c159cc8e5b4d4bb1f005fb9a3185de3a2099fe2ccd48699ccfb7eb652157ac3fbb810f216d233c44e2ffe0183c5db00652fe556eab28078a38b7f6cb6de46bab012477828d74372147a5e0e6c5643dba1efddee78481e108bd01280ad6e577e42d462c35a7876474485104cf6a6c686d03a7cb"}, {0xc}, {0xc}}}, @m_tunnel_key={0x19c, 0x19, 0x0, 0x0, {{0xf}, {0xa8, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @rand_addr=' \x01\x00'}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010101}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xb, 0x8, 0x0, 0x81, 0xd3}, 0x2}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x80000000, 0x9, 0x8, 0x2, 0x3}, 0x2}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xeb, 0x36, 0x8, 0x8, 0xfffffffc}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x11}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}]}, {0xc8, 0x6, "6ecf3083ffb6599e34a614f7b04a2343c9d9cf98830939e6d134c4147cad237a2fa2f74ec4c1eb1a5c60a74e9e31d743fb8b2fef50018dd080a989140ddee249c2610e4430c29db105b7b9dd5b483b0d8eae0b149a9b93e6c5af07c081bde68ab80b81076095859725b3ef4b1a5ef1e75eee9b494169b5c28b4cbe324c4c04e2557484dc0ba7847690667cae0d34f1f3e60bd626dae1ad158ec20fcb9513cc250fc8a259ab1c18a800b8a3ab747760f4986b63d3819cf34778eb66679f29c135124d1646"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x2000808d}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev, [], [], 'batadv0\x00', 'lo\x00'}, 0x0, 0xa8, 0xf0, 0x0, {0x0, 0x4c00}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r4, 0x84, 0x2, 0x0, &(0x7f0000000000)) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x2c, r5, 0x6a98047402e98331, 0x0, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8044}, 0x20045006) r6 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0x2, &(0x7f0000003c40)=0x8, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b03d25a806c8c6394f90324fc60100000000a000200053582c137153e37000c", 0x26}], 0x1}, 0x0) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r7, 0x81, &(0x7f0000000540)="e4b9466b8ac2d0c4b78b25327dd385a94b973e311e2547853d205c6b7be7440ee4e705765297452ff33506eea9b3972cce51d1ecae840a6f50eed2d2ff663416702821784ab3bba225f9494a09d01ccea1f64848173a000f6cea6a4b1a59ae39d54482ab50be3d220e863650e09b6355511fa53d4f429807ec3d249307a42e23722531d838ba068194e5e133f8a26718461627ed1c14f7d785cc6e2a1fc1bdfa11d454f9fe528e5857529ba812177729b1bbb02c88dbc143cc7cb0d8fa424a80e4") r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x42, 0x2}, 0x4}}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) sendmsg$tipc(r8, &(0x7f0000000500)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x8d4) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x1d, r10}, 0x10, &(0x7f0000000340)={&(0x7f00000002c0)={0x1, 0x41, 0x10000, {r11, r12/1000+60000}, {}, {0x1, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x0, 0x1}, 0x6, 0x3, 0x0, 0x0, "85621e2144cffa34238d8dcc17bdbdf03fdcd5ea1855c4bc7ca30528627d5e81b8843e2620f13c67165f577f0552f774a893e28d7eda8f93887d845d9c54aa44"}}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x20000081) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.280591918s ago: executing program 3 (id=2045): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0xfff1, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000240)='GPL\x00', 0xa, 0xbf, &(0x7f0000000140)=""/191, 0x0, 0x30, '\x00', r2, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.19157312s ago: executing program 4 (id=2046): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async, rerun: 32) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 32) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) (async) shutdown(r2, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x44, r1, 0x852dd6c070cd7e4d, 0x3, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xfffffff9}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x82}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x44}, 0x4, 0x700000000000000, 0x0, 0x2000}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) (async, rerun: 64) ioctl$sock_inet_SIOCSIFADDR(r5, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) (rerun: 64) 1.073166671s ago: executing program 3 (id=2047): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a80)=ANY=[@ANYBLOB="ac01000016000100"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000000000000000000000320000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000ac000700e000000100"/228, @ANYRES32=0x0, @ANYBLOB='\x00'/83], 0x1ac}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090a000000000000000000000002001000000000000000000000000000030005000000000002004e20ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss, @timestamp, @timestamp, @window, @timestamp, @window, @sack_perm], 0x8) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x4004001, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a000000000000d74619edc700000000000000004cbd302b0000000000fa0000000000"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000480), 0x2, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x3ef, 0x0) sendmmsg$inet(r1, &(0x7f0000002280)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000008c0)="9c0945a285ed531c7034e5f9c5d5edd102a9c9bb3fa294dbaefa3b579b193eb03ffb9c43c8cca93eb435d8bcf97f8c3fa6", 0x31}], 0x1, &(0x7f0000001c00)=ANY=[@ANYBLOB="14000000000000000000000002000000050000000000000014000000000000000000000002000000008000000000000014000000000000000000000002000000ff03000000000000100000000000"], 0x78}}], 0x1, 0x40805) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'tunl0\x00', &(0x7f00000003c0)={'gre0\x00', 0x0, 0x0, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}}}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4bb1eadc74dde27798c831eec04c24eeec7ff3d3137a508003d2d5c89ab0220cefebd4687636457b9822766c1bfea4e01ff23c6a4caeaf049a572a9774d3b882eb3b4a66c5ec48c29f065d"}, 0xd8) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000400)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x6, {0x2, 0x4e23, @multicast2}, 'veth1_vlan\x00'}) 1.069511781s ago: executing program 0 (id=2048): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001200230b000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="000000000000000008001280040001"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00', 0x200}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xb) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'ip6gre0\x00'}) getpid() 773.074376ms ago: executing program 3 (id=2049): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x8}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (async, rerun: 32) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, 0x0, 0x4004054) (async, rerun: 32) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) (async) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x6, @remote}, 0x10) 743.354341ms ago: executing program 0 (id=2050): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x40002000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r6) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = socket$key(0xf, 0x3, 0x2) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r10, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffffc, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x1c) sendmsg$key(r9, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00001000000000000000000000000800120002000200000000000000000010002f0003000000000000000000000010003300000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x3c}, 0x0, @in=@empty}}, 0xe8) r11 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r11, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r8) r12 = socket$key(0xf, 0x3, 0x2) r13 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r13, 0xffffc000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$key(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_x_policy={0x2, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private1, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0) 632.980245ms ago: executing program 2 (id=2051): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x2}}, 0x2e) (async) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x10000008ebc, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x3a, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a000000aaaaaaaaaa26bbbbbbbbbbbb88a800008100000008004500004000006000002f9078ac1e0001ac141400c58da1"], 0x5a) (async) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'veth1_vlan\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000020642500000000002020207b1af8ff00000000bfa108000000000047010000f6ffffffb702000008000000b70b000000000000850000000500000095"], &(0x7f0000000300)='GPL\x00', 0x1, 0x17, &(0x7f0000000000)=""/23, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 520.333476ms ago: executing program 3 (id=2052): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002300)=@newtaction={0x120, 0x30, 0x300, 0x70bd2d, 0x25dfdbff, {}, [{0x10c, 0x1, [@m_gact={0x48, 0xc, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xbf1, 0x8001, 0x4, 0xae5a, 0x1}}]}, {0x4}, {0xc}, {0xc}}}, @m_sample={0x5c, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x2f, 0x6, "4d11ef01da7337625695ddc3d5012aa6f3638794346943b9ee757a1a4ac5f8ce5f6016d63b9db431952a32"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x30, 0x33, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0x34, 0x1a, 0x0, 0x0, {{0x8}, {0x4}, {0x9, 0x6, "86fe02a441"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x120}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) connect$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e1b}, 0x6e) 411.446929ms ago: executing program 0 (id=2053): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x270bd20, 0x25dfdbfc, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r6, &(0x7f0000001640), 0x40000000000010a, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000b32465a193f0b75b1c2585962aeec1d19b63ee4986246164c771e51cf792a250fc4dcf583fcd198cf0fa9a622fa7e1478a813a048554a93dba21116120043bbe21f6b14511d170134b3aa8d7956113d37ba89b849cbeae96114fbf6bb5d845fba4685a1490cf80730447941cab6df7c7d327c549a4e4bff8d89c084fb630fb9d7d085e585b96d937f25d6c8ae3c5cecc23a64c202426ea87137acd8d4b73d0746fcaef5545e203b8d151493791b1cc271de681c65c7345b8f48978897c437910a9d9a6a8cca2953d3515eb2441602902d48b837cd2374f79fd302dbb", @ANYRES16=r5, @ANYBLOB="a78700000000000000000b000000"], 0x14}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000102010800000000000000000a000000440002802c00018014000300fe8000000000000000000000000000bb14000400fc010000000000000008000000000000100002800500010006000000040003"], 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000006c0)={0xcc, 0x1, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x54, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2ed}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xf}]}, @CTA_SYNPROXY={0x4c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xc}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x825}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x838}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_MARK_MASK={0x8}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4008010}, 0x40608d4) recvmmsg(r1, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x112, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2888a83c0081"], 0x0) 325.366416ms ago: executing program 2 (id=2054): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x5a, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_deladdr={0x2c, 0x15, 0x20, 0x70bd2b, 0x25dfdbfb, {0xa, 0x0, 0x104, 0xfd, r1}, [@IFA_LOCAL={0x14, 0x2, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x5a, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_deladdr={0x2c, 0x15, 0x20, 0x70bd2b, 0x25dfdbfb, {0xa, 0x0, 0x104, 0xfd, r1}, [@IFA_LOCAL={0x14, 0x2, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) 211.280771ms ago: executing program 4 (id=2055): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000140)=0x57) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='-'], 0x9) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="21003300d080000008021100000008021100000150505050505000"], 0x40}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x9, 0x0}, 0x8) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x3, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="660a00000701000061", @ANYRES8, @ANYRES8=0xffffffffffffffff, @ANYRESDEC, @ANYRESDEC, @ANYRESOCT=r7], 0x0, 0x1006, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYRES64=r8], &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x2}, 0x10, r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r10 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r10, &(0x7f0000000080)={0x18, 0x0, {0x11, @broadcast, 'sit0\x00'}}, 0x1e) sendmsg(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)="771a4fa7e338a0fa61874f855d290aa2051f6ed221baf27c5699cd347d2da56661c31aba02c943ff0d90784cf02eb1c57f18b62f08106400860e586a638c20916faee3824ded73a68691739b95a3b7b8cfdf2b215350d6746afa592147b87d28fe565503f663c8d075d8de0bfcbca563fe0e1ee6", 0x74}, {&(0x7f0000000500)}, {0x0}], 0x3}, 0x4) setsockopt$WPAN_WANTLQI(r9, 0x0, 0x3, &(0x7f00000000c0)=0x1, 0x4) syz_emit_ethernet(0x42, &(0x7f00000002c0)=ANY=[@ANYBLOB="0580c20000000180c200000008606c0186dd06100003a1367cd872f0ff0100000000000000000000000000010180c2000000fe880000000000000000000000000001"], 0x0) 175.318492ms ago: executing program 2 (id=2056): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x200800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000400000000000000000000000850000006c00000095"], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8932, &(0x7f0000000000)={'veth0\x00'}) unshare(0x4000400) pwritev(r0, 0x0, 0x0, 0xfffffffd, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r3) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x5c, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x40844) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005600)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x4, @private0, 0x80000000}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000080)="64581bbb63617d6dc078d223c7bd9a4bf83dbb1eb5d6ead8258f74f066494b4e0b6b143c2b8f1762a731ca", 0x2b}, {&(0x7f0000000240)="8d683c3a32d14defb51677c07d9af7795d7b0fd6f2a8699762227ba85cdc7583047526a8330e52c91893f9ae5d283ea3d750cef1acdeed997e9ce539383f3b077c49c4b2d4b188736d920e0373e0444788e7e000e5d92c0e7fc3d942d6f0d38f455de00eb5fb8d623267441c1542eea7e11828b4c321bd792154b188db9e6dfa00024cc0804fd5b7cf92f41f7e67210966fbf402", 0x94}, {&(0x7f0000000300)="fd1cc8abbb1e18e5fbcc1c52180f16b36bf8942d4b1d955c5386c33934de9d3abdae2dfbdbc1ce314e10f17674526e06c128690143f393b22a48a27d08430a39f6b253ca0e0a5e25e3c53e626395ea5dac34760a23229f7fc9ed", 0x5a}, {&(0x7f0000000380)="93afae65f23672a8f832477db034514892a40be2dab8067a05b00bd35067e6d4af4f2441e4517a6f386c7ee7207205ec63f72f2691aa38fc4984c8e4343425cfd6cb6bc5fc2fdaf96624906c6898de06bd58a246c8751daa1ca66a877fc8da84833a7884a7a61b4469de3bb5d0cb28f7260937a05f0234576092b8c765c070fb7c433024ae98078269b51ecb05c34791100f6eb6bfd85c8f195fcfc78a7e8c2e10be76735094f08696cc", 0xaa}, {&(0x7f0000000440)="1475e8b73b387cd09fda5be0fc21021b4125059e6fe587646522ed91169a94aeb23e28a04e2a50c0f0c310d011df7ac05aa7f36f85360f59cbfb80937a5ed95f92166fcb2d6b3b815a1e5fc65302a2c4e7a5831d971239e110e44cc6d499298e5527b13974b092", 0x67}], 0x5, &(0x7f0000000540)=[@hopopts_2292={{0x28, 0x29, 0x36, {0x5e, 0x1, '\x00', [@ra={0x5, 0x2, 0x1}, @pad1, @pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0x7}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x2, 0x1, '\x00', [@pad1, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0xb8, 0x29, 0x39, {0x0, 0x14, 0x0, 0x1, 0x0, [@empty, @private2, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', @mcast1, @mcast2, @private2, @mcast2, @loopback]}}}, @hopopts_2292={{0x190, 0x29, 0x36, {0x2c, 0x2e, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0xb}, @pad1, @generic={0x0, 0xa0, "9ac2dbaa9033d615bc3c8b68a30ace0d48b7a84765aaa758f61bd4b4f470fea9ed52a51194cf55674c104f3060df9932e3055e986466db14e61b48145bc2e34ab740aae2b04bb38b675ffb4fdb012cd117efa982383080be7badd667024a5dc74ca472799fae3d0ce07c0c1a2842453d05a14eeb7ae8b483c4d453958cf3252a87042c153d78ab4fcebe1600b59ad1030bce0f5b02e222271fecc789064f7331"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x18}}, @generic={0x4, 0xb0, "d31f216ad3e86aff3ca2b96fa53b8a35ad21630acbde74e8600a04738d239e7545ab9fda2e61a0d705919cf1948b11cab78132491e100cbb96974dccc272aeeaac98d80e8c5fd58fb35d79130e7f158d9e055e48780b36cc0512cfb53245fbd7f414fcba4af0625b3f6e7594097892a2ad893b14c08efada724c12447163704f2e3b3adce614ebd3b39b571ed98921a30142a290e4b1443f3a64f984a9ba74014242047bf027d0f7cb1e315080aff62b"}]}}}], 0x2b0}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x7f, @private2={0xfc, 0x2, '\x00', 0x1}, 0x400}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000800)="ebd94a3c4cc72ca1fa27df87f53999ad6b10e41c9e247f596871f1fded187cb7d5d12bf02a5479c3f24f83faf61a463578d510bbafc356c8b160368a444d7efbc965fed9ca690df5f0ff59eafb012406ceb284f806f81d3e559d08eb3c1a44c8688488511079412edfded3a95421eca99be9fbbe6e2c031fd52f533b59ec231dfa83586d0f2c5061d33522d7cbc50bfe5bfdd75673cc6b7c49836807f705555fea76624448cb10cb332b38e08c7af716cf3491ec1d5b34ccede10a581c697732cca118f92985c585b9f7f0ba83629a3bc1c4525fe0c9049446856405351958c0b77c9073019a2b7a", 0xe8}, {&(0x7f0000000900)="5bd69346456798f2e9d875bba7662c3695d1e866ca15e78e691bc4189cbeec31f63b5d5a2c0433eda5fe3011e4e1a5098fd3a9c5010d665fbf1dcaf5964811f32a2e6ed7f764ac392e3b871cc66864c922a9332727b185f038fef4005b6aff4cb173f9d143cf1dfb8acdf09395fa1d159762a750f3c5e5b23992d7fb290d64f90bcd5e4163b5300d8fa083ab9feeca04dc100fd96812632939de2784985adfe0265b7b56f6056583950fc99cf59c5e6ad0f92fcfd6ddcfe637617840f8a0e8f9aeb296e084c08a4e67d5e4bda55644f6f062bec41526dcf028846b28f63f9ccbb7f1f5770391a231cc57a398d405ce848fc0e2ab1347f7", 0xf7}], 0x2, &(0x7f0000000a40)=[@dstopts={{0x30, 0x29, 0x37, {0x88, 0x2, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @enc_lim={0x4, 0x1, 0x10}, @ra={0x5, 0x2, 0x3}, @enc_lim={0x4, 0x1, 0xc}]}}}, @tclass={{0x14, 0x29, 0x43, 0x3}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x5e, 0x4, '\x00', [@ra={0x5, 0x2, 0x5ae2}, @ra={0x5, 0x2, 0x101}, @ra={0x5, 0x2, 0x3}, @ra={0x5, 0x2, 0x3}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x4}, @ra={0x5, 0x2, 0x9}]}}}, @rthdrdstopts={{0x40, 0x29, 0x37, {0x0, 0x4, '\x00', [@ra={0x5, 0x2, 0x2}, @generic={0x66, 0x21, "2738be86bac11b1fb6ad8ef5fcd4cef7b9e2bc1c1a5a4752f9918ebdd9a50ad0fc"}]}}}, @hopopts={{0x98, 0x29, 0x36, {0x5c, 0xf, '\x00', [@padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x21}, @calipso={0x7, 0x48, {0x0, 0x10, 0x1, 0x5, [0x8, 0x297, 0x0, 0x7, 0x100000000, 0x6, 0x401, 0x762f]}}, @calipso={0x7, 0x28, {0x1, 0x8, 0x5, 0x9, [0x8000000000000001, 0x2, 0x2, 0x139]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x80}}, @dstopts={{0x18, 0x29, 0x37, {0x3a}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x2b, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0xffff}, @ra={0x5, 0x2, 0x3}, @pad1, @jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x6, 0x28, "763c654e91c06ab7a80e153099cd483d91eef8fbe4c7caf89ce9179a1495d419ae0330a853f10f8c"}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xd2c7}}], 0x220}}, {{&(0x7f0000000c80)={0xa, 0x4e24, 0x0, @local, 0x6}, 0x1c, &(0x7f0000001f40)=[{&(0x7f0000000cc0)="374587f24ea61423dce038536c7b26f30f2b52e6e6f00abf587763dd7333c66978b496fd632262691e1c53a879758d298f54fb417ac46f0f5bbf00e1b002b8946e2e1e7ef5d72e5b1dcdfd905a354542dd1e441c453d578f0c3e92b2b9aa0a8daa0e2211fb833c9b5bc42ba8c4fa8fb4a194095b147916d87de28db601678806ff59ebb67ac3285b7986d820e4dd07b833a0fa0b18d7097e1e0a949da1ca74f89f8024a2bed6f756b07c64d6cdb1b4effbe93ff45248677b3305589899a7571bdd16e4f24e532c8dd2fce861f644dacc218e444bcf331fc45288609ffd6a6ea65af640e760a694871a037146663d9d5c760f39cd4af60a8933d6f53ebcbd6a", 0xff}, {&(0x7f0000000dc0)="19669683a78d79d8e029a6d94c85d1430ad3d14f6157284fc32a7a4c0c592ded1992c32e6332", 0x26}, {&(0x7f0000000e00)="1f7ccadb123c50d94c2641808e466e37c9efb8b36c410d0e9678d3d91f4f505ba3cc196914b59666dd04b098", 0x2c}, {&(0x7f0000000e40)="7b8c85570a1339970001395f979fe106d0216f924f155ea764de14a4848df96df69043c25c75d8ebaa2090f59a4ebc97292ba5732c82fd569d3df49ce20158ae760e1975482c2c0c161a681d16577d3bc921929813dbcabdb6c32b209ee4862f33fa6c7685e9b7f34888fd9b25c55d4918f51cc396a12c2c7e44f170ed8be25a86e688891cff6f37a2b7d2b84260bcf98dcca92610bffb26d647f97ff498abf82f3a00a786f0bbe7a1f8e75e542a252618589fe739c2025b4e8fa2fcd1384de38f8837bb09e6521a819cc1c94a451ff3475f13", 0xd3}, {&(0x7f0000000f40)="ef0106c895f4d7b724d9de265f7f26b87867e9b57ee092e05550375b692d51c7dea0d02fcaa016c6464cec5e74ed19a05a3d88b48319d3742bb227e708ac4a193f8c7de6f1431ff01645e4435536fcc8c9f4a4c800770da3aa4c166f06d1ececcad32d24e4ff04f60ebc78d92e5e079ab01cd5931523f7ffcf563fd0445eb7254a71295c58c0ac239610ee83cc9d25bee9ecceb14667bbf9a9b2d8f7f5fb2b267ec14e5d011373a2a7ea001a5ca4c995fb18e3f80819cc6711bb7a6ac48f414f9f6a43ba8fdc37616a51972f961d1eb03f20c9951df0d5a51510cefdecb59782dafadbf3414eda87307dbfb100f60216d9e64e9de2cf8aa434364586cd11882b75976550cfe18e9cce7f9345c98238411630e9676e2a7bf1ba951f4463fcdc9dc7b13534ab896ac6b64a8ef419d410d1edf70767b3712e8f9f27759238c072eae464105a04e471fcc4eedca13314067707581e41155575e9424264600e30483819a240cb0981055411e2160527b93d2dfad96aa5f8be1f54466a5f45f39773bd3017f9da43ae6e72d34ae3c4274e72f1bc4a7262bcf05f8d2966315e151cb284654ecbe256cbf5b5679f421cba5171031228e2de529b62303ad115a68e8927c7ec9955d895ea1b241587ca93df0cbc6e5cb684abd8a533b59c34732ac8aaf8e96ef6e3f4b5bbd55cd5490a3b73729f4f752282d98f661437d14872db7596982f42572b3f0ed05a6dfeba1dce0fea11f863174e380912414a965b4c3c6bda413368ed77e2e663c327e9ead01feceaed988468aa1c9200b38feccfa32edb5297132c3c87a96385aa7b732fb0ad4e42a6c4046501d2244e2a90f00b4df0331a35f5780d20b435ec0d9ac22069c4e034e8c0a00258bfab9c625aa4493d803379811ccdca0934460f8466a032c9d4320d38cdfab9cc7cf417239925fb32eb717268b27d393164a5dce176d30eaa879412e47c780a16cc5a636f9f017d0f48eda63e3cd73f4dc7de579270ecb2ab43049623d8e3c12c6bfb8ceaea7a54580ef2973206df8612dd6b84c8cac58ab740c7ed68e2d63da7295c71b57e0eae40ff379f991d11c38084ec0308bc21d263cf803f2c934726503359da386b287925e25e513ab062a6d2dd144073ac9c2d8be3598a8b8153318295d3bc08d837b8e8bdd5846cc792605ceb6a6c88e30cac81a324de6870fa7ad96a78ee29deb2b9b57dbfd66e1b5b6ab5d0b4b2ebf810835117726b5c4b2662748fdeb0dec830e164cdc1bdd2b072d5360449156219a5333d5754444a6e13d431bca6749e238d16c50194a4f81c320b13d0616514e788019c660077e96f0b9c7b47ba1bc523b9376fb8b7dd4bfd1fb9d5204d5fb88081188336022ad4381542e44585feacd8db4cf79fdb775354efdc9c70196affbe355d197f5c6588ee5152e9cecdcb12f230f7e9cd5c7972cd31a120fdf551261c1e51cafb51a9a2ab46f3a2d3204e33428d3778f158a806182c9dfee51e74fe4df2f30c05ef1ac09766e652aa8348f610e11058538d5273f97737253750a818de2141f35b3074d3e2ea153aeb517fa4592c7f87f63abd0dabc825bae73bd35b2899d087c568d0ced132aaa3bfe3f5fd82545cbfbdf2b49fc4389d455bf3a2d8c8b3000150b8af5557181cf1c904fca44fe8496218a9ec5877ab9b7e954150f012533ec314443b68fd8133de371f8bf605f3d6f2cf81356d627c2b51b033c7b5884422fc50eda09deb00777981bcb0ba5dcabf98b6b08347a2031e772b540a644d0ba4202aac13444e0dbb5990883d0324b968498af2c417062883b78faaae41e501da7e7ddf40f5ebd7476d7a6164f1289a2d9ab7a28fe57aeb93bb812ab2bf1ff5397b7c887c80eada5908fa72095f79a24b01ff9c2120a01d79c3bd2e4c12bb9a98501f41f53549371e6082a90626278c62412afbc992e5a56b9a26ee5a3bc52b904f0836665054d1185913c1733e84a1bfb2e517a28031770587b70056a299b0df3f19487d35f3f6ba321817fc7a0f819bbed6d42476e8b875085c368de0b1fb6aec87f7125c52f28405f7836a2fa2cc08bc82eab257c467370392e90b83078845ed643bdd8093c5f1bb30611290e56aa8f0bd0dbf5010c0377bc2961ec960910716edfbfaf25a7634da1d9ff32ef263d1a5b5cea42f765a208cbaf69d248b2656cf4902db3322a3a3ca72ab70d2fa1d7092365a2b3e15a4ad67bbda1ae573401d639de276c8fabdd0d94080d78b9a6bedd856f4dbd06fc777c9226471c794d7bccb5e64251072f307489188413e42b28466ac99b3c267eb571c56d3cf234579565e92d39e75d8d8483eba75219dc8fda482a8b03c7e7df1cffd7787c0c13177aec4a100d739e717c9af0bfff66783aa0833cc6cbc77ac2a1cf283c030da9c5174f7ee4ba80761fdf2605adbdae70d308361264404be2578ac6b40cadf93c97353ce2452b9838a6e0bf6e788e78dd8634802e018daa2b9310a4caed239da43e66cf9a86c6217692db20180bf3b6eb2a9f320bfd953729df6f5ca1b6e8f06813027e5eaf036a1b1a93858ab45eda217611826507f6f3eb04ef454fe3a60f9161d19c07fd6f8163f8c1e2e246b9577af32d9d413202918cb1934fb2d4ae425963e8c178469382add2b2008525f689581fd2047bd227c2b39f5aa96f33fca26401c310146ed8f9e9aae58d17dbac5f7bd72140d0122b918606b94c9696d3440920178200a24312659d6faca6f80e639647c78ae61c320775760db87dd5711b1011cfa2775c1a205aecb8b9e9b8ae75866ff939ff2b8dd8dadcc98194eb416a0139e808b978d94598f3dd1c02db3096335882539e5c6d3eafb8ff6c2f63e2a803db8a2624a5d4ecd9874642264aa4d495bdea543cecde34acfde350f370ea0ec6a1c967a17d236a56421fbec4e869d32d289eda9cf9c48fa09e8adcb42b6c9f42b5c4f7d612d000203a20a25b510ca4664bf0dd7cd3f2709d77708e1c54334f509b648c6cf0e13848f00f3519a2179d78867e441e52899af84feb7dbfeef83f3bbd8cc6a4998569ecfddc01d416312c443b0af675c712ca443471614ac989f3838dbd5b1ef77ebb4d53044d44940f8cfac80d9cf15e6f4a0edd0a01c2ee1487b112047d71286d3936a5ea86d101f9654648682a7c1288409f105e7e1726bae2cd1bc5d2673902db566f50a528e6f51df9db720283cd40c124b5f3b4948ed753adae34dc739bd00ba02c53e01c2eca5ae2a46eb6fce06d5fbf7b466e7e39484e99bd0d5948e77d54548c23e8fea11f5ae1ded7ebdbe1b905b1e118d3bb72d1967a5265811fc8920d36914df95532944a157745f2f963ccfb9330deeb8f7efeb0d2dd0b9b64430579036897889a000b1e69ffcd708a02280b07a85ca0fbf2927fa08b04dce321cca4a59bd576321ec929b55d3ff1ceab8d707edc331be57a25d28e15d712f3d54876c3061763a7f410f4e6a11afe9d11890b6cd092b721f2e668f0e39975e384d10d2cc0ed8f27b9676ca79316704f98fb20d8915f59badda45d6719587c89550c71fb849d7659b37626b9ee5c95e492da98e21fbbf74c0c3b0e4e116d82a4c6dfa65e84529abc92f27d9b75391ae8b5a34581bde4d1c58d39ea7ca256d6031700c83c683520272cbedebe82e70c74c6b058212e0db8c4401b2084c9d79154a53752099efd2bbefc0904fefcb5f3ed8cf731b625fd7d6d37eaa8259fad6aa8de40a682d97305363443847ebd2138784287a266f6c98af9741ed1b033577efdbd7c8e5d2757218965d5cfa84f5591c6b7b17d43207899a1aeae1bef8a551614aeabbdaa9f7e8e7cf21e8c1e7ef343f6f645d5ee339433b7eb4361905b3d87ef8e59c20b6c15bc6949806eef7f27a7d87d1fd95d183e9d7e2ff8a32a2459cb19d502e82ea493236ffbf9f898721fce339c2f40a67ce5e83fe3b6f9b467497b9d634e17ebf66cf09b5b8925d64bbe5ed10410ee8368961588c12aa38f9fe2aa4355eed9fb6c44b5e3bef28022d4ccd2e89b57afd89ae64c46e20f8bea74654e4587a216c771d3269fc95e150bf6cc5b5e95666c080d5381aa964fb6b323c9399fbd98a76e1a16199c3782cd5c8456aa5b163df011c947f13e7e82ed318c166a1ff596dc2e9aefc83c18cef0a0981f3360a6b33e6f760b12945b0c40120dc0756a68b4e81e8129cddc35e8c393257d5e79d1aa3efe898b0e0d6bb2e1691a0a6786fc6f594e85bc2e33b2f9bd615ddbc79a0789517a681d01bf0bc930f9f44c1ad9a511b565329e70ac4759adf06a162866a74571b461b078ad85de780e6f9503a38c12e256cdd09ddc40d8adaacf55e69d167eaae88ebd9ef381b48a096fb191e3a2114daf70e7cddee03dc246a61032433e86c76b5ab60f93981c59998b415627f50d53247611400fbd18c97a471a59d11010842673791f32dac7ac26697971223e4bc4e05aa800249d03eb2bec4eb1ef32f31a5542ebeb96d6120f7fb36a59b16bee6a6856e97f2dfd4d316018989b30d05db7fa2c43a418473943ca882973d89808cccd5c91ba1ead6ffb4cd801adf251aa7b0e0c0e86f5b6ee0e633090263cba782d18718eb13250e021ae9a5282aa1e9ed6501800a5925284b9e0c8ccc9750685e688c189a66794cb61705f8612c28b2254e5edcc301f5a53392855702ad70254f01132f03d7abc11ecf701b38bf9f9520115eaf188892fb268f8d8474564e6e88a16fe4b16d883f0a40931179a0ef38b7e55ee0e65edc78357e690713a075626a56c0e7e25fb8d80a4dba95984f24745b3c01a5e4123b6b6cd30c3b2a7bd1f280c8a9374046acbf09de7d4c84a85332cdf2d767020d14f40938b1e969207de1cfe86aa08cfaa995644d44c8652f5090bc7055e9330513d7937b5d566de12d2e71539dd52e37d765c454a86d388093ef400ca10ee3c406e54131f0601916b9af9088524159abe88843a92b9daeb3c6aba99f66062cd3fb53e21bdc4f4728840eacd613fe03cce615335420ffc3d703834e56c83e42e0163e4ed6f40c4f07b876330e61fab9875f81de65ea5a3ea0c714153799c30fd992dad8b0701694a885952a086c209354b72dd23c6c4afd14cfe3852e2340ffa12a1b4ea98454be14f20b8f0a0f46ebaad476583b20cc8d7d15cc7eb072c771bbbca059f1460bd0d0115299c7190b83a920c54518c96aa4fce3bca108b382277961f4609fda976abfc9670dc4015444f110f1187499b40d9d08e9588493ca99c57b6e2efd02592ae47f25c303d169e92fd69f6e38ec02f47ee23671d98b2ec85be351282aeb407f5c654f3e46b722112d95449700f6dc7f0d46ea55e5b711fbc60d087f3edfd138c571ac512e0dfdf90ca8cf6ae4a46503542d608e4e9b4e3f883f7a51dbd7b73c4c579050241fe3df2cb615f21c570eec74215f2713ce496a15f54067126eedbd0a474ae69c5085d734e895f5c1559940359273fa2b88777ab87d03ccdec939e14e7d2e4b1246bda678eee03353a2e681e6c6185aede7d247e04f0709dd922379fea365ce91df759e1d7ddb6fc90c7fca70663164f876329316a54755d39d3dc0f26b6b5e10ec64f0afb86b34f3b153385af7814d6ca5e7b2216a4670827bad5582ff7340186c7629529e86bce9929aa94f58da62c4a9b67c259a42737a73177dc67162fe1a10cc75741bed2fa67770e8d38e334216adb93026219f7c49e95ffcfcee15d2bf86440ba45b7256c307440089552d1da61840030ce33c4ac73b114730839eb42b24ca8516ee03cefa490f38d03c979df233", 0x1000}], 0x5, &(0x7f0000001fc0)=[@hopopts_2292={{0x50, 0x29, 0x36, {0x73, 0x6, '\x00', [@calipso={0x7, 0x10, {0x2, 0x2, 0x61, 0x200, [0x380000]}}, @enc_lim={0x4, 0x1, 0x4}, @calipso={0x7, 0x18, {0x1, 0x4, 0x4, 0xc, [0x2, 0xf01]}}, @enc_lim={0x4, 0x1, 0x2b}]}}}, @hopopts_2292={{0x1e8, 0x29, 0x36, {0x29, 0x39, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}}, @ra={0x5, 0x2, 0x7}, @generic={0x8, 0xdf, "dfa02850059039d1180a874b447884c21d9b5290d6f19a8150ec061acb0714b9486f672b66878b5cb290928798c382904e082a6b4f7d23b2e0de31e6f2f77703f4636bbaa2f2a27bcf2d609deadf5b3ce518146183126bb29d3845d6697b8d093de22fb13a9bf7436af2ab4117391316fdf7fd05e6479a66891f0987138a6f581d31297faf1931ee10026fd9ab527437c92f902967f5783f5aed256967162eba3bc86c9d207bdd541445313e2aaaf83ebffc7d6b907a97a08b50ee035b1d77c964e8e21230071ff74a9c8901a2f1af553614f1ee25d28de45b691583db208c"}, @hao={0xc9, 0x10, @private2}, @enc_lim={0x4, 0x1, 0x8}, @generic={0x4, 0x9a, "850df60552b64ee8c940dbe1f5db0b8cf955eded2b2337c6ed16e17820d5bac3ffbcc24893c3054e10564dfbffe9cfbe2203e03ef765f4fbfe5ab69fca562e44c174732ef970e28ea2a114b3c807ced01e0f03287ffbaec261c08383bfd3d1eb07ea19ae634406e43fb3f87aa50b7fcce12258168de7fe429e6f3e5d763c273388079c2a1d13158787bb8fc35379fc78265f06ddb371a80dcf74"}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private2}, @jumbo={0xc2, 0x4, 0x4}]}}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @hoplimit_2292={{0x14}}, @hoplimit={{0x14, 0x29, 0x34, 0x7f}}, @dontfrag={{0x14, 0x29, 0x3e, 0x20000}}], 0x298}}, {{&(0x7f0000002280)={0xa, 0x4e21, 0x8, @empty, 0x9}, 0x1c, &(0x7f0000002380)=[{&(0x7f00000022c0)="3f4dae38384da86d3dedb9ea677d45748ddafeb2aee17f0386aa1bd63edcea16ff121324a8a015c74c1a8dd57f5bf28ac282ff621efba554", 0x38}, {&(0x7f0000002300)="f0f9827991fc7645f86b46ffab0277be277e3ae519f90d0de64f8cf491b6a5fd33da0be4ba9c42365469dcb41c30b326baa88d04b4276b7d5c1488a1d210fb96d9e677091a866d8663f277b0f3044d41a023ab10d86224d8032335ae", 0x5c}], 0x2, &(0x7f00000023c0)=[@dstopts={{0x30, 0x29, 0x37, {0x29, 0x3, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @enc_lim={0x4, 0x1, 0x5}, @enc_lim={0x4, 0x1, 0x1}]}}}, @flowinfo={{0x14}}], 0x48}}, {{&(0x7f0000002440)={0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80000000}, 0x1c, &(0x7f0000003700)=[{&(0x7f0000002480)="5cb20062a87814f818adc151a6cbbde4a0fa885ad5d696c8a5fc7db986838cf1bdf0d89bc1dfb31ac9c33dee1e08d5e509feb038e42151703cbf3aa82754bfb224821af7a7ac6a0519589fd44ae619b564569eaa7a0a91dc67286ad9df3f7144584cd2fcc6820459238ab30cff0171fe9bc1d9dc94a999", 0x77}, {&(0x7f0000002500)="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", 0x1000}, {&(0x7f0000003500)="18545e8e1fdf0072001b96", 0xb}, {&(0x7f0000003540)="c79212119715d7fe3b13f79a3bec3ed8392eae823ff6eeefc3fa60ea47080f20dd78b8a1f658893cae8090fad53af385491c5c93fc74e63490d3c0eaad34406a4d659c8a091d804c427e9c7b6bff0a3b8ae42739b2af8cef47116cbee68805f053d5c7df647f2a9a0d90dc1babc2ca0239ad21229465ecb35db307f18a4e9ba5295e6d1c4278bfb11ad4fc7623b40b1fe8b9b05ea9787dca441b", 0x9a}, {&(0x7f0000003600)="2817e3ce4cf4c43eb1270b7306b0e4e47dbe734ba6691f5f28a6884190229a37909b328a96adde4c85ea5039867714415d6871055a6562fabd2b783cb5d7a51f0cf59d0e81d7a394b831d8f38dbb4c50d4f612c0f7aeb89b4cc8b528b8a2a3cc27d50d7ec8d657ea08c089cde01c", 0x6e}, {&(0x7f0000003680)="0365e318037b1269837f87880b145fe7927c42fb8103511850c1fb4a9852adbd2a2d2566aa8ee9d14c15767c408ac9991b6e1762ffeae1f0a294018b4aa608f6e71576dd9813a42dc6c85e3a7273c5828d407c2d9ac8b4eb433c39f97d0a5d53", 0x60}], 0x6, &(0x7f0000003780)=[@dontfrag={{0x14, 0x29, 0x3e, 0x10cc}}], 0x18}}, {{0x0, 0x0, &(0x7f0000003840)=[{&(0x7f00000037c0)="a45c100116933727f8960de0511dfa74988a5cadcb32da130c17b188db6bdcaf4f81093e4bfb1df63674162167e62c5f422b3cb727d6a1f6d2afb4e3f1ecd272b3d58c014cd7b0d530ce247093267952ebeb5f8827fff31b2d24ab7807beed236adc5ce3d31b3b38", 0x68}], 0x1, &(0x7f0000003880)=[@dontfrag={{0x14, 0x29, 0x3e, 0x8}}], 0x18}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f00000038c0)="08dff2ed1b6cebfabf59843920eb18f9628c53b2469d5877f3bf9f6fee57c87818235a436f2c4b231671178404fae791eea6374a2b8666243f7978d516320c3bd4f6d4c8c3e04484d4505dc741f34aef4d96f9a1c896a0830c317a2fb65d7800cfa20601a6e0250e91afa788ef2f297b2c02db56d4ad5f045ac66f2aafd9bfa2da063799e3c4136c731dee0ee7c8d903fbfe57542ec80e4138c38501ef0c76fdc8c7fab881bb14918747d9351566ca4b7f1c92a8931d87e6a6669476babcedd7ea6408a232fca96cd68034090ba1375170ae86aeca60a5bbee0b20d5f72167398b0d8837c0aebe2fcc", 0xe9}, {&(0x7f00000039c0)="08a200e7b00eef299bcf2d12ded6dc1b3a055c51e580543206d6c49d05b424b58ecd81e0f47ce6a2d2ffeaaa6e0a00ee597f13be81a31d764c7e2df3a97e564d4d3bdcb2c951a9d258b08ab3951bcc7ce7ffb712092a5c0ff0", 0x59}], 0x2, &(0x7f0000003a80)=[@rthdr_2292={{0x78, 0x29, 0x39, {0x2f, 0xc, 0x0, 0x9, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @private2={0xfc, 0x2, '\x00', 0x1}, @local, @private1]}}}], 0x78}}, {{&(0x7f0000003b00)={0xa, 0x4e20, 0x80, @loopback, 0xffffff81}, 0x1c, &(0x7f0000003e40)=[{&(0x7f0000003b40)="9983999dd1992618727a98dff7612ab04f2584ebd0fc1991c952445f89b1fca6fe257248b9939114dd57041c589f152723942e3f6ea73114245e85ad9050e9e32cc6068a8461872935e2798219131f23936730d60eb49f6083a4961711ccb8a4642e0d07d3d5dafbbd26a1b2773a0ac22d57e659860079481cf46a536dbcf0fd47e0616db6a322d6c62b9a85c4ecbc1c22e08cf0a657c394b1", 0x99}, {&(0x7f0000003c00)="e0a5a746956ab5d5753ad0cdf776544b5f6e77d700f8285fbb1af34b507ec3aa766d79348219891f3094f31d06b59ffc000d74941bcf68f898d6a19ff82896389d0cb03530fae8a750197f5ce4e0f24fe56157998af8cca6eb92875332ffb56dd158d46bf971d9233a3cc606389e14b13015568ef760c58ce8c1e7bd1214432e7f7b6e5b2a7fdce264d1cbbb97caf925849843ab4e8715a27135c093ef342cb27c5df9dc964d4308fe1082384bbe4249c0fcc307d23badcf64875d85808a1141915a4be3a995573d4d0b7d675b3c25512ca354007e994373d21f54f78e65b9be3a5ee17056a4", 0xe6}, {&(0x7f0000003d00)="5debde50be2767fdda93713151eb02a40814d05d75f6fb2b7fdbc73cf7d8ad58dfe2d11ce832f0a410714af7ef7257d55cebdebd21122379724d4eb41b332ebb0cff739f82849a", 0x47}, {&(0x7f0000003d80)="2e5837a857a010896f04a8889fe6aa7c7f940928e70b575745bc6e75156691b62e8b7d48238403e3d106b738a3d999f6736506e0cb5dfe9cb2af41ef00012d19236649e9840d78508e8bc8b328666bacecd604e0a2ccfb665c0cae59d8ebf50bf9557b067d489e5b683fba653666ad0bb773", 0x72}, {&(0x7f0000003e00)="3b1e30741dd69f60466ede969e887b45fb0e7458891b", 0x16}], 0x5, &(0x7f0000003ec0)=ANY=[@ANYBLOB="a00000000000000029000000040000001110000000000000026909a3bb0b9b092d802839669c46baa09baf0328495226f0e2fc076333314f9282125d5085040585e47f4a79710f3dd56cb7b7e6bdbf3738db70632c314ab3d7f80f0e4aa36f2f6ccee662f7406575b2ff44bc5cb4d67905f6452cb058a8045fd38a5e83357ba59b75b9c91000000000000000000000000000000000c2040000000700000000001400000000000000290000000b000000000034d30000000098000000000000002900000036000000110f000000000000c204000000ffc910fe00000001075000000001120b0c00080000000000000001000000000000800600000000000000b8fe0000000000000f000000000000000200000000000000010000000000008006000000000000003cd7b73d00000000c9100000000000000000000000000000000100000000140000000000000029000000340000000800000000000000140000000000000029000000080000000100010000000000280000000000000029000000370000002f0100000000000005020009010600000000000004010300280000000000000029000000390000000402000300"/464], 0x1d0}}, {{&(0x7f00000040c0)={0xa, 0x4e23, 0xffffffff, @empty, 0x4}, 0x1c, &(0x7f0000004300)=[{&(0x7f0000004100)="46d398da3b925332c8f622667b45fe70572c1c51498ee390cdb1bdcd7f1f2cb47bee8ffbe50740f7c1b2b2d5c518896a5a2e4c0487a91bf1df5e9ca19b042ce8115d326fbc78c8", 0x47}, {&(0x7f0000004180)="e60ebe1e0ee83ff48c1fb63ebc171913a4da8f71d3cce9d1430cfabc49660f9345c5919a59cc676b039537ce51ae21a008f1eaeff8662c58ce3b0b98281b49338efb5a7e7b0a5f9f25119ebc21a8e5c4e96fb60d5b7be0a9b9d3e447092aa3709a00ccc9ab5db25a94d1e32608d0d0b357cdfab74d889bcbb6b83c61a7597a9901f780d6e3e48e30ac9d900cfd76457621a363d3459ed23f4021f1fdb92ed24fa075aac63346960e", 0xa8}, {&(0x7f0000004240)="f4c5bca7ad55603c1d32df900b6db121625984546e61ee76ea2dcd53fd47926651ce71623d13f805dc8b6d4eedcba4cc8e89f104253bd97754eb2b4ad97afbd46570cb9791b2cb3ecebc4576f5377a85afe3818e26183c3d4a08543263832351b9802c98b3f77990d17c5e6e43f911033689358929507a464629ba8aa9087ce76a20769859471cbda1a8a470d79a70631d3149ee8616bbf02eac551b02d1", 0x9e}], 0x3, &(0x7f0000004340)=[@hopopts={{0x80, 0x29, 0x36, {0x6c, 0xc, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @jumbo={0xc2, 0x4, 0x9}, @hao={0xc9, 0x10, @private0}, @calipso={0x7, 0x10, {0x0, 0x2, 0x9, 0xa, [0x9]}}, @calipso={0x7, 0x28, {0x3, 0x8, 0x3, 0x0, [0xfffffffffffffffd, 0x4616, 0x40716d30, 0x4]}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @dstopts={{0x38, 0x29, 0x37, {0x3a, 0x3, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x7}, @ra={0x5, 0x2, 0x8}, @enc_lim={0x4, 0x1, 0x31}, @ra={0x5, 0x2, 0x1000}, @ra={0x5, 0x2, 0x8}]}}}, @rthdrdstopts={{0x11a0, 0x29, 0x37, {0x3b, 0x231, '\x00', [@jumbo, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @pad1, @hao={0xc9, 0x10, @private2}, @generic={0xbc, 0x1000, "ac101c8a6ba9e9a3c237cc035d914e28ca3ebeb6a5eb4922ba1973be8f41d38a8a9442a0e6c656e746f6d09a73faa5a91aa4ee842862e1284a2e0c35470b03d3bddb21197e0f10a88a28b1bf1c17bdb34d718e4cfbb5478159fff60cddcd1bf3cbfafb004370056aa2dcbc6519754d8cd1a7b32fc2aa516058b99ed488e5bdba27e6f1841d608678c5c954451ab69eb42e236f903315092fb9513bda752247d47b963bf725d4d813a9a25da2ea452269b94260789336ba2b5f2a6095e5bcaf69da2fadc997e83de6aed32daf95bb9e99c1843b0d7cd174ba808b366adca5101bc0873e9330544008046814bb821467e68847e6400ab1e29aa827c7a0da98d41c1c6c34bfb9534e6d69abb1144407e3d9ca5e317fe4effd5705b1aeb7302ae44c6f5ca51084174d8636b31e4f4afd8fc0562f61d02ad8cb7b22206d24859e457e23167953f5f4fa72db156ddbf18c81f80a3761d1fd009d37c1c765fcc77149213771c347cd274efa78d28fc7883c3b5eecddfe328979f92eba1c23028fd400f7954d8f1e4f3842aaa775763f7c2d56955497490fb6664f0d8f80ba83f170d2a1860155c0560c88fa66a82020b7756222193c1d93e27cd1da409de80606a5d2bd222cbaa3b95f49ad38995979eb34e1ff2390fb602e6fa4165104f57d21f11b85fdb98f35cd79fcc99bdd854f5211fa95b8fb8c6a867f1473af99f8defc4213d562b9d1f157c5760c2d7361259de9df33e6befb4c2decaa54a060f3e5171311afd87633a979056e920d99a96f391b3ecefaf78f830b16fa12371df094e4f145b6b59a80e4e074e07d98fcc6c06293571f15ef0a0ff9b50844e7d227952ebfe92e0927c2cc7ae7a3606e8dcac38d16991360f527683316490813eb901f085cc7c6f32f7de5f8df6040248ab797fd347d1a9c83d1b78030608dd8b4aabe4b8000137176b1c81fc70ed9364140d79aaf241f12144e50769e8de2f95db5feedd3682d1d153c6003e7e673b7fc02017b5432a364d65c7c4e0bbfa167d66de15fa9ee08e6151518c0b5e76ae0a54a1034c0a549a96d49c24bd6a8b61ad7b7fb729ae6762bf3f3b13f5e92be150c3be2231eabcd17c331652811f1d5378e0847e14c52b962948893346ad35928cd1089a0b5acd2331383b07aedc0ef1e440486154937ff56398bc0d84c1efe7a4cd872a84bd8cdfd9bda8a95c30f88a55f9ca15937b0738b4aaec362472371f098e76c9c1299b48c3aa6a7bc783ea8111d44fbed726309700506ab7f809d7fbb313bda1c981c1df554ffa7bec45b836092ae3c3542b3a03115d6c7ab7ba33ca2468f9c4acc780a4bd247afc8bdfecfa19c3d0848e4d05b91d65c1b77c49806b589243e3a2932550b1c47c6d9fd15a190dafe91d57b4bc7f1f3f4abb590b56716de15ea0eb53e43a03024cc7e0fc377eb9b293c8106622b4bfe2ea0ced4d10f5f3bf76f71d4bd00b24887d52e1138d35bfd124288f5dccefad267ebc571bf296f9007f47cc24c764a5df4b702d881245e1e4b327abc3baa8bc348512977b75bcda494579810dfeffbe2a3113fedbfcd97732ad5b4bc203b86cf8d32500bd03dfb0684398a386a97328696dcaf0d9cc3d1e37efe7faec1712ac0e320ac2b0a4c42bb8d7e162c415e01008911c27993d59dacc51fcc614ed2b77538e01c9e42f47f275211d08d62c88f3b25d07cb3bf8a0ecadbbe5c34fb81310e9fc2966c1d6d5d6c5fcb1fe2f83051b83e8f32c1cdabf245a92d9a01ef2584890140a63a3d3a2b4771fcc65396e74ac3ab75dc161d8e1bc19c606a0ec8afba52f844938de9f9b82b72c4eba5267540994fa43e5cb6cb6c143ae442d902db15efa98bbd1585efcf5dff8e96bb9840a4564eb5f6841226ffdd71669d6bcb328b6076b46cea4362caa82e80f32005e417d5869427d12dd232849f06f27e860ae3ee94e370d2abd4dad3554df4608938feb834b54441e107cb044e6685ddf2cd2bba1aca478266c491e26d1fb42b81f584ae705e0d6c1b28914741a2c74e2b98978cc0615ee0780e21761e6e6aa52f4c6e9200cea42c26e7531cc9ac498000ed123efe8817a024b023f63678d0f6e988bcd8b55b3ad4152e8aa2674c3d82ec69365764bd0fcf4189dd2d20c6c6b71fe47a8431bf0401be9eccda84a73f79f3c7fd218a56f07f52c0d4aa5ee62de31814820202c101915d8b95f633bba8bb00b84b9cb5c769d7626b559052750e742f0ef75cb58388d3b616caceefd50ae2828a3499020446abec280415c87f1bdcae6c62b02cf5c430612efdf3e4b087554c50e345765468f9e08c0d2af310dbaf7e39536ac4c3f5a8a506d2ed15de43d02e840a66a3f926036a5097d2f9ca29d1533d2b1f711ca3c8a7c4e2dd14e7dbefd60cb8cdff9ad5c5c8e8cc259edab2a63d277b3b9eff4e1dae0f814b4bd22a8be0b61cfbc450d9746922eed85653e4b4173274a91aae95b464f694a1f4b526926714489ff96286442158ea17207e787fe1ed69bf692637a3a4de35a34ced281589d65ab3654e5e46f53ec61fec5434a142830323f1060ab00a608bb069bb1b28654a2221c4982e1efebbf7f4c1529ea1ec5270892be788368254b1febeec76fd99b497f89d5cbdc60de25e3ccab628a1cacd4ddf0edf1a643a07e9a075338ee48c69bf5bf4c083ae291a5970b8cf56aeca8cea32eab5b11ec44da1480f36eade8a9429fcf681d87a987464d17bab99dc10d2da591b997e392a6a2e09389635f504de9da1d4de06e62a716c115d0707e0d4eee23e61276b0397fb6c6c2c905939b121150f1e0ed2f9f289e3d7993f33b3c4df6e50b10892bb7b34263c3edb31d78143ed8e736131fc78f5d801c0a9e1a888ebc2b9fe07cfa16db29f2cbae8cca41778792a20c707afb1c5545411b7925761f8685b81097a842e495a8fcc35d5358e55c201ab09a72f602d57c1283ab105b12223d87dff6d434d885d5f41ffd58a0a22a9d5473bb7cabf6081d2c484a495e11439c8b8a15d7c64dabde2e4092f1c68c7efd736fe5e6c250eb24887a316a7f80e6bc11cf551e039bf108d2c618b57661528a0f9538c138a19def3bd1daa1aec82f1df7f7e558f90634253a6868e1c66446bdd5d62456b612f7ff6895473e461668fca97990e6814286551c2e45d5331b7345893c9204c90a525607d0840d873048bdad313b67700c476f8b5dc106138ce45124ad80cfd0b13071f0768ad8414ad625fab162ad8c05bd2ede99b98b8b441b9c253d3cc97893ad83e066d8f0acb92b417296fe5b5bf3211a0273b43720d7df42dac5b7de3a61c21b0e2b1e9ed6802feddb041bd0b26f5cf4c774fcc1819f9c11c3a03448e9c37a07edeba7eb77873e112fb7ede5ba8f503cebfec992e6c3cc79e1616e853ba2afaa93719aa729f6ceae1de40af68cdb0bf1b03a3cc7cf21b30305a4b14509c31b4d2e0ca0277a9d69e5488828a0f683b179ce0331a44ce847a8e3b3d456372ef9f0d09cf2758e9b3247abc77c67f734bd0f5291738ff4d21c1838a1a4737836e981d20189327e01ce91e0e45e8e49931ed349768e6cb6c9c01825cac8e4fec6496f2a44fb82034132761acc91136673a1c3fb63c5db163b24f373db2fd55492d6d30f5f07c6da697801beabfd76393f6a605ce5fa6402be1a2d225fb69d83ea209abdf5aef07517ccea5363e16f917cd59608c14886b305691723ee13d3601fef68ff559f75504dcb3c0240aa5b1413b645a66ab5e962ff19d02da032e9021fd4914865144fb26d59748a7909b179d14b9c6de0d4e39c7616e96ea85700f962471e756b4a87d9e15f3ad2fc78f62d9fa90f5d1b5550c9a52ace6903f4c4a6fea0ddc2184c9fc58074c333098b9a93e2fd1841639eb9020d98a5a791be3eb8e2593579840be310db9e3de79dcfb80f793fbc47eab6ff93c09bde3729a5972fd7825aa514182d24d5d7b8001b13b1fb32fb73d78326b1f65a0f085c4f1347366e630a6942a21bf18f27de6d04b1a117dae7e2f155244ae24daef14e40a0b6708b857230d0e371945b7bb75e6dc73699db59bbf87efbb27d5978e197d433b210d1eed60c83a989d1993b53c8869b9fd91d4ecdf2b8e11ac96bd9f0693f0a22feb1a796ac7f6b52a28e309c771bfb8eec3339d7050c9c452791a0243a325744134bec59c78c8fab73bc53e1ed7a89096056570e93723ccc27760322eb174562b9a79786faf4f6dcd807b65a7656e9bf53f73b8cdc9bbb2363820a6634a18ec73d438d8099dc1ab8bfc0bba689b2884b19b4d4197fb65bdb04c3eea3d298d2c97b1ab65db8f802318d0db5d4565fca9c1ae151405de6c865057c8ebb6bd4615ad0e533cc10ca08b55d2891aadfd8a71a7be36dc5abdcc296ee0d976080017839d7f15cc9e47a87924cb0df8fe59cdefa599f6edee8bf3d9a3b546391722752c5fcd33a83f0e4010ef3afdf93ae28e7aa25c2a5ea49d25ebfc5068cbf2ee86be032afe04e1d0a8fbb74317d889c56b533525921f48ca6e37e10bcbb62fc3db97f791cdde7dca40d015cf47bf3982b91f8c0f8d1f51b000332b0dcd387dff14de9295fbf565422f78d09f2a20563856259766fed3df1a0ee69cbf1e7e3faa93ffbcf389873e1e0db6d90bd0684ef4e53089888effb716ecfa72ed6aa1a4ed0b381ad50d35974ba4e35bc63feb1a04b8f0059242a13791e58cbd6b7cc1ed84b24719abbcf2368aa868de58a4fb1c4f77f053dde0d752fbf830ab2e5ce493c8e17600cd528d749a7cfe3728c3b7efe4fb987a317bda4a4ab7a1b62e88f16b98b23fed1dbea13f300dc6260131c73ac95d94df8e857121727a5f768f2b82bd2c1702e0898cd0f3cebee503efcd4f9b3d09973bb2a92e193415571f91332bbd94d1d25cee7db52c5601877d99c7409d0c374435ad2c8c656d8667a6ad5d613d7cbddb2cabfceee78c499d4dbec209c1e7b811706681db21f354db0f8e3e31b446da8611b2e0689bd6d0380e80c9e5f0ff6382c2ef91fad807e2602ff30e130c73682764484d2b777f11a336382c88784c7ea13d8045f76dba17675abcf96d9d8e5ae38a7f0ab15187feb30d39d024275c1fa8868c6489bbf13ddea1fefe0746353beac48cb5e97513a6832db6e8c57fbc4c92124e0fe989da582d4a751200e17d11934a26975769cb6ed071918bcd57684274ee0332c47fabb65e1defede78580de0ba232cb477ec1fdcf3200aad87f479ebec01665e78ec0f82dc5dd66d550b3c1a617517e4876c2ad3a222d8a31858a83766c53db6c411f30a53dc3d2df621238961268556c9ba67e76a2a3a69843ccf66038560aa18c0d7746eeb689b4f747a5bb3c6f6b63acc9ef0b1f2667c8f61f9a0faca3d12932090db144d937f8a9cb975b138fce0fc418d8f82f77b34796c693f536f2679fdb78b33cb10370a9888d2b10373876ab3a9c33e80684dc4fa5f3b4f24a8853eacb5f6d9b732bb710cfba5cdc9b1014a2a7c9a816ea71674cfc2b65c572528c6cff610e197098578db38bf467672083a6342ebdb3f389612c059a6d16258cc7cee84f582c3bee53795209af5c1faaf5684f281394b7c1ea0936fc7132e9820a1d4276f2a8fd8fe43ea061be9e8c13a4da820abe2f56899555ba4c4c3cd8922bc9932d636368ab1ef5ca37ca70932af41a9c4fe657a76e8b0da9c0a7182598da76de1506f406ce2663c45bced6eac426fd6f4bf27b35bb0525f200dee16de59d8597c1210e9d5352245cc7f2f7fd2959fd7f34918a4a0c1ad405e010cc08401c337d4b807ea58dd9"}, @generic={0x10, 0x4f, "2b251600fb730c3191409f9b77b814979f8e78427745b591967f7ac5a42bf1eec09b987b1b3c10a710323d1ecc2d0aecaa8a2ad80af88574c06553c90ec07e03ec100544529c20d0d9312d31e8ad17"}, @generic={0x5, 0xfe, "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"}, @hao={0xc9, 0x10, @loopback}]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x32, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x6}}], 0x12a8}}], 0x9, 0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005880), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000058c0)={'wlan0\x00', 0x0}) setsockopt(r2, 0x6, 0x6, &(0x7f00000059c0)="a744b84e1fa1c0bcaa1a0557186ac1a867b382829d37ebbb036974a3298d50c273d458895898e970273a9b83759790caceb91a860128e629ae046fde", 0x3c) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000005980)={&(0x7f0000005840)={0x10, 0x0, 0x0, 0x80420}, 0xc, &(0x7f0000005940)={&(0x7f0000005900)={0x1c, r5, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40094}, 0x20000010) 76.480079ms ago: executing program 3 (id=2057): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60, 0x4000}, [@IFLA_MASTER={0x8, 0x3}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}]}, 0x40}, 0x1, 0xd, 0x0, 0x40488c5}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe30}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 5.973582ms ago: executing program 4 (id=2058): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00001000000000000000000000000800120002000200000000000000000010002f0003000000000000000000000010003300000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x80ffffff, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_x_policy={0x2, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private1, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0) 0s ago: executing program 2 (id=2059): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_x_policy={0x2, 0x12, 0x2, 0x2, 0x0, 0xffffff80, 0x0, {0x6, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private1, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0) kernel console output (not intermixed with test programs): newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.252864][T11073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.263712][T11073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.274430][T11073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.286095][T11073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.303535][T11252] lo speed is unknown, defaulting to 1000 [ 237.319227][T11073] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.343600][T11073] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.363630][T11073] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.377103][T11073] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.575816][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.585962][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.745281][T11269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1306'. [ 237.771556][ T3436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.795588][ T3436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.027268][T11272] tipc: Enabling of bearer rejected, already enabled [ 238.559367][T11301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1314'. [ 239.420759][T11312] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20002 [ 239.485230][T11311] "syz.0.1315" (11311) uses obsolete ecb(arc4) skcipher [ 239.725390][T11318] netlink: 'syz.3.1319': attribute type 1 has an invalid length. [ 239.838085][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 239.858050][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 239.868292][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 239.885697][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 239.901420][ T5853] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 239.911383][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 239.997273][T11326] lo speed is unknown, defaulting to 1000 [ 240.004243][T11326] lo speed is unknown, defaulting to 1000 [ 240.049076][T11335] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 240.245359][T11312] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 240.282262][T11326] lo speed is unknown, defaulting to 1000 [ 240.297870][T11335] siw: device registration error -23 [ 240.324935][T11347] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1326'. [ 240.639766][T11366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1329'. [ 240.695954][T11363] netlink: 'syz.2.1328': attribute type 6 has an invalid length. [ 240.763090][T11326] chnl_net:caif_netlink_parms(): no params data found [ 240.973090][T11366] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1329'. [ 241.237575][T11380] wg1: entered promiscuous mode [ 241.242528][T11380] wg1: entered allmulticast mode [ 241.294112][T11326] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.316865][T11326] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.337899][T11326] bridge_slave_0: entered allmulticast mode [ 241.368433][T11326] bridge_slave_0: entered promiscuous mode [ 241.377216][T11384] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 241.394695][T11384] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 241.501679][T11326] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.517917][T11326] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.527489][T11326] bridge_slave_1: entered allmulticast mode [ 241.534706][T11326] bridge_slave_1: entered promiscuous mode [ 241.828649][T11399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1337'. [ 241.872405][T11326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.911582][T11326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.008263][ T5853] Bluetooth: hci1: command tx timeout [ 242.056935][T11404] sctp: [Deprecated]: syz.0.1339 (pid 11404) Use of int in max_burst socket option. [ 242.056935][T11404] Use struct sctp_assoc_value instead [ 242.164729][T11326] team0: Port device team_slave_0 added [ 242.206302][T11326] team0: Port device team_slave_1 added [ 242.315568][T11326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.333936][T11326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.374332][T11326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.391698][T11417] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.457676][T11326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.471935][T11326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.546292][T11326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.603016][T11417] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.804286][T11417] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.909468][T11326] hsr_slave_0: entered promiscuous mode [ 242.931081][T11326] hsr_slave_1: entered promiscuous mode [ 242.947866][T11326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.966224][T11326] Cannot create hsr debugfs directory [ 242.996955][T11417] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.044990][ T5853] Bluetooth: hci4: link tx timeout [ 243.050938][ T5853] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 243.242070][T11417] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.307266][T11417] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.348556][T11417] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.417264][T11417] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.772427][T11326] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.845099][T11455] lo speed is unknown, defaulting to 1000 [ 243.883577][T11458] batadv_slave_1: entered promiscuous mode [ 243.907902][T11455] lo speed is unknown, defaulting to 1000 [ 243.947207][T11457] batadv_slave_1: left promiscuous mode [ 244.064900][T11326] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.088295][ T5147] Bluetooth: hci1: command tx timeout [ 244.212423][T11326] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.243550][T11455] lo speed is unknown, defaulting to 1000 [ 244.318793][T11326] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.559384][T11487] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 244.597221][T11487] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 244.932582][T11326] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 244.965011][T11497] pim6reg: entered allmulticast mode [ 244.979386][T11326] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 245.002957][T11326] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 245.128627][ T5147] Bluetooth: hci4: command 0x0405 tx timeout [ 245.141274][T11504] xt_CT: No such helper "pptp" [ 245.221502][T11497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1363'. [ 245.327019][T11326] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 245.387743][T11513] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1366'. [ 245.609981][T11507] pim6reg: left allmulticast mode [ 245.693338][T11525] xt_ipcomp: unknown flags F7 [ 245.727226][T11516] syzkaller1: entered promiscuous mode [ 245.743062][T11516] syzkaller1: entered allmulticast mode [ 246.133014][T11326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.169940][ T5853] Bluetooth: hci1: command tx timeout [ 246.201108][T11326] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.232548][T11545] 8021q: VLANs not supported on ip_vti0 [ 246.253433][T11326] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 246.276790][T11326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 246.326419][ T3470] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.333650][ T3470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.388517][ T3470] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.395736][ T3470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.482158][T11551] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1372'. [ 246.770719][T11548] vlan0: entered promiscuous mode [ 246.960952][T11569] netem: change failed [ 247.189587][T11579] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1374'. [ 247.224002][T11326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.286940][T11579] netlink: 'syz.2.1374': attribute type 9 has an invalid length. [ 247.294750][T11579] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1374'. [ 247.345782][T11582] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1377'. [ 247.358971][T11326] veth0_vlan: entered promiscuous mode [ 247.378809][T11582] netlink: 'syz.0.1377': attribute type 10 has an invalid length. [ 247.412325][T11586] batman_adv: batadv0: Adding interface: ip6gretap1 [ 247.419831][T11586] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.454243][T11587] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1376'. [ 247.507184][T11586] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 247.542457][T11582] team0: Device ipvlan1 failed to register rx_handler [ 247.599532][T11586] xt_connbytes: Forcing CT accounting to be enabled [ 247.633665][T11592] netlink: 'syz.4.1376': attribute type 21 has an invalid length. [ 247.643949][T11326] veth1_vlan: entered promiscuous mode [ 247.653094][T11586] Cannot find add_set index 2 as target [ 247.748947][T11326] veth0_macvtap: entered promiscuous mode [ 247.778508][T11326] veth1_macvtap: entered promiscuous mode [ 247.797785][T11326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.828849][T11326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.867183][T11326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.899927][T11326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.933302][T11326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.957141][T11326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.015531][T11326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.133233][T11326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.177508][T11326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.206670][T11326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.233073][T11326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.247932][ T5853] Bluetooth: hci1: command tx timeout [ 248.254375][T11326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.276146][T11326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.329664][T11326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.482004][T11326] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.543477][T11326] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.577123][T11326] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.596258][T11326] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.706706][T11604] lo speed is unknown, defaulting to 1000 [ 248.739583][T11604] lo speed is unknown, defaulting to 1000 [ 248.882056][T11619] xt_hashlimit: size too large, truncated to 1048576 [ 249.716765][ T3436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.737151][ T3436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.797806][T11604] lo speed is unknown, defaulting to 1000 [ 249.882813][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.916578][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.803633][T11697] lo speed is unknown, defaulting to 1000 [ 251.849500][T11697] lo speed is unknown, defaulting to 1000 [ 252.424936][ T5147] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 252.436817][ T5147] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 252.445210][ T5147] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 252.457516][ T5147] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 252.465237][ T5147] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 252.474019][ T5147] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 252.578386][T11712] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1397'. [ 252.587789][T11712] netlink: 'syz.2.1397': attribute type 3 has an invalid length. [ 252.601390][T11709] lo speed is unknown, defaulting to 1000 [ 252.637289][T11697] lo speed is unknown, defaulting to 1000 [ 252.644588][T11709] lo speed is unknown, defaulting to 1000 [ 252.892393][T11724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1399'. [ 252.953245][T11697] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1391'. [ 252.976935][T11709] lo speed is unknown, defaulting to 1000 [ 253.234574][T11709] chnl_net:caif_netlink_parms(): no params data found [ 253.293196][T11734] ip6tnl2: entered promiscuous mode [ 253.324612][T11734] ip6tnl2: entered allmulticast mode [ 253.344342][T11739] bond0: entered promiscuous mode [ 253.364190][T11739] batadv0: entered promiscuous mode [ 253.379654][T11739] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 253.416753][T11739] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 253.468041][T11739] bond0: left promiscuous mode [ 253.477077][T11739] batadv0: left promiscuous mode [ 253.877495][T11759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1406'. [ 253.938450][T11709] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.945598][T11709] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.981605][T11709] bridge_slave_0: entered allmulticast mode [ 254.011342][T11709] bridge_slave_0: entered promiscuous mode [ 254.037020][T11709] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.054653][T11709] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.066695][T11709] bridge_slave_1: entered allmulticast mode [ 254.084921][T11709] bridge_slave_1: entered promiscuous mode [ 254.228706][T11765] syzkaller1: entered promiscuous mode [ 254.234344][T11765] syzkaller1: entered allmulticast mode [ 254.247856][T11768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1411'. [ 254.280577][T11709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.358058][T11709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.542186][T11709] team0: Port device team_slave_0 added [ 254.562392][T11709] team0: Port device team_slave_1 added [ 254.577916][ T5147] Bluetooth: hci1: command tx timeout [ 254.669674][T11786] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20004 [ 254.681612][T11786] Unsupported ieee802154 address type: 0 [ 254.689329][T11786] x_tables: duplicate underflow at hook 2 [ 254.697660][T11709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.712895][T11709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.774926][T11709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.808943][T11709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.815964][T11709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.922819][T11709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.935805][T11796] IPVS: Scheduler module ip_vs_ not found [ 255.054645][T11709] hsr_slave_0: entered promiscuous mode [ 255.066913][T11709] hsr_slave_1: entered promiscuous mode [ 255.080420][T11709] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.097246][T11709] Cannot create hsr debugfs directory [ 255.130180][T11801] bond4: entered promiscuous mode [ 255.135892][T11801] bond4: entered allmulticast mode [ 255.142612][T11801] 8021q: adding VLAN 0 to HW filter on device bond4 [ 255.306914][T11813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.579003][T11823] lo speed is unknown, defaulting to 1000 [ 255.645595][T11709] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.668995][T11823] lo speed is unknown, defaulting to 1000 [ 255.749242][T11830] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1427'. [ 255.779645][T11709] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.946640][T11709] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.969301][T11823] lo speed is unknown, defaulting to 1000 [ 256.048842][T11709] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.414761][T11709] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 256.445014][T11709] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 256.470707][T11854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1433'. [ 256.479910][T11854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1433'. [ 256.494197][T11709] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 256.501547][T11854] netlink: 30 bytes leftover after parsing attributes in process `syz.0.1433'. [ 256.511209][T11854] nbd: socks must be embedded in a SOCK_ITEM attr [ 256.536176][T11709] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 256.591841][T11854] syzkaller1: entered promiscuous mode [ 256.597507][T11854] syzkaller1: entered allmulticast mode [ 256.646895][ T5147] Bluetooth: hci1: command tx timeout [ 256.961327][T11709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.020409][T11709] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.099378][ T1034] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.106589][ T1034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.149239][ T1034] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.156599][ T1034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.551449][T11884] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 257.579837][T11709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.770120][T11709] veth0_vlan: entered promiscuous mode [ 257.828802][T11709] veth1_vlan: entered promiscuous mode [ 257.879543][T11709] veth0_macvtap: entered promiscuous mode [ 257.905902][T11709] veth1_macvtap: entered promiscuous mode [ 257.960362][T11709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.009378][T11709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.026768][T11709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.046666][T11709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.057002][T11709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.080071][T11709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.097025][T11709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.108593][T11709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.121035][T11709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.129937][T11897] netlink: 'syz.2.1447': attribute type 1 has an invalid length. [ 258.151654][T11709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.176846][T11709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.198254][T11709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.209100][T11709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.224436][T11709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.235787][T11709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.257342][T11709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.268359][T11709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.313737][T11709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.365762][T11709] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.379890][T11709] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.391947][T11709] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.402486][T11709] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.415810][T11902] lo speed is unknown, defaulting to 1000 [ 258.453599][T11902] lo speed is unknown, defaulting to 1000 [ 258.489623][T11915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1450'. [ 258.593049][T11914] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1452'. [ 258.616334][T11914] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 258.688486][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.714018][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.727274][ T5147] Bluetooth: hci1: command tx timeout [ 258.822204][T11902] lo speed is unknown, defaulting to 1000 [ 258.832304][ T3436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.854783][ T3436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.983430][T11928] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1456'. [ 259.534277][T11941] lo speed is unknown, defaulting to 1000 [ 259.581781][T11941] lo speed is unknown, defaulting to 1000 [ 259.757207][T11947] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1462'. [ 259.806802][T11947] (unnamed net_device) (uninitialized): option ad_select: invalid value (47) [ 259.947316][T11941] lo speed is unknown, defaulting to 1000 [ 261.103810][T11968] lo speed is unknown, defaulting to 1000 [ 261.145330][T11968] lo speed is unknown, defaulting to 1000 [ 261.183087][T11969] bond0: (slave team0): Releasing backup interface [ 261.252709][T11969] team0: left promiscuous mode [ 261.296687][T11969] bridge1: left promiscuous mode [ 261.343503][T11969] batman_adv: batadv0: Interface deactivated: dummy0 [ 261.366710][T11969] batman_adv: batadv0: Removing interface: dummy0 [ 261.425314][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 261.437566][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 261.447750][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 261.456808][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 261.466391][ T5853] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 261.474513][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 261.545475][T11969] team0: Port device bridge1 removed [ 261.561439][T11969] bond0: (slave bond3): Releasing backup interface [ 261.578518][T11969] bond3: left promiscuous mode [ 261.634693][T11974] team0: Mode changed to "loadbalance" [ 261.686692][T11968] lo speed is unknown, defaulting to 1000 [ 261.765024][T11986] lo speed is unknown, defaulting to 1000 [ 261.809365][T11986] lo speed is unknown, defaulting to 1000 [ 262.054397][T12001] syzkaller0: entered promiscuous mode [ 262.062532][T12001] syzkaller0: entered allmulticast mode [ 262.070188][T12010] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1476'. [ 262.260781][T11986] lo speed is unknown, defaulting to 1000 [ 262.394097][T12020] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1479'. [ 262.403980][T12020] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1479'. [ 262.442863][T12010] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 262.457932][T12010] bond0 (unregistering): Released all slaves [ 262.489620][T12013] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.528536][ T5147] Bluetooth: hci1: command tx timeout [ 263.600350][T12027] netlink: 'syz.2.1481': attribute type 5 has an invalid length. [ 265.041072][T12013] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.184497][T12013] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.323975][T12013] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.419573][T12045] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1486'. [ 265.470262][T11986] chnl_net:caif_netlink_parms(): no params data found [ 265.559754][T12013] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.606817][ T5147] Bluetooth: hci1: command tx timeout [ 265.617854][T12013] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.629274][T12049] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1487'. [ 265.663015][T12062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1488'. [ 265.680949][T12059] vlan4: entered promiscuous mode [ 265.692363][T12059] bridge_slave_0: entered promiscuous mode [ 265.700926][T12059] vlan4: entered allmulticast mode [ 265.706097][T12059] bridge_slave_0: entered allmulticast mode [ 265.780147][T12013] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.802195][T12013] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.038894][T11986] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.047322][T11986] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.054763][T11986] bridge_slave_0: entered allmulticast mode [ 266.063486][T11986] bridge_slave_0: entered promiscuous mode [ 266.078042][T11986] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.085202][T11986] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.111576][T11986] bridge_slave_1: entered allmulticast mode [ 266.138626][T11986] bridge_slave_1: entered promiscuous mode [ 266.263785][T11986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.294419][T11986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.409615][T12091] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1495'. [ 266.469203][T11986] team0: Port device team_slave_0 added [ 266.479756][T12091] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1495'. [ 266.501558][T12091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1495'. [ 266.615627][T11986] team0: Port device team_slave_1 added [ 266.658867][T12091] vlan0: entered allmulticast mode [ 266.664067][T12091] bond0: entered allmulticast mode [ 266.791961][T11986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.810398][T11986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.906795][T11986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.940144][T11986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.953104][T11986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.007696][T11986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.078770][T12109] vlan0: entered promiscuous mode [ 267.088571][T12110] veth0_to_batadv: entered promiscuous mode [ 267.138056][T12110] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 267.287813][T11986] hsr_slave_0: entered promiscuous mode [ 267.308832][T11986] hsr_slave_1: entered promiscuous mode [ 267.322014][T11986] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.339907][T11986] Cannot create hsr debugfs directory [ 267.423509][T12116] vlan3: left allmulticast mode [ 267.428683][T12116] hsr0: left allmulticast mode [ 267.434525][T12116] hsr_slave_0: left allmulticast mode [ 267.444151][T12116] hsr_slave_1: left allmulticast mode [ 267.468802][T12116] ip6tnl2: left promiscuous mode [ 267.473808][T12116] ip6tnl2: left allmulticast mode [ 267.494597][T12116] bond4: left promiscuous mode [ 267.500583][T12116] bond4: left allmulticast mode [ 267.627436][T12130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1507'. [ 267.627483][T12128] netlink: 'syz.4.1506': attribute type 4 has an invalid length. [ 267.686750][ T5147] Bluetooth: hci1: command tx timeout [ 268.022077][T11986] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.224283][T11986] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.404948][T11986] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.623631][T11986] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.650337][ T5838] hid-generic 0005:0C45:5505.0002: item fetching failed at offset 0/3 [ 268.704738][ T5838] hid-generic 0005:0C45:5505.0002: probe with driver hid-generic failed with error -22 [ 269.073643][T11986] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 269.099285][T11986] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 269.117708][T12194] netlink: 'syz.0.1523': attribute type 13 has an invalid length. [ 269.157569][T12195] netlink: 'syz.0.1523': attribute type 13 has an invalid length. [ 269.239104][T12202] SET target dimension over the limit! [ 269.325182][T11986] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 269.371936][T11986] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 269.768244][ T5147] Bluetooth: hci1: command tx timeout [ 269.789999][T12196] lo speed is unknown, defaulting to 1000 [ 270.172291][T12196] lo speed is unknown, defaulting to 1000 [ 270.188436][T12217] lo speed is unknown, defaulting to 1000 [ 270.283990][T11986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.364508][T11986] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.402033][ T3470] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.409273][ T3470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.460093][ T1034] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.467354][ T1034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.563355][T12196] lo speed is unknown, defaulting to 1000 [ 270.613415][T11986] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 270.647818][T11986] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 270.680779][T12217] lo speed is unknown, defaulting to 1000 [ 271.114904][T11986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.217514][T12217] lo speed is unknown, defaulting to 1000 [ 271.292621][T11986] veth0_vlan: entered promiscuous mode [ 271.548644][T11986] veth1_vlan: entered promiscuous mode [ 271.789741][T11986] veth0_macvtap: entered promiscuous mode [ 271.821222][T11986] veth1_macvtap: entered promiscuous mode [ 271.895161][T11986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.924634][T11986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.945499][T11986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.981269][T11986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.033101][T11986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.056478][T11986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.087609][T11986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.107190][T11986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.119788][T11986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.131476][T11986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.155558][T11986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.268226][T11986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.303567][T11986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.323948][T11986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.366565][T11986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.386499][T11986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.410807][T11986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.434535][T11986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.465527][T11986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.497073][T11986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.516864][T11986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.559262][T11986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.640857][T11986] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.673766][T11986] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.696935][T11986] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.708262][T11986] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.768413][T12300] xt_TCPMSS: Only works on TCP SYN packets [ 272.802255][T12302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1539'. [ 272.971295][T12302] netlink: 'syz.4.1539': attribute type 1 has an invalid length. [ 272.979677][T12302] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.006271][ T1034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.018286][T12303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1539'. [ 273.033609][ T1034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.039924][T12302] netlink: 'syz.4.1539': attribute type 1 has an invalid length. [ 273.061186][T12302] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.125345][T12308] pim6reg1: entered promiscuous mode [ 273.136108][T12308] pim6reg1: entered allmulticast mode [ 273.241455][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.252064][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.291165][T12314] bridge0: port 1(gretap0) entered blocking state [ 273.299056][T12314] bridge0: port 1(gretap0) entered disabled state [ 273.306015][T12314] gretap0: entered allmulticast mode [ 273.313952][T12314] gretap0: entered promiscuous mode [ 273.394381][T12317] lo speed is unknown, defaulting to 1000 [ 273.410648][T12317] lo speed is unknown, defaulting to 1000 [ 273.687444][T12326] netlink: 'syz.3.1545': attribute type 8 has an invalid length. [ 273.707030][T12317] lo speed is unknown, defaulting to 1000 [ 275.004464][T12340] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1548'. [ 275.039365][T12343] netlink: 'syz.0.1547': attribute type 61 has an invalid length. [ 275.071925][T12343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1547'. [ 275.106031][T12340] lo speed is unknown, defaulting to 1000 [ 275.126351][T12340] lo speed is unknown, defaulting to 1000 [ 275.141686][T12337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1550'. [ 275.246820][T12337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1550'. [ 275.279041][T12340] lo speed is unknown, defaulting to 1000 [ 275.522451][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 275.537419][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 275.546223][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 275.556206][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 275.570982][ T5853] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 275.580135][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 275.661375][T12349] lo speed is unknown, defaulting to 1000 [ 275.669632][T12349] lo speed is unknown, defaulting to 1000 [ 275.817517][T12349] lo speed is unknown, defaulting to 1000 [ 275.885291][T12357] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 275.917859][T12357] batman_adv: batadv0: Adding interface: ip6gretap2 [ 275.924517][T12357] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.979362][T12357] batman_adv: batadv0: Interface activated: ip6gretap2 [ 275.999365][T12366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1556'. [ 276.199230][T12349] chnl_net:caif_netlink_parms(): no params data found [ 276.493687][T12384] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1559'. [ 276.503873][T12349] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.547559][T12349] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.568507][T12349] bridge_slave_0: entered allmulticast mode [ 276.591714][T12349] bridge_slave_0: entered promiscuous mode [ 276.603402][T12349] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.628341][T12349] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.635803][T12349] bridge_slave_1: entered allmulticast mode [ 276.687589][T12349] bridge_slave_1: entered promiscuous mode [ 276.788822][T12349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.841790][T12349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.961823][T12349] team0: Port device team_slave_0 added [ 276.991528][T12349] team0: Port device team_slave_1 added [ 276.999550][T12407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1567'. [ 277.124906][T12414] netlink: 'syz.4.1567': attribute type 58 has an invalid length. [ 277.201942][T12405] lo speed is unknown, defaulting to 1000 [ 277.322445][T12349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.366844][T12349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.456527][T12349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.499156][T12349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.506174][T12349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.572482][T12349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.620017][T12405] lo speed is unknown, defaulting to 1000 [ 277.687683][ T5853] Bluetooth: hci1: command tx timeout [ 277.723293][T12349] hsr_slave_0: entered promiscuous mode [ 277.740563][T12349] hsr_slave_1: entered promiscuous mode [ 277.772390][T12349] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.783060][T12349] Cannot create hsr debugfs directory [ 277.943181][T12409] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.954710][T12409] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.994917][T12409] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.016875][T12409] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.244616][T12349] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.284070][T12405] lo speed is unknown, defaulting to 1000 [ 278.394859][T12349] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.549822][T12349] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.775894][T12349] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.982917][T12473] netlink: 'syz.2.1587': attribute type 3 has an invalid length. [ 279.143024][T12476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1590'. [ 279.194375][T12481] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 279.244653][T12476] netlink: zone id is out of range [ 279.270876][T12476] netlink: zone id is out of range [ 279.281741][T12349] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 279.304606][T12476] netlink: zone id is out of range [ 279.310640][T12476] netlink: zone id is out of range [ 279.316016][T12476] netlink: zone id is out of range [ 279.321519][T12476] netlink: zone id is out of range [ 279.322307][T12349] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 279.327279][T12476] netlink: zone id is out of range [ 279.339903][T12476] netlink: zone id is out of range [ 279.345107][T12476] netlink: zone id is out of range [ 279.350557][T12476] netlink: zone id is out of range [ 279.363334][T12349] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 279.402664][T12349] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 279.425454][T12476] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1590'. [ 279.546606][T12492] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1594'. [ 279.659987][T12349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.739669][T12349] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.768377][ T5853] Bluetooth: hci1: command tx timeout [ 279.808901][T10209] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.816170][T10209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.890095][T10209] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.897334][T10209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.008878][T12502] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1599'. [ 280.023230][T12501] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1598'. [ 280.065745][T12504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1600'. [ 280.138361][T12504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1600'. [ 280.153990][T12504] gre0: entered promiscuous mode [ 280.171288][T12504] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1600'. [ 280.400965][T12349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.513634][T12349] veth0_vlan: entered promiscuous mode [ 280.576975][T12349] veth1_vlan: entered promiscuous mode [ 280.653052][T12528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1606'. [ 280.669826][T12349] veth0_macvtap: entered promiscuous mode [ 280.748090][T12349] veth1_macvtap: entered promiscuous mode [ 280.808615][T12349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.846444][T12349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.856340][T12349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.912595][T12349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.934241][T12349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.960390][T12349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.995035][T12349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.022432][T12349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.055524][T12349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.085975][T12349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.107614][T12349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.128071][T12542] netlink: 'syz.4.1611': attribute type 11 has an invalid length. [ 281.137178][T12349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.158353][T12349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.164415][T12545] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1612'. [ 281.182151][T12547] Bluetooth: MGMT ver 1.23 [ 281.212960][T12349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.267231][T12349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.286916][T12349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.316628][T12349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.336839][T12349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.357072][T12349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.379036][T12349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.394830][T12349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.405475][T12349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.416566][T12349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.427471][T12349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.476528][T12349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.528783][T12349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.559835][T12349] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.586860][T12349] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.595766][T12349] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.614862][T12349] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.809268][T12573] Unsupported ieee802154 address type: 0 [ 281.847044][ T5147] Bluetooth: hci1: command tx timeout [ 282.009518][ T3436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.023541][ T3436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.080347][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.095529][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.736942][T12665] lo speed is unknown, defaulting to 1000 [ 284.744102][T12665] lo speed is unknown, defaulting to 1000 [ 284.852997][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 284.860007][T12665] lo speed is unknown, defaulting to 1000 [ 284.866699][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 284.875423][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 284.892868][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 284.904403][ T5853] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 284.916333][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 285.101891][T12672] lo speed is unknown, defaulting to 1000 [ 285.146947][T12684] __nla_validate_parse: 3 callbacks suppressed [ 285.146968][T12684] netlink: 300 bytes leftover after parsing attributes in process `syz.4.1650'. [ 285.166239][T12685] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1650'. [ 285.198287][T12687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1651'. [ 285.228955][T12685] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1650'. [ 285.239188][T12672] lo speed is unknown, defaulting to 1000 [ 285.303717][T12687] vlan5: entered allmulticast mode [ 285.485006][T12696] lo speed is unknown, defaulting to 1000 [ 285.595416][T12672] lo speed is unknown, defaulting to 1000 [ 285.602301][T12696] lo speed is unknown, defaulting to 1000 [ 285.661286][T12703] tipc: Started in network mode [ 285.666210][T12703] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 285.693389][T12703] tipc: Enabled bearer , priority 0 [ 286.044694][T12672] chnl_net:caif_netlink_parms(): no params data found [ 286.296798][T12734] netlink: 'syz.0.1666': attribute type 10 has an invalid length. [ 286.377096][T12734] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.419830][T12734] team0: entered promiscuous mode [ 286.451148][T12734] team0: entered allmulticast mode [ 286.468013][T12734] bond0: (slave team0): Enslaving as an active interface with an up link [ 286.481700][T12672] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.492052][T12672] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.500111][T12672] bridge_slave_0: entered allmulticast mode [ 286.508084][T12672] bridge_slave_0: entered promiscuous mode [ 286.517646][T12701] lo: entered allmulticast mode [ 286.523181][T12696] lo speed is unknown, defaulting to 1000 [ 286.529262][T12701] lo: left allmulticast mode [ 286.534910][T12672] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.556104][T12672] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.575314][T12672] bridge_slave_1: entered allmulticast mode [ 286.605372][T12672] bridge_slave_1: entered promiscuous mode [ 286.774574][T12672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.804148][T12752] lo speed is unknown, defaulting to 1000 [ 286.817830][ T5838] tipc: Node number set to 10136234 [ 286.852985][T12672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.934616][T12759] netlink: 'syz.2.1675': attribute type 39 has an invalid length. [ 286.966934][ T5853] Bluetooth: hci1: command tx timeout [ 286.997095][T12752] lo speed is unknown, defaulting to 1000 [ 287.118761][T12672] team0: Port device team_slave_0 added [ 287.139633][T12672] team0: Port device team_slave_1 added [ 287.248960][T12672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.270526][T12672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.316537][T12672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.389651][T12672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.419078][T12672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.488431][T12672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.500096][T12767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1679'. [ 287.515035][T12752] lo speed is unknown, defaulting to 1000 [ 287.956777][T12672] hsr_slave_0: entered promiscuous mode [ 287.977775][T12672] hsr_slave_1: entered promiscuous mode [ 287.992358][T12782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1683'. [ 288.007677][T12672] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.030123][T12672] Cannot create hsr debugfs directory [ 288.609689][T12672] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.828327][T12791] net_ratelimit: 2 callbacks suppressed [ 288.828350][T12791] openvswitch: netlink: Key type 311 is out of range max 32 [ 288.848513][T12672] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.047450][ T5853] Bluetooth: hci1: command tx timeout [ 289.061163][T12672] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.101472][T12799] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 289.326299][T12672] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.388768][T12809] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1695'. [ 289.695035][T12672] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 289.731036][T12672] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 289.800451][T12672] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 289.824177][T12672] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 289.853040][T12831] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1701'. [ 289.940534][T12833] ip6t_REJECT: ECHOREPLY is not supported [ 290.094426][T12672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.159333][T12672] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.183279][ T1034] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.190647][ T1034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.213222][ T3448] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.220458][ T3448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.590190][T12672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.741522][T12672] veth0_vlan: entered promiscuous mode [ 290.768267][T12672] veth1_vlan: entered promiscuous mode [ 290.879909][T12672] veth0_macvtap: entered promiscuous mode [ 290.916891][T12672] veth1_macvtap: entered promiscuous mode [ 291.004305][T12672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.057419][T12672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.089260][T12672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.136886][T12672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.143811][ T5853] Bluetooth: hci1: command tx timeout [ 291.158085][T12672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.182144][T12672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.200644][T12864] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1710'. [ 291.210780][T12672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.225022][T12672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.256009][T12672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.288905][T12672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.305955][T12672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.316937][T12672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.330240][T12672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.341659][T12867] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 291.351134][T12672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.367594][T12672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.385488][T12672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.426569][T12672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.445234][T12672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.457678][T12672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.472148][T12672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.536765][T12672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.556615][T12672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.583166][T12672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.616786][T12672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.646639][T12672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.666788][T12672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.689492][T12672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.709916][T12672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.736695][T12672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.758103][T12672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.763384][T12877] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1714'. [ 291.801045][T12672] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.816694][T12672] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.832306][T12672] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.853653][T12672] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.112478][T12883] lo speed is unknown, defaulting to 1000 [ 292.147613][T12883] lo speed is unknown, defaulting to 1000 [ 292.472483][ T3448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.516758][ T3448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.721751][ T3470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.757221][ T3470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.775248][T12883] lo speed is unknown, defaulting to 1000 [ 293.067253][T12899] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1721'. [ 293.241410][T12905] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1723'. [ 293.261309][T12905] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 293.269491][T12905] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 294.800617][T12919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1727'. [ 294.811931][T12918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1729'. [ 294.822098][T12918] netlink: 'syz.3.1729': attribute type 3 has an invalid length. [ 294.836686][T12918] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.845934][T12918] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.855011][T12918] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.864107][T12918] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.899115][T12925] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 294.900062][T12919] netlink: 'syz.0.1727': attribute type 1 has an invalid length. [ 294.926588][T12919] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1727'. [ 294.939646][T12925] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1730'. [ 294.957124][T12925] vlan4: entered allmulticast mode [ 295.162833][T12933] sctp: [Deprecated]: syz.2.1731 (pid 12933) Use of int in max_burst socket option. [ 295.162833][T12933] Use struct sctp_assoc_value instead [ 295.312781][T12937] rdma_op ffff8880286039f0 conn xmit_rdma 0000000000000000 [ 295.321078][T12937] netlink: 'syz.4.1733': attribute type 32 has an invalid length. [ 295.472309][T12941] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1735'. [ 295.611379][ T5147] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 295.627817][ T5147] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 295.645181][ T5147] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 295.653705][ T5147] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 295.661771][ T5147] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 295.671498][ T5147] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 295.805746][T12949] lo speed is unknown, defaulting to 1000 [ 295.858073][T12949] lo speed is unknown, defaulting to 1000 [ 296.231782][T12969] : entered promiscuous mode [ 296.246979][T12949] lo speed is unknown, defaulting to 1000 [ 296.247154][T12971] netlink: 'syz.0.1743': attribute type 1 has an invalid length. [ 296.252897][T12966] lo speed is unknown, defaulting to 1000 [ 296.318207][T12966] lo speed is unknown, defaulting to 1000 [ 296.631540][T12966] lo speed is unknown, defaulting to 1000 [ 296.763134][T12985] sctp: [Deprecated]: syz.3.1746 (pid 12985) Use of struct sctp_assoc_value in delayed_ack socket option. [ 296.763134][T12985] Use struct sctp_sack_info instead [ 296.861258][T12949] chnl_net:caif_netlink_parms(): no params data found [ 296.984940][T12993] xt_l2tp: v2 sid > 0xffff: 262144 [ 297.349077][T12949] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.356529][T12949] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.415248][T12949] bridge_slave_0: entered allmulticast mode [ 297.443411][T12949] bridge_slave_0: entered promiscuous mode [ 297.479875][T12949] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.520195][T12949] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.551149][T12949] bridge_slave_1: entered allmulticast mode [ 297.571145][T12949] bridge_slave_1: entered promiscuous mode [ 297.694519][T12949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.736658][T12949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.766830][ T5147] Bluetooth: hci1: command tx timeout [ 297.805017][T13021] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1755'. [ 297.829257][T12949] team0: Port device team_slave_0 added [ 297.839827][T12949] team0: Port device team_slave_1 added [ 297.884655][T13026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1755'. [ 297.924947][T13026] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1755'. [ 297.978984][T12949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.987468][T12949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.087036][T12949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.113682][T13026] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 298.147346][T12949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.154413][T12949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.243220][T12949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.389429][T12949] hsr_slave_0: entered promiscuous mode [ 298.396278][T12949] hsr_slave_1: entered promiscuous mode [ 298.413149][T12949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.432553][T12949] Cannot create hsr debugfs directory [ 298.465266][T13040] FAULT_INJECTION: forcing a failure. [ 298.465266][T13040] name failslab, interval 1, probability 0, space 0, times 0 [ 298.478699][T13040] CPU: 0 UID: 0 PID: 13040 Comm: syz.2.1760 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 298.478730][T13040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 298.478743][T13040] Call Trace: [ 298.478752][T13040] [ 298.478761][T13040] dump_stack_lvl+0x241/0x360 [ 298.478796][T13040] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.478820][T13040] ? __pfx__printk+0x10/0x10 [ 298.478845][T13040] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 298.478877][T13040] ? __pfx___might_resched+0x10/0x10 [ 298.478912][T13040] should_fail_ex+0x40a/0x550 [ 298.478950][T13040] should_failslab+0xac/0x100 [ 298.478981][T13040] kmem_cache_alloc_node_noprof+0x77/0x380 [ 298.479011][T13040] ? __alloc_skb+0x1c3/0x440 [ 298.479040][T13040] __alloc_skb+0x1c3/0x440 [ 298.479081][T13040] ? __pfx___alloc_skb+0x10/0x10 [ 298.479111][T13040] ? netlink_ack_tlv_len+0x6e/0x200 [ 298.479147][T13040] netlink_ack+0x145/0xa60 [ 298.479175][T13040] ? __pfx_lock_acquire+0x10/0x10 [ 298.479206][T13040] ? __pfx_netlbl_mgmt_remove+0x10/0x10 [ 298.479239][T13040] ? __pfx___might_resched+0x10/0x10 [ 298.479277][T13040] netlink_rcv_skb+0x294/0x480 [ 298.479312][T13040] ? __pfx_genl_rcv_msg+0x10/0x10 [ 298.479342][T13040] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 298.479409][T13040] genl_rcv+0x28/0x40 [ 298.479433][T13040] netlink_unicast+0x7f6/0x990 [ 298.479473][T13040] ? __pfx_netlink_unicast+0x10/0x10 [ 298.479502][T13040] ? __virt_addr_valid+0x45f/0x530 [ 298.479524][T13040] ? __phys_addr_symbol+0x2f/0x70 [ 298.479545][T13040] ? __check_object_size+0x47a/0x730 [ 298.479580][T13040] netlink_sendmsg+0x8de/0xcb0 [ 298.479614][T13040] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.479641][T13040] ? aa_sock_msg_perm+0x91/0x160 [ 298.479680][T13040] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.479705][T13040] __sock_sendmsg+0x221/0x270 [ 298.479741][T13040] ____sys_sendmsg+0x53a/0x860 [ 298.479777][T13040] ? __pfx_____sys_sendmsg+0x10/0x10 [ 298.479801][T13040] ? __fget_files+0x2a/0x410 [ 298.479836][T13040] ? __fget_files+0x2a/0x410 [ 298.479877][T13040] __sys_sendmsg+0x269/0x350 [ 298.479909][T13040] ? __pfx___sys_sendmsg+0x10/0x10 [ 298.479952][T13040] ? do_sys_openat2+0x17a/0x1d0 [ 298.480022][T13040] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 298.480057][T13040] ? do_syscall_64+0x100/0x230 [ 298.480101][T13040] ? do_syscall_64+0xb6/0x230 [ 298.480136][T13040] do_syscall_64+0xf3/0x230 [ 298.480167][T13040] ? clear_bhb_loop+0x35/0x90 [ 298.480202][T13040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.480230][T13040] RIP: 0033:0x7fc23ff8d169 [ 298.480248][T13040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.480265][T13040] RSP: 002b:00007fc240d73038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.480288][T13040] RAX: ffffffffffffffda RBX: 00007fc2401a5fa0 RCX: 00007fc23ff8d169 [ 298.480303][T13040] RDX: 0000000000000000 RSI: 00002000000053c0 RDI: 0000000000000005 [ 298.480316][T13040] RBP: 00007fc240d73090 R08: 0000000000000000 R09: 0000000000000000 [ 298.480329][T13040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.480341][T13040] R13: 0000000000000000 R14: 00007fc2401a5fa0 R15: 00007fff81fe7398 [ 298.480373][T13040] [ 299.018644][T13044] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1762'. [ 299.030608][T13045] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 299.040155][T13044] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1762'. [ 299.126025][T12949] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.382143][T13052] netlink: 'syz.3.1765': attribute type 10 has an invalid length. [ 299.387083][T12949] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.463356][T13052] team0: Cannot enslave team device to itself [ 299.578575][T13069] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1769'. [ 299.588011][T13069] nbd: must specify at least one socket [ 299.648315][T12949] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.819930][T13082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1774'. [ 299.846810][ T5147] Bluetooth: hci1: command tx timeout [ 299.855924][T12949] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.869490][T13082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1774'. [ 299.921747][T13080] netlink: 296 bytes leftover after parsing attributes in process `syz.2.1773'. [ 299.937368][T13080] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1773'. [ 300.200198][T12949] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 300.259982][T12949] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 300.321127][T12949] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 300.383261][T12949] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 300.637794][T13115] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap3 [ 300.666045][T13115] batman_adv: batadv0: Adding interface: ip6gretap3 [ 300.674452][T13115] batman_adv: batadv0: The MTU of interface ip6gretap3 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.725960][T13115] batman_adv: batadv0: Interface activated: ip6gretap3 [ 300.948928][T12949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.019400][T12949] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.052278][T13132] netlink: 'syz.0.1791': attribute type 2 has an invalid length. [ 301.063399][ T1034] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.070859][ T1034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.121119][ T3436] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.128389][ T3436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.298624][T13138] batadv3: entered promiscuous mode [ 301.332921][T13138] batadv3: entered allmulticast mode [ 301.389147][T13141] tipc: Started in network mode [ 301.436828][T13141] tipc: Node identity , cluster identity 4711 [ 301.447837][T13141] tipc: Failed to set node id, please configure manually [ 301.467378][T13141] tipc: Enabling of bearer rejected, failed to enable media [ 301.559099][T13144] batadv3: entered promiscuous mode [ 301.620406][T13144] batadv3: entered allmulticast mode [ 301.928228][ T5147] Bluetooth: hci1: command tx timeout [ 302.111189][T12949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.238937][T12949] veth0_vlan: entered promiscuous mode [ 302.289442][T12949] veth1_vlan: entered promiscuous mode [ 302.366205][T12949] veth0_macvtap: entered promiscuous mode [ 302.415551][T12949] veth1_macvtap: entered promiscuous mode [ 302.467314][T13186] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 302.496329][T12949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.516507][T12949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.547272][T12949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.567082][T12949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.606806][T12949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.629583][T12949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.656504][T12949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.676717][T12949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.696595][T12949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.749777][T12949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.766572][T12949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.786681][T12949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.808808][T12949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.826731][T12949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.846810][T12949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.866650][T12949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.888402][T12949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.895861][T13192] __nla_validate_parse: 7 callbacks suppressed [ 302.895878][T13192] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1807'. [ 302.957632][T12949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.977692][T12949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.996519][T12949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.026718][T12949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.047572][T12949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.076518][T12949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.096591][T12949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.114144][T12949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.136666][T12949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.153716][T12949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.164338][T12949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.175892][T12949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.186843][T12949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.210091][T12949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.220881][T12949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.231508][T12949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.245356][T12949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.299634][T12949] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.319317][T12949] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.335377][T12949] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.345969][T12949] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.618167][T13210] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 303.670075][ T3470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.678270][ T3470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.771968][ T3448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.800498][ T3448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.938393][T13217] lo speed is unknown, defaulting to 1000 [ 303.961858][T13217] lo speed is unknown, defaulting to 1000 [ 304.147071][T13217] lo speed is unknown, defaulting to 1000 [ 304.364423][T13228] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1815'. [ 304.688940][T13236] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1820'. [ 304.724486][T13236] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1820'. [ 306.338657][T13256] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 306.364019][T13257] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1826'. [ 306.724370][T13269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1828'. [ 306.734438][T13269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1828'. [ 306.850678][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 306.864257][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 306.873269][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 306.897513][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 306.905567][ T5844] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 306.918862][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 306.976037][T13271] lo speed is unknown, defaulting to 1000 [ 306.983271][T13271] lo speed is unknown, defaulting to 1000 [ 307.056753][T13279] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1831'. [ 307.099031][T13271] lo speed is unknown, defaulting to 1000 [ 307.167337][T13276] xt_CT: No such helper "netbios-ns" [ 307.238560][T13284] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1832'. [ 307.359088][T13271] chnl_net:caif_netlink_parms(): no params data found [ 307.487387][T13294] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 307.761371][T13271] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.790714][T13271] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.812638][T13271] bridge_slave_0: entered allmulticast mode [ 307.853672][T13271] bridge_slave_0: entered promiscuous mode [ 307.879023][T13310] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1839'. [ 308.539785][T13314] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1840'. [ 308.559190][T13314] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1840'. [ 308.646165][T13314] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1840'. [ 308.678588][T13314] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1840'. [ 308.816090][T13314] x_tables: duplicate entry at hook 2 [ 308.968698][ T5844] Bluetooth: hci1: command tx timeout [ 309.029070][T13307] wg1: left promiscuous mode [ 309.033750][T13307] wg1: left allmulticast mode [ 309.184192][T13307] veth0_to_batadv: left promiscuous mode [ 309.447585][T13307] vlan0: left promiscuous mode [ 309.542402][T13307] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.566683][T13307] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.575113][T13307] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.594035][T13307] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.668309][T13307] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.676866][T13307] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.685341][T13307] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.695864][T13307] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.740747][T13307] vlan2: left allmulticast mode [ 309.991690][T13307] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 310.047434][T13271] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.054633][T13271] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.063721][T13271] bridge_slave_1: entered allmulticast mode [ 310.071519][T13271] bridge_slave_1: entered promiscuous mode [ 310.085872][T13316] lo speed is unknown, defaulting to 1000 [ 310.148961][T13317] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1841'. [ 310.182088][T13318] lo speed is unknown, defaulting to 1000 [ 310.188533][T13316] lo speed is unknown, defaulting to 1000 [ 310.273760][T13271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.319101][T13271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.438263][T13271] team0: Port device team_slave_0 added [ 310.490620][T13271] team0: Port device team_slave_1 added [ 310.539796][T13316] lo speed is unknown, defaulting to 1000 [ 310.551446][T13318] lo speed is unknown, defaulting to 1000 [ 310.602095][T13342] netlink: zone id is out of range [ 310.608084][T13342] netlink: zone id is out of range [ 310.629851][T13271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.647025][T13342] netlink: zone id is out of range [ 310.652213][T13342] netlink: zone id is out of range [ 310.656859][T13271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.667542][T13342] netlink: zone id is out of range [ 310.726977][T13342] netlink: zone id is out of range [ 310.732256][T13342] netlink: zone id is out of range [ 310.734942][T13271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.770673][T13342] netlink: zone id is out of range [ 310.775889][T13342] netlink: zone id is out of range [ 310.783997][T13271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.799814][T13342] netlink: zone id is out of range [ 310.799942][T13271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.864007][T13271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.903277][T13318] lo speed is unknown, defaulting to 1000 [ 310.935481][T13345] bond0: entered promiscuous mode [ 310.946916][T13345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.048494][ T5844] Bluetooth: hci1: command 0x041b tx timeout [ 311.139929][T13354] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1849'. [ 311.184980][T13271] hsr_slave_0: entered promiscuous mode [ 311.208314][T13271] hsr_slave_1: entered promiscuous mode [ 311.215474][T13271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.236672][T13271] Cannot create hsr debugfs directory [ 311.368791][T13361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1851'. [ 311.438108][T13361] netlink: 'syz.4.1851': attribute type 10 has an invalid length. [ 311.488371][T13361] xt_CT: You must specify a L4 protocol and not use inversions on it [ 311.559302][T13363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1852'. [ 311.743663][T13367] netlink: 252 bytes leftover after parsing attributes in process `syz.2.1852'. [ 311.755900][T13367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1852'. [ 311.962988][T13271] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.100667][T13271] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.143099][T13378] ip6tnl1: entered promiscuous mode [ 312.167939][T13380] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 312.239552][T13271] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.288144][T13380] lo speed is unknown, defaulting to 1000 [ 312.302856][T13380] lo speed is unknown, defaulting to 1000 [ 312.500177][T13271] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.538117][T13380] lo speed is unknown, defaulting to 1000 [ 312.841541][T13271] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 312.854990][T13271] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 312.893468][T13271] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 312.921010][T13271] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 313.080295][T13404] netlink: 'syz.4.1864': attribute type 10 has an invalid length. [ 313.126784][ T5147] Bluetooth: hci1: command 0x041b tx timeout [ 313.150627][T13271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.191774][T13271] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.216739][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.223940][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.284578][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.291808][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.347523][T13412] netlink: 'syz.3.1868': attribute type 9 has an invalid length. [ 313.947190][T13439] __nla_validate_parse: 1 callbacks suppressed [ 313.947211][T13439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1875'. [ 314.027277][T13271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.129317][T13271] veth0_vlan: entered promiscuous mode [ 314.190146][T13271] veth1_vlan: entered promiscuous mode [ 314.283024][T13271] veth0_macvtap: entered promiscuous mode [ 314.303185][T13448] lo speed is unknown, defaulting to 1000 [ 314.310563][T13271] veth1_macvtap: entered promiscuous mode [ 314.339038][T13448] lo speed is unknown, defaulting to 1000 [ 314.383841][T13271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.407850][T13271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.418646][T13271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.430669][T13271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.441154][T13271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.452146][T13271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.463862][T13271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.475519][T13271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.485999][T13271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.497566][T13271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.522175][T13271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.545340][T13271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.566256][T13271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.579846][T13271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.590507][T13271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.601668][T13271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.614154][T13271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.625481][T13271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.649122][T13271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.670318][T13448] lo speed is unknown, defaulting to 1000 [ 314.681653][T13271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.700763][T13271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.726799][T13271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.749301][T13271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.776551][T13271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.796627][T13271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.816552][T13271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.821436][T13459] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1881'. [ 314.839150][T13271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.859892][T13271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.882082][T13271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.904520][T13271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.932230][T13271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.952789][T13271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.977912][T13271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.006629][T13271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.042328][T13271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.061430][T13271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.083557][T13271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.108659][T13271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.170911][T13271] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.190649][T13271] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.207107][ T5147] Bluetooth: hci1: command 0x041b tx timeout [ 315.223601][T13271] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.242841][T13271] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.501897][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.527364][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.692318][ T3448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.708885][ T3448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.932444][T13485] netlink: 'syz.3.1888': attribute type 1 has an invalid length. [ 316.121719][T13495] net_ratelimit: 52 callbacks suppressed [ 316.121739][T13495] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 316.322834][T13507] netlink: 'syz.4.1892': attribute type 9 has an invalid length. [ 316.378093][T13507] netlink: 201384 bytes leftover after parsing attributes in process `syz.4.1892'. [ 316.437302][T13507] openvswitch: netlink: Message has 6 unknown bytes. [ 316.497174][T13515] lo speed is unknown, defaulting to 1000 [ 316.504053][T13515] lo speed is unknown, defaulting to 1000 [ 317.241646][T13515] lo speed is unknown, defaulting to 1000 [ 317.589314][T13515] lo speed is unknown, defaulting to 1000 [ 317.597581][T13515] lo speed is unknown, defaulting to 1000 [ 317.747828][T13515] lo speed is unknown, defaulting to 1000 [ 318.722349][T13546] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 318.766047][T13546] lo speed is unknown, defaulting to 1000 [ 318.774528][T13546] lo speed is unknown, defaulting to 1000 [ 318.875684][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 318.888440][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 318.900383][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 318.923110][T13551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1905'. [ 318.933760][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 318.942425][ T5853] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 318.951263][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 319.105623][T13546] lo speed is unknown, defaulting to 1000 [ 319.190746][T13548] lo speed is unknown, defaulting to 1000 [ 319.224282][T13558] lo speed is unknown, defaulting to 1000 [ 319.232327][T13548] lo speed is unknown, defaulting to 1000 [ 319.344948][T13562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1907'. [ 319.410838][T13562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1907'. [ 319.575939][T13558] lo speed is unknown, defaulting to 1000 [ 319.578617][T13548] lo speed is unknown, defaulting to 1000 [ 319.684336][T13575] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1908'. [ 319.732390][T13575] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1908'. [ 319.751449][T13575] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1908'. [ 320.006017][T13558] lo speed is unknown, defaulting to 1000 [ 320.116053][T13548] chnl_net:caif_netlink_parms(): no params data found [ 320.179980][T13580] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1911'. [ 320.248477][T13580] team0: Mode "lo›dbalance" not found [ 320.427609][T13586] netlink: 'syz.2.1912': attribute type 1 has an invalid length. [ 320.498122][T13588] netlink: 'syz.2.1912': attribute type 1 has an invalid length. [ 320.691355][T13598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1913'. [ 320.700673][T13598] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1913'. [ 320.711107][T13548] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.719763][T13548] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.741696][T13548] bridge_slave_0: entered allmulticast mode [ 320.760879][T13548] bridge_slave_0: entered promiscuous mode [ 320.784713][T13598] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 320.798143][T13548] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.814191][T13548] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.843151][T13548] bridge_slave_1: entered allmulticast mode [ 320.878146][T13548] bridge_slave_1: entered promiscuous mode [ 320.944994][T13600] lo speed is unknown, defaulting to 1000 [ 320.967984][T13548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.990382][T13548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.017268][T13600] lo speed is unknown, defaulting to 1000 [ 321.047478][ T5147] Bluetooth: hci1: command tx timeout [ 321.092756][T13548] team0: Port device team_slave_0 added [ 321.118008][T13548] team0: Port device team_slave_1 added [ 321.180460][T13548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.189136][T13548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.216069][T13548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.229687][T13548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.237550][T13548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.266000][T13548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.347848][T13548] hsr_slave_0: entered promiscuous mode [ 321.370269][T13548] hsr_slave_1: entered promiscuous mode [ 321.378077][T13548] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 321.385707][T13548] Cannot create hsr debugfs directory [ 321.417737][T13600] lo speed is unknown, defaulting to 1000 [ 321.428297][T13615] netlink: 'syz.3.1918': attribute type 1 has an invalid length. [ 321.437496][T13615] netlink: 'syz.3.1918': attribute type 2 has an invalid length. [ 321.448268][T13615] netlink: 'syz.3.1918': attribute type 1 has an invalid length. [ 321.920803][T13548] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.102638][T13548] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.275567][T13548] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.294613][T13623] netlink: 'syz.4.1921': attribute type 10 has an invalid length. [ 322.325727][T13623] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1921'. [ 322.338902][T13623] veth0_vlan: left promiscuous mode [ 322.347287][T13623] veth0_vlan: entered promiscuous mode [ 322.352928][T13623] veth0_vlan: entered allmulticast mode [ 322.374795][T13623] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 322.406042][T13631] vlan1: entered allmulticast mode [ 322.414002][T13631] macsec0: entered allmulticast mode [ 322.572145][T13634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.609044][T13548] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.941085][T13548] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 322.981259][T13548] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 323.050734][T13548] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 323.070397][T13548] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 323.130161][ T5147] Bluetooth: hci1: command tx timeout [ 323.403894][T13548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.470075][T13548] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.504003][ T1034] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.511217][ T1034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.588997][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.596185][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.896598][T13673] netlink: 'syz.4.1937': attribute type 13 has an invalid length. [ 324.190956][T13665] openvswitch: netlink: Message has 8 unknown bytes. [ 324.250522][T13674] lo speed is unknown, defaulting to 1000 [ 324.280369][T13674] lo speed is unknown, defaulting to 1000 [ 324.324677][T13686] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 324.398117][T13686] lo speed is unknown, defaulting to 1000 [ 324.553276][T13548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.645089][T13674] lo speed is unknown, defaulting to 1000 [ 324.653231][T13548] veth0_vlan: entered promiscuous mode [ 324.665235][T13686] lo speed is unknown, defaulting to 1000 [ 324.671930][T13695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1942'. [ 324.797861][T13548] veth1_vlan: entered promiscuous mode [ 324.914433][T13548] veth0_macvtap: entered promiscuous mode [ 324.956921][T13548] veth1_macvtap: entered promiscuous mode [ 324.995546][T13701] netlink: 'syz.0.1941': attribute type 10 has an invalid length. [ 325.015138][T13548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.036753][T13548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.049710][T13548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.083852][T13701] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1941'. [ 325.089722][T13548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.132959][T13703] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1944'. [ 325.136614][T13548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.196683][T13548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.208662][ T5844] Bluetooth: hci1: command tx timeout [ 325.218380][T13548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.229752][T13548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.250021][T13548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.284912][T13548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.306531][T13548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.326507][T13548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.347834][T13548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.376876][T13548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.396582][T13548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.407721][T13548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.426867][T13548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.446756][T13548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.463481][T13548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.484360][T13548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.509996][T13548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.523971][T13686] lo speed is unknown, defaulting to 1000 [ 325.529077][T13701] veth0_vlan: left promiscuous mode [ 325.545491][T13701] veth0_vlan: entered promiscuous mode [ 325.575900][T13701] veth0_vlan: entered allmulticast mode [ 325.598448][T13701] bridge0: port 1(veth0_vlan) entered blocking state [ 325.605271][T13701] bridge0: port 1(veth0_vlan) entered disabled state [ 325.635100][T13701] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 325.766689][T13548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.787231][T13548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.806507][T13548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.826521][T13548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.837169][T13548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.866627][T13548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.883577][T13548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.905465][T13548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.925967][T13548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.937323][T13548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.947542][T13548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.960598][T13548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.971580][T13548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.986234][T13548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.996846][T13548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.009403][T13548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.020460][T13548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.033408][T13548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.043883][T13548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.055139][T13548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.099358][T13548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.148417][T13548] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.157743][T13548] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.203404][T13548] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.212867][T13548] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.673231][ T3448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.708997][ T3448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.917571][T10209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.925472][T10209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.094730][T13739] netlink: 'syz.3.1953': attribute type 16 has an invalid length. [ 327.104867][T13739] netlink: 'syz.3.1953': attribute type 17 has an invalid length. [ 327.231146][T13739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.239953][T13739] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.265003][T13739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.287261][ T5844] Bluetooth: hci1: command 0x0419 tx timeout [ 327.410689][T13739] gretap0: entered promiscuous mode [ 327.419580][T13739] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 327.466846][ T7395] lo speed is unknown, defaulting to 1000 [ 327.610494][ T7395] lo speed is unknown, defaulting to 1000 [ 327.859840][T13749] lo speed is unknown, defaulting to 1000 [ 327.877458][T13749] lo speed is unknown, defaulting to 1000 [ 327.937290][T13752] netlink: 'syz.4.1957': attribute type 1 has an invalid length. [ 327.998303][T13752] 8021q: adding VLAN 0 to HW filter on device bond8 [ 328.113821][T13754] 8021q: adding VLAN 0 to HW filter on device bond8 [ 328.144892][T13754] bond8: (slave vcan1): The slave device specified does not support setting the MAC address [ 328.181587][T13754] bond8: (slave vcan1): Error -95 calling set_mac_address [ 328.203618][T13749] lo speed is unknown, defaulting to 1000 [ 329.535191][T13761] ipvlan2: entered allmulticast mode [ 329.596032][T13766] ipvlan3: entered allmulticast mode [ 329.829946][T13781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1964'. [ 330.214553][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 330.226127][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 330.234947][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 330.251309][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 330.262435][ T5844] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 330.271370][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 330.396940][T13794] lo speed is unknown, defaulting to 1000 [ 330.435304][T13794] lo speed is unknown, defaulting to 1000 [ 330.644108][T13794] lo speed is unknown, defaulting to 1000 [ 330.698277][T13819] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1973'. [ 330.723190][T13819] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1973'. [ 330.781541][T13815] xt_bpf: check failed: parse error [ 330.998268][T13794] chnl_net:caif_netlink_parms(): no params data found [ 331.041440][T13832] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1977'. [ 331.191992][T13841] set match dimension is over the limit! [ 331.214386][T13794] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.242437][T13794] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.274976][T13794] bridge_slave_0: entered allmulticast mode [ 331.288096][T13794] bridge_slave_0: entered promiscuous mode [ 331.321538][T13794] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.357371][T13794] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.389899][T13842] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1979'. [ 331.393271][T13794] bridge_slave_1: entered allmulticast mode [ 331.438435][T13794] bridge_slave_1: entered promiscuous mode [ 331.477379][T13841] pim6reg: entered allmulticast mode [ 331.534551][T13852] syz0: rxe_newlink: already configured on lo [ 331.544622][T13850] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1981'. [ 331.560675][T13849] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1982'. [ 331.582895][T13849] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 331.591190][T13849] IPv6: NLM_F_CREATE should be set when creating new route [ 331.598571][T13849] IPv6: NLM_F_CREATE should be set when creating new route [ 331.634511][T13794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.671091][T13856] sctp: [Deprecated]: syz.4.1983 (pid 13856) Use of struct sctp_assoc_value in delayed_ack socket option. [ 331.671091][T13856] Use struct sctp_sack_info instead [ 331.700528][T13794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.832392][T13850] bridge_slave_1: entered promiscuous mode [ 331.846234][T13850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1981'. [ 331.869062][T13794] team0: Port device team_slave_0 added [ 331.970060][T13850] bridge_slave_1 (unregistering): left promiscuous mode [ 331.991651][T13868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1984'. [ 332.065657][T13794] team0: Port device team_slave_1 added [ 332.183024][T13872] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1986'. [ 332.215633][T13794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.238377][T13794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.286466][T13794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.304643][T13794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.312067][T13794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.347990][ T5844] Bluetooth: hci1: command tx timeout [ 332.382843][T13874] netlink: 'syz.0.1987': attribute type 11 has an invalid length. [ 332.386979][T13794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.496144][T13874] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 332.534714][T13794] hsr_slave_0: entered promiscuous mode [ 332.564958][T13794] hsr_slave_1: entered promiscuous mode [ 332.582378][T13794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 332.601206][T13794] Cannot create hsr debugfs directory [ 333.184331][T13794] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.321763][T13906] bridge0: entered promiscuous mode [ 333.347825][T13906] macvlan3: entered promiscuous mode [ 333.354385][T13906] bridge0: port 1(macvlan3) entered blocking state [ 333.369832][T13906] bridge0: port 1(macvlan3) entered disabled state [ 333.384637][T13906] macvlan3: entered allmulticast mode [ 333.397985][T13906] bridge0: entered allmulticast mode [ 333.431024][T13906] macvlan3: left allmulticast mode [ 333.443621][T13906] bridge0: left allmulticast mode [ 333.540075][T13906] bridge0: left promiscuous mode [ 333.647200][T13915] netlink: 'syz.4.1999': attribute type 11 has an invalid length. [ 333.668059][T13915] netlink: 'syz.4.1999': attribute type 13 has an invalid length. [ 333.826881][T13794] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.895683][T13920] macvlan2: entered promiscuous mode [ 333.901805][T13920] bridge0: entered promiscuous mode [ 333.913813][T13920] bridge0: port 1(macvlan2) entered blocking state [ 333.931260][T13920] bridge0: port 1(macvlan2) entered disabled state [ 333.958881][T13920] macvlan2: entered allmulticast mode [ 333.987323][T13920] bridge0: entered allmulticast mode [ 334.008686][T13920] macvlan2: left allmulticast mode [ 334.027264][T13920] bridge0: left allmulticast mode [ 334.065794][T13920] bridge0: left promiscuous mode [ 334.161718][T13908] lo speed is unknown, defaulting to 1000 [ 334.325743][T13794] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.367403][T13908] lo speed is unknown, defaulting to 1000 [ 334.419222][ T5844] Bluetooth: hci1: command tx timeout [ 334.539408][T13794] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.646320][T13938] lo speed is unknown, defaulting to 1000 [ 334.667728][T13940] 8021q: VLANs not supported on ip6gre0 [ 334.822900][T13938] lo speed is unknown, defaulting to 1000 [ 334.838219][T13908] lo speed is unknown, defaulting to 1000 [ 334.944837][T13794] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 334.973039][T13794] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 335.043688][T13938] lo speed is unknown, defaulting to 1000 [ 335.133207][T13951] __nla_validate_parse: 5 callbacks suppressed [ 335.133227][T13951] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2007'. [ 335.179785][T13794] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 335.202320][T13794] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 335.296841][T13951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2007'. [ 335.487085][T13794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.554676][T13794] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.591659][ T3470] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.598966][ T3470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.634124][ T3470] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.641363][ T3470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.743299][T13794] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 335.780551][T13794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 335.837204][T13961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2010'. [ 335.890078][T13965] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 336.068676][T13973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2013'. [ 336.106080][T13974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2013'. [ 336.227992][T13983] lo: entered allmulticast mode [ 336.233165][T13983] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 336.280906][T13794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.407539][T13987] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2016'. [ 336.433252][T13794] veth0_vlan: entered promiscuous mode [ 336.436547][T13987] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2016'. [ 336.481608][T13794] veth1_vlan: entered promiscuous mode [ 336.497519][ T5844] Bluetooth: hci1: command tx timeout [ 336.533151][T13990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2017'. [ 336.577297][T13794] veth0_macvtap: entered promiscuous mode [ 336.597616][T13794] veth1_macvtap: entered promiscuous mode [ 336.614854][T13987] netlink: 'syz.3.2016': attribute type 3 has an invalid length. [ 336.676052][T13794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.728226][T13794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.755590][T13794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.776504][T13794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.777554][T13996] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2018'. [ 336.796578][T13794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.809815][T13794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.819943][T13794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.891966][T13794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.912443][T13794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.937565][T13794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.956496][T13794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.979255][T13794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.999610][T13794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.027117][T13794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.041179][T13794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.052224][T13794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.062600][T13794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.073448][T13794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.083763][T13794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.095992][T13794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.106909][T13794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.117854][T13794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.130689][T13794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.199595][T13794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.232298][T13794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.260727][T13794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.281952][T13794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.306650][T13794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.326693][T13794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.365299][T13794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.380068][T13794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.390692][T13794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.402893][T13794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.414251][T13794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.425346][T13794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.436128][T13794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.468515][T13794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.492448][T13794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.515694][T13794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.538395][T13794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.556703][T13794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.574499][T13794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.585704][T13794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.596074][T13794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.608339][T13794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.620099][T13794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.715068][T13794] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.734686][T13794] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.756279][T13794] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.773786][T13794] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.817789][T14025] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 338.016745][ T3470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.046937][ T3470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.129230][T10209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.143313][T10209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.154014][T14045] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2033'. [ 338.535500][T14058] netlink: 'syz.2.2037': attribute type 1 has an invalid length. [ 338.891776][T14077] netlink: 'syz.4.2041': attribute type 5 has an invalid length. [ 340.816038][T14096] __nla_validate_parse: 5 callbacks suppressed [ 340.816058][T14096] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2047'. [ 341.388403][ T5147] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 341.399111][ T5147] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 341.409056][ T5147] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 341.420796][ T5147] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 341.431072][ T5147] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 341.444634][ T5147] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 341.588765][T14122] lo speed is unknown, defaulting to 1000 [ 341.601410][T14122] lo speed is unknown, defaulting to 1000 [ 341.701259][T14137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2053'. [ 341.747358][T14137] netlink: 'syz.0.2053': attribute type 3 has an invalid length. [ 341.794735][T14140] ================================================================== [ 341.802862][T14140] BUG: KASAN: slab-use-after-free in udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 341.811671][T14140] Write of size 8 at addr ffff8880344b3d70 by task syz.3.2057/14140 [ 341.819667][T14140] [ 341.821998][T14140] CPU: 1 UID: 0 PID: 14140 Comm: syz.3.2057 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 341.822019][T14140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 341.822030][T14140] Call Trace: [ 341.822037][T14140] [ 341.822045][T14140] dump_stack_lvl+0x241/0x360 [ 341.822069][T14140] ? __pfx_dump_stack_lvl+0x10/0x10 [ 341.822089][T14140] ? __pfx__printk+0x10/0x10 [ 341.822106][T14140] ? _printk+0xd5/0x120 [ 341.822122][T14140] ? __virt_addr_valid+0x183/0x530 [ 341.822139][T14140] ? __virt_addr_valid+0x183/0x530 [ 341.822156][T14140] print_report+0x16e/0x5b0 [ 341.822177][T14140] ? __virt_addr_valid+0x183/0x530 [ 341.822192][T14140] ? __virt_addr_valid+0x183/0x530 [ 341.822207][T14140] ? __virt_addr_valid+0x45f/0x530 [ 341.822223][T14140] ? __phys_addr+0xba/0x170 [ 341.822239][T14140] ? udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 341.822259][T14140] kasan_report+0x143/0x180 [ 341.822282][T14140] ? udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 341.822305][T14140] udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 341.822326][T14140] gtp_create_sock+0x4b9/0x6b0 [ 341.822350][T14140] ? __pfx_gtp_create_sock+0x10/0x10 [ 341.822371][T14140] ? __pfx_gtp_encap_recv+0x10/0x10 [ 341.822397][T14140] ? rcu_is_watching+0x15/0xb0 [ 341.822417][T14140] ? trace_kmalloc+0x1f/0xd0 [ 341.822438][T14140] ? __kmalloc_noprof+0x2a5/0x4c0 [ 341.822462][T14140] ? gtp_newlink+0x285/0xf70 [ 341.822482][T14140] gtp_newlink+0x64b/0xf70 [ 341.822502][T14140] ? __pfx_gtp_newlink+0x10/0x10 [ 341.822522][T14140] rtnl_newlink_create+0x37b/0xbd0 [ 341.822543][T14140] ? __pfx_aa_get_newest_label+0x10/0x10 [ 341.822572][T14140] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 341.822593][T14140] ? __pfx___mutex_lock+0x10/0x10 [ 341.822621][T14140] ? nla_strscpy+0x100/0x180 [ 341.822641][T14140] ? full_name_hash+0x89/0xe0 [ 341.822669][T14140] rtnl_newlink+0x167a/0x1d90 [ 341.822686][T14140] ? stack_depot_save_flags+0x37/0x940 [ 341.822719][T14140] ? __pfx_rtnl_newlink+0x10/0x10 [ 341.822733][T14140] ? __netlink_deliver_tap+0x561/0x7f0 [ 341.822771][T14140] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 341.822799][T14140] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 341.822829][T14140] ? mark_lock+0x9a/0x360 [ 341.822846][T14140] ? __lock_acquire+0x1397/0x2100 [ 341.822886][T14140] ? __pfx_lock_release+0x10/0x10 [ 341.822917][T14140] ? __pfx_rtnl_newlink+0x10/0x10 [ 341.822934][T14140] rtnetlink_rcv_msg+0x791/0xcf0 [ 341.822966][T14140] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 341.822995][T14140] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 341.823025][T14140] ? ref_tracker_free+0x643/0x7e0 [ 341.823044][T14140] netlink_rcv_skb+0x206/0x480 [ 341.823071][T14140] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 341.823099][T14140] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 341.823135][T14140] ? netlink_deliver_tap+0x2e/0x1b0 [ 341.823163][T14140] netlink_unicast+0x7f6/0x990 [ 341.823203][T14140] ? __pfx_netlink_unicast+0x10/0x10 [ 341.823227][T14140] ? __virt_addr_valid+0x45f/0x530 [ 341.823243][T14140] ? __phys_addr_symbol+0x2f/0x70 [ 341.823258][T14140] ? __check_object_size+0x47a/0x730 [ 341.823282][T14140] netlink_sendmsg+0x8de/0xcb0 [ 341.823302][T14140] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.823320][T14140] ? aa_sock_msg_perm+0x91/0x160 [ 341.823347][T14140] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.823362][T14140] __sock_sendmsg+0x221/0x270 [ 341.823388][T14140] ____sys_sendmsg+0x53a/0x860 [ 341.823412][T14140] ? __pfx_____sys_sendmsg+0x10/0x10 [ 341.823430][T14140] ? __fget_files+0x2a/0x410 [ 341.823456][T14140] ? __fget_files+0x2a/0x410 [ 341.823483][T14140] __sys_sendmsg+0x269/0x350 [ 341.823505][T14140] ? __pfx___sys_sendmsg+0x10/0x10 [ 341.823542][T14140] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 341.823568][T14140] ? do_syscall_64+0x100/0x230 [ 341.823593][T14140] ? do_syscall_64+0xb6/0x230 [ 341.823618][T14140] do_syscall_64+0xf3/0x230 [ 341.823642][T14140] ? clear_bhb_loop+0x35/0x90 [ 341.823668][T14140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.823690][T14140] RIP: 0033:0x7f45e178d169 [ 341.823706][T14140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.823720][T14140] RSP: 002b:00007f45e2654038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.823738][T14140] RAX: ffffffffffffffda RBX: 00007f45e19a5fa0 RCX: 00007f45e178d169 [ 341.823750][T14140] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 341.823761][T14140] RBP: 00007f45e180e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 341.823772][T14140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.823782][T14140] R13: 0000000000000000 R14: 00007f45e19a5fa0 R15: 00007ffc54a1cb78 [ 341.823801][T14140] [ 341.823807][T14140] [ 342.281243][T14140] Allocated by task 13973: [ 342.285671][T14140] kasan_save_track+0x3f/0x80 [ 342.290356][T14140] __kasan_slab_alloc+0x66/0x80 [ 342.295229][T14140] kmem_cache_alloc_noprof+0x1d9/0x380 [ 342.300718][T14140] sk_prot_alloc+0x58/0x210 [ 342.305239][T14140] sk_alloc+0x3e/0x370 [ 342.309319][T14140] inet_create+0x648/0xea0 [ 342.313767][T14140] __sock_create+0x4c0/0xa30 [ 342.318374][T14140] __sys_socket+0x150/0x3c0 [ 342.322878][T14140] __x64_sys_socket+0x7a/0x90 [ 342.327573][T14140] do_syscall_64+0xf3/0x230 [ 342.332090][T14140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.337995][T14140] [ 342.340317][T14140] Freed by task 13972: [ 342.344380][T14140] kasan_save_track+0x3f/0x80 [ 342.349067][T14140] kasan_save_free_info+0x40/0x50 [ 342.354104][T14140] __kasan_slab_free+0x59/0x70 [ 342.358875][T14140] kmem_cache_free+0x195/0x410 [ 342.363650][T14140] __sk_destruct+0x4fd/0x690 [ 342.368247][T14140] inet_release+0x17d/0x200 [ 342.372758][T14140] sock_close+0xbc/0x240 [ 342.377010][T14140] __fput+0x3e9/0x9f0 [ 342.381001][T14140] task_work_run+0x24f/0x310 [ 342.385698][T14140] syscall_exit_to_user_mode+0x13f/0x340 [ 342.391339][T14140] do_syscall_64+0x100/0x230 [ 342.395948][T14140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.401902][T14140] [ 342.404230][T14140] The buggy address belongs to the object at ffff8880344b3640 [ 342.404230][T14140] which belongs to the cache UDP of size 1856 [ 342.417679][T14140] The buggy address is located 1840 bytes inside of [ 342.417679][T14140] freed 1856-byte region [ffff8880344b3640, ffff8880344b3d80) [ 342.431650][T14140] [ 342.433975][T14140] The buggy address belongs to the physical page: [ 342.440398][T14140] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880344b4d80 pfn:0x344b0 [ 342.450473][T14140] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 342.458979][T14140] memcg:ffff888028bf0801 [ 342.463228][T14140] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 342.470780][T14140] page_type: f5(slab) [ 342.474768][T14140] raw: 00fff00000000040 ffff8880206d1a00 ffffea00012a5e00 dead000000000002 [ 342.483355][T14140] raw: ffff8880344b4d80 000000000010000f 00000000f5000000 ffff888028bf0801 [ 342.491944][T14140] head: 00fff00000000040 ffff8880206d1a00 ffffea00012a5e00 dead000000000002 [ 342.500625][T14140] head: ffff8880344b4d80 000000000010000f 00000000f5000000 ffff888028bf0801 [ 342.509302][T14140] head: 00fff00000000003 ffffea0000d12c01 ffffffffffffffff 0000000000000000 [ 342.517974][T14140] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 342.526647][T14140] page dumped because: kasan: bad access detected [ 342.533068][T14140] page_owner tracks the page as allocated [ 342.538814][T14140] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5496, tgid 5496 (ip), ts 48047603116, free_ts 48017787444 [ 342.559311][T14140] post_alloc_hook+0x1f4/0x240 [ 342.564096][T14140] get_page_from_freelist+0x365c/0x37a0 [ 342.569655][T14140] __alloc_frozen_pages_noprof+0x292/0x710 [ 342.575467][T14140] alloc_pages_mpol+0x311/0x660 [ 342.580325][T14140] allocate_slab+0x8f/0x3a0 [ 342.584832][T14140] ___slab_alloc+0xc27/0x14a0 [ 342.589523][T14140] __slab_alloc+0x58/0xa0 [ 342.593863][T14140] kmem_cache_alloc_noprof+0x268/0x380 [ 342.599338][T14140] sk_prot_alloc+0x58/0x210 [ 342.603852][T14140] sk_alloc+0x3e/0x370 [ 342.607934][T14140] inet_create+0x648/0xea0 [ 342.612359][T14140] __sock_create+0x4c0/0xa30 [ 342.616960][T14140] __sys_socket+0x150/0x3c0 [ 342.621462][T14140] __x64_sys_socket+0x7a/0x90 [ 342.626142][T14140] do_syscall_64+0xf3/0x230 [ 342.630661][T14140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.636562][T14140] page last free pid 5496 tgid 5496 stack trace: [ 342.642884][T14140] free_frozen_pages+0xe0d/0x10e0 [ 342.647915][T14140] __slab_free+0x2c2/0x380 [ 342.652338][T14140] qlist_free_all+0x9a/0x140 [ 342.656935][T14140] kasan_quarantine_reduce+0x14f/0x170 [ 342.662483][T14140] __kasan_slab_alloc+0x23/0x80 [ 342.667344][T14140] kmem_cache_alloc_noprof+0x1d9/0x380 [ 342.672826][T14140] vm_area_alloc+0x24/0x1d0 [ 342.677334][T14140] mmap_region+0x1b0e/0x2fc0 [ 342.681936][T14140] do_mmap+0xecc/0x13a0 [ 342.686098][T14140] vm_mmap_pgoff+0x2a0/0x530 [ 342.690690][T14140] do_syscall_64+0xf3/0x230 [ 342.695205][T14140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.701108][T14140] [ 342.703431][T14140] Memory state around the buggy address: [ 342.709062][T14140] ffff8880344b3c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 342.717123][T14140] ffff8880344b3c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 342.725185][T14140] >ffff8880344b3d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 342.733246][T14140] ^ [ 342.740958][T14140] ffff8880344b3d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 342.749020][T14140] ffff8880344b3e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 342.757081][T14140] ================================================================== [ 342.772102][T14140] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 342.779350][T14140] CPU: 1 UID: 0 PID: 14140 Comm: syz.3.2057 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 342.790126][T14140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 342.800188][T14140] Call Trace: [ 342.803468][T14140] [ 342.806406][T14140] dump_stack_lvl+0x241/0x360 [ 342.811097][T14140] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.816299][T14140] ? __pfx__printk+0x10/0x10 [ 342.820898][T14140] ? vscnprintf+0x5d/0x90 [ 342.825252][T14140] panic+0x349/0x880 [ 342.829152][T14140] ? check_panic_on_warn+0x21/0xb0 [ 342.834276][T14140] ? __pfx_panic+0x10/0x10 [ 342.838692][T14140] ? mark_lock+0x9a/0x360 [ 342.843022][T14140] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 342.848926][T14140] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 342.854824][T14140] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 342.861159][T14140] ? print_report+0x519/0x5b0 [ 342.865847][T14140] check_panic_on_warn+0x86/0xb0 [ 342.870806][T14140] ? udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 342.876805][T14140] end_report+0x77/0x160 [ 342.881068][T14140] kasan_report+0x154/0x180 [ 342.885579][T14140] ? udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 342.891605][T14140] udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 342.897420][T14140] gtp_create_sock+0x4b9/0x6b0 [ 342.902196][T14140] ? __pfx_gtp_create_sock+0x10/0x10 [ 342.907494][T14140] ? __pfx_gtp_encap_recv+0x10/0x10 [ 342.912709][T14140] ? rcu_is_watching+0x15/0xb0 [ 342.917484][T14140] ? trace_kmalloc+0x1f/0xd0 [ 342.922085][T14140] ? __kmalloc_noprof+0x2a5/0x4c0 [ 342.927128][T14140] ? gtp_newlink+0x285/0xf70 [ 342.931734][T14140] gtp_newlink+0x64b/0xf70 [ 342.936187][T14140] ? __pfx_gtp_newlink+0x10/0x10 [ 342.941130][T14140] rtnl_newlink_create+0x37b/0xbd0 [ 342.946252][T14140] ? __pfx_aa_get_newest_label+0x10/0x10 [ 342.951900][T14140] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 342.957548][T14140] ? __pfx___mutex_lock+0x10/0x10 [ 342.962603][T14140] ? nla_strscpy+0x100/0x180 [ 342.967228][T14140] ? full_name_hash+0x89/0xe0 [ 342.971952][T14140] rtnl_newlink+0x167a/0x1d90 [ 342.976668][T14140] ? stack_depot_save_flags+0x37/0x940 [ 342.982175][T14140] ? __pfx_rtnl_newlink+0x10/0x10 [ 342.987218][T14140] ? __netlink_deliver_tap+0x561/0x7f0 [ 342.992713][T14140] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 342.998730][T14140] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 343.005080][T14140] ? mark_lock+0x9a/0x360 [ 343.009431][T14140] ? __lock_acquire+0x1397/0x2100 [ 343.014483][T14140] ? __pfx_lock_release+0x10/0x10 [ 343.019531][T14140] ? __pfx_rtnl_newlink+0x10/0x10 [ 343.024562][T14140] rtnetlink_rcv_msg+0x791/0xcf0 [ 343.029540][T14140] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 343.034695][T14140] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 343.040186][T14140] ? ref_tracker_free+0x643/0x7e0 [ 343.045224][T14140] netlink_rcv_skb+0x206/0x480 [ 343.050014][T14140] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 343.055500][T14140] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 343.060813][T14140] ? netlink_deliver_tap+0x2e/0x1b0 [ 343.066030][T14140] netlink_unicast+0x7f6/0x990 [ 343.070818][T14140] ? __pfx_netlink_unicast+0x10/0x10 [ 343.076130][T14140] ? __virt_addr_valid+0x45f/0x530 [ 343.081251][T14140] ? __phys_addr_symbol+0x2f/0x70 [ 343.086281][T14140] ? __check_object_size+0x47a/0x730 [ 343.091579][T14140] netlink_sendmsg+0x8de/0xcb0 [ 343.096357][T14140] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.101653][T14140] ? aa_sock_msg_perm+0x91/0x160 [ 343.106610][T14140] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.111896][T14140] __sock_sendmsg+0x221/0x270 [ 343.116599][T14140] ____sys_sendmsg+0x53a/0x860 [ 343.121397][T14140] ? __pfx_____sys_sendmsg+0x10/0x10 [ 343.126705][T14140] ? __fget_files+0x2a/0x410 [ 343.131309][T14140] ? __fget_files+0x2a/0x410 [ 343.135910][T14140] __sys_sendmsg+0x269/0x350 [ 343.140520][T14140] ? __pfx___sys_sendmsg+0x10/0x10 [ 343.145656][T14140] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 343.151996][T14140] ? do_syscall_64+0x100/0x230 [ 343.156790][T14140] ? do_syscall_64+0xb6/0x230 [ 343.161478][T14140] do_syscall_64+0xf3/0x230 [ 343.166057][T14140] ? clear_bhb_loop+0x35/0x90 [ 343.170785][T14140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.176722][T14140] RIP: 0033:0x7f45e178d169 [ 343.181159][T14140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.200783][T14140] RSP: 002b:00007f45e2654038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.209210][T14140] RAX: ffffffffffffffda RBX: 00007f45e19a5fa0 RCX: 00007f45e178d169 [ 343.217193][T14140] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 343.225175][T14140] RBP: 00007f45e180e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 343.233177][T14140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.241150][T14140] R13: 0000000000000000 R14: 00007f45e19a5fa0 R15: 00007ffc54a1cb78 [ 343.249134][T14140] [ 343.252455][T14140] Kernel Offset: disabled [ 343.256785][T14140] Rebooting in 86400 seconds..