last executing test programs: 1m11.404302673s ago: executing program 2 (id=539): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x4a9a, 0x4) sendmmsg$inet(r2, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000bc0)="23004e4ee760d48ddc6b7a1ebfc6e0276028840fb20d5233e81c802684e8ac1dc195296ffaaeace75a07a653ee918f67beb970cd36769470f7acb5cd5becfa3839cec05a81f9488931e0a9ba9a246f45fee8b5240bd1e078539b56973bfbbee5a100668daf66ef25121ca65db1d172a489e35e43f2ced9183d48b5850b9e1de2c492604f7b27f030d82cf14d7bcbe35579bfbfbcccc3dceb90fc0075c0c67c8b887bd9356b0fc5e5479c0133683c922e936e6d9431f80a38a5f819c00801d677445ad545dd77e1", 0xc7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="f473bd", 0x3}], 0x1}}], 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298) sendto$inet(r2, &(0x7f0000000300)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abcb38baa35233c3ee7050b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x24004004, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r4, &(0x7f0000000140)=""/116, 0x74) close(r5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x4c}}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x3a, 0x3, 0x0, 0x0, 0x0, 0x5, 0xc8, 0x0, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x45, [0x67, 0x8001]}}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="5000000010000304000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="05a00200000000002800128009000100766c616e00000000180002800c000200540a00001d000000060001000000000008000500", @ANYRES32=r1], 0x50}, 0x1, 0xba01}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100"], 0x50}, 0x1, 0xba01}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESHEX=r2, @ANYBLOB="010000e5ffffff0000000f00000005002f000000000008000300", @ANYRES32=r8, @ANYRESDEC=r2, @ANYRESHEX], 0x24}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xa2820002}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3cff129e", @ANYRES16=r7, @ANYBLOB="000227bd7000ffdbdf25100000000800340002000000050038000000000005002a0000000000050029000000000008003b0008000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000080) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 58.835027223s ago: executing program 2 (id=539): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x4a9a, 0x4) sendmmsg$inet(r2, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000bc0)="23004e4ee760d48ddc6b7a1ebfc6e0276028840fb20d5233e81c802684e8ac1dc195296ffaaeace75a07a653ee918f67beb970cd36769470f7acb5cd5becfa3839cec05a81f9488931e0a9ba9a246f45fee8b5240bd1e078539b56973bfbbee5a100668daf66ef25121ca65db1d172a489e35e43f2ced9183d48b5850b9e1de2c492604f7b27f030d82cf14d7bcbe35579bfbfbcccc3dceb90fc0075c0c67c8b887bd9356b0fc5e5479c0133683c922e936e6d9431f80a38a5f819c00801d677445ad545dd77e1", 0xc7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="f473bd", 0x3}], 0x1}}], 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff01000000110000000000000000006e2a30456b880000145b41fe6900000079616d3000000000000000000000000079616d3000000000000000000000000076657468315f742f5f626f6e640000000180c20000000000000000000180c200000000faffffffffffffff000000670100009001000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000646e61740000000000000000ff0300000000000000000000000000000000000010000000000000ffffffff000000006e666c010000000000000000000000000000000000000000000000000000ff0050000000121b6eb244d4f0fffbf04a000000007e4b000022d4e27ebdf3b9dc569e338e2c551c2fc4a19597ba4c501c8b1f16fb7809c40aee86f4fe16383d2afb577ed2bb6dd99f024b3f54ba00000000415544495400000000000000000000000000000000000000000000000000000008000000000000200000000000000000000200"/544]}, 0x298) sendto$inet(r2, &(0x7f0000000300)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abcb38baa35233c3ee7050b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x24004004, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r4, &(0x7f0000000140)=""/116, 0x74) close(r5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x4c}}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x3a, 0x3, 0x0, 0x0, 0x0, 0x5, 0xc8, 0x0, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x45, [0x67, 0x8001]}}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="5000000010000304000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="05a00200000000002800128009000100766c616e00000000180002800c000200540a00001d000000060001000000000008000500", @ANYRES32=r1], 0x50}, 0x1, 0xba01}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100"], 0x50}, 0x1, 0xba01}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESHEX=r2, @ANYBLOB="010000e5ffffff0000000f00000005002f000000000008000300", @ANYRES32=r8, @ANYRESDEC=r2, @ANYRESHEX], 0x24}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xa2820002}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3cff129e", @ANYRES16=r7, @ANYBLOB="000227bd7000ffdbdf25100000000800340002000000050038000000000005002a0000000000050029000000000008003b0008000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000080) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 46.898970947s ago: executing program 2 (id=539): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x4a9a, 0x4) sendmmsg$inet(r2, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000bc0)="23004e4ee760d48ddc6b7a1ebfc6e0276028840fb20d5233e81c802684e8ac1dc195296ffaaeace75a07a653ee918f67beb970cd36769470f7acb5cd5becfa3839cec05a81f9488931e0a9ba9a246f45fee8b5240bd1e078539b56973bfbbee5a100668daf66ef25121ca65db1d172a489e35e43f2ced9183d48b5850b9e1de2c492604f7b27f030d82cf14d7bcbe35579bfbfbcccc3dceb90fc0075c0c67c8b887bd9356b0fc5e5479c0133683c922e936e6d9431f80a38a5f819c00801d677445ad545dd77e1", 0xc7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="f473bd", 0x3}], 0x1}}], 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff01000000110000000000000000006e2a30456b880000145b41fe6900000079616d3000000000000000000000000079616d3000000000000000000000000076657468315f742f5f626f6e640000000180c20000000000000000000180c200000000faffffffffffffff000000670100009001000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000646e61740000000000000000ff0300000000000000000000000000000000000010000000000000ffffffff000000006e666c010000000000000000000000000000000000000000000000000000ff0050000000121b6eb244d4f0fffbf04a000000007e4b000022d4e27ebdf3b9dc569e338e2c551c2fc4a19597ba4c501c8b1f16fb7809c40aee86f4fe16383d2afb577ed2bb6dd99f024b3f54ba00000000415544495400000000000000000000000000000000000000000000000000000008000000000000200000000000000000000200"/544]}, 0x298) sendto$inet(r2, &(0x7f0000000300)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abcb38baa35233c3ee7050b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x24004004, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r4, &(0x7f0000000140)=""/116, 0x74) close(r5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x4c}}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x3a, 0x3, 0x0, 0x0, 0x0, 0x5, 0xc8, 0x0, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x45, [0x67, 0x8001]}}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="5000000010000304000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="05a00200000000002800128009000100766c616e00000000180002800c000200540a00001d000000060001000000000008000500", @ANYRES32=r1], 0x50}, 0x1, 0xba01}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100"], 0x50}, 0x1, 0xba01}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESHEX=r2, @ANYBLOB="010000e5ffffff0000000f00000005002f000000000008000300", @ANYRES32=r8, @ANYRESDEC=r2, @ANYRESHEX], 0x24}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xa2820002}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3cff129e", @ANYRES16=r7, @ANYBLOB="000227bd7000ffdbdf25100000000800340002000000050038000000000005002a0000000000050029000000000008003b0008000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000080) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 31.567691414s ago: executing program 2 (id=539): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x4a9a, 0x4) sendmmsg$inet(r2, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000bc0)="23004e4ee760d48ddc6b7a1ebfc6e0276028840fb20d5233e81c802684e8ac1dc195296ffaaeace75a07a653ee918f67beb970cd36769470f7acb5cd5becfa3839cec05a81f9488931e0a9ba9a246f45fee8b5240bd1e078539b56973bfbbee5a100668daf66ef25121ca65db1d172a489e35e43f2ced9183d48b5850b9e1de2c492604f7b27f030d82cf14d7bcbe35579bfbfbcccc3dceb90fc0075c0c67c8b887bd9356b0fc5e5479c0133683c922e936e6d9431f80a38a5f819c00801d677445ad545dd77e1", 0xc7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="f473bd", 0x3}], 0x1}}], 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298) sendto$inet(r2, &(0x7f0000000300)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abcb38baa35233c3ee7050b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x24004004, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r4, &(0x7f0000000140)=""/116, 0x74) close(r5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x4c}}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x3a, 0x3, 0x0, 0x0, 0x0, 0x5, 0xc8, 0x0, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x45, [0x67, 0x8001]}}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="5000000010000304000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="05a00200000000002800128009000100766c616e00000000180002800c000200540a00001d000000060001000000000008000500", @ANYRES32=r1], 0x50}, 0x1, 0xba01}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100"], 0x50}, 0x1, 0xba01}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESHEX=r2, @ANYBLOB="010000e5ffffff0000000f00000005002f000000000008000300", @ANYRES32=r8, @ANYRESDEC=r2, @ANYRESHEX], 0x24}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xa2820002}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3cff129e", @ANYRES16=r7, @ANYBLOB="000227bd7000ffdbdf25100000000800340002000000050038000000000005002a0000000000050029000000000008003b0008000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000080) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 20.994373758s ago: executing program 2 (id=539): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x4a9a, 0x4) sendmmsg$inet(r2, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000bc0)="23004e4ee760d48ddc6b7a1ebfc6e0276028840fb20d5233e81c802684e8ac1dc195296ffaaeace75a07a653ee918f67beb970cd36769470f7acb5cd5becfa3839cec05a81f9488931e0a9ba9a246f45fee8b5240bd1e078539b56973bfbbee5a100668daf66ef25121ca65db1d172a489e35e43f2ced9183d48b5850b9e1de2c492604f7b27f030d82cf14d7bcbe35579bfbfbcccc3dceb90fc0075c0c67c8b887bd9356b0fc5e5479c0133683c922e936e6d9431f80a38a5f819c00801d677445ad545dd77e1", 0xc7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="f473bd", 0x3}], 0x1}}], 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298) sendto$inet(r2, &(0x7f0000000300)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abcb38baa35233c3ee7050b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x24004004, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r4, &(0x7f0000000140)=""/116, 0x74) close(r5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x4c}}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x3a, 0x3, 0x0, 0x0, 0x0, 0x5, 0xc8, 0x0, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x45, [0x67, 0x8001]}}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="5000000010000304000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="05a00200000000002800128009000100766c616e00000000180002800c000200540a00001d000000060001000000000008000500", @ANYRES32=r1], 0x50}, 0x1, 0xba01}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100"], 0x50}, 0x1, 0xba01}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESHEX=r2, @ANYBLOB="010000e5ffffff0000000f00000005002f000000000008000300", @ANYRES32=r8, @ANYRESDEC=r2, @ANYRESHEX], 0x24}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xa2820002}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3cff129e", @ANYRES16=r7, @ANYBLOB="000227bd7000ffdbdf25100000000800340002000000050038000000000005002a0000000000050029000000000008003b0008000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000080) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 12.117169324s ago: executing program 2 (id=539): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x4a9a, 0x4) sendmmsg$inet(r2, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000bc0)="23004e4ee760d48ddc6b7a1ebfc6e0276028840fb20d5233e81c802684e8ac1dc195296ffaaeace75a07a653ee918f67beb970cd36769470f7acb5cd5becfa3839cec05a81f9488931e0a9ba9a246f45fee8b5240bd1e078539b56973bfbbee5a100668daf66ef25121ca65db1d172a489e35e43f2ced9183d48b5850b9e1de2c492604f7b27f030d82cf14d7bcbe35579bfbfbcccc3dceb90fc0075c0c67c8b887bd9356b0fc5e5479c0133683c922e936e6d9431f80a38a5f819c00801d677445ad545dd77e1", 0xc7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="f473bd", 0x3}], 0x1}}], 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298) sendto$inet(r2, &(0x7f0000000300)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abcb38baa35233c3ee7050b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x24004004, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r4, &(0x7f0000000140)=""/116, 0x74) close(r5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x4c}}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x3a, 0x3, 0x0, 0x0, 0x0, 0x5, 0xc8, 0x0, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x45, [0x67, 0x8001]}}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="5000000010000304000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="05a00200000000002800128009000100766c616e00000000180002800c000200540a00001d000000060001000000000008000500", @ANYRES32=r1], 0x50}, 0x1, 0xba01}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100"], 0x50}, 0x1, 0xba01}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESHEX=r2, @ANYBLOB="010000e5ffffff0000000f00000005002f000000000008000300", @ANYRES32=r8, @ANYRESDEC=r2, @ANYRESHEX], 0x24}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xa2820002}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3cff129e", @ANYRES16=r7, @ANYBLOB="000227bd7000ffdbdf25100000000800340002000000050038000000000005002a0000000000050029000000000008003b0008000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000080) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 6.130814243s ago: executing program 0 (id=1784): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000031401002abd7000000000000900020000007a31000000000800410072786500140033"], 0x38}}, 0x108) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x54}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000100039042abd7000eaffffff000003e4", @ANYRES32=r8, @ANYBLOB="1006e90000000000e167f0c02f4243e210b162597795918bd4c0a0af7a"], 0x20}, 0x1, 0x0, 0x0, 0x48044}, 0x4008040) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) syz_emit_ethernet(0x7a, &(0x7f00000009c0)={@random="856b1200ff00", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88a8}}}}}}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x25, &(0x7f0000000040)=0x2800, 0x4) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r11 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x260, 0x0, 0xffffffff, 0xffffffff, 0xc0, 0xffffffff, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@ip={@multicast2, @empty, 0xff000000, 0xff, 'team_slave_0\x00', 'ipvlan0\x00', {}, {}, 0xc, 0x1, 0x21}, 0x0, 0xa0, 0xc0, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x4, 0x3, 0x2, 0x1, 0x5}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@multicast2, @broadcast, 0xffffff00, 0xff000000, 'bridge_slave_0\x00', 'sit0\x00', {}, {0xff}, 0x5e, 0x0, 0x40}, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@addrtype={{0x30}, {0x350, 0x52}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1b, 0x7, 0x8, 0xfffffff7, 'snmp_trap\x00', 'syz0\x00', {0x1000}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) writev(r10, &(0x7f0000004380)=[{&(0x7f00000007c0)='e', 0x1}, {0x0}], 0x2) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r12, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e20, 0x4, @local, 0x8}}, 0xf}, &(0x7f0000000180)=0x90) bpf$BPF_GET_MAP_INFO(0xf, 0xfffffffffffffffd, 0xf0) sendmsg$inet(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000001c0), 0x0, &(0x7f0000000b40)=[@ip_retopts={{0x78, 0x0, 0x7, {[@end, @timestamp_addr={0x44, 0x24, 0xd, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@private=0xa010102, 0x6}]}, @end, @timestamp_addr={0x44, 0x34, 0x47, 0x1, 0x5, [{@rand_addr=0x64010102, 0xd}, {@empty, 0x9}, {@loopback, 0x9}, {@empty, 0x2}, {@private=0xa010101, 0x5}, {@multicast1, 0x5}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @multicast1, @rand_addr=0x64010102}}}, @ip_retopts={{0x58, 0x0, 0x7, {[@ssrr={0x89, 0x13, 0x2e, [@multicast1, @multicast1, @local, @remote]}, @end, @end, @cipso={0x86, 0x17, 0x3, [{0x1, 0xf, "a701f12f4f2603b0f2e596473c"}, {0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0xec, [@loopback, @rand_addr=0x64010102, @local, @broadcast, @local, @rand_addr=0x64010101]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf9}}], 0x108}, 0x40000) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYRESDEC=r7, @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='rdma.current\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r13, 0x1, 0x2a, &(0x7f0000000100)=r14, 0x4) 5.718932317s ago: executing program 0 (id=1787): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="050000007f000000f00e00008001000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002000000000000000000000000000002ef000000"], 0x50) 5.522991137s ago: executing program 0 (id=1790): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000000000000000ff88000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d"], 0xfdef) r2 = epoll_create(0x6ec) r3 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r4, &(0x7f00000001c0)="9fa78338de417d89c6abfb78cc9c3194eb2def0c8ca71da7858f25144c6e036d9beb0adee7c6f6d6fc5ea2e320ad34", &(0x7f00000002c0)=""/235, 0x4}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000040)) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000480)={0x3, 0x5, 0xe, 0xda, 0x0, 0x18, 0x20, 0x7e, 0x3f, 0x3, 0xff, 0x7, 0xa0, 0x2}, 0xe) 5.26310453s ago: executing program 0 (id=1791): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/85, 0x55}, {&(0x7f0000000180)=""/83, 0x53}], 0x2, 0xfffffe02, 0x80002ea7) 2.473677759s ago: executing program 4 (id=1825): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) r0 = gettid() r1 = socket$kcm(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) syz_open_procfs$namespace(r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x3f, &(0x7f0000000240)=ANY=[], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r3) 2.267436318s ago: executing program 3 (id=1827): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)='@', 0x1}], 0x1, &(0x7f0000000240)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18}}], 0x1, 0x0) accept4(r3, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r5, 0x0, 0x22, &(0x7f0000000900), 0x2) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb2}, 0x9c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000980)={@void, @void, @eth={@empty, @random="ffffe200", @void, {@ipv6={0x86dd, @tcp={0x5, 0x6, "363ce7", 0x14, 0x6, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @local}, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0x228}}}}}}}}, 0x4a) 2.141484242s ago: executing program 4 (id=1828): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004000000090000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @ldst={0x3, 0x3, 0x2, 0x8, 0x6, 0xffffffffffffffe0, 0xffffffffffffffff}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x7}, @jmp={0x5, 0x0, 0xb, 0xa, 0x4, 0xfffffffffffffffc}, @map_val={0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 1.857574494s ago: executing program 3 (id=1829): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000040)=0x7, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x4c, r2, 0x5, 0xffffffff, 0x8, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x800, 0x0, 0x0, 0x0, {0x5add, 0x2, 0x0, 0x7, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x1, 0x2, 0x4}}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x0) connect$unix(r5, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = socket$unix(0x1, 0x1, 0x0) connect$unix(r7, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x802) close(r5) r8 = socket$netlink(0x10, 0x3, 0x4) write(r8, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) sendmsg$NFT_BATCH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000100001000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c0000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011000100004e588e89d8410e6b0b156d32243fd6a2b62f247a29f1"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xf, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000020000040000000040000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0908000000000055090100026200009500000000000000bc91100000000000b70262020000000085000000ba000000b7000000000000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4dbf934477770d5d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r9}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r9, r10}, 0xc) 1.673721308s ago: executing program 4 (id=1831): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x48400) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000140)="f4339bc23dab73e5dbab037672b419271fda3770b06ecedd11", 0x19}, {&(0x7f00000002c0)="628a31b6d7ba4817f9e7171f59f6ba02d142ac1df6b7ee697448e1d1df8e6f1bad0f1ef1889722dfbe78cc1a58a59f2d3881ae40ded75e48ec1d1782df4cdfbf37cbc45995b26e7abb0cd849ea66e80fba985a82232c84", 0x57}, {&(0x7f0000000400)="e66517c292238b5473a56969563d87f550c05d72253a40a38d96e51d3de1226c1776c1e45c5dd2cfbcec83", 0x2b}, {&(0x7f0000000480)="57c761f654db5f3098ae64ce385ffcfed0ef110d93cbe7fa1f4f2327602a291192f5fe9863d527e303153f68b04c18db5a48756a583789e9895746c12b9d4e1224c9e17563edff39dd0b7d73fbb4b5a64e7b6db65b84b82f6c938205b2d8560f0da2f775e85175f74ed70033681e96d30fe8a7c2866c59e8f2e2d253ee55115be95aef4a8688989faa6f27db0ea71914ea8150aa35afc828c97af0ec5cc718ca2a58b335388cfebd804d367af99611817fed2c6b73", 0xb5}, {&(0x7f0000001680)="50eab642bf632c5cde2c2827b6b0f95a7e02e4c01968105ea31a5397f228b4aeb94841e6689f44f65623f08281f6e880f1349f8926e11f238e91ce034152d363e018fa2d2176994818c3c7e6e78cab5bbba1f26c80457ceacf706c54e5b1f431a8df03f7376096b86b8ac804d9dde5f9eca2dc99bf2cb9c6ebf5a6c9db3db0d4a2e15002854bcb86bb89ea0e5511db578021e8cd35ff5d1f46a24dd14e248fc171e0d094a27510d418a5b467230f11b0a224362e6e9b3331f22ad5c10fc6e21c2297d9a21ce00af6ea39b66254f66189929b12973020c175bafd2d", 0xdb}], 0x5) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$inet(r6, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendto$inet(r6, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x4}, 0x8) sendfile(r4, r1, 0x0, 0xfacf) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r7, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) ioctl$sock_SIOCGIFBR(r8, 0x8941, &(0x7f00000001c0)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00', 0x2a0ffffffff}) 1.489542011s ago: executing program 3 (id=1833): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x1d, &(0x7f0000000680)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000000c0)={@rand_addr, 0x0}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=@delqdisc={0xb8, 0x25, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xffe0, 0x10}, {0xb}, {0xc, 0xe}}, [@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x6b}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xc1f8}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x55}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}]}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000840) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x80000000) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000", @ANYRES32, @ANYBLOB="0c000d800800030068d8"], 0x24}], 0x1}, 0x0) 1.24832737s ago: executing program 3 (id=1835): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x17}]}}}]}, 0x50}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'vlan1\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0xfffffffe, 0x6, 0x6}}]}]}]}, 0x4c}}, 0x0) 1.210890803s ago: executing program 4 (id=1836): bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'lo\x00', 0xc201}) accept(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}}}, &(0x7f0000000080)=0x80) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000140)=0x2, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) unshare(0x64000600) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x0, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86ddfd0010000000400bb80060ec97000fc83c00fe8000000000000003000000000000000000000000000111000000000000000000"], 0xffe) 1.023620107s ago: executing program 0 (id=1837): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4, 0x2}]}, @IFLA_LINKMODE={0x5}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_batadv\x00'}]}, 0x44}}, 0x8054) r3 = epoll_create1(0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1b, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800d0bc8f9dd926b6f72267cf53de69330000010000000000000000000000000427c22ccf145be6d9ada129c247bafe1d2ad64be51a0a0c898370afd319db6ca081babba3f37d05b26a79c821179ad0b997cee67781916e84927c959a8f4cf7124ea03ad4a9249e8cc558b985c663e5d285714c07c538cb96c59756b24022b2554173e49387b694703a9830ae0d00b93d7ccf8771a13538e8a02a796c0760e7104c2ca80090383558037754a66f6d46a7ac0b32c7b8efab5d2998fe11ede6f985e40a057c"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_crypto(0x10, 0x3, 0x15) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x41, {0x0, 0x0, 0x74, 0x0, 0xf3ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}}, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'aegis128-generic\x00'}}}, 0xe0}}, 0x0) sendmsg$nl_crypto(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)={0x90000005}) epoll_pwait(r3, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r9, 0x103, 0x3, &(0x7f0000000480)=0x3, &(0x7f00000004c0)=0x4) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, r10, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc858}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x7, 0x10, 0xa, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x8, 0x7, 0x83d, 0x3}}) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x20, 0x4, 0x41, 0x400, 0x1, 0x1, 0x0, '\x00', r13, 0xffffffffffffffff, 0x2, 0x6, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$NFT_BATCH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x300, 0x0, 0x0, {0xb17f63d28377ffa7, 0x0, 0x7}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x88}, 0x1, 0x0, 0x0, 0x40010}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) 957.664923ms ago: executing program 3 (id=1838): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x12}, 0xffffff00, 0x0, 'ipvlan0\x00', 'pimreg1\x00', {}, {0xff}, 0x89, 0x3}, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x40030000, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x21, 0x0, [{0x0, 0x0, 0x80, 0x7}, {}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1df3}, {0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {0x0, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xf}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100, 'syz1\x00', {0x7}}}}, {{@ip={@multicast2, @empty, 0xffffffff, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 821.686509ms ago: executing program 3 (id=1839): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'gre0\x00', 0x4}, 0x18) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r3, 0x20000005) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x400) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r5}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@ifindex, r7, 0x11, 0x0, 0x0, @void, @value=r7}, 0x20) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r8, &(0x7f00000001c0)=0x8000000001ba81, 0xfffffd1a) writev(r8, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a05000000000000000000020000000900020073797a310008000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) write$cgroup_int(r8, 0x0, 0x0) sendmmsg(r4, 0x0, 0x0, 0x4c044) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000040)={0x2, 'veth1_to_bridge\x00', 0x2}, 0x18) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18207}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r10, 0x8}}}}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x50}}, 0x24000081) socket$unix(0x1, 0x1, 0x0) 772.365368ms ago: executing program 1 (id=1840): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r2, 0x0, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r0) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x1c}}, 0x0) 665.637683ms ago: executing program 1 (id=1841): r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)={0x40000004}) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x8001, 0x4) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xa002a008}) 546.19937ms ago: executing program 1 (id=1842): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002d00)=@newtfilter={0x1118, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x10e8, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffff, 0xfff2}}, @TCA_FLOW_EMATCHES={0x10d4, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x64}}, @TCA_EMATCH_TREE_LIST={0x10a0}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xd0}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x8c30}]}}]}, 0x1118}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) syz_emit_ethernet(0x9a, &(0x7f0000000480)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x8c, 0x65, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x3, 0x0, @private=0xa010100, {0x1c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0xff, 0x0, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x13}, {[@lsrr={0x83, 0x3, 0x29}, @timestamp_prespec={0x44, 0x2c, 0x22, 0x3, 0x1, [{@private=0xa010101, 0x8}, {@loopback, 0x7}, {@local}, {@loopback, 0xfe000000}, {@private=0xa010100, 0x101}]}, @timestamp={0x44, 0x4}, @generic={0x0, 0x12, "83dc61b1ce5707432dd0595dac60aef2"}, @cipso={0x86, 0x14, 0x0, [{0x0, 0x2}, {0x0, 0x2}, {0x0, 0xa, "9b091af166e873c0"}]}]}}}}}}}, 0x0) sendmmsg(r4, &(0x7f0000003880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f0000000040), 0x4) bind$alg(r0, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000001240)={0x6b4, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [{{0x8}, {0x4}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x8, 0x9, 0x10001}, {0x401, 0x7, 0x4}, {0x2000, 0xcf, 0x4, 0x9}]}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xfff6, 0xd, 0x80, 0x9}, {0x52b, 0x5, 0x27, 0x1ffe000}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}}]}}, {{0x8}, {0x18c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x13}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x6b4}, 0x1, 0x0, 0x0, 0x400d0}, 0x20008801) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x24048000}, 0x4020) socket$nl_netfilter(0x10, 0x3, 0xc) 540.063012ms ago: executing program 4 (id=1843): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x207f, 0x4) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000000), 0x4) sendmmsg$inet6(r2, &(0x7f0000005c80)=[{{&(0x7f0000000200)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0xb80b) sendmmsg$inet6(r2, &(0x7f0000004b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044885) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="03032acd7000ffdbdf250b000000"], 0x14}}, 0x80) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000065e322829b754d8bd3fb6b0000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @multicast2, @remote}, &(0x7f00000003c0)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x80000005, 0x0, 0x0, 0x41000, 0x13, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) pipe(&(0x7f0000000300)) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000"], 0xb8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000001a950000000bf62d"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 381.375598ms ago: executing program 4 (id=1844): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x5, 0x5, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0xfffffffffffffffe}], {0x95, 0x0, 0x0, 0x1a03d3}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1000070, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x2}, 0x1c) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x34, 0x2c, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0x2}, {}, {0x10, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x9a0, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xb}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_bpf={{0x8}, {0x74, 0x2, [@TCA_BPF_FLAGS={0x8}, @TCA_BPF_FD={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x2}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x8}, {0x44, 0x5, [{0x7, 0x6, 0x0, 0x8001}, {0x7, 0x3, 0x7, 0xb4e}, {0x3, 0x2, 0xb, 0x7}, {0x2, 0x0, 0x2, 0x5}, {0x5, 0x0, 0x7, 0x31d}, {0x0, 0xc2, 0x1, 0x400}, {0x1, 0x6f, 0xf6, 0x9}, {0x6bb3, 0x1, 0x9, 0xfffffff4}]}}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_ICMPV4_CODE={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e21}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_ARP_TIP_MASK={0x8, 0x3c, 0xff000000}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}]}}, @filter_kind_options=@f_route={{0xa}, {0x89c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x828, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x9, 0x9, 0x100, 0x6, 0x46a07250, 0x7, 0x0, 0x7, 0x0, 0x4, 0x3, 0x0, 0x800, 0x9, 0x9, 0x5, 0x1, 0x7, 0x0, 0x1, 0x9, 0x6fa, 0x23a2, 0x5, 0x50a, 0x7, 0x5, 0x5, 0x2, 0xffffffff, 0x9, 0x7, 0x9, 0x401, 0x10000, 0x3, 0x1000, 0x6, 0x1, 0x1, 0x2, 0x1, 0x8, 0x5, 0x5, 0xe, 0xffffffff, 0xfff, 0x0, 0x4, 0xcd34, 0x332c, 0x1728, 0x34b2, 0x4, 0x6, 0x6, 0xfc4, 0x3, 0x5, 0x6, 0x6, 0x80000000, 0x32a8, 0xe52a, 0x10000, 0x10000, 0x5, 0x81, 0x1, 0x2c45271d, 0x7fff, 0x7, 0xfffffff8, 0x3, 0x100, 0x8, 0x5, 0x5, 0x1, 0x101, 0xb37f, 0xc, 0x2, 0x2, 0xfffff800, 0x4, 0x101, 0xcba, 0x0, 0xa1d4, 0x8, 0x38d, 0xf81, 0x0, 0x20000, 0x5, 0x1, 0x2fe, 0x9, 0x3, 0x1, 0x0, 0x4, 0x2, 0x81, 0x8001, 0x2, 0x1, 0x2, 0x1, 0x9, 0x9, 0x8, 0x0, 0x8, 0x8f6, 0x0, 0xffffb887, 0x8, 0x6, 0x6, 0x9, 0x9, 0x81, 0x3, 0x3, 0x6, 0x0, 0x101, 0x4, 0x9, 0x6, 0x8, 0xff, 0xffffffff, 0x6, 0x529, 0x4f, 0x29de, 0x875f, 0x6, 0x9, 0x1, 0x4, 0x2, 0x3d2, 0x9, 0x31713b50, 0x3, 0x7, 0x9, 0x4, 0x91, 0x1, 0x3, 0x80000000, 0x75f, 0x7, 0xfffffff4, 0x1, 0xfffffc01, 0x35, 0x10, 0xd7, 0x2, 0xd, 0x0, 0x9, 0x3, 0xfffffff1, 0xfffff800, 0x6, 0x5, 0x1, 0xffff67c8, 0x9, 0x1, 0x9, 0x3, 0x10, 0x18800000, 0x2, 0x2, 0x3, 0x7, 0x8, 0x8, 0x81, 0x1, 0x1, 0xa, 0xb9, 0xfffffe01, 0x6, 0x1, 0x2, 0x3, 0x8, 0x2, 0x8, 0x3, 0x6, 0xc, 0xb024, 0x3, 0x3, 0x4, 0xd3ea, 0x6, 0x6, 0x8, 0x3, 0x0, 0xfd65, 0x5, 0x5, 0x3, 0xa, 0x8, 0x8, 0x0, 0x4, 0x1000002, 0x137, 0x0, 0xc, 0x8001, 0x401, 0xe5, 0x2, 0x9, 0x3, 0x6, 0x573, 0x33, 0x4, 0xff, 0x0, 0x1, 0x7ff, 0x4, 0xfa6, 0x5c, 0xdd1, 0xe, 0x9, 0x7f, 0x3ff, 0x7fffffff, 0x1, 0x1, 0x8, 0xb, 0x2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x10, 0xffff, 0x10001, 0x800, 0xfffffff7, 0x7, 0x80000001, 0xfffffffa, 0xe0, 0x80000001, 0x6, 0x2, 0x8, 0x2, 0x6, 0x3ff, 0x3, 0x0, 0x28, 0x6, 0x7f, 0x4, 0x233, 0xc71, 0x5, 0x10001, 0x0, 0x6, 0xfffffff9, 0x7, 0x6, 0x6, 0x216, 0xfffffffb, 0x37e, 0xb8a, 0x32, 0x7, 0x2, 0x40, 0x0, 0x2400000, 0x6d, 0x9, 0xeb, 0x1, 0x4, 0x6, 0x0, 0x2, 0x7, 0x6, 0x8e, 0x9, 0x1, 0xd, 0x7, 0x1, 0x9, 0x9, 0x6, 0x0, 0x3, 0x5, 0x3f, 0x1ff, 0xabc4, 0x2, 0x2, 0x4, 0x2, 0x65e2, 0x5, 0x6, 0x1, 0xa33121c, 0x1ff, 0x1, 0x7, 0x0, 0x2, 0x4, 0x6, 0x484b313f, 0x3, 0x4, 0x2, 0x4, 0x52, 0x9607, 0x51, 0x3, 0xffffffff, 0x4, 0xfffffff2, 0x2, 0x5, 0x7, 0x8, 0x1, 0x8, 0x75c, 0x7, 0x7fffffff, 0xf272, 0xfffffffb, 0x4, 0x7d3, 0x9, 0x7, 0x9, 0x7, 0x8003, 0x2eb, 0x7, 0x1, 0x0, 0x0, 0x8001, 0x2, 0x10001, 0x5, 0x8001, 0x8, 0x2b, 0x1, 0x3, 0x80000000, 0x7fffffff, 0x1, 0x7f, 0x401, 0x8001, 0x6, 0x5, 0x9, 0x1, 0x20, 0x5, 0x9, 0xb, 0xd, 0x2, 0xb, 0x7, 0x81, 0x98, 0x1, 0x80000000, 0x7, 0x7, 0x5, 0x3, 0x2, 0x0, 0xa40, 0xc0, 0x6, 0x3, 0xffff7fff, 0x5, 0x6, 0x4, 0x40, 0x7ff, 0x0, 0x17f, 0x1000, 0x401, 0x7fc6, 0xfffffff7, 0x100, 0xfffffff9, 0x7f, 0x8, 0xffff, 0x40000000, 0x6, 0x6, 0x10001, 0x7, 0x80, 0x8001, 0x6, 0xf, 0x6, 0x5, 0x8, 0x8, 0x9, 0x1, 0x6, 0x9bec, 0xfffffffb, 0x6, 0x1026, 0x3, 0x40000, 0x0, 0x9, 0xfff, 0x1000, 0x7, 0x8001, 0x0, 0xfff, 0x7, 0x9, 0x5, 0x7f, 0x3ff, 0xc, 0x58c9, 0x3, 0x9, 0x5, 0x2e1, 0xbf8, 0x8, 0x79a0, 0x9, 0x7, 0x401, 0xebd6, 0x3, 0xffff, 0x1, 0x4, 0x200, 0x5, 0xfffff000, 0x8, 0x5, 0x7, 0xfffffffd, 0x8, 0x8, 0x3, 0x7f, 0x2, 0x0, 0x8001, 0x101, 0x191, 0x2, 0x800, 0x2, 0x1, 0x2, 0x5, 0x4, 0x4, 0x2, 0x2, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}, @TCA_ROUTE4_ACT={0x60, 0x6, [@m_connmark={0x5c, 0x0, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x5, 0x2e, 0x800}, 0x6}}]}, {0xd, 0x6, "66396e732cf67237ec"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x9a0}, 0x1, 0x0, 0x0, 0x81}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a00000000000000000000000000000900010073797a30000000002c000000030a00000000000000000000000000000900010073797a30000000000900030073797a30000000006c000000060a000000000000000000000000000008000b4000000000440004802c0001800a0001006c696d69740000001c0002800c00014000005300000000000c0002400000000000000000140001800b0001006c6f6f6b75700000040002800900010073797a300000000014000000110001"], 0xe0}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}, 0x1, 0x0, 0x0, 0x881}, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) close(0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$sock_ax25_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) unshare(0x60400) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)}], 0x1) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x6}, 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$tipc(0x1e, 0x5, 0x0) 362.394584ms ago: executing program 1 (id=1845): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0_virt_wifi\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r2}, 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@canfd={{}, 0x80, 0x2, 0x0, 0x0, "0e7692fddc9d8ba5a0ac79669b2947a81f2e3c8973fc2af2a7fa10b9126ea28baed9b57d82ab23db557c307ae88da9c6c68d8ceae8e69b06707297b87f8c925a"}, 0x48}, 0x2, 0x0, 0x0, 0x4105}, 0x20044010) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x1ffffffffffffec9, &(0x7f0000000300)=ANY=[@ANYRESOCT=0x0], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x43, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f00000027c0)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x0, @mcast2, 0x41}, 0x1c, 0x0}}], 0x1, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="00010000000000000000a5f831defa00", @ANYRES16=r8, @ANYBLOB="470d000300000084cd23aee0b732c0b3eb5c49c066"], 0xf4}, 0x1, 0x0, 0x0, 0x8c5}, 0x20004801) (async) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r9, 0x6, 0x1, 0x0, &(0x7f0000000580)) (async) socketpair(0x1a, 0x1, 0x7f, &(0x7f00000001c0)={0xffffffffffffffff}) (async) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000200)={0x0, 0x6}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r10, 0x84, 0x77, &(0x7f0000000540)=ANY=[@ANYRES32=r11, @ANYBLOB="02000200e51f763286c7980415f3930f0f6010f8602debd500cc667b3807f93744ec25ee454078bdb516ffa97a8c12"], 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000000400)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r12 = socket(0x1e, 0x1, 0x400) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r13, @ANYBLOB="c6682d76ea16c023044bde6a7564506434c47f2b7e104b5931be242eb9413aded6c8503b727b0a712b7f5cf8430d2d660465e28e54b61d83df2b3d25cb0077c78ce2de5b0cf64135f8776f9efe69d30c98ed23a0fe741a5f13ea421ab7f530f6ef4d4cad397c211f877a5064c1ee4ca67b8421186759c6b5d5297c000000ce0500"/146], 0x44}}, 0x0) (async) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffd7a, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000008004000"/20], 0x14}}, 0x4004000) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r5) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r15}, &(0x7f0000000040), &(0x7f0000000140)=r14}, 0x20) 114.557525ms ago: executing program 1 (id=1846): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) (async) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) (async) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @in={0x2, 0x0, @private=0xc0586300}, @in6={0xa, 0x0, 0x0, @private0}, @in={0x2, 0x4e20, @broadcast}], 0x58) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c000018000100000000705a41fb2243ed21f70357139eb200000003ff0000000000000020000000", @ANYRES32=0x0, @ANYBLOB], 0x2c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c000018000100000000705a41fb2243ed21f70357139eb200000003ff0000000000000020000000", @ANYRES32=0x0, @ANYBLOB], 0x2c}}, 0x0) 1.61687ms ago: executing program 1 (id=1847): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711714000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0xfffffffe}, {}]}}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x94a, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='mmap_lock_acquire_returned\x00', r2, 0x0, 0x1000000000000009}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2000001, 0x11, r3, 0x9d798000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x989680}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x100) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r5 = accept4(r4, &(0x7f0000000080)=@nfc_llcp, &(0x7f0000000100)=0x80, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0xf) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x7, 0x0, 0x9}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000280)={0x710, 0xb, 0x0, 0x4, 0x80000001, 0x1, 0x9, 0x800, r6}, 0x20) sendto$inet(r4, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x15, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000400)={'tunl0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x20, 0x700, 0xffff, 0x5, {{0xc, 0x4, 0x3, 0x1a, 0x30, 0x64, 0x0, 0x7f, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0xc, 0x31, 0x3, 0xc, [{@private=0xa010102, 0xe}]}, @end, @ssrr={0x89, 0x7, 0xff, [@loopback]}, @ssrr={0x89, 0x7, 0x22, [@rand_addr=0x64010102]}]}}}}}) connect$packet(r5, &(0x7f0000000440)={0x11, 0xf6, r7, 0x1, 0xc, 0x6, @broadcast}, 0x14) recvmsg(r4, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) 0s ago: executing program 0 (id=1848): r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000400)=0x10, 0x80000) recvmsg(r0, &(0x7f0000000580)={&(0x7f0000000440)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000540)=[{&(0x7f0000001c00)=""/82, 0x52}, {&(0x7f0000000a40)=""/4096, 0x1000}], 0x2}, 0x120) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c80)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a928202be0c00009c0000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000008000000040000000000000700000000030000000000000f0100000000000000000000020200000000002e2e5f"], 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000001dc0), 0xffffffffffffffff) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x110, 0xa, 0x148, 0x110, 0x10, 0x368, 0x2a8, 0x2a8, 0x368, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'bridge0\x00', 'rose0\x00', {}, {}, 0x2f}, 0x0, 0xf0, 0x110, 0x0, {0x200003ae, 0x7f00}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@inet=@hashlimit1={{0x58}, {'pim6reg0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0xa359e000}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x1f0, 0x258, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x0, 0xff, 0x0, 0x0, 0x8, 0x7fff, 0x200}}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x460) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001d00)=ANY=[@ANYRESHEX=r1, @ANYRES32, @ANYBLOB="010000000000000000004d0000000e00a80066697273746e616d650000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x44}}, 0x12040044) r7 = openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000140)=ANY=[@ANYBLOB='-', @ANYRESOCT, @ANYRESDEC=r1], 0x44) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32=r4, @ANYRESOCT=r2], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000001bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) r10 = socket(0x10, 0x3, 0x0) r11 = socket(0x11, 0x80a, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r11) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001e00)=@ipv4_delrule={0x38, 0x21, 0x1, 0x70bd25, 0x25dfdbfe, {0x2, 0x14, 0xa1a21dbae0fbfecc, 0x81, 0x1, 0x0, 0x0, 0x4, 0x5}, [@FRA_SRC={0x8, 0x2, @private=0xa010100}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7}, @FRA_SRC={0x8, 0x2, @multicast1}]}, 0x38}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r9, 0x0, 0xe8, 0x3d, &(0x7f00000007c0)="f21c1a22c49065d22b46ad547cfee590d1be52721b79fe859b8232c366a2b6fa03510181a81f82382d2f3098282de1a5b7feccee295f7c7dcf64c1322b04ea9e1a695b9f6e96e1559458e432f3e3ac8cb6ae2eb437a5721a03019b2dd9662ae9c38e8c59f16f1afb4ad29c7927630d323bec42a35543cc7ed97e5c1be5100b7593070ec20976bb4f2d9456126abb21d02210b03aec9f311c28b9c6f737e3b49eab1a8f947b81d8e51a274488cdee1cb5a63ed6ac5f3594c1e0aed842c774e182f83da25fdbff2ff177cd085f271aac60c0383facf0f2290c6ba7288e3c63d82f6d28af4c537e15f5", &(0x7f0000000600)=""/61, 0x2, 0x0, 0xbb, 0xd9, &(0x7f00000008c0)="b1ac9973e71388ec6ff1181b9d4f01e87a0dea7e0b6d49864e8492b9f4b74717ea0d373f970f250427920ee0d37234c5b2f2cb7322e338717e166802172c417f6474ffe0c720da8d14a944f8d27ae7ca9a2232858d452b0ee5904a8f61601221e72cd59a994c6cbcc40ab17dfd8cd1f3560a01c269c29806f737a988f7821918d8ae8115da977000421360375ca25ede64900dc469cd9516fd149549bfa0959c26b782d6cb63fdf2f1808299b791623ea8be955354065612d1b873", &(0x7f0000001a40)="3f77f7af0abbd74aff51b15fc939306308e9501b1dd8eb4ac0f8b6c71c00a18cc87663fb82757f0d3d0a0fd52d13da3ccbc3c4cd6c69065630c435295d8528f6d4d184368a6565fb42d7ac39896125ba76ce43f5c020196fe1824935e6e682630679d3b405996de5062dad64d27fcad3d648d2c26a3f2fe3d51412cbdeee2b957ab329f6202edb30487f3d954e2f20154eb8588a1130e44a3e9e7e8aeb2834bdf08eda7ac06e31d06f1c698f6c7678537d2c43abbd3b6dc4921a104109960dcf4b24667284ff470545cac95dda5f83fad41b9a80ce044d07c6", 0x4, 0x0, 0x10000}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x91ee, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000001cc0)=ANY=[@ANYRES64=r4, @ANYRES64=r2, @ANYRES32=r4], 0x40}}, 0x48010) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000200)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000700)={0x0, 0xa9, "cd6710fd38f8bf6a054fe64621cfaed026192947a8d2bab35b60d87d2b0880089d033962ba982d559f0484566f8b0bfdcdb7f47f859c4efbd813c90e90b0496a09791cc67e6f51842b4964c76aeb5e85b129889959d3f88d3374be17ca206550eeb39328e8cc2fa636a8f7b12c2f45b27e6bc3ed0ba5cbb02f438645908a2da1c3184f068960c9cae306569e6ba3c71e72db37e27d2340c3104fde0d7671d965b3b19a699fd84785fb"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000001d80)='tlb_flush\x00', r13}, 0x18) recvfrom(r8, &(0x7f00000002c0)=""/129, 0x81, 0x100, &(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, r11, 0x4, 0x3, 0x0, 0x4, {0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}}, 0x80) kernel console output (not intermixed with test programs): __pfx_ksys_write+0x10/0x10 [ 161.529262][ T9254] ? do_syscall_64+0x100/0x230 [ 161.531172][ T9260] tc_dump_action: action bad kind [ 161.534036][ T9254] ? do_syscall_64+0xb6/0x230 [ 161.534083][ T9254] do_syscall_64+0xf3/0x230 [ 161.548276][ T9254] ? clear_bhb_loop+0x35/0x90 [ 161.552965][ T9254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.558860][ T9254] RIP: 0033:0x7fee54d847df [ 161.563275][ T9254] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 161.582878][ T9254] RSP: 002b:00007fee55b23030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 161.591292][ T9254] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fee54d847df [ 161.599282][ T9254] RDX: 0000000000000001 RSI: 00007fee55b230a0 RDI: 0000000000000005 [ 161.607270][ T9254] RBP: 00007fee55b23090 R08: 0000000000000000 R09: 0000000000000000 [ 161.615244][ T9254] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 161.623212][ T9254] R13: 0000000000000000 R14: 00007fee54f75fa0 R15: 00007ffe712359a8 [ 161.631204][ T9254] [ 161.644402][ T9262] netlink: 16 bytes leftover after parsing attributes in process `syz.3.926'. [ 161.659846][ T9262] erspan0: entered promiscuous mode [ 161.667126][ T9262] batman_adv: batadv0: Adding interface: macvlan0 [ 161.673584][ T9262] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.705003][ T9262] batman_adv: batadv0: Interface activated: macvlan0 [ 161.785579][ T9264] dccp_invalid_packet: P.type (RESPONSE) not Data || [Data]Ack, while P.X == 0 [ 161.805255][ T9266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.929'. [ 162.092224][ T9283] syzkaller0: entered promiscuous mode [ 162.112451][ T9283] syzkaller0: entered allmulticast mode [ 162.238891][ T9293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.316688][ T9293] lo speed is unknown, defaulting to 1000 [ 163.051210][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 163.665886][ T9305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.941'. [ 163.695120][ T9305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.941'. [ 163.830383][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 163.863982][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 163.900125][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 163.925173][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 163.951028][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 163.965469][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 164.357173][ T3457] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.463142][ T3457] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.512438][ T9309] lo speed is unknown, defaulting to 1000 [ 164.561797][ T3457] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.612145][ T9321] tipc: Enabling of bearer rejected, failed to enable media [ 164.670197][ T3457] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.703792][ T9323] : entered promiscuous mode [ 164.846456][ T9309] chnl_net:caif_netlink_parms(): no params data found [ 165.105567][ T9309] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.113243][ T9309] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.145269][ T9309] bridge_slave_0: entered allmulticast mode [ 165.152341][ T9309] bridge_slave_0: entered promiscuous mode [ 165.206396][ T9309] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.206975][ T9347] netlink: 'syz.3.949': attribute type 4 has an invalid length. [ 165.221980][ T9309] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.245226][ T9309] bridge_slave_1: entered allmulticast mode [ 165.252260][ T9309] bridge_slave_1: entered promiscuous mode [ 165.265152][ T3457] bridge_slave_1: left allmulticast mode [ 165.270829][ T3457] bridge_slave_1: left promiscuous mode [ 165.276768][ T3457] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.310188][ T3457] bridge_slave_0: left allmulticast mode [ 165.324806][ T3457] bridge_slave_0: left promiscuous mode [ 165.330552][ T3457] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.792377][ T3457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.803864][ T3457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.814670][ T3457] bond0 (unregistering): Released all slaves [ 165.836106][ T9354] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 165.927004][ T9309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.938825][ T9309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.995388][ T9368] netlink: 144 bytes leftover after parsing attributes in process `syz.3.954'. [ 166.002391][ T9371] ebt_among: wrong size: 2080 against expected 2280, rounded to 2280 [ 166.013002][ T5837] Bluetooth: hci2: command tx timeout [ 166.046530][ T9374] netlink: 'syz.3.954': attribute type 13 has an invalid length. [ 166.061582][ T9375] netlink: 'syz.3.954': attribute type 13 has an invalid length. [ 166.082073][ T9309] team0: Port device team_slave_0 added [ 166.135781][ T9309] team0: Port device team_slave_1 added [ 166.179180][ T9379] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 166.243704][ T9309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.250925][ T9309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.280434][ T9309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.325544][ T9309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.332536][ T9309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.389358][ T9309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.458085][ T3457] hsr_slave_0: left promiscuous mode [ 166.490851][ T3457] hsr_slave_1: left promiscuous mode [ 166.508294][ T3457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.517071][ T3457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.524966][ T9390] netlink: 112 bytes leftover after parsing attributes in process `syz.1.961'. [ 166.540277][ T3457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.552856][ T3457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.612759][ T3457] veth1_macvtap: left promiscuous mode [ 166.618890][ T3457] veth0_macvtap: left promiscuous mode [ 166.626171][ T3457] veth1_vlan: left promiscuous mode [ 166.631884][ T3457] veth0_vlan: left promiscuous mode [ 166.959358][ T9410] netlink: 40 bytes leftover after parsing attributes in process `syz.4.965'. [ 167.100204][ T9414] netlink: 56 bytes leftover after parsing attributes in process `syz.4.965'. [ 167.250309][ T3457] team0 (unregistering): Port device team_slave_1 removed [ 167.292676][ T3457] team0 (unregistering): Port device team_slave_0 removed [ 167.781073][ T9309] hsr_slave_0: entered promiscuous mode [ 167.838649][ T9309] hsr_slave_1: entered promiscuous mode [ 167.860211][ T9309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.872315][ T9309] Cannot create hsr debugfs directory [ 168.075307][ T9432] netlink: 76 bytes leftover after parsing attributes in process `syz.1.968'. [ 168.085049][ T5837] Bluetooth: hci2: command tx timeout [ 168.395344][ T9443] xt_l2tp: wrong L2TP version: 0 [ 168.565866][ T9450] netlink: 60 bytes leftover after parsing attributes in process `syz.3.979'. [ 168.589337][ T9450] netlink: 28 bytes leftover after parsing attributes in process `syz.3.979'. [ 168.661836][ T9309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 168.707375][ T9309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 168.735921][ T9309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 168.808839][ T9309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 168.864040][ T9460] sctp: [Deprecated]: syz.0.983 (pid 9460) Use of struct sctp_assoc_value in delayed_ack socket option. [ 168.864040][ T9460] Use struct sctp_sack_info instead [ 169.092399][ T9309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.147029][ T9309] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.190034][ T3511] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.197203][ T3511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.297346][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.304461][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.625229][ T9492] veth4: entered allmulticast mode [ 169.753564][ T9309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.856293][ T9511] netlink: 'syz.1.996': attribute type 1 has an invalid length. [ 169.880652][ T9309] veth0_vlan: entered promiscuous mode [ 169.939653][ T9511] 8021q: adding VLAN 0 to HW filter on device bond1 [ 170.040812][ T9309] veth1_vlan: entered promiscuous mode [ 170.061691][ T9522] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1000'. [ 170.111979][ T9309] veth0_macvtap: entered promiscuous mode [ 170.170257][ T5837] Bluetooth: hci2: command tx timeout [ 170.174340][ T9309] veth1_macvtap: entered promiscuous mode [ 170.210524][ T9309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.221208][ T9309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.232955][ T9309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.264619][ T9533] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1003'. [ 170.276760][ T9309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.287638][ T9309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.298925][ T9309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.327680][ T9309] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.340193][ T9530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1001'. [ 170.349162][ T9309] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.349197][ T9309] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.349224][ T9309] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.994214][ T9543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1005'. [ 171.402809][ T9543] vlan0: entered allmulticast mode [ 171.411350][ T9543] xfrm0: entered allmulticast mode [ 171.418066][ T9546] netlink: 'syz.1.1006': attribute type 21 has an invalid length. [ 171.432889][ T9546] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1006'. [ 171.503012][ T3537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.545222][ T3537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.588372][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.610835][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.713053][ T9561] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1008'. [ 171.929179][ T9573] dccp_v4_rcv: dropped packet with invalid checksum [ 171.991845][ T9579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.015767][ T9580] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1013'. [ 172.173681][ T9587] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.292878][ T9587] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.379823][ T9587] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.476692][ T9587] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.626355][ T9587] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.655993][ T9587] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.677405][ T9587] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.700270][ T9587] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.900899][ T9603] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 173.059299][ T9610] sctp: [Deprecated]: syz.1.1025 (pid 9610) Use of int in max_burst socket option. [ 173.059299][ T9610] Use struct sctp_assoc_value instead [ 173.099387][ T9612] sctp: [Deprecated]: syz.1.1025 (pid 9612) Use of int in max_burst socket option. [ 173.099387][ T9612] Use struct sctp_assoc_value instead [ 173.118020][ T9611] sctp: [Deprecated]: syz.0.1023 (pid 9611) Use of struct sctp_assoc_value in delayed_ack socket option. [ 173.118020][ T9611] Use struct sctp_sack_info instead [ 173.247661][ T9615] xfrm0: entered allmulticast mode [ 173.401333][ T3472] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.779369][ T3472] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.848215][ T3472] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.920694][ T3472] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.975863][ T3472] bridge_slave_1: left allmulticast mode [ 173.981565][ T3472] bridge_slave_1: left promiscuous mode [ 173.987713][ T3472] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.997517][ T3472] bridge_slave_0: left allmulticast mode [ 174.003176][ T3472] bridge_slave_0: left promiscuous mode [ 174.009696][ T3472] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.355934][ T9628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1029'. [ 174.394310][ T9628] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1029'. [ 174.406699][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 174.426401][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 174.440859][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 174.455581][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 174.464421][ T5844] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 174.475606][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 174.581662][ T3472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.600893][ T3472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.619246][ T3472] bond0 (unregistering): Released all slaves [ 174.645082][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 174.655394][ T9622] hsr_slave_0: left promiscuous mode [ 174.667136][ T9622] hsr_slave_1: left promiscuous mode [ 174.755997][ T9628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1029'. [ 174.911400][ T9632] lo speed is unknown, defaulting to 1000 [ 175.085877][ T9651] __nla_validate_parse: 1 callbacks suppressed [ 175.085898][ T9651] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1033'. [ 175.091074][ T9652] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1034'. [ 175.135182][ T9646] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1033'. [ 175.141843][ T9652] netlink: 'syz.4.1034': attribute type 1 has an invalid length. [ 175.190247][ T3472] hsr_slave_0: left promiscuous mode [ 175.203004][ T3472] hsr_slave_1: left promiscuous mode [ 175.216883][ T9652] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1034'. [ 175.234988][ T3472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.270261][ T3472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.279824][ T3472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.297745][ T3472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.344171][ T3472] veth1_macvtap: left promiscuous mode [ 175.375699][ T3472] veth0_macvtap: left promiscuous mode [ 175.388461][ T3472] veth1_vlan: left promiscuous mode [ 175.393793][ T3472] veth0_vlan: left promiscuous mode [ 175.895998][ T3472] team0 (unregistering): Port device team_slave_1 removed [ 175.938203][ T3472] team0 (unregistering): Port device team_slave_0 removed [ 176.565237][ T5147] Bluetooth: hci2: command tx timeout [ 176.579032][ T9632] chnl_net:caif_netlink_parms(): no params data found [ 176.601828][ T9686] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1038'. [ 176.716233][ T9689] netlink: 'syz.0.1038': attribute type 1 has an invalid length. [ 176.753029][ T9689] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1038'. [ 176.961418][ T9632] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.989480][ T9632] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.004995][ T9632] bridge_slave_0: entered allmulticast mode [ 177.019168][ T9632] bridge_slave_0: entered promiscuous mode [ 177.030918][ T9711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1044'. [ 177.052630][ T9715] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 3, id = 0 [ 177.069247][ T9632] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.106144][ T9632] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.113410][ T9632] bridge_slave_1: entered allmulticast mode [ 177.127417][ T9706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1044'. [ 177.138475][ T9632] bridge_slave_1: entered promiscuous mode [ 177.163234][ T9706] vlan2: left allmulticast mode [ 177.171003][ T9712] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1047'. [ 177.173450][ T9706] veth0: left allmulticast mode [ 177.193287][ T9706] vlan2: left promiscuous mode [ 177.199286][ T9706] veth0: left promiscuous mode [ 177.204473][ T9706] bridge0: port 3(vlan2) entered disabled state [ 177.227055][ T9706] bridge_slave_1: left allmulticast mode [ 177.233079][ T9706] bridge_slave_1: left promiscuous mode [ 177.239419][ T9706] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.250886][ T9706] bridge_slave_0: left allmulticast mode [ 177.257192][ T9706] bridge_slave_0: left promiscuous mode [ 177.265357][ T9706] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.387294][ T9632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.404201][ T9723] lo speed is unknown, defaulting to 1000 [ 177.407879][ T9632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.481109][ T9632] team0: Port device team_slave_0 added [ 177.504082][ T9632] team0: Port device team_slave_1 added [ 177.552242][ T9632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.559459][ T9632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.588719][ T9632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.616801][ T9632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.623793][ T9632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.650019][ T9632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.703897][ T9632] hsr_slave_0: entered promiscuous mode [ 177.711811][ T9632] hsr_slave_1: entered promiscuous mode [ 177.725222][ T9632] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.733301][ T9632] Cannot create hsr debugfs directory [ 177.774172][ T9732] veth0_vlan: mtu less than device minimum [ 178.366578][ T9758] xt_CT: You must specify a L4 protocol and not use inversions on it [ 178.382711][ T9632] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 178.426888][ T9632] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 178.463385][ T9632] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 178.530190][ T9760] bond_slave_1: invalid flags given to default FDB implementation [ 178.571463][ T9632] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 178.645427][ T5147] Bluetooth: hci2: command tx timeout [ 178.846439][ T9782] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1067'. [ 178.873417][ T9632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.902139][ T9632] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.914212][ T9781] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 178.952257][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.959424][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.002364][ T3457] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.009551][ T3457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.390296][ T9632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.441781][ T9802] lo speed is unknown, defaulting to 1000 [ 179.500768][ T9632] veth0_vlan: entered promiscuous mode [ 179.525590][ T9632] veth1_vlan: entered promiscuous mode [ 179.622545][ T9632] veth0_macvtap: entered promiscuous mode [ 179.648288][ T9632] veth1_macvtap: entered promiscuous mode [ 179.679544][ T9808] hsr0: left promiscuous mode [ 179.684606][ T9808] hsr0: entered promiscuous mode [ 179.741756][ T9808] hsr0: entered allmulticast mode [ 179.780419][ T9808] hsr_slave_0: entered allmulticast mode [ 179.805119][ T9808] hsr_slave_1: entered allmulticast mode [ 179.848468][ T9632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.884830][ T9632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.922047][ T9632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.964943][ T9632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.996924][ T9632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.031541][ T9632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.078164][ T9632] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.114873][ T9632] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.132763][ T9632] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.165162][ T9632] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.329704][ T9829] netlink: 'syz.1.1078': attribute type 1 has an invalid length. [ 180.427998][ T9832] sctp: [Deprecated]: syz.1.1078 (pid 9832) Use of int in max_burst socket option deprecated. [ 180.427998][ T9832] Use struct sctp_assoc_value instead [ 180.734939][ T5147] Bluetooth: hci2: command tx timeout [ 182.029688][ T9829] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 182.236386][ T3457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.244254][ T3457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.322132][ T3457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.333144][ T3457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.380871][ T9849] netlink: 'syz.1.1084': attribute type 10 has an invalid length. [ 182.411300][ T9849] syz_tun: entered promiscuous mode [ 182.488613][ T9853] pimreg: entered allmulticast mode [ 182.719677][ T9867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1091'. [ 182.733034][ T9864] syzkaller0: entered promiscuous mode [ 182.745045][ T9864] syzkaller0: entered allmulticast mode [ 182.975314][ T9883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1094'. [ 184.942909][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 184.969916][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 184.984316][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 185.003167][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 185.020548][ T5850] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 185.033208][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 185.598235][ T3472] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.601968][ T9914] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1104'. [ 185.702464][ T9908] lo speed is unknown, defaulting to 1000 [ 185.768563][ T3472] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.823816][ T9926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1101'. [ 185.848458][ T9926] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1101'. [ 185.908442][ T9926] netlink: 'syz.0.1101': attribute type 2 has an invalid length. [ 185.934835][ T9926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1101'. [ 186.071856][ T9941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1111'. [ 186.144164][ T9908] chnl_net:caif_netlink_parms(): no params data found [ 186.154453][ T9950] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1112'. [ 186.176213][ T9946] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1112'. [ 186.195717][ T9936] delete_channel: no stack [ 186.203125][ T9946] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1112'. [ 186.289967][ T3472] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.327376][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 186.335897][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 186.441308][ T3472] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.473204][ T9966] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 186.515504][ T9966] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 186.838195][ T9963] tipc: Resetting bearer [ 187.125134][ T5147] Bluetooth: hci2: command tx timeout [ 187.138933][ T9963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.172112][ T9963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.560294][ T9963] batman_adv: batadv0: Interface deactivated: macvlan0 [ 187.579912][ T9963] erspan0: left promiscuous mode [ 187.605066][ T9963] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.613440][ T9963] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.626361][ T9963] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.634907][ T9963] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.772566][ T9997] xt_TCPMSS: Only works on TCP SYN packets [ 187.779952][ T9908] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.798103][ T9908] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.806260][ T9908] bridge_slave_0: entered allmulticast mode [ 187.813362][ T9908] bridge_slave_0: entered promiscuous mode [ 187.832340][ T9999] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1, syncid = 4, id = 0 [ 187.838969][T10000] __nla_validate_parse: 4 callbacks suppressed [ 187.838993][T10000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1124'. [ 187.843542][ T9998] IPVS: stopping backup sync thread 9999 ... [ 187.865177][ T9908] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.872296][ T9908] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.892225][ T9908] bridge_slave_1: entered allmulticast mode [ 187.905951][ T9908] bridge_slave_1: entered promiscuous mode [ 188.000356][ T9908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.067767][ T9908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.086991][ T3472] bridge_slave_1: left allmulticast mode [ 188.092685][ T3472] bridge_slave_1: left promiscuous mode [ 188.105083][ T3472] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.121550][ T3472] bridge_slave_0: left allmulticast mode [ 188.149285][ T3472] bridge_slave_0: left promiscuous mode [ 188.162303][ T3472] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.487758][ T5147] Bluetooth: hci0: command tx timeout [ 188.591947][ T3472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.603563][ T3472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.614155][ T3472] bond0 (unregistering): Released all slaves [ 188.770178][ T9908] team0: Port device team_slave_0 added [ 188.788410][ T9908] team0: Port device team_slave_1 added [ 188.818819][T10032] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1134'. [ 188.886658][ T9908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.893898][ T9908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.920737][ T9908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.973758][T10030] netlink: 1264 bytes leftover after parsing attributes in process `syz.4.1136'. [ 188.991335][T10029] delete_channel: no stack [ 189.001680][ T9908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.012718][ T9908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.053750][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1135'. [ 189.070631][ T9908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.148019][T10036] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.205112][ T5147] Bluetooth: hci2: command tx timeout [ 189.230840][T10036] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.410916][T10036] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.452901][ T9908] hsr_slave_0: entered promiscuous mode [ 189.460963][ T9908] hsr_slave_1: entered promiscuous mode [ 189.468318][ T9908] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.476161][ T9908] Cannot create hsr debugfs directory [ 189.526431][ T3472] hsr_slave_0: left promiscuous mode [ 189.542325][ T3472] hsr_slave_1: left promiscuous mode [ 189.551721][ T3472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.567173][ T3472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.581466][ T3472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.590676][ T3472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.620091][ T3472] veth1_macvtap: left promiscuous mode [ 189.625928][ T3472] veth0_macvtap: left promiscuous mode [ 189.631779][ T3472] veth1_vlan: left promiscuous mode [ 189.651511][ T3472] veth0_vlan: left promiscuous mode [ 190.213684][ T3472] team0 (unregistering): Port device team_slave_1 removed [ 190.269579][ T3472] team0 (unregistering): Port device team_slave_0 removed [ 190.874398][T10036] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.053025][T10036] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.102078][T10036] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.208153][T10073] netlink: 'syz.3.1145': attribute type 1 has an invalid length. [ 191.216329][T10036] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.256566][T10036] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.285845][ T5147] Bluetooth: hci2: command tx timeout [ 191.293973][T10076] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1146'. [ 191.304913][T10076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1146'. [ 191.318733][T10080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1144'. [ 191.328846][T10080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1144'. [ 191.346440][T10080] netlink: 'syz.4.1144': attribute type 13 has an invalid length. [ 191.451096][T10078] lo speed is unknown, defaulting to 1000 [ 191.521528][T10087] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1148'. [ 191.536595][T10090] netlink: 'syz.0.1149': attribute type 9 has an invalid length. [ 191.557669][T10090] netlink: 'syz.0.1149': attribute type 7 has an invalid length. [ 191.588401][T10090] netlink: 'syz.0.1149': attribute type 8 has an invalid length. [ 191.635085][T10092] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1150'. [ 191.687011][T10090] lo speed is unknown, defaulting to 1000 [ 191.795695][T10092] netlink: 'syz.1.1150': attribute type 2 has an invalid length. [ 191.971695][ T9908] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 192.062687][ T9908] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 192.077694][ T9908] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 192.106347][ T9908] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 192.344021][T10090] lo speed is unknown, defaulting to 1000 [ 192.373790][ T9908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.495272][ T9908] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.550792][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.558011][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.719785][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.726950][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.819965][T10114] lo speed is unknown, defaulting to 1000 [ 192.902644][T10125] openvswitch: netlink: IP tunnel dst address not specified [ 193.366677][ T5837] Bluetooth: hci2: command tx timeout [ 193.506147][ T9908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.670925][ T9908] veth0_vlan: entered promiscuous mode [ 193.715982][ T9908] veth1_vlan: entered promiscuous mode [ 193.759923][T10157] IPVS: set_ctl: invalid protocol: 115 255.255.255.255:20000 [ 193.810801][ T9908] veth0_macvtap: entered promiscuous mode [ 193.861140][ T9908] veth1_macvtap: entered promiscuous mode [ 193.907112][ T9908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.958542][ T9908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.998085][ T9908] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.014904][ T9908] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.023664][ T9908] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.065984][ T9908] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.095444][T10163] xt_nfacct: accounting object `sy' does not exists [ 194.340483][ T3472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.368628][ T3472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.489518][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.491554][ T3457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.511780][ T3457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.588608][T10168] __nla_validate_parse: 4 callbacks suppressed [ 194.588627][T10168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1166'. [ 194.653709][T10168] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1166'. [ 194.827125][T10180] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1172'. [ 194.838844][T10180] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1172'. [ 194.851585][T10180] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1172'. [ 194.864971][T10180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1172'. [ 194.955209][T10180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1172'. [ 194.983610][T10180] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1172'. [ 195.027770][T10186] lo speed is unknown, defaulting to 1000 [ 195.187382][T10191] nbd: couldn't find a device at index 1073741824 [ 195.412053][T10199] macvtap1: entered promiscuous mode [ 195.460451][T10199] dummy0: entered promiscuous mode [ 195.469152][T10199] dummy0: left promiscuous mode [ 195.686531][ T3537] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.917315][ T3537] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.024521][ T3537] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.188077][ T3537] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.309118][ T3537] bridge_slave_1: left allmulticast mode [ 196.315241][ T3537] bridge_slave_1: left promiscuous mode [ 196.322445][ T3537] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.351796][ T3537] bridge_slave_0: left allmulticast mode [ 196.362268][ T3537] bridge_slave_0: left promiscuous mode [ 196.370713][ T3537] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.690586][ T3537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.702183][ T3537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.713332][ T3537] bond0 (unregistering): Released all slaves [ 197.208024][T10237] xt_TPROXY: Can be used only with -p tcp or -p udp [ 197.302744][ T5147] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 197.312890][ T5147] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 197.323104][ T5147] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 197.331323][ T5147] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 197.339843][ T5147] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 197.361053][ T5147] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 197.393720][T10228] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1187'. [ 197.412139][T10248] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 197.421269][T10248] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 197.465926][ T3537] hsr_slave_0: left promiscuous mode [ 197.472076][ T3537] hsr_slave_1: left promiscuous mode [ 197.486707][ T3537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.503357][ T3537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.523392][ T3537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.545674][ T3537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.587728][ T3537] veth1_macvtap: left promiscuous mode [ 197.593314][ T3537] veth0_macvtap: left promiscuous mode [ 197.601036][ T3537] veth1_vlan: left promiscuous mode [ 197.610278][ T3537] veth0_vlan: left promiscuous mode [ 198.027912][ T3537] team0 (unregistering): Port device team_slave_1 removed [ 198.067993][ T3537] team0 (unregistering): Port device team_slave_0 removed [ 198.459126][T10245] lo speed is unknown, defaulting to 1000 [ 198.653381][T10262] gtp2: entered promiscuous mode [ 198.659060][T10262] gtp2: entered allmulticast mode [ 198.701996][T10268] xt_HMARK: spi-set and port-set can't be combined [ 198.754381][T10245] chnl_net:caif_netlink_parms(): no params data found [ 198.849340][T10274] netlink: 1275 bytes leftover after parsing attributes in process `syz.3.1197'. [ 198.865462][T10274] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.170761][T10245] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.197114][T10245] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.204453][T10245] bridge_slave_0: entered allmulticast mode [ 199.282499][T10245] bridge_slave_0: entered promiscuous mode [ 199.304939][T10245] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.327498][T10245] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.334687][T10245] bridge_slave_1: entered allmulticast mode [ 199.341904][T10245] bridge_slave_1: entered promiscuous mode [ 199.372683][T10301] ip6t_srh: unknown srh invflags 92A7 [ 199.425223][T10245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.442295][T10245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.475504][ T5147] Bluetooth: hci2: command tx timeout [ 199.561402][T10245] team0: Port device team_slave_0 added [ 199.587021][T10308] netlink: 'syz.3.1208': attribute type 1 has an invalid length. [ 199.588560][T10245] team0: Port device team_slave_1 added [ 199.595427][T10308] __nla_validate_parse: 1 callbacks suppressed [ 199.595441][T10308] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1208'. [ 199.676929][T10308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1208'. [ 199.719112][T10305] netlink: 'syz.3.1208': attribute type 1 has an invalid length. [ 199.744906][T10305] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1208'. [ 199.775266][T10305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1208'. [ 199.904259][T10245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.935080][T10245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.004616][T10245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.058054][T10245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.068400][T10245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.130441][T10245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.156458][T10324] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1217'. [ 200.203690][T10327] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1216'. [ 200.300079][T10245] hsr_slave_0: entered promiscuous mode [ 200.332264][T10245] hsr_slave_1: entered promiscuous mode [ 200.359329][T10245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.400141][T10245] Cannot create hsr debugfs directory [ 200.429145][T10327] lo speed is unknown, defaulting to 1000 [ 200.953366][T10353] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1222'. [ 200.995281][T10355] xt_l2tp: invalid flags combination: c [ 201.101557][T10327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1216'. [ 201.447497][T10366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1229'. [ 201.480798][T10368] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1230'. [ 201.512947][T10370] openvswitch: netlink: Missing key (keys=40, expected=80) [ 201.538026][ T5147] Bluetooth: hci2: command tx timeout [ 201.561310][T10245] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 201.572577][T10245] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 201.590579][T10245] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 201.611603][T10245] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 201.718323][T10245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.748833][T10245] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.768914][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.776087][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.808075][ T3537] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.815265][ T3537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.991494][T10391] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.019064][T10391] tipc: Enabling of bearer rejected, failed to enable media [ 202.035746][T10393] lo speed is unknown, defaulting to 1000 [ 202.211362][T10245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.395708][T10245] veth0_vlan: entered promiscuous mode [ 202.434536][T10245] veth1_vlan: entered promiscuous mode [ 202.518363][T10245] veth0_macvtap: entered promiscuous mode [ 202.538014][T10245] veth1_macvtap: entered promiscuous mode [ 202.600984][T10245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.641322][T10245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.676870][T10245] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.696361][T10245] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.714755][T10245] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.723512][T10245] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.882644][T10436] netlink: 'syz.0.1246': attribute type 32 has an invalid length. [ 202.898087][ T1326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.933847][ T1326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.028789][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.058814][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.389452][T10445] syz.4.1250[10445] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.389550][T10445] syz.4.1250[10445] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.405720][T10445] syz.4.1250[10445] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.861888][T10459] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 203.956816][T10459] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 204.200064][T10468] tipc: Enabled bearer , priority 18 [ 204.206852][T10467] tipc: Enabling of bearer rejected, already enabled [ 204.273171][T10470] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 204.314825][T10470] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 204.746710][T10497] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.090357][ T1149] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.110916][T10512] syzkaller1: entered promiscuous mode [ 205.117285][T10512] syzkaller1: entered allmulticast mode [ 206.031298][T10515] __nla_validate_parse: 9 callbacks suppressed [ 206.031318][T10515] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1275'. [ 206.417580][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 206.427078][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 206.435909][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 206.444294][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 206.449645][T10539] lo speed is unknown, defaulting to 1000 [ 206.459401][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 206.467110][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 206.564219][T10540] lo speed is unknown, defaulting to 1000 [ 206.682726][T10555] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1284'. [ 206.716393][T10557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1287'. [ 206.813607][ T1149] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.972885][T10565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1290'. [ 207.183967][ T1149] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.184033][T10583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1293'. [ 207.293472][ T1149] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.332645][T10540] chnl_net:caif_netlink_parms(): no params data found [ 207.481279][ T3537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.510167][ T3537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.611904][T10540] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.631490][T10540] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.642075][T10540] bridge_slave_0: entered allmulticast mode [ 207.653160][T10540] bridge_slave_0: entered promiscuous mode [ 207.684564][T10603] x_tables: duplicate underflow at hook 3 [ 207.710199][T10540] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.758525][T10540] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.783371][T10540] bridge_slave_1: entered allmulticast mode [ 207.808887][T10540] bridge_slave_1: entered promiscuous mode [ 207.828209][ T1149] bridge_slave_1: left allmulticast mode [ 207.833980][ T1149] bridge_slave_1: left promiscuous mode [ 207.841587][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.871558][ T1149] bridge_slave_0: left allmulticast mode [ 207.880460][ T1149] bridge_slave_0: left promiscuous mode [ 207.886753][ T1149] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.457395][ T1149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.478171][ T1149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.490929][ T1149] bond0 (unregistering): Released all slaves [ 208.508051][T10611] netlink: 340 bytes leftover after parsing attributes in process `syz.4.1302'. [ 208.565854][ T5837] Bluetooth: hci2: command tx timeout [ 208.676447][T10621] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.825087][T10613] lo speed is unknown, defaulting to 1000 [ 208.827841][T10540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.899121][T10621] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.930580][T10540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.941239][T10616] lo speed is unknown, defaulting to 1000 [ 209.081958][T10621] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.211627][T10540] team0: Port device team_slave_0 added [ 209.233623][T10621] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.393253][T10540] team0: Port device team_slave_1 added [ 209.692249][ T1149] hsr_slave_0: left promiscuous mode [ 209.703132][ T1149] hsr_slave_1: left promiscuous mode [ 209.709909][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.718939][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.727283][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.745570][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.772917][ T1149] veth1_macvtap: left promiscuous mode [ 209.779067][ T1149] veth0_macvtap: left promiscuous mode [ 209.784678][ T1149] veth1_vlan: left promiscuous mode [ 209.790400][ T1149] veth0_vlan: left promiscuous mode [ 210.380833][ T1149] team0 (unregistering): Port device team_slave_1 removed [ 210.433616][ T1149] team0 (unregistering): Port device team_slave_0 removed [ 210.646837][ T5837] Bluetooth: hci2: command tx timeout [ 210.851154][T10621] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.860029][T10540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.874968][T10540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.902568][T10540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.915475][T10540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.922432][T10540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.948501][T10540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.018856][T10621] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.048485][T10540] hsr_slave_0: entered promiscuous mode [ 211.055633][T10540] hsr_slave_1: entered promiscuous mode [ 211.064013][T10540] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.072970][T10540] Cannot create hsr debugfs directory [ 211.136951][T10621] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.183402][T10621] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.216009][T10664] netlink: 'syz.0.1314': attribute type 1 has an invalid length. [ 211.231859][T10664] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1314'. [ 211.705782][T10680] syzkaller0: entered promiscuous mode [ 211.719873][T10680] syzkaller0: entered allmulticast mode [ 211.814170][T10690] netlink: 47 bytes leftover after parsing attributes in process `syz.3.1321'. [ 211.823053][T10689] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1322'. [ 211.923146][T10691] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1322'. [ 211.933018][T10691] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1322'. [ 212.725020][ T5837] Bluetooth: hci2: command tx timeout [ 213.583551][T10540] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 213.625719][T10540] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 213.662928][T10540] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 213.686256][T10540] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 213.718190][T10706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1326'. [ 213.759677][T10709] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1329'. [ 213.785531][T10710] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 213.861665][T10540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.912835][T10540] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.961655][T10720] sctp: [Deprecated]: syz.4.1332 (pid 10720) Use of int in maxseg socket option. [ 213.961655][T10720] Use struct sctp_assoc_value instead [ 214.122071][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.129216][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.170828][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.178014][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.212374][T10540] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 214.231640][T10540] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.548993][T10540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.574656][T10740] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1336'. [ 214.654127][T10540] veth0_vlan: entered promiscuous mode [ 214.690794][T10740] lo speed is unknown, defaulting to 1000 [ 214.703233][T10540] veth1_vlan: entered promiscuous mode [ 214.726474][T10540] veth0_macvtap: entered promiscuous mode [ 214.804989][ T5837] Bluetooth: hci2: command tx timeout [ 214.813069][T10540] veth1_macvtap: entered promiscuous mode [ 214.926500][T10540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.938528][T10540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.983788][T10749] netlink: 'syz.3.1338': attribute type 3 has an invalid length. [ 214.996663][T10540] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.039778][T10540] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.083199][T10754] netlink: 'syz.3.1340': attribute type 3 has an invalid length. [ 215.093665][T10540] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.115060][T10540] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.374894][ T1326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.385153][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.393298][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.404769][ T1326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.460116][T10740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1336'. [ 215.470081][T10762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1343'. [ 217.008858][T10802] netlink: 'syz.3.1357': attribute type 3 has an invalid length. [ 217.235994][T10726] Set syz1 is full, maxelem 65536 reached [ 217.300774][T10809] __nla_validate_parse: 1 callbacks suppressed [ 217.300794][T10809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1360'. [ 217.324002][T10809] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1360'. [ 217.337778][T10809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1360'. [ 217.347247][T10809] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1360'. [ 217.360962][T10811] dvmrp1: entered allmulticast mode [ 217.371958][T10809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1360'. [ 217.381202][T10809] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1360'. [ 217.462586][T10809] netlink: 'syz.4.1360': attribute type 4 has an invalid length. [ 217.478776][T10809] ip6t_srh: unknown srh invflags 4000 [ 217.582737][T10821] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 217.685880][ T3537] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.403553][ T3537] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.492740][ T3537] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.549992][ T3537] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.649055][ T3537] bridge_slave_1: left allmulticast mode [ 218.655206][ T3537] bridge_slave_1: left promiscuous mode [ 218.660968][ T3537] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.669966][ T3537] bridge_slave_0: left allmulticast mode [ 218.676017][ T3537] bridge_slave_0: left promiscuous mode [ 218.681782][ T3537] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.971446][T10834] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1367'. [ 219.336865][ T5147] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 219.355556][ T5147] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 219.364513][ T5147] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 219.373158][ T5147] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 219.390473][ T5147] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 219.398187][ T5147] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 219.494595][ T3537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.546597][ T3537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.599054][ T3537] bond0 (unregistering): Released all slaves [ 219.646857][T10829] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1367'. [ 219.675425][T10829] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1367'. [ 220.026131][T10861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1374'. [ 220.040302][T10857] lo speed is unknown, defaulting to 1000 [ 220.140554][T10873] netlink: 'syz.0.1378': attribute type 1 has an invalid length. [ 220.172636][T10877] Cannot find add_set index 32768 as target [ 220.195632][T10874] netlink: 'syz.0.1378': attribute type 1 has an invalid length. [ 220.236948][T10873] 8021q: adding VLAN 0 to HW filter on device bond2 [ 220.319569][T10884] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20001 [ 220.349208][T10875] 8021q: adding VLAN 0 to HW filter on device bond2 [ 220.368977][T10875] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 220.405170][T10875] bond2: (slave vcan1): Error -95 calling set_mac_address [ 220.507210][ T3537] hsr_slave_0: left promiscuous mode [ 220.533033][ T3537] hsr_slave_1: left promiscuous mode [ 220.565895][ T3537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.586953][ T3537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.616247][ T3537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.623998][ T3537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.656890][ T3537] veth1_macvtap: left promiscuous mode [ 220.663352][ T3537] veth0_macvtap: left promiscuous mode [ 220.669542][ T3537] veth1_vlan: left promiscuous mode [ 220.674969][ T3537] veth0_vlan: left promiscuous mode [ 221.130485][ T3537] team0 (unregistering): Port device team_slave_1 removed [ 221.173175][ T3537] team0 (unregistering): Port device team_slave_0 removed [ 221.445273][ T5837] Bluetooth: hci2: command tx timeout [ 221.610827][T10873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.621134][T10873] bond2: (slave batadv0): making interface the new active one [ 221.631033][T10873] bond2: (slave batadv0): Enslaving as an active interface with an up link [ 221.954849][T10857] chnl_net:caif_netlink_parms(): no params data found [ 222.016509][T10925] sctp: [Deprecated]: syz.4.1393 (pid 10925) Use of struct sctp_assoc_value in delayed_ack socket option. [ 222.016509][T10925] Use struct sctp_sack_info instead [ 222.046942][T10925] IPVS: set_ctl: invalid protocol: 59 100.1.1.2:20004 [ 222.063990][T10925] sctp: [Deprecated]: syz.4.1393 (pid 10925) Use of int in max_burst socket option deprecated. [ 222.063990][T10925] Use struct sctp_assoc_value instead [ 222.282166][T10857] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.290534][T10857] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.301489][T10857] bridge_slave_0: entered allmulticast mode [ 222.312287][T10857] bridge_slave_0: entered promiscuous mode [ 222.355696][T10857] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.376083][T10857] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.392791][T10857] bridge_slave_1: entered allmulticast mode [ 222.408335][T10857] bridge_slave_1: entered promiscuous mode [ 222.541216][T10955] __nla_validate_parse: 5 callbacks suppressed [ 222.541235][T10955] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1402'. [ 222.567839][T10955] netlink: ct family unspecified [ 222.572209][T10857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.582303][T10955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.598962][T10857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.656837][T10963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1404'. [ 222.743756][T10857] team0: Port device team_slave_0 added [ 222.753939][T10967] x_tables: ip_tables: osf match: only valid for protocol 6 [ 222.768101][T10969] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1407'. [ 222.776802][T10857] team0: Port device team_slave_1 added [ 222.777722][T10970] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1407'. [ 222.914078][T10975] xt_TCPMSS: Only works on TCP SYN packets [ 222.932400][T10975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1409'. [ 222.984894][T10857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.991882][T10857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.075591][T10857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.105466][T10977] lo speed is unknown, defaulting to 1000 [ 223.140618][T10857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.151929][T10857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.188078][T10857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.304942][T10989] IPVS: length: 232 != 8 [ 223.359473][T10989] x_tables: duplicate underflow at hook 2 [ 223.397397][T10993] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1414'. [ 223.436582][T10857] hsr_slave_0: entered promiscuous mode [ 223.445173][T10857] hsr_slave_1: entered promiscuous mode [ 223.459449][T10857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.474622][T10857] Cannot create hsr debugfs directory [ 223.529069][ T5837] Bluetooth: hci2: command tx timeout [ 223.776246][T11008] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 223.794887][T11008] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 223.810498][T11008] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 223.820020][T11008] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 224.072253][T11020] tipc: Started in network mode [ 224.077449][T11020] tipc: Node identity ffff0000000000000080ffffffffffff, cluster identity 4711 [ 224.269010][T10857] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 224.297206][T10857] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 224.320204][T10857] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 224.340447][T10857] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 224.349564][T11029] netlink: 'syz.0.1426': attribute type 10 has an invalid length. [ 224.359098][T11029] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1426'. [ 224.393862][T11031] netlink: 'syz.4.1427': attribute type 3 has an invalid length. [ 224.506474][T10857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.541717][T10857] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.553630][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.560852][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.587635][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.594810][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.670178][T11040] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1430'. [ 224.795233][T11043] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 224.915061][T11051] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1433'. [ 225.044284][T10857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.139184][T11061] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1437'. [ 225.146921][T10857] veth0_vlan: entered promiscuous mode [ 225.221498][T10857] veth1_vlan: entered promiscuous mode [ 225.294524][T10857] veth0_macvtap: entered promiscuous mode [ 225.320806][T10857] veth1_macvtap: entered promiscuous mode [ 225.383497][T10857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.423443][T10857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.450177][T11073] lo speed is unknown, defaulting to 1000 [ 225.453010][T10857] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.489744][T10857] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.508854][T10857] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.527814][T10857] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.551300][T11072] lo speed is unknown, defaulting to 1000 [ 225.605513][ T5147] Bluetooth: hci2: command tx timeout [ 225.798902][T11088] ipt_rpfilter: unknown options [ 225.863240][ T1326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.892081][ T1326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.896823][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.907872][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.125463][T11099] tipc: Enabling of bearer rejected, failed to enable media [ 226.207349][T11106] FAULT_INJECTION: forcing a failure. [ 226.207349][T11106] name failslab, interval 1, probability 0, space 0, times 0 [ 226.236446][T11106] CPU: 1 UID: 0 PID: 11106 Comm: syz.4.1453 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 226.247263][T11106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 226.257325][T11106] Call Trace: [ 226.260603][T11106] [ 226.263543][T11106] dump_stack_lvl+0x241/0x360 [ 226.268228][T11106] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.273427][T11106] ? __pfx__printk+0x10/0x10 [ 226.278016][T11106] ? __kmalloc_noprof+0xb5/0x4c0 [ 226.282957][T11106] ? __pfx___might_resched+0x10/0x10 [ 226.288241][T11106] should_fail_ex+0x3b0/0x4e0 [ 226.292919][T11106] should_failslab+0xac/0x100 [ 226.297597][T11106] __kmalloc_noprof+0xdd/0x4c0 [ 226.302367][T11106] ? iovec_from_user+0x87/0x240 [ 226.307224][T11106] iovec_from_user+0x87/0x240 [ 226.311902][T11106] __import_iovec+0x152/0x870 [ 226.316589][T11106] import_iovec+0xeb/0x120 [ 226.321020][T11106] copy_msghdr_from_user+0x52f/0x680 [ 226.326313][T11106] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 226.332122][T11106] ? __fget_files+0x2a/0x410 [ 226.336728][T11106] ? __fget_files+0x2a/0x410 [ 226.341324][T11106] __sys_sendmmsg+0x32b/0x720 [ 226.346012][T11106] ? __pfx___sys_sendmmsg+0x10/0x10 [ 226.351220][T11106] ? __pfx_lock_release+0x10/0x10 [ 226.356246][T11106] ? kstrtouint_from_user+0x128/0x190 [ 226.361635][T11106] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 226.367530][T11106] ? ksys_write+0x22a/0x2b0 [ 226.372027][T11106] ? __pfx_lock_release+0x10/0x10 [ 226.377057][T11106] ? vfs_write+0x730/0xd30 [ 226.381471][T11106] ? __mutex_unlock_slowpath+0x21e/0x790 [ 226.387127][T11106] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 226.393106][T11106] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 226.399432][T11106] ? do_syscall_64+0x100/0x230 [ 226.404193][T11106] __x64_sys_sendmmsg+0xa0/0xb0 [ 226.409047][T11106] do_syscall_64+0xf3/0x230 [ 226.413549][T11106] ? clear_bhb_loop+0x35/0x90 [ 226.418232][T11106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.424144][T11106] RIP: 0033:0x7fee54d85d29 [ 226.428573][T11106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.448194][T11106] RSP: 002b:00007fee55b23038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 226.456626][T11106] RAX: ffffffffffffffda RBX: 00007fee54f75fa0 RCX: 00007fee54d85d29 [ 226.464610][T11106] RDX: 0400000000000172 RSI: 0000000020003cc0 RDI: 0000000000000003 [ 226.472576][T11106] RBP: 00007fee55b23090 R08: 0000000000000000 R09: 0000000000000000 [ 226.480548][T11106] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 226.488517][T11106] R13: 0000000000000000 R14: 00007fee54f75fa0 R15: 00007ffe712359a8 [ 226.496502][T11106] [ 226.721749][T11122] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.730431][T11122] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.738977][T11122] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.747484][T11122] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.167512][T11148] FAULT_INJECTION: forcing a failure. [ 227.167512][T11148] name failslab, interval 1, probability 0, space 0, times 0 [ 227.187798][T11148] CPU: 0 UID: 0 PID: 11148 Comm: syz.1.1466 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 227.188000][T11146] netlink: 'syz.0.1464': attribute type 1 has an invalid length. [ 227.198596][T11148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 227.198616][T11148] Call Trace: [ 227.198624][T11148] [ 227.198633][T11148] dump_stack_lvl+0x241/0x360 [ 227.198664][T11148] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.198689][T11148] ? __pfx__printk+0x10/0x10 [ 227.206768][T11150] netlink: 'syz.3.1465': attribute type 3 has an invalid length. [ 227.216448][T11148] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 227.216484][T11148] ? __pfx___might_resched+0x10/0x10 [ 227.216507][T11148] should_fail_ex+0x3b0/0x4e0 [ 227.216530][T11148] should_failslab+0xac/0x100 [ 227.264414][T11150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.265531][T11148] kmem_cache_alloc_node_noprof+0x77/0x380 [ 227.265568][T11148] ? __alloc_skb+0x1c3/0x440 [ 227.265592][T11148] __alloc_skb+0x1c3/0x440 [ 227.265617][T11148] ? __pfx___alloc_skb+0x10/0x10 [ 227.295111][T11148] ? __pfx_validate_chain+0x10/0x10 [ 227.300350][T11148] alloc_skb_with_frags+0xc3/0x820 [ 227.305490][T11148] sock_alloc_send_pskb+0x91a/0xa60 [ 227.310716][T11148] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 227.316439][T11148] ? __lock_acquire+0x1397/0x2100 [ 227.321463][T11148] __ip6_append_data+0x2d6c/0x44a0 [ 227.326600][T11148] ? __pfx_lock_acquire+0x10/0x10 [ 227.331619][T11148] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 227.337171][T11148] ? __pfx___ip6_append_data+0x10/0x10 [ 227.342630][T11148] ? ip6_setup_cork+0xa6c/0x1140 [ 227.347567][T11148] ip6_make_skb+0x43b/0x530 [ 227.352070][T11148] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 227.357609][T11148] ? __pfx_ip6_make_skb+0x10/0x10 [ 227.362626][T11148] ? __pfx_lock_release+0x10/0x10 [ 227.367649][T11148] ? ip6_sk_dst_lookup_flow+0x6bf/0xa30 [ 227.373216][T11148] udpv6_sendmsg+0x23b8/0x3310 [ 227.377994][T11148] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 227.383555][T11148] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 227.388659][T11148] ? __pfx___might_resched+0x10/0x10 [ 227.393935][T11148] ? irqentry_exit+0x63/0x90 [ 227.398529][T11148] ? aa_sk_perm+0x96d/0xab0 [ 227.403037][T11148] ? sock_rps_record_flow+0x1a/0x400 [ 227.408316][T11148] ? inet_send_prepare+0x21/0x260 [ 227.413333][T11148] ? inet_send_prepare+0x5a/0x260 [ 227.418352][T11148] __sock_sendmsg+0xef/0x270 [ 227.422941][T11148] ____sys_sendmsg+0x52a/0x7e0 [ 227.427702][T11148] ? __pfx_____sys_sendmsg+0x10/0x10 [ 227.432975][T11148] ? __fget_files+0x2a/0x410 [ 227.437558][T11148] ? __fget_files+0x2a/0x410 [ 227.442144][T11148] __sys_sendmmsg+0x36a/0x720 [ 227.446823][T11148] ? __pfx___sys_sendmmsg+0x10/0x10 [ 227.452054][T11148] ? __pfx_lock_release+0x10/0x10 [ 227.457106][T11148] ? kstrtouint_from_user+0x128/0x190 [ 227.462504][T11148] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 227.468395][T11148] ? ksys_write+0x22a/0x2b0 [ 227.472896][T11148] ? __pfx_lock_release+0x10/0x10 [ 227.477918][T11148] ? vfs_write+0x730/0xd30 [ 227.482343][T11148] ? __mutex_unlock_slowpath+0x21e/0x790 [ 227.488110][T11148] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 227.494119][T11148] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 227.500480][T11148] ? do_syscall_64+0x100/0x230 [ 227.505282][T11148] __x64_sys_sendmmsg+0xa0/0xb0 [ 227.510159][T11148] do_syscall_64+0xf3/0x230 [ 227.514688][T11148] ? clear_bhb_loop+0x35/0x90 [ 227.519388][T11148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.525303][T11148] RIP: 0033:0x7f7521185d29 [ 227.529741][T11148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.549373][T11148] RSP: 002b:00007f7521f2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 227.557824][T11148] RAX: ffffffffffffffda RBX: 00007f7521375fa0 RCX: 00007f7521185d29 [ 227.565821][T11148] RDX: 0400000000000172 RSI: 0000000020003cc0 RDI: 0000000000000003 [ 227.573817][T11148] RBP: 00007f7521f2b090 R08: 0000000000000000 R09: 0000000000000000 [ 227.581814][T11148] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 227.589805][T11148] R13: 0000000000000000 R14: 00007f7521375fa0 R15: 00007ffc97860898 [ 227.597812][T11148] [ 227.684959][ T5147] Bluetooth: hci2: command 0x0419 tx timeout [ 228.007156][T11175] __nla_validate_parse: 6 callbacks suppressed [ 228.007175][T11175] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1471'. [ 228.045139][T11175] bond2: entered promiscuous mode [ 228.050236][T11175] bond2: entered allmulticast mode [ 228.059288][T11175] 8021q: adding VLAN 0 to HW filter on device bond2 [ 228.091686][T11163] delete_channel: no stack [ 228.094959][T11175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1471'. [ 228.188098][T11182] ieee802154 phy1 wpan1: encryption failed: -22 [ 228.213127][T11182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1473'. [ 228.327171][T11185] x_tables: duplicate underflow at hook 1 [ 228.344053][T11185] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 228.391178][T11188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1475'. [ 228.461200][T11188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1475'. [ 228.586359][T11194] lo speed is unknown, defaulting to 1000 [ 228.683051][T11195] lo speed is unknown, defaulting to 1000 [ 229.218542][T11206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1479'. [ 229.794078][ T3511] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.882226][ T3511] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.960586][ T3511] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.040376][ T3511] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.112857][ T3511] bridge_slave_1: left allmulticast mode [ 230.118733][ T3511] bridge_slave_1: left promiscuous mode [ 230.124511][ T3511] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.133607][ T3511] bridge_slave_0: left allmulticast mode [ 230.139418][ T3511] bridge_slave_0: left promiscuous mode [ 230.146472][ T3511] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.462095][ T3511] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.473023][ T3511] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.483397][ T3511] bond0 (unregistering): Released all slaves [ 230.737863][ T3511] hsr_slave_0: left promiscuous mode [ 230.743678][ T3511] hsr_slave_1: left promiscuous mode [ 230.750898][ T3511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.759156][ T3511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.770562][ T3511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.778351][ T3511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.799840][ T3511] veth1_macvtap: left promiscuous mode [ 230.805650][ T3511] veth0_macvtap: left promiscuous mode [ 230.811245][ T3511] veth1_vlan: left promiscuous mode [ 230.817930][ T3511] veth0_vlan: left promiscuous mode [ 231.061633][T11233] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1485'. [ 231.116016][T11236] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1485'. [ 231.373259][ T5147] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 231.383055][ T5147] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 231.401432][ T5147] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 231.411982][ T5147] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 231.422300][ T5147] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 231.432244][ T5147] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 231.464159][ T3511] team0 (unregistering): Port device team_slave_1 removed [ 231.512021][ T3511] team0 (unregistering): Port device team_slave_0 removed [ 231.939370][T11234] dvmrp5: entered allmulticast mode [ 232.110838][T11251] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 232.156883][T11234] dvmrp5: left allmulticast mode [ 232.266332][T11259] netlink: 'syz.0.1493': attribute type 1 has an invalid length. [ 232.283514][T11259] netlink: 'syz.0.1493': attribute type 2 has an invalid length. [ 232.291835][T11246] lo speed is unknown, defaulting to 1000 [ 232.299159][T11259] netlink: 'syz.0.1493': attribute type 2 has an invalid length. [ 232.307389][T11259] netlink: 'syz.0.1493': attribute type 2 has an invalid length. [ 232.315709][T11259] netlink: 'syz.0.1493': attribute type 2 has an invalid length. [ 232.323763][T11260] netlink: 'syz.0.1493': attribute type 1 has an invalid length. [ 232.335455][T11260] netlink: 'syz.0.1493': attribute type 2 has an invalid length. [ 232.343395][T11260] netlink: 'syz.0.1493': attribute type 2 has an invalid length. [ 232.362056][T11260] netlink: 'syz.0.1493': attribute type 2 has an invalid length. [ 232.373347][T11260] netlink: 'syz.0.1493': attribute type 2 has an invalid length. [ 232.525611][T11270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1495'. [ 233.525377][ T5837] Bluetooth: hci2: command tx timeout [ 234.591806][T11281] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1497'. [ 235.261896][T11275] bridge4: port 1(bridge_slave_1) entered blocking state [ 235.271836][T11275] bridge4: port 1(bridge_slave_1) entered disabled state [ 235.284029][T11275] bridge_slave_1: entered allmulticast mode [ 235.292133][T11275] bridge_slave_1: entered promiscuous mode [ 235.368738][T11284] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1499'. [ 235.403769][T11284] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 235.484001][T11291] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 235.509044][T11291] netlink: zone id is out of range [ 235.514205][T11291] netlink: zone id is out of range [ 235.520070][T11291] netlink: zone id is out of range [ 235.526645][T11291] netlink: zone id is out of range [ 235.535099][T11291] netlink: zone id is out of range [ 235.540425][T11291] netlink: zone id is out of range [ 235.549753][T11291] netlink: zone id is out of range [ 235.561757][T11291] netlink: zone id is out of range [ 235.578147][T11291] netlink: zone id is out of range [ 235.605770][ T5837] Bluetooth: hci2: command tx timeout [ 236.634066][T11326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1509'. [ 237.606505][T11246] chnl_net:caif_netlink_parms(): no params data found [ 237.638088][T11336] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1511'. [ 237.684954][ T5837] Bluetooth: hci2: command tx timeout [ 237.919601][T11246] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.929413][T11246] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.939647][T11246] bridge_slave_0: entered allmulticast mode [ 237.951342][T11246] bridge_slave_0: entered promiscuous mode [ 237.965633][T11246] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.972826][T11246] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.981094][T11246] bridge_slave_1: entered allmulticast mode [ 237.988582][T11246] bridge_slave_1: entered promiscuous mode [ 238.009126][T11358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1516'. [ 238.083694][T11357] syzkaller1: entered promiscuous mode [ 238.090985][T11357] syzkaller1: entered allmulticast mode [ 238.112090][T11246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.128177][T11363] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 238.142664][T11246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.253888][T11246] team0: Port device team_slave_0 added [ 238.277992][T11246] team0: Port device team_slave_1 added [ 238.338632][T11246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.355624][T11246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.387725][T11246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.403212][T11246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.410539][T11246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.447670][T11246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.552773][T11381] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1526'. [ 238.726001][T11246] hsr_slave_0: entered promiscuous mode [ 238.743775][T11246] hsr_slave_1: entered promiscuous mode [ 238.785683][T11246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.793314][T11246] Cannot create hsr debugfs directory [ 238.842238][T11389] netlink: 'syz.1.1530': attribute type 1 has an invalid length. [ 238.861066][T11389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1530'. [ 238.900629][T11390] netlink: 'syz.4.1528': attribute type 10 has an invalid length. [ 239.062866][T11399] lo speed is unknown, defaulting to 1000 [ 239.117138][T11399] lo speed is unknown, defaulting to 1000 [ 239.133457][T11399] lo speed is unknown, defaulting to 1000 [ 239.386132][T11408] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1536'. [ 239.439251][T11246] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 239.461650][T11246] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 239.473681][T11399] infiniband syz0: set active [ 239.479862][T11399] infiniband syz0: added lo [ 239.492860][ T1219] lo speed is unknown, defaulting to 1000 [ 239.500769][T11246] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 239.525483][T11246] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 239.653054][T11399] RDS/IB: syz0: added [ 239.679127][T11399] smc: adding ib device syz0 with port count 1 [ 239.755430][T11399] smc: ib device syz0 port 1 has pnetid [ 239.764813][ T5837] Bluetooth: hci2: command tx timeout [ 239.939655][T11436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1543'. [ 239.956841][T11436] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1543'. [ 239.979146][ T5926] lo speed is unknown, defaulting to 1000 [ 239.990893][T11436] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1543'. [ 239.992310][T11399] lo speed is unknown, defaulting to 1000 [ 240.026531][T11436] vlan3: entered allmulticast mode [ 240.061296][T11436] erspan0: entered allmulticast mode [ 240.121796][T11246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.173563][T11246] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.212630][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.219778][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.268013][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.275176][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.282946][T11447] x_tables: duplicate underflow at hook 1 [ 240.376464][T11399] lo speed is unknown, defaulting to 1000 [ 240.650301][T11399] lo speed is unknown, defaulting to 1000 [ 240.724365][T11246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.851445][T11246] veth0_vlan: entered promiscuous mode [ 240.869831][T11475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1551'. [ 240.901908][T11246] veth1_vlan: entered promiscuous mode [ 240.983184][T11246] veth0_macvtap: entered promiscuous mode [ 241.013193][T11399] lo speed is unknown, defaulting to 1000 [ 241.015345][T11246] veth1_macvtap: entered promiscuous mode [ 241.108196][T11246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.172703][T11246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.203669][T11399] lo speed is unknown, defaulting to 1000 [ 241.209849][T11246] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.238286][T11246] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.247380][T11246] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.256465][T11246] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.281250][T11491] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1556'. [ 241.379027][T11491] syzkaller0: entered promiscuous mode [ 241.384551][T11491] syzkaller0: entered allmulticast mode [ 241.433282][T11399] lo speed is unknown, defaulting to 1000 [ 241.468134][ T1326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.489763][ T1326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.642418][T11485] : renamed from ipvlan1 [ 241.675357][T11499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1558'. [ 241.684658][T11499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1558'. [ 241.704912][ T3511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.721461][T11500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1558'. [ 241.723544][ T3511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.751465][T11500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1558'. [ 241.825629][T11505] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1560'. [ 242.103309][T11518] No such timeout policy "syz0" [ 243.812904][T11530] infiniband syz0: set active [ 243.819837][T11530] infiniband syz0: set active [ 243.872587][T11530] net_ratelimit: 339 callbacks suppressed [ 243.872599][T11530] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 243.899934][ T5843] lo speed is unknown, defaulting to 1000 [ 243.906903][ T5887] lo speed is unknown, defaulting to 1000 [ 244.954237][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.092919][T11580] netlink: 'syz.4.1582': attribute type 10 has an invalid length. [ 246.186636][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.262494][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.320391][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.420612][T11588] netlink: 'syz.3.1585': attribute type 58 has an invalid length. [ 246.429163][ T5925] IPVS: starting estimator thread 0... [ 246.452290][T11588] __nla_validate_parse: 8 callbacks suppressed [ 246.452308][T11588] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1585'. [ 246.537620][T11591] IPVS: using max 20 ests per chain, 48000 per kthread [ 246.613546][ T11] bridge_slave_1: left allmulticast mode [ 246.623910][ T11] bridge_slave_1: left promiscuous mode [ 246.645006][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.725236][ T11] bridge_slave_0: left allmulticast mode [ 246.732465][ T11] bridge_slave_0: left promiscuous mode [ 246.751160][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.821991][T11608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1591'. [ 246.955660][ T5147] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 246.996313][ T5147] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 247.008234][ T5147] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 247.034442][ T5147] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 247.056245][ T5147] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 247.063911][ T5147] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 247.064255][T11619] xt_policy: output policy not valid in PREROUTING and INPUT [ 247.075678][T11620] netlink: 'syz.4.1594': attribute type 10 has an invalid length. [ 247.130846][T11620] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1594'. [ 247.362153][T11634] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 247.516756][T11637] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1597'. [ 247.548994][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.564069][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.575376][ T11] bond0 (unregistering): Released all slaves [ 247.670019][T11637] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.745672][T11637] bridge_slave_0 (unregistering): left allmulticast mode [ 247.753478][T11637] bridge_slave_0 (unregistering): left promiscuous mode [ 247.782135][T11637] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.003698][T11613] lo speed is unknown, defaulting to 1000 [ 248.013492][T11613] lo speed is unknown, defaulting to 1000 [ 248.478435][T11653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.499605][T11653] netlink: 'syz.0.1601': attribute type 10 has an invalid length. [ 248.536800][ T11] hsr_slave_0: left promiscuous mode [ 248.542831][ T11] hsr_slave_1: left promiscuous mode [ 248.548986][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.557340][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.566075][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.573717][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.666570][ T11] veth1_macvtap: left promiscuous mode [ 248.673757][ T11] veth0_macvtap: left promiscuous mode [ 248.700911][ T11] veth1_vlan: left promiscuous mode [ 248.710663][ T11] veth0_vlan: left promiscuous mode [ 249.204886][ T5837] Bluetooth: hci2: command tx timeout [ 249.273994][ T11] team0 (unregistering): Port device team_slave_1 removed [ 249.320929][ T11] team0 (unregistering): Port device team_slave_0 removed [ 249.926252][T11613] chnl_net:caif_netlink_parms(): no params data found [ 250.115362][T11613] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.124352][T11613] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.146794][T11613] bridge_slave_0: entered allmulticast mode [ 250.161632][T11613] bridge_slave_0: entered promiscuous mode [ 250.190809][T11613] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.215480][T11613] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.223054][T11613] bridge_slave_1: entered allmulticast mode [ 250.233843][T11613] bridge_slave_1: entered promiscuous mode [ 250.263490][T11701] geneve2: entered promiscuous mode [ 250.269054][T11701] geneve2: entered allmulticast mode [ 250.317311][T11613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.347967][T11613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.414979][T11613] team0: Port device team_slave_0 added [ 250.437460][T11613] team0: Port device team_slave_1 added [ 250.507901][T11613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.524207][T11613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.551120][T11613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.575795][T11613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.582781][T11613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.638485][T11613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.714521][T11613] hsr_slave_0: entered promiscuous mode [ 250.724392][T11613] hsr_slave_1: entered promiscuous mode [ 250.732530][T11613] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.740266][T11613] Cannot create hsr debugfs directory [ 251.077300][T11726] batadv_slave_0: entered promiscuous mode [ 251.115480][T11726] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1618'. [ 251.124583][T11726] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 251.166594][T11731] netlink: 'syz.3.1619': attribute type 1 has an invalid length. [ 251.286171][ T5147] Bluetooth: hci2: command tx timeout [ 251.411735][T11613] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 251.422683][T11613] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 251.434436][T11613] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 251.445805][T11613] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 251.520992][T11613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.539390][T11613] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.559250][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.566442][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.577817][T11753] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 251.587788][ T3457] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.594966][ T3457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.800691][T11613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.840943][T11613] veth0_vlan: entered promiscuous mode [ 251.851309][T11613] veth1_vlan: entered promiscuous mode [ 251.878761][T11613] veth0_macvtap: entered promiscuous mode [ 251.889102][T11613] veth1_macvtap: entered promiscuous mode [ 251.908705][T11613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.928168][T11613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.954467][T11613] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.964412][T11613] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.981858][T11613] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.991408][T11613] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.086637][T11768] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1629'. [ 252.102497][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.111643][T11768] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1629'. [ 252.117241][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.161924][T11768] ip6gretap2: entered allmulticast mode [ 252.190475][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.220379][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.368211][T11778] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1631'. [ 252.386002][T11778] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1631'. [ 252.397320][T11780] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1631'. [ 253.025922][T11807] gtp0: entered promiscuous mode [ 253.030917][T11807] gtp0: entered allmulticast mode [ 253.109386][T11817] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1643'. [ 253.365605][ T5147] Bluetooth: hci2: command 0x040f tx timeout [ 253.437890][T11837] SET target dimension over the limit! [ 253.450063][T11837] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 253.463816][T11838] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 253.634328][T11847] IPVS: length: 251 != 24 [ 254.027906][T11865] netlink: 'syz.0.1658': attribute type 1 has an invalid length. [ 254.172255][T11871] netlink: 'syz.4.1661': attribute type 1 has an invalid length. [ 254.188822][T11871] netlink: 'syz.4.1661': attribute type 1 has an invalid length. [ 254.266527][T11875] netlink: 'syz.3.1663': attribute type 66 has an invalid length. [ 254.275946][T11875] netlink: 'syz.3.1663': attribute type 1 has an invalid length. [ 254.284206][T11875] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1663'. [ 254.323072][T11876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1661'. [ 254.335006][T11876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.356427][T11876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.675944][T11896] netlink: 'syz.4.1667': attribute type 3 has an invalid length. [ 254.757166][T11899] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.814623][T11899] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.882153][T11905] lo speed is unknown, defaulting to 1000 [ 254.885764][T11907] netlink: 'syz.0.1672': attribute type 1 has an invalid length. [ 254.898469][T11899] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.919732][T11905] lo speed is unknown, defaulting to 1000 [ 254.989013][T11899] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.160014][T11899] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.203065][T11899] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.264041][T11899] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.322568][T11899] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.528691][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.928491][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.074447][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.151912][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.209561][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.289674][ T11] bridge_slave_1: left allmulticast mode [ 256.295657][ T11] bridge_slave_1: left promiscuous mode [ 256.301367][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.310418][ T11] bridge_slave_0: left allmulticast mode [ 256.316547][ T11] bridge_slave_0: left promiscuous mode [ 256.322203][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.610591][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.622450][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.633541][ T11] bond0 (unregistering): Released all slaves [ 256.920758][ T11] hsr_slave_0: left promiscuous mode [ 256.927201][ T11] hsr_slave_1: left promiscuous mode [ 256.935042][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.942457][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.952084][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.960011][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.983037][ T11] veth1_macvtap: left promiscuous mode [ 256.988923][ T11] veth0_macvtap: left promiscuous mode [ 256.994465][ T11] veth1_vlan: left promiscuous mode [ 256.999907][ T11] veth0_vlan: left promiscuous mode [ 257.321026][ T5147] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 257.336839][ T5147] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 257.360955][ T5147] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 257.370720][ T5147] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 257.380569][ T5147] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 257.388900][ T5147] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 258.000143][ T11] team0 (unregistering): Port device team_slave_1 removed [ 258.041021][ T11] team0 (unregistering): Port device team_slave_0 removed [ 258.422506][T11930] team0 (unregistering): Port device team_slave_0 removed [ 258.445904][T11930] team0 (unregistering): Port device team_slave_1 removed [ 258.459721][T11930] team0 (unregistering): Port device bridge0 removed [ 258.468866][T11930] team0 (unregistering): Port device bridge1 removed [ 258.506322][T11929] lo speed is unknown, defaulting to 1000 [ 258.513074][T11929] lo speed is unknown, defaulting to 1000 [ 258.821394][T11960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1685'. [ 258.962651][T11965] batman_adv: batadv0: Adding interface: gretap3 [ 258.969323][T11965] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.017123][T11965] batman_adv: batadv0: Not using interface gretap3 (retrying later): interface not active [ 259.117132][T11971] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1689'. [ 259.199516][T11929] chnl_net:caif_netlink_parms(): no params data found [ 259.444882][ T5837] Bluetooth: hci2: command tx timeout [ 259.538727][T11929] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.575751][T11929] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.594966][T11929] bridge_slave_0: entered allmulticast mode [ 259.602291][T11929] bridge_slave_0: entered promiscuous mode [ 259.638593][T11929] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.650531][T11929] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.676128][T11929] bridge_slave_1: entered allmulticast mode [ 259.702548][T11929] bridge_slave_1: entered promiscuous mode [ 259.799509][T11929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.811086][T11929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.843790][T11997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1696'. [ 259.892993][T11929] team0: Port device team_slave_0 added [ 259.902230][T11929] team0: Port device team_slave_1 added [ 259.968576][T11929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.984892][T11929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.016558][T11929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.033713][T11929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.041055][T11929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.073961][T11929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.097313][T12002] openvswitch: netlink: Missing key (keys=40, expected=100) [ 260.232322][T11929] hsr_slave_0: entered promiscuous mode [ 260.246779][T11929] hsr_slave_1: entered promiscuous mode [ 260.253328][T11929] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.269382][T11929] Cannot create hsr debugfs directory [ 260.320468][T12011] Cannot find add_set index 0 as target [ 260.810485][T12038] bridge1: entered promiscuous mode [ 260.824149][T12038] bridge1: entered allmulticast mode [ 260.846572][T12042] netlink: 'syz.1.1707': attribute type 10 has an invalid length. [ 260.848949][T12038] team0: Port device bridge1 added [ 260.864816][T11929] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 260.888804][T11929] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 260.898871][T11929] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 260.910767][T12042] bridge0: port 1(ªªªªª) entered blocking state [ 260.919424][T12042] bridge0: port 1(ªªªªª) entered disabled state [ 260.926453][T12042] ªªªªª: entered allmulticast mode [ 260.935496][T12042] ªªªªª: entered promiscuous mode [ 260.943962][T12042] bridge0: port 1(ªªªªª) entered blocking state [ 260.951140][T12042] bridge0: port 1(ªªªªª) entered forwarding state [ 260.982489][T11929] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 261.000398][T12045] lo speed is unknown, defaulting to 1000 [ 261.016837][T12045] lo speed is unknown, defaulting to 1000 [ 261.083899][T12048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1710'. [ 261.159438][T11929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.201871][T11929] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.230152][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.237339][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.287835][ T3457] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.295041][ T3457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.524873][ T5837] Bluetooth: hci2: command tx timeout [ 261.716914][T12066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.908619][T11929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.044424][T11929] veth0_vlan: entered promiscuous mode [ 262.152930][T12079] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1718'. [ 262.223645][T12079] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1718'. [ 262.265565][T11929] veth1_vlan: entered promiscuous mode [ 262.288346][T12080] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1718'. [ 262.300022][T11929] veth0_macvtap: entered promiscuous mode [ 262.309296][T11929] veth1_macvtap: entered promiscuous mode [ 262.324948][T11929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.348094][T11929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.359824][T11929] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.368746][T11929] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.377568][T11929] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.386319][T11929] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.596220][ T1326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.626696][T12090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1721'. [ 262.634836][ T1326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.665899][T12096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1720'. [ 262.723988][ T3472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.741635][ T3472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.196301][T12122] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1731'. [ 263.233413][T12122] erspan0: entered promiscuous mode [ 263.241078][T12122] erspan0: left promiscuous mode [ 263.401000][T12135] lo speed is unknown, defaulting to 1000 [ 263.407969][T12135] lo speed is unknown, defaulting to 1000 [ 264.011298][T12148] netlink: 'syz.3.1738': attribute type 4 has an invalid length. [ 264.610864][ T3511] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.442206][ T3511] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.509991][ T3511] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.559727][ T3511] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.613441][ T3511] bridge_slave_1: left allmulticast mode [ 265.619832][ T3511] bridge_slave_1: left promiscuous mode [ 265.627188][ T3511] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.636190][ T3511] bridge_slave_0: left allmulticast mode [ 265.641842][ T3511] bridge_slave_0: left promiscuous mode [ 265.647895][ T3511] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.961174][ T3511] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.061248][T12169] __nla_validate_parse: 2 callbacks suppressed [ 266.061267][T12169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1743'. [ 266.078321][ T3511] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.105303][ T3511] bond0 (unregistering): Released all slaves [ 266.152589][T12176] netlink: 'syz.4.1746': attribute type 46 has an invalid length. [ 266.164395][T12176] netlink: 212868 bytes leftover after parsing attributes in process `syz.4.1746'. [ 266.164953][T12169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1743'. [ 266.423634][T12184] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1748'. [ 266.446523][T12184] netlink: 'syz.3.1748': attribute type 1 has an invalid length. [ 266.456830][T12184] netlink: 'syz.3.1748': attribute type 1 has an invalid length. [ 266.500230][ T5147] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 266.510597][ T5147] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 266.522513][ T5147] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 266.543507][ T5147] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 266.553556][ T5147] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 266.561161][ T5147] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 266.587801][T12190] netlink: 'syz.0.1749': attribute type 7 has an invalid length. [ 266.633587][T12192] vlan4: entered promiscuous mode [ 266.666584][T12187] lo speed is unknown, defaulting to 1000 [ 266.693256][T12187] lo speed is unknown, defaulting to 1000 [ 267.190729][ T3511] hsr_slave_0: left promiscuous mode [ 267.257683][ T3511] hsr_slave_1: left promiscuous mode [ 267.274599][ T3511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.282521][ T3511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.299740][ T3511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.309314][ T3511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.371695][ T3511] veth1_macvtap: left promiscuous mode [ 267.385291][T12221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1761'. [ 267.403939][ T3511] veth0_macvtap: left promiscuous mode [ 267.413372][T12221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1761'. [ 267.427957][ T3511] veth1_vlan: left promiscuous mode [ 267.441947][ T3511] veth0_vlan: left promiscuous mode [ 267.477677][T12219] netlink: 'syz.3.1758': attribute type 1 has an invalid length. [ 267.506427][T12219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1758'. [ 267.947354][ T3511] team0 (unregistering): Port device team_slave_1 removed [ 268.001187][ T3511] team0 (unregistering): Port device team_slave_0 removed [ 268.559569][T12187] chnl_net:caif_netlink_parms(): no params data found [ 268.644859][ T5147] Bluetooth: hci2: command tx timeout [ 268.714372][T12249] netlink: 'syz.4.1763': attribute type 3 has an invalid length. [ 268.872042][T12264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1769'. [ 268.896931][T12264] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 268.910980][T12264] macvlan0: entered allmulticast mode [ 268.916861][T12264] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 268.927745][T12187] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.944531][T12187] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.985345][T12187] bridge_slave_0: entered allmulticast mode [ 268.992372][T12187] bridge_slave_0: entered promiscuous mode [ 269.016519][T12187] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.030697][T12187] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.042667][T12187] bridge_slave_1: entered allmulticast mode [ 269.050674][T12187] bridge_slave_1: entered promiscuous mode [ 269.100735][T12187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.126186][T12187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.192634][T12187] team0: Port device team_slave_0 added [ 269.221582][T12187] team0: Port device team_slave_1 added [ 269.317122][T12187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.331919][T12187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.358588][T12187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.373061][T12187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.380350][T12187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.406490][T12187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.443820][T12284] ip6_vti0: entered promiscuous mode [ 269.462422][T12187] hsr_slave_0: entered promiscuous mode [ 269.475609][T12187] hsr_slave_1: entered promiscuous mode [ 269.486839][T12187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.494417][T12187] Cannot create hsr debugfs directory [ 269.528360][T12283] ip6_vti0: left promiscuous mode [ 270.022187][T12310] xt_CT: You must specify a L4 protocol and not use inversions on it [ 270.159188][T12187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 270.183379][T12321] netlink: 'syz.4.1782': attribute type 1 has an invalid length. [ 270.198419][T12187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 270.222325][T12324] netlink: 'syz.4.1782': attribute type 1 has an invalid length. [ 270.234512][T12187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 270.271308][T12187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 270.323656][T12327] netlink: 'syz.0.1784': attribute type 1 has an invalid length. [ 270.391432][T12327] 8021q: adding VLAN 0 to HW filter on device bond3 [ 270.410797][T12331] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1785'. [ 270.421900][T12333] bond3: (slave ip6gretap1): making interface the new active one [ 270.431245][T12333] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 270.453832][ T29] audit: type=1107 audit(1734691974.823:2): pid=12332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 270.459896][T12327] bond3: entered allmulticast mode [ 270.565921][T12335] Cannot find add_set index 32768 as target [ 270.577484][T12333] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 270.587527][T12327] ip6gretap1: entered allmulticast mode [ 270.603684][T12327] x_tables: duplicate underflow at hook 3 [ 270.731258][T12187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.735275][ T5837] Bluetooth: hci2: command tx timeout [ 270.812517][T12187] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.819698][T12342] lo speed is unknown, defaulting to 1000 [ 270.827302][ T1326] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.834452][ T1326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.860356][ T1326] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.867544][ T1326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.904628][T12342] lo speed is unknown, defaulting to 1000 [ 271.289971][T12187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.362580][T12371] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1793'. [ 271.517642][T12187] veth0_vlan: entered promiscuous mode [ 271.640998][T12187] veth1_vlan: entered promiscuous mode [ 271.676985][T12187] veth0_macvtap: entered promiscuous mode [ 271.692184][T12382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1796'. [ 271.706840][T12187] veth1_macvtap: entered promiscuous mode [ 271.746836][T12187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.763058][T12187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.786604][T12187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.806465][T12187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.824862][T12187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.833736][T12187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.041715][ T3472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.075711][ T3472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.141368][ T1326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.154556][T12396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1801'. [ 272.164070][ T1326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.184866][T12396] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1801'. [ 272.497132][T12413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1804'. [ 272.515189][T12413] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1804'. [ 272.809767][ T5837] Bluetooth: hci2: command 0x040f tx timeout [ 272.885404][T12429] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1811'. [ 273.080439][T12435] bridge_slave_0: left allmulticast mode [ 273.093298][T12435] bridge_slave_0: left promiscuous mode [ 273.099380][T12435] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.109089][T12435] bridge_slave_1: left allmulticast mode [ 273.114973][T12435] bridge_slave_1: left promiscuous mode [ 273.120849][T12435] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.193442][T12435] xt_CT: You must specify a L4 protocol and not use inversions on it [ 273.766247][T12468] sctp: [Deprecated]: syz.1.1822 (pid 12468) Use of int in max_burst socket option deprecated. [ 273.766247][T12468] Use struct sctp_assoc_value instead [ 273.902499][T12472] netlink: 'syz.4.1825': attribute type 39 has an invalid length. [ 273.960435][T12474] No such timeout policy "syz0" [ 274.001500][T12474] vlan5: entered promiscuous mode [ 275.257734][T12499] IPv6: sit1: Disabled Multicast RS [ 275.343781][T12500] lo speed is unknown, defaulting to 1000 [ 275.399181][T12500] lo speed is unknown, defaulting to 1000 [ 275.450530][T12507] xt_hashlimit: Unknown mode mask 40030000, kernel too old? [ 275.481852][T12509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1837'. [ 275.510528][T12509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1837'. [ 275.624644][T12509] bond4: entered promiscuous mode [ 275.630111][T12509] bond4: entered allmulticast mode [ 275.647147][T12509] 8021q: adding VLAN 0 to HW filter on device bond4 [ 275.654155][T12510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1837'. [ 275.684474][T12516] IPVS: sync thread started: state = BACKUP, mcast_ifn = gre0, syncid = 4, id = 0 [ 275.855451][T12521] IPVS: stopping backup sync thread 12516 ... [ 276.418609][T12540] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 276.457028][T12538] [ 276.459391][T12538] ====================================================== [ 276.466418][T12538] WARNING: possible circular locking dependency detected [ 276.473449][T12538] 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 Not tainted [ 276.480571][T12538] ------------------------------------------------------ [ 276.487601][T12538] syz.1.1847/12538 is trying to acquire lock: [ 276.493671][T12538] ffff888011c40aa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_switch_to_fallback+0x35/0xd90 [ 276.504413][T12538] [ 276.504413][T12538] but task is already holding lock: [ 276.511788][T12538] ffff888011c40258 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_sendmsg+0x55/0x530 [ 276.520701][T12538] [ 276.520701][T12538] which lock already depends on the new lock. [ 276.520701][T12538] [ 276.531119][T12538] [ 276.531119][T12538] the existing dependency chain (in reverse order) is: [ 276.540153][T12538] [ 276.540153][T12538] -> #2 (sk_lock-AF_INET){+.+.}-{0:0}: [ 276.547842][T12538] lock_acquire+0x1ed/0x550 [ 276.552890][T12538] lock_sock_nested+0x48/0x100 [ 276.558200][T12538] do_ip_setsockopt+0x1a2d/0x3cd0 [ 276.563766][T12538] ip_setsockopt+0x63/0x100 [ 276.568810][T12538] do_sock_setsockopt+0x3af/0x720 [ 276.574375][T12538] __x64_sys_setsockopt+0x1ee/0x280 [ 276.580109][T12538] do_syscall_64+0xf3/0x230 [ 276.585167][T12538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.591605][T12538] [ 276.591605][T12538] -> #1 (rtnl_mutex){+.+.}-{4:4}: [ 276.598854][T12538] lock_acquire+0x1ed/0x550 [ 276.603903][T12538] __mutex_lock+0x1ac/0xee0 [ 276.608947][T12538] start_sync_thread+0xdc/0x2dc0 [ 276.614432][T12538] do_ip_vs_set_ctl+0x442/0x13d0 [ 276.619909][T12538] nf_setsockopt+0x295/0x2c0 [ 276.625037][T12538] smc_setsockopt+0x275/0xe50 [ 276.630254][T12538] do_sock_setsockopt+0x3af/0x720 [ 276.635824][T12538] __x64_sys_setsockopt+0x1ee/0x280 [ 276.641564][T12538] do_syscall_64+0xf3/0x230 [ 276.646605][T12538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.653037][T12538] [ 276.653037][T12538] -> #0 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 276.661664][T12538] validate_chain+0x18ef/0x5920 [ 276.667059][T12538] __lock_acquire+0x1397/0x2100 [ 276.672448][T12538] lock_acquire+0x1ed/0x550 [ 276.677489][T12538] __mutex_lock+0x1ac/0xee0 [ 276.682533][T12538] smc_switch_to_fallback+0x35/0xd90 [ 276.688357][T12538] smc_sendmsg+0x11f/0x530 [ 276.693307][T12538] __sock_sendmsg+0x221/0x270 [ 276.698524][T12538] __sys_sendto+0x363/0x4c0 [ 276.703567][T12538] __x64_sys_sendto+0xde/0x100 [ 276.708874][T12538] do_syscall_64+0xf3/0x230 [ 276.713920][T12538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.714826][T12542] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 276.720340][T12538] [ 276.720340][T12538] other info that might help us debug this: [ 276.720340][T12538] [ 276.720353][T12538] Chain exists of: [ 276.720353][T12538] &smc->clcsock_release_lock --> rtnl_mutex --> sk_lock-AF_INET [ 276.720353][T12538] [ 276.754471][T12538] Possible unsafe locking scenario: [ 276.754471][T12538] [ 276.761934][T12538] CPU0 CPU1 [ 276.767310][T12538] ---- ---- [ 276.772680][T12538] lock(sk_lock-AF_INET); [ 276.777118][T12538] lock(rtnl_mutex); [ 276.783643][T12538] lock(sk_lock-AF_INET); [ 276.790597][T12538] lock(&smc->clcsock_release_lock); [ 276.795988][T12538] [ 276.795988][T12538] *** DEADLOCK *** [ 276.795988][T12538] [ 276.804148][T12538] 1 lock held by syz.1.1847/12538: [ 276.809266][T12538] #0: ffff888011c40258 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_sendmsg+0x55/0x530 [ 276.818529][T12538] [ 276.818529][T12538] stack backtrace: [ 276.824422][T12538] CPU: 1 UID: 0 PID: 12538 Comm: syz.1.1847 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 276.835195][T12538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 276.845268][T12538] Call Trace: [ 276.848561][T12538] [ 276.851502][T12538] dump_stack_lvl+0x241/0x360 [ 276.856203][T12538] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.861420][T12538] ? __pfx__printk+0x10/0x10 [ 276.866034][T12538] print_circular_bug+0x13a/0x1b0 [ 276.871082][T12538] check_noncircular+0x36a/0x4a0 [ 276.876045][T12538] ? __pfx_check_noncircular+0x10/0x10 [ 276.881521][T12538] ? lockdep_lock+0x123/0x2b0 [ 276.886216][T12538] ? __lock_acquire+0x1397/0x2100 [ 276.891260][T12538] validate_chain+0x18ef/0x5920 [ 276.896147][T12538] ? __pfx_validate_chain+0x10/0x10 [ 276.901364][T12538] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 276.907360][T12538] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 276.913706][T12538] ? validate_chain+0x11e/0x5920 [ 276.918660][T12538] ? validate_chain+0x11e/0x5920 [ 276.923612][T12538] ? look_up_lock_class+0x77/0x170 [ 276.928736][T12538] ? register_lock_class+0x102/0x980 [ 276.934037][T12538] ? __pfx_register_lock_class+0x10/0x10 [ 276.939682][T12538] ? mark_lock+0x9a/0x360 [ 276.944025][T12538] ? __pfx_validate_chain+0x10/0x10 [ 276.949246][T12538] __lock_acquire+0x1397/0x2100 [ 276.954125][T12538] lock_acquire+0x1ed/0x550 [ 276.958655][T12538] ? smc_switch_to_fallback+0x35/0xd90 [ 276.964137][T12538] ? __pfx_lock_acquire+0x10/0x10 [ 276.969180][T12538] ? __pfx___might_resched+0x10/0x10 [ 276.974486][T12538] ? __lock_acquire+0x1397/0x2100 [ 276.979532][T12538] __mutex_lock+0x1ac/0xee0 [ 276.984055][T12538] ? smc_switch_to_fallback+0x35/0xd90 [ 276.989533][T12538] ? mark_lock+0x9a/0x360 [ 276.993882][T12538] ? smc_switch_to_fallback+0x35/0xd90 [ 276.999363][T12538] ? __pfx___mutex_lock+0x10/0x10 [ 277.004405][T12538] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 277.010751][T12538] ? __local_bh_enable_ip+0x168/0x200 [ 277.016151][T12538] ? lockdep_hardirqs_on+0x99/0x150 [ 277.021371][T12538] ? __local_bh_enable_ip+0x168/0x200 [ 277.026771][T12538] smc_switch_to_fallback+0x35/0xd90 [ 277.032078][T12538] ? do_raw_spin_unlock+0x13c/0x8b0 [ 277.037305][T12538] smc_sendmsg+0x11f/0x530 [ 277.041741][T12538] ? __pfx_smc_sendmsg+0x10/0x10 [ 277.046709][T12538] __sock_sendmsg+0x221/0x270 [ 277.051409][T12538] __sys_sendto+0x363/0x4c0 [ 277.055926][T12538] ? __pfx___sys_sendto+0x10/0x10 [ 277.060998][T12538] ? do_futex+0x392/0x560 [ 277.065354][T12538] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 277.071352][T12538] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 277.077698][T12538] __x64_sys_sendto+0xde/0x100 [ 277.082476][T12538] do_syscall_64+0xf3/0x230 [ 277.086992][T12538] ? clear_bhb_loop+0x35/0x90 [ 277.091685][T12538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.097676][T12538] RIP: 0033:0x7f7521185d29 [ 277.102100][T12538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.121729][T12538] RSP: 002b:00007f7521f2b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 277.130166][T12538] RAX: ffffffffffffffda RBX: 00007f7521375fa0 RCX: 00007f7521185d29 [ 277.138155][T12538] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 277.146139][T12538] RBP: 00007f7521201aa8 R08: 0000000020000040 R09: 0000000000000010 [ 277.154127][T12538] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000000 [ 277.162108][T12538] R13: 0000000000000000 R14: 00007f7521375fa0 R15: 00007ffc97860898 [ 277.170085][T12538]