last executing test programs: 1m32.897390272s ago: executing program 4 (id=730): bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) bind$bt_hci(r0, &(0x7f0000000180)={0x27}, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110ab000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000004a76"], 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x7, 0x0, 0x0, {0x0, 0xea60}, {}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "4acede967c288ef4"}}, 0x20000408}}, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000000c0)={'wlan0\x00', @multicast}) 1m32.00877868s ago: executing program 0 (id=494): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000300)={0x0, {0x2, 0x4e23, @rand_addr=0x64010102}, {0x2, 0x4e20, @empty}, {0x2, 0x4e24, @loopback}, 0x4, 0x0, 0x0, 0x0, 0xffff, &(0x7f0000000080)='ipvlan1\x00', 0x4, 0x7, 0x2}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$l2tp(r1, &(0x7f0000000380)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, 0x10) (async, rerun: 64) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) (async, rerun: 64) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="270000000200000000000000000000cb82771c8772df3fc04aad39"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) ioctl(r2, 0x5, &(0x7f0000000040)="7ec6fc11c8571d99259ced6e9c2f78d0228d0f775afdd8e1ebf9f3c7877b6824c79a1f1e2e7239de545795271a10c537") 1m31.138354744s ago: executing program 3 (id=401): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000180)={r4, 0x2, 0x0, 0x3}) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f00000002c0)={@rand_addr, @rand_addr, 0x0}, &(0x7f0000000300)=0xc) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_ENTRIES(r6, 0x0, 0x41, 0x0, &(0x7f0000001740)=0x2c) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r7, 0x5760, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x4, 0x1000, &(0x7f00000007c0)=""/4096, 0x41000, 0x8, '\x00', r5, 0x0, r7, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x7, 0x7ff, 0x3}, 0x10, 0x27916, r3, 0x4, 0x0, &(0x7f0000000400)=[{0x0, 0x5, 0x1, 0x1}, {0x1, 0x4, 0xb, 0xa}, {0x4, 0x3, 0xd, 0x9}, {0x1, 0x3, 0x6, 0x5}], 0x10, 0x9e, @void, @value}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r9, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0xf, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r11, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x1, 0xfffff038}, {0x6}]}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r10, 0x0, 0x0}, 0x20) r12 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r12, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340), 0x10, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], 0x20000600}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000040) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 1m26.007236923s ago: executing program 2 (id=855): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000080), &(0x7f00000000c0)=""/102}, 0x20) r1 = socket(0x11, 0x2, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=r2], 0x158}, 0x1, 0xba01}, 0x44) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f00000005c0)=@deltclass={0x46c, 0x29, 0x8, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x4, 0x9}, {0xffe5, 0x8}, {0x2, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x7, 0xdb}}, @tclass_kind_options=@c_htb={{0x8}, {0x418, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x6, 0x4, 0x6, 0x1, 0xfffffff2, 0x3, 0x9, 0x8, 0x0, 0x8, 0x0, 0x81, 0xffff, 0x9, 0x1, 0x1, 0xe11, 0x800, 0x84, 0x4, 0x401, 0xe20, 0x7, 0x0, 0xe7, 0xffff, 0x2, 0x3, 0x2, 0x28000000, 0x2, 0x101, 0x9a, 0x4, 0x0, 0xb, 0x8, 0x8, 0x5ed, 0x10, 0x1692, 0x80000000, 0xb45, 0x5, 0x2, 0x6, 0x6, 0x5, 0x9, 0x2, 0x18, 0x5, 0x5, 0xbb4, 0x0, 0x7, 0xfffffffd, 0x3, 0x6, 0x1d87, 0x2df9751e, 0xf4, 0x2, 0x9, 0x2, 0x18, 0xb21, 0x9169, 0x6, 0x145, 0x6, 0x202, 0x1, 0x10000, 0xff, 0x8, 0xb81, 0x9, 0x4dd4, 0x1, 0xfffc0000, 0x8, 0x3, 0x2, 0x8, 0x0, 0xfffffffe, 0x2, 0x40, 0x4, 0x9, 0x9, 0x7, 0x5, 0x4, 0x3, 0x0, 0x5, 0xffff6647, 0x6, 0x9, 0x0, 0x0, 0xd, 0xdc8d, 0x6, 0x8, 0x7, 0xbbd, 0x0, 0xc3dd, 0xb3, 0xff, 0xc3, 0x6, 0x4bf3, 0x1acc, 0x73f, 0x164cc, 0x9, 0x9, 0x6, 0x8, 0x5, 0x7ff, 0xbd, 0x4, 0x3, 0x5, 0x6fc, 0x9, 0x8, 0x3, 0x5, 0xfffffff6, 0x7, 0x516, 0x9, 0x401, 0x401, 0x1, 0xffff, 0x7, 0x8, 0xb829, 0x101, 0x9, 0x20000, 0x0, 0x3, 0x514b, 0x4, 0x9, 0x10001, 0x8, 0x2, 0x3, 0x8, 0x1800000, 0x101, 0x40, 0x6, 0x3, 0x200, 0x1, 0x1, 0x5, 0x8, 0x2, 0x400, 0xa6af, 0xffffffff, 0x4, 0x5, 0x9, 0x4, 0x6, 0x8000, 0x1, 0x2600, 0x8, 0x5, 0x1f3, 0x6, 0x775, 0x3ff, 0x5, 0x10000, 0x8, 0xe2, 0x1, 0x4, 0x10001, 0x5e, 0x80000000, 0x0, 0x9, 0x9, 0x8, 0x1, 0x2, 0x6, 0x8, 0x401, 0x5, 0x4, 0x7, 0xbdf, 0x1, 0x0, 0x5, 0x383f, 0xfffffffc, 0x7308, 0x9, 0x4, 0x6, 0x1, 0xd, 0x1ff, 0x1, 0xff, 0x4, 0x6, 0x2ebbfd8e, 0x5, 0x5d, 0x401, 0x4, 0x5ae, 0x830, 0x4, 0x3, 0x3, 0x3, 0x81, 0x9, 0xb, 0x7, 0x9, 0x9, 0x7, 0xc15, 0xfffffff8, 0x2a846deb, 0x3, 0x9, 0xffff, 0x1, 0x8, 0x100, 0x922, 0x5, 0x8, 0x7, 0x5]}, @TCA_HTB_RATE64={0xc, 0x6, 0x3}, @TCA_HTB_OFFLOAD={0x4}]}}, @tclass_kind_options=@c_fq_codel={0xd}, @tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x46c}, 0x1, 0x0, 0x0, 0x4000080}, 0x2) 1m16.52281741s ago: executing program 4 (id=730): bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) bind$bt_hci(r0, &(0x7f0000000180)={0x27}, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110ab000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000004a76"], 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x7, 0x0, 0x0, {0x0, 0xea60}, {}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "4acede967c288ef4"}}, 0x20000408}}, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000000c0)={'wlan0\x00', @multicast}) 1m14.251943217s ago: executing program 3 (id=401): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000180)={r4, 0x2, 0x0, 0x3}) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f00000002c0)={@rand_addr, @rand_addr, 0x0}, &(0x7f0000000300)=0xc) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_ENTRIES(r6, 0x0, 0x41, 0x0, &(0x7f0000001740)=0x2c) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r7, 0x5760, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x4, 0x1000, &(0x7f00000007c0)=""/4096, 0x41000, 0x8, '\x00', r5, 0x0, r7, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x7, 0x7ff, 0x3}, 0x10, 0x27916, r3, 0x4, 0x0, &(0x7f0000000400)=[{0x0, 0x5, 0x1, 0x1}, {0x1, 0x4, 0xb, 0xa}, {0x4, 0x3, 0xd, 0x9}, {0x1, 0x3, 0x6, 0x5}], 0x10, 0x9e, @void, @value}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r9, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0xf, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r11, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x1, 0xfffff038}, {0x6}]}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r10, 0x0, 0x0}, 0x20) r12 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r12, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340), 0x10, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], 0x20000600}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000040) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 1m12.200508454s ago: executing program 0 (id=494): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000300)={0x0, {0x2, 0x4e23, @rand_addr=0x64010102}, {0x2, 0x4e20, @empty}, {0x2, 0x4e24, @loopback}, 0x4, 0x0, 0x0, 0x0, 0xffff, &(0x7f0000000080)='ipvlan1\x00', 0x4, 0x7, 0x2}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$l2tp(r1, &(0x7f0000000380)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, 0x10) (async, rerun: 64) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) (async, rerun: 64) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="270000000200000000000000000000cb82771c8772df3fc04aad39"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) ioctl(r2, 0x5, &(0x7f0000000040)="7ec6fc11c8571d99259ced6e9c2f78d0228d0f775afdd8e1ebf9f3c7877b6824c79a1f1e2e7239de545795271a10c537") 1m8.042834068s ago: executing program 2 (id=855): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000080), &(0x7f00000000c0)=""/102}, 0x20) r1 = socket(0x11, 0x2, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=r2], 0x158}, 0x1, 0xba01}, 0x44) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f00000005c0)=@deltclass={0x46c, 0x29, 0x8, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x4, 0x9}, {0xffe5, 0x8}, {0x2, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x7, 0xdb}}, @tclass_kind_options=@c_htb={{0x8}, {0x418, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x6, 0x4, 0x6, 0x1, 0xfffffff2, 0x3, 0x9, 0x8, 0x0, 0x8, 0x0, 0x81, 0xffff, 0x9, 0x1, 0x1, 0xe11, 0x800, 0x84, 0x4, 0x401, 0xe20, 0x7, 0x0, 0xe7, 0xffff, 0x2, 0x3, 0x2, 0x28000000, 0x2, 0x101, 0x9a, 0x4, 0x0, 0xb, 0x8, 0x8, 0x5ed, 0x10, 0x1692, 0x80000000, 0xb45, 0x5, 0x2, 0x6, 0x6, 0x5, 0x9, 0x2, 0x18, 0x5, 0x5, 0xbb4, 0x0, 0x7, 0xfffffffd, 0x3, 0x6, 0x1d87, 0x2df9751e, 0xf4, 0x2, 0x9, 0x2, 0x18, 0xb21, 0x9169, 0x6, 0x145, 0x6, 0x202, 0x1, 0x10000, 0xff, 0x8, 0xb81, 0x9, 0x4dd4, 0x1, 0xfffc0000, 0x8, 0x3, 0x2, 0x8, 0x0, 0xfffffffe, 0x2, 0x40, 0x4, 0x9, 0x9, 0x7, 0x5, 0x4, 0x3, 0x0, 0x5, 0xffff6647, 0x6, 0x9, 0x0, 0x0, 0xd, 0xdc8d, 0x6, 0x8, 0x7, 0xbbd, 0x0, 0xc3dd, 0xb3, 0xff, 0xc3, 0x6, 0x4bf3, 0x1acc, 0x73f, 0x164cc, 0x9, 0x9, 0x6, 0x8, 0x5, 0x7ff, 0xbd, 0x4, 0x3, 0x5, 0x6fc, 0x9, 0x8, 0x3, 0x5, 0xfffffff6, 0x7, 0x516, 0x9, 0x401, 0x401, 0x1, 0xffff, 0x7, 0x8, 0xb829, 0x101, 0x9, 0x20000, 0x0, 0x3, 0x514b, 0x4, 0x9, 0x10001, 0x8, 0x2, 0x3, 0x8, 0x1800000, 0x101, 0x40, 0x6, 0x3, 0x200, 0x1, 0x1, 0x5, 0x8, 0x2, 0x400, 0xa6af, 0xffffffff, 0x4, 0x5, 0x9, 0x4, 0x6, 0x8000, 0x1, 0x2600, 0x8, 0x5, 0x1f3, 0x6, 0x775, 0x3ff, 0x5, 0x10000, 0x8, 0xe2, 0x1, 0x4, 0x10001, 0x5e, 0x80000000, 0x0, 0x9, 0x9, 0x8, 0x1, 0x2, 0x6, 0x8, 0x401, 0x5, 0x4, 0x7, 0xbdf, 0x1, 0x0, 0x5, 0x383f, 0xfffffffc, 0x7308, 0x9, 0x4, 0x6, 0x1, 0xd, 0x1ff, 0x1, 0xff, 0x4, 0x6, 0x2ebbfd8e, 0x5, 0x5d, 0x401, 0x4, 0x5ae, 0x830, 0x4, 0x3, 0x3, 0x3, 0x81, 0x9, 0xb, 0x7, 0x9, 0x9, 0x7, 0xc15, 0xfffffff8, 0x2a846deb, 0x3, 0x9, 0xffff, 0x1, 0x8, 0x100, 0x922, 0x5, 0x8, 0x7, 0x5]}, @TCA_HTB_RATE64={0xc, 0x6, 0x3}, @TCA_HTB_OFFLOAD={0x4}]}}, @tclass_kind_options=@c_fq_codel={0xd}, @tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x46c}, 0x1, 0x0, 0x0, 0x4000080}, 0x2) 59.175089672s ago: executing program 3 (id=401): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000180)={r4, 0x2, 0x0, 0x3}) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f00000002c0)={@rand_addr, @rand_addr, 0x0}, &(0x7f0000000300)=0xc) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_ENTRIES(r6, 0x0, 0x41, 0x0, &(0x7f0000001740)=0x2c) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r7, 0x5760, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x4, 0x1000, &(0x7f00000007c0)=""/4096, 0x41000, 0x8, '\x00', r5, 0x0, r7, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x7, 0x7ff, 0x3}, 0x10, 0x27916, r3, 0x4, 0x0, &(0x7f0000000400)=[{0x0, 0x5, 0x1, 0x1}, {0x1, 0x4, 0xb, 0xa}, {0x4, 0x3, 0xd, 0x9}, {0x1, 0x3, 0x6, 0x5}], 0x10, 0x9e, @void, @value}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r9, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0xf, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r11, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x1, 0xfffff038}, {0x6}]}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r10, 0x0, 0x0}, 0x20) r12 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r12, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340), 0x10, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], 0x20000600}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000040) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 58.223481835s ago: executing program 4 (id=730): bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) bind$bt_hci(r0, &(0x7f0000000180)={0x27}, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110ab000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000004a76"], 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x7, 0x0, 0x0, {0x0, 0xea60}, {}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "4acede967c288ef4"}}, 0x20000408}}, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000000c0)={'wlan0\x00', @multicast}) 56.934144293s ago: executing program 0 (id=494): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000300)={0x0, {0x2, 0x4e23, @rand_addr=0x64010102}, {0x2, 0x4e20, @empty}, {0x2, 0x4e24, @loopback}, 0x4, 0x0, 0x0, 0x0, 0xffff, &(0x7f0000000080)='ipvlan1\x00', 0x4, 0x7, 0x2}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$l2tp(r1, &(0x7f0000000380)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, 0x10) (async, rerun: 64) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) (async, rerun: 64) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="270000000200000000000000000000cb82771c8772df3fc04aad39"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) ioctl(r2, 0x5, &(0x7f0000000040)="7ec6fc11c8571d99259ced6e9c2f78d0228d0f775afdd8e1ebf9f3c7877b6824c79a1f1e2e7239de545795271a10c537") 53.891884857s ago: executing program 2 (id=855): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000080), &(0x7f00000000c0)=""/102}, 0x20) r1 = socket(0x11, 0x2, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=r2], 0x158}, 0x1, 0xba01}, 0x44) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f00000005c0)=@deltclass={0x46c, 0x29, 0x8, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x4, 0x9}, {0xffe5, 0x8}, {0x2, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x7, 0xdb}}, @tclass_kind_options=@c_htb={{0x8}, {0x418, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x6, 0x4, 0x6, 0x1, 0xfffffff2, 0x3, 0x9, 0x8, 0x0, 0x8, 0x0, 0x81, 0xffff, 0x9, 0x1, 0x1, 0xe11, 0x800, 0x84, 0x4, 0x401, 0xe20, 0x7, 0x0, 0xe7, 0xffff, 0x2, 0x3, 0x2, 0x28000000, 0x2, 0x101, 0x9a, 0x4, 0x0, 0xb, 0x8, 0x8, 0x5ed, 0x10, 0x1692, 0x80000000, 0xb45, 0x5, 0x2, 0x6, 0x6, 0x5, 0x9, 0x2, 0x18, 0x5, 0x5, 0xbb4, 0x0, 0x7, 0xfffffffd, 0x3, 0x6, 0x1d87, 0x2df9751e, 0xf4, 0x2, 0x9, 0x2, 0x18, 0xb21, 0x9169, 0x6, 0x145, 0x6, 0x202, 0x1, 0x10000, 0xff, 0x8, 0xb81, 0x9, 0x4dd4, 0x1, 0xfffc0000, 0x8, 0x3, 0x2, 0x8, 0x0, 0xfffffffe, 0x2, 0x40, 0x4, 0x9, 0x9, 0x7, 0x5, 0x4, 0x3, 0x0, 0x5, 0xffff6647, 0x6, 0x9, 0x0, 0x0, 0xd, 0xdc8d, 0x6, 0x8, 0x7, 0xbbd, 0x0, 0xc3dd, 0xb3, 0xff, 0xc3, 0x6, 0x4bf3, 0x1acc, 0x73f, 0x164cc, 0x9, 0x9, 0x6, 0x8, 0x5, 0x7ff, 0xbd, 0x4, 0x3, 0x5, 0x6fc, 0x9, 0x8, 0x3, 0x5, 0xfffffff6, 0x7, 0x516, 0x9, 0x401, 0x401, 0x1, 0xffff, 0x7, 0x8, 0xb829, 0x101, 0x9, 0x20000, 0x0, 0x3, 0x514b, 0x4, 0x9, 0x10001, 0x8, 0x2, 0x3, 0x8, 0x1800000, 0x101, 0x40, 0x6, 0x3, 0x200, 0x1, 0x1, 0x5, 0x8, 0x2, 0x400, 0xa6af, 0xffffffff, 0x4, 0x5, 0x9, 0x4, 0x6, 0x8000, 0x1, 0x2600, 0x8, 0x5, 0x1f3, 0x6, 0x775, 0x3ff, 0x5, 0x10000, 0x8, 0xe2, 0x1, 0x4, 0x10001, 0x5e, 0x80000000, 0x0, 0x9, 0x9, 0x8, 0x1, 0x2, 0x6, 0x8, 0x401, 0x5, 0x4, 0x7, 0xbdf, 0x1, 0x0, 0x5, 0x383f, 0xfffffffc, 0x7308, 0x9, 0x4, 0x6, 0x1, 0xd, 0x1ff, 0x1, 0xff, 0x4, 0x6, 0x2ebbfd8e, 0x5, 0x5d, 0x401, 0x4, 0x5ae, 0x830, 0x4, 0x3, 0x3, 0x3, 0x81, 0x9, 0xb, 0x7, 0x9, 0x9, 0x7, 0xc15, 0xfffffff8, 0x2a846deb, 0x3, 0x9, 0xffff, 0x1, 0x8, 0x100, 0x922, 0x5, 0x8, 0x7, 0x5]}, @TCA_HTB_RATE64={0xc, 0x6, 0x3}, @TCA_HTB_OFFLOAD={0x4}]}}, @tclass_kind_options=@c_fq_codel={0xd}, @tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x46c}, 0x1, 0x0, 0x0, 0x4000080}, 0x2) 43.281642303s ago: executing program 4 (id=730): bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) bind$bt_hci(r0, &(0x7f0000000180)={0x27}, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110ab000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000004a76"], 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x7, 0x0, 0x0, {0x0, 0xea60}, {}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "4acede967c288ef4"}}, 0x20000408}}, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000000c0)={'wlan0\x00', @multicast}) 38.696943523s ago: executing program 3 (id=401): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000180)={r4, 0x2, 0x0, 0x3}) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f00000002c0)={@rand_addr, @rand_addr, 0x0}, &(0x7f0000000300)=0xc) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_ENTRIES(r6, 0x0, 0x41, 0x0, &(0x7f0000001740)=0x2c) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r7, 0x5760, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x4, 0x1000, &(0x7f00000007c0)=""/4096, 0x41000, 0x8, '\x00', r5, 0x0, r7, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x7, 0x7ff, 0x3}, 0x10, 0x27916, r3, 0x4, 0x0, &(0x7f0000000400)=[{0x0, 0x5, 0x1, 0x1}, {0x1, 0x4, 0xb, 0xa}, {0x4, 0x3, 0xd, 0x9}, {0x1, 0x3, 0x6, 0x5}], 0x10, 0x9e, @void, @value}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r9, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0xf, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r11, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x1, 0xfffff038}, {0x6}]}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r10, 0x0, 0x0}, 0x20) r12 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r12, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340), 0x10, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], 0x20000600}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000040) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 37.629036881s ago: executing program 0 (id=494): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000300)={0x0, {0x2, 0x4e23, @rand_addr=0x64010102}, {0x2, 0x4e20, @empty}, {0x2, 0x4e24, @loopback}, 0x4, 0x0, 0x0, 0x0, 0xffff, &(0x7f0000000080)='ipvlan1\x00', 0x4, 0x7, 0x2}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$l2tp(r1, &(0x7f0000000380)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, 0x10) (async, rerun: 64) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) (async, rerun: 64) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="270000000200000000000000000000cb82771c8772df3fc04aad39"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) ioctl(r2, 0x5, &(0x7f0000000040)="7ec6fc11c8571d99259ced6e9c2f78d0228d0f775afdd8e1ebf9f3c7877b6824c79a1f1e2e7239de545795271a10c537") 36.873271005s ago: executing program 2 (id=855): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000080), &(0x7f00000000c0)=""/102}, 0x20) r1 = socket(0x11, 0x2, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=r2], 0x158}, 0x1, 0xba01}, 0x44) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f00000005c0)=@deltclass={0x46c, 0x29, 0x8, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x4, 0x9}, {0xffe5, 0x8}, {0x2, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x7, 0xdb}}, @tclass_kind_options=@c_htb={{0x8}, {0x418, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x6, 0x4, 0x6, 0x1, 0xfffffff2, 0x3, 0x9, 0x8, 0x0, 0x8, 0x0, 0x81, 0xffff, 0x9, 0x1, 0x1, 0xe11, 0x800, 0x84, 0x4, 0x401, 0xe20, 0x7, 0x0, 0xe7, 0xffff, 0x2, 0x3, 0x2, 0x28000000, 0x2, 0x101, 0x9a, 0x4, 0x0, 0xb, 0x8, 0x8, 0x5ed, 0x10, 0x1692, 0x80000000, 0xb45, 0x5, 0x2, 0x6, 0x6, 0x5, 0x9, 0x2, 0x18, 0x5, 0x5, 0xbb4, 0x0, 0x7, 0xfffffffd, 0x3, 0x6, 0x1d87, 0x2df9751e, 0xf4, 0x2, 0x9, 0x2, 0x18, 0xb21, 0x9169, 0x6, 0x145, 0x6, 0x202, 0x1, 0x10000, 0xff, 0x8, 0xb81, 0x9, 0x4dd4, 0x1, 0xfffc0000, 0x8, 0x3, 0x2, 0x8, 0x0, 0xfffffffe, 0x2, 0x40, 0x4, 0x9, 0x9, 0x7, 0x5, 0x4, 0x3, 0x0, 0x5, 0xffff6647, 0x6, 0x9, 0x0, 0x0, 0xd, 0xdc8d, 0x6, 0x8, 0x7, 0xbbd, 0x0, 0xc3dd, 0xb3, 0xff, 0xc3, 0x6, 0x4bf3, 0x1acc, 0x73f, 0x164cc, 0x9, 0x9, 0x6, 0x8, 0x5, 0x7ff, 0xbd, 0x4, 0x3, 0x5, 0x6fc, 0x9, 0x8, 0x3, 0x5, 0xfffffff6, 0x7, 0x516, 0x9, 0x401, 0x401, 0x1, 0xffff, 0x7, 0x8, 0xb829, 0x101, 0x9, 0x20000, 0x0, 0x3, 0x514b, 0x4, 0x9, 0x10001, 0x8, 0x2, 0x3, 0x8, 0x1800000, 0x101, 0x40, 0x6, 0x3, 0x200, 0x1, 0x1, 0x5, 0x8, 0x2, 0x400, 0xa6af, 0xffffffff, 0x4, 0x5, 0x9, 0x4, 0x6, 0x8000, 0x1, 0x2600, 0x8, 0x5, 0x1f3, 0x6, 0x775, 0x3ff, 0x5, 0x10000, 0x8, 0xe2, 0x1, 0x4, 0x10001, 0x5e, 0x80000000, 0x0, 0x9, 0x9, 0x8, 0x1, 0x2, 0x6, 0x8, 0x401, 0x5, 0x4, 0x7, 0xbdf, 0x1, 0x0, 0x5, 0x383f, 0xfffffffc, 0x7308, 0x9, 0x4, 0x6, 0x1, 0xd, 0x1ff, 0x1, 0xff, 0x4, 0x6, 0x2ebbfd8e, 0x5, 0x5d, 0x401, 0x4, 0x5ae, 0x830, 0x4, 0x3, 0x3, 0x3, 0x81, 0x9, 0xb, 0x7, 0x9, 0x9, 0x7, 0xc15, 0xfffffff8, 0x2a846deb, 0x3, 0x9, 0xffff, 0x1, 0x8, 0x100, 0x922, 0x5, 0x8, 0x7, 0x5]}, @TCA_HTB_RATE64={0xc, 0x6, 0x3}, @TCA_HTB_OFFLOAD={0x4}]}}, @tclass_kind_options=@c_fq_codel={0xd}, @tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x46c}, 0x1, 0x0, 0x0, 0x4000080}, 0x2) 27.697592671s ago: executing program 4 (id=730): bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) bind$bt_hci(r0, &(0x7f0000000180)={0x27}, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110ab000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000004a76"], 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x7, 0x0, 0x0, {0x0, 0xea60}, {}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "4acede967c288ef4"}}, 0x20000408}}, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000000c0)={'wlan0\x00', @multicast}) 23.122034s ago: executing program 2 (id=855): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000080), &(0x7f00000000c0)=""/102}, 0x20) r1 = socket(0x11, 0x2, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=r2], 0x158}, 0x1, 0xba01}, 0x44) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f00000005c0)=@deltclass={0x46c, 0x29, 0x8, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x4, 0x9}, {0xffe5, 0x8}, {0x2, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x7, 0xdb}}, @tclass_kind_options=@c_htb={{0x8}, {0x418, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x6, 0x4, 0x6, 0x1, 0xfffffff2, 0x3, 0x9, 0x8, 0x0, 0x8, 0x0, 0x81, 0xffff, 0x9, 0x1, 0x1, 0xe11, 0x800, 0x84, 0x4, 0x401, 0xe20, 0x7, 0x0, 0xe7, 0xffff, 0x2, 0x3, 0x2, 0x28000000, 0x2, 0x101, 0x9a, 0x4, 0x0, 0xb, 0x8, 0x8, 0x5ed, 0x10, 0x1692, 0x80000000, 0xb45, 0x5, 0x2, 0x6, 0x6, 0x5, 0x9, 0x2, 0x18, 0x5, 0x5, 0xbb4, 0x0, 0x7, 0xfffffffd, 0x3, 0x6, 0x1d87, 0x2df9751e, 0xf4, 0x2, 0x9, 0x2, 0x18, 0xb21, 0x9169, 0x6, 0x145, 0x6, 0x202, 0x1, 0x10000, 0xff, 0x8, 0xb81, 0x9, 0x4dd4, 0x1, 0xfffc0000, 0x8, 0x3, 0x2, 0x8, 0x0, 0xfffffffe, 0x2, 0x40, 0x4, 0x9, 0x9, 0x7, 0x5, 0x4, 0x3, 0x0, 0x5, 0xffff6647, 0x6, 0x9, 0x0, 0x0, 0xd, 0xdc8d, 0x6, 0x8, 0x7, 0xbbd, 0x0, 0xc3dd, 0xb3, 0xff, 0xc3, 0x6, 0x4bf3, 0x1acc, 0x73f, 0x164cc, 0x9, 0x9, 0x6, 0x8, 0x5, 0x7ff, 0xbd, 0x4, 0x3, 0x5, 0x6fc, 0x9, 0x8, 0x3, 0x5, 0xfffffff6, 0x7, 0x516, 0x9, 0x401, 0x401, 0x1, 0xffff, 0x7, 0x8, 0xb829, 0x101, 0x9, 0x20000, 0x0, 0x3, 0x514b, 0x4, 0x9, 0x10001, 0x8, 0x2, 0x3, 0x8, 0x1800000, 0x101, 0x40, 0x6, 0x3, 0x200, 0x1, 0x1, 0x5, 0x8, 0x2, 0x400, 0xa6af, 0xffffffff, 0x4, 0x5, 0x9, 0x4, 0x6, 0x8000, 0x1, 0x2600, 0x8, 0x5, 0x1f3, 0x6, 0x775, 0x3ff, 0x5, 0x10000, 0x8, 0xe2, 0x1, 0x4, 0x10001, 0x5e, 0x80000000, 0x0, 0x9, 0x9, 0x8, 0x1, 0x2, 0x6, 0x8, 0x401, 0x5, 0x4, 0x7, 0xbdf, 0x1, 0x0, 0x5, 0x383f, 0xfffffffc, 0x7308, 0x9, 0x4, 0x6, 0x1, 0xd, 0x1ff, 0x1, 0xff, 0x4, 0x6, 0x2ebbfd8e, 0x5, 0x5d, 0x401, 0x4, 0x5ae, 0x830, 0x4, 0x3, 0x3, 0x3, 0x81, 0x9, 0xb, 0x7, 0x9, 0x9, 0x7, 0xc15, 0xfffffff8, 0x2a846deb, 0x3, 0x9, 0xffff, 0x1, 0x8, 0x100, 0x922, 0x5, 0x8, 0x7, 0x5]}, @TCA_HTB_RATE64={0xc, 0x6, 0x3}, @TCA_HTB_OFFLOAD={0x4}]}}, @tclass_kind_options=@c_fq_codel={0xd}, @tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x46c}, 0x1, 0x0, 0x0, 0x4000080}, 0x2) 21.138913075s ago: executing program 0 (id=494): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000300)={0x0, {0x2, 0x4e23, @rand_addr=0x64010102}, {0x2, 0x4e20, @empty}, {0x2, 0x4e24, @loopback}, 0x4, 0x0, 0x0, 0x0, 0xffff, &(0x7f0000000080)='ipvlan1\x00', 0x4, 0x7, 0x2}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$l2tp(r1, &(0x7f0000000380)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, 0x10) (async, rerun: 64) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) (async, rerun: 64) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="270000000200000000000000000000cb82771c8772df3fc04aad39"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) ioctl(r2, 0x5, &(0x7f0000000040)="7ec6fc11c8571d99259ced6e9c2f78d0228d0f775afdd8e1ebf9f3c7877b6824c79a1f1e2e7239de545795271a10c537") 18.775804203s ago: executing program 3 (id=401): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000180)={r4, 0x2, 0x0, 0x3}) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f00000002c0)={@rand_addr, @rand_addr, 0x0}, &(0x7f0000000300)=0xc) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_ENTRIES(r6, 0x0, 0x41, 0x0, &(0x7f0000001740)=0x2c) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r7, 0x5760, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x4, 0x1000, &(0x7f00000007c0)=""/4096, 0x41000, 0x8, '\x00', r5, 0x0, r7, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x7, 0x7ff, 0x3}, 0x10, 0x27916, r3, 0x4, 0x0, &(0x7f0000000400)=[{0x0, 0x5, 0x1, 0x1}, {0x1, 0x4, 0xb, 0xa}, {0x4, 0x3, 0xd, 0x9}, {0x1, 0x3, 0x6, 0x5}], 0x10, 0x9e, @void, @value}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r9, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0xf, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r11, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x1, 0xfffff038}, {0x6}]}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r10, 0x0, 0x0}, 0x20) r12 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r12, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340), 0x10, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], 0x20000600}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000040) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 10.232528936s ago: executing program 4 (id=730): bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) bind$bt_hci(r0, &(0x7f0000000180)={0x27}, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110ab000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000004a76"], 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x7, 0x0, 0x0, {0x0, 0xea60}, {}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "4acede967c288ef4"}}, 0x20000408}}, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000000c0)={'wlan0\x00', @multicast}) 5.821563781s ago: executing program 2 (id=855): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000080), &(0x7f00000000c0)=""/102}, 0x20) r1 = socket(0x11, 0x2, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=r2], 0x158}, 0x1, 0xba01}, 0x44) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f00000005c0)=@deltclass={0x46c, 0x29, 0x8, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x4, 0x9}, {0xffe5, 0x8}, {0x2, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x7, 0xdb}}, @tclass_kind_options=@c_htb={{0x8}, {0x418, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x6, 0x4, 0x6, 0x1, 0xfffffff2, 0x3, 0x9, 0x8, 0x0, 0x8, 0x0, 0x81, 0xffff, 0x9, 0x1, 0x1, 0xe11, 0x800, 0x84, 0x4, 0x401, 0xe20, 0x7, 0x0, 0xe7, 0xffff, 0x2, 0x3, 0x2, 0x28000000, 0x2, 0x101, 0x9a, 0x4, 0x0, 0xb, 0x8, 0x8, 0x5ed, 0x10, 0x1692, 0x80000000, 0xb45, 0x5, 0x2, 0x6, 0x6, 0x5, 0x9, 0x2, 0x18, 0x5, 0x5, 0xbb4, 0x0, 0x7, 0xfffffffd, 0x3, 0x6, 0x1d87, 0x2df9751e, 0xf4, 0x2, 0x9, 0x2, 0x18, 0xb21, 0x9169, 0x6, 0x145, 0x6, 0x202, 0x1, 0x10000, 0xff, 0x8, 0xb81, 0x9, 0x4dd4, 0x1, 0xfffc0000, 0x8, 0x3, 0x2, 0x8, 0x0, 0xfffffffe, 0x2, 0x40, 0x4, 0x9, 0x9, 0x7, 0x5, 0x4, 0x3, 0x0, 0x5, 0xffff6647, 0x6, 0x9, 0x0, 0x0, 0xd, 0xdc8d, 0x6, 0x8, 0x7, 0xbbd, 0x0, 0xc3dd, 0xb3, 0xff, 0xc3, 0x6, 0x4bf3, 0x1acc, 0x73f, 0x164cc, 0x9, 0x9, 0x6, 0x8, 0x5, 0x7ff, 0xbd, 0x4, 0x3, 0x5, 0x6fc, 0x9, 0x8, 0x3, 0x5, 0xfffffff6, 0x7, 0x516, 0x9, 0x401, 0x401, 0x1, 0xffff, 0x7, 0x8, 0xb829, 0x101, 0x9, 0x20000, 0x0, 0x3, 0x514b, 0x4, 0x9, 0x10001, 0x8, 0x2, 0x3, 0x8, 0x1800000, 0x101, 0x40, 0x6, 0x3, 0x200, 0x1, 0x1, 0x5, 0x8, 0x2, 0x400, 0xa6af, 0xffffffff, 0x4, 0x5, 0x9, 0x4, 0x6, 0x8000, 0x1, 0x2600, 0x8, 0x5, 0x1f3, 0x6, 0x775, 0x3ff, 0x5, 0x10000, 0x8, 0xe2, 0x1, 0x4, 0x10001, 0x5e, 0x80000000, 0x0, 0x9, 0x9, 0x8, 0x1, 0x2, 0x6, 0x8, 0x401, 0x5, 0x4, 0x7, 0xbdf, 0x1, 0x0, 0x5, 0x383f, 0xfffffffc, 0x7308, 0x9, 0x4, 0x6, 0x1, 0xd, 0x1ff, 0x1, 0xff, 0x4, 0x6, 0x2ebbfd8e, 0x5, 0x5d, 0x401, 0x4, 0x5ae, 0x830, 0x4, 0x3, 0x3, 0x3, 0x81, 0x9, 0xb, 0x7, 0x9, 0x9, 0x7, 0xc15, 0xfffffff8, 0x2a846deb, 0x3, 0x9, 0xffff, 0x1, 0x8, 0x100, 0x922, 0x5, 0x8, 0x7, 0x5]}, @TCA_HTB_RATE64={0xc, 0x6, 0x3}, @TCA_HTB_OFFLOAD={0x4}]}}, @tclass_kind_options=@c_fq_codel={0xd}, @tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x46c}, 0x1, 0x0, 0x0, 0x4000080}, 0x2) 4.905320643s ago: executing program 0 (id=494): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000300)={0x0, {0x2, 0x4e23, @rand_addr=0x64010102}, {0x2, 0x4e20, @empty}, {0x2, 0x4e24, @loopback}, 0x4, 0x0, 0x0, 0x0, 0xffff, &(0x7f0000000080)='ipvlan1\x00', 0x4, 0x7, 0x2}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$l2tp(r1, &(0x7f0000000380)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, 0x10) (async, rerun: 64) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) (async, rerun: 64) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="270000000200000000000000000000cb82771c8772df3fc04aad39"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) ioctl(r2, 0x5, &(0x7f0000000040)="7ec6fc11c8571d99259ced6e9c2f78d0228d0f775afdd8e1ebf9f3c7877b6824c79a1f1e2e7239de545795271a10c537") 2.153396694s ago: executing program 1 (id=1077): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) socket$kcm(0x10, 0x400000002, 0x0) (async) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000004580)=""/4095, 0xfff}, {&(0x7f0000000140)=""/4092, 0xffc}, {&(0x7f0000005580)=""/4100, 0x1004}, {&(0x7f00000012c0)=""/190, 0xbe}, {&(0x7f0000001480)=""/151, 0x97}, {&(0x7f0000001380)=""/118, 0x76}], 0x6}, 0x0) socket$kcm(0x29, 0x3, 0x0) (async) socket$kcm(0x29, 0x3, 0x0) setsockopt(r1, 0x200, 0xa7a, &(0x7f0000001140)="21f685dae8376b69dd4ab57020d6e4cf0f260bd1803226a3a0ee5ea46cdc10ddfdba6982853715250b22dbf10381d54107f5d851ca8749", 0x37) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r3, 0x89ef, &(0x7f0000000000)) (async) ioctl$SIOCPNDELRESOURCE(r3, 0x89ef, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8927, &(0x7f00000011c0)={0x6, 'wlan0\x00'}) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r5, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r5, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000240)={0x1100, 0x2, 0x80000008, 0x10003}) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/23, 0x17}, {&(0x7f00000000c0)=""/44, 0x2c}], 0x2, 0x6, 0x88) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x18, 0x2d, 0x1, 0x0, 0x400, "", [@nested={0x4, 0x800}, @nested={0x4, 0x12c}]}, 0x18}], 0x1}, 0x0) 1.965620762s ago: executing program 1 (id=1078): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0xffffffac, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000680)='o', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000400)}, {&(0x7f0000000b40)="b8fc0e39e4e9b71888892a89c0bc824a3e45fb", 0x13}], 0x2}}], 0x2, 0x4c190) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000540)) 1.937833931s ago: executing program 3 (id=401): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000180)={r4, 0x2, 0x0, 0x3}) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f00000002c0)={@rand_addr, @rand_addr, 0x0}, &(0x7f0000000300)=0xc) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_ENTRIES(r6, 0x0, 0x41, 0x0, &(0x7f0000001740)=0x2c) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r7, 0x5760, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x4, 0x1000, &(0x7f00000007c0)=""/4096, 0x41000, 0x8, '\x00', r5, 0x0, r7, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x7, 0x7ff, 0x3}, 0x10, 0x27916, r3, 0x4, 0x0, &(0x7f0000000400)=[{0x0, 0x5, 0x1, 0x1}, {0x1, 0x4, 0xb, 0xa}, {0x4, 0x3, 0xd, 0x9}, {0x1, 0x3, 0x6, 0x5}], 0x10, 0x9e, @void, @value}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r9, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0xf, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r11, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x1, 0xfffff038}, {0x6}]}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r10, 0x0, 0x0}, 0x20) r12 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r12, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340), 0x10, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], 0x20000600}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000040) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 534.180378ms ago: executing program 1 (id=1079): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"/759], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x90, 0x2, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_USERDATA={0x1b, 0x6, "17630cd18d76888a40e14897e3e06f32968a071a04fc75"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x49, 0x6, "e020273912b7d145a93e97c4a5a0ed489bad225fe2933ae44ac9e532367f1f8780242c3d240214694f181024beab93d7c03a4438883247981d71062bc738de7653f0984c98"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14}}, 0x118}}, 0x4000) 486.516784ms ago: executing program 1 (id=1080): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r2, 0xe7d02281b1d40445, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_MODES={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x1c}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0xfffffffffffffee3, 0x2, 0xf1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000c81c) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fdffffffffffffffffffffffffffffff00000000000000004fc4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000020000000000000000000000000000000000000000000000000000000000000084010500ac1414bb000000000000000000000000000000006c0000000a0000007f0000010000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000004d63200000000000000200100000000000000000000000000000000000000000000000000000700000000000000fc020000000000000000000000000001000000003c00000002000000ac141425000000000000000000000000043500000100000000000000000000000000000000000000000000000000000000000000000000003300000002"], 0x23c}}, 0x4004000) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x4c, r10, 0x1, 0x4, 0x100, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5a}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x3}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x8}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0x4}]}, 0x4c}}, 0x0) 72.895152ms ago: executing program 1 (id=1081): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) (async) r2 = gettid() sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x10, 0x70bd28, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x42c0, 0x1000}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x80}, @IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x30}}, 0x405169152781b69e) (async) r3 = socket$phonet(0x23, 0x2, 0x1) r4 = socket$netlink(0x10, 0x3, 0xc) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000002840)={0x0, 0x0}, &(0x7f0000002880)=0xc) sendmsg$netlink(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000980)={0x10, 0x32, 0x4, 0x70bd25, 0x25dfdbff}, 0x10}], 0x1, &(0x7f0000002900)=[@cred={{0x1c, 0x1, 0x2, {0x0, r5}}}], 0x20, 0x50}, 0x40880) r6 = getgid() (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) (async) sendmsg$unix(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="ab", 0x1}], 0x1, &(0x7f0000000080)=[@cred={{0x1c, 0x1, 0x2, {r2, r5, r6}}}], 0x20}, 0x20040001) (async) close(0x3) 0s ago: executing program 1 (id=1082): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x6f92}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000d00)}, 0x80000020}], 0x4, 0x20, 0x0) kernel console output (not intermixed with test programs): tdevsim netdevsim0 netdevsim1: renamed from eth1 [ 213.299071][ T9728] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 213.340144][ T9827] 8021q: adding VLAN 0 to HW filter on device bond8 [ 213.350713][ T9827] bond0: (slave bond8): Enslaving as an active interface with an up link [ 213.417607][ T9728] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 213.583321][ T9661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.586678][ T5830] Bluetooth: hci2: command tx timeout [ 213.629300][ T9693] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 213.731371][ T8522] hsr_slave_0: left promiscuous mode [ 213.776547][ T8522] hsr_slave_1: left promiscuous mode [ 213.790270][ T8522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.816581][ T8522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.831105][ T8522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.838634][ T8522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.870445][ T8522] veth1_macvtap: left promiscuous mode [ 213.876068][ T8522] veth0_macvtap: left promiscuous mode [ 213.882747][ T8522] veth1_vlan: left promiscuous mode [ 213.888713][ T8522] veth0_vlan: left promiscuous mode [ 214.300748][ T8522] team0 (unregistering): Port device team_slave_1 removed [ 214.339605][ T8522] team0 (unregistering): Port device team_slave_0 removed [ 214.893716][ T9848] netlink: 'syz.1.923': attribute type 1 has an invalid length. [ 214.914510][ T9693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.921999][ T9848] netlink: 228 bytes leftover after parsing attributes in process `syz.1.923'. [ 214.946787][ T5830] Bluetooth: hci4: command tx timeout [ 215.007210][ T9848] netlink: 'syz.1.923': attribute type 21 has an invalid length. [ 215.015023][ T9848] IPv6: NLM_F_CREATE should be specified when creating new route [ 215.154611][ T9728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.219079][ T9854] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.925'. [ 215.310878][ T9693] veth0_vlan: entered promiscuous mode [ 215.326254][ T9728] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.360817][ T9856] 8021q: adding VLAN 0 to HW filter on device bond9 [ 215.369695][ T9779] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 215.385990][ T9661] veth0_vlan: entered promiscuous mode [ 215.404959][ T9856] vlan2: entered allmulticast mode [ 215.410189][ T9856] veth1: entered allmulticast mode [ 215.415766][ T9779] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 215.431231][ T9779] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 215.454342][ T9693] veth1_vlan: entered promiscuous mode [ 215.478015][ T9779] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 215.503634][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.510875][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.530957][ T9661] veth1_vlan: entered promiscuous mode [ 215.563114][ T9693] veth0_macvtap: entered promiscuous mode [ 215.603114][ T9693] veth1_macvtap: entered promiscuous mode [ 215.617802][ T8458] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.625121][ T8458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.685676][ T9693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.699219][ T9693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.716809][ T9693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.751614][ T9693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.762949][ T9693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.775919][ T9693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.809017][ T9693] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.821243][ T9693] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.832802][ T9693] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.844775][ T9693] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.865037][ T9661] veth0_macvtap: entered promiscuous mode [ 215.918237][ T9661] veth1_macvtap: entered promiscuous mode [ 215.944490][ T9862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.023182][ T9661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.049912][ T9661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.060649][ T9661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.081838][ T9661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.103651][ T9661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.151020][ T9661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.171857][ T9661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.192218][ T9661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.213108][ T9661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.239531][ T9661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.318545][ T9661] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.328457][ T9661] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.338330][ T9661] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.347482][ T9661] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.371340][ T9779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.380984][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.402160][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.482568][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.495793][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.510846][ T9779] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.531682][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.538913][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.592533][ T9728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.655781][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.658619][ T9877] netlink: 'syz.1.929': attribute type 10 has an invalid length. [ 216.663015][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.728643][ T9877] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.739040][ T9877] bond0: (slave team0): Enslaving as an active interface with an up link [ 216.756344][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.778936][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.884048][ T8458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.898900][ T8458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.920949][ T9728] veth0_vlan: entered promiscuous mode [ 217.026997][ T5830] Bluetooth: hci4: command tx timeout [ 217.043010][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.073784][ T9885] netlink: 60 bytes leftover after parsing attributes in process `syz.1.931'. [ 217.161772][ T9728] veth1_vlan: entered promiscuous mode [ 217.280151][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.392439][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.438114][ T9728] veth0_macvtap: entered promiscuous mode [ 217.457714][ T9728] veth1_macvtap: entered promiscuous mode [ 217.503468][ T9779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.532256][ T9728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.545446][ T9728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.555629][ T9728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.567802][ T9728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.577899][ T9728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.590200][ T9728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.602050][ T9728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.630612][ T9728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.641671][ T9728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.653776][ T9728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.664791][ T9728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.675961][ T9728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.707074][ T9728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.728301][ T9728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.755669][ T9728] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.786686][ T9728] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.801413][ T9728] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.810349][ T9728] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.904372][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.972860][ T9892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.932'. [ 218.074272][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.088383][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.120293][ T9779] veth0_vlan: entered promiscuous mode [ 218.222655][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.248070][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.272908][ T9779] veth1_vlan: entered promiscuous mode [ 218.288674][ T36] bridge_slave_1: left allmulticast mode [ 218.294377][ T36] bridge_slave_1: left promiscuous mode [ 218.313963][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.360158][ T36] bridge_slave_0: left allmulticast mode [ 218.365880][ T36] bridge_slave_0: left promiscuous mode [ 218.392445][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.420703][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 218.430060][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 218.439131][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 218.455238][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 218.474019][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 218.676929][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 218.692884][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 218.712275][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 218.722462][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 218.738462][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 218.903086][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.919045][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.931189][ T36] bond0 (unregistering): Released all slaves [ 219.070667][ T9779] veth0_macvtap: entered promiscuous mode [ 219.165909][ T9779] veth1_macvtap: entered promiscuous mode [ 219.366224][ T36] hsr_slave_0: left promiscuous mode [ 219.373014][ T36] hsr_slave_1: left promiscuous mode [ 219.383436][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.391211][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.402136][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.409767][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.435155][ T36] veth1_macvtap: left promiscuous mode [ 219.440871][ T36] veth0_macvtap: left promiscuous mode [ 219.446606][ T36] veth1_vlan: left promiscuous mode [ 219.451923][ T36] veth0_vlan: left promiscuous mode [ 219.864378][ T36] team0 (unregistering): Port device team_slave_1 removed [ 219.900948][ T36] team0 (unregistering): Port device team_slave_0 removed [ 220.430746][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 220.443535][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 220.458565][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 220.468011][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 220.476551][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 220.541688][ T9779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.552462][ T5830] Bluetooth: hci0: command tx timeout [ 220.563367][ T9779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.573808][ T9779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.584953][ T9779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.595984][ T9779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.607775][ T9779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.624285][ T9779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.643130][ T9779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.656142][ T9779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.666039][ T9779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.676650][ T9779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.686558][ T9779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.697083][ T9779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.708801][ T9779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.724042][ T9779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.732956][ T9779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.742639][ T9779] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.751751][ T9779] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.798046][ T5830] Bluetooth: hci2: command tx timeout [ 221.068744][ T9920] syz.1.937 (9920) used obsolete PPPIOCDETACH ioctl [ 221.094380][ T9898] chnl_net:caif_netlink_parms(): no params data found [ 221.225737][ T9900] chnl_net:caif_netlink_parms(): no params data found [ 221.375509][ T9933] netlink: 'syz.1.939': attribute type 4 has an invalid length. [ 221.397058][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.404929][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.526867][ T8522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.534745][ T8522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.585059][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.607083][ T9942] netlink: 20 bytes leftover after parsing attributes in process `syz.1.940'. [ 221.659366][ T9900] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.673987][ T9900] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.682895][ T9900] bridge_slave_0: entered allmulticast mode [ 221.691248][ T9900] bridge_slave_0: entered promiscuous mode [ 221.740512][ T9900] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.750274][ T9900] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.765064][ T9900] bridge_slave_1: entered allmulticast mode [ 221.774772][ T9900] bridge_slave_1: entered promiscuous mode [ 221.812743][ T9898] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.830657][ T9898] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.859016][ T9898] bridge_slave_0: entered allmulticast mode [ 221.872326][ T9898] bridge_slave_0: entered promiscuous mode [ 221.882709][ T9898] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.891308][ T9898] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.898728][ T9898] bridge_slave_1: entered allmulticast mode [ 221.906026][ T9898] bridge_slave_1: entered promiscuous mode [ 221.933209][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.123290][ T9900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.164345][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.218333][ T9898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.259181][ T9900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.284865][ T9898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.340126][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.507145][ T9908] chnl_net:caif_netlink_parms(): no params data found [ 222.546666][ T5830] Bluetooth: hci3: command tx timeout [ 222.589204][ T9900] team0: Port device team_slave_0 added [ 222.637047][ T5830] Bluetooth: hci0: command tx timeout [ 222.650471][ T9898] team0: Port device team_slave_0 added [ 222.666168][ T9900] team0: Port device team_slave_1 added [ 222.734061][ T9898] team0: Port device team_slave_1 added [ 222.866702][ T5830] Bluetooth: hci2: command tx timeout [ 222.924909][ T9900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.932902][ T9900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.939069][ T5825] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 222.969162][ T9900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.975506][ T5825] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 222.998330][ T5825] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 223.007152][ T5825] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 223.016128][ T5825] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 223.044527][ T9898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.058340][ T9898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.086609][ T9898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.102052][ T9898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.109264][ T9898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.136691][ T9898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.153532][ T9900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.161906][ T9900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.190511][ T9900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.328956][ T9898] hsr_slave_0: entered promiscuous mode [ 223.335625][ T9898] hsr_slave_1: entered promiscuous mode [ 223.342051][ T9898] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.350311][ T9898] Cannot create hsr debugfs directory [ 223.442713][ T9900] hsr_slave_0: entered promiscuous mode [ 223.451949][ T9900] hsr_slave_1: entered promiscuous mode [ 223.458581][ T9900] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.466159][ T9900] Cannot create hsr debugfs directory [ 223.472169][ T9908] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.480259][ T9908] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.487631][ T9908] bridge_slave_0: entered allmulticast mode [ 223.494946][ T9908] bridge_slave_0: entered promiscuous mode [ 223.547246][ T9908] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.554566][ T9908] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.568458][ T9908] bridge_slave_1: entered allmulticast mode [ 223.578821][ T9908] bridge_slave_1: entered promiscuous mode [ 223.646768][ T9687] hid-generic 0005:0B57:0009.0001: collection stack underflow [ 223.654488][ T9687] hid-generic 0005:0B57:0009.0001: item 0 0 0 12 parsing failed [ 223.665167][ T9687] hid-generic 0005:0B57:0009.0001: probe with driver hid-generic failed with error -22 [ 223.709823][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.764439][ T9908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.789338][ T9908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.835154][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.929112][ T9908] team0: Port device team_slave_0 added [ 223.951449][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.991363][ T9908] team0: Port device team_slave_1 added [ 224.071233][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.130049][ T9908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.138991][ T9908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.165362][ T9908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.221504][ T9908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.232587][ T9908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.260593][ T9908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.442378][ T9908] hsr_slave_0: entered promiscuous mode [ 224.451860][ T9908] hsr_slave_1: entered promiscuous mode [ 224.458632][ T9908] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.466250][ T9908] Cannot create hsr debugfs directory [ 224.529708][ T9968] chnl_net:caif_netlink_parms(): no params data found [ 224.636479][ T5825] Bluetooth: hci3: command tx timeout [ 224.707086][ T5825] Bluetooth: hci0: command tx timeout [ 224.742681][ T36] bridge_slave_1: left allmulticast mode [ 224.749024][ T36] bridge_slave_1: left promiscuous mode [ 224.756618][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.771151][ T36] bridge_slave_0: left allmulticast mode [ 224.776989][ T36] bridge_slave_0: left promiscuous mode [ 224.782720][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.795048][ T36] bridge_slave_1: left allmulticast mode [ 224.800895][ T36] bridge_slave_1: left promiscuous mode [ 224.806763][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.817254][ T36] bridge_slave_0: left allmulticast mode [ 224.822939][ T36] bridge_slave_0: left promiscuous mode [ 224.831705][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.949766][ T5825] Bluetooth: hci2: command tx timeout [ 225.109814][ T5825] Bluetooth: hci4: command tx timeout [ 225.401477][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.414242][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.430076][ T36] bond0 (unregistering): Released all slaves [ 225.522002][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.535111][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.545659][ T36] bond0 (unregistering): Released all slaves [ 225.840495][ T9968] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.848255][ T9968] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.855453][ T9968] bridge_slave_0: entered allmulticast mode [ 225.863665][ T9968] bridge_slave_0: entered promiscuous mode [ 225.909344][ T9968] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.917799][ T9968] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.925018][ T9968] bridge_slave_1: entered allmulticast mode [ 225.937468][ T9968] bridge_slave_1: entered promiscuous mode [ 226.020611][ T9968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.042836][ T9968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.119846][ T9968] team0: Port device team_slave_0 added [ 226.142970][ T9968] team0: Port device team_slave_1 added [ 226.164360][ T36] hsr_slave_0: left promiscuous mode [ 226.173907][ T36] hsr_slave_1: left promiscuous mode [ 226.187459][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.194900][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.209060][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.221075][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.236860][ T36] hsr_slave_0: left promiscuous mode [ 226.242910][ T36] hsr_slave_1: left promiscuous mode [ 226.249291][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.257431][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.265486][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.273079][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.312668][ T36] veth1_macvtap: left promiscuous mode [ 226.318314][ T36] veth0_macvtap: left promiscuous mode [ 226.323964][ T36] veth1_vlan: left promiscuous mode [ 226.330201][ T36] veth0_vlan: left promiscuous mode [ 226.337999][ T36] veth1_macvtap: left promiscuous mode [ 226.343543][ T36] veth0_macvtap: left promiscuous mode [ 226.349466][ T36] veth1_vlan: left promiscuous mode [ 226.354776][ T36] veth0_vlan: left promiscuous mode [ 226.709364][ T5825] Bluetooth: hci3: command tx timeout [ 226.792335][ T5825] Bluetooth: hci0: command tx timeout [ 226.880552][T10016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.956'. [ 226.941489][ T36] team0 (unregistering): Port device team_slave_1 removed [ 226.976766][ T36] team0 (unregistering): Port device team_slave_0 removed [ 227.027372][ T5825] Bluetooth: hci2: command tx timeout [ 227.126889][T10019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.956'. [ 227.135948][T10019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.956'. [ 227.192866][ T5825] Bluetooth: hci4: command tx timeout [ 227.658757][ T36] team0 (unregistering): Port device team_slave_1 removed [ 227.698624][ T36] team0 (unregistering): Port device team_slave_0 removed [ 228.092659][T10016] vlan3: entered promiscuous mode [ 228.098726][T10016] bond0: entered promiscuous mode [ 228.103800][T10016] bond3: entered promiscuous mode [ 228.116891][T10016] bond5: entered promiscuous mode [ 228.122256][T10016] batadv0: entered promiscuous mode [ 228.127891][T10016] bond6: entered promiscuous mode [ 228.134521][T10016] bond7: entered promiscuous mode [ 228.139851][T10016] bond8: entered promiscuous mode [ 228.145058][T10016] team0: entered promiscuous mode [ 228.188796][T10019] bond10: entered promiscuous mode [ 228.194037][T10019] bond10: entered allmulticast mode [ 228.200145][T10019] 8021q: adding VLAN 0 to HW filter on device bond10 [ 228.249277][ T9968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.256280][ T9968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.289981][ T9968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.325379][ T9968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.341310][ T9968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.375596][ T9968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.445372][ T9900] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 228.460198][ T9900] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 228.514929][ T9900] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 228.539508][ T9900] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 228.560463][ T9968] hsr_slave_0: entered promiscuous mode [ 228.567549][ T9968] hsr_slave_1: entered promiscuous mode [ 228.786884][ T5825] Bluetooth: hci3: command tx timeout [ 228.924071][T10034] netlink: 'syz.1.962': attribute type 10 has an invalid length. [ 228.967859][T10034] bridge0: entered promiscuous mode [ 228.973640][T10034] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 229.076195][ T9900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.148601][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.184481][ T9900] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.237054][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.268786][ T5825] Bluetooth: hci4: command tx timeout [ 229.272061][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.281455][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.301939][ T8458] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.309152][ T8458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.408921][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.472654][T10043] 8021q: adding VLAN 0 to HW filter on device bond11 [ 229.481859][T10043] bond11: entered promiscuous mode [ 229.487800][T10043] bond0: (slave bond11): Enslaving as an active interface with an up link [ 229.533326][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.604106][T10049] netlink: 68 bytes leftover after parsing attributes in process `syz.1.966'. [ 229.709859][ T9900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.744279][ T36] bridge_slave_1: left allmulticast mode [ 229.751127][ T36] bridge_slave_1: left promiscuous mode [ 229.758173][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.771765][ T36] bridge_slave_0: left allmulticast mode [ 229.784048][ T36] bridge_slave_0: left promiscuous mode [ 229.794304][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.085247][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.096515][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.111009][ T36] bond0 (unregistering): Released all slaves [ 230.379923][ T9900] veth0_vlan: entered promiscuous mode [ 230.425885][ T9900] veth1_vlan: entered promiscuous mode [ 230.454981][ T36] hsr_slave_0: left promiscuous mode [ 230.466324][ T36] hsr_slave_1: left promiscuous mode [ 230.473080][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.482213][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.490961][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.499258][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.525050][ T36] veth1_macvtap: left promiscuous mode [ 230.531965][ T36] veth0_macvtap: left promiscuous mode [ 230.540496][ T36] veth1_vlan: left promiscuous mode [ 230.545805][ T36] veth0_vlan: left promiscuous mode [ 230.568144][T10061] netlink: 36 bytes leftover after parsing attributes in process `syz.1.967'. [ 230.939685][ T36] team0 (unregistering): Port device team_slave_1 removed [ 230.976165][ T36] team0 (unregistering): Port device team_slave_0 removed [ 231.354107][ T5825] Bluetooth: hci4: command tx timeout [ 231.412497][ T9898] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 231.438652][ T9898] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 231.456321][ T9898] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 231.469248][ T9900] veth0_macvtap: entered promiscuous mode [ 231.487593][ T9898] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 231.551409][ T9900] veth1_macvtap: entered promiscuous mode [ 231.665851][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.676712][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.688799][ T9900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.715410][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.737148][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.748665][ T9900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.769895][ T9908] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 231.793582][ T9908] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 231.805376][T10072] netlink: 16 bytes leftover after parsing attributes in process `syz.1.970'. [ 231.816203][ T9900] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.827199][ T9900] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.835956][ T9900] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.845441][ T9900] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.865943][T10073] netlink: 16 bytes leftover after parsing attributes in process `syz.1.970'. [ 231.877357][ T9908] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 231.898440][ T9908] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 232.093345][ T9898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.101879][ T9968] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 232.129382][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.137918][ T9968] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 232.145697][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.193821][ T9968] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 232.211333][ T9968] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 232.229737][ T9898] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.284512][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.291784][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.302626][T10085] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 232.309203][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.324490][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.351157][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.358424][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.484334][ T9908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.608413][ T9908] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.660680][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.667902][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.680089][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.687302][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.703058][ T9968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.746272][ T9968] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.775826][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.783072][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.879490][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.886756][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.923691][ T8458] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.052499][ T8458] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.072594][ T9968] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.100617][ T9898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.210393][ T8458] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.323592][ T8458] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.470483][ T9898] veth0_vlan: entered promiscuous mode [ 233.496227][ T9908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.533353][ T9898] veth1_vlan: entered promiscuous mode [ 233.549950][ T9968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.602353][ T8458] bridge_slave_1: left allmulticast mode [ 233.608736][ T8458] bridge_slave_1: left promiscuous mode [ 233.614457][ T8458] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.624262][ T8458] bridge_slave_0: left allmulticast mode [ 233.630728][ T8458] bridge_slave_0: left promiscuous mode [ 233.636722][ T8458] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.982404][T10113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.978'. [ 234.110382][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 234.110501][ T8458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.122411][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 234.135362][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 234.143635][ T8458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.144636][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 234.161465][ T8458] bond0 (unregistering): Released all slaves [ 234.161652][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 234.333667][ T9908] veth0_vlan: entered promiscuous mode [ 234.351346][ T9898] veth0_macvtap: entered promiscuous mode [ 234.449122][ T9898] veth1_macvtap: entered promiscuous mode [ 234.478866][ T9908] veth1_vlan: entered promiscuous mode [ 234.510139][ T9968] veth0_vlan: entered promiscuous mode [ 234.536236][ T9968] veth1_vlan: entered promiscuous mode [ 234.557572][ T8458] hsr_slave_0: left promiscuous mode [ 234.564345][ T8458] hsr_slave_1: left promiscuous mode [ 234.570532][ T8458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.578443][ T8458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.590206][ T8458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.597920][ T8458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.621289][ T8458] veth1_macvtap: left promiscuous mode [ 234.627007][ T8458] veth0_macvtap: left promiscuous mode [ 234.632677][ T8458] veth1_vlan: left promiscuous mode [ 234.638326][ T8458] veth0_vlan: left promiscuous mode [ 234.883569][T10131] SET target dimension over the limit! [ 235.076627][ T8458] team0 (unregistering): Port device team_slave_1 removed [ 235.112042][ T8458] team0 (unregistering): Port device team_slave_0 removed [ 235.501422][ T9898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.519642][ T9898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.533885][ T9898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.592601][ T9898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.603415][ T9898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.616041][ T9898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.630772][ T9898] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.641215][ T9898] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.650510][ T9898] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.659716][ T9898] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.682893][ T9908] veth0_macvtap: entered promiscuous mode [ 235.705621][T10134] netlink: 'syz.1.983': attribute type 21 has an invalid length. [ 235.714144][T10134] netlink: 128 bytes leftover after parsing attributes in process `syz.1.983'. [ 235.753928][T10134] netlink: 'syz.1.983': attribute type 4 has an invalid length. [ 235.762015][T10134] netlink: 'syz.1.983': attribute type 5 has an invalid length. [ 235.771404][T10135] netlink: 'syz.1.983': attribute type 21 has an invalid length. [ 235.777812][T10134] netlink: 3 bytes leftover after parsing attributes in process `syz.1.983'. [ 235.780918][T10135] netlink: 128 bytes leftover after parsing attributes in process `syz.1.983'. [ 235.798247][ T9908] veth1_macvtap: entered promiscuous mode [ 235.810902][ T9968] veth0_macvtap: entered promiscuous mode [ 235.845658][T10135] netlink: 'syz.1.983': attribute type 4 has an invalid length. [ 235.862262][T10135] netlink: 'syz.1.983': attribute type 5 has an invalid length. [ 235.872108][T10135] netlink: 3 bytes leftover after parsing attributes in process `syz.1.983'. [ 235.935226][T10138] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 235.946084][ T9968] veth1_macvtap: entered promiscuous mode [ 236.033667][T10144] netlink: 'syz.1.985': attribute type 10 has an invalid length. [ 236.060842][ T9908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.075913][ T9908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.090251][ T9908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.101549][ T9908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.113319][ T9908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.122396][ T9968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.134618][ T9968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.146580][ T9968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.159809][ T9968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.169859][ T9968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.180636][ T9968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.191926][ T9968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.202590][T10144] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 236.227203][ T5830] Bluetooth: hci2: command tx timeout [ 236.240961][ T9908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.258043][ T9908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.271304][ T9908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.282914][ T9908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.294400][ T9908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.303280][ T9968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.315237][ T9968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.325895][ T9968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.337439][ T9968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.348033][ T9968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.351667][T10148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.986'. [ 236.359163][ T9968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.379134][ T9968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.387810][T10115] chnl_net:caif_netlink_parms(): no params data found [ 236.413461][ T9908] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.422628][ T9908] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.432589][ T9908] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.441580][ T9908] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.476648][ T9968] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.485415][ T9968] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.495407][ T9968] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.504307][ T9968] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.670763][T10153] netlink: 'syz.1.988': attribute type 21 has an invalid length. [ 236.681084][T10153] netlink: 28 bytes leftover after parsing attributes in process `syz.1.988'. [ 236.719025][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.739998][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.782163][T10115] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.790333][T10115] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.798369][T10115] bridge_slave_0: entered allmulticast mode [ 236.805705][T10115] bridge_slave_0: entered promiscuous mode [ 236.815439][T10115] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.823333][T10115] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.830765][T10115] bridge_slave_1: entered allmulticast mode [ 236.838998][T10115] bridge_slave_1: entered promiscuous mode [ 236.851848][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.869802][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.941239][T10115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.941531][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.960021][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.981074][T10115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.047931][T10115] team0: Port device team_slave_0 added [ 237.071148][ T8458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.082254][T10115] team0: Port device team_slave_1 added [ 237.086488][ T8458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.205558][T10115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.224506][T10115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.253888][T10115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.270562][T10115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.277908][T10115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.305156][T10115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.334189][ T8458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.342442][ T8458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.378731][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.406223][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.488075][ T71] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.725412][ T71] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.777163][T10115] hsr_slave_0: entered promiscuous mode [ 237.784184][T10115] hsr_slave_1: entered promiscuous mode [ 237.795837][T10115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.803661][T10115] Cannot create hsr debugfs directory [ 237.873289][ T71] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.088693][ T71] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.308063][ T5830] Bluetooth: hci2: command tx timeout [ 238.501504][ T71] bridge_slave_1: left allmulticast mode [ 238.515703][ T71] bridge_slave_1: left promiscuous mode [ 238.523182][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.533492][ T71] bridge_slave_0: left allmulticast mode [ 238.540530][ T71] bridge_slave_0: left promiscuous mode [ 238.546318][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.859510][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 238.869128][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 238.878794][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 238.895051][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 238.903415][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 238.930001][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.943065][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.954256][ T71] bond0 (unregistering): Released all slaves [ 239.064204][T10115] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 239.112369][T10115] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 239.129318][T10115] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 239.140726][T10115] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 239.328555][ T71] hsr_slave_0: left promiscuous mode [ 239.334814][ T71] hsr_slave_1: left promiscuous mode [ 239.345320][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.362473][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.373221][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.385583][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.426155][ T71] veth1_macvtap: left promiscuous mode [ 239.432256][ T71] veth0_macvtap: left promiscuous mode [ 239.444478][ T71] veth1_vlan: left promiscuous mode [ 239.450183][ T71] veth0_vlan: left promiscuous mode [ 239.504068][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 239.514272][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 239.523363][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 239.531835][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 239.539869][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 239.985077][ T5825] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 239.999553][ T5825] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 240.008193][ T5825] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 240.027619][ T5825] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 240.038516][ T5825] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 240.059862][ T71] team0 (unregistering): Port device team_slave_1 removed [ 240.096328][ T71] team0 (unregistering): Port device team_slave_0 removed [ 240.387566][ T5830] Bluetooth: hci2: command tx timeout [ 240.755071][T10172] chnl_net:caif_netlink_parms(): no params data found [ 240.875815][T10196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.996'. [ 240.880557][T10115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.888933][T10196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.996'. [ 240.948060][ T5830] Bluetooth: hci0: command tx timeout [ 241.083343][T10206] netlink: 16 bytes leftover after parsing attributes in process `syz.1.998'. [ 241.112309][T10172] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.119729][T10172] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.127542][T10172] bridge_slave_0: entered allmulticast mode [ 241.134962][T10172] bridge_slave_0: entered promiscuous mode [ 241.186795][T10172] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.194126][T10172] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.207563][T10172] bridge_slave_1: entered allmulticast mode [ 241.216269][T10172] bridge_slave_1: entered promiscuous mode [ 241.233433][T10115] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.408570][T10172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.475531][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.482847][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.514961][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.522199][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.541436][T10172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.568815][T10183] chnl_net:caif_netlink_parms(): no params data found [ 241.586972][ T5830] Bluetooth: hci3: command tx timeout [ 241.612405][ T71] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.640884][T10220] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 241.653577][T10220] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 241.773299][ T71] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.802062][T10172] team0: Port device team_slave_0 added [ 241.814767][T10180] chnl_net:caif_netlink_parms(): no params data found [ 241.858047][T10172] team0: Port device team_slave_1 added [ 241.883993][ T71] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.983278][T10172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.991600][T10172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.019547][T10172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.056527][ T71] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.068873][ T5830] Bluetooth: hci4: command tx timeout [ 242.094320][T10172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.101602][T10172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.128245][T10172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.242161][T10183] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.251708][T10183] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.259509][T10183] bridge_slave_0: entered allmulticast mode [ 242.270419][T10183] bridge_slave_0: entered promiscuous mode [ 242.279270][T10183] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.291142][T10183] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.298487][T10183] bridge_slave_1: entered allmulticast mode [ 242.305787][T10183] bridge_slave_1: entered promiscuous mode [ 242.415125][T10183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.469601][T10172] hsr_slave_0: entered promiscuous mode [ 242.476076][T10172] hsr_slave_1: entered promiscuous mode [ 242.482415][ T5830] Bluetooth: hci2: command tx timeout [ 242.493742][T10172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.502176][T10172] Cannot create hsr debugfs directory [ 242.515941][T10183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.528639][T10180] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.541624][T10180] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.550086][T10180] bridge_slave_0: entered allmulticast mode [ 242.564560][T10180] bridge_slave_0: entered promiscuous mode [ 242.620575][T10183] team0: Port device team_slave_0 added [ 242.641884][T10180] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.649824][T10180] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.657321][T10180] bridge_slave_1: entered allmulticast mode [ 242.664651][T10180] bridge_slave_1: entered promiscuous mode [ 242.706148][T10183] team0: Port device team_slave_1 added [ 242.738364][T10180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.751308][T10180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.845895][ T71] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.932564][T10183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.943933][T10183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.953039][T10240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1007'. [ 242.980246][T10183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.000048][T10240] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1007'. [ 243.027540][ T5830] Bluetooth: hci0: command tx timeout [ 243.082384][T10180] team0: Port device team_slave_0 added [ 243.116016][T10244] netlink: 'syz.1.1008': attribute type 10 has an invalid length. [ 243.122598][ T71] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.141567][T10183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.148865][T10183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.176222][T10183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.196150][T10180] team0: Port device team_slave_1 added [ 243.210650][T10244] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 243.219266][T10244] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 243.299168][ T71] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.363517][T10180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.374323][T10180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.402494][T10180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.471468][ T71] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.503572][T10180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.518437][T10180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.565191][T10180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.666775][ T5830] Bluetooth: hci3: command tx timeout [ 243.708132][T10183] hsr_slave_0: entered promiscuous mode [ 243.714572][T10183] hsr_slave_1: entered promiscuous mode [ 243.738248][T10183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.745872][T10183] Cannot create hsr debugfs directory [ 243.764252][T10180] hsr_slave_0: entered promiscuous mode [ 243.772937][T10180] hsr_slave_1: entered promiscuous mode [ 243.782200][T10180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.790388][T10180] Cannot create hsr debugfs directory [ 243.861891][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.872460][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.032234][T10115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.147561][ T5830] Bluetooth: hci4: command tx timeout [ 244.222633][ T71] bridge_slave_1: left allmulticast mode [ 244.229089][ T71] bridge_slave_1: left promiscuous mode [ 244.235094][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.245749][ T71] bridge_slave_0: left allmulticast mode [ 244.252042][ T71] bridge_slave_0: left promiscuous mode [ 244.260122][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.271484][ T71] bridge_slave_1: left allmulticast mode [ 244.279794][ T71] bridge_slave_1: left promiscuous mode [ 244.285507][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.298088][ T71] bridge_slave_0: left allmulticast mode [ 244.303791][ T71] bridge_slave_0: left promiscuous mode [ 244.312135][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.823973][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.834855][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.848456][ T71] bond0 (unregistering): Released all slaves [ 244.942242][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.954121][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.964410][ T71] bond0 (unregistering): Released all slaves [ 245.107210][ T5830] Bluetooth: hci0: command tx timeout [ 245.371108][T10115] veth0_vlan: entered promiscuous mode [ 245.473977][T10115] veth1_vlan: entered promiscuous mode [ 245.503846][T10115] veth0_macvtap: entered promiscuous mode [ 245.528254][T10115] veth1_macvtap: entered promiscuous mode [ 245.591044][T10115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.602781][T10115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.614233][T10115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.625354][T10115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.638162][T10115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.647170][T10269] xt_l2tp: wrong L2TP version: 0 [ 245.649775][T10115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.665611][T10115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.695670][T10115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.715694][T10115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.727556][T10115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.742995][T10115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.753558][ T5830] Bluetooth: hci3: command tx timeout [ 245.756480][T10115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.769551][T10115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.780431][T10271] xt_NFQUEUE: number of total queues is 0 [ 245.781304][T10115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.803282][ T71] hsr_slave_0: left promiscuous mode [ 245.810013][ T71] hsr_slave_1: left promiscuous mode [ 245.815856][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.823368][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.833578][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.841282][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.854410][ T71] hsr_slave_0: left promiscuous mode [ 245.861363][ T71] hsr_slave_1: left promiscuous mode [ 245.867688][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.875121][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.883189][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.890778][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.925448][ T71] veth1_macvtap: left promiscuous mode [ 245.931101][ T71] veth0_macvtap: left promiscuous mode [ 245.937478][ T71] veth1_vlan: left promiscuous mode [ 245.942833][ T71] veth0_vlan: left promiscuous mode [ 245.950465][ T71] veth1_macvtap: left promiscuous mode [ 245.955995][ T71] veth0_macvtap: left promiscuous mode [ 245.961857][ T71] veth1_vlan: left promiscuous mode [ 245.968295][ T71] veth0_vlan: left promiscuous mode [ 246.233044][ T5830] Bluetooth: hci4: command tx timeout [ 246.463006][ T71] team0 (unregistering): Port device team_slave_1 removed [ 246.499110][ T71] team0 (unregistering): Port device team_slave_0 removed [ 247.125496][ T71] team0 (unregistering): Port device team_slave_1 removed [ 247.167347][ T71] team0 (unregistering): Port device team_slave_0 removed [ 247.188814][ T5830] Bluetooth: hci0: command tx timeout [ 247.552323][T10115] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.566476][T10115] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.575283][T10115] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.596477][T10115] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.835229][ T5830] Bluetooth: hci3: command tx timeout [ 247.869367][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.883998][T10285] sctp: [Deprecated]: syz.1.1014 (pid 10285) Use of int in max_burst socket option. [ 247.883998][T10285] Use struct sctp_assoc_value instead [ 247.896458][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.931513][ T8522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.962404][ T8522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.980847][T10183] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 248.045571][T10183] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 248.124709][T10183] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 248.157180][T10183] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 248.275239][T10183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.297152][T10183] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.306593][ T5830] Bluetooth: hci4: command tx timeout [ 248.328288][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.335442][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.348800][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.355946][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.561244][ T71] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.690286][ T71] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.732648][T10172] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 248.761401][T10172] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 248.783113][T10172] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 248.819596][T10172] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 248.874470][T10180] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 248.891815][T10183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.899975][T10180] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 248.913694][T10180] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 248.950859][T10180] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 249.021688][ T71] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.134856][ T71] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.153229][T10183] veth0_vlan: entered promiscuous mode [ 249.181894][T10183] veth1_vlan: entered promiscuous mode [ 249.212970][T10180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.241993][T10172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.292088][T10172] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.326039][T10180] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.360119][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.367309][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.379601][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.386809][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.423718][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.430963][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.457397][T10183] veth0_macvtap: entered promiscuous mode [ 249.505850][T10183] veth1_macvtap: entered promiscuous mode [ 249.539753][ T71] bridge_slave_1: left allmulticast mode [ 249.545464][ T71] bridge_slave_1: left promiscuous mode [ 249.568914][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.597672][ T71] bridge_slave_0: left allmulticast mode [ 249.603374][ T71] bridge_slave_0: left promiscuous mode [ 249.621328][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.796754][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 249.808695][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 249.820728][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 249.829855][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 249.838606][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 250.016500][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.030473][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.040646][ T71] bond0 (unregistering): Released all slaves [ 250.059530][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.066733][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.104860][T10183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.132901][T10183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.142875][T10183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.154309][T10183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.165886][T10183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.220839][T10183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.231711][T10183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.241742][T10183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.252942][T10183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.264775][T10183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.274869][T10309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1018'. [ 250.339600][T10183] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.354757][T10183] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.363616][T10183] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.372501][T10183] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.613512][ T71] hsr_slave_0: left promiscuous mode [ 250.622914][ T71] hsr_slave_1: left promiscuous mode [ 250.629263][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.638171][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.654654][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.663892][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.688338][ T71] veth1_macvtap: left promiscuous mode [ 250.694836][ T71] veth0_macvtap: left promiscuous mode [ 250.701188][ T71] veth1_vlan: left promiscuous mode [ 250.706941][ T71] veth0_vlan: left promiscuous mode [ 250.794628][T10322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1021'. [ 251.315137][ T71] team0 (unregistering): Port device team_slave_1 removed [ 251.352801][ T71] team0 (unregistering): Port device team_slave_0 removed [ 251.906757][ T5825] Bluetooth: hci2: command tx timeout [ 251.956066][T10180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.013524][T10305] chnl_net:caif_netlink_parms(): no params data found [ 252.090549][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.103831][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.265093][T10172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.305695][T10336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1024'. [ 252.348996][T10305] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.361504][T10305] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.369135][T10305] bridge_slave_0: entered allmulticast mode [ 252.380038][T10305] bridge_slave_0: entered promiscuous mode [ 252.389445][T10180] veth0_vlan: entered promiscuous mode [ 252.405867][T10336] ipvlan3: entered allmulticast mode [ 252.411662][T10336] veth0_vlan: entered allmulticast mode [ 252.437621][T10305] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.444890][T10305] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.445510][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.462912][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.474474][T10305] bridge_slave_1: entered allmulticast mode [ 252.488274][T10305] bridge_slave_1: entered promiscuous mode [ 252.548413][T10305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.583715][T10180] veth1_vlan: entered promiscuous mode [ 252.594630][T10305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.598189][T10342] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1025'. [ 252.729613][T10305] team0: Port device team_slave_0 added [ 252.750327][T10305] team0: Port device team_slave_1 added [ 252.839289][T10305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.846293][T10305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.876066][T10305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.890360][T10305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.897764][T10305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.924821][T10305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.941549][T10180] veth0_macvtap: entered promiscuous mode [ 252.974731][T10180] veth1_macvtap: entered promiscuous mode [ 253.033351][ T8522] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.175045][T10172] veth0_vlan: entered promiscuous mode [ 253.196117][T10305] hsr_slave_0: entered promiscuous mode [ 253.211962][T10305] hsr_slave_1: entered promiscuous mode [ 253.238563][ T8522] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.261943][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.273558][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.284846][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.295644][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.311580][T10180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.325090][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.336536][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.347554][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.358523][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.370204][T10180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.394859][ T8522] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.412566][T10172] veth1_vlan: entered promiscuous mode [ 253.443018][T10180] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.454457][T10180] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.464228][T10180] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.473211][T10180] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.524734][ T8522] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.717522][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.733751][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.739267][T10172] veth0_macvtap: entered promiscuous mode [ 253.892609][T10357] ip6t_srh: unknown srh match flags 4001 [ 253.894737][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.908860][T10172] veth1_macvtap: entered promiscuous mode [ 253.933387][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.994066][ T5825] Bluetooth: hci2: command tx timeout [ 254.063401][ T8522] bridge_slave_1: left allmulticast mode [ 254.088082][ T8522] bridge_slave_1: left promiscuous mode [ 254.093924][ T8522] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.124392][ T8522] bridge_slave_0: left allmulticast mode [ 254.136592][ T8522] bridge_slave_0: left promiscuous mode [ 254.143135][ T8522] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.313988][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 254.325054][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 254.341169][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 254.353251][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 254.364419][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 254.579889][ T8522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.591175][ T8522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.601452][ T8522] bond0 (unregistering): Released all slaves [ 254.618268][T10172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.630456][T10172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.640584][T10172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.656183][T10172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.675537][T10172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.686069][T10172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.708651][T10172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.779047][T10172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.797687][T10172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.808252][T10172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.819027][T10172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.829145][T10172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.839942][T10172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.851316][T10172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.995840][T10172] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.005961][T10172] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.020075][T10172] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.032354][T10172] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.147352][ T8522] hsr_slave_0: left promiscuous mode [ 255.156608][ T8522] hsr_slave_1: left promiscuous mode [ 255.162481][ T8522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.176549][ T8522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.184675][ T8522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.202907][ T8522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.238589][ T8522] veth1_macvtap: left promiscuous mode [ 255.244200][ T8522] veth0_macvtap: left promiscuous mode [ 255.253038][ T8522] veth1_vlan: left promiscuous mode [ 255.258645][ T8522] veth0_vlan: left promiscuous mode [ 255.654842][ T8522] team0 (unregistering): Port device team_slave_1 removed [ 255.673248][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.703858][ T8522] team0 (unregistering): Port device team_slave_0 removed [ 256.031573][T10305] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 256.042402][T10305] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 256.066957][ T5830] Bluetooth: hci2: command tx timeout [ 256.102936][T10305] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 256.127538][T10305] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 256.388337][ T5830] Bluetooth: hci3: command tx timeout [ 256.561863][ T5825] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 256.571162][ T5825] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 256.572148][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.579220][ T5825] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 256.595053][ T5825] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 256.604252][ T5825] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 256.654957][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.727049][T10365] chnl_net:caif_netlink_parms(): no params data found [ 256.750578][T10385] 8021q: VLANs not supported on ip6gre0 [ 256.757867][T10385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1035'. [ 256.769555][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.787771][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.842583][T10305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.864529][T10305] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.934358][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.941551][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.054647][ T8522] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.130027][T10389] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1036'. [ 257.150271][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.157569][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.171797][T10365] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.180180][T10365] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.192900][T10365] bridge_slave_0: entered allmulticast mode [ 257.202187][T10365] bridge_slave_0: entered promiscuous mode [ 257.237277][ T8522] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.332710][ T8522] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.532782][T10365] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.556936][T10365] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.594455][T10365] bridge_slave_1: entered allmulticast mode [ 257.621415][T10365] bridge_slave_1: entered promiscuous mode [ 257.751388][ T8522] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.861898][T10365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.890412][T10365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.005277][T10365] team0: Port device team_slave_0 added [ 258.030431][T10365] team0: Port device team_slave_1 added [ 258.084182][T10365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.091470][T10365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.118197][T10365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.131525][T10365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.140051][T10365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.149624][ T5830] Bluetooth: hci2: command tx timeout [ 258.166551][T10365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.221773][ T8522] bridge_slave_1: left allmulticast mode [ 258.231626][ T8522] bridge_slave_1: left promiscuous mode [ 258.239276][ T8522] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.250172][ T8522] bridge_slave_0: left allmulticast mode [ 258.255840][ T8522] bridge_slave_0: left promiscuous mode [ 258.262674][ T8522] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.466874][ T5830] Bluetooth: hci3: command tx timeout [ 258.595497][ T8522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.610515][ T8522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.621857][ T8522] bond0 (unregistering): Released all slaves [ 258.707590][ T5830] Bluetooth: hci4: command tx timeout [ 258.791798][T10365] hsr_slave_0: entered promiscuous mode [ 258.799098][T10365] hsr_slave_1: entered promiscuous mode [ 258.805466][T10365] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.814335][T10365] Cannot create hsr debugfs directory [ 258.824412][T10402] xt_TPROXY: Can be used only with -p tcp or -p udp [ 259.166132][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 259.175244][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 259.191307][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 259.201022][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 259.209205][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 259.230693][T10382] chnl_net:caif_netlink_parms(): no params data found [ 259.361271][ T8522] hsr_slave_0: left promiscuous mode [ 259.377803][ T8522] hsr_slave_1: left promiscuous mode [ 259.383936][ T8522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.392401][ T8522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.405939][ T8522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.414213][ T8522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.449667][ T8522] veth1_macvtap: left promiscuous mode [ 259.455268][ T8522] veth0_macvtap: left promiscuous mode [ 259.466594][ T8522] veth1_vlan: left promiscuous mode [ 259.471928][ T8522] veth0_vlan: left promiscuous mode [ 259.574569][T10430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1044'. [ 259.687630][T10432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1044'. [ 259.871245][T10435] netlink: 'syz.1.1044': attribute type 11 has an invalid length. [ 259.888851][T10435] netlink: 'syz.1.1044': attribute type 11 has an invalid length. [ 259.898763][T10435] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1044'. [ 259.959874][ T8522] team0 (unregistering): Port device team_slave_1 removed [ 259.997357][ T8522] team0 (unregistering): Port device team_slave_0 removed [ 260.546503][ T5830] Bluetooth: hci3: command tx timeout [ 260.628301][ T30] audit: type=1107 audit(1746554989.597:2): pid=10441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='4r009R\Դ]ovNIYdLF'{Yz<"C,^' [ 260.697240][T10382] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.704479][T10382] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.728280][T10382] bridge_slave_0: entered allmulticast mode [ 260.736132][T10382] bridge_slave_0: entered promiscuous mode [ 260.782006][T10382] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.796454][ T5830] Bluetooth: hci4: command tx timeout [ 260.803373][T10382] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.805981][T10446] GUP no longer grows the stack in syz.1.1048 (10446): 200000006000-20000000a000 (200000005000) [ 260.811244][T10382] bridge_slave_1: entered allmulticast mode [ 260.827809][T10446] CPU: 1 UID: 0 PID: 10446 Comm: syz.1.1048 Not tainted 6.15.0-rc4-syzkaller-00163-ge8716b5b0dff #0 PREEMPT(full) [ 260.827853][T10446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 260.827887][T10446] Call Trace: [ 260.827895][T10446] [ 260.827905][T10446] dump_stack_lvl+0x189/0x250 [ 260.827952][T10446] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.827981][T10446] ? __pfx__printk+0x10/0x10 [ 260.827998][T10446] ? find_vma+0xe7/0x160 [ 260.828039][T10446] __get_user_pages+0x24e4/0x2a40 [ 260.828100][T10446] ? __pfx___get_user_pages+0x10/0x10 [ 260.828130][T10446] ? __gup_longterm_locked+0xbf7/0x15b0 [ 260.828153][T10446] ? down_read_killable+0x1d1/0x350 [ 260.828177][T10446] ? try_get_folio+0x633/0x660 [ 260.828204][T10446] __gup_longterm_locked+0xd66/0x15b0 [ 260.828233][T10446] ? try_grab_folio_fast+0x19a/0x4d0 [ 260.828270][T10446] ? gup_fast_fallback+0x1672/0x1d60 [ 260.828298][T10446] gup_fast_fallback+0x1843/0x1d60 [ 260.828361][T10446] ? __pfx_gup_fast_fallback+0x10/0x10 [ 260.828383][T10446] ? __mutex_lock+0x330/0xe80 [ 260.828410][T10446] ? is_valid_gup_args+0x11f/0x200 [ 260.828437][T10446] ? get_user_pages_fast+0x4d/0xb0 [ 260.828464][T10446] __iov_iter_get_pages_alloc+0x39a/0xb40 [ 260.828498][T10446] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 260.828535][T10446] ? wait_for_space+0x24d/0x2d0 [ 260.828560][T10446] iov_iter_get_pages2+0x5e/0xa0 [ 260.828588][T10446] __se_sys_vmsplice+0x548/0x10e0 [ 260.828634][T10446] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 260.828662][T10446] ? __pfx_futex_wake+0x10/0x10 [ 260.828694][T10446] ? __lock_acquire+0xaac/0xd20 [ 260.828764][T10446] ? rcu_is_watching+0x15/0xb0 [ 260.828803][T10446] ? do_syscall_64+0xba/0x210 [ 260.828830][T10446] do_syscall_64+0xf6/0x210 [ 260.828870][T10446] ? clear_bhb_loop+0x45/0xa0 [ 260.828894][T10446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.828913][T10446] RIP: 0033:0x7ff0bf78e969 [ 260.828930][T10446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.828947][T10446] RSP: 002b:00007ff0bd5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 260.828968][T10446] RAX: ffffffffffffffda RBX: 00007ff0bf9b5fa0 RCX: 00007ff0bf78e969 [ 260.828982][T10446] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000009 [ 260.828994][T10446] RBP: 00007ff0bf810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 260.829006][T10446] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 260.829017][T10446] R13: 0000000000000000 R14: 00007ff0bf9b5fa0 R15: 00007ffe3400fa68 [ 260.829050][T10446] [ 260.833162][T10382] bridge_slave_1: entered promiscuous mode [ 261.200981][T10382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.215881][T10305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.256001][T10382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.272257][ T5830] Bluetooth: hci0: command tx timeout [ 261.447973][T10382] team0: Port device team_slave_0 added [ 261.514633][T10382] team0: Port device team_slave_1 added [ 261.683635][ T8522] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.759164][T10382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.767480][T10382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.794180][T10382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.864397][ T8522] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.897512][T10382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.904542][T10382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.933472][T10382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.947671][T10463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1050'. [ 261.999518][ T8522] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.035388][T10416] chnl_net:caif_netlink_parms(): no params data found [ 262.123948][ T8522] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.151869][T10365] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 262.165869][T10365] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 262.203715][T10382] hsr_slave_0: entered promiscuous mode [ 262.210308][T10382] hsr_slave_1: entered promiscuous mode [ 262.216965][T10382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.224794][T10382] Cannot create hsr debugfs directory [ 262.262118][T10365] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 262.279987][T10365] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 262.299715][T10305] veth0_vlan: entered promiscuous mode [ 262.315960][T10305] veth1_vlan: entered promiscuous mode [ 262.450849][T10416] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.458355][T10416] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.465558][T10416] bridge_slave_0: entered allmulticast mode [ 262.474679][T10416] bridge_slave_0: entered promiscuous mode [ 262.511142][T10416] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.519924][T10416] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.527936][T10416] bridge_slave_1: entered allmulticast mode [ 262.535351][T10416] bridge_slave_1: entered promiscuous mode [ 262.599849][T10416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.627270][ T5830] Bluetooth: hci3: command tx timeout [ 262.669924][T10416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.734459][T10416] team0: Port device team_slave_0 added [ 262.747136][T10416] team0: Port device team_slave_1 added [ 262.765374][ T8522] bridge_slave_1: left allmulticast mode [ 262.771869][ T8522] bridge_slave_1: left promiscuous mode [ 262.778481][ T8522] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.789200][ T8522] bridge_slave_0: left allmulticast mode [ 262.794864][ T8522] bridge_slave_0: left promiscuous mode [ 262.801212][ T8522] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.876704][ T5830] Bluetooth: hci4: command tx timeout [ 263.135395][ T8522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.150665][ T8522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.162144][ T8522] bond0 (unregistering): Released all slaves [ 263.223733][T10416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.231154][T10416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.273033][T10416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.295048][T10475] pim6reg: left allmulticast mode [ 263.322526][T10473] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1052'. [ 263.347920][ T5830] Bluetooth: hci0: command tx timeout [ 263.357494][T10416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.364560][T10416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.379086][T10474] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1052'. [ 263.390876][T10416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.429920][T10474] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1052'. [ 263.445242][T10305] veth0_macvtap: entered promiscuous mode [ 263.541142][T10416] hsr_slave_0: entered promiscuous mode [ 263.548048][T10416] hsr_slave_1: entered promiscuous mode [ 263.554489][T10416] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.565500][T10416] Cannot create hsr debugfs directory [ 263.597689][T10305] veth1_macvtap: entered promiscuous mode [ 263.650438][ T8522] hsr_slave_0: left promiscuous mode [ 263.661767][ T8522] hsr_slave_1: left promiscuous mode [ 263.670946][ T8522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.678958][ T8522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.689614][ T8522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.701112][ T8522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.723863][ T8522] veth1_macvtap: left promiscuous mode [ 263.729965][ T8522] veth0_macvtap: left promiscuous mode [ 263.735695][ T8522] veth1_vlan: left promiscuous mode [ 263.741546][ T8522] veth0_vlan: left promiscuous mode [ 264.121862][ T8522] team0 (unregistering): Port device team_slave_1 removed [ 264.158855][ T8522] team0 (unregistering): Port device team_slave_0 removed [ 264.575965][T10305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.601245][T10305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.613686][T10484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1055'. [ 264.615305][T10305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.667559][T10484] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 264.678444][T10485] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 264.681884][T10365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.720618][ T36] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 264.729641][ T36] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 264.749941][ T9685] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 264.764895][T10305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.781623][T10305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.802169][T10305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.818092][T10305] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.827198][T10305] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.836155][T10305] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.845967][T10305] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.938791][T10365] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.946974][ T5830] Bluetooth: hci4: command tx timeout [ 265.017062][T10382] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 265.034178][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.041412][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.051695][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.058839][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.083658][T10382] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 265.130001][T10382] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 265.172104][T10382] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 265.208694][ T8458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.220425][ T8458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.270655][T10365] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.343701][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.353644][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.434513][ T9686] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 265.442461][ T5830] Bluetooth: hci0: command tx timeout [ 265.449477][ T9686] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 265.700262][T10382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.725052][T10416] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 265.740540][T10416] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 265.754847][T10503] tipc: Enabling of bearer rejected, failed to enable media [ 265.778832][T10365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.785909][T10416] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 265.800590][T10416] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 265.870209][ T8458] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.963278][ T8458] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.991483][T10382] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.050252][ T8458] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.197482][ T8458] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.224536][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.231778][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.244541][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.251795][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.361884][T10365] veth0_vlan: entered promiscuous mode [ 266.509168][T10365] veth1_vlan: entered promiscuous mode [ 266.609649][ T8458] bridge_slave_1: left allmulticast mode [ 266.615842][ T8458] bridge_slave_1: left promiscuous mode [ 266.642772][ T8458] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.664059][ T8458] bridge_slave_0: left allmulticast mode [ 266.682316][ T8458] bridge_slave_0: left promiscuous mode [ 266.699277][ T8458] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.901933][T10518] x_tables: duplicate underflow at hook 1 [ 266.911917][T10517] x_tables: duplicate underflow at hook 1 [ 267.143721][ T8458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.198256][ T8458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.221219][ T8458] bond0 (unregistering): Released all slaves [ 267.262201][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 267.277308][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 267.286326][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 267.311815][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 267.321845][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 267.383333][T10416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.496776][T10365] veth0_macvtap: entered promiscuous mode [ 267.523747][ T5825] Bluetooth: hci0: command tx timeout [ 267.550280][T10365] veth1_macvtap: entered promiscuous mode [ 267.575478][T10416] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.619763][T10382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.696656][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.703829][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.740320][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.747571][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.790685][ T8458] hsr_slave_0: left promiscuous mode [ 267.797118][ T8458] hsr_slave_1: left promiscuous mode [ 267.803194][ T8458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.811278][ T8458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.819723][ T8458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.827635][ T8458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.846616][ T8458] veth1_macvtap: left promiscuous mode [ 267.852205][ T8458] veth0_macvtap: left promiscuous mode [ 267.858013][ T8458] veth1_vlan: left promiscuous mode [ 267.863574][ T8458] veth0_vlan: left promiscuous mode [ 267.867468][T10540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1068'. [ 268.263987][ T8458] team0 (unregistering): Port device team_slave_1 removed [ 268.301024][ T8458] team0 (unregistering): Port device team_slave_0 removed [ 268.636707][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 268.748602][T10365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.764950][T10365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.779223][T10365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.807771][T10544] netlink: 'syz.1.1069': attribute type 12 has an invalid length. [ 268.815711][T10544] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1069'. [ 268.849019][T10365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.860103][T10365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.871699][T10365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.902943][T10365] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.912065][T10365] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.921797][T10365] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.930737][T10365] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.953307][T10382] veth0_vlan: entered promiscuous mode [ 269.032139][T10382] veth1_vlan: entered promiscuous mode [ 269.190893][T10527] chnl_net:caif_netlink_parms(): no params data found [ 269.306375][T10382] veth0_macvtap: entered promiscuous mode [ 269.336992][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.344884][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.359026][T10382] veth1_macvtap: entered promiscuous mode [ 269.441837][ T5825] Bluetooth: hci2: command tx timeout [ 269.495280][T10527] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.507015][T10527] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.514790][T10527] bridge_slave_0: entered allmulticast mode [ 269.530180][T10527] bridge_slave_0: entered promiscuous mode [ 269.539976][T10527] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.547724][T10527] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.547940][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.554995][T10527] bridge_slave_1: entered allmulticast mode [ 269.570663][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.579962][T10527] bridge_slave_1: entered promiscuous mode [ 269.590465][ T5825] Bluetooth: hci0: command tx timeout [ 269.608504][T10382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.631078][T10382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.646468][T10382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.661595][T10382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.674461][T10382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.717885][T10560] xt_socket: unknown flags 0x50 [ 269.741037][T10382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.752245][T10382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.762879][T10382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.774364][T10382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.786166][T10382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.855854][T10527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.872595][T10416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.891705][T10382] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.908977][T10382] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.919496][T10382] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.932084][T10382] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.962947][T10527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.005657][T10568] openvswitch: netlink: Missing valid actions attribute. [ 270.014238][T10568] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.029851][T10527] team0: Port device team_slave_0 added [ 270.040043][T10527] team0: Port device team_slave_1 added [ 270.102365][T10527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.112134][T10527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.140850][T10527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.179699][T10527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.188881][T10527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.215673][T10527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.233615][T10571] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 270.341010][ T8458] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.417594][T10527] hsr_slave_0: entered promiscuous mode [ 270.425189][T10527] hsr_slave_1: entered promiscuous mode [ 270.491472][ T8458] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.520314][T10416] veth0_vlan: entered promiscuous mode [ 270.593032][ T8458] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.645312][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.655787][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.656045][T10416] veth1_vlan: entered promiscuous mode [ 270.701951][ T8458] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.752306][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.762818][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.941568][T10416] veth0_macvtap: entered promiscuous mode [ 270.963054][T10416] veth1_macvtap: entered promiscuous mode [ 270.997430][ T8458] bridge_slave_1: left allmulticast mode [ 271.003128][ T8458] bridge_slave_1: left promiscuous mode [ 271.012052][ T8458] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.022740][ T8458] bridge_slave_0: left allmulticast mode [ 271.041187][ T8458] bridge_slave_0: left promiscuous mode [ 271.051608][ T8458] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.521040][ T5825] Bluetooth: hci2: command tx timeout [ 271.663705][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 271.673583][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 271.681884][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 271.708430][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 271.716250][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 271.795320][ T8458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.806975][ T8458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.817613][ T8458] bond0 (unregistering): Released all slaves [ 271.883501][T10416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.894755][T10416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.905056][T10416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.915997][T10416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.926082][T10416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.936946][T10416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.948744][T10416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.019988][T10416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.030646][T10416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.041352][T10416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.052221][T10416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.062961][T10416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.073698][T10416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.084831][T10416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.143528][T10416] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.156792][T10416] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.166593][T10416] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.175317][T10416] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.279795][ T8458] hsr_slave_0: left promiscuous mode [ 272.285786][ T8458] hsr_slave_1: left promiscuous mode [ 272.294626][ T8458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.302261][ T8458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.310818][ T8458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.318346][ T8458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.338835][ T8458] veth1_macvtap: left promiscuous mode [ 272.344386][ T8458] veth0_macvtap: left promiscuous mode [ 272.350205][ T8458] veth1_vlan: left promiscuous mode [ 272.355534][ T8458] veth0_vlan: left promiscuous mode [ 272.856648][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 272.880854][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 272.892757][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 272.893983][ T8458] team0 (unregistering): Port device team_slave_1 removed [ 272.914882][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 272.928405][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 272.959976][ T8458] team0 (unregistering): Port device team_slave_0 removed [ 273.457967][ T8522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.465850][ T8522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.530833][T10527] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 273.557722][T10527] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 273.587899][ T5825] Bluetooth: hci2: command tx timeout [ 273.629122][T10527] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 273.656585][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.684781][T10527] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 273.691805][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.806055][T10587] Driver unsupported XDP return value 0 on prog (id 279) dev N/A, expect packet loss! [ 273.826764][ T5825] Bluetooth: hci3: command tx timeout [ 273.984397][T10573] chnl_net:caif_netlink_parms(): no params data found [ 274.334243][ T8458] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.439579][T10579] chnl_net:caif_netlink_parms(): no params data found [ 274.456292][T10573] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.465187][T10573] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.473532][T10573] bridge_slave_0: entered allmulticast mode [ 274.482607][T10573] bridge_slave_0: entered promiscuous mode [ 274.491545][T10573] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.499028][T10573] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.506266][T10573] bridge_slave_1: entered allmulticast mode [ 274.514655][T10573] bridge_slave_1: entered promiscuous mode [ 274.559705][ T8458] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.596790][T10573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.654437][T10573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.699771][ T8458] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.763775][T10573] team0: Port device team_slave_0 added [ 274.789675][T10573] team0: Port device team_slave_1 added [ 274.811462][T10579] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.822577][T10579] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.831443][T10579] bridge_slave_0: entered allmulticast mode [ 274.839708][T10579] bridge_slave_0: entered promiscuous mode [ 274.848486][T10579] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.855596][T10579] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.863195][T10579] bridge_slave_1: entered allmulticast mode [ 274.871031][T10579] bridge_slave_1: entered promiscuous mode [ 274.891782][T10527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.945735][T10579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.955583][ T5825] Bluetooth: hci4: command tx timeout [ 274.960665][T10573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.972925][T10573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.999456][T10573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.012562][T10573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.020348][T10573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.048375][T10573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.062085][T10579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.082704][ T8458] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.165819][T10579] team0: Port device team_slave_0 added [ 275.176130][T10579] team0: Port device team_slave_1 added [ 275.214196][T10527] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.255784][T10573] hsr_slave_0: entered promiscuous mode [ 275.263129][T10573] hsr_slave_1: entered promiscuous mode [ 275.269662][T10573] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.278766][T10573] Cannot create hsr debugfs directory [ 275.287509][T10579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.294499][T10579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.321632][T10579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.335025][T10579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.342944][T10579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.369482][T10579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.395319][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.402501][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.481623][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.488928][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.669144][ T5825] Bluetooth: hci2: command tx timeout [ 275.706132][ T8458] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.732325][T10579] hsr_slave_0: entered promiscuous mode [ 275.744644][T10579] hsr_slave_1: entered promiscuous mode [ 275.755326][T10579] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.768561][T10579] Cannot create hsr debugfs directory [ 275.809738][T10610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1080'. [ 275.860468][ T8458] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.906860][ T5825] Bluetooth: hci3: command tx timeout [ 275.981160][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 275.990968][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 275.999580][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 276.011594][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 276.019609][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 276.079256][ T8458] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.146647][ C1] ================================================================== [ 276.154746][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0 [ 276.162652][ C1] Read of size 2 at addr ffff888032ff582a by task syz-executor/10579 [ 276.170714][ C1] [ 276.173037][ C1] CPU: 1 UID: 0 PID: 10579 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00163-ge8716b5b0dff #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 276.173056][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 276.173066][ C1] Call Trace: [ 276.173078][ C1] [ 276.173086][ C1] dump_stack_lvl+0x189/0x250 [ 276.173110][ C1] ? __virt_addr_valid+0x18c/0x540 [ 276.173130][ C1] ? rcu_is_watching+0x15/0xb0 [ 276.173152][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.173173][ C1] ? rcu_is_watching+0x15/0xb0 [ 276.173194][ C1] ? lock_release+0x4b/0x3e0 [ 276.173217][ C1] ? __virt_addr_valid+0x18c/0x540 [ 276.173236][ C1] ? __virt_addr_valid+0x469/0x540 [ 276.173255][ C1] print_report+0xb4/0x290 [ 276.173273][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 276.173294][ C1] kasan_report+0x118/0x150 [ 276.173314][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 276.173338][ C1] rose_timer_expiry+0x471/0x4b0 [ 276.173359][ C1] call_timer_fn+0x17b/0x5f0 [ 276.173379][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 276.173399][ C1] ? call_timer_fn+0xbe/0x5f0 [ 276.173418][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 276.173441][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 276.173455][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 276.173470][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 276.173491][ C1] __run_timer_base+0x61a/0x860 [ 276.173524][ C1] ? ktime_get+0x3e/0x1f0 [ 276.173542][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 276.173557][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 276.173580][ C1] run_timer_softirq+0xb7/0x180 [ 276.173597][ C1] handle_softirqs+0x283/0x870 [ 276.173621][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 276.173636][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 276.173659][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 276.173677][ C1] __irq_exit_rcu+0xca/0x1f0 [ 276.173689][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 276.173706][ C1] irq_exit_rcu+0x9/0x30 [ 276.173716][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 276.173731][ C1] [ 276.173735][ C1] [ 276.173741][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 276.173757][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 276.173772][ C1] Code: 74 05 e8 0b d3 6e f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 f3 54 38 f6 65 8b 05 5c d5 1c 07 85 c0 74 40 48 c7 04 24 0e 36 [ 276.173785][ C1] RSP: 0018:ffffc90003eded00 EFLAGS: 00000206 [ 276.173799][ C1] RAX: 57d486126e5a8d00 RBX: 0000000000000a06 RCX: 57d486126e5a8d00 [ 276.173809][ C1] RDX: 0000000000000006 RSI: ffffffff8d749ef1 RDI: 0000000000000001 [ 276.173819][ C1] RBP: ffffc90003eded90 R08: ffffffff8f7ed377 R09: 1ffffffff1efda6e [ 276.173829][ C1] R10: dffffc0000000000 R11: fffffbfff1efda6f R12: dffffc0000000000 [ 276.173840][ C1] R13: 0000000000000a06 R14: ffffffff8f2f6f60 R15: 1ffff920007dbda0 [ 276.173859][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 276.173876][ C1] ? linkwatch_urgent_event+0x62/0x3a0 [ 276.173896][ C1] linkwatch_fire_event+0x1dc/0x220 [ 276.173916][ C1] veth_newlink+0x5e3/0xa50 [ 276.173933][ C1] ? __pfx_veth_newlink+0x10/0x10 [ 276.173947][ C1] ? alloc_netdev_mqs+0xc9e/0x11e0 [ 276.173967][ C1] ? rtnl_newlink_create+0x258/0xaf0 [ 276.173982][ C1] ? rtnl_newlink+0x16d6/0x1c70 [ 276.173995][ C1] ? rtnetlink_rcv_msg+0x7cc/0xb70 [ 276.174007][ C1] ? netlink_unicast+0x758/0x8d0 [ 276.174028][ C1] ? netlink_sendmsg+0x805/0xb30 [ 276.174041][ C1] ? __sock_sendmsg+0x219/0x270 [ 276.174062][ C1] ? do_syscall_64+0xf6/0x210 [ 276.174084][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.174121][ C1] ? validate_linkmsg+0x765/0x950 [ 276.174145][ C1] ? __pfx_veth_newlink+0x10/0x10 [ 276.174160][ C1] rtnl_newlink_create+0x305/0xaf0 [ 276.174178][ C1] ? __mutex_lock+0x51b/0xe80 [ 276.174196][ C1] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 276.174211][ C1] ? rtnl_newlink+0x8db/0x1c70 [ 276.174225][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 276.174243][ C1] ? full_name_hash+0x92/0xe0 [ 276.174266][ C1] rtnl_newlink+0x16d6/0x1c70 [ 276.174286][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 276.174329][ C1] ? aa_get_newest_label+0xf7/0x5d0 [ 276.174345][ C1] ? __lock_acquire+0xaac/0xd20 [ 276.174373][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 276.174386][ C1] rtnetlink_rcv_msg+0x7cc/0xb70 [ 276.174399][ C1] ? kasan_save_track+0x4f/0x80 [ 276.174415][ C1] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 276.174428][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 276.174442][ C1] ? __lock_acquire+0xaac/0xd20 [ 276.174466][ C1] netlink_rcv_skb+0x219/0x490 [ 276.174481][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 276.174495][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 276.174516][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 276.174530][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 276.174546][ C1] netlink_unicast+0x758/0x8d0 [ 276.174571][ C1] netlink_sendmsg+0x805/0xb30 [ 276.174589][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.174605][ C1] ? aa_sock_msg_perm+0x94/0x160 [ 276.174619][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 276.174635][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.174649][ C1] __sock_sendmsg+0x219/0x270 [ 276.174672][ C1] __sys_sendto+0x3bd/0x520 [ 276.174689][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 276.174709][ C1] ? fput_close_sync+0x119/0x200 [ 276.174735][ C1] ? rcu_is_watching+0x15/0xb0 [ 276.174759][ C1] __x64_sys_sendto+0xde/0x100 [ 276.174776][ C1] do_syscall_64+0xf6/0x210 [ 276.174792][ C1] ? clear_bhb_loop+0x45/0xa0 [ 276.174808][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.174833][ C1] RIP: 0033:0x7f8df7d907fc [ 276.174846][ C1] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 276.174857][ C1] RSP: 002b:00007ffd24d009d0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 276.174870][ C1] RAX: ffffffffffffffda RBX: 00007f8df8ae4620 RCX: 00007f8df7d907fc [ 276.174879][ C1] RDX: 0000000000000064 RSI: 00007f8df8ae4670 RDI: 0000000000000003 [ 276.174888][ C1] RBP: 0000000000000000 R08: 00007ffd24d00a24 R09: 000000000000000c [ 276.174896][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 276.174903][ C1] R13: 0000000000000000 R14: 00007f8df8ae4670 R15: 0000000000000000 [ 276.174918][ C1] [ 276.174922][ C1] [ 276.791671][ C1] Allocated by task 10365: [ 276.796083][ C1] kasan_save_track+0x3e/0x80 [ 276.800767][ C1] __kasan_kmalloc+0x93/0xb0 [ 276.805355][ C1] __kmalloc_noprof+0x27a/0x4f0 [ 276.806611][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 276.810197][ C1] fib6_info_alloc+0x30/0xf0 [ 276.822248][ C1] ip6_route_info_create+0x4b3/0x1360 [ 276.827625][ C1] addrconf_f6i_alloc+0x1c6/0x3f0 [ 276.832652][ C1] addrconf_permanent_addr+0x274/0x9d0 [ 276.838111][ C1] addrconf_notify+0x887/0x1010 [ 276.842961][ C1] notifier_call_chain+0x1b3/0x3e0 [ 276.848158][ C1] __dev_notify_flags+0x18d/0x2e0 [ 276.853183][ C1] netif_change_flags+0xe8/0x1a0 [ 276.858132][ C1] do_setlink+0xcb9/0x40d0 [ 276.862549][ C1] rtnl_newlink+0x160b/0x1c70 [ 276.867227][ C1] rtnetlink_rcv_msg+0x7cc/0xb70 [ 276.872163][ C1] netlink_rcv_skb+0x219/0x490 [ 276.876936][ C1] netlink_unicast+0x758/0x8d0 [ 276.881710][ C1] netlink_sendmsg+0x805/0xb30 [ 276.886475][ C1] __sock_sendmsg+0x219/0x270 [ 276.891161][ C1] __sys_sendto+0x3bd/0x520 [ 276.895679][ C1] __x64_sys_sendto+0xde/0x100 [ 276.900446][ C1] do_syscall_64+0xf6/0x210 [ 276.904952][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.910849][ C1] [ 276.913174][ C1] Freed by task 8458: [ 276.917155][ C1] kasan_save_track+0x3e/0x80 [ 276.921833][ C1] kasan_save_free_info+0x46/0x50 [ 276.926868][ C1] __kasan_slab_free+0x62/0x70 [ 276.931633][ C1] kfree+0x193/0x440 [ 276.935528][ C1] rcu_core+0xca5/0x1710 [ 276.939776][ C1] handle_softirqs+0x283/0x870 [ 276.944546][ C1] __irq_exit_rcu+0xca/0x1f0 [ 276.949141][ C1] irq_exit_rcu+0x9/0x30 [ 276.953381][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 276.959019][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 276.965009][ C1] [ 276.967335][ C1] Last potentially related work creation: [ 276.973048][ C1] kasan_save_stack+0x3e/0x60 [ 276.977738][ C1] kasan_record_aux_stack+0xbc/0xd0 [ 276.982950][ C1] call_rcu+0x142/0x990 [ 276.987105][ C1] __ip6_del_rt+0x111/0x180 [ 276.991606][ C1] ip6_del_rt+0xb3/0x100 [ 276.995852][ C1] __ipv6_ifa_notify+0x5c7/0xac0 [ 277.000789][ C1] addrconf_ifdown+0xe69/0x1880 [ 277.005648][ C1] addrconf_notify+0x1bc/0x1010 [ 277.010519][ C1] notifier_call_chain+0x1b3/0x3e0 [ 277.015628][ C1] dev_close_many+0x29c/0x410 [ 277.020303][ C1] unregister_netdevice_many_notify+0x834/0x2330 [ 277.026642][ C1] default_device_exit_batch+0x819/0x890 [ 277.032302][ C1] cleanup_net+0x7a9/0xbd0 [ 277.036723][ C1] process_scheduled_works+0xadb/0x17a0 [ 277.042287][ C1] worker_thread+0x8a0/0xda0 [ 277.046875][ C1] kthread+0x70e/0x8a0 [ 277.050944][ C1] ret_from_fork+0x4b/0x80 [ 277.055365][ C1] ret_from_fork_asm+0x1a/0x30 [ 277.060128][ C1] [ 277.062454][ C1] The buggy address belongs to the object at ffff888032ff5800 [ 277.062454][ C1] which belongs to the cache kmalloc-512 of size 512 [ 277.076511][ C1] The buggy address is located 42 bytes inside of [ 277.076511][ C1] freed 512-byte region [ffff888032ff5800, ffff888032ff5a00) [ 277.090774][ C1] [ 277.093537][ C1] The buggy address belongs to the physical page: [ 277.099954][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x32ff4 [ 277.108803][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 277.117313][ C1] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 277.125309][ C1] page_type: f5(slab) [ 277.129566][ C1] raw: 00fff00000000040 ffff88801a041c80 0000000000000000 dead000000000001 [ 277.138155][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 277.146843][ C1] head: 00fff00000000040 ffff88801a041c80 0000000000000000 dead000000000001 [ 277.155524][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 277.164404][ C1] head: 00fff00000000002 ffffea0000cbfd01 00000000ffffffff 00000000ffffffff [ 277.174053][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 277.182826][ C1] page dumped because: kasan: bad access detected [ 277.189346][ C1] page_owner tracks the page as allocated [ 277.195067][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5213, tgid 5213 (udevadm), ts 37316301520, free_ts 36979866351 [ 277.216014][ C1] post_alloc_hook+0x1d8/0x230 [ 277.220809][ C1] get_page_from_freelist+0x21ce/0x22b0 [ 277.226369][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 277.232188][ C1] alloc_pages_mpol+0x232/0x4a0 [ 277.237044][ C1] allocate_slab+0x8a/0x3b0 [ 277.241546][ C1] ___slab_alloc+0xbfc/0x1480 [ 277.246228][ C1] __kmalloc_cache_noprof+0x296/0x3d0 [ 277.251607][ C1] kernfs_fop_open+0x397/0xca0 [ 277.256375][ C1] do_dentry_open+0xdf0/0x1970 [ 277.261163][ C1] vfs_open+0x3b/0x340 [ 277.265238][ C1] path_openat+0x2ee5/0x3830 [ 277.269828][ C1] do_filp_open+0x1fa/0x410 [ 277.274334][ C1] do_sys_openat2+0x121/0x1c0 [ 277.279020][ C1] __x64_sys_openat+0x138/0x170 [ 277.283903][ C1] do_syscall_64+0xf6/0x210 [ 277.288429][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.294350][ C1] page last free pid 5207 tgid 5207 stack trace: [ 277.300685][ C1] __free_frozen_pages+0xb0e/0xcd0 [ 277.305817][ C1] __put_partials+0x161/0x1c0 [ 277.310514][ C1] put_cpu_partial+0x17c/0x250 [ 277.315297][ C1] __slab_free+0x2f7/0x400 [ 277.319725][ C1] qlist_free_all+0x9a/0x140 [ 277.324316][ C1] kasan_quarantine_reduce+0x148/0x160 [ 277.329779][ C1] __kasan_slab_alloc+0x22/0x80 [ 277.334636][ C1] kmem_cache_alloc_lru_noprof+0x1c6/0x3d0 [ 277.340449][ C1] shmem_alloc_inode+0x28/0x40 [ 277.345252][ C1] alloc_inode+0x67/0x1b0 [ 277.349623][ C1] new_inode+0x22/0x170 [ 277.353793][ C1] shmem_get_inode+0x346/0xe90 [ 277.358570][ C1] shmem_mknod+0x18c/0x3e0 [ 277.362998][ C1] path_openat+0x14f1/0x3830 [ 277.367614][ C1] do_filp_open+0x1fa/0x410 [ 277.372123][ C1] do_sys_openat2+0x121/0x1c0 [ 277.376814][ C1] [ 277.379134][ C1] Memory state around the buggy address: [ 277.384769][ C1] ffff888032ff5700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 277.392840][ C1] ffff888032ff5780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 277.400927][ C1] >ffff888032ff5800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 277.408996][ C1] ^ [ 277.414363][ C1] ffff888032ff5880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 277.422424][ C1] ffff888032ff5900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 277.430480][ C1] ================================================================== [ 277.438657][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 277.445875][ C1] CPU: 1 UID: 0 PID: 10579 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00163-ge8716b5b0dff #0 PREEMPT(full) [ 277.458133][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 277.468225][ C1] Call Trace: [ 277.471536][ C1] [ 277.474410][ C1] dump_stack_lvl+0x99/0x250 [ 277.479045][ C1] ? __asan_memcpy+0x40/0x70 [ 277.483674][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.489787][ C1] ? __pfx__printk+0x10/0x10 [ 277.494416][ C1] panic+0x2db/0x790 [ 277.498356][ C1] ? __pfx_panic+0x10/0x10 [ 277.502809][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 277.508739][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 277.514677][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 277.521030][ C1] ? print_memory_metadata+0x314/0x400 [ 277.526526][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 277.531679][ C1] check_panic_on_warn+0x89/0xb0 [ 277.536648][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 277.541794][ C1] end_report+0x78/0x160 [ 277.546073][ C1] kasan_report+0x129/0x150 [ 277.550613][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 277.555768][ C1] rose_timer_expiry+0x471/0x4b0 [ 277.560745][ C1] call_timer_fn+0x17b/0x5f0 [ 277.565373][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 277.570872][ C1] ? call_timer_fn+0xbe/0x5f0 [ 277.575602][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 277.580854][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 277.586084][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 277.591312][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 277.596808][ C1] __run_timer_base+0x61a/0x860 [ 277.601679][ C1] ? ktime_get+0x3e/0x1f0 [ 277.606021][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 277.611398][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 277.617655][ C1] run_timer_softirq+0xb7/0x180 [ 277.622511][ C1] handle_softirqs+0x283/0x870 [ 277.627290][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 277.632060][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 277.637379][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 277.642598][ C1] __irq_exit_rcu+0xca/0x1f0 [ 277.647191][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 277.652395][ C1] irq_exit_rcu+0x9/0x30 [ 277.656649][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 277.662298][ C1] [ 277.665231][ C1] [ 277.668165][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 277.674148][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 277.680652][ C1] Code: 74 05 e8 0b d3 6e f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 f3 54 38 f6 65 8b 05 5c d5 1c 07 85 c0 74 40 48 c7 04 24 0e 36 [ 277.700270][ C1] RSP: 0018:ffffc90003eded00 EFLAGS: 00000206 [ 277.706340][ C1] RAX: 57d486126e5a8d00 RBX: 0000000000000a06 RCX: 57d486126e5a8d00 [ 277.714313][ C1] RDX: 0000000000000006 RSI: ffffffff8d749ef1 RDI: 0000000000000001 [ 277.722283][ C1] RBP: ffffc90003eded90 R08: ffffffff8f7ed377 R09: 1ffffffff1efda6e [ 277.730254][ C1] R10: dffffc0000000000 R11: fffffbfff1efda6f R12: dffffc0000000000 [ 277.738227][ C1] R13: 0000000000000a06 R14: ffffffff8f2f6f60 R15: 1ffff920007dbda0 [ 277.746305][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 277.752654][ C1] ? linkwatch_urgent_event+0x62/0x3a0 [ 277.758128][ C1] linkwatch_fire_event+0x1dc/0x220 [ 277.763338][ C1] veth_newlink+0x5e3/0xa50 [ 277.767849][ C1] ? __pfx_veth_newlink+0x10/0x10 [ 277.772877][ C1] ? alloc_netdev_mqs+0xc9e/0x11e0 [ 277.777998][ C1] ? rtnl_newlink_create+0x258/0xaf0 [ 277.783368][ C1] ? rtnl_newlink+0x16d6/0x1c70 [ 277.788215][ C1] ? rtnetlink_rcv_msg+0x7cc/0xb70 [ 277.793329][ C1] ? netlink_unicast+0x758/0x8d0 [ 277.798282][ C1] ? netlink_sendmsg+0x805/0xb30 [ 277.803224][ C1] ? __sock_sendmsg+0x219/0x270 [ 277.808089][ C1] ? do_syscall_64+0xf6/0x210 [ 277.812772][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.818882][ C1] ? validate_linkmsg+0x765/0x950 [ 277.823934][ C1] ? __pfx_veth_newlink+0x10/0x10 [ 277.828964][ C1] rtnl_newlink_create+0x305/0xaf0 [ 277.834083][ C1] ? __mutex_lock+0x51b/0xe80 [ 277.838770][ C1] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 277.844409][ C1] ? rtnl_newlink+0x8db/0x1c70 [ 277.849180][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 277.854217][ C1] ? full_name_hash+0x92/0xe0 [ 277.858906][ C1] rtnl_newlink+0x16d6/0x1c70 [ 277.863597][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 277.868657][ C1] ? aa_get_newest_label+0xf7/0x5d0 [ 277.873860][ C1] ? __lock_acquire+0xaac/0xd20 [ 277.878752][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 277.883778][ C1] rtnetlink_rcv_msg+0x7cc/0xb70 [ 277.888716][ C1] ? kasan_save_track+0x4f/0x80 [ 277.893587][ C1] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 277.898702][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 277.904165][ C1] ? __lock_acquire+0xaac/0xd20 [ 277.909030][ C1] netlink_rcv_skb+0x219/0x490 [ 277.913802][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 277.919262][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 277.924560][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 277.929763][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 277.934966][ C1] netlink_unicast+0x758/0x8d0 [ 277.939745][ C1] netlink_sendmsg+0x805/0xb30 [ 277.944515][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.949806][ C1] ? aa_sock_msg_perm+0x94/0x160 [ 277.954748][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 277.960041][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.965333][ C1] __sock_sendmsg+0x219/0x270 [ 277.970026][ C1] __sys_sendto+0x3bd/0x520 [ 277.974539][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 277.979580][ C1] ? fput_close_sync+0x119/0x200 [ 277.984536][ C1] ? rcu_is_watching+0x15/0xb0 [ 277.989318][ C1] __x64_sys_sendto+0xde/0x100 [ 277.994089][ C1] do_syscall_64+0xf6/0x210 [ 277.998602][ C1] ? clear_bhb_loop+0x45/0xa0 [ 278.003288][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.009188][ C1] RIP: 0033:0x7f8df7d907fc [ 278.013605][ C1] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 278.033301][ C1] RSP: 002b:00007ffd24d009d0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 278.041721][ C1] RAX: ffffffffffffffda RBX: 00007f8df8ae4620 RCX: 00007f8df7d907fc [ 278.049693][ C1] RDX: 0000000000000064 RSI: 00007f8df8ae4670 RDI: 0000000000000003 [ 278.057675][ C1] RBP: 0000000000000000 R08: 00007ffd24d00a24 R09: 000000000000000c [ 278.065735][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 278.073709][ C1] R13: 0000000000000000 R14: 00007f8df8ae4670 R15: 0000000000000000 [ 278.081697][ C1] [ 278.085073][ C1] Kernel Offset: disabled [ 278.089408][ C1] Rebooting in 86400 seconds..