last executing test programs: 19m44.194160879s ago: executing program 32 (id=34): unshare(0x20000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="040e0002000000000000f110e11fc5f8a5fbde4434e722832170c5f64316e5e42a7daccfe79518fd35e510f312382ca7ac3450f20a9e1c128862b86fa3f79d314e720824df7d0aa14f984e8efd5989e7892f8efcc8a3a0a1b738f8a1d3e2d794"], 0xa) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000a40)={[{@noload}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x461, &(0x7f00000005c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x22020600) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x49, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() socket$inet6_udp(0xa, 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1/file2/file3/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file6\x00', 0x1c0) mount$bind(&(0x7f0000000280)='./file0/file1/file2/file3\x00', &(0x7f00000002c0)='./file0/file1/file2/file3\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340)='./file0/file6\x00', 0x0, 0x5000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file6/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) 17m56.575734552s ago: executing program 33 (id=250): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000002c0)={0x0, 0x1, 0x2, 0xfffffffd, 0x0, 0x6a40, 0x3800000}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0xfffffffffffffe4a, &(0x7f0000000280)=0xca) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r1], 0x1c}, 0x1, 0x0, 0x0, 0x80000}, 0x4048004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001e580)=""/102400, 0x19000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) recvmmsg(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10041, 0x0) sendmsg$inet6(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @dev={0xfe, 0x80, '\x00', 0x44}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="140000000000000029355ec8808f5921c40010008b000000ff000000"], 0x18}, 0xc4) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x7) 17m49.419388702s ago: executing program 34 (id=266): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) dup(r2) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000019300)=ANY=[]) fsmount(0xffffffffffffffff, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000dc5000/0x3000)=nil, 0x3000}, 0x7}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000c54000/0x4000)=nil, 0x4000}}) 15m38.529231517s ago: executing program 35 (id=622): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x1, 0x0) openat$cgroup_subtree(r2, 0x0, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@getqdisc={0x24, 0x26, 0x4, 0x70bd2c, 0x25dfdc02, {0x0, 0x0, 0x0, 0x0, {0xb, 0x4}, {0x9, 0xffff}, {0xfff2, 0x10}}}, 0x24}}, 0x20044000) ioctl$SIOCSIFHWADDR(r3, 0x8b2b, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 12m50.564957162s ago: executing program 36 (id=1202): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r0, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140), 0x10) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x20, 0x0, 0x0, &(0x7f0000000040)=""/26, 0xffffffffffffff46}}, {{0x0, 0x0, &(0x7f0000001300)}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) 8m44.715152141s ago: executing program 7 (id=1836): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x9c}}, 0x0) 8m44.022406147s ago: executing program 7 (id=1839): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) 8m42.475281391s ago: executing program 7 (id=1846): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) syz_usb_disconnect(r0) 8m40.901563736s ago: executing program 7 (id=1857): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) write(r0, &(0x7f0000000180)="fba8e2bde9", 0x5) r2 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x111, 0x5}}, 0x20) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe654, 0x2, 0x4, 0x48, 0xff}, 0x9c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x40c}}, 0x0) write$binfmt_elf64(r2, &(0x7f0000000a40)=ANY=[], 0x1279) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) write$cgroup_pid(r2, &(0x7f0000000780), 0x12) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fb, 0x8001, 0xffff1896, 0xe3, 0x24, 0xffffffb7, 0x1a}, 0x9c) 8m40.483831704s ago: executing program 7 (id=1859): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d010110000000090400"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 8m38.927795275s ago: executing program 7 (id=1866): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) unshare(0x6a040000) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 8m23.659006534s ago: executing program 37 (id=1866): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) unshare(0x6a040000) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 7m34.125720639s ago: executing program 6 (id=2055): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x1, @multicast2}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r2, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 7m32.140759855s ago: executing program 6 (id=2060): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x4c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 7m30.397782781s ago: executing program 6 (id=2067): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r1, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20004000) 7m28.853904984s ago: executing program 6 (id=2071): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xcc}}, 0x0) 7m27.593543067s ago: executing program 6 (id=2074): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x442, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x18e) syz_usb_connect$uac1(0x2, 0x7a, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1743, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x3, 0x1, 0x9, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x78, 0x8, 0xba, {0x7, 0x25, 0x1, 0x8, 0x4, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xfc, 0x3, 0x8, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x2, 0x1, {0x7, 0x25, 0x1, 0x0, 0xe, 0x3}}}}}}}}]}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0x78) close(r1) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 7m25.676550665s ago: executing program 6 (id=2080): keyctl$negate(0xd, 0x0, 0xfffffffffffffffe, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000100}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$phonet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 7m9.777517901s ago: executing program 38 (id=2080): keyctl$negate(0xd, 0x0, 0xfffffffffffffffe, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000100}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$phonet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 4m47.088299234s ago: executing program 4 (id=2526): r0 = socket$unix(0x1, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)={0x1}) 4m46.547790521s ago: executing program 4 (id=2530): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xee0, 0x30, 0xb, 0x0, 0x0, {}, [{0xecc, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe80, 0x2, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x20003, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffbc, 0x80, 0x3}, {0x3ff, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0xffffffff, 0x3, 0x80, 0x0, 0xacc4, 0x42}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0x1001, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3fd, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x1, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x5, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x4, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x3, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x3, 0x40007023, 0x1ff, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0xc000, 0x2, 0x89, 0x2}, {0x10001, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x1, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x5}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xffd, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x8, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0x9, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x55, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff4, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x8, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0xf9, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x2, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0xfffffff1, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0x40c651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1ac6}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x7, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d3, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x808, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x40000004, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xebd8}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x4}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xee0}}, 0x0) 4m44.923294039s ago: executing program 4 (id=2535): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x55}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040010}, 0x1c090) 4m43.825129363s ago: executing program 4 (id=2539): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x1}) 4m42.249723785s ago: executing program 4 (id=2545): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002bc0)=""/4077, 0xfed}, {&(0x7f00000002c0)=""/130, 0x82}, {&(0x7f0000000b00)=""/152, 0x98}], 0x3}, 0x0) 4m40.721224145s ago: executing program 4 (id=2551): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) bind$xdp(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000240)=@ethtool_per_queue_op={0x4b, 0xf, [0x1000, 0x1, 0x7, 0x7, 0x9, 0x80000000, 0x80000000, 0xff, 0x9, 0x8, 0x5, 0x0, 0x5, 0x5f7a, 0xc, 0x54d43e98, 0x3, 0x1b, 0x0, 0x40, 0x9, 0x80, 0x8, 0x0, 0x6, 0x400, 0x1, 0x3, 0x3ff, 0x7fff, 0xa, 0x1ca, 0xfffffffd, 0x5, 0x5, 0x0, 0x3, 0x7, 0x3, 0x43, 0x1, 0x2, 0x40000008, 0x8, 0x9, 0x5, 0xfffffff9, 0x7fff, 0xffffffff, 0x101, 0x0, 0x101, 0x6, 0x100, 0xfffffff8, 0x4, 0x4, 0x2, 0x2, 0x3aac, 0x8, 0xfffff801, 0x1, 0x8000, 0x1a, 0x8000, 0x0, 0x5, 0x0, 0x4, 0x81, 0x5, 0x8, 0x3, 0x400, 0x0, 0x413, 0x8, 0x87e, 0x9, 0x1c0000, 0x9, 0xffff, 0xd, 0x3, 0x4, 0x0, 0x5, 0x3, 0x920, 0xfffffd45, 0x508, 0x1000, 0xfffc0000, 0x6, 0x3, 0x0, 0x8, 0x1, 0x3ff, 0x1, 0x2, 0x10c, 0x4, 0x1, 0x3, 0x2, 0x401, 0x8, 0x4, 0xf, 0x5, 0x100000e6, 0x2, 0x3, 0x844, 0x7, 0x2a080, 0x0, 0x8, 0x3, 0x40, 0x1, 0x7ff, 0xd, 0x80000001, 0x800, 0x7]}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) 4m25.30958122s ago: executing program 39 (id=2551): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) bind$xdp(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000240)=@ethtool_per_queue_op={0x4b, 0xf, [0x1000, 0x1, 0x7, 0x7, 0x9, 0x80000000, 0x80000000, 0xff, 0x9, 0x8, 0x5, 0x0, 0x5, 0x5f7a, 0xc, 0x54d43e98, 0x3, 0x1b, 0x0, 0x40, 0x9, 0x80, 0x8, 0x0, 0x6, 0x400, 0x1, 0x3, 0x3ff, 0x7fff, 0xa, 0x1ca, 0xfffffffd, 0x5, 0x5, 0x0, 0x3, 0x7, 0x3, 0x43, 0x1, 0x2, 0x40000008, 0x8, 0x9, 0x5, 0xfffffff9, 0x7fff, 0xffffffff, 0x101, 0x0, 0x101, 0x6, 0x100, 0xfffffff8, 0x4, 0x4, 0x2, 0x2, 0x3aac, 0x8, 0xfffff801, 0x1, 0x8000, 0x1a, 0x8000, 0x0, 0x5, 0x0, 0x4, 0x81, 0x5, 0x8, 0x3, 0x400, 0x0, 0x413, 0x8, 0x87e, 0x9, 0x1c0000, 0x9, 0xffff, 0xd, 0x3, 0x4, 0x0, 0x5, 0x3, 0x920, 0xfffffd45, 0x508, 0x1000, 0xfffc0000, 0x6, 0x3, 0x0, 0x8, 0x1, 0x3ff, 0x1, 0x2, 0x10c, 0x4, 0x1, 0x3, 0x2, 0x401, 0x8, 0x4, 0xf, 0x5, 0x100000e6, 0x2, 0x3, 0x844, 0x7, 0x2a080, 0x0, 0x8, 0x3, 0x40, 0x1, 0x7ff, 0xd, 0x80000001, 0x800, 0x7]}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) 3m52.471875701s ago: executing program 3 (id=2709): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000640)) setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) 3m51.705334033s ago: executing program 3 (id=2712): syz_emit_ethernet(0x4a, &(0x7f0000000400)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a35f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2f00, 0xfff5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0xffff}}}}}}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) 3m50.857706688s ago: executing program 3 (id=2717): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d70", 0x2c}], 0x1) 3m49.911586727s ago: executing program 3 (id=2720): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x31}, 0x20008888) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40011) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) ioctl$int_in(r2, 0x5452, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) recvfrom$packet(r2, &(0x7f0000000040)=""/173, 0xad, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000f28c0)={{0x0, 0xa, 0x8, 0x7fffffffffffffff, 0x1, 0x9, 0xd022, 0x0, 0x5, 0x8000, 0x6, 0x7fffffffffffffff, 0x800, 0x6}}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x6}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x4000000) 3m48.546676037s ago: executing program 9 (id=2724): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0015000600142603600e120800060000000401a8000800a400000001000000035c0461c1d67f6f94007134cf6efb8000a007a290457f010400000700000000ceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bf9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0xfe62, &(0x7f0000000280)=[{&(0x7f0000004d00)={0x2c, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x14, 0xc, 0x0, 0x0, @ipv6=@empty}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xf6}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x8011}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004054}, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6011, r1, 0x0) 3m47.697208165s ago: executing program 9 (id=2728): unshare(0x20000400) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0700000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) 3m46.925152424s ago: executing program 9 (id=2731): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x5, 0x0, @remote, @private=0xa010100, {[@ssrr={0x89, 0x3, 0xcc}, @lsrr={0x83, 0x3, 0x4a}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0xfffd}}}}}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x8, 0xcd, &(0x7f0000000140)=""/205, 0x0, 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'hsr0\x00'}) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x404c080) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r3, 0x701, 0x0, 0x25dfdbfc, {0x41}}, 0x14}}, 0x24000040) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x48810) close(0x3) 3m46.068013146s ago: executing program 3 (id=2733): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0x628f) accept4(r0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 3m45.958010609s ago: executing program 9 (id=2735): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="f3f428bd7000fedbdf251a00000007002100616100000c00228004"], 0x28}, 0x1, 0x0, 0x0, 0x841}, 0x20000090) 3m45.201644023s ago: executing program 9 (id=2738): syz_emit_ethernet(0x4a, &(0x7f0000000400)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a35f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2f00, 0xfff5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0xffff}}}}}}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) 3m44.517451511s ago: executing program 9 (id=2742): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x31}, 0x20008888) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40011) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) ioctl$int_in(r2, 0x5452, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) recvfrom$packet(r2, &(0x7f0000000040)=""/173, 0xad, 0x0, 0x0, 0x0) 3m44.261386869s ago: executing program 3 (id=2743): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x31}, 0x20008888) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40011) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) ioctl$int_in(r2, 0x5452, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 3m29.226848429s ago: executing program 40 (id=2742): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x31}, 0x20008888) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40011) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) ioctl$int_in(r2, 0x5452, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) recvfrom$packet(r2, &(0x7f0000000040)=""/173, 0xad, 0x0, 0x0, 0x0) 3m28.834364462s ago: executing program 41 (id=2743): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x31}, 0x20008888) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40011) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) ioctl$int_in(r2, 0x5452, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 13.552822445s ago: executing program 1 (id=3347): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000140)="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") r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r2, 0x29, 0x50, 0x0, &(0x7f0000000280)) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x192}}, 0x20}}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffc, @mcast1, 0x7}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xffff, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x32) r7 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000100100000100000080000000000000007000000000000000100100000e"], 0x88}, 0xfc40) writev(r1, &(0x7f0000000800)=[{&(0x7f0000000740)="fbb9b35314b22f1f4cb47eace766f6b8d03bfe3f8e3a82b50a1b5e9cd2e00a992e1135405731e2df16ff986abe8421811ede024553765aba07523f2657f32a1076fe37b60cb3e811ea80d5d552928140bd0e242f775e4f5305d6e8c0b74d0a41d50ac938a9de44df4eb3988930397bbb20b7bd6ed5fb826b6840930be010cdc441186a1f9c2432a41305dc73813006ae4ffb8cf627ed43b2776d1b52", 0x9c}], 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, 0x35, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000800002e00000000009500000000000000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r10, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0x20}, 0x8) sendto$inet6(r10, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x29, 0x5, 0x8, 0x5, 0x2, @loopback, @loopback, 0x40, 0x700, 0x280000, 0x8}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000400)) 10.281524686s ago: executing program 1 (id=3357): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f0000000700)="e8700e444d50a969ff67347cff6127e6ef12ee3819", 0x15}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/85, 0x51}, {&(0x7f0000000200)=""/79, 0x53}], 0x2, 0x0, 0xffffffffffffff7b}, 0x40012160) 9.359517827s ago: executing program 1 (id=3361): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) close(0xffffffffffffffff) socket(0x14, 0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) 7.823294086s ago: executing program 2 (id=3369): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000004c0)={0x3, {{0xa, 0x4e24, 0xc, @mcast1, 0x408}}, 0x1}, 0x90) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000280)={0x0, 0x3d}, 0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x2}, @TCA_ROUTE4_TO={0x8, 0x2, 0x21}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x2) 6.523670675s ago: executing program 0 (id=3370): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @random="f25776f945ba", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x4000, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0xc2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "5795db65a31f8e6b0d21e61664704226"}]}}}}}}}, 0x0) 6.215280676s ago: executing program 2 (id=3371): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x10, 0x13}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 5.760957349s ago: executing program 0 (id=3372): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$key(0xf, 0x3, 0x2) unshare(0x2c020400) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[], &(0x7f0000000380)=""/175, 0x4b, 0xaf, 0x1, 0x7, 0x10000}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000008d}, 0x94) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f0000000040)=r3, 0x4) sendmsg$key(r1, 0x0, 0x20000041) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000000), 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendto(r6, 0x0, 0x0, 0xc000, &(0x7f0000000540)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x3, 0x3, 0x0, 0x2, {0xa, 0x4e24, 0x101, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}}, 0x80) getsockopt$sock_buf(r6, 0x1, 0x4a, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r7 = socket$tipc(0x1e, 0x2, 0x0) r8 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000003ac0), 0x0, 0x45833af96e4a38de, 0x0) sendmmsg$inet(r8, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010029bd7000fddbdf250200000008000300", @ANYRES32=r11, @ANYBLOB="0c00990041000000600000000800a0007c030700080026009a030000"], 0x40}}, 0x48000) 5.566399184s ago: executing program 2 (id=3374): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000007a0000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464"], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 5.0380935s ago: executing program 8 (id=3375): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002bc0)=""/4077, 0xfed}, {&(0x7f0000000b00)=""/152, 0x98}], 0x2}, 0x0) 4.804943501s ago: executing program 2 (id=3376): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_u8={{0xd, 0x29, 0x36}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x28}, 0x0) 4.728912422s ago: executing program 5 (id=3377): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x2020001}, 0x4000000) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000005c0)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x0, 0x2d, 0x0, "11cba021ab00d7c3d795bc8741153034523fb8ca053ba1a69ecb02d499b8503ce487d03abab1b53320f25c724fe0d32fce049bf65bdef89efbd833d173b77087ea4ea3a853df466fa7859f68e3de5c95"}, 0xd8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 4.684766503s ago: executing program 0 (id=3378): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x48, r1, 0x1, 0xfffbff80, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x80}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x48}}, 0x4080) 4.410535509s ago: executing program 1 (id=3379): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0xd4, 0x2c, 0xd27, 0x70bd25, 0x80002, {0x0, 0x0, 0x0, r2, {0xd, 0x1}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0xa4, 0x2, [@TCA_FLOW_EMATCHES={0xa0, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x94, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x9, 0x7, 0x8}, {{0x1, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x3, 0x0, 0x0, {{0x1, 0x0, 0x6}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x0, 0x8, 0x3}, {0x2, 0x0, 0x1}}}, @TCF_EM_META={0x3c, 0x3, 0x0, 0x0, {{0x8000, 0x4, 0x2}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_VAR="b5c5d76560ff6013a6", @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="fb", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x3]}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x9}, {{0x1, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x3}, {0x0, 0x5}}}]}]}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4008081}, 0x20000000) 4.119376981s ago: executing program 8 (id=3380): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40041) bind$can_j1939(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000400)=[{0x2, 0x3, {0x1, 0x0, 0x1}, {0x2, 0x1, 0x2}, 0x1, 0xfd}, {0x1, 0x3, {0x1, 0x1, 0x1}, {0x1, 0xff}, 0x0, 0xfe}, {0x0, 0x2, {0x1, 0xff, 0x2}, {0x0, 0xff, 0x3}, 0xfd, 0xfd}], 0x60) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 3.929717807s ago: executing program 0 (id=3381): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x100010, 0xffffffffffffffff, 0x4852b000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x4, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x408c0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r3, 0x68, &(0x7f0000000200)}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'ip_vti0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x0, 0x8, 0xffff8dd9, 0x2, {{0x38, 0x4, 0x2, 0x13, 0xe0, 0x67, 0x0, 0x40, 0x2f, 0x0, @multicast1, @remote, {[@ssrr={0x89, 0xf, 0xf1, [@loopback, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x3c, 0x3, [{0x3, 0x5, "9572d1"}, {0x7, 0x9, "05ba7102bcc97e"}, {0x0, 0x5, "8b3c17"}, {0x7, 0xd, "9dd20c0c412cdb413c1c89"}, {0x7, 0xd, "d4a22e61002b01d8b3d333"}, {0x1, 0x4, "09f0"}, {0x2, 0x5, 'K?.'}]}, @noop, @noop, @end, @ssrr={0x89, 0x23, 0x26, [@rand_addr=0x64010102, @rand_addr=0x64010101, @multicast1, @loopback, @local, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x2b}]}, @timestamp_prespec={0x44, 0xc, 0xd6, 0x3, 0xf, [{@remote, 0x100}]}, @timestamp={0x44, 0x2c, 0xd2, 0x0, 0x1, [0x5b, 0x1249, 0x2, 0x1ff, 0x8, 0x4, 0x7fff, 0x47, 0xac, 0x3]}, @timestamp_prespec={0x44, 0x1c, 0x8b, 0x3, 0x8, [{@remote, 0x7}, {@broadcast, 0x22d}, {@broadcast, 0x6}]}, @ra={0x94, 0x4, 0x1}]}}}}}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000001340)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001300)={&(0x7f0000001380)={0x23c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x101}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x80, @empty, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xef0f, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}}}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "a7e458837a8cf3a1663e7dfe07fa0c2cf9e47650fc"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x800}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x61}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc0000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x20000000000005}, @TIPC_NLA_NET_ID={0x36, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd88}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "0ba5048f94ed1203da9236ec5277e75d8bdefa4f04735e6a677fb51b4eddabc352"}}]}, @TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth1_to_batadv\x00'}}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x44000}, 0x4091) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2a, 0x8001, 0x2, 0x6, 0x6, 0x5, 0x3, 0x200, 0xfffffffb}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffe0, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x9}, @TCA_CAKE_TARGET={0x8, 0x8, 0xfffffe01}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x0) 3.889877655s ago: executing program 5 (id=3382): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x2c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x2c}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000400000014000500fc0000000000000000000000000000010800020005000000070006"], 0x44}}, 0x0) 3.869816319s ago: executing program 2 (id=3383): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) fsetxattr(r0, 0x0, &(0x7f0000000080)='%{$\\&]\x00', 0x7, 0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000003040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4c, &(0x7f0000000000)=0xc77, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0x4, 0xd8f9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000) r3 = syz_open_dev$vbi(&(0x7f00000000c0), 0x3, 0x2) r4 = fcntl$dupfd(r3, 0x0, r3) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000700001000000", @ANYBLOB='\f\x00'], 0x24}}, 0x0) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd22, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r9, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x3, 0x2, 0x4], [0x0, 0x0, 0x3], [0x4000000, 0xc, 0x0, 0x4]}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06464ce, &(0x7f0000000180)={r9, 0x4, 0x1c262dd1, 0x800, 0x0, [], [0x1, 0x0, 0x9, 0x7], [0xffffffff, 0x0, 0xffffffff, 0x3], [0x0, 0x7ff, 0x2, 0xffc0000000000000]}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYBLOB], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="7638300c000000000000e900feff", 0x0, 0x10000, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) write$binfmt_script(r4, &(0x7f0000000100), 0xfffffd9d) 2.868162788s ago: executing program 5 (id=3384): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xfb3, &(0x7f0000001f40)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfa5, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xf91, 0x0, @gue={{0x1, 0x0, 0x0, 0x9, 0x0, @void}, "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"}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0xfffffffffffffe79, &(0x7f0000000240), 0x5b}, 0xb}], 0x1, 0x10043, 0x0) 2.710509496s ago: executing program 1 (id=3385): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r3, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES8=0x0, @ANYBLOB="ed5d5e67"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000480)=[{0x3, 0x4, 0xb, 0x5}, {0x1, 0x4, 0xb, 0x5}], 0x10, 0x3}, 0x94) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000140)=ANY=[@ANYBLOB="aa780ab083aaaaaaaaaaaabb080045000070000000000001907864010100ac1414aa0bba907803000000450000000000ffff0089000000000000e0000001862a00000000000d5e000000ff00000000000000054eb8a600129606053d0006ff00800000b61af93a93831300ac1414007f000001e0000001ac1414aa000000"], 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x20, 0x16, 0x107, 0x70bd29, 0x25dddbfe, {0x20, 0x7c}, [@nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc090) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000240)={r8, 0x12, "1fe473a8cb3169d4d5b7259627b5cf5b8a50"}, &(0x7f0000000700)=0x1a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x21, 0x0, 0x0, 0x2c}, 0x94) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0x6}, {0xfff1, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a4f0ff00000000b7060000ffffffff2e640500000000007502faff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000009000000b70000000000002995000000000000001da5ad3548ebb63d18db6a1c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6d5b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8c18119a6926083f4a2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa387a8077927a1ad367c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f20002b35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8c367d1bfd1aea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82dc568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000000000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac6f09c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccf5e882602897a85bf8523d891080593d831d758deb4f2c7e49c6d6b35d8fd92601c8500febb0c5fe0be294bf6bbbecad444695277a9e3992a354492513b43091d161c7c7cdbbe44e8e83b4cf333238a52f214b278c6485236ea880db2f113f6381187679a4620d6149808b0af024b3b3e6ba99b4b15ca"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x166}, 0x48) r9 = socket$inet6(0xa, 0x6, 0x119) ioctl$sock_inet6_SIOCSIFDSTADDR(r9, 0x8918, &(0x7f0000001100)={@mcast1, 0xf, r4}) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="008016bebaffe3292db7b72f01c3ed5b00fb8634b135265a38977be87acc6b72eba37a28eb2458762018576c1cfb4337b6c8404e2dfd791c71894564"], 0x114}], 0x1}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ADDRESS={0xa}]}, 0x48}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) 2.555128893s ago: executing program 8 (id=3386): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000007a0000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464"], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 2.38191561s ago: executing program 0 (id=3387): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = gettid() syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/uts\x00') unshare(0x2c060000) unshare(0x2a060400) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0xf5, 0x0, &(0x7f0000000000)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r5) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000002f40)={'syztnl0\x00', &(0x7f0000002ec0)={'gre0\x00', 0x0, 0x20, 0x8, 0x7fff, 0x8000, {{0xa, 0x4, 0x2, 0x3b, 0x28, 0x66, 0x0, 0xf9, 0x2f, 0x0, @multicast1, @broadcast, {[@rr={0x7, 0xf, 0x2b, [@dev={0xac, 0x14, 0x14, 0x13}, @empty, @private=0xa010101]}, @rr={0x7, 0x3, 0xc7}]}}}}}) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000003180)={0x0, @initdev, @initdev}, &(0x7f00000031c0)=0xc) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x10) listen(r5, 0x9) bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x4, @any, 0x4, 0x1}, 0xe) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 2.003376038s ago: executing program 5 (id=3388): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r0, 0x1) 1.665223634s ago: executing program 8 (id=3389): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x40000020) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000005700)=""/4050, 0xfd2}, {&(0x7f0000006700)=""/4031, 0xfbf}, {&(0x7f0000000d80)=""/242, 0xf2}, {&(0x7f0000000e80)=""/163, 0xa3}, {&(0x7f0000000240)=""/88, 0x58}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f0000003dc0)=""/4096, 0x1000}], 0x7}, 0x32000) 1.259254361s ago: executing program 5 (id=3390): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002bc0)=""/4077, 0xfed}, {0x0}, {&(0x7f0000000b00)=""/152, 0x98}], 0x3}, 0x0) 636.479967ms ago: executing program 1 (id=3391): r0 = socket(0xa, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010101}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={r2, 0x30}, 0x8) 636.127532ms ago: executing program 0 (id=3392): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x2020001}, 0x4000000) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000005c0)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x0, 0x2d, 0x0, "11cba021ab00d7c3d795bc8741153034523fb8ca053ba1a69ecb02d499b8503ce487d03abab1b53320f25c724fe0d32fce049bf65bdef89efbd833d173b77087ea4ea3a853df466fa7859f68e3de5c95"}, 0xd8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 572.544728ms ago: executing program 8 (id=3393): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_u8={{0xd, 0x29, 0x36}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x28}, 0x0) 518.095764ms ago: executing program 2 (id=3394): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) unshare(0x22020600) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) 455.398011ms ago: executing program 5 (id=3395): sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r1, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x11dc0, &(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x0) 0s ago: executing program 8 (id=3396): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40041) bind$can_j1939(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000400)=[{0x2, 0x3, {0x1, 0x0, 0x1}, {0x2, 0x1, 0x2}, 0x1, 0xfd}, {0x1, 0x3, {0x1, 0x1, 0x1}, {0x1, 0xff}, 0x0, 0xfe}, {0x0, 0x2, {0x1, 0xff, 0x2}, {0x0, 0xff, 0x3}, 0xfd, 0xfd}], 0x60) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) kernel console output (not intermixed with test programs): n process `syz.2.1964'. [ 933.765258][T12479] veth0_vlan: entered promiscuous mode [ 933.874451][T12479] veth1_vlan: entered promiscuous mode [ 934.285316][T12479] veth0_macvtap: entered promiscuous mode [ 934.383566][T12479] veth1_macvtap: entered promiscuous mode [ 934.651595][T12745] ipip0: entered allmulticast mode [ 934.818790][T12479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 934.958908][T12479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 935.167189][ T80] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.214740][ T80] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.272306][ T80] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.306593][ T80] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.874634][T12785] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1981'. [ 938.756331][ T146] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.981714][ T6027] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.241676][ T158] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.454039][ T5809] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.134258][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 942.149958][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 942.715346][T12834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 942.793656][T12834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 943.721158][ T5721] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.792743][ T5721] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.851658][ T5721] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.916027][ T5721] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.865705][T12903] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2006'. [ 946.636825][T12911] 8021q: VLANs not supported on ip6tnl0 [ 946.842536][T12913] syzkaller0: entered promiscuous mode [ 946.877439][T12913] syzkaller0: entered allmulticast mode [ 946.960245][ T6027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 947.007576][ T6027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 947.552322][ T5721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 947.619304][ T5721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 949.362919][T12944] netlink: 4080 bytes leftover after parsing attributes in process `syz.4.1892'. [ 949.752514][T12946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2018'. [ 950.954205][T12877] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 951.276330][T12877] usb 5-1: unable to get BOS descriptor or descriptor too short [ 951.363368][T12877] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 951.417347][T12877] usb 5-1: can't read configurations, error -71 [ 953.605325][T12990] netlink: 72 bytes leftover after parsing attributes in process `syz.9.2033'. [ 953.625524][T12989] netlink: 4080 bytes leftover after parsing attributes in process `syz.1.2032'. [ 954.108704][T12996] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gretap0, syncid = 32768, id = 0 [ 954.523450][T12978] Bluetooth: hci3: command 0x0406 tx timeout [ 957.130801][T13028] netlink: 'syz.2.2045': attribute type 11 has an invalid length. [ 958.311000][T13038] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2048'. [ 958.636678][T13041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2049'. [ 959.017409][T13044] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2050'. [ 963.462837][T13085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2063'. [ 967.956987][ T5688] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 968.158992][ T5688] usb 10-1: device descriptor read/64, error -71 [ 968.472160][ T5688] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 968.673520][ T5688] usb 10-1: device descriptor read/64, error -71 [ 968.846877][T13130] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.2078'. [ 968.857811][ T5688] usb usb10-port1: attempt power cycle [ 969.303344][ T5688] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 969.433841][ T5688] usb 10-1: device descriptor read/8, error -71 [ 969.772115][ T5688] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 969.889748][ T5688] usb 10-1: device descriptor read/8, error -71 [ 970.067768][ T5688] usb usb10-port1: unable to enumerate USB device [ 973.836467][T13170] netlink: 4140 bytes leftover after parsing attributes in process `syz.9.2091'. [ 975.671455][T13179] netlink: 1004 bytes leftover after parsing attributes in process `syz.9.2093'. [ 975.824730][T13185] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2095'. [ 979.345348][T13207] syz.4.2102 uses obsolete (PF_INET,SOCK_PACKET) [ 981.935486][T13224] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.2108'. [ 987.244755][T13260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2120'. [ 987.410482][T13262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2120'. [ 987.547830][T12978] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 987.562595][T12978] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 987.590077][T13260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2120'. [ 987.629144][T12978] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 987.680920][T12978] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 987.715097][T12978] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 987.780720][T13268] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.2123'. [ 989.528208][T13276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2125'. [ 989.882209][T12978] Bluetooth: hci4: command tx timeout [ 991.962837][T12978] Bluetooth: hci4: command tx timeout [ 993.588599][T13306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.043084][T12978] Bluetooth: hci4: command tx timeout [ 995.053509][T13314] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.2135'. [ 996.122761][T12978] Bluetooth: hci4: command tx timeout [ 996.663791][T13323] tipc: Started in network mode [ 996.733917][T13323] tipc: Node identity 76657468115f, cluster identity 4711 [ 996.808655][T13323] tipc: Enabled bearer , priority 0 [ 997.922339][T12854] tipc: Node number set to 1731884136 [ 998.546398][T13343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.875236][T13358] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.2148'. [ 1001.857878][T13372] veth0: entered promiscuous mode [ 1001.919649][T13374] veth0: left promiscuous mode [ 1003.572334][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1003.578983][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1004.054722][T13391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.064224][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.157695][T13391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.169774][ T1027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.240483][T13391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.256478][ T1027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.584701][T13263] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.625561][T13263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.697417][T13263] bridge_slave_0: entered allmulticast mode [ 1005.766449][T13263] bridge_slave_0: entered promiscuous mode [ 1005.891311][T13263] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.949603][T13263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.975736][T13413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.029546][T13263] bridge_slave_1: entered allmulticast mode [ 1006.061212][T13413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.135520][T13263] bridge_slave_1: entered promiscuous mode [ 1006.148611][T13413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.226949][T13413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.364800][T13413] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.2160'. [ 1006.847195][T13418] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1007.008791][T13263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1007.176746][T13263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1008.047333][T13263] team0: Port device team_slave_0 added [ 1008.215803][T13263] team0: Port device team_slave_1 added [ 1009.366520][T13263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1009.398526][T13263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1009.640746][T13263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1009.756035][T13263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1009.820334][T13263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1010.031029][T13263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1010.334576][T13455] netlink: 'syz.1.2170': attribute type 11 has an invalid length. [ 1011.519058][T13468] syzkaller0: entered promiscuous mode [ 1011.564418][T13468] syzkaller0: entered allmulticast mode [ 1012.194049][T13263] hsr_slave_0: entered promiscuous mode [ 1012.255502][T13263] hsr_slave_1: entered promiscuous mode [ 1012.344158][T13263] debugfs: 'hsr0' already exists in 'hsr' [ 1012.373997][T13263] Cannot create hsr debugfs directory [ 1012.401948][T13472] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1015.511473][T13503] tipc: Enabling of bearer rejected, failed to enable media [ 1016.109887][T13513] netlink: 'syz.4.2184': attribute type 11 has an invalid length. [ 1019.790342][T13263] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1020.005457][T13263] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1020.079350][T13263] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1020.305396][T13263] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1020.403298][T13263] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1020.555506][T13263] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1020.650358][T13263] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1020.860047][T13263] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1020.906348][T13552] netlink: 'syz.2.2196': attribute type 11 has an invalid length. [ 1023.715985][T13263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1024.204062][T13263] 8021q: adding VLAN 0 to HW filter on device team0 [ 1024.486428][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.494210][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1024.878110][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.885875][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1025.824465][T13595] netlink: 'syz.4.2210': attribute type 11 has an invalid length. [ 1028.714554][T13609] batadv_slave_1: entered promiscuous mode [ 1029.419974][T13625] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2218'. [ 1029.552635][T13623] mac80211_hwsim hwsim22 syzkaller0: entered promiscuous mode [ 1029.615700][T13623] mac80211_hwsim hwsim22 syzkaller0: entered allmulticast mode [ 1031.177251][T13643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2222'. [ 1035.891948][T13263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1036.362786][ T5587] Bluetooth: hci0: command 0x0406 tx timeout [ 1036.913765][T13263] veth0_vlan: entered promiscuous mode [ 1037.178343][T13263] veth1_vlan: entered promiscuous mode [ 1038.148004][T13263] veth0_macvtap: entered promiscuous mode [ 1038.366400][T13263] veth1_macvtap: entered promiscuous mode [ 1038.912175][T13263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1039.195670][T13263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1039.617268][ T6027] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.720336][ T6027] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.864861][ T6027] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.927429][ T6027] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.012366][T13722] net_ratelimit: 11 callbacks suppressed [ 1040.012437][T13722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.175089][T13721] mac80211_hwsim hwsim22 syzkaller0: left promiscuous mode [ 1040.230678][T13721] mac80211_hwsim hwsim22 syzkaller0: left allmulticast mode [ 1043.787006][T13758] netlink: 'syz.9.2255': attribute type 11 has an invalid length. [ 1044.664698][T13769] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2258'. [ 1047.885630][ T5587] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1047.894845][ T5587] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1047.906551][ T5587] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1047.943085][ T5587] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1047.967781][ T5587] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1048.488071][T13800] netlink: 'syz.1.2268': attribute type 11 has an invalid length. [ 1049.907005][T13814] netlink: 76 bytes leftover after parsing attributes in process `syz.9.2271'. [ 1050.045051][ T5587] Bluetooth: hci5: command tx timeout [ 1051.341653][T13828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.430839][T13828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.529278][T13828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.637967][T13826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.702767][T13826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1052.124375][ T5587] Bluetooth: hci5: command tx timeout [ 1053.238258][ T5809] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.727176][ T5809] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.204315][ T5587] Bluetooth: hci5: command tx timeout [ 1054.265930][ T5809] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.827162][ T5809] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.282374][ T5587] Bluetooth: hci5: command tx timeout [ 1056.304126][T13864] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2286'. [ 1057.375056][ T5809] bridge_slave_1: left allmulticast mode [ 1057.448583][ T5809] bridge_slave_1: left promiscuous mode [ 1057.526499][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.707447][ T5809] bridge_slave_0: left allmulticast mode [ 1057.760198][ T5809] bridge_slave_0: left promiscuous mode [ 1057.817644][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.450908][ T5809] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1060.565695][ T5809] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1060.668143][ T5809] bond0 (unregistering): Released all slaves [ 1061.467055][ T5809] hsr_slave_0: left promiscuous mode [ 1061.543245][ T5809] hsr_slave_1: left promiscuous mode [ 1061.609608][T13905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.613136][ T5809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1061.699490][T13905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.729060][ T5809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1061.783055][T13905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.812963][ T5809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1061.829701][T13906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.894722][ T5809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1061.912517][T13906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.024704][T13906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.145916][ T5809] veth1_macvtap: left promiscuous mode [ 1062.173004][T13906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.204380][ T5809] veth0_macvtap: left promiscuous mode [ 1062.246268][ T5809] veth1_vlan: left promiscuous mode [ 1062.292177][ T5809] veth0_vlan: left promiscuous mode [ 1062.678911][T13906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.688631][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.750629][T13911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.027508][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1066.636763][ T5809] team0 (unregistering): Port device team_slave_1 removed [ 1066.827779][ T5809] team0 (unregistering): Port device team_slave_0 removed [ 1068.250172][T13904] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1068.294128][T13904] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1068.331346][T13904] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1070.032433][T13962] net_ratelimit: 44 callbacks suppressed [ 1070.032509][T13962] netlink: zone id is out of range [ 1070.217445][T13962] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2309'. [ 1070.561333][T13962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1070.768625][T13962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1070.938992][T13962] bond0 (unregistering): Released all slaves [ 1074.236184][T14001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.474231][T13795] bridge0: port 1(bridge_slave_0) entered blocking state [ 1074.559599][T13795] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.600495][T13795] bridge_slave_0: entered allmulticast mode [ 1074.679154][T13795] bridge_slave_0: entered promiscuous mode [ 1074.814017][T13795] bridge0: port 2(bridge_slave_1) entered blocking state [ 1074.875979][T13795] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.935187][T13795] bridge_slave_1: entered allmulticast mode [ 1075.016960][T13795] bridge_slave_1: entered promiscuous mode [ 1075.680943][T14018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.689875][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.738871][T13795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1075.914128][T13795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1076.618382][T13795] team0: Port device team_slave_0 added [ 1076.749676][T13795] team0: Port device team_slave_1 added [ 1077.456986][T13795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1077.545198][T13795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1077.737227][T13795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1077.880551][T13795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1077.958591][T13795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1078.156460][T13795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1078.271107][T14038] mac80211_hwsim hwsim22 syzkaller0: entered promiscuous mode [ 1078.334754][T14038] mac80211_hwsim hwsim22 syzkaller0: entered allmulticast mode [ 1079.476054][T13795] hsr_slave_0: entered promiscuous mode [ 1079.549282][T13795] hsr_slave_1: entered promiscuous mode [ 1079.606980][T13795] debugfs: 'hsr0' already exists in 'hsr' [ 1079.650311][T13795] Cannot create hsr debugfs directory [ 1079.705896][T14059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2337'. [ 1083.716336][T14102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2351'. [ 1083.941481][T14102] netlink: 'syz.1.2351': attribute type 2 has an invalid length. [ 1084.324138][T13795] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1084.389990][T14108] netlink: 'syz.4.2352': attribute type 2 has an invalid length. [ 1084.460593][T14108] netlink: 'syz.4.2352': attribute type 2 has an invalid length. [ 1084.492430][T13795] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1084.575357][T13795] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1084.741214][T13795] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1084.828204][T13795] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1085.142954][T13795] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1085.191150][T13795] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1085.384082][T13795] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1085.716199][T14122] trusted_key: syz.9.2357 sent an empty control message without MSG_MORE. [ 1085.953622][T14125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2358'. [ 1086.761455][T14125] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1087.868979][T14139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.743857][T13795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1089.100247][T13795] 8021q: adding VLAN 0 to HW filter on device team0 [ 1089.269475][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.277482][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1089.472541][ T1027] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.480308][ T1027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1090.873459][T14169] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2370'. [ 1092.215928][T14181] Bluetooth: MGMT ver 1.23 [ 1094.898076][T14222] netlink: 76 bytes leftover after parsing attributes in process `syz.9.2385'. [ 1095.063644][T13795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1096.004005][T13795] veth0_vlan: entered promiscuous mode [ 1096.175759][T13795] veth1_vlan: entered promiscuous mode [ 1096.512231][T14242] IPVS: Error connecting to the multicast addr [ 1096.681505][T13795] veth0_macvtap: entered promiscuous mode [ 1096.834155][T13795] veth1_macvtap: entered promiscuous mode [ 1097.131518][T13795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1097.365433][T13795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1097.453306][T14255] netlink: 76 bytes leftover after parsing attributes in process `syz.9.2398'. [ 1097.573793][ T5721] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.640549][ T5721] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.707554][ T55] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.775156][ T55] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.305296][T14303] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2413'. [ 1102.070602][T14333] fuse: Bad value for 'fd' [ 1102.099549][T14334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.108711][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.351164][T14356] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2429'. [ 1106.511950][T14412] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2445'. [ 1107.258778][T12978] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1107.275482][T12978] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1107.284639][T12978] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1107.299578][T12978] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1107.351375][T12978] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1108.680081][T14439] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2452'. [ 1109.402431][ T5587] Bluetooth: hci4: command tx timeout [ 1110.253347][ T5721] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.291993][T14466] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2459'. [ 1110.533355][ T5721] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.868509][ T5721] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.188185][ T5721] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.483114][ T5587] Bluetooth: hci4: command tx timeout [ 1111.975899][T14485] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2465'. [ 1112.207958][ T5721] bridge_slave_1: left allmulticast mode [ 1112.219163][ T5721] bridge_slave_1: left promiscuous mode [ 1112.236246][ T5721] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.274950][ T5721] bridge_slave_0: left allmulticast mode [ 1112.300065][ T5721] bridge_slave_0: left promiscuous mode [ 1112.320956][ T5721] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.564139][ T5587] Bluetooth: hci4: command tx timeout [ 1113.720660][T14515] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2474'. [ 1113.822303][ T5721] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1113.892161][ T5721] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1113.940932][ T5721] bond0 (unregistering): Released all slaves [ 1114.665679][ T5721] hsr_slave_0: left promiscuous mode [ 1114.699902][ T5721] hsr_slave_1: left promiscuous mode [ 1114.729581][ T5721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1114.752002][ T5721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1114.800745][ T5721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1114.826585][ T5721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1115.013121][ T5721] veth1_macvtap: left promiscuous mode [ 1115.036082][ T5721] veth0_macvtap: left promiscuous mode [ 1115.046844][T14532] netlink: 'syz.2.2478': attribute type 21 has an invalid length. [ 1115.063295][ T5721] veth1_vlan: left promiscuous mode [ 1115.076140][ T5721] veth0_vlan: left promiscuous mode [ 1115.523113][T14538] netlink: 'syz.9.2482': attribute type 3 has an invalid length. [ 1115.642534][ T5587] Bluetooth: hci4: command tx timeout [ 1116.358991][T14551] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2488'. [ 1116.399814][T14554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1117.132524][ T5721] team0 (unregistering): Port device team_slave_1 removed [ 1117.236361][ T5721] team0 (unregistering): Port device team_slave_0 removed [ 1117.399305][T14570] netlink: 'syz.1.2493': attribute type 21 has an invalid length. [ 1121.278299][T14421] bridge0: port 1(bridge_slave_0) entered blocking state [ 1121.320255][T14421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1121.393202][T14421] bridge_slave_0: entered allmulticast mode [ 1121.448169][T14421] bridge_slave_0: entered promiscuous mode [ 1121.534914][T14421] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.579879][T14421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.587943][T14421] bridge_slave_1: entered allmulticast mode [ 1121.611242][T14616] netlink: 'syz.9.2504': attribute type 21 has an invalid length. [ 1121.623395][T14421] bridge_slave_1: entered promiscuous mode [ 1122.408835][T14421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1122.529260][T14421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1123.092968][T14421] team0: Port device team_slave_0 added [ 1123.152817][T14421] team0: Port device team_slave_1 added [ 1123.268647][T14639] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2506'. [ 1123.453528][T14641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2506'. [ 1123.601258][ T5226] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1123.653325][T14421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1123.700623][T14421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1123.757686][T14646] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2513'. [ 1123.768730][T14421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1123.888958][T14651] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2513'. [ 1124.088162][T14421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1124.119558][T14421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1124.200885][T14421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1124.863937][T14421] hsr_slave_0: entered promiscuous mode [ 1124.896926][T14421] hsr_slave_1: entered promiscuous mode [ 1124.946758][T14421] debugfs: 'hsr0' already exists in 'hsr' [ 1124.962403][T14421] Cannot create hsr debugfs directory [ 1125.126298][ T5721] bridge_slave_1: left allmulticast mode [ 1125.155517][ T5721] bridge_slave_1: left promiscuous mode [ 1125.164032][ T5721] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.206580][ T5721] bridge_slave_0: left allmulticast mode [ 1125.219251][ T5721] bridge_slave_0: left promiscuous mode [ 1125.250843][ T5721] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.974568][ T5721] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1125.999871][ T5721] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1126.015509][ T5721] bond0 (unregistering): Released all slaves [ 1126.279733][ T5721] IPVS: stopping backup sync thread 10475 ... [ 1126.375922][T14680] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2524'. [ 1126.452367][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1126.578158][T14680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2524'. [ 1127.415715][ T5721] hsr_slave_0: left promiscuous mode [ 1127.454829][ T5721] hsr_slave_1: left promiscuous mode [ 1127.496971][ T5721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1127.533956][ T5721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1127.745006][T14693] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2529'. [ 1127.805540][T14699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2529'. [ 1128.270029][ T5721] team0 (unregistering): Port device team_slave_1 removed [ 1128.362036][ T5721] team0 (unregistering): Port device team_slave_0 removed [ 1129.490508][T14712] bridge1: entered promiscuous mode [ 1129.499083][T14712] bridge1: entered allmulticast mode [ 1130.618909][T14726] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2538'. [ 1130.753111][T14726] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2538'. [ 1131.257374][T14421] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1131.373600][T14421] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1131.420909][T14421] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1131.554965][T14421] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1131.610417][T14421] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1131.740134][T14421] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1131.750532][T14421] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1131.798531][T14421] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1133.175266][T14421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1133.499156][T14421] 8021q: adding VLAN 0 to HW filter on device team0 [ 1133.645907][ T6027] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.653622][ T6027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1133.795485][T14778] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2552'. [ 1133.809540][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.817267][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1135.029756][T14789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2554'. [ 1135.082454][T14789] bond0: (slave syz_tun): Releasing backup interface [ 1136.778523][T14812] macsec1: entered promiscuous mode [ 1136.802290][T14812] macsec1: entered allmulticast mode [ 1137.632950][T14822] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2564'. [ 1138.868202][T14421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1139.621837][T14421] veth0_vlan: entered promiscuous mode [ 1139.758471][T14421] veth1_vlan: entered promiscuous mode [ 1140.265249][T14421] veth0_macvtap: entered promiscuous mode [ 1140.370952][T14421] veth1_macvtap: entered promiscuous mode [ 1140.602219][T14421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1140.754994][T14421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1140.863316][T14864] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2577'. [ 1140.946883][ T5721] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.974592][ T5721] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.031899][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.073158][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.522561][T14918] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2591'. [ 1144.989560][T14930] mac80211_hwsim hwsim20 syzkaller0: entered promiscuous mode [ 1145.037877][T14930] mac80211_hwsim hwsim20 syzkaller0: entered allmulticast mode [ 1145.830986][T14937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1145.841110][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1145.879374][T14937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1145.892651][ T158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1145.935689][T14937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1145.945038][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.146398][T14973] batadv_slave_1: entered promiscuous mode [ 1149.263764][ T5809] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1149.316527][ T5809] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1149.571222][ T6027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1149.612855][ T6027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1149.680951][T14991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1149.691139][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1149.744698][T14991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1149.766001][T14993] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2609'. [ 1149.768057][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1150.277016][T12978] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1150.289586][T12978] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1150.302439][T12978] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1150.328224][T12978] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1150.341193][T12978] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1151.475103][ T5226] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1152.442252][T12978] Bluetooth: hci5: command tx timeout [ 1153.553940][T15036] syzkaller0: entered promiscuous mode [ 1153.577787][T15036] syzkaller0: entered allmulticast mode [ 1153.979284][T15046] net_ratelimit: 2 callbacks suppressed [ 1153.979357][T15046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1154.035831][T15048] fuse: Unknown parameter 'user_id00000000000000000000' [ 1154.130523][T15046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2621'. [ 1154.405872][T15046] veth0_macvtap: left promiscuous mode [ 1154.530103][T12978] Bluetooth: hci5: command tx timeout [ 1156.603021][T12978] Bluetooth: hci5: command tx timeout [ 1156.915955][T15087] tipc: New replicast peer: 255.255.255.255 [ 1156.972246][T15087] tipc: Enabled bearer , priority 10 [ 1158.027513][T15103] fuse: Unknown parameter 'user_id00000000000000000000' [ 1158.134049][ T5226] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1158.682396][T12978] Bluetooth: hci5: command tx timeout [ 1158.931623][T15099] syzkaller0: entered promiscuous mode [ 1158.972116][T15099] syzkaller0: entered allmulticast mode [ 1159.477541][T15122] netlink: 'syz.9.2637': attribute type 21 has an invalid length. [ 1159.522517][T15122] netlink: 'syz.9.2637': attribute type 21 has an invalid length. [ 1159.548689][T15122] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2637'. [ 1160.603133][T15000] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.643045][T15000] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.709549][T15000] bridge_slave_0: entered allmulticast mode [ 1160.756457][T15000] bridge_slave_0: entered promiscuous mode [ 1160.833971][T15000] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.921396][T15000] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.947463][T15000] bridge_slave_1: entered allmulticast mode [ 1160.976698][T15000] bridge_slave_1: entered promiscuous mode [ 1161.619847][T15142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2644'. [ 1161.699525][T15142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2644'. [ 1161.747658][T15142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2644'. [ 1161.786723][T15142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2644'. [ 1161.834293][T15142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2644'. [ 1161.877275][T15142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2644'. [ 1161.920481][T15149] fuse: Bad value for 'fd' [ 1161.936290][T15142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2644'. [ 1161.975252][T15142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2644'. [ 1161.990624][T15142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2644'. [ 1162.240846][T15135] tipc: Enabling of bearer rejected, already enabled [ 1162.368414][T15000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1162.487509][T15000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1162.989630][T15000] team0: Port device team_slave_0 added [ 1163.118242][T15000] team0: Port device team_slave_1 added [ 1163.686107][T15000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1163.725588][T15000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1163.851149][T15000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1163.948190][T15000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1163.977007][T15175] netlink: 'syz.1.2651': attribute type 3 has an invalid length. [ 1164.005976][T15000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1164.157739][T15000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1164.219139][T15179] netlink: 'syz.1.2651': attribute type 12 has an invalid length. [ 1165.193028][T15000] hsr_slave_0: entered promiscuous mode [ 1165.255746][T15000] hsr_slave_1: entered promiscuous mode [ 1165.309713][T15000] debugfs: 'hsr0' already exists in 'hsr' [ 1165.338897][T15000] Cannot create hsr debugfs directory [ 1165.969296][ T5226] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1166.096546][T15195] __nla_validate_parse: 71 callbacks suppressed [ 1166.096622][T15195] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2656'. [ 1166.283844][ T6027] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.534345][ T6027] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.966937][T15208] fuse: Bad value for 'fd' [ 1167.055780][T15200] tipc: Started in network mode [ 1167.077721][T15200] tipc: Node identity ac14140f, cluster identity 4711 [ 1167.107746][T15200] tipc: New replicast peer: 255.255.255.255 [ 1167.148149][T15200] tipc: Enabled bearer , priority 10 [ 1167.231853][ T6027] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.557637][ T6027] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.740239][T15215] netlink: 76 bytes leftover after parsing attributes in process `syz.9.2661'. [ 1167.744944][T15218] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2662'. [ 1167.850834][T15223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2662'. [ 1167.921648][T15222] tipc: Started in network mode [ 1167.952221][T15222] tipc: Node identity , cluster identity 4711 [ 1167.959851][T15225] netlink: 288 bytes leftover after parsing attributes in process `syz.1.2664'. [ 1167.973259][T15222] tipc: Failed to obtain node identity [ 1168.006858][T15222] tipc: Enabling of bearer rejected, failed to enable media [ 1168.270311][T12868] tipc: Node number set to 2886997007 [ 1169.011173][T15237] netlink: 'syz.3.2668': attribute type 21 has an invalid length. [ 1169.076367][ T6027] bridge_slave_1: left allmulticast mode [ 1169.128531][ T6027] bridge_slave_1: left promiscuous mode [ 1169.171850][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.247353][ T6027] bridge_slave_0: left allmulticast mode [ 1169.291130][ T6027] bridge_slave_0: left promiscuous mode [ 1169.334838][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.670162][T15244] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2670'. [ 1169.895313][T15250] fuse: Bad value for 'fd' [ 1170.715061][T15265] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2674'. [ 1170.811609][ T6027] IPVS: stopping master sync thread 12996 ... [ 1170.864064][T15269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2674'. [ 1170.927334][T15262] tipc: Started in network mode [ 1170.951622][T15262] tipc: Node identity ac14140f, cluster identity 4711 [ 1170.986441][T15262] tipc: New replicast peer: 255.255.255.255 [ 1171.048567][T15262] tipc: Enabled bearer , priority 10 [ 1171.377805][T15274] netlink: 288 bytes leftover after parsing attributes in process `syz.3.2676'. [ 1172.152778][T12847] tipc: Node number set to 2886997007 [ 1172.232142][T15285] netlink: 'syz.3.2680': attribute type 21 has an invalid length. [ 1172.404128][ T6027] hsr_slave_0: left promiscuous mode [ 1172.437075][ T6027] hsr_slave_1: left promiscuous mode [ 1172.487177][ T6027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1172.512434][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1172.579628][ T6027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1172.625610][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1172.771079][ T6027] veth1_macvtap: left promiscuous mode [ 1172.802594][ T6027] veth0_macvtap: left promiscuous mode [ 1172.821433][ T6027] veth1_vlan: left promiscuous mode [ 1172.853386][ T6027] veth0_vlan: left promiscuous mode [ 1173.677529][T15300] fuse: Unknown parameter '0x0000000000000003' [ 1174.326343][ T6027] team0 (unregistering): Port device team_slave_1 removed [ 1174.359839][ T6027] team0 (unregistering): Port device team_slave_0 removed [ 1174.894195][T15290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2681'. [ 1174.929084][T15277] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2677'. [ 1174.977459][ T5226] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1175.067948][T15305] tipc: Enabling of bearer rejected, already enabled [ 1175.494042][T15000] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1175.606225][T15000] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1175.653675][T15000] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1175.775988][T15000] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1175.807343][T15312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2688'. [ 1175.825649][T15000] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1175.870488][T15000] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1175.887350][T15314] netlink: 288 bytes leftover after parsing attributes in process `syz.3.2689'. [ 1175.899048][T15000] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1175.947994][T15314] netlink: zone id is out of range [ 1176.030644][T15000] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1176.246857][T15319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1176.289757][T15322] netlink: 'syz.9.2691': attribute type 21 has an invalid length. [ 1176.309591][T15319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1176.375635][T15319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1176.552706][T15323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1176.597240][T15323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1176.676934][T15323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1176.747650][T15323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1176.787609][T15323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1176.987841][T15319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.440157][T15337] fuse: Unknown parameter '0x0000000000000003' [ 1177.700907][T15000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1177.933722][T15000] 8021q: adding VLAN 0 to HW filter on device team0 [ 1178.013915][ T5721] bridge0: port 1(bridge_slave_0) entered blocking state [ 1178.021579][ T5721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1178.120448][T15346] tipc: Enabling of bearer rejected, already enabled [ 1178.216867][ T5721] bridge0: port 2(bridge_slave_1) entered blocking state [ 1178.224456][ T5721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1179.155622][T15364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2701'. [ 1179.905532][T15369] netlink: 'syz.1.2703': attribute type 21 has an invalid length. [ 1180.248181][T15359] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2700'. [ 1180.367869][T15374] netlink: 'syz.3.2704': attribute type 3 has an invalid length. [ 1180.401593][T15374] netlink: 'syz.3.2704': attribute type 12 has an invalid length. [ 1180.434044][T15374] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2704'. [ 1181.583243][ T5226] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1182.693527][T15403] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2712'. [ 1183.266290][T15413] netlink: 'syz.1.2715': attribute type 12 has an invalid length. [ 1183.326899][T15413] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2715'. [ 1183.495466][T15000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1184.090623][T15421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.439157][T15000] veth0_vlan: entered promiscuous mode [ 1184.629734][T15000] veth1_vlan: entered promiscuous mode [ 1185.312972][T15000] veth0_macvtap: entered promiscuous mode [ 1185.452599][T15000] veth1_macvtap: entered promiscuous mode [ 1185.718388][T15000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1185.919134][T15444] netlink: 'syz.9.2724': attribute type 21 has an invalid length. [ 1185.922203][T15000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1186.169406][ T146] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.243236][ T5809] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.302387][ T5809] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.334757][ T158] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.520632][T15448] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2726'. [ 1186.679275][T15450] netlink: 'syz.2.2727': attribute type 12 has an invalid length. [ 1186.721326][T15450] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2727'. [ 1187.911107][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1189.052758][T15488] netlink: 'syz.2.2737': attribute type 21 has an invalid length. [ 1189.161170][T15492] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2738'. [ 1190.387837][T15508] netlink: 'syz.2.2740': attribute type 1 has an invalid length. [ 1190.429809][T15508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2740'. [ 1190.593693][T15512] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1192.363395][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1192.845869][T15536] netlink: 'syz.2.2749': attribute type 21 has an invalid length. [ 1193.417173][T15540] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2750'. [ 1193.976516][ T6027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1194.032125][ T6027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1194.311185][ T6026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1194.364686][ T6026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1194.391271][T15552] fuse: Unknown parameter '0x0000000000000003' [ 1195.263887][T15561] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2605'. [ 1197.359010][ T5587] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1197.371551][ T5587] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1197.381514][ T5587] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1197.396914][ T5587] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1197.408065][ T5587] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1199.484347][ T5587] Bluetooth: hci0: command tx timeout [ 1199.879651][T15596] netlink: 'syz.2.2760': attribute type 21 has an invalid length. [ 1200.717298][T15601] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2761'. [ 1200.827761][T15603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2761'. [ 1201.562368][ T5587] Bluetooth: hci0: command tx timeout [ 1201.585766][ T55] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.953312][ T55] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1202.090799][ T5226] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1202.273196][ T55] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1202.642730][ T55] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.243098][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1203.360978][T15615] fuse: Unknown parameter 'fd0x0000000000000003' [ 1203.649808][ T5587] Bluetooth: hci0: command tx timeout [ 1205.338557][ T55] bond0 (unregistering): Released all slaves [ 1205.466954][ T55] bond1 (unregistering): Released all slaves [ 1205.482334][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1205.730882][ T5587] Bluetooth: hci0: command tx timeout [ 1206.092900][ T55] tipc: Disabling bearer [ 1206.119065][ T55] tipc: Left network mode [ 1206.481759][T12978] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1206.498378][T12978] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1206.519580][T12978] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1206.556823][T12978] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1206.577731][T12978] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1206.716125][ T5587] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1206.726876][ T5587] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1206.737607][ T5587] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1206.770674][ T5587] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1206.789654][ T5587] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1207.292428][ T55] hsr_slave_0: left promiscuous mode [ 1207.352461][T15651] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2771'. [ 1207.353881][ T55] hsr_slave_1: left promiscuous mode [ 1207.479797][T15656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2771'. [ 1207.565210][ T55] veth1_macvtap: left promiscuous mode [ 1207.599561][ T55] veth1_vlan: left promiscuous mode [ 1207.626931][ T55] veth0_vlan: left promiscuous mode [ 1208.682161][T12978] Bluetooth: hci2: command tx timeout [ 1208.924279][T12978] Bluetooth: hci6: command tx timeout [ 1210.667463][T15663] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2773'. [ 1210.767477][T12978] Bluetooth: hci2: command tx timeout [ 1210.794367][ T5226] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1211.003456][T12978] Bluetooth: hci6: command tx timeout [ 1211.579342][T15686] fuse: Unknown parameter 'fd0x0000000000000003' [ 1211.646181][T15575] bridge0: port 1(bridge_slave_0) entered blocking state [ 1211.686810][T15575] bridge0: port 1(bridge_slave_0) entered disabled state [ 1211.726341][T15575] bridge_slave_0: entered allmulticast mode [ 1211.768489][T15575] bridge_slave_0: entered promiscuous mode [ 1211.829944][T15575] bridge0: port 2(bridge_slave_1) entered blocking state [ 1211.879696][T15575] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.920036][T15575] bridge_slave_1: entered allmulticast mode [ 1211.996378][T15575] bridge_slave_1: entered promiscuous mode [ 1212.538191][T15575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1212.692498][T15575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1212.843524][T12978] Bluetooth: hci2: command tx timeout [ 1213.082075][T12978] Bluetooth: hci6: command tx timeout [ 1213.201346][T15575] team0: Port device team_slave_0 added [ 1213.338778][T15575] team0: Port device team_slave_1 added [ 1213.802839][T15575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1213.859321][T15575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1213.985361][T15575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1214.094134][T15575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1214.139549][T15575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1214.261016][T15575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1214.930447][T12978] Bluetooth: hci2: command tx timeout [ 1215.162146][T12978] Bluetooth: hci6: command tx timeout [ 1215.575780][T15575] hsr_slave_0: entered promiscuous mode [ 1215.629954][T15575] hsr_slave_1: entered promiscuous mode [ 1215.683549][T15575] debugfs: 'hsr0' already exists in 'hsr' [ 1215.719128][T15575] Cannot create hsr debugfs directory [ 1216.564650][T15728] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2782'. [ 1217.136860][T15744] fuse: Unknown parameter 'fd0x0000000000000003' [ 1219.288769][ T5226] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1219.452788][T15765] netlink: 'syz.0.2789': attribute type 83 has an invalid length. [ 1222.219981][T15575] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1222.336111][T15575] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1222.395543][T15797] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2792'. [ 1222.684241][T15575] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1222.840754][T15575] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1223.088076][T15575] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1223.241382][T15575] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1223.295037][T15639] bridge0: port 1(bridge_slave_0) entered blocking state [ 1223.348551][T15639] bridge0: port 1(bridge_slave_0) entered disabled state [ 1223.381310][T15639] bridge_slave_0: entered allmulticast mode [ 1223.432487][T15639] bridge_slave_0: entered promiscuous mode [ 1223.514310][T15639] bridge0: port 2(bridge_slave_1) entered blocking state [ 1223.546671][T15639] bridge0: port 2(bridge_slave_1) entered disabled state [ 1223.578628][T15639] bridge_slave_1: entered allmulticast mode [ 1223.610862][T15639] bridge_slave_1: entered promiscuous mode [ 1223.654340][T15575] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1223.734464][T15575] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1224.497538][T15641] bridge0: port 1(bridge_slave_0) entered blocking state [ 1224.533336][T15641] bridge0: port 1(bridge_slave_0) entered disabled state [ 1224.555972][T15641] bridge_slave_0: entered allmulticast mode [ 1224.596905][T15641] bridge_slave_0: entered promiscuous mode [ 1224.639252][T15822] netlink: 'syz.2.2796': attribute type 21 has an invalid length. [ 1224.694398][T15639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1224.774100][T15641] bridge0: port 2(bridge_slave_1) entered blocking state [ 1224.819307][T15641] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.855982][T15641] bridge_slave_1: entered allmulticast mode [ 1224.899937][T15641] bridge_slave_1: entered promiscuous mode [ 1225.196265][T15639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1225.845058][T15641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1225.926226][T15639] team0: Port device team_slave_0 added [ 1226.024886][T15641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1226.157962][T15639] team0: Port device team_slave_1 added [ 1226.777841][T15641] team0: Port device team_slave_0 added [ 1227.013013][T15641] team0: Port device team_slave_1 added [ 1227.314009][T15639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1227.348912][T15639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1227.384528][T15639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1227.643129][T15639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1227.671520][T15639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1227.746040][T15639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1227.834263][T15641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1227.868208][T15641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1227.981646][T15641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1228.140160][T15641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1228.173960][T15641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1228.272087][T15641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1228.518969][T15859] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2802'. [ 1229.355035][T15641] hsr_slave_0: entered promiscuous mode [ 1229.406117][T15641] hsr_slave_1: entered promiscuous mode [ 1229.445557][T15641] debugfs: 'hsr0' already exists in 'hsr' [ 1229.471385][T15641] Cannot create hsr debugfs directory [ 1229.799786][T15639] hsr_slave_0: entered promiscuous mode [ 1229.848420][T15639] hsr_slave_1: entered promiscuous mode [ 1229.887785][T15639] debugfs: 'hsr0' already exists in 'hsr' [ 1229.922366][T15639] Cannot create hsr debugfs directory [ 1230.018334][T15876] netlink: 'syz.2.2805': attribute type 21 has an invalid length. [ 1230.922058][ T5587] Bluetooth: hci4: command 0x0406 tx timeout [ 1233.332359][T15905] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2813'. [ 1233.744261][T15909] netlink: 'syz.0.2814': attribute type 21 has an invalid length. [ 1234.403537][T15575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1234.861462][T15575] 8021q: adding VLAN 0 to HW filter on device team0 [ 1235.055789][T10099] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.063387][T10099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1235.293060][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 1235.300677][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1235.598495][T15641] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1235.676722][T15641] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1235.830252][T15641] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1235.920309][T15641] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1236.039025][T15641] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1236.144400][T15641] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1236.280874][T15641] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1236.397866][T15641] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1237.236070][T15931] netlink: 'syz.2.2823': attribute type 21 has an invalid length. [ 1238.386953][T15639] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1238.535039][T15639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1238.712893][T15639] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1238.824529][T15639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1238.890311][T15639] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1239.017802][T15639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1239.078939][T15639] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1239.192478][T15639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1239.736904][ T6026] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.977487][ T6026] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.291222][ T6026] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.401344][T15952] veth0: entered promiscuous mode [ 1240.499921][T15953] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1240.756290][ T6026] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.873462][T15950] veth0: left promiscuous mode [ 1241.166911][T15641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1241.857060][ T6026] bridge_slave_1: left allmulticast mode [ 1241.897543][ T6026] bridge_slave_1: left promiscuous mode [ 1241.940248][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state [ 1241.985972][ T6026] bridge_slave_0: left allmulticast mode [ 1242.002160][ T6026] bridge_slave_0: left promiscuous mode [ 1242.013643][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.430572][T15964] netlink: 'syz.2.2832': attribute type 21 has an invalid length. [ 1242.598159][T15965] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2831'. [ 1242.706825][T15969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2831'. [ 1242.949757][ T6026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1242.971500][ T6026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1243.030817][ T6026] bond0 (unregistering): Released all slaves [ 1243.062559][T15641] 8021q: adding VLAN 0 to HW filter on device team0 [ 1243.355659][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 1243.363338][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1243.431349][ T6026] tipc: Disabling bearer [ 1243.460399][ T6026] tipc: Left network mode [ 1243.546344][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 1243.553906][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1243.658712][T15977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2836'. [ 1243.745984][T15977] syz_tun: entered promiscuous mode [ 1243.753024][T15977] macvtap1: entered promiscuous mode [ 1243.759865][T15977] macvtap1: entered allmulticast mode [ 1243.769735][T15977] syz_tun: entered allmulticast mode [ 1243.809719][T15980] syz_tun: left allmulticast mode [ 1243.825140][T15980] syz_tun: left promiscuous mode [ 1243.831183][T15980] macvtap1: left promiscuous mode [ 1243.840751][T15980] macvtap1: left allmulticast mode [ 1244.035517][T15575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1244.599110][ T6026] hsr_slave_0: left promiscuous mode [ 1244.618326][ T6026] hsr_slave_1: left promiscuous mode [ 1244.655089][ T6026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1244.673994][T15990] netlink: 'syz.0.2840': attribute type 21 has an invalid length. [ 1244.687806][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1244.704219][ T6026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1244.712025][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1244.750342][ T6026] veth1_macvtap: left promiscuous mode [ 1244.761488][ T6026] veth0_macvtap: left promiscuous mode [ 1244.769719][ T6026] veth1_vlan: left promiscuous mode [ 1244.784805][ T6026] veth0_vlan: left promiscuous mode [ 1245.476075][ T6026] team0 (unregistering): Port device team_slave_1 removed [ 1245.519252][ T6026] team0 (unregistering): Port device team_slave_0 removed [ 1245.901274][T15639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1246.352328][T15995] netlink: 'syz.2.2842': attribute type 2 has an invalid length. [ 1246.387993][T15639] 8021q: adding VLAN 0 to HW filter on device team0 [ 1246.391060][T15995] netlink: 'syz.2.2842': attribute type 2 has an invalid length. [ 1246.513888][T15999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2843'. [ 1246.696596][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 1246.704166][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1246.879646][ T6026] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.143320][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 1247.150856][ T5809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1247.291580][ T6026] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.387216][T15575] veth0_vlan: entered promiscuous mode [ 1247.478942][ T6026] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.709304][ T6026] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.928280][T15575] veth1_vlan: entered promiscuous mode [ 1248.191952][T16020] netlink: 'syz.0.2848': attribute type 21 has an invalid length. [ 1248.770806][ T6026] bridge_slave_1: left allmulticast mode [ 1248.770906][ T6026] bridge_slave_1: left promiscuous mode [ 1248.771834][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.815322][ T6026] bridge_slave_0: left allmulticast mode [ 1248.815422][ T6026] bridge_slave_0: left promiscuous mode [ 1248.825732][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state [ 1249.331000][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1249.837766][ T6026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1249.876620][ T6026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1249.913130][ T6026] bond0 (unregistering): Released all slaves [ 1249.994292][T16030] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.004125][T16030] bridge0: port 1(bridge_slave_0) entered disabled state [ 1251.013931][T15575] veth0_macvtap: entered promiscuous mode [ 1251.166461][ T6026] hsr_slave_0: left promiscuous mode [ 1251.218313][ T6026] hsr_slave_1: left promiscuous mode [ 1251.259695][ T6026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1251.297280][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1251.350742][ T6026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1251.381058][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1251.468018][T16066] netlink: 'syz.0.2857': attribute type 21 has an invalid length. [ 1251.480443][ T6026] veth1_macvtap: left promiscuous mode [ 1251.497356][ T6026] veth0_macvtap: left promiscuous mode [ 1251.503962][ T6026] veth1_vlan: left promiscuous mode [ 1251.509788][ T6026] veth0_vlan: left promiscuous mode [ 1252.016733][T16074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2859'. [ 1252.066571][T16074] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2859'. [ 1252.926223][ T6026] team0 (unregistering): Port device team_slave_1 removed [ 1253.018428][ T6026] team0 (unregistering): Port device team_slave_0 removed [ 1253.560184][T15575] veth1_macvtap: entered promiscuous mode [ 1253.699255][T15641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1254.133378][T15575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1254.300017][T15575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1254.503819][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.528995][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.625383][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.670558][T10099] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.940441][T16111] netlink: 'syz.2.2866': attribute type 21 has an invalid length. [ 1255.727525][T16124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2867'. [ 1256.496245][T16133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2870'. [ 1256.553781][T16133] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2870'. [ 1257.058031][T15641] veth0_vlan: entered promiscuous mode [ 1257.258907][T15641] veth1_vlan: entered promiscuous mode [ 1257.536361][T15639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1257.611029][ T5587] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1257.623326][ T5587] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1257.641031][ T5587] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1257.664708][ T5587] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1257.678312][ T5587] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1257.950913][T15641] veth0_macvtap: entered promiscuous mode [ 1258.055936][T15641] veth1_macvtap: entered promiscuous mode [ 1258.058938][T16152] netlink: 'syz.2.2874': attribute type 21 has an invalid length. [ 1258.370081][T15641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1258.575554][T15641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1258.752310][ T6026] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.797198][ T6026] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.856397][ T6026] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.914447][ T146] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.336992][T16168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2877'. [ 1259.721987][ T5587] Bluetooth: hci3: command tx timeout [ 1260.985597][ T158] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.270352][ T158] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.504370][T15639] veth0_vlan: entered promiscuous mode [ 1261.580678][T12847] IPVS: starting estimator thread 0... [ 1261.655874][ T158] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.677970][T16200] netlink: 'syz.0.2883': attribute type 21 has an invalid length. [ 1261.692569][T16199] IPVS: using max 240 ests per chain, 12000 per kthread [ 1261.802058][ T5587] Bluetooth: hci3: command tx timeout [ 1262.074534][ T158] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.164533][T16204] veth0: entered promiscuous mode [ 1262.282548][T16206] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1262.502497][T16203] veth0: left promiscuous mode [ 1262.536489][T15639] veth1_vlan: entered promiscuous mode [ 1262.896341][T16218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2886'. [ 1263.395011][T16226] netlink: 'syz.2.2888': attribute type 29 has an invalid length. [ 1263.596803][T16229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2889'. [ 1263.645861][ T158] bridge_slave_1: left allmulticast mode [ 1263.664196][ T158] bridge_slave_1: left promiscuous mode [ 1263.685839][ T158] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.730020][ T158] bridge_slave_0: left allmulticast mode [ 1263.744899][ T158] bridge_slave_0: left promiscuous mode [ 1263.772952][ T158] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.836356][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c01a000: rx timeout, send abort [ 1263.883602][ T5587] Bluetooth: hci3: command tx timeout [ 1264.337248][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c01be00: rx timeout, send abort [ 1264.346621][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c01a000: abort rx timeout. Force session deactivation [ 1264.614847][ T158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1264.653005][ T158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1264.670224][ T158] bond0 (unregistering): Released all slaves [ 1264.845993][ C0] vcan0 (unregistered): j1939_tp_rxtimer: 0xffff88805c01be00: abort rx timeout. Force session deactivation [ 1265.065740][ T158] hsr_slave_0: left promiscuous mode [ 1265.124484][ T158] hsr_slave_1: left promiscuous mode [ 1265.148853][ T158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1265.191993][ T158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1265.224076][ T158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1265.244763][ T158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1265.358619][ T158] veth1_macvtap: left promiscuous mode [ 1265.372547][ T158] veth0_macvtap: left promiscuous mode [ 1265.392267][ T158] veth1_vlan: left promiscuous mode [ 1265.398167][ T158] veth0_vlan: left promiscuous mode [ 1265.540489][T16252] netlink: 'syz.0.2892': attribute type 21 has an invalid length. [ 1265.967447][ T5587] Bluetooth: hci3: command tx timeout [ 1266.549596][T16263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2895'. [ 1266.566559][T16266] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1266.579000][T16266] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1266.589835][T16266] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1266.607994][T16266] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1266.619909][T16266] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1266.792231][ T5587] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1266.807907][ T5587] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1266.817228][ T5587] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1266.868184][ T5587] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1266.903851][ T5587] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1267.434639][ T158] team0 (unregistering): Port device team_slave_1 removed [ 1267.471042][ T158] team0 (unregistering): Port device team_slave_0 removed [ 1267.892906][T16263] vlan2: entered allmulticast mode [ 1267.906214][T16263] bond0: entered allmulticast mode [ 1267.928631][T16263] bond_slave_0: entered allmulticast mode [ 1267.958292][T16263] bond_slave_1: entered allmulticast mode [ 1268.586295][T16283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2896'. [ 1268.684410][T16266] Bluetooth: hci0: command tx timeout [ 1269.004638][T16266] Bluetooth: hci4: command tx timeout [ 1270.763071][T16266] Bluetooth: hci0: command tx timeout [ 1271.083447][T16266] Bluetooth: hci4: command tx timeout [ 1271.182296][T16143] bridge0: port 1(bridge_slave_0) entered blocking state [ 1271.253398][T16143] bridge0: port 1(bridge_slave_0) entered disabled state [ 1271.313283][T16143] bridge_slave_0: entered allmulticast mode [ 1271.362252][T16143] bridge_slave_0: entered promiscuous mode [ 1271.570948][T16143] bridge0: port 2(bridge_slave_1) entered blocking state [ 1271.597536][T16143] bridge0: port 2(bridge_slave_1) entered disabled state [ 1271.635110][T16143] bridge_slave_1: entered allmulticast mode [ 1271.678749][T16143] bridge_slave_1: entered promiscuous mode [ 1272.341377][T16143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1272.357267][T16329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2905'. [ 1272.474256][ T6027] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.678737][T16143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1272.842064][T16266] Bluetooth: hci0: command tx timeout [ 1272.998799][ T6027] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.162069][T16266] Bluetooth: hci4: command tx timeout [ 1273.210346][ T6027] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.333801][T16143] team0: Port device team_slave_0 added [ 1273.385627][T16143] team0: Port device team_slave_1 added [ 1273.461393][ T6027] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.700478][T16143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1273.716654][T16143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1273.784595][T16143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1273.997629][T16143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1274.034272][T16143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1274.112454][T16143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1274.932261][ T5587] Bluetooth: hci0: command tx timeout [ 1275.242789][T16368] Bluetooth: hci4: command tx timeout [ 1275.409712][T16143] hsr_slave_0: entered promiscuous mode [ 1275.443583][T16143] hsr_slave_1: entered promiscuous mode [ 1275.468025][T16143] debugfs: 'hsr0' already exists in 'hsr' [ 1275.484811][T16143] Cannot create hsr debugfs directory [ 1275.500301][T16379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2914'. [ 1276.081757][ T6027] bridge_slave_1: left allmulticast mode [ 1276.098193][ T6027] bridge_slave_1: left promiscuous mode [ 1276.110907][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1276.140995][ T6027] bridge_slave_0: left allmulticast mode [ 1276.147474][ T6027] bridge_slave_0: left promiscuous mode [ 1276.156139][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state [ 1277.002161][T16368] Bluetooth: hci5: command 0x0406 tx timeout [ 1277.020817][ T6027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1277.048521][ T6027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1277.074180][ T6027] bond0 (unregistering): Released all slaves [ 1277.474858][ T6027] hsr_slave_0: left promiscuous mode [ 1277.495568][ T6027] hsr_slave_1: left promiscuous mode [ 1277.517208][ T6027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1277.539547][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1277.574882][ T6027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1277.593140][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1277.659161][ T6027] veth1_macvtap: left promiscuous mode [ 1277.677245][ T6027] veth0_macvtap: left promiscuous mode [ 1277.684232][ T6027] veth1_vlan: left promiscuous mode [ 1277.689855][ T6027] veth0_vlan: left promiscuous mode [ 1278.582917][ T6027] team0 (unregistering): Port device team_slave_1 removed [ 1278.611596][ T6027] team0 (unregistering): Port device team_slave_0 removed [ 1279.553756][T16418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2922'. [ 1279.704525][T16269] bridge0: port 1(bridge_slave_0) entered blocking state [ 1279.715500][T16269] bridge0: port 1(bridge_slave_0) entered disabled state [ 1279.723770][T16269] bridge_slave_0: entered allmulticast mode [ 1279.759660][T16269] bridge_slave_0: entered promiscuous mode [ 1279.872965][T16269] bridge0: port 2(bridge_slave_1) entered blocking state [ 1279.888601][T16269] bridge0: port 2(bridge_slave_1) entered disabled state [ 1279.905812][T16269] bridge_slave_1: entered allmulticast mode [ 1279.928988][T16269] bridge_slave_1: entered promiscuous mode [ 1280.138182][T16265] bridge0: port 1(bridge_slave_0) entered blocking state [ 1280.146201][T16265] bridge0: port 1(bridge_slave_0) entered disabled state [ 1280.155495][T16265] bridge_slave_0: entered allmulticast mode [ 1280.181310][T16265] bridge_slave_0: entered promiscuous mode [ 1280.301967][T16265] bridge0: port 2(bridge_slave_1) entered blocking state [ 1280.321206][T16265] bridge0: port 2(bridge_slave_1) entered disabled state [ 1280.331016][T16265] bridge_slave_1: entered allmulticast mode [ 1280.343644][T16265] bridge_slave_1: entered promiscuous mode [ 1280.383217][T16269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1280.639093][T16269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1280.846602][T16265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1280.917687][T16265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1281.301605][T16269] team0: Port device team_slave_0 added [ 1281.431833][T16440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2926'. [ 1281.483449][T16269] team0: Port device team_slave_1 added [ 1281.706569][T16265] team0: Port device team_slave_0 added [ 1281.874235][T16265] team0: Port device team_slave_1 added [ 1282.174151][T16269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1282.201517][T16269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1282.273548][T16269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1282.323490][T16265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1282.348250][T16265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1282.427032][T16265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1282.467154][T16269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1282.487970][T16269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1282.566576][T16269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1282.650425][T16265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1282.666568][T16265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1282.708302][T16265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1282.886490][T16466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2930'. [ 1283.147181][T16265] hsr_slave_0: entered promiscuous mode [ 1283.178069][T16265] hsr_slave_1: entered promiscuous mode [ 1283.197966][T16265] debugfs: 'hsr0' already exists in 'hsr' [ 1283.218497][T16265] Cannot create hsr debugfs directory [ 1283.932338][T16269] hsr_slave_0: entered promiscuous mode [ 1283.945415][T16269] hsr_slave_1: entered promiscuous mode [ 1283.958882][T16269] debugfs: 'hsr0' already exists in 'hsr' [ 1283.970362][T16269] Cannot create hsr debugfs directory [ 1283.978604][T16143] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1284.011229][T16143] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1284.047220][T16478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2934'. [ 1284.071283][T16143] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1284.148803][T16143] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1284.241431][ T6027] bridge_slave_1: left allmulticast mode [ 1284.248420][ T6027] bridge_slave_1: left promiscuous mode [ 1284.266229][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1284.294399][ T6027] bridge_slave_0: left allmulticast mode [ 1284.308395][ T6027] bridge_slave_0: left promiscuous mode [ 1284.324931][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state [ 1285.194252][ T6027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1285.241202][ T6027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1285.285181][ T6027] bond0 (unregistering): Released all slaves [ 1285.493749][T16143] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1285.559091][T16143] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1285.640454][T16143] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1285.676533][T16143] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1285.808521][ T6027] hsr_slave_0: left promiscuous mode [ 1285.838226][ T6027] hsr_slave_1: left promiscuous mode [ 1285.857769][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1285.876442][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1285.946364][ T6027] veth1_vlan: left promiscuous mode [ 1285.957713][ T6027] veth0_vlan: left promiscuous mode [ 1286.013775][T16507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2939'. [ 1286.745649][T16511] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2941'. [ 1286.776915][ T6027] team0 (unregistering): Port device team_slave_1 removed [ 1286.814276][ T6027] team0 (unregistering): Port device team_slave_0 removed [ 1287.325202][T16513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2942'. [ 1288.062896][T16521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2944'. [ 1288.416850][T16529] netlink: 'syz.2.2945': attribute type 10 has an invalid length. [ 1288.532919][T16529] team0: Failed to send options change via netlink (err -105) [ 1288.543654][T16529] team0: Port device wlan0 added [ 1289.760962][T16265] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1289.826455][T16265] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1289.866107][T16265] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1289.919880][T16265] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1289.994510][T16265] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1290.064295][T16265] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1290.136772][T16265] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1290.211553][T16265] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1290.326072][T16143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1290.536941][T16143] 8021q: adding VLAN 0 to HW filter on device team0 [ 1290.693285][ T6026] bridge0: port 1(bridge_slave_0) entered blocking state [ 1290.700862][ T6026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1290.999835][ T6026] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.007506][ T6026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1291.079155][T16561] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2950'. [ 1291.196154][T16269] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1291.265462][T16269] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1291.317908][T16269] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1291.377528][T16269] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1291.436164][T16269] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1291.539289][T16269] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1291.563940][T16565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2951'. [ 1291.606275][T16269] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1291.658747][T16269] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1292.067611][T16575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2954'. [ 1292.097818][T16575] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2954'. [ 1292.131615][T16575] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2954'. [ 1293.079219][T16265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1293.356967][T16265] 8021q: adding VLAN 0 to HW filter on device team0 [ 1293.535205][ T6026] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.542986][ T6026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1293.726288][ T6027] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.733940][ T6027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1294.025284][T16269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1294.485725][T16269] 8021q: adding VLAN 0 to HW filter on device team0 [ 1294.563291][T16609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2961'. [ 1294.598918][T16613] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2962'. [ 1294.751615][ T158] bridge0: port 1(bridge_slave_0) entered blocking state [ 1294.759230][ T158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1294.971721][ T158] bridge0: port 2(bridge_slave_1) entered blocking state [ 1294.979277][ T158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1295.180749][T16620] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2963'. [ 1295.258690][T16620] netlink: 'syz.0.2963': attribute type 1 has an invalid length. [ 1295.348574][T16624] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2963'. [ 1295.616536][T16620] bond1: entered promiscuous mode [ 1295.656950][T16620] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1295.705367][T16624] bond1: entered allmulticast mode [ 1295.910976][T16634] bond1: (slave bridge1): making interface the new active one [ 1295.930060][T16634] bridge1: entered promiscuous mode [ 1295.957607][T16634] bridge1: entered allmulticast mode [ 1296.006450][T16634] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1296.528581][T16143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1297.476217][T16143] veth0_vlan: entered promiscuous mode [ 1297.667334][T16143] veth1_vlan: entered promiscuous mode [ 1298.132556][T16660] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2970'. [ 1298.426895][T16143] veth0_macvtap: entered promiscuous mode [ 1298.579866][T16143] veth1_macvtap: entered promiscuous mode [ 1298.959746][T16143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1299.090569][T16143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1299.246511][T10099] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.281309][T10099] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.356381][T10099] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.390260][T10099] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.867811][T16265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1300.689251][T16269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1301.829133][T16717] netlink: 'syz.2.2976': attribute type 21 has an invalid length. [ 1302.530936][T16725] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2978'. [ 1302.578194][T16265] veth0_vlan: entered promiscuous mode [ 1302.757151][T16265] veth1_vlan: entered promiscuous mode [ 1303.186717][T16265] veth0_macvtap: entered promiscuous mode [ 1303.410647][T16265] veth1_macvtap: entered promiscuous mode [ 1303.956443][T16265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1304.081302][T16269] veth0_vlan: entered promiscuous mode [ 1304.136909][T16265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1304.359954][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.405334][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.449363][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.489819][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.594656][T16269] veth1_vlan: entered promiscuous mode [ 1304.834193][T16759] netlink: 'syz.2.2985': attribute type 21 has an invalid length. [ 1305.191282][T16269] veth0_macvtap: entered promiscuous mode [ 1305.285530][T16269] veth1_macvtap: entered promiscuous mode [ 1305.539963][T16269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1305.631593][T16771] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2987'. [ 1305.770124][T16269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1306.003307][ T146] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.048851][ T146] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.099743][ T146] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.134746][ T146] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.758436][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1306.819879][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1307.065579][T16788] netlink: 'syz.0.2990': attribute type 2 has an invalid length. [ 1307.100891][T16788] netlink: 'syz.0.2990': attribute type 2 has an invalid length. [ 1307.109720][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1307.148061][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1307.868100][T16800] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2992'. [ 1307.938595][T16800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2992'. [ 1308.760442][T16815] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2996'. [ 1309.228651][T16813] syzkaller0: entered promiscuous mode [ 1309.255339][T16813] syzkaller0: entered allmulticast mode [ 1310.087107][T16835] netlink: 'syz.2.2999': attribute type 2 has an invalid length. [ 1310.105613][T16835] netlink: 'syz.2.2999': attribute type 2 has an invalid length. [ 1310.831982][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1311.561264][T16855] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3002'. [ 1311.624910][T16855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3002'. [ 1312.548151][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1312.599845][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1313.032238][ T158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1313.084638][ T158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1313.228839][T16872] syzkaller0: entered promiscuous mode [ 1313.241105][T16872] syzkaller0: entered allmulticast mode [ 1314.157090][T16889] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2767'. [ 1314.521354][ T6027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1314.564904][ T6027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1314.828831][T16896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3012'. [ 1314.853512][T16896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3012'. [ 1315.146523][ T1027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1315.211954][ T1027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1315.332249][T16902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3014'. [ 1317.714349][T16921] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.724049][T16921] bridge0: port 1(bridge_slave_0) entered disabled state [ 1319.218314][T16368] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1319.241089][T16368] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1319.264029][T16368] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1319.292940][T16368] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1319.310148][T16368] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1319.430606][T16921] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1319.557585][T16921] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1320.492216][T16990] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3024'. [ 1321.317015][T16966] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1321.391302][T16966] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1321.460449][T16966] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1321.494831][T16266] Bluetooth: hci2: command tx timeout [ 1321.512420][T16966] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.603510][T17012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3027'. [ 1322.818199][T17012] bond0: (slave bond_slave_0): Releasing backup interface [ 1323.565218][T16266] Bluetooth: hci2: command tx timeout [ 1324.088109][ T12] bridge_slave_1: left allmulticast mode [ 1324.147710][ T12] bridge_slave_1: left promiscuous mode [ 1324.183025][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1324.261287][ T12] bridge_slave_0: left allmulticast mode [ 1324.322017][ T12] bridge_slave_0: left promiscuous mode [ 1324.354882][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1325.035873][T17043] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3037'. [ 1325.641992][T16266] Bluetooth: hci2: command tx timeout [ 1326.315098][T17067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3041'. [ 1326.349350][T17067] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3041'. [ 1326.375848][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1326.426536][ T12] bond_slave_0: left allmulticast mode [ 1326.458950][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1326.470739][ T12] bond_slave_1: left allmulticast mode [ 1326.479812][ T12] bond0 (unregistering): Released all slaves [ 1326.541084][ T12] bond1 (unregistering): Released all slaves [ 1326.685560][T17072] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3042'. [ 1327.294253][ T12] tipc: Disabling bearer [ 1327.335528][ T12] tipc: Disabling bearer [ 1327.357303][ T12] tipc: Left network mode [ 1327.732788][T16266] Bluetooth: hci2: command tx timeout [ 1327.992800][ T12] team0: Port device wlan0 removed [ 1328.627656][ T12] hsr_slave_0: left promiscuous mode [ 1328.667310][ T12] hsr_slave_1: left promiscuous mode [ 1328.727711][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1328.799018][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1329.812845][T17107] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3054'. [ 1329.857634][T17107] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3054'. [ 1329.886511][T17111] netlink: 'syz.5.3055': attribute type 11 has an invalid length. [ 1330.059793][T17114] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3056'. [ 1330.191268][T17117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3056'. [ 1330.221082][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1330.259109][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1331.669221][ T12] IPVS: stop unused estimator thread 0... [ 1332.632784][T17140] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3061'. [ 1333.536016][T17155] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3066'. [ 1333.594934][T17155] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3066'. [ 1333.916260][T17160] netlink: 'syz.5.3068': attribute type 11 has an invalid length. [ 1334.464716][T17167] syzkaller0: entered promiscuous mode [ 1334.486304][T17171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3069'. [ 1334.495809][T17167] syzkaller0: entered allmulticast mode [ 1335.010342][T16972] bridge0: port 1(bridge_slave_0) entered blocking state [ 1335.068620][T16972] bridge0: port 1(bridge_slave_0) entered disabled state [ 1335.115871][T16972] bridge_slave_0: entered allmulticast mode [ 1335.150404][T16972] bridge_slave_0: entered promiscuous mode [ 1335.250121][T16972] bridge0: port 2(bridge_slave_1) entered blocking state [ 1335.298071][T16972] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.330286][T16972] bridge_slave_1: entered allmulticast mode [ 1335.381814][T16972] bridge_slave_1: entered promiscuous mode [ 1335.449627][T17180] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3075'. [ 1335.845712][T16972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1335.932932][T16972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1336.435654][T16972] team0: Port device team_slave_0 added [ 1336.458654][T17196] netlink: 'syz.8.3081': attribute type 11 has an invalid length. [ 1336.509631][T16972] team0: Port device team_slave_1 added [ 1337.052864][T17207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3083'. [ 1337.117495][T16972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1337.183638][T16972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1337.250304][T17209] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3084'. [ 1337.295410][T16972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1337.355321][T17209] ipvlan1: entered promiscuous mode [ 1337.374010][T17209] ipvlan1: entered allmulticast mode [ 1337.398400][T17209] veth0_vlan: entered allmulticast mode [ 1337.476114][T16972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1337.513509][T16972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1337.606023][T16972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1337.668438][T17213] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3085'. [ 1338.083136][T17219] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3087'. [ 1338.309969][T16972] hsr_slave_0: entered promiscuous mode [ 1338.372269][T16972] hsr_slave_1: entered promiscuous mode [ 1340.263416][T17254] netlink: 72 bytes leftover after parsing attributes in process `syz.8.3096'. [ 1340.328023][T17255] netlink: 'syz.8.3096': attribute type 1 has an invalid length. [ 1340.387289][T17253] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3097'. [ 1340.427863][T17254] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3096'. [ 1340.576667][T17261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3098'. [ 1341.253203][T17266] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3100'. [ 1341.789689][T16972] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1341.898196][T16972] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1341.946765][T16972] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1342.050427][T16972] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1342.096027][T16972] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1342.233616][T16972] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1342.309673][T16972] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1342.445540][T16972] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1342.969871][T17294] netlink: 72 bytes leftover after parsing attributes in process `syz.8.3110'. [ 1343.010161][T17295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3109'. [ 1343.044765][T17294] netlink: 'syz.8.3110': attribute type 1 has an invalid length. [ 1343.128951][T17296] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3110'. [ 1343.782347][T17307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3113'. [ 1344.149386][T16972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1344.427955][T16972] 8021q: adding VLAN 0 to HW filter on device team0 [ 1344.563770][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 1344.571293][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1344.806932][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 1344.814520][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1345.927218][T17334] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3122'. [ 1346.653505][T17345] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3123'. [ 1346.747007][T17345] netlink: 'syz.1.3123': attribute type 1 has an invalid length. [ 1346.841977][T17347] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3123'. [ 1346.989397][T17345] bond1: entered promiscuous mode [ 1347.006902][T17345] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1347.311535][T17353] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3127'. [ 1347.573941][T17356] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3129'. [ 1347.611238][T17356] netlink: 'syz.5.3129': attribute type 1 has an invalid length. [ 1347.690027][T17358] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3128'. [ 1349.331045][T17387] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3136'. [ 1349.416226][T17389] netlink: 'syz.8.3136': attribute type 1 has an invalid length. [ 1349.453682][T17389] netlink: 'syz.8.3136': attribute type 2 has an invalid length. [ 1349.512665][T17389] netlink: 'syz.8.3136': attribute type 3 has an invalid length. [ 1349.541272][T17389] netlink: 236 bytes leftover after parsing attributes in process `syz.8.3136'. [ 1350.092218][T16972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1350.278679][T17397] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3139'. [ 1350.375315][T17398] netlink: 'syz.1.3139': attribute type 1 has an invalid length. [ 1350.433010][T17397] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3139'. [ 1350.811262][T17398] bond2: entered promiscuous mode [ 1350.857326][T17398] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1350.990147][T17408] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3141'. [ 1351.036468][T17408] netlink: 'syz.8.3141': attribute type 1 has an invalid length. [ 1351.726321][T17416] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3143'. [ 1351.734586][T16972] veth0_vlan: entered promiscuous mode [ 1351.918572][T16972] veth1_vlan: entered promiscuous mode [ 1352.509589][T16972] veth0_macvtap: entered promiscuous mode [ 1352.641564][T16972] veth1_macvtap: entered promiscuous mode [ 1352.972092][T16972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1353.199974][T16972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1353.466552][T17441] netlink: 'syz.8.3150': attribute type 21 has an invalid length. [ 1353.500385][ T55] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.524640][ T55] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.580567][ T55] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.635223][T17445] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3152'. [ 1353.669476][T17445] netlink: 'syz.5.3152': attribute type 1 has an invalid length. [ 1353.709541][ T6026] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.126587][T17451] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3153'. [ 1354.231306][T17451] netlink: 'syz.0.3153': attribute type 1 has an invalid length. [ 1354.294587][T17453] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3153'. [ 1354.477622][T17464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3156'. [ 1354.676464][T17451] bond2: entered promiscuous mode [ 1354.704715][T17451] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1354.741497][T17456] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3154'. [ 1356.406620][T17489] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3163'. [ 1356.475287][T17491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3164'. [ 1356.544879][T17491] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3164'. [ 1357.000518][T17497] veth0: entered promiscuous mode [ 1357.220861][T17496] veth0: left promiscuous mode [ 1357.882748][T17510] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3169'. [ 1358.579107][T17519] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3171'. [ 1360.128691][T17548] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3177'. [ 1360.435530][T17554] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3178'. [ 1361.389491][T17564] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3181'. [ 1362.097435][ T6027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1362.153170][ T6027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1362.578853][ T5809] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1362.635103][ T5809] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1364.149399][T17603] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3189'. [ 1364.575185][T17608] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3190'. [ 1364.988986][T17616] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3193'. [ 1365.246486][T17624] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3193'. [ 1366.840484][T17646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3203'. [ 1367.568202][T17662] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3207'. [ 1369.019130][T17679] Unsupported ieee802154 address type: 0 [ 1369.158181][ T29] audit: type=1804 audit(1779566586.157:5): pid=17685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3213" name="/newroot/47/memory.events" dev="tmpfs" ino=255 res=1 errno=0 [ 1369.277488][ T29] audit: type=1800 audit(1779566586.157:6): pid=17685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3213" name="memory.events" dev="tmpfs" ino=255 res=0 errno=0 [ 1370.356511][T17706] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3222'. [ 1370.432431][T17704] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1371.308499][T17716] netlink: 76 bytes leftover after parsing attributes in process `syz.8.3225'. [ 1371.380967][T17720] netlink: 'syz.1.3226': attribute type 12 has an invalid length. [ 1371.417674][T17720] netlink: 'syz.1.3226': attribute type 29 has an invalid length. [ 1371.447779][T17720] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3226'. [ 1371.487453][T17720] netlink: 'syz.1.3226': attribute type 1 has an invalid length. [ 1371.523339][T17720] netlink: 'syz.1.3226': attribute type 2 has an invalid length. [ 1371.564168][T17716] syzkaller0: entered promiscuous mode [ 1371.588256][T17716] syzkaller0: entered allmulticast mode [ 1372.236688][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1372.593178][T17738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3232'. [ 1373.534348][T17755] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3238'. [ 1373.545154][T17756] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3236'. [ 1373.639340][T17755] netlink: 'syz.5.3238': attribute type 1 has an invalid length. [ 1373.650563][T17750] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1373.698296][T17759] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3238'. [ 1374.218353][T17755] bond1: entered promiscuous mode [ 1374.251401][T17755] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1374.614484][T17773] netlink: 'syz.1.3240': attribute type 13 has an invalid length. [ 1374.671994][T17774] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3241'. [ 1374.687120][T17773] netlink: 'syz.1.3240': attribute type 17 has an invalid length. [ 1374.763249][T17774] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3241'. [ 1375.048726][T17776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3240'. [ 1375.413545][T17771] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.423467][T17771] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.773484][T17771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1376.869435][T17771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1378.040847][T17773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1378.069175][T17773] 8021q: adding VLAN 0 to HW filter on device team0 [ 1378.115292][T17773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1378.183032][T17773] bridge0: port 1(bridge_slave_0) entered blocking state [ 1378.190861][T17773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1378.236317][T17773] bridge0: port 2(bridge_slave_1) entered blocking state [ 1378.244033][T17773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1378.318313][T17773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1378.342346][T17773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1378.441124][T17773] veth1_vlan: left promiscuous mode [ 1378.456454][T17773] veth0_vlan: left promiscuous mode [ 1378.472046][T17773] veth0_vlan: entered promiscuous mode [ 1378.498487][T17773] veth1_vlan: entered promiscuous mode [ 1378.529339][T17773] veth1_macvtap: left promiscuous mode [ 1378.543593][T17773] veth0_macvtap: left promiscuous mode [ 1378.556811][T17773] veth0_macvtap: entered promiscuous mode [ 1378.612631][T17773] veth1_macvtap: entered promiscuous mode [ 1378.643195][T17773] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1378.679726][T17773] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1378.709787][T17773] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1378.739540][T17773] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1378.783773][T17773] bond1: left promiscuous mode [ 1378.790342][T17773] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1378.806420][T17773] bond2: left promiscuous mode [ 1378.813060][T17773] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1378.882432][T17786] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3243'. [ 1379.112070][T17809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3248'. [ 1379.126075][T17821] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3252'. [ 1379.137777][T17810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3248'. [ 1379.234051][T17819] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1379.784693][T17830] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3254'. [ 1379.858129][T17831] netlink: 'syz.0.3254': attribute type 1 has an invalid length. [ 1380.275218][T17831] bond3: entered promiscuous mode [ 1380.294143][T17831] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1380.436887][T17838] netlink: 'syz.5.3257': attribute type 11 has an invalid length. [ 1381.525206][T17844] syzkaller0: entered promiscuous mode [ 1381.547287][T17844] syzkaller0: entered allmulticast mode [ 1382.480158][T17867] netlink: 76 bytes leftover after parsing attributes in process `syz.8.3263'. [ 1382.531343][T17871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3264'. [ 1382.575270][T17875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3264'. [ 1382.627933][T17876] veth0: entered promiscuous mode [ 1383.080638][T17867] syzkaller0: entered promiscuous mode [ 1383.102001][T17867] syzkaller0: entered allmulticast mode [ 1383.146028][T17872] veth0: left promiscuous mode [ 1383.596975][ C1] vcan0: j1939_tp_rxtimer: 0xffff888053c54600: rx timeout, send abort [ 1383.768511][T17887] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3268'. [ 1384.097961][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801a217000: rx timeout, send abort [ 1384.108913][ C1] vcan0: j1939_tp_rxtimer: 0xffff888053c54600: abort rx timeout. Force session deactivation [ 1384.490144][T17897] netlink: 'syz.5.3271': attribute type 11 has an invalid length. [ 1384.525889][T16368] Bluetooth: hci3: command 0x0406 tx timeout [ 1384.606774][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801a217000: abort rx timeout. Force session deactivation [ 1385.234443][T17908] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3275'. [ 1385.382909][T17914] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3277'. [ 1385.449512][T17915] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3277'. [ 1385.958021][T17919] veth0: entered promiscuous mode [ 1385.997092][T17918] veth0: left promiscuous mode [ 1386.813821][T17934] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3285'. [ 1386.835342][T17935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3284'. [ 1387.638018][T17951] netlink: 'syz.2.3287': attribute type 11 has an invalid length. [ 1389.202982][T17973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3293'. [ 1389.312464][T17969] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3292'. [ 1389.330039][T17971] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3292'. [ 1389.347785][T17975] veth0: entered promiscuous mode [ 1389.364679][T17974] veth0: left promiscuous mode [ 1389.642027][T16368] Bluetooth: hci0: command 0x0406 tx timeout [ 1389.829025][T17979] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3295'. [ 1389.916275][T17979] netlink: 'syz.0.3295': attribute type 1 has an invalid length. [ 1390.091724][T17986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3298'. [ 1390.278503][T17979] bond4: entered promiscuous mode [ 1390.310202][T17979] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1391.044325][T18001] netlink: 'syz.5.3301': attribute type 11 has an invalid length. [ 1392.243137][T18022] __nla_validate_parse: 2 callbacks suppressed [ 1392.243213][T18022] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3306'. [ 1392.337542][T18023] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3306'. [ 1392.734457][T18030] veth0: entered promiscuous mode [ 1392.841104][T18028] veth0: left promiscuous mode [ 1393.052789][T18037] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3310'. [ 1393.676314][T18041] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3312'. [ 1393.791496][T18041] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3312'. [ 1394.842532][T18060] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3318'. [ 1395.050344][T18065] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3320'. [ 1395.116918][T18066] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3320'. [ 1395.528653][T18071] veth0: entered promiscuous mode [ 1395.656918][T18069] veth0: left promiscuous mode [ 1395.720359][ T5226] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1395.729709][T18079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3324'. [ 1396.738740][T18094] netlink: 72 bytes leftover after parsing attributes in process `syz.8.3327'. [ 1397.734197][T18110] __nla_validate_parse: 1 callbacks suppressed [ 1397.734272][T18110] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3332'. [ 1398.076873][T18113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3333'. [ 1398.534973][T18119] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3335'. [ 1398.580455][T18119] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3335'. [ 1399.337253][T18133] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3340'. [ 1399.798139][T18139] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3341'. [ 1399.907504][T18139] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3341'. [ 1400.472821][T18150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3344'. [ 1401.785000][T18168] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3350'. [ 1401.806662][T18168] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3350'. [ 1402.786986][T18179] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3353'. [ 1402.865200][ T5226] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1403.124229][T18181] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3354'. [ 1403.617537][T18189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3355'. [ 1404.236210][T18196] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3358'. [ 1404.610772][T18200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3359'. [ 1406.213256][T18226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1406.270832][T18226] batadv_slave_1: entered promiscuous mode [ 1406.427886][T18232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3368'. [ 1408.051574][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1408.818666][T18256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3372'. [ 1408.838531][T18258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3374'. [ 1409.189463][ T5226] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1410.322279][T18278] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3380'. [ 1410.636774][T18284] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3382'. [ 1411.793153][T18299] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3385'. [ 1411.827782][T18298] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3386'. [ 1411.867764][T18299] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3385'. [ 1412.154589][T18306] netlink: 'syz.1.3385': attribute type 1 has an invalid length. [ 1414.017399][T18333] ===================================================== [ 1414.025161][T18333] BUG: KMSAN: uninit-value in bpf_prog_run_generic_xdp+0x19a5/0x20d0 [ 1414.034085][T18333] bpf_prog_run_generic_xdp+0x19a5/0x20d0 [ 1414.040008][T18333] do_xdp_generic+0xe07/0x17b0 [ 1414.045199][T18333] tun_get_user+0x52df/0x6fe0 [ 1414.050284][T18333] tun_chr_write_iter+0x3e9/0x5c0 [ 1414.055624][T18333] vfs_write+0xbe1/0x15c0 [ 1414.060221][T18333] ksys_write+0x1d9/0x470 [ 1414.064937][T18333] __ia32_sys_write+0x9a/0xf0 [ 1414.069802][T18333] ia32_sys_call+0x37a7/0x4360 [ 1414.075191][T18333] do_int80_emulation+0x15a/0x360 [ 1414.080620][T18333] asm_int80_emulation+0x1f/0x30 [ 1414.085872][T18333] [ 1414.088263][T18333] Uninit was stored to memory at: [ 1414.093757][T18333] pskb_expand_head+0x497/0x1a40 [ 1414.098924][T18333] do_xdp_generic+0xb30/0x17b0 [ 1414.104158][T18333] tun_get_user+0x52df/0x6fe0 [ 1414.109012][T18333] tun_chr_write_iter+0x3e9/0x5c0 [ 1414.114400][T18333] vfs_write+0xbe1/0x15c0 [ 1414.118927][T18333] ksys_write+0x1d9/0x470 [ 1414.123704][T18333] __ia32_sys_write+0x9a/0xf0 [ 1414.128571][T18333] ia32_sys_call+0x37a7/0x4360 [ 1414.133747][T18333] do_int80_emulation+0x15a/0x360 [ 1414.138991][T18333] asm_int80_emulation+0x1f/0x30 [ 1414.144313][T18333] [ 1414.146711][T18333] Uninit was created at: [ 1414.151201][T18333] __kmalloc_node_track_caller_noprof+0x4f6/0x1750 [ 1414.158176][T18333] __alloc_skb+0x90d/0x1190 [ 1414.163068][T18333] alloc_skb_with_frags+0xc5/0x990 [ 1414.168726][T18333] sock_alloc_send_pskb+0xacb/0xc60 [ 1414.174416][T18333] tun_get_user+0xefa/0x6fe0 [ 1414.179183][T18333] tun_chr_write_iter+0x3e9/0x5c0 [ 1414.184560][T18333] vfs_write+0xbe1/0x15c0 [ 1414.189202][T18333] ksys_write+0x1d9/0x470 [ 1414.193864][T18333] __ia32_sys_write+0x9a/0xf0 [ 1414.198746][T18333] ia32_sys_call+0x37a7/0x4360 [ 1414.203906][T18333] do_int80_emulation+0x15a/0x360 [ 1414.209491][T18333] asm_int80_emulation+0x1f/0x30 [ 1414.214707][T18333] [ 1414.217180][T18333] CPU: 1 UID: 0 PID: 18333 Comm: syz.5.3395 Not tainted syzkaller #0 PREEMPT(full) [ 1414.226860][T18333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1414.237272][T18333] ===================================================== [ 1414.244576][T18333] Disabling lock debugging due to kernel taint [ 1414.250840][T18333] Kernel panic - not syncing: kmsan.panic set ... [ 1414.257392][T18333] CPU: 1 UID: 0 PID: 18333 Comm: syz.5.3395 Tainted: G B syzkaller #0 PREEMPT(full) [ 1414.268521][T18333] Tainted: [B]=BAD_PAGE [ 1414.272758][T18333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1414.282921][T18333] Call Trace: [ 1414.286271][T18333] [ 1414.289268][T18333] __dump_stack+0x26/0x30 [ 1414.293750][T18333] dump_stack_lvl+0x50/0x1c0 [ 1414.298484][T18333] ? dump_stack+0x12/0x25 [ 1414.303049][T18333] dump_stack+0x1e/0x25 [ 1414.307348][T18333] vpanic+0x7b4/0x1430 [ 1414.311604][T18333] panic+0x15d/0x160 [ 1414.315715][T18333] kmsan_report+0x31a/0x320 [ 1414.320397][T18333] ? __msan_warning+0x1b/0x30 [ 1414.325215][T18333] ? bpf_prog_run_generic_xdp+0x19a5/0x20d0 [ 1414.331280][T18333] ? do_xdp_generic+0xe07/0x17b0 [ 1414.336368][T18333] ? tun_get_user+0x52df/0x6fe0 [ 1414.341362][T18333] ? tun_chr_write_iter+0x3e9/0x5c0 [ 1414.346876][T18333] ? vfs_write+0xbe1/0x15c0 [ 1414.351630][T18333] ? ksys_write+0x1d9/0x470 [ 1414.356338][T18333] ? __ia32_sys_write+0x9a/0xf0 [ 1414.361345][T18333] ? ia32_sys_call+0x37a7/0x4360 [ 1414.366554][T18333] ? do_int80_emulation+0x15a/0x360 [ 1414.372078][T18333] ? asm_int80_emulation+0x1f/0x30 [ 1414.377336][T18333] ? ___bpf_prog_run+0xe95c/0xea90 [ 1414.382697][T18333] ? __bpf_prog_run32+0xc2/0xf0 [ 1414.387900][T18333] ? kmsan_get_metadata+0xf1/0x160 [ 1414.393191][T18333] __msan_warning+0x1b/0x30 [ 1414.397865][T18333] bpf_prog_run_generic_xdp+0x19a5/0x20d0 [ 1414.403856][T18333] do_xdp_generic+0xe07/0x17b0 [ 1414.408806][T18333] ? filter_irq_stacks+0x49/0x190 [ 1414.414151][T18333] ? tun_get_user+0x525e/0x6fe0 [ 1414.419163][T18333] tun_get_user+0x52df/0x6fe0 [ 1414.424009][T18333] ? stack_depot_save_flags+0x35/0x790 [ 1414.429804][T18333] ? kmsan_get_metadata+0xf1/0x160 [ 1414.435245][T18333] ? kmsan_get_metadata+0xf1/0x160 [ 1414.440598][T18333] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1414.446916][T18333] ? kmsan_get_metadata+0xf1/0x160 [ 1414.452241][T18333] tun_chr_write_iter+0x3e9/0x5c0 [ 1414.457467][T18333] vfs_write+0xbe1/0x15c0 [ 1414.461977][T18333] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1414.467699][T18333] ksys_write+0x1d9/0x470 [ 1414.472217][T18333] __ia32_sys_write+0x9a/0xf0 [ 1414.477094][T18333] ia32_sys_call+0x37a7/0x4360 [ 1414.482048][T18333] do_int80_emulation+0x15a/0x360 [ 1414.487248][T18333] ? clear_bhb_loop+0x50/0xa0 [ 1414.492055][T18333] ? clear_bhb_loop+0x50/0xa0 [ 1414.496879][T18333] asm_int80_emulation+0x1f/0x30 [ 1414.501963][T18333] RIP: 0023:0xf71561ab [ 1414.506132][T18333] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1414.525891][T18333] RSP: 002b:00000000f540d44c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 1414.534470][T18333] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 00000000800000c0 [ 1414.542560][T18333] RDX: 0000000000011dc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1414.550715][T18333] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1414.559137][T18333] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1414.567247][T18333] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1414.575541][T18333] [ 1414.579126][T18333] Kernel Offset: disabled [ 1414.583526][T18333] Rebooting in 86400 seconds..