last executing test programs: 1m20.503702787s ago: executing program 1 (id=866): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cedd00", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x1f, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x19, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f019"}, {0x21, 0x7, "b8a3e100908f61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015ca83747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) close(r1) 1m9.713304902s ago: executing program 1 (id=866): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cedd00", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x1f, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x19, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f019"}, {0x21, 0x7, "b8a3e100908f61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015ca83747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) close(r1) 1m5.887380357s ago: executing program 4 (id=1541): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000001800dd8d000000000000000002000000ff0000060000000008000500ac1414bb08001e0069"], 0x60}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029"], 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000070000000080a01010000000000000000020000000900010073797a30000000000900020073797a32000000002c00058008000140000000000800024000000000080001400000000608000140000000f9080001400000005c0800094000000002"], 0xc4}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x68, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x6d}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x7}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x68}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000900000000000000000000000000000000000000000000000200200000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0700"/112], 0xb8}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001800010000000000800000000200000000000006000000000600150004000000100016800c00088008000180"], 0x34}}, 0x0) 1m5.620314895s ago: executing program 4 (id=1546): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x34, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40404}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001880)={{r4}, &(0x7f0000001800), &(0x7f0000000000)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000240)={0x30000007}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, r9, 0xd574370038829967, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1002}, 0xc, &(0x7f0000000200)={&(0x7f0000000800)={0x274, r9, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffff54}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xdcd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffff6fc}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf1}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2fd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_LINK={0x160, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x38}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd02}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6b10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc46c}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f2e1893}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xeb2e}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe637}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff71}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc00000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x40000}, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x447, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r10, 0x6, 0x24, &(0x7f0000000240)=0x80000000, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a01040000000000000000020000000c00064000000000000000020900020073797a32000000000900010073797a30"], 0x60}}, 0x0) setsockopt$sock_int(r10, 0x1, 0x1d, &(0x7f0000000000)=0x7803ec77, 0x4) r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r11, 0x0, 0x484, 0x0, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0xd0, 0x24, 0x8, 0x70bd29, 0x200, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xa0, 0x2, {{0x0, 0xf}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "58d5"}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x8, {0x0, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x0, 0xe, 0x1}}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_LOSS={0x34, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x0, 0x0, 0x0, 0x4}}]}]}}}]}, 0xd0}}, 0x40) 56.642470699s ago: executing program 1 (id=866): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cedd00", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x1f, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x19, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f019"}, {0x21, 0x7, "b8a3e100908f61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015ca83747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) close(r1) 55.098994922s ago: executing program 4 (id=1546): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x34, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40404}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001880)={{r4}, &(0x7f0000001800), &(0x7f0000000000)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000240)={0x30000007}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, r9, 0xd574370038829967, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1002}, 0xc, &(0x7f0000000200)={&(0x7f0000000800)={0x274, r9, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffff54}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xdcd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffff6fc}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf1}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2fd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_LINK={0x160, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x38}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd02}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6b10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc46c}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f2e1893}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xeb2e}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe637}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff71}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc00000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x40000}, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x447, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r10, 0x6, 0x24, &(0x7f0000000240)=0x80000000, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a01040000000000000000020000000c00064000000000000000020900020073797a32000000000900010073797a30"], 0x60}}, 0x0) setsockopt$sock_int(r10, 0x1, 0x1d, &(0x7f0000000000)=0x7803ec77, 0x4) r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r11, 0x0, 0x484, 0x0, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0xd0, 0x24, 0x8, 0x70bd29, 0x200, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xa0, 0x2, {{0x0, 0xf}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "58d5"}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x8, {0x0, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x0, 0xe, 0x1}}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_LOSS={0x34, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x0, 0x0, 0x0, 0x4}}]}]}}}]}, 0xd0}}, 0x40) 40.355913221s ago: executing program 4 (id=1546): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x34, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40404}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001880)={{r4}, &(0x7f0000001800), &(0x7f0000000000)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000240)={0x30000007}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, r9, 0xd574370038829967, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1002}, 0xc, &(0x7f0000000200)={&(0x7f0000000800)={0x274, r9, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffff54}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xdcd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffff6fc}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf1}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2fd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_LINK={0x160, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x38}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd02}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6b10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc46c}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f2e1893}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xeb2e}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe637}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff71}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc00000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x40000}, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x447, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r10, 0x6, 0x24, &(0x7f0000000240)=0x80000000, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a01040000000000000000020000000c00064000000000000000020900020073797a32000000000900010073797a30"], 0x60}}, 0x0) setsockopt$sock_int(r10, 0x1, 0x1d, &(0x7f0000000000)=0x7803ec77, 0x4) r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r11, 0x0, 0x484, 0x0, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0xd0, 0x24, 0x8, 0x70bd29, 0x200, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xa0, 0x2, {{0x0, 0xf}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "58d5"}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x8, {0x0, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x0, 0xe, 0x1}}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_LOSS={0x34, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x0, 0x0, 0x0, 0x4}}]}]}}}]}, 0xd0}}, 0x40) 39.344339388s ago: executing program 1 (id=866): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cedd00", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x1f, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x19, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f019"}, {0x21, 0x7, "b8a3e100908f61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015ca83747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) close(r1) 27.142869223s ago: executing program 4 (id=1546): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x34, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40404}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001880)={{r4}, &(0x7f0000001800), &(0x7f0000000000)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000240)={0x30000007}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, r9, 0xd574370038829967, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1002}, 0xc, &(0x7f0000000200)={&(0x7f0000000800)={0x274, r9, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffff54}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xdcd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffff6fc}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf1}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2fd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_LINK={0x160, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x38}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd02}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6b10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc46c}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f2e1893}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xeb2e}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe637}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff71}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc00000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x40000}, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x447, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r10, 0x6, 0x24, &(0x7f0000000240)=0x80000000, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a01040000000000000000020000000c00064000000000000000020900020073797a32000000000900010073797a30"], 0x60}}, 0x0) setsockopt$sock_int(r10, 0x1, 0x1d, &(0x7f0000000000)=0x7803ec77, 0x4) r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r11, 0x0, 0x484, 0x0, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0xd0, 0x24, 0x8, 0x70bd29, 0x200, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xa0, 0x2, {{0x0, 0xf}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "58d5"}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x8, {0x0, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x0, 0xe, 0x1}}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_LOSS={0x34, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x0, 0x0, 0x0, 0x4}}]}]}}}]}, 0xd0}}, 0x40) 26.278173426s ago: executing program 1 (id=866): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cedd00", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x1f, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x19, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f019"}, {0x21, 0x7, "b8a3e100908f61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015ca83747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) close(r1) 6.870216239s ago: executing program 4 (id=1546): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x34, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40404}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001880)={{r4}, &(0x7f0000001800), &(0x7f0000000000)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000240)={0x30000007}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, r9, 0xd574370038829967, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1002}, 0xc, &(0x7f0000000200)={&(0x7f0000000800)={0x274, r9, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffff54}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xdcd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffff6fc}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf1}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2fd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_LINK={0x160, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x38}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd02}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6b10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc46c}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f2e1893}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xeb2e}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe637}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff71}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc00000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x40000}, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x447, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r10, 0x6, 0x24, &(0x7f0000000240)=0x80000000, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a01040000000000000000020000000c00064000000000000000020900020073797a32000000000900010073797a30"], 0x60}}, 0x0) setsockopt$sock_int(r10, 0x1, 0x1d, &(0x7f0000000000)=0x7803ec77, 0x4) r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r11, 0x0, 0x484, 0x0, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0xd0, 0x24, 0x8, 0x70bd29, 0x200, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xa0, 0x2, {{0x0, 0xf}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "58d5"}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x8, {0x0, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x0, 0xe, 0x1}}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_LOSS={0x34, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x0, 0x0, 0x0, 0x4}}]}]}}}]}, 0xd0}}, 0x40) 5.123506259s ago: executing program 1 (id=866): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cedd00", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x1f, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x19, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f019"}, {0x21, 0x7, "b8a3e100908f61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015ca83747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) close(r1) 1.709742171s ago: executing program 0 (id=1977): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000e8f9756985000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)=0x6) 1.549029022s ago: executing program 0 (id=1979): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000009bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.525679889s ago: executing program 2 (id=1980): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xc, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xc, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) 1.423123715s ago: executing program 0 (id=1981): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000006700000000000000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000000000000041400"/28], 0x50) socket$tipc(0x1e, 0x8, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1c, 0x80000001, 0xc2a2, 0x0, 0x0, 0xffffffffffffffff, 0x13, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000008000000180000171800000003000000060000000000000000000500000000006100"], &(0x7f0000000340)=""/21, 0x33, 0x15, 0x0, 0x9, 0x0, @void, @value}, 0x28) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x8}, 0x18) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) syz_emit_ethernet(0xd2, &(0x7f0000000c00)={@random="99177fa54f29", @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x9c, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "a033b04a01e34da77bc2d6bd329d97cd7a372956e41173a3076ef6a58ecde3d6", "9a03eeb056ee14740f23cc2b8ec3f5a17b78d9faff1c1d8ff5e726697185ec1b8a7f5fbdb2dffc0e7c8279dd463d7a2e", "50b4516095683fd172c4462afb0da9d67e3fe762e3f140c5933e8ecd", {"b9cc563de297e6a12802de5e5490de1b", "f99eb7447e6d443f103ff717e633a0e5"}}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x1f, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xc58}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@exit, @call={0x85, 0x0, 0x0, 0x24}, @ldst={0x0, 0x1, 0x4, 0x7, 0x9, 0x30, 0x10}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @map_fd={0x18, 0x7, 0x1, 0x0, r2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x1e00, 0x2, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f00000003c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x1, 0x6, 0x20000000}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[r5, 0xffffffffffffffff], &(0x7f0000000500)=[{0x3, 0x2, 0x5, 0x1}, {0x2, 0x2, 0x4, 0x2}], 0x10, 0x180000, @void, @value}, 0x94) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, 0xfffffffffffffffd) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xeb, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@alu={0x4, 0x1, 0x9, 0x5, 0x3, 0xfffffffffffffffe, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x2800000, 0x84, &(0x7f0000000800)=""/132, 0x41100, 0x3a, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x3, 0x1, 0x6f7, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000900)=[r1, r3, r5, 0x1, r3, r2, r1], &(0x7f0000000940)=[{0x5, 0x2, 0x7, 0x1}, {0x1, 0x1, 0x3, 0x1}, {0x5, 0x3, 0xe, 0x3}], 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000700)='btrfs_inode_mod_outstanding_extents\x00', r8, 0x0, 0x2}, 0x18) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000600)=""/240, 0xf0, 0x40000001, 0x0, 0x0) 1.422063203s ago: executing program 2 (id=1983): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0xeff, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x2100, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x8, 0x12}, 0x10) 1.364847778s ago: executing program 2 (id=1984): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x3, 'sh\x00', 0x4, 0x7, 0x49}, 0x2c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x2, 0x81, 0x19}, {@local, 0x4e20, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x4, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha256-ssse3)\x00'}, 0x58) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f0000014480)={0x0, 0x0, &(0x7f0000014440)={&(0x7f0000000700)=@delchain={0x24, 0x65, 0x100, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x6}, {0xa, 0xfff2}, {0x4, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x200440c1}, 0x40) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b704000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0xffffffffffffff6d, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8c1c}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.23929891s ago: executing program 0 (id=1985): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x2, 0x70bd2a, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000810}, 0x20000010) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @empty, @multicast2}, &(0x7f0000000200)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x9c, r2, 0x70, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x6}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xa000}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1ff}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xae}]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r5, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000015}, 0x4000) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000580)=0x0) sendmsg$nl_generic(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x3e, 0x4, 0x70bd2a, 0x25dfdbff, {0x13}, [@typed={0x8, 0x146, 0x0, 0x0, @uid=r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x40000) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000680)={0x0, 0x3, 0x80000000, 0x6}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000700)={0x21c, 0x12, 0x300, 0x70bd26, 0x3, {0x3, 0x3b, 0x8, 0x7, {0x4e22, 0x4e22, [0x1, 0x800, 0x7, 0x5], [0x1b, 0x7, 0x8, 0x4], 0x0, [0x7fff, 0x5]}, 0x4e9, 0xd}, [@INET_DIAG_REQ_BYTECODE={0xec, 0x1, "d2b3eb66d2802659d797687de5cd3d8b69da6e21013c99a937a3f6b600cdadbcc701b246a147ccd48aa3ee7fbcc126618507b61ec2c5987f310cc049e3a1d10b771ad596c963bb9d3c9622a9f9d35e03f98240124659c4092f0ab24244eeeab00c9115977cb71ee2bccd2d405ea75303e5cb7c3e6f5199a4a9e0ff038d2552250071ad3b3c5b31ec5af6939cfdefe7b1f6dc142d91646c4a7c2c8b6bb2d24a82d8ba5053087dbe65695faca96202dbe458f50a7d36d475f6cd3688405fd1c80555c736b697082a0142ae1a24bb7b9a1182df7ea03e7b89fe08591c8fa71ed5894e0edf7f087a57b2"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "6b3d13647a9b1e274d7c8db84c8b4fbed73ad92f19b22e4b1ebeb2a45e643c8ea810d8a08a7cc3be671fd3e77f0472dac53c24a744792466325a0ed84353e4db2ed7787d2826be7cdf88e5b23fa8d8813ca8a996022d9bd99f63f61219bdc9a7ebbfde668970500b3a7a60f17cc0eb7357eb2df0ba472b0eb73d30c507bfa6bbf15e3ca6c52ba0fab02c486a2e158e7e5c631e8aaf2e5e735653629a1f0c418bf897c59c687a9c8c41d26f985d62fcffaf5803a0e36218347f177cbf180dff6e93f18ef6f989bf37bf4236a134baccbdf96c564e60f916e58947ec2c1eba35dd"}]}, 0x21c}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0xb0, 0x1, 0x7, 0x0, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x100}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x80}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x72c}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2e4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6b6}, @NFACCT_FILTER_MASK={0x8}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xffffffffffffff56}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1c8}]}, 0xb0}, 0x1, 0x0, 0x0, 0x41}, 0x20040000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b40)={'wlan0\x00'}) socket$inet6_udplite(0xa, 0x2, 0x88) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001d00)={0xffffffffffffffff, 0x2}, 0xc) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x10, 0x11, &(0x7f0000000b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, [@map_fd={0x18, 0x6, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x6b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000c40)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000c80)=""/4096, 0x41100, 0xa, '\x00', r4, @fallback=0x3b, 0xffffffffffffffff, 0x8, &(0x7f0000001c80)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000001cc0)={0x0, 0x3, 0x8000, 0x2}, 0x10, 0x0, r1, 0x1, &(0x7f0000001d40)=[r8, r1, r1, r1, r1], &(0x7f0000001d80)=[{0x0, 0x4, 0xd, 0x9}], 0x10, 0x200, @void, @value}, 0x94) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f0000001e80)) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000001f80)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x994}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd4dfe8cb3be11f1a}, 0x18020894) connect$pppoe(r1, &(0x7f0000001fc0)={0x18, 0x0, {0x2, @empty, 'batadv0\x00'}}, 0x1e) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002040), r1) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x2c, r10, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000000}, 0x80) r11 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendfile(r11, 0xffffffffffffffff, &(0x7f0000002140)=0x80000000, 0x9) sendfile(r9, r1, &(0x7f0000002180)=0x10000, 0xb6f8) close(r9) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x500000}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)={0x60, 0x1407, 0x4, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x8011) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000002300)=@rose={'rose', 0x0}, 0x10) 1.075300165s ago: executing program 2 (id=1987): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/user\x00') ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x93}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x4dd570a6edf40701, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0xdb8, @bcast, @netrom={'nr', 0x0}, 0x2, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f00000002c0)={r7, 0x4, 0x4, 0x3, 0x3, 0x95, 0xf, 0x3, {0x0, @in6={{0xa, 0x4e23, 0xe, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x47}}, 0x401, 0x21c, 0x1, 0xfffffffe, 0x6}}, &(0x7f0000000380)=0xb0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'syzkaller1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002840)=ANY=[@ANYBLOB="3c00008dbd0edcbf965e020010000304c57845bb2c220d8136ebbbe7cd", @ANYRES32=r9, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x408d1}, 0x4000044) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) r11 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r11, &(0x7f0000000580)={0x1d, r9, 0x3, {0x3, 0x1, 0x4}}, 0x18) r12 = accept4(r10, 0x0, 0x0, 0x0) recvfrom$rose(r12, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg(r8, &(0x7f0000000400)=[{{&(0x7f0000000080)=@ieee802154={0x24, @long={0x3, 0xfffe}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000100)="22027c0ef5143881c9935b60f271a805f12c1bdee5df905c64d701a8f8cf1f75d060626cea6d54e4014d1f62cd176065b00319091d08e9f144e003af74fa74a002ce837c2a9bbbf59acb26ec0449b41c672f75cedcf00fc7fad7a6118e42554eb1fe6a22daadb72c8ee46d31a5f34f1fd379ebc60c5f4a2959dbaee7440687b7838f792baf0db4c6a39d854533ec76a1370dc25ecb701b148038632161e1137dff8ea3851d062524e1f9f200bdb0ed1823b69962a6d3b076b580ae1395f5c49a6e34809bbd92c8af0476ca3c4b2e70d94ff7c8d3841bd8748a446faf5fc355", 0xdf}, {&(0x7f0000002600)="f0ed668b7911c0457c4285793f7cf5214232c115fe5af9df82505594c7533019a043bfb22464458f852427de220f1ab15a42806a15aea72e91d3b45bb0e30ca5e644b6fe714bcafb86c371e9e90dec34ba782270a8f800c2bfde377dc3500146063f6435779748f67e4a137e4b4d01986b2fc8dde5d11ec511fa18a95d8fcde77f4e8a985fcf81b75d2c217b953bc64c6e919f371e8fea9de0da773177c4c70734778a544234f141ad3dfbbe4a0d22a4fba4682ba6261703ab5de6a022bcbea4", 0xc0}, {&(0x7f00000002c0)="786907da60dde175189de6e704ab130f975cc36d4d272a0a02334379d7a6fe570acf8e955d02de0cd0323f6f258d710645133c92edd978182d139df3b84f3832cac9065ebedb056144ea48", 0x4b}, {&(0x7f0000000340)="88cae1e32ecf250453a136f6c371cb032e21202c11824ce6a1e7534f9b4c4531bb251a37396dc9e3f50ad7802d472ff0c180ebed4a40c00bd7f3d04c9a6e0eafe21309ca15da3ef0e4ff1161202ee236b2c31f07941f470038ba0fd430bf78d418c5b13c4a3e30e4240b6a5d6e4f7da66143005fae647925036cc1af4ebbe8c5642e1bf4c4a6", 0x86}, {&(0x7f0000000480)="fb41f1669b29b959fef41c1fdc0affaef1d89627c8e011518074468714f4f02237705f4cdba6212540232040f13defafa79bbd8aec34732e345a3f64de81726c24cb664fe4522785c0c6c3eaa7db7ecc1d5a2207bc65", 0x56}], 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x2020}}], 0x1, 0x4000011) 932.956095ms ago: executing program 0 (id=1988): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000009ac8ce70c2f3eb0000001000000010000000050000000400000000000001000000004e00"], 0x0, 0x2d, 0x0, 0x3, 0x0, 0x0, @void, @value}, 0x20) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000080), 0x10) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'xfrm0\x00', 0x0}) sendto(r2, &(0x7f0000000900)="ca71216fa3f26f60f8884bd0479ee6e5d799b6f5", 0x14, 0x4000, &(0x7f0000000240)=@xdp={0x2c, 0x8, r4, 0x1000033}, 0x80) listen(r1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) accept4(r1, 0x0, 0x0, 0x80800) write(r0, &(0x7f00000000c0)='Y\x00\x00\x00\x00\x00', 0x6) 727.085154ms ago: executing program 2 (id=1990): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000080)="fc") r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd000000100001000b080800418e01400004fcff", 0x58}], 0x1) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x1, 0x4}, 0x1}, 0x18) writev(r2, &(0x7f0000000500)=[{&(0x7f0000000440)="72250bbdb884f89bac1d6e2c84ce2b6d3ba4abad16198b369594d4b9a9773bb25c2e4d0c529e27b762ce800c400292812b4e25033cfb55b8e78f7d87866e", 0x3e}, {&(0x7f0000000480)="45f9ecec0ef184617ac7134f6bce8612d86b509d27b4d10b525c956d3153e73cfa396569cd36ffa94c573678c884b1c35e62d6caac22e00dda369a4cde5b963722ff", 0x42}], 0x2) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r6}, 0x18, &(0x7f0000000180)={0x0}}, 0xee) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="bf050000000000007112180000000000bf200000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2f, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x1403, 0x300, 0x70bd2b, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dummy0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004015}, 0x4040011) 635.391252ms ago: executing program 3 (id=1992): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x8, 0x0, 0x4, 0x2, 0x1}}) (async, rerun: 64) r1 = socket$kcm(0x2d, 0x2, 0x0) (rerun: 64) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r1}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000240)={r1}) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x50, &(0x7f0000000000)={0x10, 0x0}, 0x3c) (async, rerun: 64) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) (rerun: 64) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYRESDEC], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x1c, 0x1407, 0x965ca6da7d709e31, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004854}, 0x40004) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) (async, rerun: 64) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000000100)={{r2}, {@void, @actul_num={@val, 0x5, 0x6b}}}) (async) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e3, &(0x7f0000000180)={r1, r5}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_stats}) 402.069693ms ago: executing program 3 (id=1993): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x38, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9, {0xe4}}}}]}]}, 0x60}}, 0x0) 401.695308ms ago: executing program 2 (id=1994): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000232db9309afc083748fb0d358ce1eb9da40000000e32c000000030a01030000e6ff0000000002000000090001007320db7a50b8eade9f0003"], 0x7c}}, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRES32=r1], 0xa0}}, 0x40880) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = socket$inet_smc(0x2b, 0x1, 0x0) close(r4) 334.579357ms ago: executing program 3 (id=1995): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x11, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt(r0, 0x11b, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x7ffffffe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 255.948645ms ago: executing program 3 (id=1996): unshare(0x20000400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x1c, r4, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x1c}, 0x4, 0x700000000000000}, 0x0) ioctl$FICLONE(r1, 0x40049409, r0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000180)={&(0x7f0000000080)=@pptp, 0x80, &(0x7f0000000100)=[{&(0x7f00000004c0)=""/241, 0xf1}], 0x1}, 0x40000000) recvmmsg(r7, &(0x7f0000001640), 0x0, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0) 73.046473ms ago: executing program 3 (id=1997): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000002"], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[], 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r2, &(0x7f00000009c0)={&(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000200)="7da5c1", 0x3}], 0x1, &(0x7f0000000980)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x9, 0xb, 0x4, 0x8, 0x80000000, 0x7cd5, 0x1}}], 0x30, 0x4040081}, 0x90f0) r3 = openat$cgroup_int(r0, &(0x7f0000000280)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000002c0)=0xe546, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x16, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 36.192824ms ago: executing program 0 (id=1998): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x18, 0x3f9, 0x10, 0x70bd29, 0x25dfdbfb, {0xfffffffd, 0x1}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x1000}, 0x4004) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newtfilter={0x1e4, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x1ac, 0x2, [@TCA_FLOW_ACT={0x1a8, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_simple={0x154, 0x1b, 0x0, 0x0, {{0xb}, {0x88, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xfff, 0x8, 0x4, 0x3, 0x3}}, @TCA_DEF_DATA={0x15, 0x3, 'net_prio.prioidx\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x9, 0x3, 0xfffffffb, 0xaf4e}}, @TCA_DEF_DATA={0xb, 0x3, 'mirred\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x10000, 0x9, 0x5, 0x5, 0x9}}, @TCA_DEF_DATA={0x15, 0x3, 'net_prio.prioidx\x00'}]}, {0xa4, 0x6, "154509cdcad0383ce3a4a1c4e6f6326527ba2f12a9b68bf7cb12d7df3368c7615455b1da7c6a4c6f1624ee9a9d3f571394c0d388832b3dfc2c3513a91fc4625df2056150bf2342ecc6326f1f7fdba1aa58e8453061d6965d9477984dd67c8c87fc5ea58cdb2b50996de42c7bd101381c9e9423c13dc2e8001239335ad85ce0f3cbf2dc213f1605e42dbbe4b1f835daab0d4d8c7ed7688586112e6046a7519bff"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x5}}]}, 0x1e4}}, 0x0) r6 = socket$inet(0x2, 0x2, 0x1) bind$inet(r6, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)=@delnexthop={0x48, 0x69, 0x0, 0x70bd2d, 0x25dfdbff, {}, [{0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}, {0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008040}, 0x20000850) r7 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710044000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r8 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r8, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000280)}, 0x20) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='net_prio.prioidx\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0xd994, 0x3, 0xc, 0xa43179f0c1de2807, r9, 0xfffffffa, '\x00', 0x0, r10, 0x5, 0x5, 0x2, 0xa, @void, @value, @void, @value}, 0x50) r11 = socket$inet6_udp(0xa, 0x2, 0x0) r12 = socket$can_j1939(0x1d, 0x2, 0x7) close(r12) setsockopt$inet6_udp_encap(r11, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_udp_encap(r11, 0x11, 0x68, &(0x7f0000000000)=0x5, 0x4) bind$inet(r7, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRESHEX=r7], 0x80}, 0x1, 0x0, 0x0, 0x8081}, 0x0) 0s ago: executing program 3 (id=1999): r0 = socket$netlink(0x10, 0x3, 0x0) (async) readv(0xffffffffffffffff, &(0x7f0000002340)=[{0x0}], 0x1) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, 0x0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]]}, 0x34}}, 0x0) (async) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x0) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x3}, 0x18) pipe(&(0x7f0000000040)={0xffffffffffffffff}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r6, 0x0, r7, 0x0, 0x10d00, 0x0) (async) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x78f0, '\x00', r3, 0xffffffffffffffff, 0x1, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) (async, rerun: 32) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x4, 0x7, 0x80, 0x5110, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x1, 0x7, @void, @value, @void, @value}, 0x50) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @broadcast, @remote, @multicast, @loopback}}}}, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r11, 0x0) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x18, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000050000000000000002000000c4060600fcffffff852000000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018000000070000000000000009000000181100007ef3da78fb8864edafa6669d0f4e59dfd908a9ebf0c5de9da84d88a32779694900000091d070f2", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000085200000040000004cab1800ffffffff85100000faffffff9500000000000000"], &(0x7f0000000100)='GPL\x00', 0x81, 0x1e, &(0x7f0000000200)=""/30, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x1, 0x8, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000300)=[r9, r10, r11], &(0x7f00000005c0)=[{0x3, 0x1, 0x0, 0x9}, {0x2, 0x3, 0xb, 0xb}, {0x2, 0x1, 0xf, 0xc}], 0x10, 0x5, @void, @value}, 0x94) (async, rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x19}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xad}, @NFTA_INNER_EXPR={0x18, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa4}}, 0x44000) socket$xdp(0x2c, 0x3, 0x0) (async) getsockopt$XDP_MMAP_OFFSETS(r11, 0x11b, 0x1, &(0x7f0000002f80), &(0x7f0000003000)=0x80) (async) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r12, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r12, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x9, 0x32fe3cf8, 0xffffffff, 0x10}, 0x14) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async, rerun: 32) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @void, @value, @void, @value}, 0x50) (rerun: 32) kernel console output (not intermixed with test programs): : 72 bytes leftover after parsing attributes in process `syz.2.1095'. [ 169.355850][ T9253] veth0_vlan: entered promiscuous mode [ 169.377548][ T9253] veth1_vlan: entered promiscuous mode [ 169.460553][ T9253] veth0_macvtap: entered promiscuous mode [ 169.480495][ T9253] veth1_macvtap: entered promiscuous mode [ 169.535743][ T9253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on:  [ 169.555053][ T9253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.570984][ T9600] netlink: 'syz.2.1098': attribute type 11 has an invalid length. [ 169.572051][ T9253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.590409][ T9600] netlink: 'syz.2.1098': attribute type 10 has an invalid length. [ 169.597671][ T9253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.610615][ T9253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.636656][ T9253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.646073][ T9600] veth0_vlan: left promiscuous mode [ 169.659726][ T9600] veth0_vlan: entered promiscuous mode [ 169.668627][ T9600] team0: Device veth0_vlan failed to register rx_handler [ 169.730975][ T9253] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.750708][ T9253] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.778218][ T9253] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.795579][ T9253] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.810231][ T9607] lo speed is unknown, defaulting to 1000 [ 169.824727][ T9607] lo speed is unknown, defaulting to 1000 [ 169.877932][ T9607] lo speed is unknown, defaulting to 1000 [ 169.910222][ T9607] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 169.934318][ T9607] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 169.959871][ T2989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.977817][ T2989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.005798][ T9607] lo speed is unknown, defaulting to 1000 [ 170.023624][ T9607] lo speed is unknown, defaulting to 1000 [ 170.025391][ T2989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.043933][ T2989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.043990][ T9607] lo speed is unknown, defaulting to 1000 [ 170.069210][ T9607] lo speed is unknown, defaulting to 1000 [ 170.091456][ T9607] lo speed is unknown, defaulting to 1000 [ 170.420071][ T9631] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 170.535967][ T9638] netlink: 'syz.4.1112': attribute type 10 has an invalid length. [ 170.548633][ T9638] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.556058][ T9638] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.559336][ T9644] netlink: 'syz.0.1113': attribute type 9 has an invalid length. [ 170.651401][ T9646] IPv6: sit1: Disabled Multicast RS [ 170.658122][ T9646] sit1: entered allmulticast mode [ 171.134944][ T53] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.383566][ T9643] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 171.813204][ T9669] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 171.828076][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 171.837387][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 171.845974][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 171.863308][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 171.874187][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 171.923296][ T9694] lo speed is unknown, defaulting to 1000 [ 172.064401][ T9702] __nla_validate_parse: 8 callbacks suppressed [ 172.064421][ T9702] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1131'. [ 172.226542][ T9694] chnl_net:caif_netlink_parms(): no params data found [ 172.730658][ T53] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.850311][ T53] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.004897][ T53] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.104483][ T9694] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.130870][ T9694] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.150971][ T9694] bridge_slave_0: entered allmulticast mode [ 173.170106][ T9694] bridge_slave_0: entered promiscuous mode [ 173.193873][ T9694] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.206635][ T9694] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.236643][ T9694] bridge_slave_1: entered allmulticast mode [ 173.259140][ T9694] bridge_slave_1: entered promiscuous mode [ 173.268693][ T9755] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1147'. [ 173.488030][ T9694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.520499][ T9773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1152'. [ 173.520914][ T9694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.693909][ T9694] team0: Port device team_slave_0 added [ 173.739921][ T9694] team0: Port device team_slave_1 added [ 173.797992][ T9782] x_tables: duplicate underflow at hook 1 [ 173.863607][ T9694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.884268][ T9694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.930482][ T9694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.964729][ T5832] Bluetooth: hci2: command tx timeout [ 173.973782][ T9694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.982289][ T9694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.008857][ T9694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.157700][ T9797] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1162'. [ 174.179665][ T9694] hsr_slave_0: entered promiscuous mode [ 174.186571][ T9694] hsr_slave_1: entered promiscuous mode [ 174.194950][ T9694] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.203372][ T9694] Cannot create hsr debugfs directory [ 174.230265][ T53] bridge_slave_1: left allmulticast mode [ 174.235974][ T53] bridge_slave_1: left promiscuous mode [ 174.254043][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.292214][ T53] bridge_slave_0: left allmulticast mode [ 174.298664][ T53] bridge_slave_0: left promiscuous mode [ 174.304524][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.638067][ T9824] nbd0: detected capacity change from 0 to 4096 [ 174.662371][ T5832] block nbd0: Receive control failed (result -32) [ 174.727182][ T9827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1173'. [ 174.736476][ T9827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1173'. [ 174.873225][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.886040][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.898602][ T53] bond0 (unregistering): Released all slaves [ 175.135502][ T9838] netlink: 'syz.0.1176': attribute type 10 has an invalid length. [ 175.192629][ T9843] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 175.211165][ T9845] netlink: 'syz.4.1178': attribute type 10 has an invalid length. [ 175.219300][ T9845] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1178'. [ 175.239367][ T9843] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 175.249443][ T9842] netlink: 'syz.4.1178': attribute type 29 has an invalid length. [ 175.260878][ T9842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1178'. [ 175.273508][ T9838] batman_adv: batadv0: Adding interface: wlan0 [ 175.284472][ T9838] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.323269][ T9838] batman_adv: batadv0: Interface activated: wlan0 [ 175.327464][ T9842] netlink: 'syz.4.1178': attribute type 1 has an invalid length. [ 175.347616][ T9845] dummy0: entered promiscuous mode [ 175.363997][ T9845] bridge0: port 3(dummy0) entered blocking state [ 175.371862][ T9845] bridge0: port 3(dummy0) entered disabled state [ 175.378916][ T9845] dummy0: entered allmulticast mode [ 175.391988][ T9845] dummy0: left allmulticast mode [ 175.400176][ T9845] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 175.455870][ T9845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1178'. [ 175.566260][ T9862] openvswitch: netlink: Message has 3 unknown bytes. [ 175.589837][ T9862] openvswitch: netlink: Actions may not be safe on all matching packets [ 175.717552][ T9867] dvmrp1: entered allmulticast mode [ 175.860318][ T53] hsr_slave_0: left promiscuous mode [ 175.873293][ T53] hsr_slave_1: left promiscuous mode [ 175.890810][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.906235][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.936675][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.952379][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.014130][ T53] veth1_macvtap: left promiscuous mode [ 176.027138][ T53] veth0_macvtap: left promiscuous mode [ 176.027314][ T5832] Bluetooth: hci2: command tx timeout [ 176.039765][ T53] veth1_vlan: left promiscuous mode [ 176.051073][ T53] veth0_vlan: left promiscuous mode [ 176.330215][ T9899] x_tables: duplicate underflow at hook 2 [ 176.684256][ T53] team0 (unregistering): Port device team_slave_1 removed [ 176.723700][ T53] team0 (unregistering): Port device team_slave_0 removed [ 177.075345][ T9876] syz.3.1186 (9876) used obsolete PPPIOCDETACH ioctl [ 177.105434][ T9904] syzkaller1: entered promiscuous mode [ 177.117062][ T9904] syzkaller1: entered allmulticast mode [ 177.416430][ T9921] netlink: 'syz.0.1199': attribute type 10 has an invalid length. [ 177.600027][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1202'. [ 177.896633][ T9945] netlink: zone id is out of range [ 177.905313][ T9945] netlink: zone id is out of range [ 177.915605][ T9945] netlink: zone id is out of range [ 177.923034][ T9945] netlink: zone id is out of range [ 177.930660][ T9945] netlink: zone id is out of range [ 177.935805][ T9945] netlink: zone id is out of range [ 177.943314][ T9945] netlink: zone id is out of range [ 178.061313][ T9957] nbd1: detected capacity change from 0 to 4096 [ 178.084931][ T9694] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 178.109202][ T55] Bluetooth: hci2: command tx timeout [ 178.240185][ T9694] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 178.259202][ T5832] block nbd1: Receive control failed (result -32) [ 178.354609][ T9694] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 178.423007][ T9694] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 178.763394][ T9986] sctp: [Deprecated]: syz.2.1215 (pid 9986) Use of int in max_burst socket option deprecated. [ 178.763394][ T9986] Use struct sctp_assoc_value instead [ 179.043228][ T9694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.114267][ T9694] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.154601][ T3503] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.161879][ T3503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.212923][ T9998] veth1_to_team: entered promiscuous mode [ 179.243503][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.250848][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.288745][T10001] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1220'. [ 179.298923][ T9997] veth1_to_team: left promiscuous mode [ 179.483453][T10008] macvlan4: entered promiscuous mode [ 179.496457][T10008] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1222'. [ 179.865651][ T9694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.972908][ T9694] veth0_vlan: entered promiscuous mode [ 180.014115][ T9694] veth1_vlan: entered promiscuous mode [ 180.084073][T10039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1231'. [ 180.120829][ T9694] veth0_macvtap: entered promiscuous mode [ 180.129335][T10039] macvlan1: entered allmulticast mode [ 180.134776][T10039] veth1_vlan: entered allmulticast mode [ 180.146004][T10043] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1233'. [ 180.159009][T10041] delete_channel: no stack [ 180.162935][ T9694] veth1_macvtap: entered promiscuous mode [ 180.188341][ T5832] Bluetooth: hci2: command tx timeout [ 180.191200][ T9694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on:  [ 180.210632][ T9694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.257755][ T9694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.271595][T10047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1234'. [ 180.317589][ T9694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.335969][ T9694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.367274][ T9694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.390445][ T9694] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.429317][ T9694] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.470890][ T9694] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.493037][ T9694] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.530444][T10047] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 180.543049][T10059] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1236'. [ 180.570542][T10061] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1236'. [ 180.776119][ T9694] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 180.793191][ T9694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.821008][ T9951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.839801][ T9951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.965441][ T9948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.987322][ T9948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.422966][T10090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1246'. [ 181.667380][T10100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1249'. [ 181.858308][ T9948] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.150240][ T9948] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.440908][ T9948] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.802150][ T9948] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.987949][T10122] syzkaller0: entered promiscuous mode [ 182.993498][T10122] syzkaller0: entered allmulticast mode [ 183.168936][T10136] __nla_validate_parse: 2 callbacks suppressed [ 183.168956][T10136] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1259'. [ 183.329801][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 183.339658][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 183.353237][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 183.371575][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 183.380267][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 184.105137][T10172] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1269'. [ 184.119218][T10172] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1269'. [ 184.283308][T10179] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1271'. [ 184.814097][T10172] gretap0: entered promiscuous mode [ 184.821698][T10172] gretap0: left promiscuous mode [ 184.960470][T10143] lo speed is unknown, defaulting to 1000 [ 185.113887][ T9948] bridge_slave_1: left allmulticast mode [ 185.142082][ T9948] bridge_slave_1: left promiscuous mode [ 185.162485][ T9948] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.202186][T10185] xt_CT: No such helper "snmp_trap" [ 185.210861][ T9948] bridge_slave_0: left allmulticast mode [ 185.222744][ T9948] bridge_slave_0: left promiscuous mode [ 185.232950][ T9948] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.472693][ T5832] Bluetooth: hci2: command tx timeout [ 185.675463][ T9948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.690039][ T9948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.702244][ T9948] bond0 (unregistering): Released all slaves [ 186.303799][T10238] net_ratelimit: 20 callbacks suppressed [ 186.303819][T10238] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.430385][T10247] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 186.440823][T10247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.500872][ T9948] hsr_slave_0: left promiscuous mode [ 186.514343][ T9948] hsr_slave_1: left promiscuous mode [ 186.525875][ T9948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.533545][T10250] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 186.536018][ T9948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.553913][ T9948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.559907][T10250] netlink: 'syz.0.1290': attribute type 1 has an invalid length. [ 186.562099][ T9948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.626127][ T9948] veth1_macvtap: left promiscuous mode [ 186.640991][ T9948] veth0_macvtap: left promiscuous mode [ 186.657545][ T9948] veth1_vlan: left promiscuous mode [ 186.663012][ T9948] veth0_vlan: left promiscuous mode [ 186.695935][T10258] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1292'. [ 187.215552][ T9948] team0 (unregistering): Port device team_slave_1 removed [ 187.261905][ T9948] team0 (unregistering): Port device team_slave_0 removed [ 187.555499][ T5832] Bluetooth: hci2: command tx timeout [ 187.624218][T10250] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 187.642707][T10143] chnl_net:caif_netlink_parms(): no params data found [ 187.889049][T10277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1296'. [ 187.949167][T10279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1297'. [ 188.070558][T10288] netlink: 'syz.3.1299': attribute type 10 has an invalid length. [ 188.144901][T10277] bond0: (slave team0): Releasing backup interface [ 188.164411][T10277] team0 (unregistering): Port device team_slave_0 removed [ 188.174675][T10277] team0 (unregistering): Port device team_slave_1 removed [ 188.285314][T10288] team0: Port device veth0_macvtap added [ 188.308934][T10290] netlink: 'syz.0.1300': attribute type 6 has an invalid length. [ 188.349423][T10143] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.362171][T10143] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.379556][T10143] bridge_slave_0: entered allmulticast mode [ 188.403516][T10143] bridge_slave_0: entered promiscuous mode [ 188.451435][T10143] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.470324][T10143] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.490729][T10143] bridge_slave_1: entered allmulticast mode [ 188.505038][T10143] bridge_slave_1: entered promiscuous mode [ 188.580018][T10315] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1307'. [ 188.679392][T10143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.731820][T10143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.943199][T10143] team0: Port device team_slave_0 added [ 188.975310][T10143] team0: Port device team_slave_1 added [ 188.981480][T10331] .: renamed from bond0 (while UP) [ 188.999150][T10325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1309'. [ 189.046509][T10336] netlink: 'syz.2.1313': attribute type 2 has an invalid length. [ 189.124008][T10143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.142869][T10143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.209196][T10143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.230153][T10143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.242231][T10143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.249001][T10348] netlink: 'syz.3.1317': attribute type 1 has an invalid length. [ 189.278435][T10143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.331887][T10354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1319'. [ 189.342262][T10354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1319'. [ 189.351922][T10350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1318'. [ 189.351931][T10353] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1318'. [ 189.352002][T10354] netlink: 'syz.2.1319': attribute type 3 has an invalid length. [ 189.376981][T10350] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1318'. [ 189.435844][T10358] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1320'. [ 189.513390][T10143] hsr_slave_0: entered promiscuous mode [ 189.524318][T10143] hsr_slave_1: entered promiscuous mode [ 189.541697][T10143] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.567980][T10143] Cannot create hsr debugfs directory [ 189.633330][ T5832] Bluetooth: hci2: command tx timeout [ 189.649387][T10363] lo speed is unknown, defaulting to 1000 [ 189.684345][T10372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1323'. [ 189.704383][T10372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1323'. [ 190.569559][T10414] batadv_slave_1: entered promiscuous mode [ 190.592466][T10414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.632104][T10416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.710359][T10416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.808237][T10416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.955222][T10143] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 190.986199][T10143] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 191.012224][T10143] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 191.026278][T10143] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 191.078214][T10440] netlink: 'syz.4.1340': attribute type 10 has an invalid length. [ 191.134131][T10440] team0: Device veth1_macvtap failed to register rx_handler [ 191.311798][T10454] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.321155][T10454] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.336674][T10454] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.374492][T10454] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.385674][T10454] geneve3: entered promiscuous mode [ 191.411830][T10454] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.421919][T10454] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.445169][T10454] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.467901][T10454] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.585211][T10143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.645296][T10143] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.681709][ T3503] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.688954][ T3503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.713682][ T5832] Bluetooth: hci2: command tx timeout [ 191.759161][ T9953] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.766347][ T9953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.864754][T10477] netlink: 'syz.0.1353': attribute type 30 has an invalid length. [ 191.916307][T10477] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.925318][T10477] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.934148][T10477] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.943644][T10477] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.967671][T10477] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.976680][T10477] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.986374][T10477] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.995937][T10477] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.551467][T10143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.629991][T10527] openvswitch: netlink: Tunnel attr 47 out of range max 16 [ 192.744574][T10143] veth0_vlan: entered promiscuous mode [ 192.817943][T10143] veth1_vlan: entered promiscuous mode [ 192.952168][T10143] veth0_macvtap: entered promiscuous mode [ 193.001449][T10143] veth1_macvtap: entered promiscuous mode [ 193.055107][T10143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on:  [ 193.080597][T10143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.110490][T10143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.163441][T10143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.181372][T10143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.218894][T10143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.236049][T10143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.258786][T10143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.293236][T10143] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.332060][T10143] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.357255][T10143] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.376438][T10143] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.640121][T10580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.710141][T10143] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 193.738980][T10143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.807882][T10508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.815756][T10508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.884735][T10598] __nla_validate_parse: 17 callbacks suppressed [ 193.884751][T10598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1383'. [ 193.920829][T10592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1379'. [ 193.962778][T10599] x_tables: duplicate underflow at hook 3 [ 193.978083][T10598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1383'. [ 193.991164][T10499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.033594][T10499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.274505][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.301756][T10605] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1385'. [ 194.567576][T10636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1389'. [ 194.580353][T10636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1389'. [ 194.886506][T10497] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.009997][T10497] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.143247][T10497] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.222554][T10497] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.325125][T10497] bridge_slave_1: left allmulticast mode [ 195.332571][T10497] bridge_slave_1: left promiscuous mode [ 195.339386][T10497] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.350115][T10497] bridge_slave_0: left allmulticast mode [ 195.355770][T10497] bridge_slave_0: left promiscuous mode [ 195.363001][T10497] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.629754][T10656] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1394'. [ 195.639949][T10655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1396'. [ 195.666627][T10656] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1394'. [ 195.668515][T10655] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1396'. [ 195.979194][T10497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.001935][T10497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.029904][T10497] bond0 (unregistering): Released all slaves [ 196.064294][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 196.080897][T10656] gretap2: entered promiscuous mode [ 196.082518][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 196.088878][T10656] gretap2: entered allmulticast mode [ 196.099340][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 196.112431][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 196.120888][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 196.300197][T10668] veth1_vlan (unregistering): left allmulticast mode [ 196.342975][T10675] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 196.568228][T10676] lo speed is unknown, defaulting to 1000 [ 196.781329][T10701] netlink: 'syz.2.1406': attribute type 10 has an invalid length. [ 196.886354][T10497] hsr_slave_0: left promiscuous mode [ 196.902951][T10497] hsr_slave_1: left promiscuous mode [ 196.912359][T10497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.924484][T10497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.958170][T10497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.979035][T10497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.040254][T10497] veth1_macvtap: left promiscuous mode [ 197.046071][T10497] veth0_macvtap: left promiscuous mode [ 197.056494][T10497] veth1_vlan: left promiscuous mode [ 197.063459][T10497] veth0_vlan: left promiscuous mode [ 197.694533][T10497] team0 (unregistering): Port device team_slave_1 removed [ 197.736190][T10497] team0 (unregistering): Port device team_slave_0 removed [ 198.189083][ T5832] Bluetooth: hci2: command tx timeout [ 198.319985][T10676] chnl_net:caif_netlink_parms(): no params data found [ 198.592355][T10676] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.618709][T10676] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.626038][T10676] bridge_slave_0: entered allmulticast mode [ 198.634744][T10676] bridge_slave_0: entered promiscuous mode [ 198.653164][T10676] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.654607][T10755] netlink: zone id is out of range [ 198.668794][T10676] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.676169][T10676] bridge_slave_1: entered allmulticast mode [ 198.683694][T10676] bridge_slave_1: entered promiscuous mode [ 198.700025][T10755] netlink: 'syz.0.1420': attribute type 10 has an invalid length. [ 198.824287][T10755] bond0: (slave netdevsim0): Enslaving as an active interface with a down link [ 198.852401][T10676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.892603][T10676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.908120][T10509] bond0: (slave netdevsim0): link status definitely up [ 198.970841][T10676] team0: Port device team_slave_0 added [ 199.007816][T10676] team0: Port device team_slave_1 added [ 199.080604][T10780] netlink: 'syz.0.1425': attribute type 30 has an invalid length. [ 199.081939][T10676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.126950][T10676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.172414][T10676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.214427][T10780] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.223304][T10780] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.234957][T10780] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.244452][T10780] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.292498][T10780] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.301543][T10780] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.310786][T10780] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.319824][T10780] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.411611][T10676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.422371][T10676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.426486][T10797] __nla_validate_parse: 8 callbacks suppressed [ 199.426507][T10797] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1430'. [ 199.478830][T10676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.715666][T10676] hsr_slave_0: entered promiscuous mode [ 199.744847][T10676] hsr_slave_1: entered promiscuous mode [ 199.754400][T10811] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1435'. [ 199.763671][T10676] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.784584][T10676] Cannot create hsr debugfs directory [ 200.272434][ T5832] Bluetooth: hci2: command tx timeout [ 200.363686][T10838] netlink: 'syz.4.1447': attribute type 21 has an invalid length. [ 200.395197][T10838] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1447'. [ 200.823085][T10872] openvswitch: netlink: Flow key attr not present in new flow. [ 200.842480][T10872] ipt_REJECT: TCP_RESET invalid for non-tcp [ 200.984353][T10676] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 201.012356][T10879] netlink: 'syz.2.1462': attribute type 2 has an invalid length. [ 201.033806][T10676] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 201.048794][T10879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1462'. [ 201.064965][T10676] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 201.083823][T10879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1462'. [ 201.148012][T10676] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 201.354649][T10893] bond5: entered promiscuous mode [ 201.359899][T10893] bond5: entered allmulticast mode [ 201.365735][T10893] 8021q: adding VLAN 0 to HW filter on device bond5 [ 201.391629][T10676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.446448][T10676] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.478562][T10506] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.485758][T10506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.534716][T10506] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.542044][T10506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.655419][T10907] batadv1: entered allmulticast mode [ 201.908419][T10925] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1473'. [ 202.155546][T10940] ÿ: renamed from vcan0 (while UP) [ 202.186465][T10940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1477'. [ 202.236480][T10940] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1477'. [ 202.255070][T10676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.349970][ T5832] Bluetooth: hci2: command tx timeout [ 202.404387][T10954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1482'. [ 202.449652][T10676] veth0_vlan: entered promiscuous mode [ 202.491134][T10676] veth1_vlan: entered promiscuous mode [ 202.549525][T10959] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1483'. [ 202.564668][T10676] veth0_macvtap: entered promiscuous mode [ 202.581281][T10676] veth1_macvtap: entered promiscuous mode [ 202.604649][T10959] netlink: 'syz.4.1483': attribute type 2 has an invalid length. [ 202.662373][T10676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on:  [ 202.688034][T10676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.706690][T10676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.735235][T10676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.746384][T10676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.766888][T10676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.793334][T10676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.816120][T10676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.871686][T10676] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.889777][T10676] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.910831][T10676] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.938440][T10676] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.961696][T10969] bridge0: mtu less than device minimum [ 203.153616][T10676] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 203.181663][T10676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.259325][T10501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.288485][T10501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.369138][T10507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.399995][T10507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.624378][T11002] netlink: 'syz.3.1496': attribute type 1 has an invalid length. [ 203.659564][T11002] netlink: 'syz.3.1496': attribute type 2 has an invalid length. [ 203.678390][T11002] netlink: 'syz.3.1496': attribute type 1 has an invalid length. [ 204.102309][T11014] netlink: 'syz.0.1497': attribute type 13 has an invalid length. [ 204.429731][ T5832] Bluetooth: hci2: command tx timeout [ 204.488837][T11014] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 204.599380][T11022] __nla_validate_parse: 8 callbacks suppressed [ 204.599400][T11022] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1498'. [ 204.847458][T11027] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.871909][T11028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1500'. [ 205.187391][T11044] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 205.237566][T11047] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1508'. [ 205.241415][T11044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1507'. [ 205.313709][T11047] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1508'. [ 205.493053][T11061] netlink: 'syz.3.1510': attribute type 32 has an invalid length. [ 205.533408][T11061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1510'. [ 205.550407][T10507] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.570733][T11061] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 205.666622][T10507] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.755006][T10507] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.814131][T10507] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.921633][T10507] bridge_slave_1: left allmulticast mode [ 205.927481][T10507] bridge_slave_1: left promiscuous mode [ 205.934228][T10507] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.943776][T10507] bridge_slave_0: left allmulticast mode [ 205.950080][T10507] bridge_slave_0: left promiscuous mode [ 205.955849][T10507] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.300304][T10507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.311617][T10507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.322040][T10507] bond0 (unregistering): Released all slaves [ 206.994312][T11091] netlink: 'syz.3.1519': attribute type 5 has an invalid length. [ 207.017840][T11091] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1519'. [ 207.078071][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 207.101902][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 207.110030][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 207.127900][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 207.141668][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 207.214144][T10507] hsr_slave_0: left promiscuous mode [ 207.274359][T10507] hsr_slave_1: left promiscuous mode [ 207.298124][T10507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.305590][T10507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.320751][T11112] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1523'. [ 207.368764][T10507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.391994][T10507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.448684][T11125] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1527'. [ 207.459674][T10507] veth1_macvtap: left promiscuous mode [ 207.465333][T10507] veth0_macvtap: left promiscuous mode [ 207.474625][T10507] veth1_vlan: left promiscuous mode [ 207.480285][T10507] veth0_vlan: left promiscuous mode [ 207.922919][T10507] team0 (unregistering): Port device team_slave_1 removed [ 207.962942][T10507] team0 (unregistering): Port device team_slave_0 removed [ 208.340287][T11116] batman_adv: batadv0: Removing interface: dummy0 [ 208.357977][T11116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.366255][T11116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.374524][T11116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.458171][T11102] lo speed is unknown, defaulting to 1000 [ 208.813993][T11153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1535'. [ 209.160408][T11102] chnl_net:caif_netlink_parms(): no params data found [ 209.227495][ T55] Bluetooth: hci2: command tx timeout [ 209.398403][T11102] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.405705][T11102] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.413307][T11102] bridge_slave_0: entered allmulticast mode [ 209.421382][T11102] bridge_slave_0: entered promiscuous mode [ 209.435350][T11102] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.443798][T11102] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.453652][T11102] bridge_slave_1: entered allmulticast mode [ 209.462056][T11102] bridge_slave_1: entered promiscuous mode [ 209.545879][T10499] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.663368][T11102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.712819][T10499] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.758436][T11102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.841138][T10499] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.871988][T11102] team0: Port device team_slave_0 added [ 209.907664][T11102] team0: Port device team_slave_1 added [ 210.078884][T11209] __nla_validate_parse: 4 callbacks suppressed [ 210.078906][T11209] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1551'. [ 210.102761][T10499] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.189579][T11102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.196709][T11102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.291181][T11102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.319043][T11102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.345171][T11102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.402017][T11102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.522849][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 210.537158][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 210.557920][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 210.575662][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 210.591423][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 210.637515][T11229] veth0: entered promiscuous mode [ 210.724306][T11102] hsr_slave_0: entered promiscuous mode [ 210.731550][T11102] hsr_slave_1: entered promiscuous mode [ 210.738067][T11102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.745646][T11102] Cannot create hsr debugfs directory [ 210.754007][T11228] veth0: left promiscuous mode [ 210.763898][T11237] openvswitch: netlink: IPv6 tunnel dst address is zero [ 210.866493][T11224] lo speed is unknown, defaulting to 1000 [ 210.921076][T10499] bridge_slave_1: left allmulticast mode [ 210.927500][T10499] bridge_slave_1: left promiscuous mode [ 210.933372][T10499] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.958214][T10499] bridge_slave_0: left allmulticast mode [ 210.965180][T10499] bridge_slave_0: left promiscuous mode [ 210.971733][T10499] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.115250][T11254] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1564'. [ 211.245294][T10499] dvmrp0 (unregistering): left allmulticast mode [ 211.281788][T10499] . (unregistering): (slave bridge0): Releasing backup interface [ 211.307126][ T5839] Bluetooth: hci2: command tx timeout [ 211.652650][T10499] . (unregistering): (slave 1@ÿ): Releasing backup interface [ 211.663637][T10499] . (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.680502][T10499] . (unregistering): (slave team0): Releasing backup interface [ 211.691005][T10499] . (unregistering): Released all slaves [ 211.708282][T10499] bond1 (unregistering): Released all slaves [ 211.714366][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 211.815978][T10499] bond2 (unregistering): Released all slaves [ 211.830357][T10499] bond3 (unregistering): Released all slaves [ 211.922261][T10499] bond4 (unregistering): Released all slaves [ 212.181018][T10499] tipc: Left network mode [ 212.562642][T11285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1571'. [ 212.667133][ T55] Bluetooth: hci1: command tx timeout [ 212.742529][T10499] hsr_slave_0: left promiscuous mode [ 212.755659][T10499] hsr_slave_1: left promiscuous mode [ 212.765581][T10499] batman_adv: batadv0: Interface deactivated:  [ 212.771738][T11295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1574'. [ 212.777417][T10499] batman_adv: batadv0: Removing interface:  [ 212.808874][T10499] veth0_macvtap: left promiscuous mode [ 213.206082][T10499] team0 (unregistering): Port device team_slave_1 removed [ 213.250791][T10499] team0 (unregistering): Port device team_slave_0 removed [ 213.386952][ T55] Bluetooth: hci2: command tx timeout [ 213.712133][T11224] chnl_net:caif_netlink_parms(): no params data found [ 213.971817][T11316] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 213.984896][T11224] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.995726][T11224] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.003502][T11224] bridge_slave_0: entered allmulticast mode [ 214.011677][T11224] bridge_slave_0: entered promiscuous mode [ 214.050619][T11224] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.058187][T11224] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.065536][T11224] bridge_slave_1: entered allmulticast mode [ 214.078231][T11224] bridge_slave_1: entered promiscuous mode [ 214.231935][T11224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.265493][T11102] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 214.299792][T11224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.329439][T11102] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 214.381032][T11102] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 214.435859][T11224] team0: Port device team_slave_0 added [ 214.455963][T11339] netlink: 'syz.3.1584': attribute type 23 has an invalid length. [ 214.463220][T11102] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 214.471077][T10499] IPVS: stop unused estimator thread 0... [ 214.530595][T11224] team0: Port device team_slave_1 added [ 214.672978][T11224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.686139][T11224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.715667][T11224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.754445][ T55] Bluetooth: hci1: command tx timeout [ 214.762707][T11357] netlink: 'syz.0.1591': attribute type 11 has an invalid length. [ 214.773550][T11357] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1591'. [ 214.802531][T11224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.817193][T11224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.890966][T11224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.062727][T11224] hsr_slave_0: entered promiscuous mode [ 215.073338][T11224] hsr_slave_1: entered promiscuous mode [ 215.098955][T11224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.106574][T11224] Cannot create hsr debugfs directory [ 215.450013][T11102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.468394][ T55] Bluetooth: hci2: command tx timeout [ 215.565366][T11102] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.588774][ T9954] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.596213][ T9954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.704377][T10509] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.711611][T10509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.284906][T11224] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 216.341100][T11224] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 216.374617][T11224] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 216.402889][T11224] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 216.441264][T11102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.631094][T11102] veth0_vlan: entered promiscuous mode [ 216.699432][T11102] veth1_vlan: entered promiscuous mode [ 216.728754][T11224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.779248][T11224] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.811095][ T9954] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.818384][ T9954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.839924][ T55] Bluetooth: hci1: command tx timeout [ 216.863995][ T9954] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.871225][ T9954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.955500][T11102] veth0_macvtap: entered promiscuous mode [ 216.994977][T11102] veth1_macvtap: entered promiscuous mode [ 217.004021][T11437] netlink: 'syz.0.1615': attribute type 1 has an invalid length. [ 217.087150][T11446] netlink: 'syz.3.1617': attribute type 2 has an invalid length. [ 217.095149][T11446] netlink: 'syz.3.1617': attribute type 1 has an invalid length. [ 217.170711][T11450] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 217.195531][T11444] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 217.211530][T11444] bond3: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 217.224961][T11444] bond3: (slave vcan1): making interface the new active one [ 217.234568][T11444] bond3: (slave vcan1): Enslaving as an active interface with an up link [ 217.304311][T11102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.353835][T11102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.392629][T11102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.404731][T11102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.442197][T11102] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.452047][T11102] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.463286][T11102] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.473612][T11102] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.495348][T11224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.529774][T11460] syzkaller1: entered promiscuous mode [ 217.536464][T11460] syzkaller1: entered allmulticast mode [ 217.547657][T11460] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 217.700664][T11102] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 217.736952][T11102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.781582][T10506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.810292][T10506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.935200][T10507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.959407][T11478] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1624'. [ 217.975374][T10507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.991712][T11477] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1624'. [ 218.030198][T11478] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1624'. [ 218.093536][T11475] xt_CT: No such helper "pptp" [ 218.105908][T11224] veth0_vlan: entered promiscuous mode [ 218.133538][T11224] veth1_vlan: entered promiscuous mode [ 218.233184][T11484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1627'. [ 218.259249][T11224] veth0_macvtap: entered promiscuous mode [ 218.268450][T11488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1629'. [ 218.315242][T11224] veth1_macvtap: entered promiscuous mode [ 218.359916][T11224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.370778][T11224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.393619][T11224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.712929][T11224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.747544][T11224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.766838][T11224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.786837][T11224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.808961][T11224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.854705][T10507] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.878804][T11224] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.889301][T11224] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.898483][T11224] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.907978][T11224] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.922167][ T55] Bluetooth: hci1: command tx timeout [ 218.941695][T10507] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.043478][T10507] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.065978][T11224] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 219.077676][T11224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.096264][T10509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.108842][T10509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.133306][T10506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.141955][T10506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.512925][T10507] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.569687][T11507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1635'. [ 219.592215][T11507] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1635'. [ 219.657302][T11511] team0: Device is already in use. [ 219.884544][T10507] bridge_slave_1: left allmulticast mode [ 219.901472][T10507] bridge_slave_1: left promiscuous mode [ 219.924029][T10507] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.974412][T10507] bridge_slave_0: left allmulticast mode [ 220.001014][T10507] bridge_slave_0: left promiscuous mode [ 220.016822][T10507] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.221773][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 220.231555][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 220.246288][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 220.265100][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 220.279955][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 220.934017][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 220.945203][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 220.953816][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 220.965916][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 220.981405][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 220.981413][T10507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.002676][T10507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.033021][T10507] bond0 (unregistering): Released all slaves [ 221.455554][T10507] hsr_slave_0: left promiscuous mode [ 221.462088][T10507] hsr_slave_1: left promiscuous mode [ 221.468449][T10507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.475902][T10507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.485564][T10507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.493872][T10507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.517486][T10507] veth1_macvtap: left promiscuous mode [ 221.523066][T10507] veth0_macvtap: left promiscuous mode [ 221.529593][T10507] veth1_vlan: left promiscuous mode [ 221.535006][T10507] veth0_vlan: left promiscuous mode [ 222.003253][T10507] team0 (unregistering): Port device team_slave_1 removed [ 222.044529][T10507] team0 (unregistering): Port device team_slave_0 removed [ 222.350633][ T5839] Bluetooth: hci1: command tx timeout [ 222.520712][T11563] syzkaller0: entered promiscuous mode [ 222.526349][T11563] syzkaller0: entered allmulticast mode [ 222.666464][T11578] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1653'. [ 222.794724][T11583] netlink: 'syz.3.1654': attribute type 28 has an invalid length. [ 222.803144][T11583] netlink: 'syz.3.1654': attribute type 3 has an invalid length. [ 222.812203][T11583] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1654'. [ 223.072028][ T5839] Bluetooth: hci2: command tx timeout [ 223.920910][T11587] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 223.942787][T11588] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1655'. [ 224.076337][T11594] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 224.126595][T11600] set match dimension is over the limit! [ 224.180876][T11606] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1656'. [ 224.220043][T11606] netlink: 'syz.2.1656': attribute type 7 has an invalid length. [ 224.266182][T11606] netlink: 'syz.2.1656': attribute type 8 has an invalid length. [ 224.292705][T11606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1656'. [ 224.422739][T11619] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1661'. [ 224.431949][ T5839] Bluetooth: hci1: command tx timeout [ 224.475939][T11531] chnl_net:caif_netlink_parms(): no params data found [ 224.513113][T11548] chnl_net:caif_netlink_parms(): no params data found [ 224.714342][T11634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1666'. [ 224.729524][T10507] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.786248][T11637] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1665'. [ 224.800266][T11637] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1665'. [ 224.813154][T11637] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1665'. [ 224.825625][T11637] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1665'. [ 224.949131][T10507] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.985455][T11531] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.009808][T11531] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.018552][T11531] bridge_slave_0: entered allmulticast mode [ 225.026989][T11531] bridge_slave_0: entered promiscuous mode [ 225.052433][T11652] veth1_to_team: entered promiscuous mode [ 225.059126][T11531] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.067531][T11531] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.075115][T11531] bridge_slave_1: entered allmulticast mode [ 225.084464][T11531] bridge_slave_1: entered promiscuous mode [ 225.132793][T10507] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.148359][ T5839] Bluetooth: hci2: command tx timeout [ 225.157004][T11548] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.164141][T11548] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.172344][T11548] bridge_slave_0: entered allmulticast mode [ 225.179769][T11548] bridge_slave_0: entered promiscuous mode [ 225.206249][T11548] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.214219][T11548] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.222159][T11548] bridge_slave_1: entered allmulticast mode [ 225.231696][T11548] bridge_slave_1: entered promiscuous mode [ 225.289834][T10507] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.381877][T11531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.400480][T11531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.440163][T11548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.470758][T11548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.574140][T11531] team0: Port device team_slave_0 added [ 225.599429][T11548] team0: Port device team_slave_0 added [ 225.611374][T11531] team0: Port device team_slave_1 added [ 225.629249][T11548] team0: Port device team_slave_1 added [ 225.654688][T11665] pimreg3: entered allmulticast mode [ 225.813201][T11645] veth1_to_team: left promiscuous mode [ 225.885357][T11674] xt_CT: You must specify a L4 protocol and not use inversions on it [ 225.892459][T11674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1676'. [ 226.507133][ T5839] Bluetooth: hci1: command tx timeout [ 227.060247][T11548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.071408][T11548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.097852][T11548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.111783][T11548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.118827][T11548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.150558][T11548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.175603][T11531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.189726][T11531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.219231][T11531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.233507][ T5839] Bluetooth: hci2: command tx timeout [ 227.235791][T11531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.246083][T11531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.293850][T11531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.331553][T11674] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 227.376053][T11674] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 227.384489][T11674] gretap2: entered promiscuous mode [ 227.416256][T11674] gretap2: entered allmulticast mode [ 227.575057][T10507] bridge_slave_1: left allmulticast mode [ 227.586748][T10507] bridge_slave_1: left promiscuous mode [ 227.593574][T10507] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.609725][T10507] bridge_slave_0: left allmulticast mode [ 227.616509][T10507] bridge_slave_0: left promiscuous mode [ 227.627819][T10507] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.023204][T10507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.034660][T10507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.047925][T10507] bond0 (unregistering): Released all slaves [ 228.103425][T11702] IPv6: sit1: Disabled Multicast RS [ 228.127907][T11702] sit1: entered allmulticast mode [ 228.229145][T11548] hsr_slave_0: entered promiscuous mode [ 228.235990][T11548] hsr_slave_1: entered promiscuous mode [ 228.242965][T11548] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.251846][T11548] Cannot create hsr debugfs directory [ 228.510965][T11730] netlink: 'syz.0.1687': attribute type 1 has an invalid length. [ 228.565225][T11531] hsr_slave_0: entered promiscuous mode [ 228.572057][T11531] hsr_slave_1: entered promiscuous mode [ 228.581228][T11531] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.593893][ T5839] Bluetooth: hci1: command tx timeout [ 228.601742][T11531] Cannot create hsr debugfs directory [ 228.690348][T10507] hsr_slave_0: left promiscuous mode [ 228.696382][T10507] hsr_slave_1: left promiscuous mode [ 228.702821][T10507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.711742][T10507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.727932][T10507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.745688][T10507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.936425][T10507] veth1_macvtap: left promiscuous mode [ 228.955536][T10507] veth0_macvtap: left promiscuous mode [ 228.961893][T10507] veth1_vlan: left promiscuous mode [ 228.970520][T10507] veth0_vlan: left promiscuous mode [ 229.307336][ T5839] Bluetooth: hci2: command tx timeout [ 229.396137][T10507] team0 (unregistering): Port device team_slave_1 removed [ 229.437772][T10507] team0 (unregistering): Port device team_slave_0 removed [ 229.803627][T11739] netlink: 'syz.2.1691': attribute type 12 has an invalid length. [ 229.816950][T11739] __nla_validate_parse: 1 callbacks suppressed [ 229.816967][T11739] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1691'. [ 230.272451][T11767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1696'. [ 230.446378][T11778] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2 [ 230.493384][T11782] netlink: 'syz.2.1701': attribute type 1 has an invalid length. [ 230.566170][T11786] sctp: [Deprecated]: syz.3.1702 (pid 11786) Use of int in max_burst socket option. [ 230.566170][T11786] Use struct sctp_assoc_value instead [ 230.636086][T11789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1703'. [ 230.650008][T11789] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1703'. [ 230.672872][T11782] 8021q: adding VLAN 0 to HW filter on device bond6 [ 230.723071][T11791] xt_CT: You must specify a L4 protocol and not use inversions on it [ 230.975395][T11548] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 231.023004][T11548] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 231.050416][T11806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1709'. [ 231.061925][T11807] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1706'. [ 231.105252][T11548] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 231.133504][T11548] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 231.436574][T11822] sctp: [Deprecated]: syz.2.1714 (pid 11822) Use of struct sctp_assoc_value in delayed_ack socket option. [ 231.436574][T11822] Use struct sctp_sack_info instead [ 231.464485][T11548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.503629][T11548] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.544587][T10507] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.551823][T10507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.621622][T10507] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.628960][T10507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.657848][T11822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1714'. [ 231.958594][T11531] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 232.046050][T11850] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1721'. [ 232.066617][T11531] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 232.120464][T11531] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 232.122185][T11853] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1722'. [ 232.166575][T11531] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 232.513755][T11548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.552976][T11876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1725'. [ 232.614370][T11531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.684637][T11531] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.731561][ T9953] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.738925][ T9953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.793406][ T9953] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.800657][ T9953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.150970][T11548] veth0_vlan: entered promiscuous mode [ 233.189304][T11548] veth1_vlan: entered promiscuous mode [ 233.284042][T11548] veth0_macvtap: entered promiscuous mode [ 233.310692][T11548] veth1_macvtap: entered promiscuous mode [ 233.325143][T11531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.363771][T11548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.383400][T11548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.395681][T11548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.408412][T11548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.436352][T11548] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.449022][T11548] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.458304][T11548] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.470735][T11548] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.605286][T11531] veth0_vlan: entered promiscuous mode [ 233.664489][T11531] veth1_vlan: entered promiscuous mode [ 233.732851][T11548] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 233.745366][T11548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.782212][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.801305][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.820345][T11531] veth0_macvtap: entered promiscuous mode [ 233.875067][T11918] Timeout policy `syz0' can only be used by L3 protocol number 1536 [ 233.894035][T11531] veth1_macvtap: entered promiscuous mode [ 233.922050][T11924] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 233.999205][ T3537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.000256][T11531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.020479][ T3537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.042110][T11531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.062631][T11531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.110719][T11531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.131958][T11531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.144537][T11531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.155772][T11531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.170353][T11531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.219297][T11531] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.231278][T11531] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.252929][T11531] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.272124][T11531] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.630357][T11531] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 234.646524][T11531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.702578][ T9953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.730800][ T9953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.983877][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.032457][T11955] tap0: tun_chr_ioctl cmd 1074025678 [ 235.041923][T11955] tap0: group set to 0 [ 235.070784][ T3537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.089571][ T3537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.150217][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.199923][T11972] netlink: 'syz.3.1752': attribute type 1 has an invalid length. [ 235.239963][T11971] __nla_validate_parse: 1 callbacks suppressed [ 235.239983][T11971] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1750'. [ 235.393173][T11971] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1750'. [ 235.408654][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.430761][T11971] openvswitch: netlink: Flow key attr not present in new flow. [ 235.503956][T11977] bond3: (slave gretap3): making interface the new active one [ 235.528047][T11977] bond3: (slave gretap3): Enslaving as an active interface with an up link [ 235.670227][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.691141][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 235.703111][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 235.712130][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 235.721638][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 235.734643][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 235.775484][T11994] netlink: 'syz.0.1755': attribute type 32 has an invalid length. [ 235.827194][T11994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1755'. [ 235.839540][T11994] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 235.844432][T11998] Cannot find del_set index 5 as target [ 236.048466][ T53] bridge_slave_1: left allmulticast mode [ 236.054178][ T53] bridge_slave_1: left promiscuous mode [ 236.060707][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.071392][ T53] bridge_slave_0: left allmulticast mode [ 236.080542][ T53] bridge_slave_0: left promiscuous mode [ 236.086374][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.381208][T11983] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 236.442065][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.458720][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.471080][ T53] bond0 (unregistering): Released all slaves [ 236.625044][T11989] chnl_net:caif_netlink_parms(): no params data found [ 236.765828][T11989] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.774071][T11989] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.781624][T11989] bridge_slave_0: entered allmulticast mode [ 236.790457][T11989] bridge_slave_0: entered promiscuous mode [ 236.804167][ T53] hsr_slave_0: left promiscuous mode [ 236.810567][ T53] hsr_slave_1: left promiscuous mode [ 236.816429][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.823999][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.832179][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.840015][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.861983][ T53] veth1_macvtap: left promiscuous mode [ 236.868218][ T53] veth0_macvtap: left promiscuous mode [ 236.873864][ T53] veth1_vlan: left promiscuous mode [ 236.879272][ T53] veth0_vlan: left promiscuous mode [ 237.139608][T12015] x_tables: duplicate underflow at hook 1 [ 237.156449][T12015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1758'. [ 237.178998][T12013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1756'. [ 237.188097][T12013] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1756'. [ 237.518126][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 237.531926][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 237.541067][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 237.550132][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 237.571617][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 237.660464][ T53] team0 (unregistering): Port device team_slave_1 removed [ 237.701046][ T53] team0 (unregistering): Port device team_slave_0 removed [ 237.790881][ T5839] Bluetooth: hci1: command tx timeout [ 238.064889][T11989] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.072737][T11989] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.080112][T11989] bridge_slave_1: entered allmulticast mode [ 238.087785][T11989] bridge_slave_1: entered promiscuous mode [ 238.255043][T12028] x_tables: duplicate underflow at hook 1 [ 238.259026][T11989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.298320][T11989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.311841][T12030] tipc: Failed to remove unknown binding: 66,1,1/0:2666387944/2666387946 [ 238.338271][T12030] tipc: Failed to remove unknown binding: 66,1,1/0:2666387944/2666387946 [ 238.349176][T12030] tipc: Failed to remove unknown binding: 66,1,1/0:2666387944/2666387946 [ 238.442712][T12034] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1764'. [ 238.449700][T11989] team0: Port device team_slave_0 added [ 238.515681][T11989] team0: Port device team_slave_1 added [ 238.583781][T12041] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 238.585606][T12039] IPVS: stopping master sync thread 12041 ... [ 238.630101][T11989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.643684][T11989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.671394][T11989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.699528][T11989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.707049][T11989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.734520][T11989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.881322][T12053] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1768'. [ 238.904587][ T53] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.956593][T11989] hsr_slave_0: entered promiscuous mode [ 238.964416][T11989] hsr_slave_1: entered promiscuous mode [ 238.970916][T11989] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.985204][T11989] Cannot create hsr debugfs directory [ 239.039223][ T53] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.140902][T12064] xt_socket: unknown flags 0x50 [ 239.180119][ T53] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.307478][ T53] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.423056][T12023] chnl_net:caif_netlink_parms(): no params data found [ 239.635685][ T5839] Bluetooth: hci2: command tx timeout [ 239.868488][ T5839] Bluetooth: hci1: command tx timeout [ 239.917711][T12098] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1778'. [ 239.933319][T12098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1778'. [ 239.952090][T12098] netlink: 'syz.2.1778': attribute type 3 has an invalid length. [ 239.984644][T12098] netlink: 'syz.2.1778': attribute type 2 has an invalid length. [ 240.004176][T12103] x_tables: unsorted underflow at hook 1 [ 240.095775][T12023] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.107276][T12023] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.114524][T12023] bridge_slave_0: entered allmulticast mode [ 240.124120][T12023] bridge_slave_0: entered promiscuous mode [ 240.181968][T12023] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.191271][T12023] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.203888][T12023] bridge_slave_1: entered allmulticast mode [ 240.214190][T12023] bridge_slave_1: entered promiscuous mode [ 240.283631][ T53] bridge_slave_1: left allmulticast mode [ 240.296508][ T53] bridge_slave_1: left promiscuous mode [ 240.305817][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.323318][ T53] bridge_slave_0: left allmulticast mode [ 240.333082][ T53] bridge_slave_0: left promiscuous mode [ 240.342912][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.662849][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.675376][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.685568][ T53] bond0 (unregistering): Released all slaves [ 240.709984][T12023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.791610][T12023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.948760][T12023] team0: Port device team_slave_0 added [ 240.969564][T12119] __nla_validate_parse: 4 callbacks suppressed [ 240.969585][T12119] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1786'. [ 241.056707][T12023] team0: Port device team_slave_1 added [ 241.271762][ T53] hsr_slave_0: left promiscuous mode [ 241.279917][ T53] hsr_slave_1: left promiscuous mode [ 241.288290][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.295968][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.307469][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.314942][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.344982][ T53] veth1_macvtap: left promiscuous mode [ 241.346961][T12138] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1791'. [ 241.350690][ T53] veth0_macvtap: left promiscuous mode [ 241.364026][T12138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1791'. [ 241.365297][ T53] veth1_vlan: left promiscuous mode [ 241.379716][ T53] veth0_vlan: left promiscuous mode [ 241.719569][ T5839] Bluetooth: hci2: command tx timeout [ 241.821090][ T53] team0 (unregistering): Port device team_slave_1 removed [ 241.864334][ T53] team0 (unregistering): Port device team_slave_0 removed [ 241.949076][ T5839] Bluetooth: hci1: command tx timeout [ 242.274797][T12023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.282486][T12023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.313147][T12023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.356900][T12141] netlink: 'syz.0.1788': attribute type 4 has an invalid length. [ 242.388770][T12023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.401122][T12023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.440956][T12023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.521991][T11989] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 242.530857][T12150] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1793'. [ 242.544637][T11989] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 242.621405][T12023] hsr_slave_0: entered promiscuous mode [ 242.631911][T12023] hsr_slave_1: entered promiscuous mode [ 242.653053][T12023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.661362][T12023] Cannot create hsr debugfs directory [ 242.680599][T11989] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 242.754547][T11989] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 243.203991][T12173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1799'. [ 243.230639][T12173] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 243.256449][T12173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.283014][T12176] netlink: 456 bytes leftover after parsing attributes in process `syz.0.1801'. [ 243.325070][T12176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1801'. [ 243.338821][T12176] netlink: 456 bytes leftover after parsing attributes in process `syz.0.1801'. [ 243.382660][T12176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1801'. [ 243.429453][T11989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.504454][T11989] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.584925][T10507] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.592175][T10507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.613269][T10507] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.620517][T10507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.787330][ T5839] Bluetooth: hci2: command tx timeout [ 243.966368][T12023] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 244.003724][T12023] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 244.030186][ T5839] Bluetooth: hci1: command tx timeout [ 244.104610][T12023] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 244.149230][T12023] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 244.174715][T12208] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1813'. [ 244.260308][T12208] xfrm1: entered promiscuous mode [ 244.266384][T12208] xfrm1: entered allmulticast mode [ 244.365154][T11989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.513071][T12023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.570697][T12221] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.677560][T12023] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.869665][ T5839] Bluetooth: hci2: command tx timeout [ 246.104414][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.111760][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.142304][ T9953] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.149551][ T9953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.355080][T12258] netlink: 'syz.0.1824': attribute type 4 has an invalid length. [ 246.392719][T12258] netlink: 'syz.0.1824': attribute type 4 has an invalid length. [ 246.493849][T11989] veth0_vlan: entered promiscuous mode [ 246.550466][T11989] veth1_vlan: entered promiscuous mode [ 246.583011][T12266] __nla_validate_parse: 5 callbacks suppressed [ 246.583030][T12266] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1829'. [ 246.630325][T12269] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1827'. [ 246.643280][T11989] veth0_macvtap: entered promiscuous mode [ 246.691220][T11989] veth1_macvtap: entered promiscuous mode [ 246.792275][T11989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.806740][T12279] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1831'. [ 246.817553][T11989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.849255][T11989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.862214][T11989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.881727][T12023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.910142][T11989] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.929455][T11989] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.939008][T11989] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.948595][T11989] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.112992][T11989] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 247.122832][T11989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.153472][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.172608][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.184437][T12023] veth0_vlan: entered promiscuous mode [ 247.234641][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.247567][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.249847][T12023] veth1_vlan: entered promiscuous mode [ 247.345903][T12023] veth0_macvtap: entered promiscuous mode [ 247.376521][T12023] veth1_macvtap: entered promiscuous mode [ 247.478448][T12023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.507304][T12023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.524110][T12023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.566032][T12299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1837'. [ 247.705818][T12023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.715553][T12305] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1839'. [ 247.722467][T12023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.731353][T12305] xt_TCPMSS: Only works on TCP SYN packets [ 247.743654][T12023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.755924][T12023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.775561][T12023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.802203][T12023] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.814868][T12023] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.852250][T12023] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.865920][T12023] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.024613][ T3435] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.195160][ T3435] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.225948][T12023] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 248.236529][T12023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.260310][T10507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.271024][T10507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.330866][ T3435] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.362900][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.371633][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.429484][ T3435] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.642987][ T3435] bridge_slave_1: left allmulticast mode [ 248.649251][ T3435] bridge_slave_1: left promiscuous mode [ 248.654985][ T3435] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.665119][ T3435] bridge_slave_0: left allmulticast mode [ 248.673103][ T3435] bridge_slave_0: left promiscuous mode [ 248.687363][ T3435] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.372478][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 249.391426][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 249.401604][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 249.422497][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 249.442569][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 249.493131][ T3435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.505347][ T3435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.515622][ T3435] bond0 (unregistering): Released all slaves [ 249.813926][ T3435] hsr_slave_0: left promiscuous mode [ 249.820972][ T3435] hsr_slave_1: left promiscuous mode [ 249.827090][ T3435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.834522][ T3435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.842880][ T3435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.850415][ T3435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.872561][ T3435] veth1_macvtap: left promiscuous mode [ 249.878279][ T3435] veth0_macvtap: left promiscuous mode [ 249.883874][ T3435] veth1_vlan: left promiscuous mode [ 249.889292][ T3435] veth0_vlan: left promiscuous mode [ 250.223079][T12355] netlink: 'syz.2.1850': attribute type 1 has an invalid length. [ 250.246972][T12354] openvswitch: netlink: Missing key (keys=40, expected=100) [ 250.661101][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 250.671267][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 250.680987][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 250.693449][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 250.702300][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 250.731254][ T3435] team0 (unregistering): Port device team_slave_1 removed [ 250.774189][ T3435] team0 (unregistering): Port device team_slave_0 removed [ 251.162593][T12350] netlink: 'syz.2.1850': attribute type 1 has an invalid length. [ 251.173983][T12355] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 251.183948][T12367] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 251.202554][T12367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.214507][T12367] vlan2: entered allmulticast mode [ 251.220667][T12367] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 251.259150][T12350] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 251.391076][T12344] chnl_net:caif_netlink_parms(): no params data found [ 251.404929][T12388] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1854'. [ 251.548491][ T55] Bluetooth: hci1: command tx timeout [ 251.866406][T12344] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.898110][T12344] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.905540][T12344] bridge_slave_0: entered allmulticast mode [ 251.928413][T12344] bridge_slave_0: entered promiscuous mode [ 251.959842][T12344] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.969059][T12344] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.977321][T12344] bridge_slave_1: entered allmulticast mode [ 251.985366][T12344] bridge_slave_1: entered promiscuous mode [ 252.129493][T12422] 8021q: VLANs not supported on vxcan1 [ 252.153974][T12344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.190957][T12344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.345621][T12434] netlink: 'syz.2.1866': attribute type 32 has an invalid length. [ 252.373050][T12437] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1865'. [ 252.376679][T12434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1866'. [ 252.401228][T12437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1865'. [ 252.438003][T12430] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 252.464255][T12344] team0: Port device team_slave_0 added [ 252.470660][T12434] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 252.585145][ T3435] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.610122][T12440] tipc: Started in network mode [ 252.615557][T12440] tipc: Node identity 4, cluster identity 4711 [ 252.624493][T12440] tipc: Node number set to 4 [ 252.633654][T12344] team0: Port device team_slave_1 added [ 252.700329][T12374] chnl_net:caif_netlink_parms(): no params data found [ 252.753216][T12453] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1871'. [ 252.757188][ T55] Bluetooth: hci2: command tx timeout [ 252.766262][T12453] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1871'. [ 252.809830][T12344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.823888][T12344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.855166][T12344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.902022][ T3435] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.957570][T12344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.964998][T12344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.001403][T12344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.155489][ T3435] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.248295][T12485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1879'. [ 253.318940][ T3435] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.331165][T12481] netlink: 'syz.3.1876': attribute type 23 has an invalid length. [ 253.356502][T12491] ieee802154 phy1 wpan1: encryption failed: -22 [ 253.379126][T12344] hsr_slave_0: entered promiscuous mode [ 253.385895][T12344] hsr_slave_1: entered promiscuous mode [ 253.398426][T12344] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.411529][T12344] Cannot create hsr debugfs directory [ 253.470568][T12374] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.479091][T12374] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.486358][T12374] bridge_slave_0: entered allmulticast mode [ 253.495613][T12495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1882'. [ 253.500243][T12374] bridge_slave_0: entered promiscuous mode [ 253.624028][T12374] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.631266][ T55] Bluetooth: hci1: command tx timeout [ 253.637802][T12374] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.645012][T12374] bridge_slave_1: entered allmulticast mode [ 253.669147][T12374] bridge_slave_1: entered promiscuous mode [ 253.854835][T12374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.912124][T12504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1885'. [ 253.975994][T12374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.164039][T12374] team0: Port device team_slave_0 added [ 254.176359][T12516] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.179778][T12374] team0: Port device team_slave_1 added [ 254.199704][ T3435] bridge_slave_1: left allmulticast mode [ 254.205401][ T3435] bridge_slave_1: left promiscuous mode [ 254.230155][ T3435] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.300210][ T3435] bridge_slave_0: left allmulticast mode [ 254.319513][ T3435] bridge_slave_0: left promiscuous mode [ 254.332177][ T3435] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.421069][T12532] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1893'. [ 254.705682][ T3435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.720681][ T3435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.731379][ T3435] bond0 (unregistering): Released all slaves [ 254.828918][ T55] Bluetooth: hci2: command tx timeout [ 254.894131][T12538] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1894'. [ 255.001127][T12374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.028861][T12374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.055618][T12374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.165400][T12374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.185858][T12374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.212913][T12374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.441807][T12563] netlink: 'syz.2.1902': attribute type 5 has an invalid length. [ 255.457938][T12374] hsr_slave_0: entered promiscuous mode [ 255.464726][T12374] hsr_slave_1: entered promiscuous mode [ 255.473168][T12374] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.481533][T12374] Cannot create hsr debugfs directory [ 255.660829][T12563] xt_TCPMSS: Only works on TCP SYN packets [ 255.667034][ T3435] hsr_slave_0: left promiscuous mode [ 255.674037][ T3435] hsr_slave_1: left promiscuous mode [ 255.684286][ T3435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.697925][ T3435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.719120][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.725551][ T55] Bluetooth: hci1: command tx timeout [ 255.753092][ T3435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.760672][ T3435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.778197][T12576] netlink: 'syz.0.1905': attribute type 4 has an invalid length. [ 255.830466][T12572] netlink: 'syz.0.1905': attribute type 4 has an invalid length. [ 256.287664][ T3435] veth1_macvtap: left promiscuous mode [ 256.293272][ T3435] veth0_macvtap: left promiscuous mode [ 256.299404][ T3435] veth1_vlan: left promiscuous mode [ 256.305045][ T3435] veth0_vlan: left promiscuous mode [ 256.761090][ T3435] team0 (unregistering): Port device team_slave_1 removed [ 256.801482][ T3435] team0 (unregistering): Port device team_slave_0 removed [ 256.908526][ T55] Bluetooth: hci2: command tx timeout [ 257.367574][T12589] xt_CT: No such helper "pptp" [ 257.425877][T12596] IPv6: sit1: Disabled Multicast RS [ 257.581468][T12600] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 257.640539][T12344] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 257.676565][T12344] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 257.787064][ T55] Bluetooth: hci1: command tx timeout [ 257.806406][T12344] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 257.811964][T12616] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.893922][T12344] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 257.963985][T12613] pim6reg: entered allmulticast mode [ 258.302439][T12344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.419000][T12344] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.435368][ T3503] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.442597][ T3503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.459833][T12636] __nla_validate_parse: 3 callbacks suppressed [ 258.459851][T12636] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1921'. [ 258.529517][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.536774][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.630018][T12374] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 258.704621][T12374] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 258.752825][T12374] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 258.771210][T12374] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 258.987673][ T55] Bluetooth: hci2: command tx timeout [ 259.010948][T12374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.053720][T12374] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.083349][ T3499] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.090627][ T3499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.116736][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.123963][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.170008][T12344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.478007][T12683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1932'. [ 259.751892][T12694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1934'. [ 259.808598][T12694] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1934'. [ 259.820345][T12344] veth0_vlan: entered promiscuous mode [ 259.847485][T12694] team0: No ports can be present during mode change [ 259.856373][T12344] veth1_vlan: entered promiscuous mode [ 259.893506][T12374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.981683][T12344] veth0_macvtap: entered promiscuous mode [ 260.005359][T12344] veth1_macvtap: entered promiscuous mode [ 260.067949][T12344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.109296][T12344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.156937][T12344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.171118][T12344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.215522][T12344] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.224504][T12344] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.234136][T12344] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.242950][T12344] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.256516][T12374] veth0_vlan: entered promiscuous mode [ 260.324467][T12374] veth1_vlan: entered promiscuous mode [ 260.435234][T12344] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 260.453317][T12344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.477783][ T9940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.503016][ T9940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.522825][T12374] veth0_macvtap: entered promiscuous mode [ 260.574475][ T3472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.574926][T12374] veth1_macvtap: entered promiscuous mode [ 260.592239][ T3472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.643109][T12374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.665298][T12374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.689851][T12374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.749051][T12374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.804619][T12374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.856961][T12374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.892112][T12374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.928952][T12374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.435681][ T9940] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.769699][ T9940] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.179633][ T9940] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.451251][ T9940] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.049896][ T9940] bridge_slave_1: left allmulticast mode [ 263.055620][ T9940] bridge_slave_1: left promiscuous mode [ 263.132375][ T9940] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.188035][ T9940] bridge_slave_0: left allmulticast mode [ 263.193790][ T9940] bridge_slave_0: left promiscuous mode [ 263.277346][ T9940] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.597415][ T9940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.672730][ T9940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.750908][ T9940] bond0 (unregistering): Released all slaves [ 266.528276][ T9940] hsr_slave_0: left promiscuous mode [ 266.563300][ T9940] hsr_slave_1: left promiscuous mode [ 266.621642][ T9940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.656827][ T9940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.717702][ T9940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.725251][ T9940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.913027][ T9940] veth1_macvtap: left promiscuous mode [ 266.970630][ T9940] veth0_macvtap: left promiscuous mode [ 266.976341][ T9940] veth1_vlan: left promiscuous mode [ 267.034764][ T9940] veth0_vlan: left promiscuous mode [ 268.660932][ T9940] team0 (unregistering): Port device team_slave_1 removed [ 268.699417][ T9940] team0 (unregistering): Port device team_slave_0 removed [ 269.054073][T12374] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.063197][T12374] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.078056][T12374] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.097186][T12374] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.296170][T12374] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 269.326979][T12374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.359663][ T3472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.374897][ T3472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.457283][ T2989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.485523][ T2989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.936060][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 269.946664][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 269.977171][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 270.009609][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 270.021807][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 270.101030][ T3472] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.291238][ T3472] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.414853][ T3472] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.553181][ T3472] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.604235][T12779] chnl_net:caif_netlink_parms(): no params data found [ 270.739786][T12779] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.747723][T12779] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.754943][T12779] bridge_slave_0: entered allmulticast mode [ 270.762453][T12779] bridge_slave_0: entered promiscuous mode [ 270.771413][ T3472] bridge_slave_1: left allmulticast mode [ 270.778439][ T3472] bridge_slave_1: left promiscuous mode [ 270.784867][ T3472] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.794601][ T3472] bridge_slave_0: left allmulticast mode [ 270.801161][ T3472] bridge_slave_0: left promiscuous mode [ 270.807102][ T3472] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.096587][ T3472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.111820][ T3472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.124610][ T3472] bond0 (unregistering): Released all slaves [ 271.142142][T12779] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.150831][T12779] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.162304][T12779] bridge_slave_1: entered allmulticast mode [ 271.173161][T12779] bridge_slave_1: entered promiscuous mode [ 271.309866][T12779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.325922][T12779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.433250][T12779] team0: Port device team_slave_0 added [ 271.485639][T12779] team0: Port device team_slave_1 added [ 271.519323][T12805] IPVS: ip_vs_edit_dest(): server weight less than zero [ 271.621414][ T3472] hsr_slave_0: left promiscuous mode [ 271.644243][ T3472] hsr_slave_1: left promiscuous mode [ 271.683152][ T3472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.711042][ T3472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.731366][ T3472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.754167][ T3472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.793674][ T3472] veth1_macvtap: left promiscuous mode [ 271.802154][ T3472] veth0_macvtap: left promiscuous mode [ 271.808023][ T3472] veth1_vlan: left promiscuous mode [ 271.815116][ T3472] veth0_vlan: left promiscuous mode [ 271.971118][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 271.986258][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 271.994337][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 272.015350][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 272.030433][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 272.109614][ T55] Bluetooth: hci1: command tx timeout [ 272.331851][ T3472] team0 (unregistering): Port device team_slave_1 removed [ 272.374360][ T3472] team0 (unregistering): Port device team_slave_0 removed [ 272.882919][T12828] blkio.reset_stats is deprecated [ 272.889265][T12779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.896433][T12779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.937375][T12779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.955670][T12779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.963923][T12779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.995983][T12779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.398359][T12779] hsr_slave_0: entered promiscuous mode [ 273.405386][T12779] hsr_slave_1: entered promiscuous mode [ 273.419148][T12779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.432336][T12779] Cannot create hsr debugfs directory [ 273.451260][T12856] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1976'. [ 273.476083][T12856] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1976'. [ 273.497652][T12860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1978'. [ 273.762643][T12872] syz.0.1981 uses old SIOCAX25GETINFO [ 273.777926][T12870] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20000 [ 273.789353][T12870] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1982'. [ 274.045548][T12822] chnl_net:caif_netlink_parms(): no params data found [ 274.061175][T12890] x_tables: duplicate underflow at hook 3 [ 274.064149][T12887] x_tables: duplicate underflow at hook 2 [ 274.107727][ T55] Bluetooth: hci2: command tx timeout [ 274.187556][ T55] Bluetooth: hci1: command tx timeout [ 274.448587][T12822] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.456291][T12822] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.482711][T12822] bridge_slave_0: entered allmulticast mode [ 274.493023][T12822] bridge_slave_0: entered promiscuous mode [ 274.508966][T12822] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.516220][T12822] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.526296][T12822] bridge_slave_1: entered allmulticast mode [ 274.536027][T12822] bridge_slave_1: entered promiscuous mode [ 274.590307][T12822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.605238][T12822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.705449][T12822] team0: Port device team_slave_0 added [ 274.736066][T12822] team0: Port device team_slave_1 added [ 274.795649][T12822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.803028][T12822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.835767][T12822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.870868][T12822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.878517][T12822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.905342][T12822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.954541][T12779] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 274.985053][T12779] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 275.011215][T12822] hsr_slave_0: entered promiscuous mode [ 275.020900][T12822] hsr_slave_1: entered promiscuous mode [ 275.046129][T12822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.068713][T12822] Cannot create hsr debugfs directory [ 275.102776][T12779] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 275.133577][ T7625] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 275.145518][ T7625] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 275.153945][ T7625] CPU: 1 UID: 0 PID: 7625 Comm: kbnepd bnep0 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 275.166204][ T7625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 275.176310][ T7625] RIP: 0010:klist_del+0x49/0x110 [ 275.181286][ T7625] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 29 90 d5 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 0b 90 d5 f6 4d 8b 7e 58 4c 89 f7 e8 bf 41 [ 275.200905][ T7625] RSP: 0018:ffffc9000f6ef7a8 EFLAGS: 00010202 [ 275.207106][ T7625] RAX: 000000000000000b RBX: ffff8880267e5860 RCX: ffff8880254b8000 [ 275.215286][ T7625] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 275.223258][ T7625] RBP: ffffc9000f6ef8d0 R08: ffff88807c58f783 R09: 1ffff1100f8b1ef0 [ 275.231273][ T7625] R10: dffffc0000000000 R11: ffffed100f8b1ef1 R12: dffffc0000000000 [ 275.239256][ T7625] R13: 1ffff11004cfcb0c R14: 0000000000000000 R15: ffff888023c24768 [ 275.247273][ T7625] FS: 0000000000000000(0000) GS:ffff8881261cc000(0000) knlGS:0000000000000000 [ 275.256214][ T7625] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 275.262816][ T7625] CR2: 000000110c35223d CR3: 000000005f37a000 CR4: 00000000003526f0 [ 275.270808][ T7625] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 275.278781][ T7625] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 275.286757][ T7625] Call Trace: [ 275.290045][ T7625] [ 275.292986][ T7625] device_del+0x280/0x8e0 [ 275.297361][ T7625] ? _raw_spin_unlock_irq+0x2e/0x50 [ 275.302586][ T7625] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 275.308686][ T7625] ? __pfx_device_del+0x10/0x10 [ 275.313553][ T7625] ? netdev_unregister_kobject+0x344/0x450 [ 275.319372][ T7625] unregister_netdevice_many_notify+0x1d4f/0x2330 [ 275.325823][ T7625] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 275.332682][ T7625] ? rcu_is_watching+0x15/0xb0 [ 275.337460][ T7625] ? trace_contention_end+0x39/0x120 [ 275.342746][ T7625] ? __mutex_lock+0x330/0xe80 [ 275.347427][ T7625] ? __lock_acquire+0xaac/0xd20 [ 275.352296][ T7625] unregister_netdevice_queue+0x33c/0x380 [ 275.358032][ T7625] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 275.364283][ T7625] ? rtnl_net_dev_lock+0x36/0x2f0 [ 275.369397][ T7625] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 275.374514][ T7625] unregister_netdev+0x1f/0x60 [ 275.379284][ T7625] bnep_session+0x294d/0x2b40 [ 275.383965][ T7625] ? trace_sched_exit_tp+0x38/0x120 [ 275.389170][ T7625] ? __schedule+0x1700/0x4cd0 [ 275.393854][ T7625] ? __lock_acquire+0xaac/0xd20 [ 275.398813][ T7625] ? __pfx_bnep_session+0x10/0x10 [ 275.403845][ T7625] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 275.409826][ T7625] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 275.416159][ T7625] ? __pfx_woken_wake_function+0x10/0x10 [ 275.421813][ T7625] ? __kthread_parkme+0x7b/0x200 [ 275.426759][ T7625] ? __kthread_parkme+0x1a1/0x200 [ 275.431797][ T7625] kthread+0x70e/0x8a0 [ 275.435873][ T7625] ? __pfx_bnep_session+0x10/0x10 [ 275.440988][ T7625] ? __pfx_kthread+0x10/0x10 [ 275.445596][ T7625] ? __pfx_kthread+0x10/0x10 [ 275.450188][ T7625] ? _raw_spin_unlock_irq+0x23/0x50 [ 275.455384][ T7625] ? lockdep_hardirqs_on+0x9c/0x150 [ 275.460587][ T7625] ? __pfx_kthread+0x10/0x10 [ 275.465180][ T7625] ret_from_fork+0x4b/0x80 [ 275.469600][ T7625] ? __pfx_kthread+0x10/0x10 [ 275.474191][ T7625] ret_from_fork_asm+0x1a/0x30 [ 275.478989][ T7625] [ 275.482033][ T7625] Modules linked in: [ 275.486813][ T7625] ---[ end trace 0000000000000000 ]--- [ 275.492905][ T7625] RIP: 0010:klist_del+0x49/0x110 [ 275.497946][ T7625] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 29 90 d5 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 0b 90 d5 f6 4d 8b 7e 58 4c 89 f7 e8 bf 41 [ 275.517934][ T7625] RSP: 0018:ffffc9000f6ef7a8 EFLAGS: 00010202 [ 275.524066][ T7625] RAX: 000000000000000b RBX: ffff8880267e5860 RCX: ffff8880254b8000 [ 275.532332][ T7625] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 275.547432][ T7625] RBP: ffffc9000f6ef8d0 R08: ffff88807c58f783 R09: 1ffff1100f8b1ef0 [ 275.555544][ T7625] R10: dffffc0000000000 R11: ffffed100f8b1ef1 R12: dffffc0000000000 [ 275.563656][ T7625] R13: 1ffff11004cfcb0c R14: 0000000000000000 R15: ffff888023c24768 [ 275.571728][ T7625] FS: 0000000000000000(0000) GS:ffff8881261cc000(0000) knlGS:0000000000000000 [ 275.581077][ T7625] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 275.587808][ T7625] CR2: 000000110c35223d CR3: 000000000dd36000 CR4: 00000000003526f0 [ 275.595826][ T7625] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 275.603949][ T7625] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 275.612279][ T7625] Kernel panic - not syncing: Fatal exception [ 275.618719][ T7625] Kernel Offset: disabled [ 275.623048][ T7625] Rebooting in 86400 seconds..