last executing test programs: 1m42.848705108s ago: executing program 4 (id=438): socket$can_j1939(0x1d, 0x2, 0x7) (async) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0xf0}}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x16, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000300)="465b3515", 0x4}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@delchain={0x5c, 0x65, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x5, 0x10}, {0x2, 0xb}, {0x1, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xe, 0x2}}, @TCA_FW_INDEV={0x14, 0x3, 'vlan1\x00'}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 1m42.134933726s ago: executing program 2 (id=962): ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x7, 'veth1_to_hsr\x00', {0x6}, 0x9}) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x80800) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000100)) r3 = socket$inet_udp(0x2, 0x2, 0x0) shutdown(r3, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000140)=0x10000, 0x4) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x10, r5, 0xf30cf000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000240), 0x4) r7 = accept$netrom(r5, &(0x7f0000000280)={{0x3, @rose}, [@default, @remote, @bcast, @remote, @rose, @remote, @bcast, @netrom]}, &(0x7f0000000300)=0x48) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000380)={r2, r7, 0x3, 0x3d, &(0x7f0000000340)="11b67323306fcf520878818a6a9fa2a073c2dc4b78f3d824b5545330650baaebfa6e6cbce1abe2c2b80c3b4d2bfde7dfaf85e7a87697193d64d1e8ba03", 0x4, 0x4, 0x660, 0x3, 0x92, 0x1, 0x3, 'syz0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x9) connect$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2711, @hyper}, 0x10) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCPNDELRESOURCE(r5, 0x89ef, &(0x7f0000000480)=0xab) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, 0x1, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8000000000000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) splice(r8, &(0x7f00000005c0)=0x1fe, r7, &(0x7f0000000600)=0x7, 0x1000, 0xa) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000680)={r9, r10/1000+60000}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@map=r5, 0xe, 0x0, 0x2, &(0x7f00000006c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x194, '\x00', 0x0, r5, 0x2, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r5, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000008c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x6, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x77, &(0x7f00000009c0)=[{}], 0x8, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0x88, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800)={@map=r13, 0xffffffffffffffff, 0x35, 0x20, 0x0, @void, @void, @void, @value=r14, r12}, 0x20) r16 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)={0x1b, 0x0, 0x0, 0x4, 0x0, r5, 0xfffffffd, '\x00', 0x0, r5, 0x4, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f40)=@bpf_ext={0x1c, 0x1f, &(0x7f0000000c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r16}}, {}, [@generic={0x6, 0x6, 0x3, 0x7, 0x2}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000d80)='syzkaller\x00', 0x7, 0x71, &(0x7f0000000dc0)=""/113, 0x40f00, 0x24, '\x00', r15, 0x0, r5, 0x8, &(0x7f0000000e40)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000e80)={0x0, 0x4, 0x78b7, 0xff}, 0x10, 0x3877, 0xffffffffffffffff, 0x2, &(0x7f0000000ec0)=[r5, r5, r11, r13], &(0x7f0000000f00)=[{0x5, 0x5, 0x5, 0x2}, {0x3, 0x3, 0x10, 0x9}], 0x10, 0x1, @void, @value}, 0x94) 1m27.073998258s ago: executing program 1 (id=1611): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0, 0x0, 0x20007fffffff}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x6) pipe(&(0x7f0000000080)={0xffffffffffffffff}) accept$unix(r1, &(0x7f0000000300), &(0x7f0000000140)=0x6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="d81300003d0007010000000000000000047c00000800088004000800b4130180b01310809b00", @ANYRES32=r2], 0x13d8}, 0x1, 0x0, 0x0, 0x40c0051}, 0xc000) 1m24.296289447s ago: executing program 2 (id=962): ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x7, 'veth1_to_hsr\x00', {0x6}, 0x9}) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x80800) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000100)) r3 = socket$inet_udp(0x2, 0x2, 0x0) shutdown(r3, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000140)=0x10000, 0x4) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x10, r5, 0xf30cf000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000240), 0x4) r7 = accept$netrom(r5, &(0x7f0000000280)={{0x3, @rose}, [@default, @remote, @bcast, @remote, @rose, @remote, @bcast, @netrom]}, &(0x7f0000000300)=0x48) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000380)={r2, r7, 0x3, 0x3d, &(0x7f0000000340)="11b67323306fcf520878818a6a9fa2a073c2dc4b78f3d824b5545330650baaebfa6e6cbce1abe2c2b80c3b4d2bfde7dfaf85e7a87697193d64d1e8ba03", 0x4, 0x4, 0x660, 0x3, 0x92, 0x1, 0x3, 'syz0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x9) connect$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2711, @hyper}, 0x10) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCPNDELRESOURCE(r5, 0x89ef, &(0x7f0000000480)=0xab) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, 0x1, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8000000000000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) splice(r8, &(0x7f00000005c0)=0x1fe, r7, &(0x7f0000000600)=0x7, 0x1000, 0xa) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000680)={r9, r10/1000+60000}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@map=r5, 0xe, 0x0, 0x2, &(0x7f00000006c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x194, '\x00', 0x0, r5, 0x2, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r5, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000008c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x6, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x77, &(0x7f00000009c0)=[{}], 0x8, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0x88, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800)={@map=r13, 0xffffffffffffffff, 0x35, 0x20, 0x0, @void, @void, @void, @value=r14, r12}, 0x20) r16 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)={0x1b, 0x0, 0x0, 0x4, 0x0, r5, 0xfffffffd, '\x00', 0x0, r5, 0x4, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f40)=@bpf_ext={0x1c, 0x1f, &(0x7f0000000c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r16}}, {}, [@generic={0x6, 0x6, 0x3, 0x7, 0x2}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000d80)='syzkaller\x00', 0x7, 0x71, &(0x7f0000000dc0)=""/113, 0x40f00, 0x24, '\x00', r15, 0x0, r5, 0x8, &(0x7f0000000e40)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000e80)={0x0, 0x4, 0x78b7, 0xff}, 0x10, 0x3877, 0xffffffffffffffff, 0x2, &(0x7f0000000ec0)=[r5, r5, r11, r13], &(0x7f0000000f00)=[{0x5, 0x5, 0x5, 0x2}, {0x3, 0x3, 0x10, 0x9}], 0x10, 0x1, @void, @value}, 0x94) 1m22.403207155s ago: executing program 4 (id=438): socket$can_j1939(0x1d, 0x2, 0x7) (async) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0xf0}}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x16, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000300)="465b3515", 0x4}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@delchain={0x5c, 0x65, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x5, 0x10}, {0x2, 0xb}, {0x1, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xe, 0x2}}, @TCA_FW_INDEV={0x14, 0x3, 'vlan1\x00'}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 1m11.511972456s ago: executing program 1 (id=1611): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0, 0x0, 0x20007fffffff}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x6) pipe(&(0x7f0000000080)={0xffffffffffffffff}) accept$unix(r1, &(0x7f0000000300), &(0x7f0000000140)=0x6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="d81300003d0007010000000000000000047c00000800088004000800b4130180b01310809b00", @ANYRES32=r2], 0x13d8}, 0x1, 0x0, 0x0, 0x40c0051}, 0xc000) 1m6.904630104s ago: executing program 2 (id=962): ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x7, 'veth1_to_hsr\x00', {0x6}, 0x9}) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x80800) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000100)) r3 = socket$inet_udp(0x2, 0x2, 0x0) shutdown(r3, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000140)=0x10000, 0x4) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x10, r5, 0xf30cf000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000240), 0x4) r7 = accept$netrom(r5, &(0x7f0000000280)={{0x3, @rose}, [@default, @remote, @bcast, @remote, @rose, @remote, @bcast, @netrom]}, &(0x7f0000000300)=0x48) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000380)={r2, r7, 0x3, 0x3d, &(0x7f0000000340)="11b67323306fcf520878818a6a9fa2a073c2dc4b78f3d824b5545330650baaebfa6e6cbce1abe2c2b80c3b4d2bfde7dfaf85e7a87697193d64d1e8ba03", 0x4, 0x4, 0x660, 0x3, 0x92, 0x1, 0x3, 'syz0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x9) connect$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2711, @hyper}, 0x10) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCPNDELRESOURCE(r5, 0x89ef, &(0x7f0000000480)=0xab) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, 0x1, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8000000000000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) splice(r8, &(0x7f00000005c0)=0x1fe, r7, &(0x7f0000000600)=0x7, 0x1000, 0xa) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000680)={r9, r10/1000+60000}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@map=r5, 0xe, 0x0, 0x2, &(0x7f00000006c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x194, '\x00', 0x0, r5, 0x2, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r5, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000008c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x6, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x77, &(0x7f00000009c0)=[{}], 0x8, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0x88, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800)={@map=r13, 0xffffffffffffffff, 0x35, 0x20, 0x0, @void, @void, @void, @value=r14, r12}, 0x20) r16 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)={0x1b, 0x0, 0x0, 0x4, 0x0, r5, 0xfffffffd, '\x00', 0x0, r5, 0x4, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f40)=@bpf_ext={0x1c, 0x1f, &(0x7f0000000c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r16}}, {}, [@generic={0x6, 0x6, 0x3, 0x7, 0x2}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000d80)='syzkaller\x00', 0x7, 0x71, &(0x7f0000000dc0)=""/113, 0x40f00, 0x24, '\x00', r15, 0x0, r5, 0x8, &(0x7f0000000e40)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000e80)={0x0, 0x4, 0x78b7, 0xff}, 0x10, 0x3877, 0xffffffffffffffff, 0x2, &(0x7f0000000ec0)=[r5, r5, r11, r13], &(0x7f0000000f00)=[{0x5, 0x5, 0x5, 0x2}, {0x3, 0x3, 0x10, 0x9}], 0x10, 0x1, @void, @value}, 0x94) 1m5.548619404s ago: executing program 4 (id=438): socket$can_j1939(0x1d, 0x2, 0x7) (async) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0xf0}}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x16, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000300)="465b3515", 0x4}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@delchain={0x5c, 0x65, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x5, 0x10}, {0x2, 0xb}, {0x1, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xe, 0x2}}, @TCA_FW_INDEV={0x14, 0x3, 'vlan1\x00'}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 51.687295083s ago: executing program 1 (id=1611): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0, 0x0, 0x20007fffffff}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x6) pipe(&(0x7f0000000080)={0xffffffffffffffff}) accept$unix(r1, &(0x7f0000000300), &(0x7f0000000140)=0x6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="d81300003d0007010000000000000000047c00000800088004000800b4130180b01310809b00", @ANYRES32=r2], 0x13d8}, 0x1, 0x0, 0x0, 0x40c0051}, 0xc000) 46.353332254s ago: executing program 2 (id=962): ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x7, 'veth1_to_hsr\x00', {0x6}, 0x9}) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x80800) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000100)) r3 = socket$inet_udp(0x2, 0x2, 0x0) shutdown(r3, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000140)=0x10000, 0x4) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x10, r5, 0xf30cf000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000240), 0x4) r7 = accept$netrom(r5, &(0x7f0000000280)={{0x3, @rose}, [@default, @remote, @bcast, @remote, @rose, @remote, @bcast, @netrom]}, &(0x7f0000000300)=0x48) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000380)={r2, r7, 0x3, 0x3d, &(0x7f0000000340)="11b67323306fcf520878818a6a9fa2a073c2dc4b78f3d824b5545330650baaebfa6e6cbce1abe2c2b80c3b4d2bfde7dfaf85e7a87697193d64d1e8ba03", 0x4, 0x4, 0x660, 0x3, 0x92, 0x1, 0x3, 'syz0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x9) connect$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2711, @hyper}, 0x10) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCPNDELRESOURCE(r5, 0x89ef, &(0x7f0000000480)=0xab) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, 0x1, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8000000000000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) splice(r8, &(0x7f00000005c0)=0x1fe, r7, &(0x7f0000000600)=0x7, 0x1000, 0xa) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000680)={r9, r10/1000+60000}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@map=r5, 0xe, 0x0, 0x2, &(0x7f00000006c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x194, '\x00', 0x0, r5, 0x2, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r5, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000008c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x6, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x77, &(0x7f00000009c0)=[{}], 0x8, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0x88, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800)={@map=r13, 0xffffffffffffffff, 0x35, 0x20, 0x0, @void, @void, @void, @value=r14, r12}, 0x20) r16 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)={0x1b, 0x0, 0x0, 0x4, 0x0, r5, 0xfffffffd, '\x00', 0x0, r5, 0x4, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f40)=@bpf_ext={0x1c, 0x1f, &(0x7f0000000c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r16}}, {}, [@generic={0x6, 0x6, 0x3, 0x7, 0x2}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000d80)='syzkaller\x00', 0x7, 0x71, &(0x7f0000000dc0)=""/113, 0x40f00, 0x24, '\x00', r15, 0x0, r5, 0x8, &(0x7f0000000e40)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000e80)={0x0, 0x4, 0x78b7, 0xff}, 0x10, 0x3877, 0xffffffffffffffff, 0x2, &(0x7f0000000ec0)=[r5, r5, r11, r13], &(0x7f0000000f00)=[{0x5, 0x5, 0x5, 0x2}, {0x3, 0x3, 0x10, 0x9}], 0x10, 0x1, @void, @value}, 0x94) 45.51025816s ago: executing program 4 (id=438): socket$can_j1939(0x1d, 0x2, 0x7) (async) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0xf0}}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x16, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000300)="465b3515", 0x4}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@delchain={0x5c, 0x65, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x5, 0x10}, {0x2, 0xb}, {0x1, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xe, 0x2}}, @TCA_FW_INDEV={0x14, 0x3, 'vlan1\x00'}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 33.197283734s ago: executing program 1 (id=1611): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0, 0x0, 0x20007fffffff}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x6) pipe(&(0x7f0000000080)={0xffffffffffffffff}) accept$unix(r1, &(0x7f0000000300), &(0x7f0000000140)=0x6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="d81300003d0007010000000000000000047c00000800088004000800b4130180b01310809b00", @ANYRES32=r2], 0x13d8}, 0x1, 0x0, 0x0, 0x40c0051}, 0xc000) 31.911251026s ago: executing program 2 (id=962): ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x7, 'veth1_to_hsr\x00', {0x6}, 0x9}) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x80800) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000100)) r3 = socket$inet_udp(0x2, 0x2, 0x0) shutdown(r3, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000140)=0x10000, 0x4) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x10, r5, 0xf30cf000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000240), 0x4) r7 = accept$netrom(r5, &(0x7f0000000280)={{0x3, @rose}, [@default, @remote, @bcast, @remote, @rose, @remote, @bcast, @netrom]}, &(0x7f0000000300)=0x48) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000380)={r2, r7, 0x3, 0x3d, &(0x7f0000000340)="11b67323306fcf520878818a6a9fa2a073c2dc4b78f3d824b5545330650baaebfa6e6cbce1abe2c2b80c3b4d2bfde7dfaf85e7a87697193d64d1e8ba03", 0x4, 0x4, 0x660, 0x3, 0x92, 0x1, 0x3, 'syz0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x9) connect$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2711, @hyper}, 0x10) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCPNDELRESOURCE(r5, 0x89ef, &(0x7f0000000480)=0xab) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, 0x1, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8000000000000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) splice(r8, &(0x7f00000005c0)=0x1fe, r7, &(0x7f0000000600)=0x7, 0x1000, 0xa) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000680)={r9, r10/1000+60000}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@map=r5, 0xe, 0x0, 0x2, &(0x7f00000006c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x194, '\x00', 0x0, r5, 0x2, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r5, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000008c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x6, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x77, &(0x7f00000009c0)=[{}], 0x8, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0x88, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800)={@map=r13, 0xffffffffffffffff, 0x35, 0x20, 0x0, @void, @void, @void, @value=r14, r12}, 0x20) r16 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)={0x1b, 0x0, 0x0, 0x4, 0x0, r5, 0xfffffffd, '\x00', 0x0, r5, 0x4, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f40)=@bpf_ext={0x1c, 0x1f, &(0x7f0000000c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r16}}, {}, [@generic={0x6, 0x6, 0x3, 0x7, 0x2}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000d80)='syzkaller\x00', 0x7, 0x71, &(0x7f0000000dc0)=""/113, 0x40f00, 0x24, '\x00', r15, 0x0, r5, 0x8, &(0x7f0000000e40)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000e80)={0x0, 0x4, 0x78b7, 0xff}, 0x10, 0x3877, 0xffffffffffffffff, 0x2, &(0x7f0000000ec0)=[r5, r5, r11, r13], &(0x7f0000000f00)=[{0x5, 0x5, 0x5, 0x2}, {0x3, 0x3, 0x10, 0x9}], 0x10, 0x1, @void, @value}, 0x94) 28.14155569s ago: executing program 4 (id=438): socket$can_j1939(0x1d, 0x2, 0x7) (async) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0xf0}}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x16, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000300)="465b3515", 0x4}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@delchain={0x5c, 0x65, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x5, 0x10}, {0x2, 0xb}, {0x1, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xe, 0x2}}, @TCA_FW_INDEV={0x14, 0x3, 'vlan1\x00'}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 15.915900048s ago: executing program 1 (id=1611): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0, 0x0, 0x20007fffffff}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x6) pipe(&(0x7f0000000080)={0xffffffffffffffff}) accept$unix(r1, &(0x7f0000000300), &(0x7f0000000140)=0x6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="d81300003d0007010000000000000000047c00000800088004000800b4130180b01310809b00", @ANYRES32=r2], 0x13d8}, 0x1, 0x0, 0x0, 0x40c0051}, 0xc000) 15.626816027s ago: executing program 2 (id=962): ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x7, 'veth1_to_hsr\x00', {0x6}, 0x9}) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x80800) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000100)) r3 = socket$inet_udp(0x2, 0x2, 0x0) shutdown(r3, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000140)=0x10000, 0x4) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x10, r5, 0xf30cf000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000240), 0x4) r7 = accept$netrom(r5, &(0x7f0000000280)={{0x3, @rose}, [@default, @remote, @bcast, @remote, @rose, @remote, @bcast, @netrom]}, &(0x7f0000000300)=0x48) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000380)={r2, r7, 0x3, 0x3d, &(0x7f0000000340)="11b67323306fcf520878818a6a9fa2a073c2dc4b78f3d824b5545330650baaebfa6e6cbce1abe2c2b80c3b4d2bfde7dfaf85e7a87697193d64d1e8ba03", 0x4, 0x4, 0x660, 0x3, 0x92, 0x1, 0x3, 'syz0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x9) connect$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2711, @hyper}, 0x10) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCPNDELRESOURCE(r5, 0x89ef, &(0x7f0000000480)=0xab) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, 0x1, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8000000000000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) splice(r8, &(0x7f00000005c0)=0x1fe, r7, &(0x7f0000000600)=0x7, 0x1000, 0xa) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000680)={r9, r10/1000+60000}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@map=r5, 0xe, 0x0, 0x2, &(0x7f00000006c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x194, '\x00', 0x0, r5, 0x2, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r5, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000008c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x6, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x77, &(0x7f00000009c0)=[{}], 0x8, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0x88, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800)={@map=r13, 0xffffffffffffffff, 0x35, 0x20, 0x0, @void, @void, @void, @value=r14, r12}, 0x20) r16 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)={0x1b, 0x0, 0x0, 0x4, 0x0, r5, 0xfffffffd, '\x00', 0x0, r5, 0x4, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f40)=@bpf_ext={0x1c, 0x1f, &(0x7f0000000c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r16}}, {}, [@generic={0x6, 0x6, 0x3, 0x7, 0x2}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000d80)='syzkaller\x00', 0x7, 0x71, &(0x7f0000000dc0)=""/113, 0x40f00, 0x24, '\x00', r15, 0x0, r5, 0x8, &(0x7f0000000e40)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000e80)={0x0, 0x4, 0x78b7, 0xff}, 0x10, 0x3877, 0xffffffffffffffff, 0x2, &(0x7f0000000ec0)=[r5, r5, r11, r13], &(0x7f0000000f00)=[{0x5, 0x5, 0x5, 0x2}, {0x3, 0x3, 0x10, 0x9}], 0x10, 0x1, @void, @value}, 0x94) 10.885517928s ago: executing program 4 (id=438): socket$can_j1939(0x1d, 0x2, 0x7) (async) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0xf0}}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x16, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000300)="465b3515", 0x4}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@delchain={0x5c, 0x65, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x5, 0x10}, {0x2, 0xb}, {0x1, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xe, 0x2}}, @TCA_FW_INDEV={0x14, 0x3, 'vlan1\x00'}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 2.954709399s ago: executing program 3 (id=2171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@const={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2, 0x0, 0x0, 0x12}, @typedef={0x4, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x0, 0x5f, 0x0, 0x61]}}, 0x0, 0x42, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) socket$kcm(0x2, 0xa, 0x2) (async) r2 = socket$kcm(0x2, 0xa, 0x2) socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet(0x2, 0x2, 0x1) (async) r5 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r5, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="08001efbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014"], 0x44}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000240)=@ipv4_delroute={0x1c, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {0x2, 0x20, 0x14, 0x98, 0xff, 0x2, 0xfd, 0x1, 0x1600}}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r4, @ANYRES16=0x0], 0xa0}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x400000000000235, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{}, {0xfffffffe}]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000400000000000000090000850000005400000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$phonet_pipe(0x23, 0x5, 0x2) (async) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$unix(r3, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101002, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000080)={'wlan0\x00', @broadcast}) (async) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000080)={'wlan0\x00', @broadcast}) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r9, 0x8916, 0x0) ioctl$sock_proto_private(r7, 0x8b21, &(0x7f0000000000)) (async) ioctl$sock_proto_private(r7, 0x8b21, &(0x7f0000000000)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002680)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a32000000009c000000060a010400000000000000000100000008000b400000000074000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000022205000200070000003c0001800a00010072656469720000002c000280080003400000001608000340000000240800014000000016080001400000000208000240000000080c0003400000000000000002140000001100010000000000000000000700000a"], 0x110}}, 0x0) 2.385182425s ago: executing program 3 (id=2174): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'tunl0\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x40, 0x7, 0x9b, 0x10001, {{0x27, 0x4, 0x3, 0x24, 0x9c, 0x66, 0x0, 0x9, 0x29, 0x0, @loopback, @private=0xa010101, {[@ssrr={0x89, 0x1f, 0xdf, [@private=0xa010100, @rand_addr=0x64010101, @private=0xa010100, @multicast1, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @cipso={0x86, 0x19, 0xffffffffffffffff, [{0x6, 0x4, "9a00"}, {0x6, 0x7, "9a2d5f16e0"}, {0x6, 0x8, "c2b65bf3cd0f"}]}, @timestamp={0x44, 0x14, 0xc1, 0x0, 0x9, [0x8, 0x7, 0xff, 0x8]}, @ssrr={0x89, 0x27, 0x34, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @loopback, @loopback, @empty, @remote, @multicast2, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xf}]}, @generic={0x86, 0xd, "f932f896028346925e9d5f"}, @lsrr={0x83, 0x7, 0xef, [@multicast2]}]}}}}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x3, [@fwd={0x6}, @struct={0x4, 0x2, 0x0, 0x4, 0x1, 0x6, [{0x80007, 0x1, 0x2}, {0x8, 0x4, 0x80000000}]}, @const={0xe}, @typedef={0xf, 0x0, 0x0, 0x8, 0x1}, @float={0x6, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x61]}}, &(0x7f0000000740)=""/4096, 0x6f, 0x1000, 0x1, 0x400, 0x0, @void, @value}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001800), &(0x7f0000001840)=r0}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=ANY=[@ANYBLOB="1d000000e63600000010000004000000a1040700", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000030000000400"/24, @ANYRES32, @ANYBLOB="9bb48d"], 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001940)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001a40)=@bpf_ext={0x1c, 0x0, &(0x7f0000000380), &(0x7f00000004c0)='syzkaller\x00', 0x2a8, 0x7c, &(0x7f0000000500)=""/124, 0x40f00, 0x1b, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000001780)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000017c0)={0x1, 0x8, 0x8, 0x3}, 0x10, 0x761, 0xffffffffffffffff, 0x3, &(0x7f00000019c0)=[r4, r5, r6], &(0x7f0000001a00)=[{0x4, 0x2, 0x7, 0xc}, {0x2, 0x2, 0xf, 0x89787c1d63263780}, {0x2, 0x5, 0xf, 0x5}], 0x10, 0x5, @void, @value}, 0x94) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f0000000140)=0x23, 0x4) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'veth0_macvtap\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff3}}}, 0x24}}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r13) r14 = socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r13, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000380)={'erspan0\x00', &(0x7f00000000c0)={'tunl0\x00', r8, 0x40, 0x7800, 0x10001, 0xa, {{0x5, 0x4, 0x0, 0x9, 0x14, 0x67, 0x40, 0xd, 0x0, 0x0, @loopback, @local}}}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r7, 0x8912, &(0x7f00000002c0)=@buf={0xffffffffffffffa3, &(0x7f0000001b80)="c73e005f46ff1ba74238a351e7f74c4755a42cb3217966be7e7e29eac7c9bce0eb5641b8055f0293b1a9190ad084397b78ef3a3f6e96b24dcec9d3b22c1efd18196b9935c261db9b22753728448122372529f3c646f0bc3233425a35574c9d328f80ac86cedb5b66981ab96fffa108974f8811f919d363c90264f6a8eacde87a0aab25ba6ff1789a8e5371bc0dd5ed48beb1cb55a5c5294b784d28bf9cde84348f2542"}) r15 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r14, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000fe8000000000000000833449155bf3c2640000000000000002000010"], 0xb8}, 0x1, 0x0, 0x0, 0x400c004}, 0x1c0) setsockopt$SO_TIMESTAMPING(r15, 0x1, 0x0, &(0x7f0000000040)=0x100, 0x4) sendmsg$nl_xfrm(r15, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) 1.52082833s ago: executing program 3 (id=2178): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000000)={0x2, &(0x7f0000000180)=[{0x4}, {0x6}]}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320002000514000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b0400000000000000000200000024000480200001800700010063740000140002800800014000000001080002400000001100000740de3dfdabdfc4c48d5df784aed00a369df3ddad3cc253422cdab3923aa380b430656608efd192873d56ef9c0a5ad2fa347f1a8a5debd20ca1b5c073eea8a87f3d0acaf32f3c8af7471d23641a72788e2eca04844f87f6143ce11abe133739adbf2cb5e040ba0916da6b8438715959210a3723c488a1a85a4174000000090002007379f00e44cd0000140000001100010000000000000000000000000a"], 0x78}}, 0x4040040) r3 = socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) splice(r4, 0x0, r5, 0x0, 0xe, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x8004800}, 0x10) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000280)={0x7, 0xffffffffffff9a9c, 0x5e7, 0x3, 0x200, 0x2}) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a0002000000836b00000000ac"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08004500001c0000f8ffff009078ac1e0001ac1414aa0300907803240000400000000000000000010000ac1414aaac1414008623000000000004e2560002020200058475be001073bc2300ad9d19a3000000000000860600000000000000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r8, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r6, 0x890b, &(0x7f0000000280)={0x1, @bcast, @bpq0, 0xffff, 'syz0\x00', @default, 0xfffffdba, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f0000000000)="abd9", 0x2}], 0x2) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f00000002c0)=0x2834be76, 0x4) setsockopt$inet_mreqsrc(r5, 0x0, 0x26, &(0x7f0000000300)={@empty, @multicast2, @empty}, 0xc) 735.792938ms ago: executing program 0 (id=2181): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x14, 0x80000) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) 730.419665ms ago: executing program 0 (id=2182): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000006c0)='ns/time\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x705e, 0x7, 0x5, 0xf7, 0x4}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c387dce", @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000000000000b0000000005001473797a3000000000"], 0x28}}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 646.934602ms ago: executing program 0 (id=2183): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb4, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x400c0d0}, 0x20000000) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), 0xffffffffffffffff) (rerun: 32) sendmsg$SMC_PNETID_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r1, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x84}, 0xc058) (async, rerun: 64) epoll_create(0x8) (async, rerun: 64) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r2, &(0x7f0000000300)="cb70a1fbf2dccb110998430b705f0eee528b4e4478cfde13235f38826c32d46536312e14a37fcb15237fa391fe6aa65209751f130274b001d3ca9f36e80a4966ef059373fdf81e68e0b7ac5eac41fdbc5b9d34f77c5384abd2b45fdf9ca1ec1240ec748fd1c26d7f7d5564589eb2fa718411745eb29baddb4c2eecfef37a2708480b20aa26f4ce989f2f723560e2178a72c0eb53e8467e4df263a14dd21fd300b52ca84e6c2a7c5bed87a8ee796596be7008c7649c11640db971e008a18cb8a40444767c13f9137700ea46677b490c5e17b478f6aeed", 0xd6, 0x804, &(0x7f0000000400)={0xa, 0x4e20, 0x7ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffff}, 0x1c) (async) r3 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000440)={{0x3, @rose}, [@null, @remote, @netrom, @remote, @bcast, @rose, @netrom, @rose]}, &(0x7f00000004c0)=0x48, 0x1800) recvfrom$netrom(r3, &(0x7f0000000500)=""/204, 0xcc, 0x2, &(0x7f0000000600)={{0x3, @null, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), r0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x60054) (async) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000007c0)={r2}) sendmsg$alg(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000800)="92d1f17876f62da8332123fc923bf761238df1796c2dce854e669921ebf76a9c25dcf85ea0cfd62a831682201f96db5d7e3cd1f713e49ebee2b3bc6cd281c1c376002cf346fd756fc166dea3a857358fa44ce5162fc6fa3fe6e189841b6b655b43cf918c3f7db7ee3879691ec061b9bda7050f835fc120126b62e2808cf9a944d1d803763995a78f78e2311320af8d70882d307a6952a19083121f0866d020365c4a9663dcf997cd04b317581ea87779cf030c1dc4dc224bfead3d921ee610b7324604354d423a0fbafc", 0xca}, {&(0x7f0000000900)="95cf81488aaffb55cf3b02db7f426c275568ea875ea557ebd3979ecac425", 0x1e}, {&(0x7f0000000940)="e96f1fbcee152f6829e864893bd32ac8ca42d1bce8a7d23955024dba6acdec9ba83e92f66e02dd83b09e883bc3b0b5363f3cd79fa1ea8ce32db9cbb6e1e32d4a0e1e141c8ae5c1c55abb4acda0f8cabfe05892a00090ba460180500cd9d11c37fe871017b3aed4f996dcfec18dd040b67f", 0x71}, {&(0x7f00000009c0)="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", 0x1000}, {&(0x7f00000019c0)="51d662faf3b95fb449db6a7b02a6d9193ba1c11952cc166469236d1e33b3e7dd3f54b01b384a60abca5ce95c94ac5ca0a057bf4767569cb9883167b6a9ce03c83e324c78fe76b11cca774a698f6726", 0x4f}, {&(0x7f0000001a40)="57034a39d3f429309d61d3e539edb1c2aa183435d7f4cdfdf44c2d2b5e657ec714a1dab2fe01d29341789d0d372704ebd5d28525e999", 0x36}, {&(0x7f0000001a80)="a0d20353655cb0e0f363439b9f2f9324e38cbe413d684df1893ef4a9e6e8177bdd551c3527dc54b99063a78f5b35f17340e5920b5a576c4b1fa55a6f4074d8a004ba6a6281ac5108db329f86a368e754c6dc6832ec653f6c334d5eca70bd4f30353c4f89bc0c269beaccab69e2fbb913a9d7d12b1638bed299e5dfb5e9e02a94d4a14232669f4946e8f808125b5214fcc3f75aec38fe7e", 0x97}, {&(0x7f0000001b40)="bc96b7fd1a33eeef9dc5543518d74db10310d5537d6cf60083d865399d634a50948b53ed22ef31fc96f431ecad92ef6b0195e35ca253d3edaa9253049407eb56eb3fa32c5c0411a6cfecaa680b9593cab40fec3d1c96a1788f9f5901d374f50c6aca3339e83c11ba65af7ae518955566eb8abad6aacd0985beb765abed9e169dbb9db5de3be83681c565da15ac97d135e993c6f5", 0x94}], 0x8, &(0x7f0000001c80)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18}, @iv={0x78, 0x117, 0x2, 0x5e, "20351091e817eb40c614dfc624b6d6cb47a3221d0c90029a00918f082d2c5d057bfe3649e75e1d567e29a173fe8872a31e8699b40fc5ef3e22298accc401399768a85c659a2ca11ecba1b214be759b1aaca4c58ba18b0e19baa01a42340b"}, @assoc={0x18, 0x117, 0x4, 0x200}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x70, 0x117, 0x2, 0x56, "97a1588580ea5ccdb4142817d50ce68c5e02c8df6e5a1a42d34748730de40911139d58e646074fa786a9cab5dfbfc61d567ac7c4cef5c6ad59b76c4fa9c69a7b37c58dad2cfe1826cddd2b5fd94826782a4ed52f40b0"}], 0x160}, 0x20040000) (async, rerun: 32) accept$inet(r5, &(0x7f0000001e40), &(0x7f0000001e80)=0x10) (async, rerun: 32) close(r3) sendmsg$nl_route_sched(r5, &(0x7f0000002080)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002040)={&(0x7f0000001f00)=@gettaction={0x10c, 0x32, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9000000}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}, @action_gd=@TCA_ACT_TAB={0x58, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4379}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4004}, 0x41) (async) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000020c0), &(0x7f0000002100)=0x14) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000002140), r6) (async) clock_gettime(0x0, &(0x7f0000005d80)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000002180)=""/174, 0xae}, {&(0x7f0000002240)=""/4096, 0x1000}], 0x2, &(0x7f0000003280)=""/167, 0xa7}, 0xff}, {{&(0x7f0000003340)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000004780)=[{&(0x7f00000033c0)=""/158, 0x9e}, {&(0x7f0000003480)=""/246, 0xf6}, {&(0x7f0000003580)=""/206, 0xce}, {&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000004680)=""/218, 0xda}], 0x5, &(0x7f0000004800)=""/92, 0x5c}, 0x3}, {{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000004880)=""/19, 0x13}, {&(0x7f00000048c0)=""/5, 0x5}, {&(0x7f0000004900)=""/17, 0x11}, {&(0x7f0000004940)=""/4096, 0x1000}], 0x4, &(0x7f0000005980)=""/90, 0x5a}}, {{0x0, 0x0, &(0x7f0000005c00)=[{&(0x7f0000005a00)=""/31, 0x1f}, {&(0x7f0000005a40)=""/149, 0x95}, {&(0x7f0000005b00)=""/32, 0x20}, {&(0x7f0000005b40)=""/179, 0xb3}], 0x4, &(0x7f0000005c40)=""/26, 0x1a}}], 0x4, 0x2010, &(0x7f0000005dc0)={r7, r8+10000000}) setsockopt$MRT_DONE(r3, 0x0, 0xc9, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000005e00), r6) (async) accept4(r3, 0x0, &(0x7f0000005e40), 0x0) (async) socket$key(0xf, 0x3, 0x2) (async, rerun: 64) r9 = socket(0x28, 0x5, 0x1) (async, rerun: 64) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), r5) sendmsg$NL80211_CMD_NEW_MPATH(r9, &(0x7f0000005fc0)={&(0x7f0000005e80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000005f80)={&(0x7f0000005f00)={0x5c, r10, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x15}, 0x4000000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000006140)={&(0x7f0000006000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000006100)={&(0x7f0000006080)={0x64, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040}, 0x40) 529.100653ms ago: executing program 3 (id=2184): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)="8fed8712a2406a771ea662500500000020000050c5deedbbb653c46a414a7a3bc01e1207008e", 0x26}, 0x1, 0x0, 0x0, 0x6000c084}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {0x6}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x5b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x18, r3}, 0x18) 355.265108ms ago: executing program 0 (id=2185): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffeed, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a32000000008c000000060a010400000000000000000100000008000b400000000064000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200070000002c0001800c00010062697477697365001c0002800800034000000004080001400000001408000240000400000900010073797a30"], 0x100}, 0x1, 0x0, 0x0, 0x24004050}, 0x0) 354.480399ms ago: executing program 3 (id=2186): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000), 0x4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x2) (async) r1 = socket$netlink(0x10, 0x3, 0x2) socket$l2tp6(0xa, 0x2, 0x73) (async) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r2, &(0x7f0000000080)="1fe24f48a0de0fe8f33dfecbc58f491b22e99ffec5639719ae99c51329896fbce504736bb61039", 0x27, 0x20000000, 0x0, 0x0) (async) sendto$l2tp6(r2, &(0x7f0000000080)="1fe24f48a0de0fe8f33dfecbc58f491b22e99ffec5639719ae99c51329896fbce504736bb61039", 0x27, 0x20000000, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000000c0)=""/42, &(0x7f0000000100)=0x2a) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f00000001c0), 0x4) socket$l2tp(0x2, 0x2, 0x73) (async) r4 = socket$l2tp(0x2, 0x2, 0x73) splice(r2, &(0x7f0000000200)=0x5, r4, &(0x7f0000000240)=0x13, 0x0, 0x0) r5 = socket(0x1e, 0x5, 0x2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000280), &(0x7f00000002c0)=0x4) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xd4, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x20040010) getpeername$l2tp(r4, &(0x7f00000004c0)={0x2, 0x0, @remote}, &(0x7f0000000500)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000540)={0x0, 0x5de3, 0x30}, &(0x7f0000000580)=0xc) setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f00000005c0)=@assoc_value={r6, 0x895}, 0x8) getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000600), &(0x7f0000000640)=0xc) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000600), &(0x7f0000000640)=0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r4}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r4, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000900)={'gre0\x00', &(0x7f0000000880)={'gre0\x00', 0x0, 0x7800, 0x7, 0x7, 0x78c, {{0xa, 0x4, 0x1, 0x30, 0x28, 0x64, 0x8, 0x5, 0x29, 0x0, @remote, @rand_addr=0x64010100, {[@cipso={0x86, 0x12, 0xffffffffffffffff, [{0x2, 0xc, "840b3142fbd992d2a604"}]}]}}}}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000009c0)={0xae7, 0x0}, 0x8) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a40)=@o_path={&(0x7f0000000a00)='./file0\x00', 0x0, 0xc000, r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x8, 0xf, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @alu={0x4, 0x0, 0x0, 0xb, 0x6, 0x10, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x5d}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}]}, &(0x7f0000000840)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x1, '\x00', r9, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000980)={0x3, 0x1, 0x2, 0x4}, 0x10, r10, 0xffffffffffffffff, 0x7, &(0x7f0000000a80)=[r11], &(0x7f0000000ac0)=[{0x0, 0x4, 0x2, 0xc}, {0x2, 0x5, 0x10, 0x6}, {0x4, 0x2, 0xa, 0x1}, {0x4, 0x4, 0x2, 0xa}, {0x4, 0x5, 0x0, 0xc}, {0x0, 0x2, 0xa, 0xa}, {0x5, 0x4, 0x6, 0xa}], 0x10, 0x8000, @void, @value}, 0x94) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)=@ipv6_getmulticast={0x14, 0x3a, 0x2, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) (async) sendmsg$nl_route(r12, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)=@ipv6_getmulticast={0x14, 0x3a, 0x2, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) getsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f0000000d00)=0xefd, &(0x7f0000000d40)=0x2) (async) getsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f0000000d00)=0xefd, &(0x7f0000000d40)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bind$l2tp6(r5, &(0x7f0000000d80)={0xa, 0x0, 0x300, @mcast2, 0x10001}, 0x20) (async) bind$l2tp6(r5, &(0x7f0000000d80)={0xa, 0x0, 0x300, @mcast2, 0x10001}, 0x20) 196.538324ms ago: executing program 0 (id=2187): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum]}, {0x0, [0x2e, 0x5f, 0xa0]}}, &(0x7f0000000200)=""/133, 0x29, 0x85, 0x1, 0x0, 0x0, @void, @value}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) splice(r2, 0x0, r3, &(0x7f00000002c0), 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c040}, 0x800) 56.857331ms ago: executing program 3 (id=2188): getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000000)=0x100) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000000)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1c17}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MTU={0x8, 0x4, 0x4c5}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1c17}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MTU={0x8, 0x4, 0x4c5}]}, 0x44}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$can_j1939(0x1d, 0x2, 0x7) (async) r5 = socket$can_j1939(0x1d, 0x2, 0x7) sendfile(r5, r1, &(0x7f00000000c0)=0x9, 0x401) syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaa88aaaaaaffffffffffff86dd6000000000140600fc010000000000d3a8bb440000000002fe8000000000000000000000000000aa0000c001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000990780000"], 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000200)={r0, @in6={{0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, 0x1}}, 0x9, 0xce88}, &(0x7f0000000080)=0x90) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000200)={r0, @in6={{0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, 0x1}}, 0x9, 0xce88}, &(0x7f0000000080)=0x90) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000400)={r0, @in6={{0xa, 0x4e20, 0x4, @empty, 0x8}}, 0x0, 0x4}, &(0x7f0000000300)=0x90) getsockopt$inet_mreqsrc(r6, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) 54.795516ms ago: executing program 0 (id=2189): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r2, 0x0, 0x0) (async) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt(r5, 0x0, 0x0, 0x0, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344, 0x41424344}, 0xc33, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd608a37f200142c00fe80000000000034fd942fb27a0000000000006765bbfe80000006000000000000000000", @ANYRES32=0x41424344, @ANYRES32=r9, @ANYBLOB="5020000090780000"], 0x0) (async) syz_extract_tcp_res$synack(&(0x7f0000000100)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x1ea, &(0x7f0000000780)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd6930560201b40600fe8000000000000000000000000000bbfc0200000000000000000000000000012f0000000000000087060000000000000401ff0718000000000407a9009d000000000000007e71000000000000c910ff020000000000000000000000000001c204000000010000002b00000000000000c204fffffffb00003a080000000000000738000000020cff070008000000000000000600000000000000f2ffffffffffffffff0100000000000001800000000000000100008000000000f8099a76e2ebc39f3d68870000004e244e22", @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="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"], 0x0) (async) pipe(0x0) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000ffdbdf250f00000005003300010000000800030012e1855ad3028a4119cbab3929647d419eeec68767cb175ad09ef98e4ed25675b0bf1456c16fc266b6f77bd72bb909fdfe6be3f64648115587507b090d61464ad02e4132f8934fb34405e6c13d7c0640923ffb80fedc59a451c36d45b015bd5f6bf12c51c411290eaae41c6d0a2acd14a7c61deff5a5ae60cfccafca8bcddefcd21bd46d383252dde50c21ad64b72b34775ed753a44e007b92f40c", @ANYRES32=r7, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x8000000, {0x0, 0x0, 0x0, r3, {0x1f, 0x3}, {0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x0) (async) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x9c}}, 0x8014) 0s ago: executing program 1 (id=1611): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0, 0x0, 0x20007fffffff}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x6) pipe(&(0x7f0000000080)={0xffffffffffffffff}) accept$unix(r1, &(0x7f0000000300), &(0x7f0000000140)=0x6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="d81300003d0007010000000000000000047c00000800088004000800b4130180b01310809b00", @ANYRES32=r2], 0x13d8}, 0x1, 0x0, 0x0, 0x40c0051}, 0xc000) kernel console output (not intermixed with test programs): 9][ T8914] veth0_macvtap: left promiscuous mode [ 355.259948][ T8914] veth1_vlan: left promiscuous mode [ 355.265590][ T8914] veth0_vlan: left promiscuous mode [ 355.272109][ T8914] veth1_macvtap: left promiscuous mode [ 355.278161][ T8914] veth0_macvtap: left promiscuous mode [ 355.283881][ T8914] veth1_vlan: left promiscuous mode [ 355.289296][ T8914] veth0_vlan: left promiscuous mode [ 355.403382][ T5146] Bluetooth: hci0: command tx timeout [ 355.866345][ T8914] team0 (unregistering): Port device team_slave_1 removed [ 355.916001][ T8914] team0 (unregistering): Port device team_slave_0 removed [ 356.686754][ T5146] Bluetooth: hci4: command tx timeout [ 356.771690][ T8914] team0 (unregistering): Port device team_slave_1 removed [ 356.819035][ T8914] team0 (unregistering): Port device team_slave_0 removed [ 357.089693][ T5146] Bluetooth: hci3: command tx timeout [ 357.272937][T13576] chnl_net:caif_netlink_parms(): no params data found [ 357.492473][T13624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.506376][T13622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.613585][T13511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.672829][T13576] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.681888][T13576] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.706673][T13576] bridge_slave_0: entered allmulticast mode [ 357.718202][T13576] bridge_slave_0: entered promiscuous mode [ 357.727536][T13576] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.744009][T13576] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.751276][T13576] bridge_slave_1: entered allmulticast mode [ 357.778189][T13576] bridge_slave_1: entered promiscuous mode [ 357.782175][T13635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1901'. [ 357.918708][T13576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.929409][T13637] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1901'. [ 357.942950][T13637] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1901'. [ 357.956885][T13576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.099504][T13643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1903'. [ 358.116786][T13576] team0: Port device team_slave_0 added [ 358.130963][T13576] team0: Port device team_slave_1 added [ 358.178280][T13645] netlink: 'syz.0.1904': attribute type 18 has an invalid length. [ 358.267828][T13552] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 358.316999][T13576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.332830][T13576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.340535][T13651] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 358.360073][T13576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.379796][T13652] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 358.389537][T13552] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 358.428971][T13576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.453320][T13576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.494317][T13576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.582181][T13661] netlink: 'syz.0.1908': attribute type 1 has an invalid length. [ 358.592627][T13552] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 358.619193][T13552] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 358.642318][T13511] veth0_vlan: entered promiscuous mode [ 358.674271][T13662] batadv1: entered allmulticast mode [ 358.696377][T13661] bond9: entered promiscuous mode [ 358.701431][T13661] bond9: entered allmulticast mode [ 358.721925][T13576] hsr_slave_0: entered promiscuous mode [ 358.729190][T13576] hsr_slave_1: entered promiscuous mode [ 358.744396][T13576] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 358.758780][T13576] Cannot create hsr debugfs directory [ 358.765355][ T5146] Bluetooth: hci4: command tx timeout [ 358.881618][T13511] veth1_vlan: entered promiscuous mode [ 359.126146][T13674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1912'. [ 359.163865][ T5146] Bluetooth: hci3: command tx timeout [ 359.258686][T13511] veth0_macvtap: entered promiscuous mode [ 359.313083][T13511] veth1_macvtap: entered promiscuous mode [ 359.342012][T13668] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1909'. [ 359.480739][T13511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.495214][T13511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.498271][T13668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1909'. [ 359.506432][T13511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.526269][T13511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.537978][T13511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.549938][T13511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.562355][T13511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.589825][T13511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.600574][T13511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.611070][T13511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.622007][T13511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.631970][T13511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.650574][T13511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.670852][T13511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.686407][T13552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.699790][T13676] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 359.740044][T13511] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.765799][T13511] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.774840][T13511] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.793651][T13511] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.818541][T13552] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.915989][ T8867] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.923248][ T8867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.065868][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.073016][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.268857][ T8867] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.280196][ T8867] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.407338][T13576] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 360.442185][T13576] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 360.486440][ T8131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.511344][ T8131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.519617][T13576] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 360.553697][T13576] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 360.719131][T13705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1918'. [ 360.741549][T13705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1918'. [ 360.843848][ T5146] Bluetooth: hci4: command tx timeout [ 360.872272][T13576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.001738][T13576] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.029442][T13552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.060508][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.067706][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.073112][T13718] netlink: 576 bytes leftover after parsing attributes in process `syz.0.1920'. [ 361.130093][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.137326][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.271465][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.428945][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.450537][T13552] veth0_vlan: entered promiscuous mode [ 361.522319][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.562470][T13552] veth1_vlan: entered promiscuous mode [ 361.618040][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.672310][T13552] veth0_macvtap: entered promiscuous mode [ 361.686425][T13552] veth1_macvtap: entered promiscuous mode [ 361.706770][T13576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.725379][T13552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.754440][T13552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.773030][T13552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.784267][T13552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.814046][T13552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.826457][T13552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.838623][T13552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.849658][T13552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.861642][T13552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.874944][T13552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.887391][T13552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.898146][T13552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.909345][T13552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.919818][T13552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.930785][T13552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.941144][T13552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.952647][T13552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.965439][T13552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.997425][T13552] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.019545][T13552] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.034409][T13552] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.051799][T13552] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.204935][ T52] bridge_slave_1: left allmulticast mode [ 362.210723][ T52] bridge_slave_1: left promiscuous mode [ 362.247546][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.283974][T13735] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1923'. [ 362.298291][ T52] bridge_slave_0: left allmulticast mode [ 362.309260][ T52] bridge_slave_0: left promiscuous mode [ 362.317201][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.494074][T13742] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.1924'. [ 362.728868][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 362.742778][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 362.793857][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 362.793894][T13750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1926'. [ 362.816650][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 362.833006][ T5846] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 362.842595][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 362.862453][T13753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1926'. [ 363.002097][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.016064][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.027976][ T52] bond0 (unregistering): Released all slaves [ 363.060438][T13750] bridge_slave_1: left allmulticast mode [ 363.071138][T13750] bridge_slave_1: left promiscuous mode [ 363.081704][T13750] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.117927][T13750] bridge_slave_0: left allmulticast mode [ 363.132771][T13750] bridge_slave_0: left promiscuous mode [ 363.141160][T13750] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.195318][T13750] .: (slave bridge0): Releasing backup interface [ 363.552788][ T8867] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.565006][ T8867] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.582318][T13576] veth0_vlan: entered promiscuous mode [ 363.717877][T13576] veth1_vlan: entered promiscuous mode [ 363.773011][ T3011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.804820][T13772] Bluetooth: MGMT ver 1.23 [ 363.806916][ T3011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.842512][T13772] syzkaller1: entered promiscuous mode [ 363.848149][T13772] syzkaller1: entered allmulticast mode [ 363.977624][T13576] veth0_macvtap: entered promiscuous mode [ 364.016549][T13576] veth1_macvtap: entered promiscuous mode [ 364.065984][T13576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.079951][T13576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.090155][T13576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.101343][T13576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.112443][T13576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.124962][T13576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.136251][T13576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.147973][T13576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.158516][T13576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.170044][T13576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.182255][T13576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.232549][ T52] hsr_slave_0: left promiscuous mode [ 364.246369][ T52] hsr_slave_1: left promiscuous mode [ 364.252797][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.261873][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.272051][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.279797][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.318149][ T52] veth1_macvtap: left promiscuous mode [ 364.329930][ T52] veth0_macvtap: left promiscuous mode [ 364.335781][ T52] veth1_vlan: left promiscuous mode [ 364.341251][ T52] veth0_vlan: left promiscuous mode [ 364.821240][ T52] team0 (unregistering): Port device team_slave_1 removed [ 364.889560][ T52] team0 (unregistering): Port device team_slave_0 removed [ 364.924100][ T5146] Bluetooth: hci0: command tx timeout [ 365.111918][T13787] gretap0: hsr_addr_subst_dest: Unknown node [ 365.122829][T13787] batadv_slave_1: hsr_addr_subst_dest: Unknown node [ 365.560231][T13790] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1935'. [ 365.570172][T13790] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1935'. [ 365.582574][T13576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.594658][T13576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.604649][T13576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.615351][T13576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.625578][T13576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.636158][T13576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.646671][T13576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.657617][T13576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.668755][T13576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.745023][T13576] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.764063][T13576] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.772815][T13576] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.796505][T13576] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.231475][T13748] chnl_net:caif_netlink_parms(): no params data found [ 366.293344][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.301783][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.421850][ T3011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.422920][T13748] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.437797][T13748] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.446424][T13748] bridge_slave_0: entered allmulticast mode [ 366.454113][ T3011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.454874][T13748] bridge_slave_0: entered promiscuous mode [ 366.476783][T13748] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.484264][T13748] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.491445][T13748] bridge_slave_1: entered allmulticast mode [ 366.500080][T13748] bridge_slave_1: entered promiscuous mode [ 366.550830][T13748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.638596][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.667738][T13748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.740135][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.762825][T13748] team0: Port device team_slave_0 added [ 366.772233][T13748] team0: Port device team_slave_1 added [ 366.799920][T13748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.807284][T13748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.835848][T13748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.868623][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.882743][T13748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.892209][T13748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.919991][T13748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.973944][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.003987][ T5146] Bluetooth: hci0: command tx timeout [ 367.050825][T13748] hsr_slave_0: entered promiscuous mode [ 367.069688][T13748] hsr_slave_1: entered promiscuous mode [ 367.084840][T13748] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.092452][T13748] Cannot create hsr debugfs directory [ 367.386236][ T52] bridge_slave_1: left allmulticast mode [ 367.391947][ T52] bridge_slave_1: left promiscuous mode [ 367.399067][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.416717][ T52] bridge_slave_0: left allmulticast mode [ 367.422428][ T52] bridge_slave_0: left promiscuous mode [ 367.437653][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.634105][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 367.645750][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 367.656895][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 367.666715][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 367.674863][ T5846] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 367.684970][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 367.982636][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.997177][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.008305][ T52] bond0 (unregistering): Released all slaves [ 368.526863][ T52] hsr_slave_0: left promiscuous mode [ 368.532936][ T52] hsr_slave_1: left promiscuous mode [ 368.540074][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.549507][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.558779][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.567099][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.593083][ T52] veth1_macvtap: left promiscuous mode [ 368.599627][ T52] veth0_macvtap: left promiscuous mode [ 368.606204][ T52] veth1_vlan: left promiscuous mode [ 368.611550][ T52] veth0_vlan: left promiscuous mode [ 369.087548][ T5146] Bluetooth: hci0: command tx timeout [ 369.385161][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 369.395833][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 369.404380][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 369.422855][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 369.430814][ T5846] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 369.438475][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 369.509082][ T52] team0 (unregistering): Port device team_slave_1 removed [ 369.559301][ T52] team0 (unregistering): Port device team_slave_0 removed [ 369.723918][ T5846] Bluetooth: hci3: command tx timeout [ 370.185132][T13748] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 370.232698][T13748] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 370.308591][T13748] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 370.336662][T13815] chnl_net:caif_netlink_parms(): no params data found [ 370.417091][T13748] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 370.751752][T13815] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.786053][T13815] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.803132][T13815] bridge_slave_0: entered allmulticast mode [ 370.816224][T13815] bridge_slave_0: entered promiscuous mode [ 370.854751][T13815] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.874337][T13815] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.881744][T13815] bridge_slave_1: entered allmulticast mode [ 370.889360][T13815] bridge_slave_1: entered promiscuous mode [ 370.916302][T13860] bond0: (slave syz_tun): Releasing backup interface [ 370.934977][T13860] bond0: (slave syz_tun): the permanent HWaddr of slave - aa:aa:aa:aa:aa:aa - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 370.968897][T13860] batman_adv: batadv0: Removing interface: dummy0 [ 370.986909][T13860] bond0: (slave batadv0): Releasing backup interface [ 371.051918][T13860] bond9: (slave ip6erspan0): Releasing active interface [ 371.067572][T13860] ip6erspan0: left allmulticast mode [ 371.105587][T13860] bond0: (slave bond11): Releasing backup interface [ 371.126524][T13860] bond13: (slave gretap1): Releasing active interface [ 371.167682][ T5846] Bluetooth: hci0: command tx timeout [ 371.228864][T13861] team0: Mode changed to "loadbalance" [ 371.260092][T13815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.294649][T13815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.493304][ T5846] Bluetooth: hci4: command tx timeout [ 371.538580][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.580463][T13815] team0: Port device team_slave_0 added [ 371.595932][T13815] team0: Port device team_slave_1 added [ 371.710601][T13877] 8021q: adding VLAN 0 to HW filter on device bond10 [ 371.727342][T13877] bond0: (slave bond10): Enslaving as an active interface with an up link [ 371.774711][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.803353][ T5846] Bluetooth: hci3: command tx timeout [ 371.820638][T13879] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1953'. [ 371.990320][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.028157][T13894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1957'. [ 372.040513][T13815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.050345][T13894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1957'. [ 372.060125][T13815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.087462][T13815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.107264][T13748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.219163][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.247883][T13815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.257667][T13815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.284514][T13815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.300157][T13901] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1960'. [ 372.354868][T13832] chnl_net:caif_netlink_parms(): no params data found [ 372.418015][T13815] hsr_slave_0: entered promiscuous mode [ 372.431619][T13815] hsr_slave_1: entered promiscuous mode [ 372.438427][T13815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 372.447164][T13815] Cannot create hsr debugfs directory [ 372.496770][T13748] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.659348][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.666552][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.700152][ T3011] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.707335][ T3011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.941986][T13913] bond0 (unregistering): Released all slaves [ 373.012854][ T52] bridge_slave_1: left allmulticast mode [ 373.019031][ T52] bridge_slave_1: left promiscuous mode [ 373.026026][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.036732][ T52] bridge_slave_0: left allmulticast mode [ 373.042483][ T52] bridge_slave_0: left promiscuous mode [ 373.049170][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.512611][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.525833][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.540077][ T52] bond0 (unregistering): Released all slaves [ 373.559568][T13832] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.573884][ T5846] Bluetooth: hci4: command tx timeout [ 373.578893][T13832] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.611665][T13832] bridge_slave_0: entered allmulticast mode [ 373.632190][T13832] bridge_slave_0: entered promiscuous mode [ 373.668367][T13832] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.693289][T13832] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.714733][T13832] bridge_slave_1: entered allmulticast mode [ 373.721508][T13832] bridge_slave_1: entered promiscuous mode [ 373.785741][T13921] tipc: Started in network mode [ 373.790671][T13921] tipc: Node identity ae3d7289f94, cluster identity 192 [ 373.802259][T13921] tipc: Enabled bearer , priority 0 [ 373.893638][ T5846] Bluetooth: hci3: command tx timeout [ 373.948636][T13922] syzkaller0: entered promiscuous mode [ 373.954984][T13922] syzkaller0: entered allmulticast mode [ 373.961039][T13922] tipc: Resetting bearer [ 373.974440][T13932] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1966'. [ 373.999446][T13832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.012920][T13748] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 374.025697][T13748] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 374.066653][T13917] tipc: Resetting bearer [ 374.904732][ T8138] tipc: Node number set to 1467839113 [ 375.653639][ T5846] Bluetooth: hci4: command tx timeout [ 375.973520][ T5846] Bluetooth: hci3: command tx timeout [ 376.226064][T13917] tipc: Disabling bearer [ 376.238913][T13832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.421687][T13832] team0: Port device team_slave_0 added [ 376.509964][T13943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1969'. [ 376.549940][T13943] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 376.582309][T13832] team0: Port device team_slave_1 added [ 376.795338][ T52] hsr_slave_0: left promiscuous mode [ 376.802186][ T52] hsr_slave_1: left promiscuous mode [ 376.809223][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.818113][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.828957][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.837749][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.880871][ T52] veth1_macvtap: left promiscuous mode [ 376.887190][ T52] veth0_macvtap: left promiscuous mode [ 376.892894][ T52] veth1_vlan: left promiscuous mode [ 376.899681][ T52] veth0_vlan: left promiscuous mode [ 377.603585][ T52] team0 (unregistering): Port device team_slave_1 removed [ 377.657922][ T52] team0 (unregistering): Port device team_slave_0 removed [ 377.725507][ T5846] Bluetooth: hci4: command tx timeout [ 378.155843][T13832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.162831][T13832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.189841][T13832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.216309][T13832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.225790][T13832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.253615][T13832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.457503][T13957] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1973'. [ 378.472225][T13832] hsr_slave_0: entered promiscuous mode [ 378.511594][T13832] hsr_slave_1: entered promiscuous mode [ 378.544086][T13832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 378.551862][T13832] Cannot create hsr debugfs directory [ 378.564027][ T5843] hid-generic 0005:0C45:100D.0005: item fetching failed at offset 0/1 [ 378.583128][ T5843] hid-generic 0005:0C45:100D.0005: probe with driver hid-generic failed with error -22 [ 378.637768][T13964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1974'. [ 378.745512][T13967] netlink: 'syz.0.1975': attribute type 39 has an invalid length. [ 378.776156][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.807505][T13748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.822054][T13969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1976'. [ 378.831893][T13969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1976'. [ 378.842783][T13969] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1976'. [ 378.987437][T13971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1977'. [ 379.015122][T13815] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 379.029007][T13815] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 379.081114][T13815] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 379.100393][T13815] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 379.140757][T13973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1978'. [ 379.169792][T13973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1978'. [ 379.173998][T13748] veth0_vlan: entered promiscuous mode [ 379.186931][T13975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1979'. [ 379.221080][T13748] veth1_vlan: entered promiscuous mode [ 379.412910][T13748] veth0_macvtap: entered promiscuous mode [ 379.456851][T13748] veth1_macvtap: entered promiscuous mode [ 379.476212][T13748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.487965][T13748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.498795][T13748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.518287][T13748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.550678][T13748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.571689][T13748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.596669][T13748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.689066][T13748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.701892][T13748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.726123][T13748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.740364][T13748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.751453][T13748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.762560][T13748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.787445][T13748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.809919][T13748] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.837386][T13748] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.847801][T13748] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.857443][T13748] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.012930][T13815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.081312][T13999] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 380.108537][T13815] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.125298][T13832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 380.159345][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.166504][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.195881][T13832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 380.218165][ T8131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.237876][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.241721][ T8131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.245084][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.261728][T13832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 380.290207][T14006] netlink: 'syz.0.1989': attribute type 13 has an invalid length. [ 380.308132][T13832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 380.316007][T14003] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1988'. [ 380.329682][T14006] macvtap0: entered allmulticast mode [ 380.378614][ T8867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.403845][ T8867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.452696][T13815] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 380.491223][T13815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 380.713649][T13832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.867321][T13832] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.918948][ T8867] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.926215][ T8867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.972738][ T8867] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.979940][ T8867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.162584][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.242804][T13815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.286562][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.342600][T13832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 381.390779][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.477614][T13815] veth0_vlan: entered promiscuous mode [ 381.508929][T13815] veth1_vlan: entered promiscuous mode [ 381.552611][T13832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.585274][T13815] veth0_macvtap: entered promiscuous mode [ 381.622147][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.649930][T13815] veth1_macvtap: entered promiscuous mode [ 381.705928][T13815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.720456][T13815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.731268][T13815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.742048][T13815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.755868][T13815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.767925][T13815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.778512][T13815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.789768][T13815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.801755][T13815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.828936][T13815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.851547][T13815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.864393][T13815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.884766][T13815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.903411][T13815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.926037][T13815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.936655][T13815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.948100][T13815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.976902][T13815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.998258][T13815] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.029853][T13815] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.080735][T13815] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.101840][T13815] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.384628][ T35] bridge_slave_1: left allmulticast mode [ 382.391532][ T35] bridge_slave_1: left promiscuous mode [ 382.410826][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.440300][ T35] bridge_slave_0: left allmulticast mode [ 382.458280][ T35] bridge_slave_0: left promiscuous mode [ 382.473121][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.638181][ T5146] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 382.648378][ T5146] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 382.660501][ T5146] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 382.672626][ T5146] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 382.696720][ T5146] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 382.707927][ T5146] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 383.228237][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.240416][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.256789][ T35] bond0 (unregistering): Released all slaves [ 383.287746][T14075] geneve2: entered promiscuous mode [ 383.395309][T13832] veth0_vlan: entered promiscuous mode [ 383.418502][T13832] veth1_vlan: entered promiscuous mode [ 383.765972][ T8867] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.804950][ T8867] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.837980][T13832] veth0_macvtap: entered promiscuous mode [ 384.019064][T13832] veth1_macvtap: entered promiscuous mode [ 384.052933][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.074643][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.085244][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.096845][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.107326][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.123234][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.141858][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.152962][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.163432][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.176811][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.188489][T13832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.221522][ T35] hsr_slave_0: left promiscuous mode [ 384.227996][ T35] hsr_slave_1: left promiscuous mode [ 384.233938][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.242355][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.250808][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.258501][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.286006][ T35] veth1_macvtap: left promiscuous mode [ 384.291740][ T35] veth0_macvtap: left promiscuous mode [ 384.297536][ T35] veth1_vlan: left promiscuous mode [ 384.303076][ T35] veth0_vlan: left promiscuous mode [ 384.763822][ T5846] Bluetooth: hci0: command tx timeout [ 384.789000][ T35] team0 (unregistering): Port device team_slave_1 removed [ 384.835441][ T35] team0 (unregistering): Port device team_slave_0 removed [ 385.344419][ T3011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.357937][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.374023][ T3011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.379594][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.420581][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.433183][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.443980][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.467090][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.483577][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.503569][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.524406][T13832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.609199][T13832] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.634159][T13832] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.643055][T13832] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.692969][T13832] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.171055][T14066] chnl_net:caif_netlink_parms(): no params data found [ 386.238363][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.253688][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.395232][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.403110][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.621558][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.788846][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.802036][T14066] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.811978][T14066] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.820208][T14066] bridge_slave_0: entered allmulticast mode [ 386.827716][T14066] bridge_slave_0: entered promiscuous mode [ 386.836865][T14066] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.844616][ T5846] Bluetooth: hci0: command tx timeout [ 386.850215][T14066] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.857600][T14066] bridge_slave_1: entered allmulticast mode [ 386.865050][T14066] bridge_slave_1: entered promiscuous mode [ 386.902658][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.956911][T14066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.014907][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.061903][T14066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.180175][T14143] openvswitch: netlink: Duplicate key (type 32). [ 387.199994][T14066] team0: Port device team_slave_0 added [ 387.217040][T14143] openvswitch: netlink: Duplicate key (type 32). [ 387.282788][T14066] team0: Port device team_slave_1 added [ 387.395588][T14066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.412068][T14066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.457398][T14066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.481952][ T52] bridge_slave_1: left allmulticast mode [ 387.490261][ T52] bridge_slave_1: left promiscuous mode [ 387.497561][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.507116][ T52] bridge_slave_0: left allmulticast mode [ 387.512807][ T52] bridge_slave_0: left promiscuous mode [ 387.519455][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.669765][ T5146] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 387.695708][ T5146] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 387.706334][ T5146] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 387.750912][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 387.759216][ T5837] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 387.767707][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 387.989950][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.002466][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.019320][ T52] bond0 (unregistering): Released all slaves [ 388.031785][T14066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.041483][T14066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.068603][T14066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.187482][T14066] hsr_slave_0: entered promiscuous mode [ 388.194637][T14066] hsr_slave_1: entered promiscuous mode [ 388.202319][T14066] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 388.211108][T14066] Cannot create hsr debugfs directory [ 388.552950][ T52] hsr_slave_0: left promiscuous mode [ 388.561914][ T52] hsr_slave_1: left promiscuous mode [ 388.571241][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.579488][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.587925][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.596091][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.624091][ T52] veth1_macvtap: left promiscuous mode [ 388.629662][ T52] veth0_macvtap: left promiscuous mode [ 388.635818][ T52] veth1_vlan: left promiscuous mode [ 388.641107][ T52] veth0_vlan: left promiscuous mode [ 388.938419][ T5846] Bluetooth: hci0: command tx timeout [ 389.026730][T14155] __nla_validate_parse: 5 callbacks suppressed [ 389.026768][T14155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2016'. [ 389.052686][T14155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2016'. [ 389.368343][ T52] team0 (unregistering): Port device team_slave_1 removed [ 389.368958][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 389.401328][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 389.411656][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 389.447459][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 389.456654][ T52] team0 (unregistering): Port device team_slave_0 removed [ 389.465155][ T5837] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 389.472578][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 389.888676][ T5846] Bluetooth: hci3: command tx timeout [ 389.986537][T14155] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 390.186431][T14172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2018'. [ 390.390380][T14150] chnl_net:caif_netlink_parms(): no params data found [ 390.463035][T14179] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 390.557166][T14183] openvswitch: netlink: VXLAN extension 0 has unexpected len 3 expected 0 [ 390.641469][T14150] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.649384][T14150] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.657220][T14150] bridge_slave_0: entered allmulticast mode [ 390.664841][T14150] bridge_slave_0: entered promiscuous mode [ 390.691075][T14150] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.699692][T14150] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.707626][T14150] bridge_slave_1: entered allmulticast mode [ 390.715733][T14150] bridge_slave_1: entered promiscuous mode [ 390.799822][T14150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.817561][T14150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.827265][T14066] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 390.838317][T14163] chnl_net:caif_netlink_parms(): no params data found [ 390.892482][T14066] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 390.937283][T14150] team0: Port device team_slave_0 added [ 390.945186][T14066] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 390.997528][T14150] team0: Port device team_slave_1 added [ 391.005247][ T5846] Bluetooth: hci0: command tx timeout [ 391.042695][T14066] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 391.097712][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.230719][T14150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.250762][T14150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.290098][T14150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.336708][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.394272][T14150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.401271][T14150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.450404][T14150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.488246][T14163] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.504428][T14163] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.519620][T14163] bridge_slave_0: entered allmulticast mode [ 391.528625][T14163] bridge_slave_0: entered promiscuous mode [ 391.564470][ T5846] Bluetooth: hci4: command tx timeout [ 391.575164][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.651109][T14163] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.659379][T14163] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.667566][T14163] bridge_slave_1: entered allmulticast mode [ 391.675464][T14163] bridge_slave_1: entered promiscuous mode [ 391.774212][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.847455][T14163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.865790][T14163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.900992][T14150] hsr_slave_0: entered promiscuous mode [ 391.924883][T14150] hsr_slave_1: entered promiscuous mode [ 391.944926][T14150] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 391.952563][T14150] Cannot create hsr debugfs directory [ 391.973997][ T5846] Bluetooth: hci3: command tx timeout [ 392.174824][T14163] team0: Port device team_slave_0 added [ 392.187362][T14213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2025'. [ 392.224019][T14200] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 392.254301][T14163] team0: Port device team_slave_1 added [ 392.385718][T14163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.404343][T14163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.464002][T14163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.517717][T14163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.537714][T14163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.614350][T14163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.669311][T14226] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2027'. [ 392.772871][T14227] netlink: 'syz.3.2027': attribute type 10 has an invalid length. [ 392.877213][T14163] hsr_slave_0: entered promiscuous mode [ 392.904298][T14163] hsr_slave_1: entered promiscuous mode [ 392.921258][T14163] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 392.944065][T14163] Cannot create hsr debugfs directory [ 393.024933][ T52] bridge_slave_1: left allmulticast mode [ 393.030744][ T52] bridge_slave_1: left promiscuous mode [ 393.054529][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.092955][ T52] bridge_slave_0: left allmulticast mode [ 393.101715][ T52] bridge_slave_0: left promiscuous mode [ 393.118223][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.347789][T14234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2030'. [ 393.643898][ T5846] Bluetooth: hci4: command tx timeout [ 393.652290][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.663854][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.676381][ T52] bond0 (unregistering): Released all slaves [ 393.777135][T14066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.966293][T14241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2032'. [ 394.005141][T14066] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.044231][ T5846] Bluetooth: hci3: command tx timeout [ 394.232292][T14252] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2035'. [ 394.396412][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.403774][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.545720][T14259] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2036'. [ 394.572210][ T8867] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.579411][ T8867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.615715][T14259] unsupported nlmsg_type 40 [ 394.664487][T14150] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 394.715219][T14150] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 394.829630][T14150] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 394.871937][T14268] netlink: 'syz.0.2038': attribute type 24 has an invalid length. [ 394.918152][ T52] hsr_slave_0: left promiscuous mode [ 394.954096][ T52] hsr_slave_1: left promiscuous mode [ 394.960327][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.979822][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.017515][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.029725][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.115409][ T52] veth1_macvtap: left promiscuous mode [ 395.127735][ T52] veth0_macvtap: left promiscuous mode [ 395.143781][ T52] veth1_vlan: left promiscuous mode [ 395.149159][ T52] veth0_vlan: left promiscuous mode [ 395.723875][ T5846] Bluetooth: hci4: command tx timeout [ 395.870967][ T52] team0 (unregistering): Port device team_slave_1 removed [ 395.922990][ T52] team0 (unregistering): Port device team_slave_0 removed [ 396.133097][ T5846] Bluetooth: hci3: command tx timeout [ 396.480887][T14150] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 396.494982][T14282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2043'. [ 396.568989][T14066] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 396.947305][T14150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.999579][T14066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.032366][T14150] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.088510][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.095693][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.177224][ T3011] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.184398][ T3011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.196676][T14302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2048'. [ 397.220840][ T5928] IPVS: starting estimator thread 0... [ 397.223474][T14305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2049'. [ 397.306857][T14163] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 397.324435][T14303] IPVS: using max 20 ests per chain, 48000 per kthread [ 397.351035][T14309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2049'. [ 397.428370][T14163] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 397.448288][T14163] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 397.471193][T14163] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 397.507539][T14066] veth0_vlan: entered promiscuous mode [ 397.549286][T14066] veth1_vlan: entered promiscuous mode [ 397.632638][T14066] veth0_macvtap: entered promiscuous mode [ 397.673371][T14066] veth1_macvtap: entered promiscuous mode [ 397.755047][T14066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.784031][T14066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.803191][T14066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.814793][ T5846] Bluetooth: hci4: command tx timeout [ 397.834199][T14066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.858206][T14066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.885069][T14066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.897937][T14066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.946738][T14066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.958245][T14066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.990481][T14066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.001744][T14066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.012791][T14066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.024101][T14066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.037064][T14066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.107464][T14066] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.118413][T14066] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.128864][T14066] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.142864][T14066] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.168426][T14150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.198151][T14163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.277412][T14163] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.345408][T14150] veth0_vlan: entered promiscuous mode [ 398.372343][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.379639][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.407844][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.415027][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.432272][T14150] veth1_vlan: entered promiscuous mode [ 398.465012][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.472989][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.537033][T14150] veth0_macvtap: entered promiscuous mode [ 398.588419][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.598777][T14150] veth1_macvtap: entered promiscuous mode [ 398.605024][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.642860][T14163] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 398.709773][T14150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.752626][T14150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.789646][T14150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.814508][T14150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.873855][T14150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.891906][T14150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.903114][T14150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.915814][T14150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.934976][T14150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.006599][T14150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.054483][T14150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.074784][T14150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.099378][T14150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.110994][T14150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.115676][T14357] ax25_connect(): syz.0.2059 uses autobind, please contact jreuter@yaina.de [ 399.124416][T14150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.141710][T14150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.154370][T14150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.168961][T14150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.299913][T14150] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.309960][T14150] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.322156][T14150] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.347185][T14150] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.368782][T14163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.435844][T14367] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2061'. [ 399.629716][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.819800][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.900450][ T8914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.934064][ T8914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.053136][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.120045][ T8867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.130325][ T8867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.217637][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.278029][T14163] veth0_vlan: entered promiscuous mode [ 400.291158][T14163] veth1_vlan: entered promiscuous mode [ 400.384395][T14163] veth0_macvtap: entered promiscuous mode [ 400.431067][T14163] veth1_macvtap: entered promiscuous mode [ 400.482287][ T11] bridge_slave_1: left allmulticast mode [ 400.488987][ T11] bridge_slave_1: left promiscuous mode [ 400.495592][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.506734][ T11] bridge_slave_0: left allmulticast mode [ 400.512405][ T11] bridge_slave_0: left promiscuous mode [ 400.519188][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.844859][T14389] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2063'. [ 401.165648][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 401.182171][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 401.197612][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 401.217482][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 401.226652][ T5837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 401.235627][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 401.319107][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.331754][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.349194][ T11] bond0 (unregistering): Released all slaves [ 401.364848][T14163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.376030][T14163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.386373][T14163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.397385][T14163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.407955][T14163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.418986][T14163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.429996][T14163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.440944][T14163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.451014][T14163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.471512][T14163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.482630][T14163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.527268][T14163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.543292][T14163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.558437][T14163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.578349][T14163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.589162][T14163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.599840][T14163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.609918][T14163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.621161][T14163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.632442][T14163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.643179][T14163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.662931][T14163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.705732][T14163] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.723794][T14163] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.743726][T14163] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.752471][T14163] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.009563][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.028974][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.170607][ T11] hsr_slave_0: left promiscuous mode [ 402.182441][ T11] hsr_slave_1: left promiscuous mode [ 402.188445][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.197011][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.206397][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.215036][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.243123][ T11] veth1_macvtap: left promiscuous mode [ 402.249635][ T11] veth0_macvtap: left promiscuous mode [ 402.256256][ T11] veth1_vlan: left promiscuous mode [ 402.261521][ T11] veth0_vlan: left promiscuous mode [ 402.587705][T14400] netlink: 'syz.3.2064': attribute type 1 has an invalid length. [ 402.596558][T14400] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2064'. [ 402.633896][T14400] syz.3.2064 (14400) used greatest stack depth: 17968 bytes left [ 402.780144][T14405] Bluetooth: MGMT ver 1.23 [ 402.960631][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 402.971834][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 402.992101][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 403.001905][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 403.010632][ T5837] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 403.028331][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 403.221819][T14415] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2068'. [ 403.259330][T14415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2068'. [ 403.324501][ T5846] Bluetooth: hci0: command tx timeout [ 403.332808][ T11] team0 (unregistering): Port device team_slave_1 removed [ 403.413411][ T11] team0 (unregistering): Port device team_slave_0 removed [ 403.921518][ T3011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.942037][ T3011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.071441][T14393] chnl_net:caif_netlink_parms(): no params data found [ 404.461451][T14393] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.469282][T14393] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.479787][T14393] bridge_slave_0: entered allmulticast mode [ 404.488683][T14393] bridge_slave_0: entered promiscuous mode [ 404.512398][T14393] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.520453][T14393] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.528352][T14393] bridge_slave_1: entered allmulticast mode [ 404.543813][T14393] bridge_slave_1: entered promiscuous mode [ 404.629989][T14393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.661977][T14393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.812828][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.860480][T14393] team0: Port device team_slave_0 added [ 404.888820][T14393] team0: Port device team_slave_1 added [ 404.931419][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.997737][T14393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.013834][T14393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.069276][T14393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.084017][ T5846] Bluetooth: hci3: command tx timeout [ 405.108989][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.138584][T14393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.146261][T14393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.172406][T14393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.188319][T14410] chnl_net:caif_netlink_parms(): no params data found [ 405.221404][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.306415][T14393] hsr_slave_0: entered promiscuous mode [ 405.313821][T14393] hsr_slave_1: entered promiscuous mode [ 405.320039][T14393] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 405.327922][T14393] Cannot create hsr debugfs directory [ 405.397957][T14410] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.405180][ T5846] Bluetooth: hci0: command tx timeout [ 405.412857][T14410] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.421381][T14410] bridge_slave_0: entered allmulticast mode [ 405.429650][T14410] bridge_slave_0: entered promiscuous mode [ 405.437909][T14410] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.445113][T14410] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.452276][T14410] bridge_slave_1: entered allmulticast mode [ 405.459826][T14410] bridge_slave_1: entered promiscuous mode [ 405.560667][T14410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.615992][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.637055][T14410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.708208][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.732294][T14410] team0: Port device team_slave_0 added [ 405.741499][T14410] team0: Port device team_slave_1 added [ 405.770986][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.851481][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.866516][T14410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.874583][T14410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.901676][T14410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.916693][T14410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.924619][T14410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.951746][T14410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.075776][T14410] hsr_slave_0: entered promiscuous mode [ 406.082106][T14410] hsr_slave_1: entered promiscuous mode [ 406.088671][T14410] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 406.097678][T14410] Cannot create hsr debugfs directory [ 406.169403][ T11] bridge_slave_1: left allmulticast mode [ 406.179669][ T11] bridge_slave_1: left promiscuous mode [ 406.187381][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.197151][ T11] bridge_slave_0: left allmulticast mode [ 406.202840][ T11] bridge_slave_0: left promiscuous mode [ 406.211154][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.221183][ T11] bridge_slave_1: left allmulticast mode [ 406.228127][ T11] bridge_slave_1: left promiscuous mode [ 406.235634][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.249780][ T11] bridge_slave_0: left allmulticast mode [ 406.256208][ T11] bridge_slave_0: left promiscuous mode [ 406.261888][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.058698][T14453] xt_l2tp: wrong L2TP version: 0 [ 407.111439][T14453] can: request_module (can-proto-0) failed. [ 407.163392][ T5846] Bluetooth: hci3: command tx timeout [ 407.205317][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.217691][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.229563][ T11] bond0 (unregistering): Released all slaves [ 407.364641][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 407.390061][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 407.400123][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 407.431656][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 407.444482][ T5837] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 407.446867][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.461382][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 407.469671][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.494824][ T5837] Bluetooth: hci0: command tx timeout [ 407.505762][ T11] bond0 (unregistering): Released all slaves [ 407.822192][T14472] ieee802154 phy1 wpan1: encryption failed: -22 [ 408.237518][T14484] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2083'. [ 408.257497][T14484] IPv6: NLM_F_CREATE should be specified when creating new route [ 408.458406][T14491] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2084'. [ 408.706049][T14393] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 408.927860][T14393] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 409.085834][T14393] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 409.109785][T14393] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 409.197676][ T11] hsr_slave_0: left promiscuous mode [ 409.209893][ T11] hsr_slave_1: left promiscuous mode [ 409.216340][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.224056][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.231963][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.240209][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.247993][ T5846] Bluetooth: hci3: command tx timeout [ 409.268544][ T11] hsr_slave_0: left promiscuous mode [ 409.280048][ T11] hsr_slave_1: left promiscuous mode [ 409.286775][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.295137][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.302958][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.311952][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.366089][ T11] veth1_macvtap: left promiscuous mode [ 409.371640][ T11] veth0_macvtap: left promiscuous mode [ 409.377919][ T11] veth1_vlan: left promiscuous mode [ 409.383865][ T11] veth0_vlan: left promiscuous mode [ 409.395740][ T11] veth1_macvtap: left promiscuous mode [ 409.401316][ T11] veth0_macvtap: left promiscuous mode [ 409.407770][ T11] veth1_vlan: left promiscuous mode [ 409.413091][ T11] veth0_vlan: left promiscuous mode [ 409.484242][ T5846] Bluetooth: hci4: command tx timeout [ 409.563271][ T5846] Bluetooth: hci0: command tx timeout [ 410.015279][ T11] team0 (unregistering): Port device team_slave_1 removed [ 410.062970][ T11] team0 (unregistering): Port device team_slave_0 removed [ 410.940792][ T11] team0 (unregistering): Port device team_slave_1 removed [ 410.994539][ T11] team0 (unregistering): Port device team_slave_0 removed [ 411.329089][ T5846] Bluetooth: hci3: command tx timeout [ 411.501274][T14467] chnl_net:caif_netlink_parms(): no params data found [ 411.527578][T14510] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2089'. [ 411.573926][ T5846] Bluetooth: hci4: command tx timeout [ 411.650569][ T5846] Bluetooth: hci0: command tx timeout [ 411.699496][T14519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2090'. [ 411.838948][T14467] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.851830][T14467] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.859621][T14467] bridge_slave_0: entered allmulticast mode [ 411.884665][T14467] bridge_slave_0: entered promiscuous mode [ 411.914683][T14467] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.942305][T14467] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.963538][T14467] bridge_slave_1: entered allmulticast mode [ 411.970948][T14467] bridge_slave_1: entered promiscuous mode [ 412.006041][T14532] netlink: 'syz.0.2093': attribute type 5 has an invalid length. [ 412.118162][T14467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.151382][T14467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.257070][T14467] team0: Port device team_slave_0 added [ 412.271178][T14410] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 412.312969][T14467] team0: Port device team_slave_1 added [ 412.320878][T14410] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 412.341384][T14410] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 412.452391][T14410] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 412.478338][T14467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.491857][T14467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.523100][T14467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.567065][T14467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.583806][T14467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.611095][T14467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.650270][T14393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.678397][T14539] tipc: Enabling of bearer rejected, failed to enable media [ 412.737524][T14467] hsr_slave_0: entered promiscuous mode [ 412.750828][T14467] hsr_slave_1: entered promiscuous mode [ 412.757868][T14467] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 412.766324][T14467] Cannot create hsr debugfs directory [ 412.794167][T14393] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.917317][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.924513][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.957082][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.960125][T14552] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2100'. [ 412.964265][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.259101][T14558] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2102'. [ 413.320373][T14410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.376956][T14558] pim6reg1: entered promiscuous mode [ 413.382807][T14558] pim6reg1: entered allmulticast mode [ 413.462694][T14410] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.478581][ T8131] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.485780][ T8131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.506068][T14563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.587361][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.594530][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.619090][T14393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.645165][ T5846] Bluetooth: hci4: command tx timeout [ 413.847216][T14393] veth0_vlan: entered promiscuous mode [ 413.855425][T14576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2105'. [ 413.885610][T14576] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2105'. [ 413.892272][T14393] veth1_vlan: entered promiscuous mode [ 413.988200][T14467] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 414.038372][T14467] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 414.086290][T14467] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 414.109181][T14467] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 414.176838][T14393] veth0_macvtap: entered promiscuous mode [ 414.226878][T14410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.264973][T14393] veth1_macvtap: entered promiscuous mode [ 414.341747][T14393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.355940][T14393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.367147][T14393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.378021][T14393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.390007][T14393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.401217][T14393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.412994][T14393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.431898][T14410] veth0_vlan: entered promiscuous mode [ 414.462034][T14393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.476003][T14393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.491313][T14393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.513574][T14393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.540249][T14393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.553049][T14393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.574147][T14393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.578189][T14599] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 414.586925][T14410] veth1_vlan: entered promiscuous mode [ 414.632036][T14393] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.654135][T14393] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.662898][T14393] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.691792][T14393] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.811423][T14467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.843316][T14607] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2114'. [ 414.902431][T14410] veth0_macvtap: entered promiscuous mode [ 414.940698][T14467] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.965962][T14410] veth1_macvtap: entered promiscuous mode [ 415.011618][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.036732][ T8914] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.043936][ T8914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.054448][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.148145][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.155334][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.187285][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.197214][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.198514][T14410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.229382][T14410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.234456][T14612] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 415.249741][T14410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.262171][T14410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.273302][T14410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.285627][T14410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.296391][T14410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.308177][T14410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.322535][T14410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.359664][T14410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.383299][T14410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.406974][T14410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.418139][T14410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.428907][T14410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.441086][T14410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.452308][T14410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.463785][T14410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.475895][T14410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.522536][T14410] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.531567][T14410] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.557464][T14410] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.574276][T14410] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.724871][ T5846] Bluetooth: hci4: command tx timeout [ 415.818009][ T5942] hid-generic 0005:0B57:0006.0006: item fetching failed at offset 0/1 [ 415.832144][ T5942] hid-generic 0005:0B57:0006.0006: probe with driver hid-generic failed with error -22 [ 415.972172][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.013663][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.121492][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.178691][T14635] veth0: entered promiscuous mode [ 416.221308][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.253197][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.325268][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.363257][T14635] veth0: left promiscuous mode [ 416.450521][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.531974][T14467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.572830][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.776365][ T52] bridge_slave_1: left allmulticast mode [ 416.782501][ T52] bridge_slave_1: left promiscuous mode [ 416.808655][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.822458][ T52] bridge_slave_0: left allmulticast mode [ 416.829423][ T52] bridge_slave_0: left promiscuous mode [ 416.851847][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.386336][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 417.404298][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 417.417610][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 417.452187][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 417.493947][ T5837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 417.509093][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 417.579703][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.591808][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.603616][ T52] bond0 (unregistering): Released all slaves [ 417.705122][T14467] veth0_vlan: entered promiscuous mode [ 417.807045][T14467] veth1_vlan: entered promiscuous mode [ 417.934495][T14467] veth0_macvtap: entered promiscuous mode [ 417.978153][T14467] veth1_macvtap: entered promiscuous mode [ 418.062065][T14467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.074436][T14467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.085599][T14467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.097094][T14467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.108214][T14467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.120074][T14467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.131331][T14467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.143027][T14467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.153689][T14467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.165311][T14467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.177126][T14467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.231675][ T52] hsr_slave_0: left promiscuous mode [ 418.237755][ T52] hsr_slave_1: left promiscuous mode [ 418.244750][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.252342][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.261159][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.269319][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.298161][ T52] veth1_macvtap: left promiscuous mode [ 418.304768][ T52] veth0_macvtap: left promiscuous mode [ 418.310336][ T52] veth1_vlan: left promiscuous mode [ 418.316817][ T52] veth0_vlan: left promiscuous mode [ 418.969262][ T52] team0 (unregistering): Port device team_slave_1 removed [ 419.032332][ T52] team0 (unregistering): Port device team_slave_0 removed [ 419.306606][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 419.318094][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 419.344152][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 419.352606][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 419.376950][ T5837] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 419.391356][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 419.569932][ T5846] Bluetooth: hci0: command tx timeout [ 419.769067][T14668] syz_tun: entered allmulticast mode [ 419.805761][T14467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.825011][T14467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.836061][T14467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.849971][T14467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.861304][T14467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.872199][T14467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.889692][T14467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.901117][T14467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.911389][T14677] openvswitch: netlink: Flow key attribute not present in set flow. [ 419.920735][T14467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.963241][T14666] syz_tun: left allmulticast mode [ 419.976941][T14467] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.005789][T14467] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.020168][T14467] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.050298][T14467] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.095910][T14655] chnl_net:caif_netlink_parms(): no params data found [ 420.499438][T14655] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.507309][T14655] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.515254][T14655] bridge_slave_0: entered allmulticast mode [ 420.522113][T14655] bridge_slave_0: entered promiscuous mode [ 420.559871][T14693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2134'. [ 420.571336][T14655] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.606450][T14655] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.613880][T14655] bridge_slave_1: entered allmulticast mode [ 420.621071][T14655] bridge_slave_1: entered promiscuous mode [ 420.679142][T14655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.709050][T14655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.854961][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.862844][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.933867][T14655] team0: Port device team_slave_0 added [ 421.006998][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.069120][T14655] team0: Port device team_slave_1 added [ 421.133003][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.204397][ T8131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.226727][T14655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.232581][ T8131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.234239][T14655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.269925][T14655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.295524][T14655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.302519][T14655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.329879][T14655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.364738][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.471675][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.484056][ T5846] Bluetooth: hci3: command tx timeout [ 421.577170][T14655] hsr_slave_0: entered promiscuous mode [ 421.591088][T14655] hsr_slave_1: entered promiscuous mode [ 421.598345][T14655] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 421.607040][T14655] Cannot create hsr debugfs directory [ 421.613573][T14671] chnl_net:caif_netlink_parms(): no params data found [ 421.644268][ T5846] Bluetooth: hci0: command tx timeout [ 421.800824][T14727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2142'. [ 421.822806][T14727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2142'. [ 421.833073][T14727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2142'. [ 421.956243][T14729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2142'. [ 421.967388][T14671] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.989200][T14729] netlink: 'syz.3.2142': attribute type 3 has an invalid length. [ 421.997426][T14671] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.020387][T14671] bridge_slave_0: entered allmulticast mode [ 422.028192][T14671] bridge_slave_0: entered promiscuous mode [ 422.040150][T14671] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.048881][T14671] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.057602][T14671] bridge_slave_1: entered allmulticast mode [ 422.065761][T14671] bridge_slave_1: entered promiscuous mode [ 422.072538][ T52] bridge_slave_1: left allmulticast mode [ 422.081712][ T52] bridge_slave_1: left promiscuous mode [ 422.088265][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.100816][ T52] bridge_slave_0: left allmulticast mode [ 422.111192][ T52] bridge_slave_0: left promiscuous mode [ 422.118497][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.510337][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.522343][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.534650][ T52] bond0 (unregistering): Released all slaves [ 422.552334][T14729] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.561779][T14729] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.571734][T14729] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.581407][T14729] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.671747][T14671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.698046][T14671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.779832][T14671] team0: Port device team_slave_0 added [ 422.838309][T14671] team0: Port device team_slave_1 added [ 422.950521][T14671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.958599][T14671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.986198][T14671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.071280][T14671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.093247][T14671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.119630][T14671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.182219][ T52] hsr_slave_0: left promiscuous mode [ 423.189371][ T52] hsr_slave_1: left promiscuous mode [ 423.195396][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.202829][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.215890][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.223911][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.257655][ T52] veth1_macvtap: left promiscuous mode [ 423.263588][ T52] veth0_macvtap: left promiscuous mode [ 423.269200][ T52] veth1_vlan: left promiscuous mode [ 423.274648][ T52] veth0_vlan: left promiscuous mode [ 423.579220][ T5846] Bluetooth: hci3: command tx timeout [ 423.723895][ T5846] Bluetooth: hci0: command tx timeout [ 423.792347][ T52] team0 (unregistering): Port device team_slave_1 removed [ 423.848174][ T52] team0 (unregistering): Port device team_slave_0 removed [ 424.513783][ T5146] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 424.538279][ T5146] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 424.550235][ T5146] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 424.566062][ T5146] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 424.574668][ T5146] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 424.584581][ T5146] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 424.749010][T14671] hsr_slave_0: entered promiscuous mode [ 424.756074][T14671] hsr_slave_1: entered promiscuous mode [ 424.762435][T14671] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 424.771958][T14671] Cannot create hsr debugfs directory [ 425.022371][T14752] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2148'. [ 425.374378][T14752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2148'. [ 425.394358][T14655] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 425.409930][T14655] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 425.500705][T14655] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 425.520960][T14655] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 425.646056][ T5837] Bluetooth: hci3: command tx timeout [ 425.682808][T14764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2153'. [ 425.804074][ T5837] Bluetooth: hci0: command tx timeout [ 425.824746][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.918149][T14770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2156'. [ 425.965009][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.976272][T14773] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2156'. [ 426.076325][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.119670][T14748] chnl_net:caif_netlink_parms(): no params data found [ 426.248605][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.284317][T14655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.467847][T14655] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.495828][T14793] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2161'. [ 426.511625][T14671] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 426.532233][T14671] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 426.555450][T14748] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.562674][T14748] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.584011][T14748] bridge_slave_0: entered allmulticast mode [ 426.601413][T14748] bridge_slave_0: entered promiscuous mode [ 426.602311][T14797] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2162'. [ 426.632459][T14798] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2162'. [ 426.636428][ T8914] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.648571][ T8914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.662558][T14671] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 426.675120][T14671] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 426.684553][ T5837] Bluetooth: hci4: command tx timeout [ 426.692465][T14748] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.700993][T14748] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.708800][T14748] bridge_slave_1: entered allmulticast mode [ 426.717624][T14748] bridge_slave_1: entered promiscuous mode [ 426.768889][ T8914] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.776104][ T8914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.859287][T14748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.872367][T14748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.904379][ T52] bridge_slave_1: left allmulticast mode [ 426.925450][ T52] bridge_slave_1: left promiscuous mode [ 426.931236][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.969968][ T52] bridge_slave_0: left allmulticast mode [ 426.983843][ T52] bridge_slave_0: left promiscuous mode [ 426.989674][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.401925][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.414372][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.427153][ T52] bond0 (unregistering): Released all slaves [ 427.480948][T14748] team0: Port device team_slave_0 added [ 427.511138][T14748] team0: Port device team_slave_1 added [ 427.657020][T14808] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2164'. [ 427.723792][ T5837] Bluetooth: hci3: command 0x0419 tx timeout [ 427.756133][T14748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.765158][T14748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.818912][T14748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.842630][T14748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.873613][T14748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.929663][T14748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.110772][T14748] hsr_slave_0: entered promiscuous mode [ 428.138420][T14748] hsr_slave_1: entered promiscuous mode [ 428.161287][T14748] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 428.170148][T14748] Cannot create hsr debugfs directory [ 428.206821][T14655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.306777][ T52] hsr_slave_0: left promiscuous mode [ 428.320700][ T52] hsr_slave_1: left promiscuous mode [ 428.327754][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.337661][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.346360][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.357247][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.388980][ T52] veth1_macvtap: left promiscuous mode [ 428.394663][ T52] veth0_macvtap: left promiscuous mode [ 428.400294][ T52] veth1_vlan: left promiscuous mode [ 428.406997][ T52] veth0_vlan: left promiscuous mode [ 428.763534][ T5846] Bluetooth: hci4: command tx timeout [ 428.969999][ T52] team0 (unregistering): Port device team_slave_1 removed [ 429.019764][ T52] team0 (unregistering): Port device team_slave_0 removed [ 429.524952][T14825] netlink: 'syz.3.2168': attribute type 33 has an invalid length. [ 429.745570][T14671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.804732][ T5846] Bluetooth: hci3: command 0x0419 tx timeout [ 429.822168][T14833] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2171'. [ 429.866019][T14836] netlink: 'syz.0.2172': attribute type 1 has an invalid length. [ 429.875352][T14655] veth0_vlan: entered promiscuous mode [ 429.894368][T14834] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.914338][T14834] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.986111][T14655] veth1_vlan: entered promiscuous mode [ 430.009943][T14837] 8021q: adding VLAN 0 to HW filter on device bond11 [ 430.027093][T14671] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.111914][T14836] veth11: entered promiscuous mode [ 430.138317][T14836] bond11: (slave veth11): Enslaving as a backup interface with a down link [ 430.179391][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.186635][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.229080][ T8131] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.236284][ T8131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.394952][T14851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2174'. [ 430.401987][T14671] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 430.432559][T14671] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 430.467760][T14655] veth0_macvtap: entered promiscuous mode [ 430.506978][T14655] veth1_macvtap: entered promiscuous mode [ 430.830238][T14856] tipc: Enabled bearer , priority 0 [ 430.844997][ T5846] Bluetooth: hci4: command tx timeout [ 430.874044][T14860] »»»»»»: renamed from syzkaller0 [ 430.896462][T14860] tipc: Disabling bearer [ 430.980658][T14655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.008286][T14655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.019856][T14655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.032041][T14655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.042876][T14655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.058174][T14655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.070347][T14655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.102369][T14655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.144332][T14655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.164306][T14655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.196735][T14655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.213868][T14655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.245019][T14655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.266336][T14655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.280398][T14885] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2178'. [ 431.328692][T14655] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.347789][T14655] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.361032][T14655] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.370694][T14655] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.411664][T14748] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 431.462324][T14671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.480382][T14748] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 431.507021][T14748] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 431.545954][T14748] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 431.720158][T14671] veth0_vlan: entered promiscuous mode [ 431.763953][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.771838][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.807706][T14671] veth1_vlan: entered promiscuous mode [ 431.833525][T14900] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2181'. [ 431.857058][ T8914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.869680][ T8914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.893621][ T5846] Bluetooth: hci3: command 0x0419 tx timeout [ 431.972060][T14671] veth0_macvtap: entered promiscuous mode [ 432.006562][T14671] veth1_macvtap: entered promiscuous mode [ 432.060314][T14671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.103362][T14671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.125295][T14671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.137032][T14671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.179109][T14671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.209075][T14671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.233023][T14671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.245836][T14671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.258259][T14671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.291701][T14748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.302715][T14671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.316640][T14671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.328673][T14671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.340186][T14671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.351614][T14671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.362659][T14671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.375667][T14671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.387048][T14671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.399485][T14671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.446258][T14748] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.550044][T14671] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.574462][T14671] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.593202][T14671] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.602046][T14671] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.636528][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.643706][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.852190][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.923557][ T5846] Bluetooth: hci4: command tx timeout [ 432.940076][ T8914] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.947265][ T8914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.055461][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.149735][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.192467][ T8914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.211602][ T8914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.232794][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.321965][ T3011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.341273][ T3011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.444105][ T52] bridge_slave_1: left allmulticast mode [ 433.449831][ T52] bridge_slave_1: left promiscuous mode [ 433.458177][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.474825][ T52] bridge_slave_0: left allmulticast mode [ 433.480527][ T52] bridge_slave_0: left promiscuous mode [ 433.504440][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.549874][T14671] ================================================================== [ 433.557997][T14671] BUG: KASAN: slab-use-after-free in sco_conn_put+0xad/0x210 [ 433.565423][T14671] Write of size 8 at addr ffff88804c1c25a0 by task syz-executor/14671 [ 433.573593][T14671] [ 433.575973][T14671] CPU: 0 UID: 0 PID: 14671 Comm: syz-executor Not tainted 6.13.0-syzkaller-09690-g3f1baa91a1fd #0 [ 433.575999][T14671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 433.576017][T14671] Call Trace: [ 433.576027][T14671] [ 433.576037][T14671] dump_stack_lvl+0x241/0x360 [ 433.576070][T14671] ? __pfx_dump_stack_lvl+0x10/0x10 [ 433.576092][T14671] ? __pfx__printk+0x10/0x10 [ 433.576124][T14671] ? _printk+0xd5/0x120 [ 433.576155][T14671] ? __virt_addr_valid+0x183/0x530 [ 433.576186][T14671] ? __virt_addr_valid+0x183/0x530 [ 433.576218][T14671] print_report+0x169/0x550 [ 433.576251][T14671] ? __virt_addr_valid+0x183/0x530 [ 433.576282][T14671] ? __virt_addr_valid+0x183/0x530 [ 433.576312][T14671] ? __virt_addr_valid+0x45f/0x530 [ 433.576342][T14671] ? __phys_addr+0xba/0x170 [ 433.576372][T14671] ? sco_conn_put+0xad/0x210 [ 433.576392][T14671] kasan_report+0x143/0x180 [ 433.576425][T14671] ? sco_conn_put+0xad/0x210 [ 433.576448][T14671] sco_conn_put+0xad/0x210 [ 433.576467][T14671] ? __pfx_sco_disconn_cfm+0x10/0x10 [ 433.576488][T14671] hci_conn_hash_flush+0x1be/0x350 [ 433.576522][T14671] ? __pfx_hci_conn_hash_flush+0x10/0x10 [ 433.576552][T14671] ? _raw_spin_unlock_irq+0x2e/0x50 [ 433.576574][T14671] ? drain_workqueue+0x2d3/0x3a0 [ 433.576602][T14671] ? hci_inquiry_cache_flush+0x181/0x220 [ 433.576628][T14671] ? hci_discovery_set_state+0x57/0x180 [ 433.576656][T14671] hci_dev_close_sync+0xa42/0x11c0 [ 433.576682][T14671] hci_unregister_dev+0x20b/0x510 [ 433.576705][T14671] vhci_release+0x80/0xd0 [ 433.576728][T14671] ? __pfx_vhci_release+0x10/0x10 [ 433.576751][T14671] __fput+0x3e9/0x9f0 [ 433.576780][T14671] task_work_run+0x24f/0x310 [ 433.576816][T14671] ? __pfx_task_work_run+0x10/0x10 [ 433.576847][T14671] ? do_exit+0xa25/0x28e0 [ 433.576875][T14671] ? do_exit+0xa25/0x28e0 [ 433.576905][T14671] do_exit+0xa2a/0x28e0 [ 433.576942][T14671] ? __pfx_do_exit+0x10/0x10 [ 433.576969][T14671] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 433.576999][T14671] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 433.577031][T14671] ? _raw_spin_unlock_irq+0x23/0x50 [ 433.577054][T14671] ? lockdep_hardirqs_on+0x99/0x150 [ 433.577081][T14671] do_group_exit+0x207/0x2c0 [ 433.577112][T14671] __x64_sys_exit_group+0x3f/0x40 [ 433.577141][T14671] x64_sys_call+0x26a8/0x26b0 [ 433.577165][T14671] do_syscall_64+0xf3/0x230 [ 433.577193][T14671] ? clear_bhb_loop+0x35/0x90 [ 433.577225][T14671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.577254][T14671] RIP: 0033:0x7ff68738cda9 [ 433.577276][T14671] Code: Unable to access opcode bytes at 0x7ff68738cd7f. [ 433.577288][T14671] RSP: 002b:00007ffd9b5df298 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 433.577318][T14671] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff68738cda9 [ 433.577333][T14671] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 433.577346][T14671] RBP: 00007ff6873ed8d0 R08: 00007ffd9b5dd037 R09: 0000000000000003 [ 433.577360][T14671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.577373][T14671] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffd9b5df450 [ 433.577396][T14671] [ 433.577404][T14671] [ 433.880258][T14671] Allocated by task 14732: [ 433.884689][T14671] kasan_save_track+0x3f/0x80 [ 433.889400][T14671] __kasan_kmalloc+0x98/0xb0 [ 433.894019][T14671] __kmalloc_noprof+0x285/0x4c0 [ 433.898888][T14671] sk_prot_alloc+0xe0/0x210 [ 433.903444][T14671] sk_alloc+0x38/0x370 [ 433.907541][T14671] bt_sock_alloc+0x3c/0x340 [ 433.912055][T14671] sco_sock_create+0xbb/0x390 [ 433.916751][T14671] bt_sock_create+0x161/0x230 [ 433.921452][T14671] __sock_create+0x4c0/0xa30 [ 433.926152][T14671] __sys_socket+0x150/0x3c0 [ 433.930677][T14671] __x64_sys_socket+0x7a/0x90 [ 433.935368][T14671] do_syscall_64+0xf3/0x230 [ 433.939898][T14671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.945824][T14671] [ 433.948163][T14671] Freed by task 14736: [ 433.952229][T14671] kasan_save_track+0x3f/0x80 [ 433.956947][T14671] kasan_save_free_info+0x40/0x50 [ 433.961988][T14671] __kasan_slab_free+0x59/0x70 [ 433.966766][T14671] kfree+0x196/0x430 [ 433.970696][T14671] __sk_destruct+0x479/0x5f0 [ 433.975302][T14671] sco_sock_release+0x25e/0x320 [ 433.980179][T14671] sock_close+0xbc/0x240 [ 433.984443][T14671] __fput+0x3e9/0x9f0 [ 433.988448][T14671] task_work_run+0x24f/0x310 [ 433.993063][T14671] do_exit+0xa2a/0x28e0 [ 433.997228][T14671] do_group_exit+0x207/0x2c0 [ 434.001838][T14671] get_signal+0x16b2/0x1750 [ 434.006343][T14671] arch_do_signal_or_restart+0x96/0x860 [ 434.011905][T14671] syscall_exit_to_user_mode+0xce/0x340 [ 434.017469][T14671] do_syscall_64+0x100/0x230 [ 434.022099][T14671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.028006][T14671] [ 434.030333][T14671] The buggy address belongs to the object at ffff88804c1c2000 [ 434.030333][T14671] which belongs to the cache kmalloc-2k of size 2048 [ 434.044388][T14671] The buggy address is located 1440 bytes inside of [ 434.044388][T14671] freed 2048-byte region [ffff88804c1c2000, ffff88804c1c2800) [ 434.058382][T14671] [ 434.060718][T14671] The buggy address belongs to the physical page: [ 434.067150][T14671] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4c1c0 [ 434.075940][T14671] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 434.084461][T14671] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 434.092017][T14671] page_type: f5(slab) [ 434.096027][T14671] raw: 00fff00000000040 ffff88801ac42000 ffffea000512e200 0000000000000002 [ 434.104634][T14671] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 434.113240][T14671] head: 00fff00000000040 ffff88801ac42000 ffffea000512e200 0000000000000002 [ 434.121917][T14671] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 434.130582][T14671] head: 00fff00000000003 ffffea0001307001 ffffffffffffffff 0000000000000000 [ 434.139279][T14671] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 434.147962][T14671] page dumped because: kasan: bad access detected [ 434.154401][T14671] page_owner tracks the page as allocated [ 434.160123][T14671] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11, tgid 11 (kworker/u8:0), ts 409597838048, free_ts 408080458402 [ 434.181150][T14671] post_alloc_hook+0x1f4/0x240 [ 434.185929][T14671] get_page_from_freelist+0x365c/0x37a0 [ 434.191498][T14671] __alloc_frozen_pages_noprof+0x292/0x710 [ 434.197318][T14671] alloc_pages_mpol+0x311/0x660 [ 434.202194][T14671] allocate_slab+0x8f/0x3a0 [ 434.206703][T14671] ___slab_alloc+0xc27/0x14a0 [ 434.211395][T14671] __slab_alloc+0x58/0xa0 [ 434.215731][T14671] __kmalloc_node_track_caller_noprof+0x2e9/0x4c0 [ 434.222167][T14671] kmalloc_reserve+0x111/0x2a0 [ 434.226939][T14671] pskb_expand_head+0x1f0/0x1380 [ 434.231894][T14671] netlink_trim+0x1d6/0x2e0 [ 434.236408][T14671] netlink_broadcast_filtered+0x76/0x12a0 [ 434.242149][T14671] nlmsg_notify+0xfb/0x1c0 [ 434.246577][T14671] dev_close_many+0x2e1/0x4c0 [ 434.251264][T14671] unregister_netdevice_many_notify+0x52d/0x1f10 [ 434.257602][T14671] default_device_exit_batch+0xa1f/0xaa0 [ 434.263260][T14671] page last free pid 14480 tgid 14480 stack trace: [ 434.269766][T14671] free_frozen_pages+0xe0d/0x10e0 [ 434.274897][T14671] vfree+0x1c3/0x360 [ 434.278902][T14671] xskq_destroy+0x40/0x60 [ 434.283251][T14671] xsk_release+0x6c1/0x910 [ 434.287692][T14671] sock_close+0xbc/0x240 [ 434.291951][T14671] __fput+0x3e9/0x9f0 [ 434.295944][T14671] task_work_run+0x24f/0x310 [ 434.300559][T14671] syscall_exit_to_user_mode+0x13f/0x340 [ 434.306212][T14671] do_syscall_64+0x100/0x230 [ 434.310818][T14671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.316763][T14671] [ 434.319128][T14671] Memory state around the buggy address: [ 434.324792][T14671] ffff88804c1c2480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 434.332877][T14671] ffff88804c1c2500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 434.340945][T14671] >ffff88804c1c2580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 434.349029][T14671] ^ [ 434.354144][T14671] ffff88804c1c2600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 434.362213][T14671] ffff88804c1c2680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 434.370271][T14671] ================================================================== [ 434.406688][T14671] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 434.413939][T14671] CPU: 0 UID: 0 PID: 14671 Comm: syz-executor Not tainted 6.13.0-syzkaller-09690-g3f1baa91a1fd #0 [ 434.424548][T14671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 434.434633][T14671] Call Trace: [ 434.437929][T14671] [ 434.440883][T14671] dump_stack_lvl+0x241/0x360 [ 434.445595][T14671] ? __pfx_dump_stack_lvl+0x10/0x10 [ 434.450830][T14671] ? __pfx__printk+0x10/0x10 [ 434.455724][T14671] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 434.461736][T14671] ? vscnprintf+0x5d/0x90 [ 434.466090][T14671] panic+0x349/0x880 [ 434.470017][T14671] ? check_panic_on_warn+0x21/0xb0 [ 434.475167][T14671] ? __pfx_panic+0x10/0x10 [ 434.479631][T14671] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 434.485638][T14671] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 434.491974][T14671] check_panic_on_warn+0x86/0xb0 [ 434.496958][T14671] ? sco_conn_put+0xad/0x210 [ 434.501551][T14671] end_report+0x77/0x160 [ 434.505808][T14671] kasan_report+0x154/0x180 [ 434.510323][T14671] ? sco_conn_put+0xad/0x210 [ 434.514918][T14671] sco_conn_put+0xad/0x210 [ 434.519345][T14671] ? __pfx_sco_disconn_cfm+0x10/0x10 [ 434.524634][T14671] hci_conn_hash_flush+0x1be/0x350 [ 434.529758][T14671] ? __pfx_hci_conn_hash_flush+0x10/0x10 [ 434.535399][T14671] ? _raw_spin_unlock_irq+0x2e/0x50 [ 434.540600][T14671] ? drain_workqueue+0x2d3/0x3a0 [ 434.545549][T14671] ? hci_inquiry_cache_flush+0x181/0x220 [ 434.551188][T14671] ? hci_discovery_set_state+0x57/0x180 [ 434.556745][T14671] hci_dev_close_sync+0xa42/0x11c0 [ 434.561871][T14671] hci_unregister_dev+0x20b/0x510 [ 434.566901][T14671] vhci_release+0x80/0xd0 [ 434.571234][T14671] ? __pfx_vhci_release+0x10/0x10 [ 434.576273][T14671] __fput+0x3e9/0x9f0 [ 434.580263][T14671] task_work_run+0x24f/0x310 [ 434.584878][T14671] ? __pfx_task_work_run+0x10/0x10 [ 434.589998][T14671] ? do_exit+0xa25/0x28e0 [ 434.594336][T14671] ? do_exit+0xa25/0x28e0 [ 434.598677][T14671] do_exit+0xa2a/0x28e0 [ 434.602841][T14671] ? __pfx_do_exit+0x10/0x10 [ 434.607452][T14671] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 434.613449][T14671] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 434.619790][T14671] ? _raw_spin_unlock_irq+0x23/0x50 [ 434.624991][T14671] ? lockdep_hardirqs_on+0x99/0x150 [ 434.630197][T14671] do_group_exit+0x207/0x2c0 [ 434.634819][T14671] __x64_sys_exit_group+0x3f/0x40 [ 434.639869][T14671] x64_sys_call+0x26a8/0x26b0 [ 434.644553][T14671] do_syscall_64+0xf3/0x230 [ 434.649061][T14671] ? clear_bhb_loop+0x35/0x90 [ 434.653752][T14671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.659651][T14671] RIP: 0033:0x7ff68738cda9 [ 434.664073][T14671] Code: Unable to access opcode bytes at 0x7ff68738cd7f. [ 434.671105][T14671] RSP: 002b:00007ffd9b5df298 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 434.679544][T14671] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff68738cda9 [ 434.687535][T14671] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 434.695515][T14671] RBP: 00007ff6873ed8d0 R08: 00007ffd9b5dd037 R09: 0000000000000003 [ 434.703500][T14671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.711483][T14671] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffd9b5df450 [ 434.719469][T14671] [ 434.722867][T14671] Kernel Offset: disabled [ 434.727218][T14671] Rebooting in 86400 seconds..