last executing test programs: 20m56.993131697s ago: executing program 32 (id=5261): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getpeername$tipc(r0, 0x0, &(0x7f0000000100)) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r2 = dup(r1) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x903, 0x1, 0x0, 0xffe, 0x0}) 19m43.969021136s ago: executing program 33 (id=6183): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 19m2.055140938s ago: executing program 34 (id=6660): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x1, 0x9, 0x1, 0x8}, 0xb, 0x0, 0x32, 0x5, 0x9, 0x7, 0x9, 0x1d, 0x1, 0xffffff5c, {0xffff1c72, 0x23, 0x3, 0x1008, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) sendto$packet(r0, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0x12, 0x4, 0x0, 0x0) 13m58.238789364s ago: executing program 35 (id=8438): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80082, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xc695d31f854950dd}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0xffffffffffffffff, 0x6, 0x86}, 0x65}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x27}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000001c0)="27030200dc0f14000e00113c0ff000000000ff8400000066e4532cc10200000003125ce882cbf490d90812533f00000000a4edf8c076dffa7edea2e427edff792a803c9e8eb420c4", 0x48}, {&(0x7f0000002380)="76e69c0141b4626c18e58316fb1785bc79a094726e33891c6d73f43317b7de3105b7a250790f8a23088b7292aad0049477fd7b736036a2ba810a11b6e5e83b06e0c428d362a29030f3fbb8f93a957f85472c59a37fbc2dc4abf47a23fe1bbab86b3666155606864b97f7615a55989cd2e143f1a9aca24050db9efff1f1639b55a2a771ec9e91f94fb670c3f35f31c40172189010e598500aa376763444ecaf5df2a31e04eda4201194c49c48d817c9d8d50d47c014b329be33b127527fe321b0977010d9e10472a15f48ef82a32b10e24a1b56e981b91257aeddd7fee2fe035a1a164b3906ca184ad08f294cde3dfa48743847cac62a87c2d96176a9f6b4278dc95c6c637294986fa9e3e82b504341f82bf314389b0af7c8e07cb6f5ef9bcd83993c880ef2b2aa313a124bee3deb3133338c291d698f04b796be5514c81bad54c22190acda8145b1c14c4b916e2f5c2f10a8702b90d26e0332605edbc351edcd5621cf8c0f1585b1a53879f9ad931c18b15426856dc1c800e4cce36c6c1bf880c0c40a718810ff4793eba9e39d7cd9b351905a845dd3064613cd6f75802a6bc51c1524b412a2a68e6fa4886bd13b48aa9a12a7ace6fa08ccc86cda842d2f4b564a76a9e8adad2249e0dc200a2e647d34ef0dc23dd85674cce8f8e08a6c5ea76db48ac832f2a6e7514c9ab9f7e99fb3a7ec6cbc1ab45e12d151176cd6a044572928dfd2b72e3557d037b12328f7d4388a4ff8a8e890b2cdaa61fd525dfd3d0feda9c066feff70d89e8fbaaa4ac79e0b814c7b0cb9de9b5915ee30c12c55dc242fa36f96a6b4a437e2f7bac25fb284eec70388c1d4ee9fb51483c801007a74c1806141802eb107b80a047315c048db3671e35139544988b51a23136b02151a06114cc80c05b772786a505edc6d8f74a66b126a940f06000d7abbf3224b9e1f86eb693778968b3e982f197570ffa5732524be57aba33a59cf0032ef61b52f7c2fc2cd992d616452316ee21e7361cfc527acb09f0f46bb8ef013f28d7f615b09037d26e0715d927afee6b9878adad923ce6a6114bb8d3463be786232330a028c152adb31596c77a60231d53fbb8ce73509f37100f69c9004429e904b644de72b865fdccedbc99927542df25180f5880d20590900a9e8b711c8867b67b98d48caf8259797b41284f6e52aa5177ca06a4f25a568ea3a5dd13c6711436d63b814da12b72470eb3468860e5ef86bf381babc6cec73757a1c38a8cf9887bb69045b155ed0ae6c5f2c07f3b9f02c6f02a9ee474e3a9d75e67694bb2a0f28a672a5883dc9688ca2166f914bb1cfc70685907bfa4e9693d9620969fa41ca907751335193417b468de3bab8bf0b7438abe80f494c95e017f41e9a232c52153bc58adf7cc845e770ba119756bad683ff9c701cdd34bc540d8164cf3099c011b328fc0a0445e8eb8085c8cd2fdaf22e1dea9d04454b37af3c83dd3f667f73ca9eb0c3e9bc328b536a1ae9a449b24e227bb05692b16560756d9f0cb3200df43c26d3dbed542f7bd4e3d1329c8e9f631520355ea32dfc72e59254b1687197c8374111ee1de4c1784d843aa26992280c9ec267965b8d4d6461afcd597ce636316f5c4ac8f1bec9aa16acd974798c10475e53310630a36796ab4bba263ec76008a821ee9b58861e77f1aa341b9a1bcc9e21c9eb0625297604cdf14e77040e46603597f87d00053c7aafd8130813102105463ea538990f880525cd80e12c426eda2f87a4aefe29505de1a924fad50d9b97a37418331a542333585105ca18976435917721e80f3c631f268b8517f00dc9c8da872328a27e296aa7422b290327feda241d7ea0cd81750d044969e4429197ee55e8111193aee3df3bf37961a4323ac640b0fb11b19cb4e28756defd9f2e1ef3adc3b0aeb5102399dde99e5e67ff4d18c6475440612f42274d17ebc0280f73c89e77fd9dd652edb5ea4e7ad7326dd4c69cea26b47d8314ad412f8b96f2a33a6323c1dc4050ffde22b31656c22b8a5597c3c50cbf4efa9c8d2e4200ccab35ad8badc09d8e05a7abc3dfdce491ecd682dde18f2da41bff3c2e293ddc82df8a1ca558a08b7937bd7228ed25522f41bcdfba8c01a7aa93af6e58b3912dace81ffc5f079e8a4e9d45778afa57909a8e9138abbf4ae6bdbc571d8cc0fb68755b644934fc98fdb263098afab3ffed8e80ea4e935852d9577935c0a5b03425e5e1c3327213d0068dea19165602200080076fe3ad291b73f08e5bf3cb50f60510b85f09bec5dd2118eee65909ef08bbad2e38ef2fa7d6c0bbb2fbf90e1a63b26c8e41f17b35b1e55885ac66f263d0f42a27a7823d664e3ae65909dd411f05371f21e5bbf7424d41b966e2e8891ae13c3fb700987789f79cca95807ab3068549f250ca4b6c821f82f3683d42fde5ccbfafba73c720f8481a7e4d2315e2219f4925893268649dddf696586916bb8c02a3697c38016788d4c799cbbc52043d0ebd08d74efb4619a46db86c744928a580f53ae2d5bbbc69342f722ab65b305975ab500ce7335ceb7d0f726c83a2c47eccf416fdb79f8439d2c608019ea2ef94d1fe8a7367013ae57330165228509d62fab87f04b73a76f80049f23d11a3068721414f8e45b18f4c1d56c11da71c949b35e6c5305452057f947520abbaf701c9b7cbfe623adc65a050458cb5948d1c1699b452b3d9fbba6b3bcdb537bbbf95d8267760cd943de819349966dc515babfca73d5ff3551bc56fe0f9dedb6dd5f4463a3aa652dab81a589ca4e4b0f19ee3b4b20c3986df2f72ba990b421c77b00a9b5cca5d850d607d0a46c2f1b1bbf8dc7f0cc6fea3104615a6cd698d89fca37adf4edfe4ba7c16231a9f2a89c55612e9c7031b7d56d2eb88745ba43a63a122d4d6661e83408a807f9b4519c05f01383811e9a2506c0c23618528599152f7a0481d1e576e4eba29c7725f24f649be7e5d7b9678a91e22d559ee77a1ddfe7225afa40085061c492fc4714f90e481cf494ec6d108fe0be6633d4f4785cb1c82f15190333398283ade4cb97f8104a195098a5a1c90227797fa8216d4762b6e78c60030e69f413cccf052df64a3d1bda69f6dbff49a68ef298809390f39a91e3b5b1971dac8554ed9ae24b4789ba60c145c059b1cfbf6594ed3c734bb4e1172f2e31a18659764bf324621d68b8e356ac3faee71ea97b0b78eeaa29c0f7ee1129777ef1ecd4d7f6586f8d0308709a94489951a04d7eba9793af6c929a0e91cda90457ca1c128cb6aa23f6da8f64f0d78a59f07a19515d9f607aa79c7b6c466e474e45ad85b0f2b82d470c03f7bbfb2fa68b32d4ac188d4a64f22b29c3af9f0b39bc2bb6b399e50f71968effe5b2f0d51489aca30993a67dbd80698f9a0c2ba9addffa3c3712215e63f424ebb5ebaf24fbf476f1d85493050c8be181f7f8783a344849e5b58a7038979d2dff546eac853be1529fbe865a3f97643e8522956e0e361ac278e014328aea0b8d4268fd157513bd0f64f589ff8aaa0df2eb929984661031626bc661a5d3035b373177a4703a5000ef9b3ccb84b3dbaecb25ca341c5f12959d214e84b6545f47704d635765b336e4374975c2c40d5814b68b02965e517197edb553e7d3d8432544f66ce84990e7873fa2fadfaaeaa9915f907b3396b8529b03b646cf29be65784b5c08aa77521dd5064669f5ab33cc8ea168ea80949af9ee3937b2aa54250bd733c51c7c4be47c5848abf86b6f522e2a2dd4aa39693af731d70314e1d7af25c57a2dd126121bcd316118c66c18e2109a0c87714f00deaef07648e75f498eb7a8f30784376d14121a1ff34d402c5255fd2c0569624e93a796eb92980ee82ed283bb538e20dd8b02db072f897004f0e11de081cab5bedd9438c612982f1c73388ed98ae3b2d3adc6b8e70434c8992f52ab7c9488da5b67c6c003fdf530ef4172e0ccc16ff75fe6c919619c7ae513a8fcdfdb01410df94978f88b44e60b17a1984a600e04bd072fa731e19f75034d78b57f9890ab4dff68bf2928b5fc711bae0f1baeb8596e8a42f7f172125fb1da929d1f921c53f6cba0d98cd6e31b41ebf3935981b9e98524dd344b9e76b66d31f7d47869cdd3ae49e4e8c42264be751219861504ad49ab00e384e7bbf06472714829dd61e58a1784696a02eee6d9c92446392cadf4436c7eb769d1c5226164a9be70d2c2c6b71342a6d03dc0d39d224f9df8e4ed11c86a47531d5449e5364e8ca5af4c03455fa9da8b5b0d174e41bace68e515f9967d79eaaac20b2a9e773b3418ff1a10c1835bed07e6109eac8ea4f130bc70aad103356f9749195fc2745f7076b5b165ff56de0596018b8251a0bd700db48a2243fe56831cf6785d70ded595b1bf9b25f2979923176109adb8012ae650c3fcb110352b884f79aeb465817124f75cda3168ec65cdace89522c0a7061629ea0d5d0573b9aa029500d64cb5df4f440859e4944047e6967511f0f25e9a45751d296ed6b61d4f217c28672d34696fcbaad5a57fd0e063537e889df2bf9e20e6c075296a800179a23e605948dc74fcf0c4ea958884d00000000000000efbec72796f34e0ca728886adaf187425972c64a283731e57d049307116d788944d6f9c899c028dba614c495b71bd3b1e1b22a7af6a0a3f2606693d2d1e4aef464a691a672f85d08e7d3150f843cbe6fb9d915946b663e7a7d3a27c317b1006b6ee8480db551cfbe70318bad1a2e21bdb95ae4f79b6bc2a5bafac389866005e82510debc8c0f670e7f02dacb4aebbe28acb849cc74a0e0ca91bc68f1417fafee298ae78743912246168c06a2d29bb8c74edf74af5c6927887208fdcd617de132c8606750b31299300f7c6444193c6a2ff00f7c77d25854b873", 0xd79}, {&(0x7f0000000640)="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", 0x162}, {&(0x7f0000000a00)="a5ca8683d601768d303ca112b53e7aa9b7692478467c2525cc9ceb426e1c40e3b29380122d838019715ede6740900e4a5b9097b6713ba207b45f64e07e8d44f24c842b84e2c5c3d4175f2c59ef949b2cfb2b1722cf08388fed3e7ff321bda9f2a0744407b6a38593ab8ff05b41a7bc10f7424c9da00d3b2dea193936dbae3b28e7f3ab2ec79d512847fce7d00e40c1e127d871123a121c8c684d714b81314f94d74e8dd61d5bff0f7a86dc7452ce6fcdb767dc9953058022e5f082d4024350a9e1d65f80844770359a06b0554bd065b79ede8b2138a0ed", 0xd7}], 0x4}, 0x45) 13m57.217937322s ago: executing program 36 (id=8441): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xa, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x16}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e4}, 0x44090) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 13m14.095616447s ago: executing program 37 (id=8530): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8064}, 0x20040084) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00'}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 13m14.080692567s ago: executing program 38 (id=8526): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8064}, 0x20040084) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0xf}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x14) 13m14.040140479s ago: executing program 39 (id=8527): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x4ac, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x478, 0x2, [@TCA_MATCHALL_ACT={0x474, 0x2, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x7fe, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x1, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x0, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x3, 0x100, 0xfffffffe, 0xd, 0xff, 0x3, 0xfffc, 0x6, 0x10a4, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0x1, 0x3, 0x2, 0x9, 0x81, 0x7, 0x8, 0x5, 0x10001, 0x8f7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0xffffca9a, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x0, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x8, 0x6, 0x10007e, 0x8, 0x0, 0x5, 0x470, 0x7f, 0xe, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x9, 0x2, 0x2, 0x6, 0x3ff, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x180, 0x2f0cb955, 0x7, 0x8, 0xf, 0x6ae, 0x9, 0x0, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x7, 0x6, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0x40ac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x3, 0xa, 0x3, 0xffffffff, 0x8, 0x9, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x8d, 0x6, 0xffffffff, 0xffb, 0xff, 0x3, 0x8, 0x3, 0x2, 0x9, 0xb, 0x399d, 0x5, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x206, 0x5f, 0xac, 0xf, 0x4, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x6, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x4, 0x2, 0x1, 0x200, 0x0, 0x8, 0x7, 0x0, 0x80, 0x5, 0x8, 0x1, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0xafb, 0x805915, 0x10001, 0x1]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x8, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0xa, 0xb}, {0x6, 0x1, 0xd, 0x800, 0x1}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x10}, 0x0) 13m14.023720429s ago: executing program 40 (id=8533): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05033600d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 12m21.693070985s ago: executing program 41 (id=8696): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x28, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'veth0_to_team\x00', {0x2, 0x4e20, @broadcast}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f00000000c0)={@empty, 0x1, 0x2}, 0x20) 12m21.668774285s ago: executing program 42 (id=8689): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x60000, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x81, 0x7, 0x6, 0x8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {0xffff, 0xb}, {0x3, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030028590214000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 12m21.644245016s ago: executing program 43 (id=8699): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_newroute={0x1c, 0x18, 0x1, 0x1000000, 0x25dfdbfd, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x26004890}, 0x0) 12m21.600213517s ago: executing program 44 (id=8703): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x7c) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r2, {}, {0xafabc05531515610, 0xfff3}, {0xf, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) close(0x4) 12m21.594493007s ago: executing program 45 (id=8691): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)) unshare(0x400) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x40}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'hsr0\x00'}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth1_to_bridge\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8b0b, &(0x7f0000000200)={'wlan1\x00', @random="9ffff7070600"}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3e, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000003ec0)={'gre0\x00', &(0x7f0000003e40)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x380d3240, {{0x5, 0x4, 0x0, 0x2, 0x14, 0x68, 0x0, 0x5, 0x2f, 0x0, @multicast1, @local}}}}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="6eff0000000000000000004756f85839"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x20}, 0x94) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)) socket$packet(0x11, 0x3, 0x300) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = getuid() getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0xc) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xc) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)=0x0) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001240)={0x48, 0x2e, 0x1, 0x70bd28, 0x0, "", [@nested={0x4, 0x119}, @nested={0x34, 0x11, 0x0, 0x1, [@nested={0x2f, 0xcf, 0x0, 0x1, [@generic="d478b585fcf4962925eb81095dd3d92e983e841d6ef7368187237f5e91a74d57e8aaee05ec6319", @nested={0x4, 0x95}]}]}]}, 0x48}, {&(0x7f00000012c0)={0x1654, 0x2d, 0x100, 0x70bd26, 0x25dfdbfb, "", [@typed={0x8, 0x3a, 0x0, 0x0, @fd=r8}, @nested={0x1558, 0x63, 0x0, 0x1, [@typed={0xc, 0xee, 0x0, 0x0, @u64=0x76f}, @generic="fc0b1ca74f5d3e666d30", @typed={0x8, 0x3a, 0x0, 0x0, @uid=r9}, @generic="29b6a1b4af1d01a1c6ecec46e29503dd9834", @nested={0x4, 0x14a}, @typed={0x14, 0x8d, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @nested={0x4, 0x135}, @nested={0x14fe, 0xcc, 0x0, 0x1, [@nested={0x1b4, 0x6, 0x0, 0x1, [@nested={0x8, 0xc1, 0x0, 0x1, [@nested={0x4, 0x158}]}, @generic="b9373b9ccf0bf9b397c12b4271225ed1e9c9b5318c8ff88a086f8dc496abe412bec9d63c67f777ae58b0476974f5281a8440c573f97eb45767a4c561c9379d94f8cc204d70", @typed={0x8, 0x110, 0x0, 0x0, @fd=r6}, @typed={0x8, 0xc2, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x145, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="73193f1142", @nested={0xc0, 0xa0, 0x0, 0x1, [@nested={0x4, 0x10c}, @typed={0x8, 0x93, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x4, 0x141}, @typed={0xe, 0xee, 0x0, 0x0, @str='syzkaller\x00'}, @typed={0x98, 0x121, 0x0, 0x0, @binary="fba5ed733762479e6251e59e72620c9d520e996a6ae459ee66a6615095ff5a6190ec242cac79e6607e7803228dfb2f5a348963faed28bf764b7ff877152a1fe95ba2d83e64b53f4f95149f5a8a1733d95d0d81c97a3c954ce4546e4b39407a38afd00c4e8aac29cb829cf21d7c31433ce10a36115f3b405bdd364804d24bed80c0e53e4911f3f08859bcefc7ee7dbf79a524d7d7"}, @nested={0x4, 0x12d}]}, @generic="785abc76c9e250fa6702c2acb669c0d34ae7bda6e20e9255d3dbad2f2a7106cb7501ddd6bd2646682745151e5fd2d2052497930a054340d06348829f9e9d47e9faa4da71d346b9d110334e6957d6b99fc8a12ad43c3be54e672a7413debdc25292cd57611fe7e2dc461d3c58dab21ea4a9182c7cc489e206861e", @typed={0xa, 0x14, 0x0, 0x0, @str='wlan1\x00'}]}, @nested={0x4, 0xab}, @typed={0x4, 0xdb}, @typed={0xc, 0x8b, 0x0, 0x0, @u64=0x4}, @generic="fdfa6a70710fe8678ad6a3c4ef2b9abeb755a0685f73a11da557d613d40015e6a83101e75a57031379fd07831a36c15e8d9001226f546a7195d7b7750a545d41710f8548a7dab37cc6a1d680905d61d443fd80a8f261a16e43dd114a98416607b76ec32d8946d33a79ee654908c7a582a205136c87cac7d6df9a0d3826025e50ed45a8dc2f9baa5a38ac2444c924e2c7e7ecc1c317c879872bc37c147580", @generic="bf76935f7619fc61d994a7450ac90ac4ee8fa1c2366bd1df9a95c94452b5fc85967c87266ecd3f2847a10fac65152c3fd54876c76e27bc3a91b872e899d385e2411ed10dd09c499f9fe28103131875b5d0876fde74f7f599c4240ee223dce088233b7a6dc8875ca67859d1020d7e183767644fc95f768ec8db6ba31e51bb87e2e3011a4fbff11a20c7e5d1422f349f49a21f29a6d0a3830cf11332a304916336cbf5b662bfea7f10f062cea9e4b16ac33b89c2ddf4bf08ea11db16fac80c31e191882cd2bee33d60615a438dd522713ec8cdfe6ee4230a827ec0b1378888", @nested={0x111b, 0xc7, 0x0, 0x1, [@nested={0xf0, 0x56, 0x0, 0x1, [@typed={0x9, 0xd1, 0x0, 0x0, @str='gre0\x00'}, @generic="151cc20f865bc881b95a7d1b92df54e01992ad0dc6288217a3fcd06275c835578e656df16833dffe67130f3f3e0e75e439275dc2b27d39e3d8c5088df0efa29c897c4d5be760330f17e3b6d4e6de91bc8510c2c098ea38a53d0d6f725506c2d796838da18a59da4a3ec5a9234df13be7abe165cc774e8ad2d4a0b28320d29974027b183550802c4221e9ec81f059a025c6b0b4eafcc8ec5608fb7a7aaea2edb66b41b8a2a162249b39f0dbd3688a4930ded674e28a89376d8366de9c42d8804946b0a418e64faa284eadbb7f1ec7f0bd2764a2ca5ee762c8263cbf51e8df79ca"]}, @typed={0x4, 0x6}, @typed={0x8, 0x37, 0x0, 0x0, @pid=r12}, @generic, @typed={0x8, 0x9c, 0x0, 0x0, @pid=r12}, @generic="848249b44802637526c947c74d1861566b1e17ef4c5360fcfe8a5e41a56bac160dd2da3eeed95791f97f0659c26a460809f68a3afce875c715a1913f", @typed={0x64, 0x2, 0x0, 0x0, @binary="af769d1c88aee38b76c9bfcf827ebbc36ed23053ddc609ad12908f4776f93f24d1011741b1173169918aa329f2c497edb91bd53a37029fb3963e9c9670d0fc8a62b01db2a18e3c4cf05761a1bd618d4a1f841aaf80793d1253d9fe1f20669fa6"}, @nested={0x172, 0xa2, 0x0, 0x1, [@nested={0x4, 0xbb}, @typed={0x9, 0xf3, 0x0, 0x0, @str='~/\'#\x00'}, @nested={0x6e, 0x131, 0x0, 0x1, [@generic="edd7cd9d7aa0b5811b6900f915a3b5c165876bccad90ae5018c6463c6e177a6a29a786efe48beed3cdb50b0ab189cd98b11e216d3f7851746bf96e80a79bbe02542b953597df3d716c3fd0226638bbe9ab820a430047325d38146f018f424081563d3e3faeb28b8ddd1f"]}, @generic="b0ec0b5a10a8db631c97e7080feb3ea2dcadb3ec736b153e5349024d83e4669bde32d09f3ce2627805211889eb0f8f6f0699b2e26c87491b0a6bcfbaab7536c4d5cbcf111b0bee9f18287825f38891209ef09296525a0dc4f0cff668e65caec96edb0dbe68b4d119f1d5360805c75dedc6b1fc9047f5e786bf40a61f66383018b6a6ed466d64786fc041b355ee4e767288053c57b2c37ec0270f2d3e7455657cccc6fef02e9ff5fa0fb3d66a4ccb0616ac9692ca68acfc411b197f6e5c98f560f4c80ce6cf9f9e75b0df0af5c30243b01f9d4e1f6758dfa477e266027fce9289abdc78ad90aa3fbeb79030ae123c"]}, @generic="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"]}, @generic="9fd1c76d5e04c843d6c6d13fc3c42c69bab6ba41239bc3fbdddf659d2e3ea2c75d17e5c80bddc77f003f5b1511f0ab2ada16dd5951dd61e1da1da9e108c89419daabf552f8cbb5962d1acb93abbc41737d107ec509c3f9f5419d58232ca836c90c7c7d2148888178b5d3863b2e05b7d0640acce0fe43b6681fbe8f8cd46ca3d95bdbf496054a9e853ca50f79b043b9b0b9b712fbd7e6aba6e9b5"]}, @typed={0x8, 0x153, 0x0, 0x0, @uid=r11}]}, @generic="de523e4b1d4ed62de95a83f4392036534215b248925261c93012c037aa0224dab9abd78f3f93f672acb4a595e59296e951acd50b898787be30b132e3e98fc8a53839a5a584fcb9e753b9b29453403355cdba370699895ba211793aae72c607d22c5e9646f5bda7cab5a5925ee4df69c8852d91fce72df97593024e64c6d119a4af3f57a96a87a04a828702586f3c7fd9364eea6545cff640852a7b12619fdeaf7c3965b4f19d0cc29835147bceacaa51fcef68990bc61f223dfafcbbaf1303a25497ea5a3ad51dba7979a4bd803df2a127b4b78e77a1cf9cb2c5175168ad38ed0081ff"]}, 0x1654}, {&(0x7f0000000940)=ANY=[@ANYBLOB="600000001c00000401000000fedbdf2514002c00ff0100000000000000000000000000012000a48008003100", @ANYRES32=r13, @ANYBLOB='\b\x00E\x00', @ANYRES32=0x0, @ANYBLOB="0c0066000100000000000000140037800800ca00", @ANYRES32=r10, @ANYBLOB='\b\x00A\x00', @ANYRES32=r12, @ANYBLOB="08001e00", @ANYRES32=r9, @ANYBLOB="1c18024493c49384e62cdf31dbfca8317c1f749b2b405942c9344643b57e7dc3319fee9260f61c79320aac383d40c0d2b0cb5c4ef0447ace29e09bb3412a12bb99e8acea29db14a45dc941dc006d0abbe316a4020b064264aa396d9e82f9b5c4a0ad525e10ea4824b61f02ca83af29d9f3d0419c9cc4de884109155849ce8d77a16c85f0582c2005650f1dc74a206eb595"], 0x60}, {&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200002d00000225bd7000fcdbdf250800a300", @ANYRES32=r8, @ANYBLOB="8e47dc9ce01a600fa4c9622bc401ec4506eef979db936f097f690c009a0003000000000000000401208004007a809f72bd75a4e11262db6c9aebbb65efd78ffa828bd8fdbf02c09baa81cc1db8c795667023625a4d86ee74adde4fbfc4ada16d17c0045733b6060b89cb957a9b95aad25c3e7f37639ec87131d5f8c11a2d26830f88974e27ad1bd79769a882f7f3af95a77249060225cb40d045b56d406537c0be3c5f363edd7aabf02c75f653f7147dffd30d668faa85a0a5f2af2fbc61882d349e04e0bba8efd5c64e14439de6bda6e2cbc224b96d1a4f42533352c7ad6a7877662faaaec42ce06a79dc62ebef5424a89155cd69d433662b88405f592daf0e5a6ed9aed06fba77cf76f57d729c5918600024a8ec396690e8dce939edf2e9bef67e79eaf20704004f8004001b807824b8e4b5b67257f5259083a951099f400c16ef6129755339f96eec557a5a7dc18c10923b867074f83efe115fc419cd38c7efddcc69df60bdb356e25bbdec61de880323527d8f854c43d97ce59637df4bc2b1a7010afbdfcd7975fb8509cb14f0a1e69fa7f48f9fd1b8d7cc9afd68899d2fd311badb0989e3fd3866ee7fe1b6a892184b879af520d1bf595fc04df4e1a47373b074f2824f5eeb84fef96df99ca6b835a767ebfe3b8082d852dd6982fdf4f935951a2262e3b4182ee13ffd93f17eb807e042a5ab50574edeb39e13af0d77f0bec1203f8ba961808d41b3a2bb1642379ca39e95e2ca2e405c7bfd30d84770580d693463"], 0x23c}, {&(0x7f0000000880)=ANY=[@ANYBLOB="20000000230000032bbd7000fbdbdf2508000400", @ANYRES32=r8, @ANYBLOB="0800d30006000000035c72e8e1d0b7b6adaaae5376ced2f48b776d848e9b35044af76ec9e05e668beb35abf0b62266ad000000000000082ead2062331e0a7efaf2c6bf7ee2128a92fe023f6383877783d263812bc87e3a44c6e7ef36cd33f5c914e9c1deccc498d1a85fe3f85cf7ba48cb549c"], 0x20}], 0x5, 0x0, 0x0, 0x84}, 0x300) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@remote, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x4e23, 0x7, 0x4e24, 0x0, 0xa, 0x0, 0x20, 0x2b, r5, r9}, {0x6, 0x7, 0x2, 0x2, 0x8, 0x9, 0x8000000000000001, 0x14}, {0x4, 0x401, 0x8, 0x1}, 0x7, 0x6e6bba, 0x2, 0x1, 0x3, 0x2}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d2, 0x6c}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x2, 0x1, 0x0, 0xc0000000, 0x4e}}, 0xe8) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x2, 0xa, 0x73) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0xc000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r14, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x50) ioctl$PPPIOCSMRRU(r7, 0x4010744d, &(0x7f0000000080)=0xc) 11m52.887232529s ago: executing program 46 (id=8712): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001680)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r1, @ANYBLOB="030300000000fcffffff0c000200080003002a8d"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 7m30.901166836s ago: executing program 47 (id=10899): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xfffffffe, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0x7, 0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)='\'', 0x1}], 0x1}, 0x4) 7m30.879355317s ago: executing program 48 (id=10898): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 7m30.858577418s ago: executing program 49 (id=10900): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, 0x0, 0x0) 7m29.836708366s ago: executing program 50 (id=10902): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000002000010000000000fbdbdf250a4010000100002ce6998e0014000200fc02000000000000000000000000000014000100200100000000000000000000000000000c00140085251932542e61531010e04c9f2eea551e43fc41412b26a1e7e6fdf5cda5c9df659cfb1b79330e851591896817ce64e908cca0a84eabd2f4107cd192f8d432a7003cbc52c04589f90303"], 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x5c}}, 0x0) 6m45.313176153s ago: executing program 9 (id=10998): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x288201, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) close(0x3) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca", 0xbc}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$kcm(0x10, 0x2, 0x10) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r3, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r1], 0x44}}, 0x8000) 6m45.05236186s ago: executing program 4 (id=11000): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='illinois', 0x8) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 6m45.000248731s ago: executing program 9 (id=11002): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a310000000014000580080001401b008917080002"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 6m44.960258832s ago: executing program 1 (id=11006): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05032200d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 6m44.940633063s ago: executing program 9 (id=11007): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 6m44.712027289s ago: executing program 8 (id=11009): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=@newsa={0x13c, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@loopback, @in=@rand_addr=0x64010102, 0x3, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0x7, 0x0, 0x60000, 0x0, 0x2002000000001}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256-mb\x00'}, 0x0, 0x180}}]}, 0x13c}}, 0x0) 6m44.67545656s ago: executing program 8 (id=11011): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r2) sendmsg$NLBL_MGMT_C_ADD(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001340)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 6m44.608930932s ago: executing program 9 (id=11013): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) unshare(0x8000400) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, 0x0, 0x28}, 0xfc40) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000000), 0x4) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 6m44.500205385s ago: executing program 9 (id=11014): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, 0x0, 0x4001) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0x800ac}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f00000018c0)=""/4108, 0x1041}, {&(0x7f0000001680)=""/109, 0x6d}, {&(0x7f0000001740)=""/72, 0x48}, {&(0x7f00000005c0)=""/61, 0x3d}], 0x5}, 0x7}, {{0x0, 0x0, 0x0}, 0xd3a7}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x8000005}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0xa9e5}], 0x9, 0x2000, 0x0) 6m44.30077125s ago: executing program 8 (id=11015): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 6m44.279988111s ago: executing program 8 (id=11016): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x10002, 0x0, 0x0) 6m44.249188062s ago: executing program 1 (id=11017): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000200), &(0x7f0000000240)=0x53) 6m44.184135913s ago: executing program 1 (id=11018): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a310000000014000580080001401b008917080002"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 6m44.184024224s ago: executing program 4 (id=11019): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000401400000086"], 0x50) 6m44.183895613s ago: executing program 4 (id=11020): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet_sctp(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000500)=[{&(0x7f00000000c0)='5', 0x1}], 0x1, 0x0, 0x0, 0x40883}], 0x1, 0x8881) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x81, @loopback, 0x47}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000003600)={0x0, 0x10, &(0x7f0000000600)=[@in={0x2, 0x4e24, @loopback}]}, 0x0) 6m44.171465084s ago: executing program 4 (id=11021): unshare(0x24020400) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x50, &(0x7f0000000700), 0x4) 6m44.151225294s ago: executing program 1 (id=11022): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000540)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000140)="01", 0x1}], 0x1}}], 0x1, 0xc000) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) 6m44.114355915s ago: executing program 4 (id=11023): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=@newsa={0x13c, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@loopback, @in=@rand_addr=0x64010102, 0x3, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0x7, 0x0, 0x60000, 0x0, 0x2002000000001}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256-mb\x00'}, 0x0, 0x180}}]}, 0x13c}}, 0x0) 6m44.114179205s ago: executing program 4 (id=11024): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 6m44.114009455s ago: executing program 1 (id=11025): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a675, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) unshare(0x22020600) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) 6m44.052139377s ago: executing program 1 (id=11026): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r2) sendmsg$NLBL_MGMT_C_ADD(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001340)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 6m43.689089147s ago: executing program 9 (id=11027): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05032200d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 6m43.418518894s ago: executing program 8 (id=11028): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 6m43.384360295s ago: executing program 8 (id=11029): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001400)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040010}, 0x1c090) 6m29.357395129s ago: executing program 51 (id=11012): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) close(0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f0000000440)=@xdp={0x2c, 0xdd86, r3, 0x5}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000680)=',', 0x1}], 0x1}, 0x20008110) 6m28.341903196s ago: executing program 52 (id=11024): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 6m28.327595737s ago: executing program 53 (id=11026): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r2) sendmsg$NLBL_MGMT_C_ADD(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001340)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 6m28.319519937s ago: executing program 54 (id=11029): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001400)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040010}, 0x1c090) 6m28.290167408s ago: executing program 55 (id=11027): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05032200d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 6m12.668568925s ago: executing program 2 (id=11036): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000540)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000140)="01", 0x1}], 0x1}}], 0x1, 0xc000) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) 6m12.607095527s ago: executing program 2 (id=11037): socket(0x1e, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800) 6m12.443880661s ago: executing program 2 (id=11038): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x10002, 0x0, 0x0) 6m11.597929314s ago: executing program 2 (id=11039): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 6m11.545071245s ago: executing program 2 (id=11040): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000240)) 6m11.488192167s ago: executing program 2 (id=11041): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0xffffffff}, @TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000001c0)={0x1, 0x0, 0x7fff, 0xd}, 0x8) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xf, &(0x7f0000000000)=0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x72}, [@call={0x85, 0x0, 0x0, 0x7d}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) 5m56.465087848s ago: executing program 56 (id=11041): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0xffffffff}, @TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000001c0)={0x1, 0x0, 0x7fff, 0xd}, 0x8) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xf, &(0x7f0000000000)=0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x72}, [@call={0x85, 0x0, 0x0, 0x7d}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) 24.017503374s ago: executing program 5 (id=15259): bind$rds(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x4, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) socket$phonet_pipe(0x23, 0x5, 0x2) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xc, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x0, 0x0, 0x6}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4000894) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000140), 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e, 0x12}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff86ddee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 23.359629232s ago: executing program 7 (id=15266): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x34, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) 12.649591365s ago: executing program 7 (id=15275): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000140)=0x1) 12.590301376s ago: executing program 5 (id=15278): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) accept4(r0, &(0x7f0000000440)=@sco={0x1f, @fixed}, &(0x7f00000000c0)=0x80, 0x0) 12.528803468s ago: executing program 7 (id=15281): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1414000029200000140012800b0001006c6f7770616e000004000280080005000f8b"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 12.48013677s ago: executing program 7 (id=15283): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, r0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001880)={0x44, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x200000c4) 12.45758269s ago: executing program 7 (id=15284): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfde01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0x8, 0x6, 0x69, 0x7fff, 0x80e6, 0x81, 0x0, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x200001f5}, 0x24004814) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000480)="05", 0x1, 0x4009, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 12.415811781s ago: executing program 3 (id=15286): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x31c7, 0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x9, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 11.72833043s ago: executing program 5 (id=15289): bind$rds(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x4, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) socket$phonet_pipe(0x23, 0x5, 0x2) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xc, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x0, 0x0, 0x6}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4000894) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000140), 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e, 0x12}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff86ddee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 11.394255479s ago: executing program 3 (id=15290): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r0, 0x0, 0x18) 11.36212645s ago: executing program 3 (id=15291): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x9, 0xfffffffe}, 0x20) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8, @loopback, 0x1}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0xffff}, 0x1c) 11.328354951s ago: executing program 3 (id=15292): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000140)=0x1) 11.256437083s ago: executing program 6 (id=15294): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, r0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001880)={0x44, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x200000c4) 11.255872913s ago: executing program 6 (id=15295): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x0, 0x8000}) 11.152156276s ago: executing program 6 (id=15296): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbff}, 0x1c}}, 0x84) 11.151544106s ago: executing program 6 (id=15297): syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_mr_cache\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYRES64=r0], 0x10) 11.116533547s ago: executing program 6 (id=15298): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300001400"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000017c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @last={{0x9}, @void}}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 754.67138ms ago: executing program 0 (id=15299): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2810400, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000540)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x5) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0x0, 0x200}, 0x50) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0xff2e) socketpair(0x1d, 0x2, 0x6, &(0x7f00000000c0)) 753.53259ms ago: executing program 6 (id=15309): pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000044) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="e923d8be8bb02d9479064e39fee86b3ae31cf138db71d3c050be58", 0x1b, 0x854, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x281, 0x7f, 0xfffffffd, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x7, 0x7ed53619, 0x1, 0x2, 0xa8, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000001, 0x10001, 0x791, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x101, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0x80000d, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0x6, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x1, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0x1000, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d20, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0xff, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x0, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xff0, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x7, 0x6, 0x10, 0xab, 0x8, 0x80000001, 0x0, 0x0, 0x2, 0x7ffffffe, 0x0, 0xa, 0x6, 0xffffbfff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x38, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x8000005, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x7fff, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x2]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0x235, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xfffeff01, 0x5, 0x37f, 0x40, 0x6, 0x3, 0x3, 0x800, 0x10d2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x1100, 0xec0, 0x10001, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x3, 0x0, 0x10, 0x8, 0x8, 0x19bb, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x800092, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0x3, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0xd, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1682, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4ec, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0xfff, 0x12, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1fd, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffa, 0x8, 0x3, 0xb9a6, 0x522, 0x0, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x7fffffff, 0x7, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff9a, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x70d, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0xf, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x6, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x200, 0x1, 0x21ce83b0, 0x2, 0x6, {0x9, 0x1, 0x1000, 0x4, 0x4, 0x401}, {0xe, 0x0, 0xc, 0x1, 0x9, 0x5}, 0x7, 0x80, 0x8}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, 0x0, 0x40880) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) bind$can_raw(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x44) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 714.347981ms ago: executing program 7 (id=15300): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) accept4(r0, &(0x7f0000000440)=@sco={0x1f, @fixed}, &(0x7f00000000c0)=0x80, 0x0) 688.028092ms ago: executing program 3 (id=15301): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x18) 681.378132ms ago: executing program 0 (id=15302): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000340)={0x12}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r2, 0x0}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000100)=0x8, 0x4) 658.032762ms ago: executing program 3 (id=15303): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0x9, &(0x7f0000000240)={0x8, 0x248}, 0x0) io_setup(0x4000, &(0x7f0000000140)) 642.351653ms ago: executing program 5 (id=15304): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xbc}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfbffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000022c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x4, 0xa, 0x3}, 0x1}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}}, 0x800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 480.071337ms ago: executing program 0 (id=15305): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = syz_clone(0x82000000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000ac0)='syscall\x00') pread64(r2, &(0x7f0000000500)=""/15, 0xf, 0x40000000007) 114.132787ms ago: executing program 0 (id=15306): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000001800), r0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, 0x0, 0x200000c4) 88.322348ms ago: executing program 5 (id=15307): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x42}, 0x4000006}, 0x1c) listen(r1, 0x6) 87.449998ms ago: executing program 0 (id=15308): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbff}, 0x1c}}, 0x84) 64.840398ms ago: executing program 0 (id=15310): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300001400"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000017c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @last={{0x9}, @void}}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 0s ago: executing program 5 (id=15311): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfde01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0x8, 0x6, 0x69, 0x7fff, 0x80e6, 0x81, 0x0, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x200001f5}, 0x24004814) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000480)="05", 0x1, 0x4009, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): e syzkaller0 entered promiscuous mode [ 1654.381194][T12752] netlink: 'syz.6.12640': attribute type 3 has an invalid length. [ 1654.841291][T12814] device syzkaller0 entered promiscuous mode [ 1655.343510][T12870] device syzkaller0 entered promiscuous mode [ 1655.771636][ T4334] Bluetooth: hci2: command 0x0406 tx timeout [ 1657.524323][T12773] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1657.777600][T13016] device syzkaller0 entered promiscuous mode [ 1658.004662][T13038] device syzkaller0 entered promiscuous mode [ 1658.201361][T13063] netlink: 'syz.0.12673': attribute type 3 has an invalid length. [ 1658.225348][T13060] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1658.226959][T13060] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1658.566734][T13079] device syzkaller0 entered promiscuous mode [ 1658.725078][T13087] device syzkaller0 entered promiscuous mode [ 1659.007083][T13094] device syzkaller0 entered promiscuous mode [ 1659.228394][T13105] netlink: 'syz.5.12688': attribute type 3 has an invalid length. [ 1659.320959][T13114] device syzkaller0 entered promiscuous mode [ 1659.471438][T13119] device syzkaller0 entered promiscuous mode [ 1659.519882][T13123] device syzkaller0 entered promiscuous mode [ 1659.790163][T13133] device syzkaller0 entered promiscuous mode [ 1659.829891][T13143] netlink: 'syz.0.12704': attribute type 3 has an invalid length. [ 1660.273462][T13157] device syzkaller0 entered promiscuous mode [ 1660.402633][T13163] device syzkaller0 entered promiscuous mode [ 1660.638576][T13173] device syzkaller0 entered promiscuous mode [ 1660.684417][T13172] device syzkaller0 entered promiscuous mode [ 1660.883011][T13183] netlink: 'syz.7.12720': attribute type 3 has an invalid length. [ 1661.054933][T13198] device syzkaller0 entered promiscuous mode [ 1661.811752][T13206] __nla_validate_parse: 10 callbacks suppressed [ 1661.811764][T13206] netlink: 48 bytes leftover after parsing attributes in process `syz.3.12737'. [ 1661.815999][T13206] netlink: 48 bytes leftover after parsing attributes in process `syz.3.12737'. [ 1661.820999][T13204] device syzkaller0 entered promiscuous mode [ 1661.933554][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 1661.959332][T13216] device syzkaller0 entered promiscuous mode [ 1662.115992][T13223] netlink: 'syz.0.12734': attribute type 3 has an invalid length. [ 1662.523289][T13238] device syzkaller0 entered promiscuous mode [ 1662.730313][T13243] netlink: 48 bytes leftover after parsing attributes in process `syz.5.12743'. [ 1662.733724][T13243] netlink: 48 bytes leftover after parsing attributes in process `syz.5.12743'. [ 1662.771625][T13248] device syzkaller0 entered promiscuous mode [ 1662.828358][T13252] netlink: 'syz.7.12747': attribute type 3 has an invalid length. [ 1662.968539][T13254] device syzkaller0 entered promiscuous mode [ 1663.143836][T13263] xt_hashlimit: size too large, truncated to 1048576 [ 1663.218208][T13271] device syzkaller0 entered promiscuous mode [ 1663.360978][T13277] netlink: 48 bytes leftover after parsing attributes in process `syz.5.12756'. [ 1663.362759][T13277] netlink: 48 bytes leftover after parsing attributes in process `syz.5.12756'. [ 1663.467947][T13284] device syzkaller0 entered promiscuous mode [ 1663.498000][T13288] netlink: 'syz.0.12760': attribute type 3 has an invalid length. [ 1664.017827][T13301] device syzkaller0 entered promiscuous mode [ 1664.303926][T13307] netlink: 48 bytes leftover after parsing attributes in process `syz.6.12768'. [ 1664.305743][T13307] netlink: 48 bytes leftover after parsing attributes in process `syz.6.12768'. [ 1664.329972][T13309] device syzkaller0 entered promiscuous mode [ 1664.431542][T13313] device syzkaller0 entered promiscuous mode [ 1664.474506][T13315] netlink: 'syz.6.12772': attribute type 3 has an invalid length. [ 1664.597072][T13317] device syzkaller0 entered promiscuous mode [ 1664.863445][T13330] device syzkaller0 entered promiscuous mode [ 1665.016602][T13335] netlink: 48 bytes leftover after parsing attributes in process `syz.3.12780'. [ 1665.018497][T13335] netlink: 48 bytes leftover after parsing attributes in process `syz.3.12780'. [ 1665.040902][T13341] device syzkaller0 entered promiscuous mode [ 1665.092491][T13348] netlink: 'syz.5.12784': attribute type 3 has an invalid length. [ 1665.181128][T13351] device syzkaller0 entered promiscuous mode [ 1665.329326][T13358] device syzkaller0 entered promiscuous mode [ 1665.729564][T13377] device syzkaller0 entered promiscuous mode [ 1665.785125][T13381] netlink: 'syz.7.12797': attribute type 3 has an invalid length. [ 1665.929304][T13385] device syzkaller0 entered promiscuous mode [ 1665.954658][T13389] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1666.124005][T13393] device syzkaller0 entered promiscuous mode [ 1666.127334][T13392] device syzkaller0 entered promiscuous mode [ 1666.437731][T13416] device syzkaller0 entered promiscuous mode [ 1666.502555][T13421] netlink: 'syz.5.12812': attribute type 3 has an invalid length. [ 1666.618524][T13425] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1666.686664][T13427] device syzkaller0 entered promiscuous mode [ 1666.854985][T13435] device syzkaller0 entered promiscuous mode [ 1666.993646][T13439] __nla_validate_parse: 4 callbacks suppressed [ 1666.993662][T13439] netlink: 48 bytes leftover after parsing attributes in process `syz.5.12820'. [ 1667.004805][T13439] netlink: 48 bytes leftover after parsing attributes in process `syz.5.12820'. [ 1667.033946][T13444] device syzkaller0 entered promiscuous mode [ 1667.369689][T13459] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1667.372969][T13456] device syzkaller0 entered promiscuous mode [ 1667.608577][T13472] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12833'. [ 1667.610375][T13472] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12833'. [ 1667.666508][T13479] device syzkaller0 entered promiscuous mode [ 1667.673276][T13481] device syzkaller0 entered promiscuous mode [ 1667.897224][T13485] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1667.898827][T13485] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1668.089416][T13495] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 1668.178636][T13497] device syzkaller0 entered promiscuous mode [ 1668.186192][T13504] netlink: 48 bytes leftover after parsing attributes in process `syz.6.12845'. [ 1668.187942][T13504] netlink: 48 bytes leftover after parsing attributes in process `syz.6.12845'. [ 1668.427129][T13513] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 1668.505620][T13514] device syzkaller0 entered promiscuous mode [ 1668.620711][T13523] device syzkaller0 entered promiscuous mode [ 1668.804255][T13534] netlink: 48 bytes leftover after parsing attributes in process `syz.6.12857'. [ 1668.805912][T13534] netlink: 48 bytes leftover after parsing attributes in process `syz.6.12857'. [ 1668.810364][T13537] device syzkaller0 entered promiscuous mode [ 1668.998736][T13554] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 1669.178099][T13569] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1669.179683][T13569] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1669.298542][T13571] device syzkaller0 entered promiscuous mode [ 1669.352783][T13577] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12872'. [ 1669.355303][T13577] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12872'. [ 1669.395160][T13581] device syzkaller0 entered promiscuous mode [ 1669.596823][T13588] device syzkaller0 entered promiscuous mode [ 1669.925569][T13613] device syzkaller0 entered promiscuous mode [ 1670.080662][T13618] device syzkaller0 entered promiscuous mode [ 1670.381924][T13654] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1670.383574][T13654] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1670.388185][T13656] netlink: 'syz.0.12901': attribute type 3 has an invalid length. [ 1670.560942][T13661] device syzkaller0 entered promiscuous mode [ 1670.634156][T13671] device syzkaller0 entered promiscuous mode [ 1671.033151][T13690] netlink: 'syz.3.12915': attribute type 3 has an invalid length. [ 1671.250540][T13705] device syzkaller0 entered promiscuous mode [ 1671.440914][T13711] device syzkaller0 entered promiscuous mode [ 1671.578477][T13732] netlink: 'syz.5.12927': attribute type 3 has an invalid length. [ 1671.712622][T13738] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1671.714199][T13738] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1671.987234][T13766] device syzkaller0 entered promiscuous mode [ 1672.045046][T13771] device syzkaller0 entered promiscuous mode [ 1672.202689][T13783] netlink: 'syz.5.12941': attribute type 3 has an invalid length. [ 1672.546077][T13817] device syzkaller0 entered promiscuous mode [ 1672.605143][T13826] netlink: 'syz.3.12954': attribute type 3 has an invalid length. [ 1672.690640][T13824] device syzkaller0 entered promiscuous mode [ 1672.942902][T13857] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1672.946975][T13857] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1673.314487][T13881] netlink: 'syz.6.12968': attribute type 3 has an invalid length. [ 1673.381893][T13889] device syzkaller0 entered promiscuous mode [ 1673.829899][T13911] netlink: 'syz.7.12981': attribute type 3 has an invalid length. [ 1673.845470][T13909] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1673.847209][T13909] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1673.991232][T13930] device syzkaller0 entered promiscuous mode [ 1674.266963][T13949] __nla_validate_parse: 1 callbacks suppressed [ 1674.266982][T13949] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12992'. [ 1674.331317][T13955] device syzkaller0 entered promiscuous mode [ 1674.403126][T13961] netlink: 'syz.6.12995': attribute type 3 has an invalid length. [ 1674.713604][T13979] device syzkaller0 entered promiscuous mode [ 1674.961298][T14006] netlink: 'syz.3.13008': attribute type 3 has an invalid length. [ 1675.054929][T14018] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13013'. [ 1675.103707][T14017] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1675.112528][T14017] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1675.128687][T14019] device syzkaller0 entered promiscuous mode [ 1675.312714][T14041] device syzkaller0 entered promiscuous mode [ 1675.551188][T14059] netlink: 'syz.6.13025': attribute type 3 has an invalid length. [ 1675.797275][T14075] device syzkaller0 entered promiscuous mode [ 1675.989801][T14098] netlink: 'syz.6.13038': attribute type 3 has an invalid length. [ 1676.016604][T14093] device syzkaller0 entered promiscuous mode [ 1676.294125][T14124] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1676.295648][T14124] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1676.341946][T14126] device syzkaller0 entered promiscuous mode [ 1676.537638][T14151] netlink: 'syz.0.13052': attribute type 3 has an invalid length. [ 1676.672620][T14163] device syzkaller0 entered promiscuous mode [ 1677.046692][T14193] netlink: 'syz.6.13065': attribute type 3 has an invalid length. [ 1677.058551][T14197] device syzkaller0 entered promiscuous mode [ 1677.106605][T14195] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13066'. [ 1677.376005][T14215] device syzkaller0 entered promiscuous mode [ 1677.623689][T14231] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1677.625312][T14231] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1677.668110][T14238] netlink: 'syz.0.13078': attribute type 3 has an invalid length. [ 1677.749890][T14248] device syzkaller0 entered promiscuous mode [ 1677.911631][T14255] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13083'. [ 1678.017331][T14259] device syzkaller0 entered promiscuous mode [ 1678.258612][T14263] device syzkaller0 entered promiscuous mode [ 1678.446858][T14282] device syzkaller0 entered promiscuous mode [ 1678.750182][T14311] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13098'. [ 1678.825218][T14324] device syzkaller0 entered promiscuous mode [ 1678.867056][T14326] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1678.868731][T14326] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1678.990484][T14336] device syzkaller0 entered promiscuous mode [ 1679.251583][T14357] netlink: 28 bytes leftover after parsing attributes in process `syz.7.13113'. [ 1679.534700][T14380] device syzkaller0 entered promiscuous mode [ 1679.573418][T14383] device syzkaller0 entered promiscuous mode [ 1679.864866][T14402] netlink: 'syz.0.13130': attribute type 3 has an invalid length. [ 1680.022008][T14415] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1680.023735][T14415] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1680.209913][T14434] device syzkaller0 entered promiscuous mode [ 1680.223103][T14438] netlink: 'syz.7.13143': attribute type 3 has an invalid length. [ 1680.274020][T14440] device syzkaller0 entered promiscuous mode [ 1680.744419][T14459] device syzkaller0 entered promiscuous mode [ 1681.044806][T14473] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.13152'. [ 1691.610087][T14481] netlink: 'syz.3.13155': attribute type 3 has an invalid length. [ 1691.628235][T14484] device syzkaller0 entered promiscuous mode [ 1691.954949][T14499] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1691.956661][T14499] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1692.349879][T14540] device syzkaller0 entered promiscuous mode [ 1692.610585][T14544] device syzkaller0 entered promiscuous mode [ 1693.181995][T14575] device syzkaller0 entered promiscuous mode [ 1693.222108][T14594] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1693.224359][T14594] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1693.230797][T14596] device syzkaller0 entered promiscuous mode [ 1693.970510][T14651] device syzkaller0 entered promiscuous mode [ 1694.415229][T14679] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13215'. [ 1694.620225][T14707] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13224'. [ 1694.655643][T14696] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1694.657363][T14696] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1694.662408][T14704] device syzkaller0 entered promiscuous mode [ 1695.207896][T14748] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13236'. [ 1695.295493][T14757] device syzkaller0 entered promiscuous mode [ 1695.745877][T14786] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1695.747376][T14784] device syzkaller0 entered promiscuous mode [ 1695.750870][T14786] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1695.864915][T14796] device syzkaller0 entered promiscuous mode [ 1695.951159][T14803] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13255'. [ 1696.514623][T14822] device syzkaller0 entered promiscuous mode [ 1696.737810][T14831] device syzkaller0 entered promiscuous mode [ 1697.102693][T14849] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1697.107519][T14849] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1697.130062][T14853] device syzkaller0 entered promiscuous mode [ 1697.370027][T14865] device syzkaller0 entered promiscuous mode [ 1697.887077][T14894] device syzkaller0 entered promiscuous mode [ 1698.057997][T14903] device syzkaller0 entered promiscuous mode [ 1698.430944][T14925] device syzkaller0 entered promiscuous mode [ 1698.523995][T14933] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1698.525788][T14933] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1698.649081][T14938] device syzkaller0 entered promiscuous mode [ 1699.059430][T14964] netlink: 'syz.7.13318': attribute type 3 has an invalid length. [ 1699.060869][T14964] netlink: 16 bytes leftover after parsing attributes in process `syz.7.13318'. [ 1699.106459][T14966] device syzkaller0 entered promiscuous mode [ 1699.266637][T14979] device syzkaller0 entered promiscuous mode [ 1699.575565][T14994] netlink: 'syz.5.13330': attribute type 3 has an invalid length. [ 1699.576953][T14994] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13330'. [ 1699.730324][T15014] device syzkaller0 entered promiscuous mode [ 1699.857824][T15023] device syzkaller0 entered promiscuous mode [ 1699.889670][T15024] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1699.891658][T15024] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1700.170556][T15038] netlink: 'syz.3.13343': attribute type 3 has an invalid length. [ 1700.172791][T15038] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13343'. [ 1700.436822][T15066] device syzkaller0 entered promiscuous mode [ 1700.446364][T15068] device syzkaller0 entered promiscuous mode [ 1700.701254][T15085] netlink: 'syz.3.13357': attribute type 3 has an invalid length. [ 1700.706737][T15085] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13357'. [ 1700.837810][T15095] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1700.846135][T15095] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1701.137845][T15119] device syzkaller0 entered promiscuous mode [ 1701.287263][T15125] device syzkaller0 entered promiscuous mode [ 1701.661306][T15137] netlink: 'syz.3.13372': attribute type 3 has an invalid length. [ 1701.664655][T15137] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13372'. [ 1701.824471][T15156] device syzkaller0 entered promiscuous mode [ 1701.930958][T15162] device syzkaller0 entered promiscuous mode [ 1702.087522][T15174] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1702.090293][T15174] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1702.123195][T15176] netlink: 'syz.5.13385': attribute type 3 has an invalid length. [ 1702.124700][T15176] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13385'. [ 1702.558245][T15210] device syzkaller0 entered promiscuous mode [ 1702.800733][T15221] device syzkaller0 entered promiscuous mode [ 1702.865124][T15223] netlink: 'syz.5.13398': attribute type 3 has an invalid length. [ 1702.866529][T15223] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13398'. [ 1703.285871][T15272] netlink: 'syz.6.13412': attribute type 3 has an invalid length. [ 1703.302527][T15272] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13412'. [ 1703.328583][T15276] device syzkaller0 entered promiscuous mode [ 1703.342027][T15279] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1703.343590][T15279] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1703.838998][T15316] netlink: 'syz.0.13425': attribute type 3 has an invalid length. [ 1703.840482][T15316] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13425'. [ 1703.890787][T15324] device syzkaller0 entered promiscuous mode [ 1704.021188][T15327] device syzkaller0 entered promiscuous mode [ 1704.197997][T15333] device syzkaller0 entered promiscuous mode [ 1704.306604][T15357] netlink: 'syz.0.13439': attribute type 3 has an invalid length. [ 1704.308030][T15357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13439'. [ 1704.393606][T15365] device syzkaller0 entered promiscuous mode [ 1704.573254][T15380] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1704.575373][T15380] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1704.779674][T15398] netlink: 'syz.7.13454': attribute type 3 has an invalid length. [ 1704.781101][T15398] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13454'. [ 1704.879297][T15408] device syzkaller0 entered promiscuous mode [ 1705.040048][T15417] netlink: 'syz.3.13467': attribute type 3 has an invalid length. [ 1705.041668][T15417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13467'. [ 1705.266588][T15431] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1705.268147][T15431] IPv6: NLM_F_CREATE should be set when creating new route [ 1705.272364][T15431] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1705.460565][T15450] device syzkaller0 entered promiscuous mode [ 1705.528725][T15458] netlink: 'syz.3.13471': attribute type 3 has an invalid length. [ 1705.530921][T15458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13471'. [ 1705.692260][T15460] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13472'. [ 1705.831135][T15484] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1705.834107][T15484] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1706.087394][T15493] device syzkaller0 entered promiscuous mode [ 1706.100245][T15496] netlink: 'syz.6.13484': attribute type 3 has an invalid length. [ 1706.102289][T15496] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13484'. [ 1706.353752][T15513] device syzkaller0 entered promiscuous mode [ 1706.616954][T15528] netlink: 'syz.5.13496': attribute type 3 has an invalid length. [ 1706.618290][T15528] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13496'. [ 1706.685014][T15536] device syzkaller0 entered promiscuous mode [ 1707.205788][T15574] netlink: 'syz.7.13511': attribute type 3 has an invalid length. [ 1707.318334][T15582] device syzkaller0 entered promiscuous mode [ 1707.479597][T15589] device syzkaller0 entered promiscuous mode [ 1707.756813][T15597] tap0: tun_chr_ioctl cmd 1074025692 [ 1707.809372][T15601] netlink: 'syz.0.13523': attribute type 3 has an invalid length. [ 1707.858827][T15603] tipc: Enabled bearer , priority 0 [ 1707.873144][T15603] device syzkaller0 entered promiscuous mode [ 1707.874564][T15603] tipc: Resetting bearer [ 1707.877525][T15602] tipc: Resetting bearer [ 1718.762405][T15602] tipc: Disabling bearer [ 1718.944109][T15648] device syzkaller0 entered promiscuous mode [ 1719.009618][T15657] netlink: 'syz.0.13536': attribute type 3 has an invalid length. [ 1719.044542][T15654] device syzkaller0 entered promiscuous mode [ 1719.294021][T15675] device syzkaller0 entered promiscuous mode [ 1719.423940][T15681] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13546'. [ 1719.428072][T15681] device erspan0 entered promiscuous mode [ 1719.429364][T15681] device macvtap1 entered promiscuous mode [ 1719.430945][T15682] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13546'. [ 1719.433453][T15682] device erspan0 left promiscuous mode [ 1719.480489][T15684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13547'. [ 1719.482232][T15684] netlink: 72 bytes leftover after parsing attributes in process `syz.3.13547'. [ 1719.517961][T15686] netlink: 'syz.3.13548': attribute type 3 has an invalid length. [ 1719.523660][T15688] device syzkaller0 entered promiscuous mode [ 1719.659979][T15694] device syzkaller0 entered promiscuous mode [ 1719.777498][T15701] netlink: 'syz.6.13555': attribute type 4 has an invalid length. [ 1719.845964][T15709] netlink: 484 bytes leftover after parsing attributes in process `syz.6.13560'. [ 1719.860552][T15710] device syzkaller0 entered promiscuous mode [ 1719.870166][T15713] netlink: 'syz.3.13561': attribute type 3 has an invalid length. [ 1720.020067][T15719] device syzkaller0 entered promiscuous mode [ 1720.160209][T15734] device syzkaller0 entered promiscuous mode [ 1720.247262][T15739] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1720.249196][T15739] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1720.340141][T15746] netlink: 'syz.0.13574': attribute type 3 has an invalid length. [ 1720.416190][T15736] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1720.418069][T15736] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1720.426866][T15736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1720.428865][T15736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1720.430680][T15736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1720.433087][T15736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1720.435572][T15736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1720.437615][T15736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1720.439356][T15736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1720.441215][T15736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1720.447520][T15736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1720.449373][T15736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1720.451411][T15736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1720.455072][T15736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1720.458152][T15736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1720.460086][T15736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1720.465669][T15736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1720.467762][T15736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1720.469657][T15736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1720.472746][T15736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1720.474520][T15736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1720.476298][T15736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1720.478195][T15736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1720.480048][T15736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1720.483065][T15736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1720.484865][T15736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1720.732881][T15759] device syzkaller0 entered promiscuous mode [ 1720.889094][T15771] device syzkaller0 entered promiscuous mode [ 1720.967964][T15777] netlink: 'syz.3.13586': attribute type 3 has an invalid length. [ 1720.969712][T15777] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13586'. [ 1721.035774][T15773] device syzkaller0 entered promiscuous mode [ 1721.270313][T15795] device syzkaller0 entered promiscuous mode [ 1721.351311][T15802] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1721.381183][T15805] netlink: 'syz.0.13598': attribute type 3 has an invalid length. [ 1721.382786][T15805] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13598'. [ 1721.453775][T15807] device syzkaller0 entered promiscuous mode [ 1721.588236][T15815] device syzkaller0 entered promiscuous mode [ 1721.854786][T15842] device syzkaller0 entered promiscuous mode [ 1721.866842][T15844] netlink: 'syz.7.13613': attribute type 3 has an invalid length. [ 1721.868729][T15844] netlink: 16 bytes leftover after parsing attributes in process `syz.7.13613'. [ 1721.915462][T15850] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13616'. [ 1722.003178][T15854] device syzkaller0 entered promiscuous mode [ 1722.155051][T15860] device syzkaller0 entered promiscuous mode [ 1722.315543][T15881] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13629'. [ 1722.376048][T15887] device syzkaller0 entered promiscuous mode [ 1722.518452][T15898] ksmbd: Unknown IPC event: 4, ignore. [ 1722.552728][T15893] device syzkaller0 entered promiscuous mode [ 1722.702313][T15914] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 1722.704831][T15912] device syzkaller0 entered promiscuous mode [ 1722.889830][T15929] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1722.898685][T15931] device syzkaller0 entered promiscuous mode [ 1723.017104][T15949] device syzkaller0 entered promiscuous mode [ 1723.195358][T15954] device syzkaller0 entered promiscuous mode [ 1723.369276][T15973] device syzkaller0 entered promiscuous mode [ 1723.372753][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 1723.507335][T15984] device syzkaller0 entered promiscuous mode [ 1723.699394][T15993] device syzkaller0 entered promiscuous mode [ 1723.919475][T16008] device syzkaller0 entered promiscuous mode [ 1724.503478][T16024] device syzkaller0 entered promiscuous mode [ 1724.792916][T16036] device syzkaller0 entered promiscuous mode [ 1725.057384][T16042] device syzkaller0 entered promiscuous mode [ 1725.451272][T16057] device syzkaller0 entered promiscuous mode [ 1725.766197][T16066] device syzkaller0 entered promiscuous mode [ 1726.123088][T16072] device syzkaller0 entered promiscuous mode [ 1726.555832][T15988] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1726.618223][T16100] device syzkaller0 entered promiscuous mode [ 1726.668715][T16106] device syzkaller0 entered promiscuous mode [ 1726.914640][T16120] device syzkaller0 entered promiscuous mode [ 1727.418832][T16157] device syzkaller0 entered promiscuous mode [ 1727.421705][T16158] device syzkaller0 entered promiscuous mode [ 1727.763868][T16163] device syzkaller0 entered promiscuous mode [ 1727.993549][T16206] device syzkaller0 entered promiscuous mode [ 1727.999592][T16208] device syzkaller0 entered promiscuous mode [ 1739.232684][T16241] device syzkaller0 entered promiscuous mode [ 1739.334517][T16256] __nla_validate_parse: 7 callbacks suppressed [ 1739.334528][T16256] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13768'. [ 1739.548763][T16283] device syzkaller0 entered promiscuous mode [ 1739.663849][T16287] device syzkaller0 entered promiscuous mode [ 1739.880229][T16302] netlink: 48 bytes leftover after parsing attributes in process `syz.6.13782'. [ 1739.960888][T16304] device syzkaller0 entered promiscuous mode [ 1740.150989][T16316] device syzkaller0 entered promiscuous mode [ 1740.344010][T16324] device syzkaller0 entered promiscuous mode [ 1740.387051][T16334] netlink: 184 bytes leftover after parsing attributes in process `syz.0.13797'. [ 1740.398932][T16335] netlink: 48 bytes leftover after parsing attributes in process `syz.7.13795'. [ 1740.702686][T16355] device syzkaller0 entered promiscuous mode [ 1740.807754][T16367] device syzkaller0 entered promiscuous mode [ 1741.006060][T16378] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13812'. [ 1741.263457][T16384] device syzkaller0 entered promiscuous mode [ 1741.475140][T16395] device syzkaller0 entered promiscuous mode [ 1741.590257][T16409] netlink: 16 bytes leftover after parsing attributes in process `syz.7.13825'. [ 1741.613893][T16410] device syzkaller0 entered promiscuous mode [ 1741.797205][T16424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13831'. [ 1741.800159][T16425] device syzkaller0 entered promiscuous mode [ 1742.034520][T16428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13831'. [ 1742.072258][T16435] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13834'. [ 1742.077068][T16435] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13834'. [ 1742.290333][T16452] device syzkaller0 entered promiscuous mode [ 1742.374961][T16456] device syzkaller0 entered promiscuous mode [ 1742.433021][T16458] device syzkaller0 entered promiscuous mode [ 1742.889236][T16486] device syzkaller0 entered promiscuous mode [ 1742.943101][T16490] device syzkaller0 entered promiscuous mode [ 1742.946874][T16492] device syzkaller0 entered promiscuous mode [ 1743.021872][T27503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1743.523717][T16523] device syzkaller0 entered promiscuous mode [ 1743.568972][T16530] device syzkaller0 entered promiscuous mode [ 1743.778469][T16535] device syzkaller0 entered promiscuous mode [ 1743.987695][T16556] device syzkaller0 entered promiscuous mode [ 1744.244506][T16568] device syzkaller0 entered promiscuous mode [ 1744.361384][T16581] device syzkaller0 entered promiscuous mode [ 1744.417052][T16587] device syzkaller0 entered promiscuous mode [ 1744.949743][T16618] device syzkaller0 entered promiscuous mode [ 1744.976170][T16621] device syzkaller0 entered promiscuous mode [ 1745.165235][T16629] device syzkaller0 entered promiscuous mode [ 1745.385049][T16637] __nla_validate_parse: 7 callbacks suppressed [ 1745.385065][T16637] netlink: 27 bytes leftover after parsing attributes in process `syz.0.13917'. [ 1745.617358][T16650] device syzkaller0 entered promiscuous mode [ 1745.628809][T16657] device syzkaller0 entered promiscuous mode [ 1745.812017][T16666] netlink: 27 bytes leftover after parsing attributes in process `syz.7.13929'. [ 1745.901876][T16668] device syzkaller0 entered promiscuous mode [ 1745.921695][ T4334] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1745.924241][ T4334] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1745.925966][ T4334] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1745.927910][ T4334] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1745.929534][ T4334] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1745.931406][ T4334] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1746.161861][T16673] chnl_net:caif_netlink_parms(): no params data found [ 1746.188892][T16673] bridge0: port 1(bridge_slave_0) entered blocking state [ 1746.190453][T16673] bridge0: port 1(bridge_slave_0) entered disabled state [ 1746.193781][T16673] device bridge_slave_0 entered promiscuous mode [ 1746.196318][T16673] bridge0: port 2(bridge_slave_1) entered blocking state [ 1746.197567][T16673] bridge0: port 2(bridge_slave_1) entered disabled state [ 1746.199099][T16673] device bridge_slave_1 entered promiscuous mode [ 1746.219518][T16673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1746.224776][T16673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1746.279152][T16673] team0: Port device team_slave_0 added [ 1746.288328][T16673] team0: Port device team_slave_1 added [ 1746.605734][ T1573] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1746.607672][ T1573] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1746.613687][T16702] device syzkaller0 entered promiscuous mode [ 1746.617532][T16710] device syzkaller0 entered promiscuous mode [ 1746.722754][T16673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1746.724395][T16673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1746.729052][T16673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1746.737443][ T6232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1746.739679][T16673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1746.740716][T16673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1746.746011][T16673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1746.884210][ T1573] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1746.886040][ T1573] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1746.896287][T16718] netlink: 27 bytes leftover after parsing attributes in process `syz.5.13944'. [ 1747.022838][T16673] device hsr_slave_0 entered promiscuous mode [ 1747.049606][T16729] xt_hashlimit: size too large, truncated to 1048576 [ 1747.071846][T16673] device hsr_slave_1 entered promiscuous mode [ 1747.091635][T16673] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1747.092967][T16673] Cannot create hsr debugfs directory [ 1747.157417][ T1573] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1747.159247][ T1573] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1747.165545][T16730] device syzkaller0 entered promiscuous mode [ 1747.217080][T16722] device syzkaller0 entered promiscuous mode [ 1747.368153][ T1573] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1747.369963][ T1573] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1747.401926][T16744] sock: sock_timestamping_bind_phc: sock not bind to device [ 1747.627595][T16753] device syzkaller0 entered promiscuous mode [ 1747.738584][ T1573] tipc: Left network mode [ 1748.021612][ T4334] Bluetooth: hci1: command 0x0409 tx timeout [ 1748.206984][T16780] device syzkaller0 entered promiscuous mode [ 1748.403370][T16789] device syzkaller0 entered promiscuous mode [ 1748.707914][T16813] device syzkaller0 entered promiscuous mode [ 1749.073728][T16833] device syzkaller0 entered promiscuous mode [ 1749.233781][T16836] device syzkaller0 entered promiscuous mode [ 1749.698883][T16854] device syzkaller0 entered promiscuous mode [ 1750.091694][T27665] Bluetooth: hci1: command 0x041b tx timeout [ 1750.167359][ T1573] device hsr_slave_0 left promiscuous mode [ 1750.205349][ T1573] device hsr_slave_1 left promiscuous mode [ 1750.285216][ T1573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1750.286465][ T1573] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1750.287911][ T1573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1750.289269][ T1573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1750.290733][ T1573] device bridge_slave_1 left promiscuous mode [ 1750.292168][ T1573] bridge0: port 2(bridge_slave_1) entered disabled state [ 1750.342359][ T1573] device bridge_slave_0 left promiscuous mode [ 1750.343512][ T1573] bridge0: port 1(bridge_slave_0) entered disabled state [ 1750.471696][ T1573] device veth1_macvtap left promiscuous mode [ 1750.472746][ T1573] device veth0_macvtap left promiscuous mode [ 1750.473815][ T1573] device veth1_vlan left promiscuous mode [ 1750.474805][ T1573] device veth0_vlan left promiscuous mode [ 1752.171550][T27665] Bluetooth: hci1: command 0x040f tx timeout [ 1752.655157][ T1573] team0 (unregistering): Port device team_slave_1 removed [ 1752.832260][ T1573] team0 (unregistering): Port device team_slave_0 removed [ 1752.992149][ T1573] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1753.192009][ T1573] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1754.261540][T27665] Bluetooth: hci1: command 0x0419 tx timeout [ 1754.742923][ T1573] bond0 (unregistering): Released all slaves [ 1755.086369][T16908] netlink: 148 bytes leftover after parsing attributes in process `syz.0.13989'. [ 1755.088032][T16908] netlink: 116 bytes leftover after parsing attributes in process `syz.0.13989'. [ 1755.089631][T16908] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13989'. [ 1755.102236][T16906] device syzkaller0 entered promiscuous mode [ 1755.105917][T16673] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1755.129673][T16910] xt_hashlimit: size too large, truncated to 1048576 [ 1755.157787][T16914] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13989'. [ 1755.159846][T16673] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1755.692886][T16673] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1755.732953][T16673] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1755.839704][T16673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1755.845357][T16673] 8021q: adding VLAN 0 to HW filter on device team0 [ 1755.851937][ T5011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1755.853570][ T5011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1755.856352][ T5011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1755.860503][ T5011] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1755.871386][ T5011] bridge0: port 1(bridge_slave_0) entered blocking state [ 1755.872747][ T5011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1755.875614][ T5011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1755.878337][ T5011] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1755.880318][ T5011] bridge0: port 2(bridge_slave_1) entered blocking state [ 1755.881576][ T5011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1755.885103][ T5011] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1755.897062][ T5011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1755.900014][ T5011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1755.907769][ T5011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1755.913533][ T5011] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1755.915610][ T5011] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1755.936754][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1755.938499][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1755.941281][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1755.955065][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1755.959694][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1755.961256][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1755.974308][T16931] device syzkaller0 entered promiscuous mode [ 1755.978464][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1756.156522][T16936] netlink: 27 bytes leftover after parsing attributes in process `syz.6.13997'. [ 1756.162143][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1756.163548][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1756.175773][T16673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1756.380011][T16949] device syzkaller0 entered promiscuous mode [ 1756.506828][ T5011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1756.508718][ T5011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1756.511414][T16953] device syzkaller0 entered promiscuous mode [ 1756.555754][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1756.557404][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1756.559002][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1756.560467][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1756.572316][T16673] device veth0_vlan entered promiscuous mode [ 1756.576447][T16673] device veth1_vlan entered promiscuous mode [ 1756.678058][T16673] device veth0_macvtap entered promiscuous mode [ 1756.680396][T16673] device veth1_macvtap entered promiscuous mode [ 1756.704030][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1756.705640][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1756.707185][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1756.708774][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1756.710249][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1756.744510][T16673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1756.747287][T16673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1756.748908][T16673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1756.750705][T16673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1756.761650][T16673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1756.763414][T16673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1756.765153][T16673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1756.766807][T16673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1756.768377][T16673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1756.770017][T16673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1756.771353][T16673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1756.781507][T16673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1756.783903][T16673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1756.785664][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1756.787457][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1756.788997][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1756.794024][T16673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1756.795706][T16673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1756.797402][T16673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1756.799084][T16673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1756.800678][T16673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1756.811259][T16673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1756.814183][T16673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1756.815929][T16673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1756.817444][T16673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1756.819180][T16673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1756.820802][T16673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1756.833769][T16969] netlink: 148 bytes leftover after parsing attributes in process `syz.6.14007'. [ 1756.841497][T16673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1756.843876][T16673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1756.845123][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1756.846749][T16969] netlink: 116 bytes leftover after parsing attributes in process `syz.6.14007'. [ 1756.846920][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1756.848211][T16969] netlink: 24 bytes leftover after parsing attributes in process `syz.6.14007'. [ 1756.858681][T16673] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1756.860064][T16673] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1756.861314][T16673] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1756.866318][T16673] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1756.875193][T16969] netlink: 32 bytes leftover after parsing attributes in process `syz.6.14007'. [ 1756.883789][T16966] device syzkaller0 entered promiscuous mode [ 1756.915923][ T5197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1756.917391][ T5197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1756.918720][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1757.011794][ T5197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1757.013072][ T5197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1757.015501][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1757.105227][T16979] device syzkaller0 entered promiscuous mode [ 1757.154685][T16981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14013'. [ 1757.285485][T16992] device syzkaller0 entered promiscuous mode [ 1757.352400][T27665] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1757.354948][T27665] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1757.356796][T27665] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1757.358870][T27665] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1757.360390][T27665] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1757.361936][T27665] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1757.496891][T16997] chnl_net:caif_netlink_parms(): no params data found [ 1757.760005][T16997] bridge0: port 1(bridge_slave_0) entered blocking state [ 1757.761794][T16997] bridge0: port 1(bridge_slave_0) entered disabled state [ 1757.763524][T16997] device bridge_slave_0 entered promiscuous mode [ 1757.768938][T16997] bridge0: port 2(bridge_slave_1) entered blocking state [ 1757.770298][T16997] bridge0: port 2(bridge_slave_1) entered disabled state [ 1757.772207][T16997] device bridge_slave_1 entered promiscuous mode [ 1757.776327][T17006] device syzkaller0 entered promiscuous mode [ 1757.816184][ T4381] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1757.818309][ T4381] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.876020][T16997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1757.878854][T16997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1757.886865][T16997] team0: Port device team_slave_0 added [ 1757.889568][T16997] team0: Port device team_slave_1 added [ 1757.932831][ T4381] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1757.935495][ T4381] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1758.025199][T16997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1758.026555][T16997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1758.031113][T16997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1758.088393][ T4381] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1758.091298][ T4381] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1758.098066][T16997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1758.099278][T16997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1758.108291][T16997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1758.173724][T16997] device hsr_slave_0 entered promiscuous mode [ 1758.202125][T16997] device hsr_slave_1 entered promiscuous mode [ 1758.251560][T16997] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1758.252950][T16997] Cannot create hsr debugfs directory [ 1758.304210][ T4381] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1758.306682][ T4381] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1758.319107][T17032] device syzkaller0 entered promiscuous mode [ 1758.324497][T17036] device syzkaller0 entered promiscuous mode [ 1758.773344][T17063] device syzkaller0 entered promiscuous mode [ 1758.791942][ T4381] tipc: Disabling bearer [ 1758.793764][ T4381] tipc: Left network mode [ 1758.922246][T17086] device syzkaller0 entered promiscuous mode [ 1759.342871][ T4381] bond1: (slave ip6erspan0): Releasing active interface [ 1759.371703][T27667] Bluetooth: hci3: command 0x0409 tx timeout [ 1759.405670][T17093] device syzkaller0 entered promiscuous mode [ 1760.006046][T17125] device syzkaller0 entered promiscuous mode [ 1760.683915][T17181] device syzkaller0 entered promiscuous mode [ 1760.925458][T17184] __nla_validate_parse: 9 callbacks suppressed [ 1760.925471][T17184] netlink: 148 bytes leftover after parsing attributes in process `syz.6.14069'. [ 1761.124230][T17192] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1761.125995][T17192] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1761.451700][T27667] Bluetooth: hci3: command 0x041b tx timeout [ 1761.526770][T16997] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1761.553295][T16997] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1761.722798][T16997] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1761.783888][ T4381] device batadv0 left promiscuous mode [ 1761.821798][ T4381] device dummy0 left promiscuous mode [ 1761.904581][ T4381] device hsr_slave_0 left promiscuous mode [ 1761.947522][ T4381] device hsr_slave_1 left promiscuous mode [ 1762.012267][ T4381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1762.013625][ T4381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1762.015370][ T4381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1762.016601][ T4381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1762.018131][ T4381] device bridge_slave_1 left promiscuous mode [ 1762.019171][ T4381] bridge0: port 2(bridge_slave_1) entered disabled state [ 1762.052491][ T4381] device bridge_slave_0 left promiscuous mode [ 1762.053690][ T4381] bridge0: port 1(bridge_slave_0) entered disabled state [ 1762.058936][T17222] netlink: 148 bytes leftover after parsing attributes in process `syz.7.14081'. [ 1762.163223][ T4381] device veth1_macvtap left promiscuous mode [ 1762.164356][ T4381] device veth0_macvtap left promiscuous mode [ 1762.165454][ T4381] device veth1_vlan left promiscuous mode [ 1762.166406][ T4381] device veth0_vlan left promiscuous mode [ 1763.097746][ T4381] bond1 (unregistering): Released all slaves [ 1763.531562][T27665] Bluetooth: hci3: command 0x040f tx timeout [ 1765.153898][ T4381] team0 (unregistering): Port device team_slave_1 removed [ 1765.363849][ T4381] team0 (unregistering): Port device team_slave_0 removed [ 1765.542985][ T4381] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1765.621557][T27667] Bluetooth: hci3: command 0x0419 tx timeout [ 1765.752402][ T4381] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1767.352921][ T4381] bond0 (unregistering): Released all slaves [ 1767.667664][T16997] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1767.762779][T16997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1767.766849][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1767.768355][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1767.771309][T16997] 8021q: adding VLAN 0 to HW filter on device team0 [ 1767.778295][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1767.780008][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1767.783160][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 1767.784363][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1767.789962][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1767.797493][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1767.799323][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1767.800839][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 1767.802160][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1767.807843][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1767.809632][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1767.819588][T16997] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1767.821603][T16997] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1767.830087][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1767.831977][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1767.833528][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1767.835177][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1767.836713][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1767.838210][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1767.850116][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1767.855446][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1767.858196][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1767.859850][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1767.978105][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1767.979528][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1767.985598][T16997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1767.987299][T17264] device syzkaller0 entered promiscuous mode [ 1768.028108][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1768.029953][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1768.038339][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1768.040116][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1768.041910][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1768.043391][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1768.046615][T16997] device veth0_vlan entered promiscuous mode [ 1768.051289][T16997] device veth1_vlan entered promiscuous mode [ 1768.069677][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1768.071301][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1768.074164][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1768.076230][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1768.079015][T16997] device veth0_macvtap entered promiscuous mode [ 1768.183812][T16997] device veth1_macvtap entered promiscuous mode [ 1768.189156][T16997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1768.190913][T16997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1768.198545][T16997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1768.200775][T16997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1768.203185][T16997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1768.204809][T16997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1768.206404][T16997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1768.208179][T16997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1768.209847][T16997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1768.211828][T16997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1768.213441][T16997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1768.215203][T16997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1768.219949][T16997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1768.226334][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1768.228160][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1768.229857][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1768.233059][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1768.238347][T16997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1768.240734][T16997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1768.243104][T16997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1768.244904][T16997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1768.246558][T16997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1768.248311][T16997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1768.250042][T16997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1768.252181][T16997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1768.253863][T16997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1768.256018][T16997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1768.257603][T16997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1768.259335][T16997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1768.271962][T16997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1768.275318][T16997] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1768.276989][T16997] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1768.278578][T16997] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1768.280186][T16997] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1768.300342][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1768.303605][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1768.395488][ T1573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1768.396932][ T1573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1768.398578][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1768.400889][ T5197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1768.406142][ T5197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1768.407831][T17287] device syzkaller0 entered promiscuous mode [ 1768.414212][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1768.585593][T17292] device veth0_to_batadv entered promiscuous mode [ 1768.586791][T17292] device macvlan2 entered promiscuous mode [ 1768.589465][T17292] device veth0_to_batadv left promiscuous mode [ 1768.746048][T27665] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1768.757398][T27665] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1768.759192][T27665] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1768.760694][T27665] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1768.762956][T27665] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1768.764758][T27665] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1768.861744][T17303] chnl_net:caif_netlink_parms(): no params data found [ 1768.925635][T17320] device syzkaller0 entered promiscuous mode [ 1768.942970][T17303] bridge0: port 1(bridge_slave_0) entered blocking state [ 1768.944273][T17303] bridge0: port 1(bridge_slave_0) entered disabled state [ 1768.945999][T17303] device bridge_slave_0 entered promiscuous mode [ 1769.021774][T17303] bridge0: port 2(bridge_slave_1) entered blocking state [ 1769.023075][T17303] bridge0: port 2(bridge_slave_1) entered disabled state [ 1769.025375][T17303] device bridge_slave_1 entered promiscuous mode [ 1769.404768][ T39] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1769.406791][ T39] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1769.410164][T17336] device syzkaller0 entered promiscuous mode [ 1769.413292][T17303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1769.415971][T17303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1769.433203][T17303] team0: Port device team_slave_0 added [ 1769.479446][T17303] team0: Port device team_slave_1 added [ 1769.535291][ T39] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1769.537237][ T39] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1769.683094][ T39] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1769.684989][ T39] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1769.689389][T17303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1769.690680][T17303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1769.696746][T17303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1769.700023][T17303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1769.701158][T17303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1769.705895][T17303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1769.845761][ T39] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1769.847622][ T39] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1769.895024][T17303] device hsr_slave_0 entered promiscuous mode [ 1769.941824][T17303] device hsr_slave_1 entered promiscuous mode [ 1769.971544][T17303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1769.972852][T17303] Cannot create hsr debugfs directory [ 1770.060970][T17368] device syzkaller0 entered promiscuous mode [ 1770.291974][ T39] tipc: Disabling bearer [ 1770.293018][ T39] tipc: Left network mode [ 1770.811665][T27667] Bluetooth: hci4: command 0x0409 tx timeout [ 1771.017443][T17424] netlink: 148 bytes leftover after parsing attributes in process `syz.3.14127'. [ 1771.019156][T17424] netlink: 116 bytes leftover after parsing attributes in process `syz.3.14127'. [ 1771.027124][T17424] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14127'. [ 1771.095696][T17436] device syzkaller0 entered promiscuous mode [ 1771.322618][T17449] device syzkaller0 entered promiscuous mode [ 1771.490182][T17471] netlink: 148 bytes leftover after parsing attributes in process `syz.3.14140'. [ 1771.927007][T17505] netlink: 148 bytes leftover after parsing attributes in process `syz.6.14151'. [ 1771.928770][T17505] netlink: 116 bytes leftover after parsing attributes in process `syz.6.14151'. [ 1771.930231][T17505] netlink: 24 bytes leftover after parsing attributes in process `syz.6.14151'. [ 1772.005054][T17492] device syzkaller0 entered promiscuous mode [ 1772.455700][T17514] device syzkaller0 entered promiscuous mode [ 1772.781351][T17542] netlink: 148 bytes leftover after parsing attributes in process `syz.5.14163'. [ 1772.783167][T17542] netlink: 116 bytes leftover after parsing attributes in process `syz.5.14163'. [ 1772.784638][T17542] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14163'. [ 1772.891710][T27667] Bluetooth: hci4: command 0x041b tx timeout [ 1773.022293][ T39] device hsr_slave_0 left promiscuous mode [ 1773.061691][ T39] device hsr_slave_1 left promiscuous mode [ 1773.141602][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1773.143056][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1773.144638][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1773.145936][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1773.151790][ T39] device bridge_slave_1 left promiscuous mode [ 1773.152888][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 1773.202351][ T39] device bridge_slave_0 left promiscuous mode [ 1773.203535][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 1773.342364][ T39] device veth1_macvtap left promiscuous mode [ 1773.343384][ T39] device veth0_macvtap left promiscuous mode [ 1773.344364][ T39] device veth1_vlan left promiscuous mode [ 1773.345286][ T39] device veth0_vlan left promiscuous mode [ 1774.242560][ T39] bond1 (unregistering): Released all slaves [ 1774.971633][T27667] Bluetooth: hci4: command 0x040f tx timeout [ 1775.151052][T17518] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1776.572551][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1776.792359][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1777.051591][T27667] Bluetooth: hci4: command 0x0419 tx timeout [ 1778.123260][ T39] bond0 (unregistering): Released all slaves [ 1778.519267][T17600] netlink: 148 bytes leftover after parsing attributes in process `syz.7.14176'. [ 1778.520883][T17600] netlink: 116 bytes leftover after parsing attributes in process `syz.7.14176'. [ 1778.532876][T17600] netlink: 24 bytes leftover after parsing attributes in process `syz.7.14176'. [ 1778.557396][T17303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1778.597470][T17303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1778.636811][T17303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1778.663478][T17303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1778.754894][T17303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1778.759038][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1778.760448][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1778.767912][T17303] 8021q: adding VLAN 0 to HW filter on device team0 [ 1778.781076][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1778.783816][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1778.785499][ T1573] bridge0: port 1(bridge_slave_0) entered blocking state [ 1778.786714][ T1573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1778.791903][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1778.796468][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1778.799698][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1778.804474][ T1573] bridge0: port 2(bridge_slave_1) entered blocking state [ 1778.805711][ T1573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1778.807258][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1778.821295][T17624] device syzkaller0 entered promiscuous mode [ 1778.874198][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1778.876087][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1778.879765][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1778.881322][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1778.883175][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1778.887507][T17303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1778.889169][T17303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1778.917458][T17632] netlink: 148 bytes leftover after parsing attributes in process `syz.7.14190'. [ 1778.983776][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1778.985454][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1778.986959][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1778.988519][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1778.990077][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1778.991945][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1778.993493][T17630] netlink: 28 bytes leftover after parsing attributes in process `syz.6.14186'. [ 1779.145456][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1779.146917][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1779.150351][T17303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1779.173339][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1779.175080][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1779.179569][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1779.181360][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1779.184205][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1779.188050][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1779.194221][T17303] device veth0_vlan entered promiscuous mode [ 1779.252304][T17303] device veth1_vlan entered promiscuous mode [ 1779.261622][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1779.263287][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1779.264954][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1779.266549][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1779.272124][T17303] device veth0_macvtap entered promiscuous mode [ 1779.277363][T17303] device veth1_macvtap entered promiscuous mode [ 1779.290060][T17303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1779.295161][T17303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1779.299228][T17303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1779.302296][T17303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1779.306525][T17303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1779.309584][T17303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1779.313573][T17303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1779.317032][T17303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1779.319987][T17303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1779.322151][T17303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1779.323896][T17303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1779.325852][T17303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1779.339098][T17303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1779.340975][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1779.342675][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1779.344172][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1779.345702][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1779.358373][T17303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1779.365996][T17303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1779.373664][T17303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1779.378444][T17303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1779.382366][T17303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1779.386506][T17303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1779.390446][T17303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1779.394580][T17303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1779.396722][T17303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1779.398562][T17303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1779.400294][T17303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1779.402469][T17303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1779.405024][T17303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1779.407592][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1779.409227][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1779.418389][T17303] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1779.419984][T17303] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1779.422081][T17303] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1779.423731][T17303] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1779.430030][T17657] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14198'. [ 1779.485840][ T4381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1779.489134][ T4381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1779.494783][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1779.515143][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1779.516528][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1779.517845][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1779.521146][T17663] device syzkaller0 entered promiscuous mode [ 1779.528066][T17665] netlink: 148 bytes leftover after parsing attributes in process `syz.7.14202'. [ 1779.699937][T27667] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1779.704169][T27667] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1779.706203][T27667] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1779.707737][T27667] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1779.709329][T27667] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1779.711041][T27667] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1779.735294][T17671] device syzkaller0 entered promiscuous mode [ 1779.921399][T17678] chnl_net:caif_netlink_parms(): no params data found [ 1779.930042][T17699] netlink: 148 bytes leftover after parsing attributes in process `syz.3.14214'. [ 1780.030258][T17711] netlink: 87 bytes leftover after parsing attributes in process `syz.3.14218'. [ 1780.033439][T17678] bridge0: port 1(bridge_slave_0) entered blocking state [ 1780.034842][T17678] bridge0: port 1(bridge_slave_0) entered disabled state [ 1780.038763][T17678] device bridge_slave_0 entered promiscuous mode [ 1780.052035][T17678] bridge0: port 2(bridge_slave_1) entered blocking state [ 1780.053340][T17678] bridge0: port 2(bridge_slave_1) entered disabled state [ 1780.054937][T17678] device bridge_slave_1 entered promiscuous mode [ 1780.061322][T17678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1780.064938][T17678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1780.168480][T17678] team0: Port device team_slave_0 added [ 1780.172962][T17714] device syzkaller0 entered promiscuous mode [ 1780.177984][T17678] team0: Port device team_slave_1 added [ 1780.319287][T17678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1780.320562][T17678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1780.325266][T17678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1780.330582][T17678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1780.333373][T17678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1780.337622][T17678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1780.393055][T17678] device hsr_slave_0 entered promiscuous mode [ 1780.431767][T17678] device hsr_slave_1 entered promiscuous mode [ 1780.471749][T17678] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1780.473159][T17678] Cannot create hsr debugfs directory [ 1780.557402][T17721] device syzkaller0 entered promiscuous mode [ 1780.616619][T17733] netlink: 148 bytes leftover after parsing attributes in process `syz.7.14226'. [ 1780.673031][T17735] netlink: 'syz.0.14227': attribute type 13 has an invalid length. [ 1780.674446][T17735] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 1780.778101][T17678] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1780.779703][T17678] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1780.840619][T17751] "syz.3.14235" (17751) uses obsolete ecb(arc4) skcipher [ 1780.933673][T17678] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1780.935402][T17678] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1781.053309][T17678] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1781.055675][T17678] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1781.091405][T17764] device syzkaller0 entered promiscuous mode [ 1781.263245][T17678] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1781.265173][T17678] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1781.782560][T27667] Bluetooth: hci0: command 0x0409 tx timeout [ 1781.793145][T17678] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1781.827861][T17678] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1781.853533][T17678] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1782.122875][T17678] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1782.157761][T17797] device syzkaller0 entered promiscuous mode [ 1782.166973][T17802] device syzkaller0 entered promiscuous mode [ 1783.861559][T27667] Bluetooth: hci0: command 0x041b tx timeout [ 1784.815664][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 1785.931606][T27665] Bluetooth: hci0: command 0x040f tx timeout [ 1788.011718][T27665] Bluetooth: hci0: command 0x0419 tx timeout [ 1793.273634][T17815] __nla_validate_parse: 5 callbacks suppressed [ 1793.273653][T17815] netlink: 79 bytes leftover after parsing attributes in process `syz.5.14256'. [ 1793.276154][T17827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14262'. [ 1793.439566][T17678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1793.450477][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1793.452620][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1793.549684][T17678] 8021q: adding VLAN 0 to HW filter on device team0 [ 1793.554125][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1793.555906][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1793.557440][ T4381] bridge0: port 1(bridge_slave_0) entered blocking state [ 1793.558634][ T4381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1793.560125][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1793.575766][T17856] device syzkaller0 entered promiscuous mode [ 1793.577789][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1793.579329][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1793.580862][ T4381] bridge0: port 2(bridge_slave_1) entered blocking state [ 1793.582068][ T4381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1793.585237][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1793.587522][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1793.704657][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1793.706678][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1793.708531][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1793.710459][T17860] netlink: 79 bytes leftover after parsing attributes in process `syz.0.14275'. [ 1793.765130][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1793.767122][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1793.770243][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1793.773221][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1793.777025][T17678] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1793.779194][T17678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1793.787342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1793.788963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1794.105499][T17678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1794.107108][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1794.108437][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1794.255038][T17896] netlink: 79 bytes leftover after parsing attributes in process `syz.3.14286'. [ 1794.276730][T17897] device syzkaller0 entered promiscuous mode [ 1794.698588][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1794.700575][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1795.120307][T17678] device veth0_vlan entered promiscuous mode [ 1795.127248][T17932] netlink: 79 bytes leftover after parsing attributes in process `syz.3.14299'. [ 1795.129292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1795.131375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1795.143461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1795.146214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1795.151871][T17678] device veth1_vlan entered promiscuous mode [ 1795.195392][ T39] device hsr_slave_0 left promiscuous mode [ 1795.221693][ T39] device hsr_slave_1 left promiscuous mode [ 1795.291691][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1795.293083][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1795.295169][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1795.296441][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1795.297863][ T39] device bridge_slave_1 left promiscuous mode [ 1795.298856][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 1795.334408][ T39] device bridge_slave_0 left promiscuous mode [ 1795.336575][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 1795.471626][ T39] device veth1_macvtap left promiscuous mode [ 1795.472652][ T39] device veth0_macvtap left promiscuous mode [ 1795.473708][ T39] device veth1_vlan left promiscuous mode [ 1795.474640][ T39] device veth0_vlan left promiscuous mode [ 1795.534153][ T39] bond1 (unregistering): Released all slaves [ 1797.844744][ T39] team0 (unregistering): Port device team_slave_1 removed [ 1798.022802][ T39] team0 (unregistering): Port device team_slave_0 removed [ 1798.182494][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1798.382915][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1799.753248][ T39] team0 (unregistering): Port device dummy0 removed [ 1799.953186][ T39] bond0 (unregistering): Released all slaves [ 1800.261845][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1800.263588][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1800.265179][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1800.266451][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1800.279099][T17958] device syzkaller0 entered promiscuous mode [ 1800.286404][T17678] device veth0_macvtap entered promiscuous mode [ 1800.288800][T17678] device veth1_macvtap entered promiscuous mode [ 1800.389325][T17678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1800.391113][T17678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1800.395037][T17678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1800.396836][T17678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1800.398546][T17678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1800.400478][T17678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1800.402804][T17678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1800.404519][T17678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1800.406423][T17678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1800.408545][T17678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1800.409981][T17678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1800.412067][T17678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1800.414512][T17678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1800.417668][T17974] netlink: 79 bytes leftover after parsing attributes in process `syz.7.14311'. [ 1800.503871][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1800.505592][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1800.507393][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1800.509950][T17678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1800.512821][T17678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1800.514370][T17678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1800.516349][T17678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1800.521698][T17678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1800.523361][T17678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1800.525176][T17678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1800.527019][T17678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1800.528712][T17678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1800.530453][T17678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1800.532835][T17678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1800.534611][T17678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1800.536883][T17678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1800.538139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1800.539930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1800.544360][T17678] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1800.545859][T17678] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1800.547374][T17678] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1800.552042][T17678] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1800.598664][ T5011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1800.599938][ T5011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1800.601410][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1800.610724][ T5011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1800.612471][ T5011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1800.621303][ T5011] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1800.718988][T18003] netlink: 79 bytes leftover after parsing attributes in process `syz.5.14323'. [ 1800.865842][T27667] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1800.867948][T27667] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1800.869767][T27667] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1800.886551][T27667] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1800.890314][T27667] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1800.892876][T27667] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1801.140809][T18032] netlink: 27 bytes leftover after parsing attributes in process `syz.6.14335'. [ 1801.225917][T18015] chnl_net:caif_netlink_parms(): no params data found [ 1801.245909][T18015] bridge0: port 1(bridge_slave_0) entered blocking state [ 1801.247229][T18015] bridge0: port 1(bridge_slave_0) entered disabled state [ 1801.248751][T18015] device bridge_slave_0 entered promiscuous mode [ 1801.250992][T18015] bridge0: port 2(bridge_slave_1) entered blocking state [ 1801.252655][T18015] bridge0: port 2(bridge_slave_1) entered disabled state [ 1801.254250][T18015] device bridge_slave_1 entered promiscuous mode [ 1801.262448][T18015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1801.266042][T18015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1801.275167][T18015] team0: Port device team_slave_0 added [ 1801.277511][T18015] team0: Port device team_slave_1 added [ 1801.283518][T18015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1801.284621][T18015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1801.289288][T18015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1801.294147][T18015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1801.295319][T18015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1801.303223][T18015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1801.359703][T18015] device hsr_slave_0 entered promiscuous mode [ 1801.393436][T18015] device hsr_slave_1 entered promiscuous mode [ 1801.781834][T18063] netlink: 27 bytes leftover after parsing attributes in process `syz.7.14347'. [ 1801.835089][T18015] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1801.838800][T18015] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1801.978294][T18015] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1801.980044][T18015] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1802.197734][T18015] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1802.199566][T18015] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1802.203093][T18105] netlink: 27 bytes leftover after parsing attributes in process `syz.7.14368'. [ 1802.316661][T18015] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1802.318554][T18015] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1802.514826][T18131] netlink: 27 bytes leftover after parsing attributes in process `syz.7.14380'. [ 1802.659338][T18015] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1802.697187][T18015] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1802.725437][T18015] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1802.816059][T18157] netlink: 27 bytes leftover after parsing attributes in process `syz.6.14393'. [ 1802.817939][T18015] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1802.981717][T27665] Bluetooth: hci2: command 0x0409 tx timeout [ 1803.212175][T18184] netlink: 27 bytes leftover after parsing attributes in process `syz.0.14405'. [ 1803.216113][T18015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1803.220577][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1803.222150][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1803.228720][T18015] 8021q: adding VLAN 0 to HW filter on device team0 [ 1803.232818][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1803.234703][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1803.236144][ T4814] bridge0: port 1(bridge_slave_0) entered blocking state [ 1803.237288][ T4814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1803.341756][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1803.343494][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1803.345098][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1803.346925][ T4814] bridge0: port 2(bridge_slave_1) entered blocking state [ 1803.348177][ T4814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1803.359552][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1803.361431][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1803.364079][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1803.367914][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1803.369741][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1803.385915][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1803.388821][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1803.393659][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1803.398808][T18015] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1803.401137][T18015] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1803.468766][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1803.470881][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1803.472979][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1803.782051][T18244] netlink: 348 bytes leftover after parsing attributes in process `syz.6.14432'. [ 1803.783914][T18244] netlink: 40 bytes leftover after parsing attributes in process `syz.6.14432'. [ 1803.827827][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1803.829290][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1803.837177][T18015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1804.338253][ T39] device hsr_slave_0 left promiscuous mode [ 1804.365987][ T39] device hsr_slave_1 left promiscuous mode [ 1804.454717][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1804.456145][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1804.458714][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1804.459922][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1804.463327][ T39] device bridge_slave_1 left promiscuous mode [ 1804.464476][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 1804.503447][ T39] device bridge_slave_0 left promiscuous mode [ 1804.504859][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 1804.635038][ T39] device veth1_macvtap left promiscuous mode [ 1804.636186][ T39] device veth0_macvtap left promiscuous mode [ 1804.637291][ T39] device veth1_vlan left promiscuous mode [ 1804.638338][ T39] device veth0_vlan left promiscuous mode [ 1805.061580][T27665] Bluetooth: hci2: command 0x041b tx timeout [ 1806.926073][ T39] team0 (unregistering): Port device team_slave_1 removed [ 1807.102264][ T39] team0 (unregistering): Port device team_slave_0 removed [ 1807.131536][T27667] Bluetooth: hci2: command 0x040f tx timeout [ 1807.272420][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1807.486614][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1808.973146][ T39] bond0 (unregistering): Released all slaves [ 1809.211530][T27667] Bluetooth: hci2: command 0x0419 tx timeout [ 1809.284929][T18358] __nla_validate_parse: 10 callbacks suppressed [ 1809.284948][T18358] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14479'. [ 1809.300106][T18015] device veth0_vlan entered promiscuous mode [ 1809.303920][T18015] device veth1_vlan entered promiscuous mode [ 1809.311138][T18015] device veth0_macvtap entered promiscuous mode [ 1809.333005][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1809.334760][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1809.336289][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1809.337734][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1809.339261][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1809.340690][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1809.344693][T18395] netlink: 148 bytes leftover after parsing attributes in process `syz.6.14498'. [ 1809.346154][T18395] netlink: 164 bytes leftover after parsing attributes in process `syz.6.14498'. [ 1809.357957][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1809.382076][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1809.403402][T18015] device veth1_macvtap entered promiscuous mode [ 1809.407937][T18015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1809.409731][T18015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1809.411426][T18015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1809.414157][T18015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1809.415757][T18015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1809.417563][T18015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1809.420136][T18015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1809.434018][T18015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1809.436124][T18015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1809.438242][T18015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1809.439875][T18015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1809.441739][T18015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1809.444918][T18015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1809.446145][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1809.447634][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1809.459714][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1809.466312][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1809.468229][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1809.470118][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1809.475054][T18015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1809.476708][T18015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1809.478167][T18015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1809.479775][T18015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1809.481298][T18015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1809.491502][T18015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1809.496770][T18015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1809.498455][T18015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1809.500062][T18015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1809.509047][T18015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1809.517590][T18015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1809.519262][T18015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1809.526495][T18015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1809.528859][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1809.530526][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1809.532932][T18415] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14506'. [ 1809.535805][T18015] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1809.537255][T18015] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1809.538827][T18015] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1809.540324][T18015] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1809.573756][T18424] netlink: 148 bytes leftover after parsing attributes in process `syz.0.14511'. [ 1809.579666][T18424] netlink: 164 bytes leftover after parsing attributes in process `syz.0.14511'. [ 1809.692460][ T1573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1809.693760][ T1573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1809.696933][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1809.708608][ T1573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1809.710087][ T1573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1809.711311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1809.795898][T18440] device syzkaller0 entered promiscuous mode [ 1809.816813][T18444] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14520'. [ 1809.821013][T18446] netlink: 28 bytes leftover after parsing attributes in process `syz.6.14521'. [ 1809.875674][T18452] netlink: 148 bytes leftover after parsing attributes in process `syz.6.14523'. [ 1810.094636][T18472] netlink: 28 bytes leftover after parsing attributes in process `syz.6.14534'. [ 1810.540954][T18527] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1810.646648][T18541] wg1 speed is unknown, defaulting to 1000 [ 1810.647876][T18541] wg1 speed is unknown, defaulting to 1000 [ 1810.662478][T18541] wg1 speed is unknown, defaulting to 1000 [ 1810.664948][T18541] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1810.684092][T18541] wg1 speed is unknown, defaulting to 1000 [ 1810.685417][T18541] wg1 speed is unknown, defaulting to 1000 [ 1810.686578][T18541] wg1 speed is unknown, defaulting to 1000 [ 1810.687798][T18541] wg1 speed is unknown, defaulting to 1000 [ 1810.702763][T18541] wg1 speed is unknown, defaulting to 1000 [ 1810.704019][T18541] wg1 speed is unknown, defaulting to 1000 [ 1810.705206][T18541] wg1 speed is unknown, defaulting to 1000 [ 1810.993385][T18584] siw: device registration error -23 [ 1811.170501][T18613] xt_hashlimit: size too large, truncated to 1048576 [ 1811.207391][T18618] wg1 speed is unknown, defaulting to 1000 [ 1811.299749][T18628] siw: device registration error -23 [ 1811.657833][T18657] wg1 speed is unknown, defaulting to 1000 [ 1811.910336][T18667] device syzkaller0 entered promiscuous mode [ 1811.914482][T18668] siw: device registration error -23 [ 1812.530814][T18705] device syzkaller0 entered promiscuous mode [ 1812.536030][T18707] siw: device registration error -23 [ 1812.874925][T18737] siw: device registration error -23 [ 1812.934588][T18742] wg1 speed is unknown, defaulting to 1000 [ 1813.056949][T18755] device syzkaller0 entered promiscuous mode [ 1813.207049][T18765] debugfs: Directory 'netdev:syzkaller0' with parent 'phy86' already present! [ 1813.403602][T18792] device syzkaller0 entered promiscuous mode [ 1813.523809][T18796] debugfs: Directory 'netdev:syzkaller0' with parent 'phy86' already present! [ 1813.841205][T18834] device syzkaller0 entered promiscuous mode [ 1814.110644][T18858] wg1 speed is unknown, defaulting to 1000 [ 1814.366004][T18882] device syzkaller0 entered promiscuous mode [ 1814.718870][T18907] netlink: 'syz.3.14727': attribute type 3 has an invalid length. [ 1814.817272][T18916] device syzkaller0 entered promiscuous mode [ 1815.153537][T18953] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1815.205212][T18963] device syzkaller0 entered promiscuous mode [ 1815.393760][T18986] device syzkaller0 entered promiscuous mode [ 1815.667323][T19014] device syzkaller0 entered promiscuous mode [ 1815.779564][T19022] __nla_validate_parse: 30 callbacks suppressed [ 1815.779578][T19022] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14774'. [ 1815.867755][T19040] device syzkaller0 entered promiscuous mode [ 1816.044856][T19042] netlink: 'syz.3.14784': attribute type 39 has an invalid length. [ 1816.149093][T19048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14787'. [ 1816.301824][T19068] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14793'. [ 1816.350803][T19072] device syzkaller0 entered promiscuous mode [ 1816.394219][T19081] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14808'. [ 1816.526957][T19087] device syzkaller0 entered promiscuous mode [ 1816.784369][T19098] netlink: 148 bytes leftover after parsing attributes in process `syz.0.14804'. [ 1816.882548][T19100] device syzkaller0 entered promiscuous mode [ 1817.027398][T19123] device syzkaller0 entered promiscuous mode [ 1817.215971][T19144] device syzkaller0 entered promiscuous mode [ 1817.220526][T19146] xt_hashlimit: size too large, truncated to 1048576 [ 1817.248441][T19146] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1817.294530][T19144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1817.558277][T19171] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1817.559769][T19171] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1817.561314][T19171] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1817.581497][T19171] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1817.583354][T19171] device geneve2 entered promiscuous mode [ 1817.609582][T19173] device syzkaller0 entered promiscuous mode [ 1817.858062][T19186] device syzkaller0 entered promiscuous mode [ 1818.005192][T19197] device syzkaller0 entered promiscuous mode [ 1818.052928][T19194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1818.267001][T19216] device syzkaller0 entered promiscuous mode [ 1818.436746][T19231] device syzkaller0 entered promiscuous mode [ 1818.820390][T19246] device syzkaller0 entered promiscuous mode [ 1818.882062][T19250] debugfs: Directory 'netdev:syzkaller0' with parent 'phy88' already present! [ 1818.882792][T19246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1818.909741][T19252] device syzkaller0 entered promiscuous mode [ 1818.930959][T19256] device syzkaller0 entered promiscuous mode [ 1819.326940][T19275] debugfs: Directory 'netdev:syzkaller0' with parent 'phy86' already present! [ 1819.329603][T19273] device syzkaller0 entered promiscuous mode [ 1819.543835][T19283] device syzkaller0 entered promiscuous mode [ 1819.549002][T19284] device syzkaller0 entered promiscuous mode [ 1830.313861][T19298] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14886'. [ 1830.348135][T19312] debugfs: Directory 'netdev:syzkaller0' with parent 'phy94' already present! [ 1830.378908][T19316] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14889'. [ 1830.460934][T19330] device syzkaller0 entered promiscuous mode [ 1830.603577][T19342] netlink: 28 bytes leftover after parsing attributes in process `syz.6.14903'. [ 1830.619057][T19344] device syzkaller0 entered promiscuous mode [ 1830.632588][T19349] debugfs: Directory 'netdev:syzkaller0' with parent 'phy92' already present! [ 1830.659855][T19352] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14906'. [ 1830.920602][T19375] netlink: 28 bytes leftover after parsing attributes in process `syz.6.14916'. [ 1830.949164][T19377] debugfs: Directory 'netdev:syzkaller0' with parent 'phy88' already present! [ 1830.960071][T19379] device syzkaller0 entered promiscuous mode [ 1831.005419][T19385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14920'. [ 1831.146981][T19389] device syzkaller0 entered promiscuous mode [ 1831.475950][T19413] netlink: 28 bytes leftover after parsing attributes in process `syz.6.14929'. [ 1831.479005][T19414] debugfs: Directory 'netdev:syzkaller0' with parent 'phy90' already present! [ 1831.484100][T19415] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14931'. [ 1831.527822][T19421] device syzkaller0 entered promiscuous mode [ 1831.543901][T19419] device syzkaller0 entered promiscuous mode [ 1831.816704][T19435] device syzkaller0 entered promiscuous mode [ 1832.014487][T19454] debugfs: Directory 'netdev:syzkaller0' with parent 'phy86' already present! [ 1832.016356][T19456] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14945'. [ 1832.061265][T19462] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14946'. [ 1832.251150][T19471] device syzkaller0 entered promiscuous mode [ 1832.374507][T19488] debugfs: Directory 'netdev:syzkaller0' with parent 'phy90' already present! [ 1832.447992][T19499] device syzkaller0 entered promiscuous mode [ 1832.764053][T19519] debugfs: Directory 'netdev:syzkaller0' with parent 'phy88' already present! [ 1832.778494][T19523] device syzkaller0 entered promiscuous mode [ 1833.720169][T19557] device syzkaller0 entered promiscuous mode [ 1833.747665][T19560] device syzkaller0 entered promiscuous mode [ 1833.984229][T19575] debugfs: Directory 'netdev:syzkaller0' with parent 'phy86' already present! [ 1834.181731][T19608] device syzkaller0 entered promiscuous mode [ 1834.304651][T19614] debugfs: Directory 'netdev:syzkaller0' with parent 'phy86' already present! [ 1834.310581][T19616] device syzkaller0 entered promiscuous mode [ 1834.735938][T19647] debugfs: Directory 'netdev:syzkaller0' with parent 'phy92' already present! [ 1834.739927][T19643] device syzkaller0 entered promiscuous mode [ 1834.879955][T19667] device syzkaller0 entered promiscuous mode [ 1834.974223][T19679] debugfs: Directory 'netdev:syzkaller0' with parent 'phy94' already present! [ 1835.307825][T19698] device syzkaller0 entered promiscuous mode [ 1835.434899][T19710] debugfs: Directory 'netdev:syzkaller0' with parent 'phy92' already present! [ 1835.441683][T19716] device syzkaller0 entered promiscuous mode [ 1835.757176][T19746] debugfs: Directory 'netdev:syzkaller0' with parent 'phy88' already present! [ 1835.797033][T19749] device syzkaller0 entered promiscuous mode [ 1835.950820][T19767] device syzkaller0 entered promiscuous mode [ 1835.973273][T19771] debugfs: Directory 'netdev:syzkaller0' with parent 'phy88' already present! [ 1836.205441][T19802] __nla_validate_parse: 11 callbacks suppressed [ 1836.205453][T19802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15091'. [ 1836.209264][T19801] device syzkaller0 entered promiscuous mode [ 1836.215320][T19804] debugfs: Directory 'netdev:syzkaller0' with parent 'phy92' already present! [ 1836.375264][T19828] device syzkaller0 entered promiscuous mode [ 1836.407662][T19833] debugfs: Directory 'netdev:syzkaller0' with parent 'phy90' already present! [ 1836.517350][T19843] loop7: detected capacity change from 0 to 1024 [ 1836.518911][T19843] EXT4-fs: inline encryption not supported [ 1836.526244][T19845] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15111'. [ 1836.547561][T19843] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1836.578832][T19843] EXT4-fs error (device loop7): ext4_free_blocks:6220: comm syz.7.15110: Freeing blocks not in datazone - block = 0, count = 16 [ 1836.610142][T16673] EXT4-fs (loop7): unmounting filesystem. [ 1836.670112][T19855] loop3: detected capacity change from 0 to 512 [ 1836.686139][T19856] device syzkaller0 entered promiscuous mode [ 1836.699677][T19855] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1836.725473][T16997] EXT4-fs (loop3): unmounting filesystem. [ 1836.805311][T19867] debugfs: Directory 'netdev:syzkaller0' with parent 'phy88' already present! [ 1836.880294][T19878] device syzkaller0 entered promiscuous mode [ 1836.899376][T19879] loop3: detected capacity change from 0 to 4096 [ 1836.920489][T19879] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1836.926325][T19884] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15127'. [ 1836.949317][T16997] EXT4-fs (loop3): unmounting filesystem. [ 1836.963315][T19887] mmap: syz.0.15129 (19887) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1837.149557][T19910] loop7: detected capacity change from 0 to 128 [ 1837.268413][T19905] device syzkaller0 entered promiscuous mode [ 1837.287390][T19923] netlink: 28 bytes leftover after parsing attributes in process `syz.6.15142'. [ 1837.298298][T19923] netlink: 28 bytes leftover after parsing attributes in process `syz.6.15142'. [ 1837.324365][T19927] netlink: 32 bytes leftover after parsing attributes in process `syz.7.15143'. [ 1837.519337][T19931] device syzkaller0 entered promiscuous mode [ 1837.669511][T19967] xt_hashlimit: size too large, truncated to 1048576 [ 1837.769395][T19971] device syzkaller0 entered promiscuous mode [ 1837.807298][T19973] netlink: 32 bytes leftover after parsing attributes in process `syz.6.15163'. [ 1837.984164][T19978] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15164'. [ 1838.263807][T19988] netlink: 14 bytes leftover after parsing attributes in process `syz.3.15170'. [ 1838.357673][T19988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1838.403167][T19988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1838.445599][T19988] bond0 (unregistering): Released all slaves [ 1838.500915][T19997] device syzkaller0 entered promiscuous mode [ 1838.549988][T20001] netlink: 32 bytes leftover after parsing attributes in process `syz.6.15176'. [ 1838.726422][T20006] device syzkaller0 entered promiscuous mode [ 1838.796295][T20014] loop6: detected capacity change from 0 to 136 [ 1838.844842][T20014] Attempt to read inode for relocated directory [ 1838.883640][T20017] netlink: 'syz.7.15183': attribute type 12 has an invalid length. [ 1839.202167][T20039] device syzkaller0 entered promiscuous mode [ 1839.433606][T20055] device syzkaller0 entered promiscuous mode [ 1839.690837][T20068] device syzkaller0 entered promiscuous mode [ 1839.889560][T20099] device syzkaller0 entered promiscuous mode [ 1839.909833][T20106] loop7: detected capacity change from 0 to 512 [ 1839.936657][T20106] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1839.938729][T20106] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1839.967012][T20106] EXT4-fs error (device loop7): xattr_find_entry:297: inode #15: comm syz.7.15221: corrupted xattr entries [ 1839.970875][T20106] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1839.974906][T20106] EXT4-fs (loop7): 1 truncate cleaned up [ 1839.975949][T20106] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1839.991288][T16673] EXT4-fs (loop7): unmounting filesystem. [ 1840.048920][T20118] loop7: detected capacity change from 0 to 2048 [ 1840.152869][T20116] device syzkaller0 entered promiscuous mode [ 1846.262333][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 1850.939500][T20142] __nla_validate_parse: 3 callbacks suppressed [ 1850.939519][T20142] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15235'. [ 1851.022404][T20180] netlink: 20 bytes leftover after parsing attributes in process `syz.5.15245'. [ 1852.820500][T20238] device syzkaller0 entered promiscuous mode [ 1852.832765][T20241] device syzkaller0 entered promiscuous mode [ 1863.700478][T20288] loop6: detected capacity change from 0 to 128 [ 1863.770803][T20288] syz.6.15276: attempt to access beyond end of device [ 1863.770803][T20288] loop6: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 1863.773460][T20288] Buffer I/O error on dev loop6, logical block 69, lost async page write [ 1863.777923][T20288] syz.6.15276: attempt to access beyond end of device [ 1863.777923][T20288] loop6: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 1863.780199][T20288] Buffer I/O error on dev loop6, logical block 70, lost async page write [ 1863.782144][T20288] syz.6.15276: attempt to access beyond end of device [ 1863.782144][T20288] loop6: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 1863.784347][T20288] Buffer I/O error on dev loop6, logical block 71, lost async page write [ 1863.788221][T20288] syz.6.15276: attempt to access beyond end of device [ 1863.788221][T20288] loop6: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 1863.796022][T20288] Buffer I/O error on dev loop6, logical block 71, lost async page write [ 1863.800095][T20288] syz.6.15276: attempt to access beyond end of device [ 1863.800095][T20288] loop6: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 1863.809097][T20288] Buffer I/O error on dev loop6, logical block 71, lost async page write [ 1863.812095][T20288] syz.6.15276: attempt to access beyond end of device [ 1863.812095][T20288] loop6: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 1863.816297][T20288] Buffer I/O error on dev loop6, logical block 71, lost async page write [ 1863.819214][T20288] syz.6.15276: attempt to access beyond end of device [ 1863.819214][T20288] loop6: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 1863.827430][T20288] Buffer I/O error on dev loop6, logical block 71, lost async page write [ 1863.835285][T20288] syz.6.15276: attempt to access beyond end of device [ 1863.835285][T20288] loop6: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 1863.837883][T20288] Buffer I/O error on dev loop6, logical block 69, lost async page write [ 1863.839489][T20288] syz.6.15276: attempt to access beyond end of device [ 1863.839489][T20288] loop6: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 1863.846403][T20288] Buffer I/O error on dev loop6, logical block 70, lost async page write [ 1863.848056][T20288] syz.6.15276: attempt to access beyond end of device [ 1863.848056][T20288] loop6: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 1863.851266][T20288] Buffer I/O error on dev loop6, logical block 71, lost async page write [ 1863.910825][T20314] netlink: 'syz.3.15286': attribute type 13 has an invalid length. [ 1864.023633][T20314] bridge0: port 2(bridge_slave_1) entered disabled state [ 1864.024994][T20314] bridge0: port 1(bridge_slave_0) entered disabled state [ 1864.378719][T20314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1864.393091][T20314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1864.678969][T20314] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1864.680575][T20314] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1864.682380][T20314] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1864.684053][T20314] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1864.946921][T20317] device syzkaller0 entered promiscuous mode [ 1864.955574][T27503] wg1 speed is unknown, defaulting to 1000 [ 1865.094025][T20355] loop6: detected capacity change from 0 to 512 [ 1865.119675][T20355] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1865.137716][T17678] EXT4-fs (loop6): unmounting filesystem. [ 1868.811638][T27665] Bluetooth: hci1: command 0x0406 tx timeout [ 1875.568814][T20336] device syzkaller0 entered promiscuous mode [ 1876.308844][T20399] device syzkaller0 entered promiscuous mode [ 1876.368489][T20398] BUG: MAX_LOCKDEP_CHAINS too low! [ 1876.369395][T20398] turning off the locking correctness validator. [ 1876.370445][T20398] CPU: 1 PID: 20398 Comm: syz.5.15311 Not tainted syzkaller #0 [ 1876.371682][T20398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1876.373424][T20398] Call trace: [ 1876.373956][T20398] dump_backtrace+0x1c0/0x1ec [ 1876.374768][T20398] show_stack+0x2c/0x3c [ 1876.375497][T20398] __dump_stack+0x30/0x40 [ 1876.376180][T20398] dump_stack_lvl+0xf4/0x15c [ 1876.376897][T20398] dump_stack+0x1c/0x5c [ 1876.377617][T20398] __lock_acquire+0x1864/0x6800 [ 1876.378440][T20398] lock_acquire+0x20c/0x63c [ 1876.379204][T20398] _raw_spin_lock_bh+0x54/0x6c [ 1876.380020][T20398] dev_deactivate_many+0x85c/0xa84 [ 1876.380904][T20398] __dev_close_many+0x248/0x3a0 [ 1876.381656][T20398] dev_close_many+0x1e4/0x440 [ 1876.382464][T20398] unregister_netdevice_many_notify+0x3dc/0x1834 [ 1876.383497][T20398] unregister_netdevice_queue+0x2b8/0x30c [ 1876.384435][T20398] __tun_detach+0xb04/0x1224 [ 1876.385205][T20398] tun_chr_close+0x118/0x1f4 [ 1876.385989][T20398] __fput+0x1bc/0x7b8 [ 1876.386632][T20398] ____fput+0x20/0x30 [ 1876.387365][T20398] task_work_run+0x1ec/0x278 [ 1876.388152][T20398] do_notify_resume+0x1fa0/0x2aa4 [ 1876.388979][T20398] el0_svc+0x98/0x128 [ 1876.389611][T20398] el0t_64_sync_handler+0x84/0xf0 [ 1876.390493][T20398] el0t_64_sync+0x18c/0x190 [ 1884.171650][T27665] Bluetooth: hci3: command 0x0406 tx timeout [ 1894.421521][T27665] Bluetooth: hci4: command 0x0406 tx timeout VM DIAGNOSIS: Connection timed out during banner exchange Connection to 10.128.1.83 port 22 timed out failed to run ["ssh" "-p" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "IdentitiesOnly=yes" "-o" "BatchMode=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "root@10.128.1.83" "cat" "/proc/lockdep_stats" "/proc/lockdep" "/proc/lockdep_chains"]: exit status 255