Starting System Logging Service... [ OK ] Started Daily apt download activities. [ OK ] Started Daily apt upgrade and clean activities. [ OK ] Reached target Timers. [ OK ] Started Permit User Sessions. [ OK ] Found device /dev/ttyS0. [ OK ] Started System Logging Service. [ ***] (1 of 2) A start job is running for…Shell server (1min 28s / 2min 56s) [ OK ] Started OpenBSD Secure Shell server. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. Warning: Permanently added '10.128.0.19' (ECDSA) to the list of known hosts. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 2020/08/10 23:13:17 fuzzer started 2020/08/10 23:13:17 dialing manager at 10.128.0.26:36505 2020/08/10 23:13:18 syscalls: 3255 2020/08/10 23:13:18 code coverage: enabled 2020/08/10 23:13:18 comparison tracing: enabled 2020/08/10 23:13:18 extra coverage: enabled 2020/08/10 23:13:18 setuid sandbox: enabled 2020/08/10 23:13:18 namespace sandbox: enabled 2020/08/10 23:13:18 Android sandbox: enabled 2020/08/10 23:13:18 fault injection: enabled 2020/08/10 23:13:18 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/08/10 23:13:18 net packet injection: enabled 2020/08/10 23:13:18 net device setup: enabled 2020/08/10 23:13:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/08/10 23:13:18 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/08/10 23:13:18 USB emulation: enabled 2020/08/10 23:13:18 hci packet injection: enabled 23:15:45 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) syzkaller login: [ 313.065437][ T29] audit: type=1400 audit(1597101345.887:8): avc: denied { execmem } for pid=8499 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 313.417720][ T8500] IPVS: ftp: loaded support on port[0] = 21 [ 313.720532][ T8500] chnl_net:caif_netlink_parms(): no params data found [ 313.896072][ T8500] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.904506][ T8500] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.914222][ T8500] device bridge_slave_0 entered promiscuous mode [ 313.928898][ T8500] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.936298][ T8500] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.946004][ T8500] device bridge_slave_1 entered promiscuous mode [ 313.995116][ T8500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.012283][ T8500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.061251][ T8500] team0: Port device team_slave_0 added [ 314.075121][ T8500] team0: Port device team_slave_1 added [ 314.118679][ T8500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.125911][ T8500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.152661][ T8500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.168900][ T8500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.177152][ T8500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.203244][ T8500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.267347][ T8500] device hsr_slave_0 entered promiscuous mode [ 314.278360][ T8500] device hsr_slave_1 entered promiscuous mode [ 314.596919][ T8500] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 314.616353][ T8500] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 314.634036][ T8500] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 314.651489][ T8500] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 314.987845][ T8500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.022806][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 315.032651][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 315.054617][ T8500] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.079033][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 315.089047][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 315.099825][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.107241][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.155096][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 315.164407][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 315.174671][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 315.184146][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.191376][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.200463][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 315.211462][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 315.231946][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 315.242319][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 315.283717][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 315.294067][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 315.304602][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 315.315000][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 315.324722][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 315.347456][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 315.357501][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 315.377838][ T8500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 315.436051][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 315.443952][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 315.482074][ T8500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.548849][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 315.559437][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 315.608268][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 315.617956][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 315.641014][ T8500] device veth0_vlan entered promiscuous mode [ 315.653200][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 315.662580][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 315.700169][ T8500] device veth1_vlan entered promiscuous mode [ 315.710694][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 315.793745][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 315.803722][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 315.827104][ T8500] device veth0_macvtap entered promiscuous mode [ 315.855360][ T8500] device veth1_macvtap entered promiscuous mode [ 315.917224][ T8500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.925579][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 315.935216][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 315.945020][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 315.955053][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 315.982135][ T8500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.010288][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 316.020413][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 23:15:50 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) 23:15:51 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) 23:15:51 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) 23:15:51 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) 23:15:51 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) 23:15:51 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) 23:15:52 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x400454d1, 0x0) [ 319.313128][ T28] Bluetooth: hci0: command 0x0409 tx timeout 23:15:52 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x400454d1, 0x0) 23:15:52 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x400454d1, 0x0) 23:15:52 executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) 23:15:52 executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) 23:15:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) 23:15:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) 23:15:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) 23:15:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) 23:15:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) 23:15:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) [ 321.392360][ T8708] Bluetooth: hci0: command 0x041b tx timeout 23:15:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) 23:15:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) 23:15:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) 23:15:55 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) 23:15:55 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x400454d1, 0x0) 23:15:55 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x400454d1, 0x0) 23:15:56 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x400454d1, 0x0) [ 323.471402][ T28] Bluetooth: hci0: command 0x040f tx timeout 23:15:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) 23:15:56 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r2, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="12"], 0x18}, 0x0) 23:15:56 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = memfd_create(&(0x7f00000001c0), 0x0) write(r1, &(0x7f0000000540)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, 0x0, &(0x7f0000000040)) 23:15:57 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000240)=0x2, 0x2) 23:15:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)) [ 324.692519][ T8849] FAT-fs (loop0): bogus number of reserved sectors [ 324.699208][ T8849] FAT-fs (loop0): Can't find a valid FAT filesystem 23:15:57 executing program 0 (fault-call:2 fault-nth:0): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) [ 324.784114][ T8849] FAT-fs (loop0): bogus number of reserved sectors [ 324.790926][ T8849] FAT-fs (loop0): Can't find a valid FAT filesystem [ 325.116362][ T8858] FAULT_INJECTION: forcing a failure. [ 325.116362][ T8858] name failslab, interval 1, probability 0, space 0, times 1 [ 325.129332][ T8858] CPU: 1 PID: 8858 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 325.137990][ T8858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 325.148117][ T8858] Call Trace: [ 325.151592][ T8858] dump_stack+0x21c/0x280 [ 325.156083][ T8858] should_fail+0x8b7/0x9e0 [ 325.160664][ T8858] __should_failslab+0x1f6/0x290 [ 325.165762][ T8858] should_failslab+0x29/0x70 [ 325.170502][ T8858] __kmalloc+0xae/0x410 [ 325.174764][ T8858] ? kmsan_get_metadata+0x116/0x180 [ 325.180111][ T8858] ? tomoyo_realpath_from_path+0x15a/0xcb0 [ 325.186036][ T8858] tomoyo_realpath_from_path+0x15a/0xcb0 [ 325.191791][ T8858] tomoyo_path_number_perm+0x2a4/0xaf0 [ 325.197399][ T8858] tomoyo_file_ioctl+0x74/0x90 [ 325.202270][ T8858] ? tomoyo_inode_getattr+0x60/0x60 [ 325.209472][ T8858] security_file_ioctl+0x10a/0x210 [ 325.214726][ T8858] __se_compat_sys_ioctl+0x166/0x1100 [ 325.220205][ T8858] ? kmsan_set_origin_checked+0x95/0xf0 [ 325.225851][ T8858] ? kmsan_get_metadata+0x116/0x180 [ 325.231145][ T8858] __ia32_compat_sys_ioctl+0x4a/0x70 [ 325.236553][ T8858] __do_fast_syscall_32+0x2af/0x480 [ 325.241913][ T8858] do_fast_syscall_32+0x6b/0xd0 [ 325.246865][ T8858] do_SYSENTER_32+0x73/0x90 [ 325.251516][ T8858] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 325.257906][ T8858] RIP: 0023:0xf7fbf549 [ 325.262026][ T8858] Code: Bad RIP value. [ 325.266155][ T8858] RSP: 002b:00000000f55b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 325.274699][ T8858] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000400454d1 [ 325.282745][ T8858] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 325.290788][ T8858] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 325.298823][ T8858] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 325.307652][ T8858] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 23:15:58 executing program 1: r0 = openat$mice(0xffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x48100) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000040)=""/161, 0x2000, 0x0, 0x0, 0x2}, 0x1c) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000140)='ip_vti0\x00') r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000180)) r2 = openat$nvram(0xffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0x406000, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000200)) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000240)=0x215, 0x4) openat$vimc2(0xffffff9c, &(0x7f0000000280)='/dev/video2\x00', 0x2, 0x0) syz_io_uring_setup(0x61bb, &(0x7f00000002c0)={0x0, 0x3bf3, 0x1, 0x1, 0x1ca, 0x0, r1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000340), &(0x7f0000000380)) syz_open_dev$rtc(&(0x7f00000003c0)='/dev/rtc#\x00', 0xccc6, 0x10200) r4 = syz_open_dev$sndpcmp(&(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', 0xfffffffb, 0x10000) sendfile(r4, r3, &(0x7f0000000440)=0x1, 0x5) r5 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000480)=0x80, 0x4) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {r6, r7+60000000}}, &(0x7f0000000540)) openat$full(0xffffff9c, &(0x7f0000000580)='/dev/full\x00', 0x2000, 0x0) r8 = openat$proc_capi20(0xffffff9c, &(0x7f00000005c0)='/proc/capi/capi20\x00', 0x400100, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r8, 0x111, 0x4, 0x1, 0x4) [ 325.316131][ T8858] ERROR: Out of memory at tomoyo_realpath_from_path. [ 325.553437][ T28] Bluetooth: hci0: command 0x0419 tx timeout 23:15:58 executing program 0 (fault-call:2 fault-nth:1): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) [ 326.008577][ T8865] IPVS: ftp: loaded support on port[0] = 21 [ 326.126046][ T8867] FAULT_INJECTION: forcing a failure. [ 326.126046][ T8867] name failslab, interval 1, probability 0, space 0, times 0 [ 326.138939][ T8867] CPU: 1 PID: 8867 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 326.147594][ T8867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 326.157713][ T8867] Call Trace: [ 326.161128][ T8867] dump_stack+0x21c/0x280 [ 326.165588][ T8867] should_fail+0x8b7/0x9e0 [ 326.170168][ T8867] __should_failslab+0x1f6/0x290 [ 326.175235][ T8867] should_failslab+0x29/0x70 [ 326.179948][ T8867] __kmalloc+0xae/0x410 [ 326.184222][ T8867] ? kmsan_get_metadata+0x116/0x180 [ 326.189529][ T8867] ? tomoyo_encode2+0x5b1/0xab0 [ 326.194491][ T8867] tomoyo_encode2+0x5b1/0xab0 [ 326.199303][ T8867] tomoyo_realpath_from_path+0xba0/0xcb0 [ 326.205064][ T8867] tomoyo_path_number_perm+0x2a4/0xaf0 [ 326.210662][ T8867] tomoyo_file_ioctl+0x74/0x90 [ 326.215530][ T8867] ? tomoyo_inode_getattr+0x60/0x60 [ 326.220823][ T8867] security_file_ioctl+0x10a/0x210 [ 326.226134][ T8867] __se_compat_sys_ioctl+0x166/0x1100 [ 326.231631][ T8867] ? kmsan_set_origin_checked+0x95/0xf0 [ 326.237297][ T8867] ? kmsan_get_metadata+0x116/0x180 [ 326.242611][ T8867] __ia32_compat_sys_ioctl+0x4a/0x70 [ 326.248019][ T8867] __do_fast_syscall_32+0x2af/0x480 [ 326.253347][ T8867] do_fast_syscall_32+0x6b/0xd0 [ 326.258303][ T8867] do_SYSENTER_32+0x73/0x90 [ 326.262923][ T8867] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 326.269409][ T8867] RIP: 0023:0xf7fbf549 [ 326.273538][ T8867] Code: Bad RIP value. [ 326.277679][ T8867] RSP: 002b:00000000f55b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 326.286200][ T8867] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000400454d1 [ 326.294252][ T8867] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 326.302300][ T8867] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 326.305544][ T8865] chnl_net:caif_netlink_parms(): no params data found [ 326.310341][ T8867] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 326.310380][ T8867] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 326.311664][ T8867] ERROR: Out of memory at tomoyo_realpath_from_path. [ 326.581748][ T8865] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.589077][ T8865] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.599575][ T8865] device bridge_slave_0 entered promiscuous mode [ 326.635747][ T8865] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.643156][ T8865] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.652824][ T8865] device bridge_slave_1 entered promiscuous mode 23:15:59 executing program 0 (fault-call:2 fault-nth:2): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) [ 326.810520][ T8865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.861946][ T8865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 23:15:59 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) [ 326.958361][ T8865] team0: Port device team_slave_0 added [ 326.989076][ T8865] team0: Port device team_slave_1 added [ 327.069891][ T8865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.077489][ T8865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.103749][ T8865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.196906][ T8865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.204169][ T8865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.230389][ T8865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 23:16:00 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x2, 0x0) [ 327.443548][ T8865] device hsr_slave_0 entered promiscuous mode [ 327.511618][ T8865] device hsr_slave_1 entered promiscuous mode [ 327.533578][ T8865] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.541353][ T8865] Cannot create hsr debugfs directory [ 327.946377][ T8865] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 327.989074][ T8865] netdevsim netdevsim1 netdevsim1: renamed from eth1 23:16:00 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x10, 0x0) [ 328.029635][ T8865] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 328.072802][ T8865] netdevsim netdevsim1 netdevsim3: renamed from eth3 23:16:01 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x4b47, 0x0) [ 328.769384][ T8865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.867272][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 328.876869][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 328.897269][ T8865] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.961875][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 328.971855][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 328.981380][ T3777] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.988629][ T3777] bridge0: port 1(bridge_slave_0) entered forwarding state 23:16:01 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x4b49, 0x0) [ 329.111592][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 329.120943][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 329.131133][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 329.140480][ T3777] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.147703][ T3777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.156838][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 329.167658][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 329.289141][ T8865] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 329.300631][ T8865] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 329.332047][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 329.343223][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 329.353386][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 329.363937][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 329.374812][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 329.384424][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 329.394804][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 329.404520][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 329.548169][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 329.558077][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 329.567219][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 329.579396][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 329.609542][ T8865] 8021q: adding VLAN 0 to HW filter on device batadv0 23:16:02 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x4c01, 0x0) [ 329.677809][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 329.687889][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 329.781382][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 329.791581][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 329.823117][ T8865] device veth0_vlan entered promiscuous mode [ 329.837102][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 329.846222][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 329.895399][ T8865] device veth1_vlan entered promiscuous mode [ 330.018260][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 330.028883][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 330.089572][ T8865] device veth0_macvtap entered promiscuous mode [ 330.168163][ T8865] device veth1_macvtap entered promiscuous mode 23:16:03 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) [ 330.288430][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 330.299419][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.313319][ T8865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.322843][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 330.332557][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 330.342015][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 330.352004][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 330.456969][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 330.467700][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.482640][ T8865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.498050][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 330.508147][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 23:16:03 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x5421, 0x0) 23:16:04 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x5450, 0x0) 23:16:05 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) 23:16:05 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x5451, 0x0) 23:16:05 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x5452, 0x0) 23:16:05 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) 23:16:06 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x5460, 0x0) 23:16:06 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) 23:16:06 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x54e3, 0x0) 23:16:06 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) [ 334.031704][ T8708] Bluetooth: hci1: command 0x0409 tx timeout 23:16:07 executing program 1: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x541b, 0x0) 23:16:07 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x6364, 0x0) 23:16:07 executing program 1: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x541b, 0x0) 23:16:07 executing program 1: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x541b, 0x0) 23:16:07 executing program 1: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) 23:16:07 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x8924, 0x0) 23:16:08 executing program 1: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) 23:16:08 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x8927, 0x0) 23:16:08 executing program 1: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) 23:16:08 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x541b, 0x0) 23:16:08 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x8933, 0x0) 23:16:08 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x541b, 0x0) [ 336.121665][ T8708] Bluetooth: hci1: command 0x041b tx timeout 23:16:09 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x541b, 0x0) 23:16:09 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x894c, 0x0) 23:16:09 executing program 1 (fault-call:1 fault-nth:0): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) [ 336.619069][ T9365] FAULT_INJECTION: forcing a failure. [ 336.619069][ T9365] name failslab, interval 1, probability 0, space 0, times 0 [ 336.632087][ T9365] CPU: 1 PID: 9365 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 336.640750][ T9365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 336.650876][ T9365] Call Trace: [ 336.654287][ T9365] dump_stack+0x21c/0x280 [ 336.658744][ T9365] should_fail+0x8b7/0x9e0 [ 336.663290][ T9365] __should_failslab+0x1f6/0x290 [ 336.668361][ T9365] should_failslab+0x29/0x70 [ 336.673079][ T9365] __kmalloc+0xae/0x410 [ 336.677353][ T9365] ? kmsan_get_metadata+0x116/0x180 [ 336.682670][ T9365] ? tomoyo_realpath_from_path+0x15a/0xcb0 [ 336.688611][ T9365] tomoyo_realpath_from_path+0x15a/0xcb0 [ 336.694387][ T9365] tomoyo_path_number_perm+0x2a4/0xaf0 [ 336.700055][ T9365] ? file_has_perm+0xa8b/0xb80 [ 336.704984][ T9365] tomoyo_file_ioctl+0x74/0x90 [ 336.709865][ T9365] ? tomoyo_inode_getattr+0x60/0x60 [ 336.715169][ T9365] security_file_ioctl+0x10a/0x210 [ 336.720399][ T9365] __se_compat_sys_ioctl+0x166/0x1100 [ 336.726082][ T9365] ? kmsan_set_origin_checked+0x95/0xf0 [ 336.731753][ T9365] ? kmsan_get_metadata+0x116/0x180 [ 336.737069][ T9365] __ia32_compat_sys_ioctl+0x4a/0x70 [ 336.742479][ T9365] __do_fast_syscall_32+0x2af/0x480 [ 336.747808][ T9365] do_fast_syscall_32+0x6b/0xd0 [ 336.752783][ T9365] do_SYSENTER_32+0x73/0x90 [ 336.757410][ T9365] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 336.763823][ T9365] RIP: 0023:0xf7f4d549 [ 336.767943][ T9365] Code: Bad RIP value. [ 336.772086][ T9365] RSP: 002b:00000000f55470cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 336.780598][ T9365] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000541b [ 336.788647][ T9365] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 336.796703][ T9365] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 336.804765][ T9365] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 336.812915][ T9365] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 336.822787][ T9365] ERROR: Out of memory at tomoyo_realpath_from_path. 23:16:09 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400448c9, 0x0) 23:16:10 executing program 1 (fault-call:1 fault-nth:1): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) [ 337.497810][ T9381] FAULT_INJECTION: forcing a failure. [ 337.497810][ T9381] name failslab, interval 1, probability 0, space 0, times 0 [ 337.510954][ T9381] CPU: 1 PID: 9381 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 337.519621][ T9381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 337.529763][ T9381] Call Trace: [ 337.533179][ T9381] dump_stack+0x21c/0x280 [ 337.537674][ T9381] should_fail+0x8b7/0x9e0 [ 337.542223][ T9381] __should_failslab+0x1f6/0x290 [ 337.547288][ T9381] should_failslab+0x29/0x70 [ 337.552001][ T9381] __kmalloc+0xae/0x410 [ 337.556274][ T9381] ? kmsan_get_metadata+0x116/0x180 [ 337.561575][ T9381] ? tomoyo_encode2+0x5b1/0xab0 [ 337.566541][ T9381] tomoyo_encode2+0x5b1/0xab0 [ 337.571351][ T9381] tomoyo_realpath_from_path+0xba0/0xcb0 [ 337.577133][ T9381] tomoyo_path_number_perm+0x2a4/0xaf0 [ 337.582728][ T9381] ? file_has_perm+0xa8b/0xb80 [ 337.587649][ T9381] tomoyo_file_ioctl+0x74/0x90 [ 337.592529][ T9381] ? tomoyo_inode_getattr+0x60/0x60 [ 337.597832][ T9381] security_file_ioctl+0x10a/0x210 [ 337.603067][ T9381] __se_compat_sys_ioctl+0x166/0x1100 [ 337.608567][ T9381] ? kmsan_set_origin_checked+0x95/0xf0 [ 337.614242][ T9381] ? kmsan_get_metadata+0x116/0x180 [ 337.619552][ T9381] __ia32_compat_sys_ioctl+0x4a/0x70 [ 337.624997][ T9381] __do_fast_syscall_32+0x2af/0x480 [ 337.630319][ T9381] do_fast_syscall_32+0x6b/0xd0 [ 337.635284][ T9381] do_SYSENTER_32+0x73/0x90 [ 337.639913][ T9381] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 337.646429][ T9381] RIP: 0023:0xf7f4d549 [ 337.650546][ T9381] Code: Bad RIP value. [ 337.654682][ T9381] RSP: 002b:00000000f55470cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 337.663197][ T9381] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000541b [ 337.671247][ T9381] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 337.679306][ T9381] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 337.687359][ T9381] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 23:16:10 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400448dd, 0x0) [ 337.695411][ T9381] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 337.704072][ T9381] ERROR: Out of memory at tomoyo_realpath_from_path. 23:16:11 executing program 1 (fault-call:1 fault-nth:2): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) [ 338.190154][ T8708] Bluetooth: hci1: command 0x040f tx timeout 23:16:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454c8, 0x0) 23:16:11 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) 23:16:11 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x2, 0x0) 23:16:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454c9, 0x0) 23:16:11 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x10, 0x0) 23:16:11 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x4b47, 0x0) 23:16:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454ca, 0x0) 23:16:12 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x4b49, 0x0) 23:16:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454cb, 0x0) 23:16:12 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x4c01, 0x0) 23:16:12 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x5421, 0x0) 23:16:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454cc, 0x0) [ 340.270947][ T28] Bluetooth: hci1: command 0x0419 tx timeout 23:16:13 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x5450, 0x0) 23:16:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454cd, 0x0) 23:16:13 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x5451, 0x0) 23:16:13 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x5452, 0x0) 23:16:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454ce, 0x0) 23:16:14 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x5460, 0x0) 23:16:14 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d0, 0x0) 23:16:14 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x6364, 0x0) 23:16:14 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x8933, 0x0) 23:16:14 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d4, 0x0) 23:16:15 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x894c, 0x0) 23:16:15 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d8, 0x0) 23:16:15 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x89a0, 0x0) 23:16:15 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d9, 0x0) 23:16:15 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400448c9, 0x0) 23:16:16 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454da, 0x0) 23:16:16 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400448dd, 0x0) 23:16:16 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454dc, 0x0) 23:16:16 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454ca, 0x0) 23:16:17 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d9, 0x0) 23:16:17 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454de, 0x0) 23:16:17 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454da, 0x0) 23:16:17 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454e2, 0x0) 23:16:17 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x40049409, 0x0) 23:16:17 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454da, 0x0) 23:16:18 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x40049409, 0x0) 23:16:18 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x40086602, 0x0) 23:16:18 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x40086602, 0x0) 23:16:18 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x40087602, 0x0) [ 345.816135][ T9641] IPVS: ftp: loaded support on port[0] = 21 [ 346.213527][ T9641] chnl_net:caif_netlink_parms(): no params data found 23:16:19 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x40087602, 0x0) 23:16:19 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x40186366, 0x0) [ 346.451340][ T9641] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.458607][ T9641] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.468472][ T9641] device bridge_slave_0 entered promiscuous mode [ 346.523493][ T9641] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.531124][ T9641] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.540925][ T9641] device bridge_slave_1 entered promiscuous mode [ 346.670494][ T9641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.691475][ T9641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.764562][ T9641] team0: Port device team_slave_0 added [ 346.781716][ T9641] team0: Port device team_slave_1 added 23:16:19 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x4020940d, 0x0) 23:16:19 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x401054d5, 0x0) [ 346.870243][ T9641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.877334][ T9641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.906815][ T9641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.054026][ T9641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.061249][ T9641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.087494][ T9641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.333780][ T9641] device hsr_slave_0 entered promiscuous mode 23:16:20 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x402c5828, 0x0) [ 347.393105][ T9641] device hsr_slave_1 entered promiscuous mode [ 347.431027][ T9641] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.438757][ T9641] Cannot create hsr debugfs directory 23:16:20 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x401054d6, 0x0) 23:16:20 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x402c5829, 0x0) [ 348.207686][ T9641] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 348.255214][ T9641] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 348.320963][ T9641] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 348.387277][ T9641] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 348.912125][ T9641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.946873][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 348.956798][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 348.980328][ T9641] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.003147][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 349.013069][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 349.023042][ T3777] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.030438][ T3777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.070280][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 349.079728][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 349.089803][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 349.100577][ T8710] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.108010][ T8710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.117219][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 349.142978][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 349.165552][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 349.175210][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 349.219981][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 349.230895][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 349.240456][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 349.283958][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 349.293061][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 349.302637][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 349.313165][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 349.330729][ T9641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 349.412578][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 349.420595][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 349.453088][ T9641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.528349][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 349.539524][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 349.607512][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 349.618756][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 349.646815][ T9641] device veth0_vlan entered promiscuous mode [ 349.657227][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 349.666860][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 349.704425][ T9641] device veth1_vlan entered promiscuous mode [ 349.786565][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 349.796489][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 349.806133][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 349.816207][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 349.837777][ T9641] device veth0_macvtap entered promiscuous mode [ 349.871076][ T9641] device veth1_macvtap entered promiscuous mode [ 349.932324][ T9641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 349.943024][ T9641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.953108][ T9641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 349.963859][ T9641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.978078][ T9641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.000625][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 350.010692][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 350.020157][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 350.030337][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 350.096137][ T9641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 350.107111][ T9641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.117758][ T9641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 350.128316][ T9641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.142108][ T9641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.154884][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 350.165055][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 23:16:24 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454da, 0x0) 23:16:24 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x40186366, 0x0) 23:16:24 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x402c582a, 0x0) 23:16:25 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x402c582b, 0x0) 23:16:25 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x4020940d, 0x0) 23:16:25 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454da, 0x0) 23:16:25 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x402c5839, 0x0) 23:16:25 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x402c5828, 0x0) 23:16:26 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454da, 0x0) 23:16:26 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454cf, 0x0) 23:16:26 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454da, 0x0) 23:16:26 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x402c5829, 0x0) [ 353.629897][ T28] Bluetooth: hci2: command 0x0409 tx timeout 23:16:26 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x80086301, 0x0) 23:16:26 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454da, 0x0) 23:16:27 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x80086601, 0x0) 23:16:27 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x402c582a, 0x0) 23:16:27 executing program 2: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x400454da, 0x0) 23:16:27 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x80087601, 0x0) 23:16:27 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x402c582b, 0x0) 23:16:27 executing program 2: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x400454da, 0x0) 23:16:27 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0xc0045878, 0x0) 23:16:28 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0xc0045878, 0x0) 23:16:28 executing program 2: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x400454da, 0x0) 23:16:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x402c5839, 0x0) 23:16:28 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0xc0189436, 0x0) [ 355.710852][ T8708] Bluetooth: hci2: command 0x041b tx timeout 23:16:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454da, 0x0) 23:16:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454cf, 0x0) 23:16:28 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0xc020660b, 0x0) 23:16:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454da, 0x0) 23:16:29 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454d2, 0x0) 23:16:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454da, 0x0) 23:16:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454da, 0x0) 23:16:29 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454d3, 0x0) 23:16:30 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454da, 0x0) 23:16:30 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454d7, 0x0) 23:16:30 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454da, 0x0) [ 357.789695][ T28] Bluetooth: hci2: command 0x040f tx timeout 23:16:30 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454dd, 0x0) 23:16:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454da, 0x0) 23:16:31 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454df, 0x0) 23:16:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454da, 0x0) 23:16:31 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x8440, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8916, &(0x7f0000000000)) ioctl(r1, 0x8936, &(0x7f0000000000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = fcntl$dupfd(r3, 0x0, r2) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, &(0x7f00000001c0)={0x5, 0x8c}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r5}) ioctl$SNDRV_PCM_IOCTL_RESET(0xffffffffffffffff, 0x4141, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r6, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0xc4, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x20}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x35}}}, @NLBL_UNLABEL_A_SECCTX={0x20, 0x7, 'system_u:object_r:cert_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_SECCTX={0x32, 0x7, 'system_u:object_r:systemd_passwd_var_run_t:s0\x00'}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4044092}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0xb8, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syz_tun\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:sound_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2e}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'hsr0\x00'}]}, 0xb8}}, 0x40000) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="dc000000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000fddbdf250900000024006e803fc902000400010004000200040001000a000600de25ce5c681b000009000700dff8018ce00000000b000a0068d8b453192bc800"/86, @ANYRESOCT, @ANYRES64, @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x814}, 0x80) 23:16:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454da, 0x0) 23:16:32 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, 0x0) 23:16:32 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) r1 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x10141, 0x0) r2 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@remote, 0x0, r3}) r5 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r5, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@remote, 0x0, r6}) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)=@mpls_getroute={0x1ec, 0x1a, 0x0, 0x70bd28, 0x25dfdbfe, {0x1c, 0x20, 0x14, 0x3f, 0x0, 0x1, 0xfe, 0x4, 0x2800}, [@RTA_NEWDST={0x84, 0x13, [{}, {0xa445, 0x0, 0x1}, {0xfff, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x4}, {0x2, 0x0, 0x1}, {0x5}, {0x22, 0x0, 0x1}, {0xdb1a, 0x0, 0x1}, {0x5}, {0x6, 0x0, 0x1}, {0xe534}, {0x80, 0x0, 0x1}, {0x7ff}, {0x9}, {0x20}, {0x4387c, 0x0, 0x1}, {}, {0x80b7}, {}, {0x2, 0x0, 0x1}, {0x5}, {0x4, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x200}, {0x1, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x6}, {0xf2394}, {0x7}, {0x7}]}, @RTA_TTL_PROPAGATE={0x5}, @RTA_VIA={0x14, 0x12, {0xa, "32d51fa3a67f8b857f2fb981ca39"}}, @RTA_NEWDST={0x84, 0x13, [{0x9}, {0x81}, {0x8, 0x0, 0x1}, {0x1}, {0x0, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x400}, {0x7}, {0x5, 0x0, 0x1}, {0x754, 0x0, 0x1}, {0xc7, 0x0, 0x1}, {0x7fff, 0x0, 0x1}, {0x72c}, {0x4}, {0x51f}, {0x53}, {0x100}, {0x401, 0x0, 0x1}, {0xff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x200, 0x0, 0x1}, {0x8}, {0x8, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xef5, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0xeb1}, {0x7ff, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5}, @RTA_OIF={0x8, 0x4, r3}, @RTA_NEWDST={0x84, 0x13, [{0x81}, {}, {0x8, 0x0, 0x1}, {0x81}, {0x9c}, {0xd3a}, {0x6}, {0x857}, {0x7fff, 0x0, 0x1}, {0xffffa, 0x0, 0x1}, {}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x3}, {0x7f}, {0x9, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x9}, {0x3, 0x0, 0x1}, {0x7}, {0x1}, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x3ff}, {0xfcfc}, {0x68, 0x0, 0x1}, {0x1c00, 0x0, 0x1}, {0xf0379}, {0x1}, {0x0, 0x0, 0x1}, {0xfffff, 0x0, 0x1}, {0x8}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x4}, @RTA_OIF={0x8, 0x4, r6}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfc}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x850}, 0x80) 23:16:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454da, 0x0) [ 359.880086][ T8708] Bluetooth: hci2: command 0x0419 tx timeout 23:16:32 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e1, 0x0) 23:16:32 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = semget$private(0x0, 0x3, 0x0) semctl$GETNCNT(r4, 0x4, 0xe, 0x0) semctl$GETNCNT(r4, 0x3, 0xe, &(0x7f0000000000)=""/84) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) 23:16:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454da, 0x0) 23:16:33 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x10000, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) openat$thread_pidfd(0xffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x288000, 0x0) 23:16:33 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454da, 0x0) 23:16:33 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x80086301, 0x0) 23:16:33 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz1', "fab89431f955862fbf662df53b6f99e85d73ad8dce6bb64c857ef585e0c8c282ba93cdbd6e8c908e52fe5bb0d870442f14c41d235a66eb4572133abc45c59fbf256b2fac8079df0b79985f8522ccb4cc2b56d5b0adf27b045dcbb7bccf8a9c8c0d31189e584a299a1c9844f190c6df2533ec741a125b6a155b2cb240c78e6863d069934935d4f6831daaa8e60a3d6ee1c9dee27bca914c3670c29b4c1bd82fe5baff6c789028a7e4e3c25eda25c38b4cb20af609745a9e8871eb94bee2c8991592fdfa32cd5388bed6994a3efb55fa124e1cca632996266f1429e7"}, 0xdf) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x541b, 0x0) 23:16:33 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x400454da, 0x0) 23:16:33 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x80086601, 0x0) 23:16:34 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8916, &(0x7f0000000000)) ioctl(r1, 0x8936, &(0x7f0000000000)) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x3f, @empty, 0x2, 0x3}, 0x20) 23:16:34 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x400454da, 0x0) 23:16:34 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x80087601, 0x0) 23:16:34 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x80001, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@remote, 0x0, r2}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x1, 'lo\x00', {}, 0x1}) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) 23:16:35 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x400454da, 0x0) 23:16:35 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x801054db, 0x0) 23:16:35 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@remote, 0x0, r1}) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) unshare(0x50000) ioctl$TUNSETSTEERINGEBPF(r3, 0x541b, 0x0) ioctl$TUNDETACHFILTER(r3, 0x400854d6, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = fcntl$dupfd(r5, 0x0, r4) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) ioctl$BLKRRPART(r6, 0x125f, 0x0) 23:16:35 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x80001, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@remote, 0x0, r2}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x1, 'lo\x00', {}, 0x1}) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) 23:16:35 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0xc0045878, 0x0) 23:16:35 executing program 1: getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r0 = getpid() pidfd_open(r0, 0x0) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$chown(0x4, r6, r5, r3) r7 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) r12 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r7) keyctl$chown(0x4, r12, r11, r9) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={r0, r5, r9}, 0xc) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r13, 0x541b, 0x0) 23:16:36 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x801054db, 0x0) 23:16:36 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000100)=ANY=[@ANYRES64], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@remote, 0x0, r2}) r4 = socket(0xa, 0x1, 0x0) ioctl(r4, 0x8916, &(0x7f0000000000)) ioctl(r4, 0x8936, &(0x7f0000000000)) r5 = fcntl$dupfd(r3, 0x0, r4) connect$phonet_pipe(r5, &(0x7f0000000000)={0x23, 0x0, 0x1, 0x3f}, 0x10) ioctl(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) r6 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r6, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={@remote, 0x0, r7}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, r7}, 0x14) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) 23:16:36 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0xc0045878, 0x0) 23:16:36 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x801054db, 0x0) 23:16:36 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0xc0189436, 0x0) 23:16:37 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8916, &(0x7f0000000000)) ioctl(r1, 0x8936, &(0x7f0000000000)) r2 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) r3 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmat(r3, &(0x7f0000ffa000/0x4000)=nil, 0x3000) sendto$inet(r2, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r2, 0x1) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xe0f}, 0x14) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1f}}}, 0x7fff, 0x2, 0x9, 0x10000, 0x0, 0x2, 0x40}, &(0x7f0000000000)=0x9c) r5 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) ioctl$VFIO_CHECK_EXTENSION(r5, 0x3b65, 0x5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x4a00, 0x0) ioctl$TUNSETSTEERINGEBPF(r6, 0x541b, 0x0) 23:16:37 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x801054db, 0x0) 23:16:37 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0xc020660b, 0x0) 23:16:37 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x432001, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) 23:16:37 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x801054db, 0x0) 23:16:37 executing program 1: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x541b, 0x0) 23:16:37 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8916, &(0x7f0000000000)) ioctl(r1, 0x8936, &(0x7f0000000000)) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0x123431f9}, 0x4) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) 23:16:38 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x801054db, 0x0) 23:16:38 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x202800, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) 23:16:38 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8916, &(0x7f0000000000)) ioctl(r1, 0x8936, &(0x7f0000000000)) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='htcp\x00', 0x5) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) 23:16:38 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x801054db, 0x0) 23:16:38 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x104) 23:16:38 executing program 2: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x801054db, 0x0) 23:16:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000100)=ANY=[@ANYRES64], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@remote, 0x0, r2}) r4 = socket(0xa, 0x1, 0x0) ioctl(r4, 0x8916, &(0x7f0000000000)) ioctl(r4, 0x8936, &(0x7f0000000000)) r5 = fcntl$dupfd(r3, 0x0, r4) connect$phonet_pipe(r5, &(0x7f0000000000)={0x23, 0x0, 0x1, 0x3f}, 0x10) ioctl(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) r6 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r6, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={@remote, 0x0, r7}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, r7}, 0x14) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) 23:16:39 executing program 1: r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x103400, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000fef000/0x10000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x10000}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x541b, 0x0) 23:16:39 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/151, 0x97}], 0x1) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) readv(r5, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/151, 0x97}], 0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) r10 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$chown(0x4, r10, r9, r7) r11 = getegid() fsetxattr$system_posix_acl(r3, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000140)={{}, {0x1, 0x4}, [{}, {}, {}, {0x2, 0x5}], {0x4, 0x3}, [{0x8, 0x6}, {}, {}, {0x8, 0x0, r7}, {0x8, 0x3, r11}, {0x8, 0x1, r11}], {0x10, 0x4}}, 0x74, 0x2) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'bond_slave_1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) 23:16:39 executing program 2: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x801054db, 0x0) 23:16:40 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'veth0_vlan\x00', 0x420000015001}) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8916, &(0x7f0000000000)) ioctl(r1, 0x8936, &(0x7f0000000000)) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, &(0x7f0000000000)={r1, 0xfeac, 0xac8}) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0xa, 0x1, 0x0) ioctl(r5, 0x8916, &(0x7f0000000000)) ioctl(r5, 0x8936, &(0x7f0000000000)) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x70, r6, 0x214, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xef8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x103}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x200048d4}, 0x4000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)={0x2c, r7, 0x201, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1e00000000000000", @ANYRES16=r7, @ANYBLOB="0a002cbd7000ffdbdf250500000008003c00090000000a00090000000000000000000500300000000000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4042) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) 23:16:40 executing program 2: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x801054db, 0x0) 23:16:40 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@remote, 0x0, r2}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = fcntl$dupfd(r5, 0x0, r4) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) r7 = pidfd_getfd(r6, r0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0xce, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x5, 0x5}, 0x0, 0x0, &(0x7f0000000100)={0x3, 0xe, 0x6, 0x833}, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0x9}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r8, 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = fcntl$dupfd(r10, 0x0, r9) mq_timedsend(r11, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x19, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, [], r2, 0xb, r7, 0x8, &(0x7f00000000c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x1, 0x0, 0x8}, 0x10, r8, r11}, 0x74) [ 367.506651][T10403] IPVS: ftp: loaded support on port[0] = 21 23:16:40 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCSUSAGES(r3, 0x501c4814, &(0x7f00000000c0)={{0x1, 0x200, 0x1, 0x8, 0x7, 0x6}, 0x171, [0xf4a, 0x7, 0x7fff, 0x800, 0xc, 0xffffffff, 0x3, 0x100, 0x81, 0x9, 0x401, 0xffffffe0, 0x800, 0x5, 0x7, 0x9, 0x4, 0x9, 0x5324, 0xcb, 0x73, 0x80, 0x7, 0x8, 0x0, 0x0, 0x2, 0x5, 0xffff7e6d, 0x5, 0x20000, 0x6, 0x0, 0x2, 0x3, 0x3ff, 0x80, 0x7, 0x1, 0x1, 0x100, 0x9, 0x5, 0x31, 0xed, 0x2b4, 0x2, 0xffffffff, 0x40, 0x7000, 0x2, 0xe8, 0x5d6, 0x3, 0x20, 0xffff, 0x0, 0x2, 0x8, 0x81, 0x4, 0xf5, 0x5, 0x6, 0x8000, 0x48000000, 0x7, 0x0, 0xfff, 0x3ff, 0x6, 0x4, 0x4, 0x3, 0x0, 0x5, 0x1, 0x4, 0x8, 0x80, 0x40000000, 0x1ff, 0x2, 0x2, 0xfff, 0x101, 0x3ff, 0x9, 0x6, 0x20, 0x7f, 0x8, 0x21, 0x2, 0x80, 0x3, 0x1000, 0x1, 0xdb, 0x8, 0x1f, 0x2, 0x9, 0x6, 0xffff, 0x583d, 0x9, 0x8001, 0x0, 0x1, 0x8, 0x1, 0x2, 0x156c84c0, 0xfffffff7, 0x4, 0xfffff000, 0x80000001, 0x7, 0x0, 0x200, 0x9, 0xfffffe00, 0x7f, 0x1000, 0x4, 0x1, 0x4, 0x5, 0x0, 0x0, 0xb49, 0xffffffff, 0x0, 0x2, 0x7f, 0x0, 0x6, 0x7, 0xa000, 0x4, 0x3, 0x9, 0x6, 0x80000000, 0xffff, 0x5dea, 0x6, 0x8000, 0xfffffffa, 0x20, 0x81, 0x80000000, 0x6, 0x3, 0x4, 0x6, 0x8, 0x4, 0x8001, 0x9, 0xf5, 0x4, 0x1, 0x3ff, 0x3, 0x7fffffff, 0x3, 0x8, 0x1, 0xfd8b, 0x5, 0x0, 0xff, 0x2, 0x61e19855, 0x1, 0x9, 0x0, 0x2, 0x724a, 0x40, 0x4, 0x0, 0x6, 0x1, 0x6, 0x1, 0x6, 0x8, 0xdd8, 0x4, 0x7fffffff, 0x10001, 0x80000001, 0x1, 0xa6c8, 0x8, 0x101, 0x3, 0x8000, 0x1f, 0x6, 0x4, 0x94d, 0x5, 0x80000001, 0xfa, 0x3, 0x2, 0x100, 0x1, 0x3, 0x7, 0x1, 0x1, 0x5d, 0x6, 0x41, 0xd9, 0x200, 0xda8, 0x9, 0xe49, 0x101, 0x8, 0x56, 0x4, 0x4, 0x80000001, 0x9, 0x3, 0x7fffffff, 0x3, 0x0, 0x3, 0x9, 0x2, 0x493, 0x1, 0xeba, 0x1f, 0x81, 0x400, 0x1, 0x44, 0x9660, 0x1, 0x6, 0x7, 0x9, 0xdf6, 0xfddf, 0x0, 0x5, 0x0, 0x0, 0xaf, 0xffffff35, 0x4, 0x7fee, 0xd70, 0xffffffff, 0x3f, 0x4, 0x2, 0xffffffff, 0x401, 0x1, 0x1f, 0x1, 0x7ff, 0x7ff, 0x8001, 0x1, 0x8, 0x200, 0x8, 0x539d99b1, 0x2, 0xfffffffd, 0x28b, 0x80000001, 0x4, 0x5, 0x1, 0x3, 0x8, 0x4, 0xb01, 0xf85, 0x10000, 0x80, 0x1, 0x2, 0x2, 0x187, 0x1, 0x1, 0x1f, 0x1, 0x10000, 0x4, 0x0, 0x332, 0x9, 0x321, 0x401, 0x3d1, 0xffffff70, 0xffffffff, 0x1, 0x3, 0x6af1f39, 0x4, 0xffffffb6, 0x8, 0xffffffff, 0x802, 0x9da4, 0x3, 0x6, 0x6, 0x5, 0x0, 0x5, 0x3f, 0xa1, 0x100, 0x8001, 0x2, 0x6, 0x1, 0x9000000, 0x9657, 0x7f, 0xcb7a, 0x800, 0x3, 0x6, 0x0, 0x3, 0x2, 0xfffffff9, 0x7, 0x8, 0x1, 0x6, 0x8eca, 0x4, 0x6, 0x50c, 0x7, 0x8, 0x5, 0x81, 0x3423, 0x9, 0x40, 0x8, 0x2, 0x8, 0x6, 0x1, 0x4, 0x40, 0x8, 0xfffffff7, 0x2, 0x2, 0x1, 0x1df98, 0xfffffffb, 0x3, 0x10001, 0x401, 0x7, 0x100, 0x7fffffff, 0x2, 0x80000000, 0x12, 0x100, 0x7, 0x7, 0xf6, 0x7, 0x228d, 0xb8de, 0xd4, 0x6d6, 0x3b1, 0x2, 0x7, 0x8001, 0x1, 0x6, 0x7fffffff, 0x1, 0x3, 0xffff, 0x8, 0x1, 0x2, 0x1, 0xa5f, 0x9, 0x8, 0xfff, 0x7, 0x6, 0xffffecb6, 0x43, 0x1, 0x8001, 0x1000, 0x9, 0x4f, 0x8, 0x3, 0x8, 0xd53b, 0x80, 0x6, 0x3, 0x6, 0x6c4c4633, 0x400, 0x4, 0x6, 0x5, 0x7fff, 0x3, 0x9958, 0x98, 0x7f77b48a, 0xd1, 0x7, 0x101, 0xffffffff, 0x0, 0x41cc, 0x80000001, 0x800, 0x6, 0x2, 0x3, 0x9, 0x0, 0x7fffffff, 0x1800, 0x8, 0x0, 0xff, 0x6e, 0x5, 0x7fffffff, 0x5, 0x5, 0xfff, 0x3, 0xe4, 0x9, 0x2, 0x5b48, 0x1e1, 0x5, 0xdb1c, 0x4, 0x7, 0x1cd, 0x1, 0x7fffffff, 0x3ff, 0x4, 0x80000000, 0xd2e7, 0x7f, 0x0, 0x6, 0x9, 0x80, 0x0, 0x9, 0x9, 0x101, 0x8e0f, 0x7fff, 0x5, 0x80000001, 0x7f, 0x1, 0x401, 0x1f, 0x7, 0x4, 0x5, 0x8, 0xe003, 0x1, 0x6, 0xed4, 0x15, 0x8, 0x5, 0x6, 0x1, 0x5, 0x4, 0x7fff, 0x8, 0x80000000, 0x305914da, 0x51d, 0x2, 0x1f, 0x5, 0xfffffc00, 0x0, 0x0, 0x9, 0x3ff, 0x4, 0x7, 0x6, 0x0, 0xfffffffa, 0x9, 0x7, 0x40, 0x101, 0xe3e6, 0x7ff, 0x10001, 0x80, 0x5, 0x10001, 0x174420, 0x30000, 0x3, 0xda0, 0x2, 0x5, 0x4, 0x4, 0xfff, 0x2, 0x2, 0x5, 0x3e9, 0x6, 0x4, 0x5, 0xdebb, 0x7, 0x1ff, 0x2, 0x100, 0x9, 0x5, 0x1000, 0x2, 0xffff, 0x6, 0x6, 0x5, 0x3, 0x7fffffff, 0xcda4, 0x8368, 0x7, 0x4, 0x54, 0x0, 0x8, 0x1, 0x5, 0x6, 0x59, 0x8001, 0x7f, 0x5, 0xffffffff, 0x6, 0x100, 0x200, 0x1, 0x401, 0x8, 0x6, 0x20, 0x4, 0x2, 0x8, 0x2, 0x200, 0xfffffff7, 0x1, 0xfffff0ca, 0x4, 0xff, 0x101, 0x20, 0x6, 0x7, 0x800, 0x3, 0x1, 0x9, 0x40, 0x0, 0x5, 0x9, 0x48e3, 0x2310, 0xa, 0x20, 0x2, 0x4, 0x80000001, 0x800, 0x3, 0x4, 0x6, 0x487d, 0xfffffff7, 0x7fffffff, 0x80000001, 0x2, 0xfffffffc, 0x9, 0x3f, 0x9, 0x4, 0x7, 0x2, 0x8, 0x2, 0x4, 0x2, 0x29, 0x4, 0xda8, 0x4, 0x4, 0x8, 0x10000, 0x1, 0x0, 0x7, 0x4, 0x1, 0x3, 0x1, 0x7fffffff, 0x800, 0x6, 0x54b5, 0x0, 0x5, 0x100, 0x51, 0x1, 0x7, 0x4, 0x7b85, 0x9, 0x7fffffff, 0x0, 0x2, 0x3, 0xffffffff, 0x5, 0x44, 0x1, 0x1, 0x3, 0x6, 0x427, 0x8, 0xffffffe0, 0x1, 0x0, 0x4, 0x7ff, 0x80000001, 0x2eda0c8b, 0x8, 0xfffffe00, 0x81, 0x6, 0xfffffff8, 0x0, 0x9, 0x2, 0x9, 0x2d, 0x3ff, 0x0, 0xfff, 0x6, 0x200, 0x3ff, 0x80000001, 0x5, 0x0, 0x40, 0x10001, 0xb2, 0xb5, 0x101, 0x0, 0x26b8, 0x400, 0x2, 0x2, 0x8a7, 0x8, 0x8, 0x10000, 0x1ff, 0xffff0001, 0x3, 0x0, 0x2d, 0x8, 0x0, 0x200, 0x7, 0x9, 0x5, 0x2, 0xecf, 0x7fffffff, 0x7, 0x7fff, 0xffff, 0x1f, 0x9, 0x81, 0x5, 0x7, 0x81, 0x0, 0x7, 0x13, 0x3, 0x8, 0x4, 0x3, 0x5, 0xfff, 0x2, 0x9, 0x7, 0x90e, 0x63, 0x401, 0x9, 0x20, 0x7, 0x1, 0x8, 0x400, 0x5, 0x10001, 0xfffffff8, 0x7, 0x40, 0x0, 0x3, 0x101, 0x8, 0x8, 0x0, 0x4, 0x6, 0x7ff, 0xffffff7f, 0x7, 0x8, 0x5, 0xffffff01, 0x7, 0x400, 0x1, 0x400, 0xfffff433, 0x4, 0x1000, 0x20, 0x6, 0xff, 0x3f, 0x0, 0x3, 0x3, 0x7, 0xfffffffa, 0x4ff, 0x3, 0x2, 0x954, 0x1, 0x46, 0x4, 0xe7d, 0x2a, 0x9612, 0x1, 0x4, 0x2, 0x9, 0x10001, 0xffffffff, 0x3, 0x0, 0x1000, 0x9, 0x3ff, 0x401, 0x8, 0xfffffffe, 0x0, 0xfffffd58, 0x14000000, 0x8, 0x0, 0x3f, 0xe25, 0x1, 0x1, 0x8000, 0x3ff, 0x4, 0xc0000, 0x7, 0xfffffff8, 0x5, 0x5, 0x2, 0x7fffffff, 0xa4be, 0x5, 0x0, 0x8, 0x4, 0xffffffe8, 0x1, 0x80, 0x7, 0xfffffff7, 0xfe00, 0x5, 0x80000001, 0x3, 0x7a, 0x5, 0x7, 0x3, 0x5, 0x20, 0x1, 0x7f, 0xe9e, 0x4, 0x4, 0x5, 0x8001, 0x1, 0x9, 0x8001, 0x5, 0x4000, 0x7fffffff, 0x401, 0x3b, 0x2, 0x10000, 0x1, 0x7f, 0x0, 0x0, 0x4, 0x4c5, 0x9, 0x1ff, 0x9, 0x6, 0xfffffffd, 0x80, 0x400, 0x0, 0x29, 0x4, 0x6, 0x0, 0x3ff, 0x0, 0x80000001, 0x2, 0x7, 0x4, 0xb28, 0x0, 0x4, 0xf0, 0x8, 0xb25, 0x2, 0x4, 0x7, 0x3, 0x2, 0x8, 0x8000, 0x9, 0x3f, 0x7, 0x2, 0x36b7, 0xccad, 0x6, 0x7, 0xe5d, 0x47fe, 0x677e, 0x7, 0x2, 0x37, 0x1, 0x5, 0x6, 0x3, 0x2, 0x7f, 0x9, 0x8001, 0x6, 0x3043, 0xfff, 0x8e65, 0x401, 0xb6, 0x4, 0x1219, 0xfffffff9, 0x1, 0x3, 0x3, 0x3, 0x2, 0x2, 0xffffb26c, 0x0, 0x0, 0xffff, 0xd2, 0x19, 0x9, 0x9, 0x9, 0x3, 0xffff, 0x9286, 0x9, 0x9, 0x1ff, 0x6, 0x0, 0x9, 0xfff, 0x9, 0x10001, 0x800, 0xd87, 0x70, 0x6, 0x0, 0x3, 0x8, 0x1, 0x3, 0x6, 0x4, 0xffffffff, 0x10001, 0x7fffffff, 0x2, 0x2, 0x6, 0x2, 0x37d0, 0x4, 0x8, 0x8, 0x6, 0x2, 0xb03, 0x6, 0x401, 0x0, 0x1, 0xc2, 0x7fffffff, 0x0, 0xe93b, 0x3, 0x1, 0x1f, 0x9, 0x1, 0xe8d7, 0x7, 0x3d7, 0x2, 0x7ff, 0x55a, 0x20, 0x3, 0x7, 0x3, 0x1ff, 0x10000]}) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) 23:16:40 executing program 2: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x801054db, 0x0) 23:16:40 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$chown(0x4, r4, r3, 0x0) fchownat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x1000) r5 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r5, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="6cc68c5a2b08a9f1ab5fe0ef1f1fac37773e5d9f3c7a631190656a5c629476c0eb99a551a458536c223e0b0864188dde3dd6beffde11"], 0x1) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000002c0)=0xc) fcntl$F_GET_FILE_RW_HINT(r5, 0x40d, &(0x7f0000000180)) ioctl(r1, 0x8936, &(0x7f0000000000)) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x18, r7, 0x2, 0x0, 0x3, {0x12}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x4000014) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="02fb7dcc", @ANYRES16=0x0, @ANYBLOB="01022cbd7000fddbdf2501000000000000000b000000000c001473797a3100000000"], 0x28}}, 0x20000000) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r7, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x60804}, 0x80) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) openat$vfio(0xffffff9c, &(0x7f00000001c0)='/dev/vfio/vfio\x00', 0x803, 0x0) 23:16:40 executing program 2: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x801054db, 0x0) [ 368.141793][T10403] chnl_net:caif_netlink_parms(): no params data found 23:16:41 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010101, 0x3}, 0x10) [ 368.601241][T10403] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.608911][T10403] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.618835][T10403] device bridge_slave_0 entered promiscuous mode [ 368.741665][T10403] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.749086][T10403] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.758943][T10403] device bridge_slave_1 entered promiscuous mode [ 368.875307][T10403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.894132][T10403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.958805][T10403] team0: Port device team_slave_0 added [ 368.986874][T10403] team0: Port device team_slave_1 added [ 369.068123][T10403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.075204][T10403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.101377][T10403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.192565][T10403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.199819][T10403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.226098][T10403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.404579][T10403] device hsr_slave_0 entered promiscuous mode [ 369.439311][T10403] device hsr_slave_1 entered promiscuous mode [ 369.474939][T10403] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.482768][T10403] Cannot create hsr debugfs directory [ 369.872150][T10403] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 369.949776][T10403] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 369.999171][T10403] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 370.025986][T10403] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 370.482145][T10403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.528279][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 370.537327][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 370.563408][T10403] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.586610][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 370.597138][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 370.606686][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.614092][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.671008][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 370.680653][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 370.690719][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 370.700235][ T8710] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.707626][ T8710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.717005][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 370.728699][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 370.804601][T10403] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 370.815572][T10403] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 370.831725][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 370.842660][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 370.853192][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 370.863981][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 370.874573][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 370.884407][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 370.895022][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 370.905186][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 370.917214][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 370.930188][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 371.006110][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 371.014796][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 371.048779][T10403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.115883][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 371.126222][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 371.190921][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 371.200582][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 371.222962][T10403] device veth0_vlan entered promiscuous mode [ 371.232273][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 371.242126][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 371.286772][T10403] device veth1_vlan entered promiscuous mode [ 371.375181][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 371.385196][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 371.394767][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 371.405071][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 371.429425][T10403] device veth0_macvtap entered promiscuous mode [ 371.451432][T10403] device veth1_macvtap entered promiscuous mode [ 371.516603][T10403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 371.527324][T10403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.537482][T10403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 371.548776][T10403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.558819][T10403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 371.569786][T10403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.583972][T10403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.597312][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 371.606945][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 371.616593][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 371.626763][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 371.690578][T10403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 371.701603][T10403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.711716][T10403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 371.722325][T10403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.732363][T10403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 371.742987][T10403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.757587][T10403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.776677][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 371.786972][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 23:16:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$chown(0x4, r4, r3, 0x0) fchownat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x1000) r5 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r5, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="6cc68c5a2b08a9f1ab5fe0ef1f1fac37773e5d9f3c7a631190656a5c629476c0eb99a551a458536c223e0b0864188dde3dd6beffde11"], 0x1) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000002c0)=0xc) fcntl$F_GET_FILE_RW_HINT(r5, 0x40d, &(0x7f0000000180)) ioctl(r1, 0x8936, &(0x7f0000000000)) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x18, r7, 0x2, 0x0, 0x3, {0x12}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x4000014) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="02fb7dcc", @ANYRES16=0x0, @ANYBLOB="01022cbd7000fddbdf2501000000000000000b000000000c001473797a3100000000"], 0x28}}, 0x20000000) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r7, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x60804}, 0x80) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) openat$vfio(0xffffff9c, &(0x7f00000001c0)='/dev/vfio/vfio\x00', 0x803, 0x0) 23:16:46 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'tunl0\x00', 0x420000015001}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000040)=0x5) munlockall() ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) r4 = socket(0xa, 0x1, 0x0) ioctl(r4, 0x8916, &(0x7f0000000000)) ioctl(r4, 0x8936, &(0x7f0000000000)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x20, r6, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xc, 0x11d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8}, @NL80211_BAND_60GHZ={0x4, 0xd}]}]}, 0x20}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={@remote, 0x0, r7}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000240)={'dummy0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x37, 0x0, 0x2a, [0x3, 0x80, 0x9, 0x81]}}) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="00082abd7000fbdbdf250f0000001500d50002000000759a5e1259700a64d1b71cda825952000100005e524af4761c5dcf54726ee513855600"/66], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c004) 23:16:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x801054db, 0x0) 23:16:46 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x20002, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) 23:16:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x801054db, 0x0) 23:16:47 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8916, &(0x7f0000000000)) ioctl(r1, 0x8936, &(0x7f0000000000)) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000000)=0x3001099) 23:16:47 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x400454d1, 0x0) 23:16:47 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/151, 0x97}], 0x1) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) readv(r5, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/151, 0x97}], 0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) r10 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$chown(0x4, r10, r9, r7) r11 = getegid() fsetxattr$system_posix_acl(r3, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000140)={{}, {0x1, 0x4}, [{}, {}, {}, {0x2, 0x5}], {0x4, 0x3}, [{0x8, 0x6}, {}, {}, {0x8, 0x0, r7}, {0x8, 0x3, r11}, {0x8, 0x1, r11}], {0x10, 0x4}}, 0x74, 0x2) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'bond_slave_1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) 23:16:47 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = openat$dlm_plock(0xffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x90040, 0x0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x20000001) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) 23:16:47 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x801054db, 0x0) 23:16:47 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) ioctl$TUNGETFILTER(r3, 0x800854db, &(0x7f00000000c0)=""/135) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) 23:16:47 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x801054db, 0x0) [ 375.148011][ T8711] Bluetooth: hci3: command 0x0409 tx timeout 23:16:48 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454df, 0x0) 23:16:48 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) getdents(r3, &(0x7f0000000100)=""/234, 0xea) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)={0x80, r6, 0x401, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g='\xf4M\xa3g\xa8\x8e\xe6VO\x02\x02\x11Eg\'\b/\\\xeb\xee\x8b\x1b\xf5\xebs74\x1bE\x9b9\"'}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x80}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001040)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001000)={&(0x7f0000000200)={0xde8, r6, 0x500, 0x70bd29, 0x25dfdbfb, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x40000}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0xdc4, 0x8, 0x0, 0x1, [{0x7b0, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xf0, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xb}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @rand_addr=0x64010101}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x4}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ALLOWEDIPS={0x698, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5, 0x3, 0x1}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x3d}}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @remote}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x33}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, [], 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, [], 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x43}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @multicast1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @loopback}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0xbf}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x19}}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, [], 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast2}}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b189908ca74747547b5f5cbc655586fcd0410b4a52a0f98572cbea57db499973"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @rand_addr=0x64010100}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @remote}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x590, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x284, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ALLOWEDIPS={0x9c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x9, @local, 0x7}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast2}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, [], 0x1a}, 0x3}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x1ec, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @multicast2}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x22}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x20}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast2}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}]}, 0xde8}, 0x1, 0x0, 0x0, 0x20040041}, 0xc004) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = fcntl$dupfd(r7, 0x0, r4) mq_timedsend(r8, 0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCGRAWPHYS(r8, 0x80404805, &(0x7f0000000000)) 23:16:48 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$nvram(0xffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x222480, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040), &(0x7f00000000c0)=0x8) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) 23:16:48 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x801054db, 0x0) 23:16:48 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x801054db, 0x0) 23:16:48 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454df, 0x0) 23:16:48 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = fcntl$dupfd(r3, 0x0, r2) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) r5 = socket(0xa, 0x1, 0x0) ioctl(r5, 0x8916, &(0x7f0000000000)) ioctl(r5, 0x8936, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000180)={0x6, [0x6, 0x8c, 0x1, 0x1, 0x92b, 0x9]}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup=r1, r4, 0x6}, 0x10) r6 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x42100, 0x60, 0xd}, 0x18) ioctl$FS_IOC_GETVERSION(r6, 0x80047601, &(0x7f0000000140)) 23:16:48 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) io_setup(0x8, &(0x7f0000000000)=0x0) r2 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r3 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r3, 0x0, 0x8, &(0x7f0000001300)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@remote, 0x0, r4}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = fcntl$dupfd(r7, 0x0, r6) mq_timedsend(r8, 0x0, 0x0, 0x0, 0x0) r9 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r9, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) io_submit(r1, 0x3, &(0x7f00000012c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x8001, r2, &(0x7f0000000100)="b1c126c7f09e9ae4c1a0a501b43eb10f9fb1a48327bd4d346d9d5b033cddbc0ae2843ed608004753370192d1ed5caa9846b93703d4ef0dfe8dafcd47af348ac5d4510320a28d47c803ad00653af844deeb3c581982f7493c3eec871f63cbd8747a7e0d7882fc900aaf87be639e18b97d15e1ada5235dea81f219dba720f55e7b31215b1c350a3f10d8f24e77ba1abc6343e9aa6758a68c799c4f38614492e4", 0x9f, 0x4bae}, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x7, 0x3, r5, &(0x7f00000001c0)="2a1c0dcb0309db520ee81836c0948f92f3a51190771b47ad60959626608610bca60675d9d8a1be021c5d974fdf43cee9dbde0f781774aa6b3defabcbe00d513c3ff4355c621decfd471cf665dad41524a059dc3b2e37d642b3cfdfbe9c803cebff1584f8f71b909ffef8dc19c15aa1e17025010131aefaa77dac7ea92e99b8d3ea8650e8266fe24ff5c52e3486e1d150b16b278b5d51280a3a6297c2be4c3ea1147a5af241f426cb98bbf882067eb1088465856754d2239605ab30318b6fb6e29cee666612f7d0f3b1b2fa1cb638c8ca9f22b9ad3bf97c5f5c61302f8926b21cff918c23d16812e9870ba50a193d91d9fa7fc5edaca563657ba9afa0eba4ef4a2abcb208e6b2662052b3918671b8b0363a36349ef527832aaf11e7d4a1fd20008f9bab1df2cc3a76e220bb1c44cf210cf704554718c420ccafe4b7cfd06cd970f158822371e12bb4c6787bd83c5c2458dab1f045f3d525e74a11e24d4de4b439ca67c8cad92a822d1b8a449c21d0fae927767cc9d2959251df090cea35b97d886a37074ff3c1379f35fc311c561d3e748503f388011364d6a7c0a390d6c8417b57e6113c4f4d16f6a1bf3f44119312b84feb7574b5e8fc9ba8a1a7f947183fc7dd46e45e61a8c3aaf9fe66c9f1cb8982c6e28151c30b827e03d54717ddd4fedf7c20d1fde836be93bf1ea04374d46be0797dc057a5f987b03f60f0d7272d1209774a78f6e146f55532c59048d56d57675713f1708234053e7bd5551b336fe2dcb12f4d9e1ab2cc476c937ff264a6049a70f1b357624e291d91f505dd93425aee902c777d894c270b8749b7573a84cf47a3950dba23d50cf9a5d0924bf337994e74e77df44ece2834d06348a2e2dd77a8dedbf83fe520d7e2c2b1b0a422328ca1ef9c50546a9097aeaf7759ec2d04a258667ab01fc49d2d748fe1c8112aa85a7d69ba6055a5ee11acf39d257e64ebede1d533224074268fc9c6817ddbc44e7f12ced4e36d8f4688fa9385bb6953e8fab0eddf47150c5c4f405778a79562aa9f740917caa7c0a55b78433209cef8af25af4ba4ac2f4f1140f9f656e05e90b2757f5ad370014bcbc41f6b37e3f756d936966efdb1cdc905dcfb0063f71cb78b4ff455bd7904675328b7f076f10c54fc3a81ff6bdd8897961128a89dc2091916c2042bfd1484c07537b02837ff1f1b251b546d561a2423edb1a3b436eaa2fb29cef903559ef46c89f65ead37570304a46ed385a985731bd2f8d845b838e99f03de07438af9ea0c2097b9027dcef574443e84a645e369188a5d479267472958067494b0e89d2100ef52f3ed0bba056d4e00342e59ff532bcbd65cbdd6eb73621924b7499dfefb6af653aa530b1d9facbf37a6884a9eb603219868049f6ff122d07165e7f42f3ad744fc853d8894feb2a01e2478fc9fccbb257c0238e7c3df96392a7d965de1fc7c6508e2b8359bf2f2a36bc56bd04725ea47676dc113312a0f95a113dc535c13758dafd6f9672ce9e8410e16d6d60e3d10ead12c8d378dcfe152dcb6a1d069c6be562ad04649e036dd85f73b82eb54ba7d47257611190e274c2d2e939ee64dfb6b1843e469457fbf105290250df5c5202872c7713403538b72e6801f02d247a025e719656bc5ab9c8fa49d4ff8f6e15b39353d28af085a6137ce32cfb11dc26db54096e49049be82ae284e1829bea3c0f70ce9f7c47f57ad3d079d751cab4d4e2153ffa7bf0578ce51dac1029341dce41c41d8155b04b040d139612743d99e08469bcf47df5d8b9df5c429d7df9713f4d804b88b660699bea60c1d87ded85245bbcdd170a05e6527cb831b00b1b99d55220b2ecf6336115f4071b5399a4e3ed66b7342faf37d7c841209458ef32469696fc5cd064ea1fc8f9387b6172da07dcfe36b62155e9605867e0602285b4d00b8d7ff4f202727a770e95304520ff2ed9f86426790adf410650082c49c9150b31600481343486061374b6046e6e387fa2d745129b7e72510a788ad68808ae05adf363610c2022dcec4b352a8c84c0d7ba1d170e6665faf2775865323a025cb42e55b66e34a1b7aecb9ac7c21526dc8b20f49ed6b962f1b835b51abda221ea21e69211a2c455ff7ef18d130e1058c8c2be904b4fbdb9229f9248410bd076c2742b793a4e362ae2687e3a46a58d9c07cb814e32bf8a696210b070da7414ce1de2b7e1191298f478cd2c841ef3b649db0b5074b75b582da81d6bd1f77173e84380442f804db4699626e9e55836e2d82235e40ad6b4a0b8ee39faf30b2ac2e14cd6d39f4606e9afd21769cc0a88498853c497c1de0e10856c219991455196f225618d8e7edaf28a4df1e20fba196a0efed6329a4af1e0caa744a497859761dbcf1c40a17467db7ef74f5f1f964630950f3a618356106560be264ac49aa8e2ab4a0c8f9e9f6e7f77f6ed674a3b4e6c18672c6adfe9e4b4d8f9a3afd0c3da22f4832e8db81115ea09a82a6f642d2cbddf4664243513a7f970b0a947fbc6f7fd9fc6ee8651e42dcaae3ed8b31f3b7df6e252f94f7f8298873ab6da8350bf2828297633daf21cd22bc26eece490eaa1d5df82f2d4dd11139e994bf5a24a203f2cea57a94d149238a11868ac1a8f6809f5b1723404bddc74bbaa4250063637e5b4dc49617374566f7b11128a246bb4e3a8b0667122806c5d00ff96249411fdba9355223916c874caf453f6722590bc98eb3be612d844b29e8a2a62063312941308ac45956d2ee72b66caea704ddd12f71a3be3ac0a775795bdc4df4fa73f8fc8dbf5750ab7e1885822d7db3534eff4efc9d1da2404f3b508795ec90d4d7f7675177123a89c7f511e293aef1d2855d532385b742605c2cabc845c6aa292ea3aa5255bd4e46797a61fd81c5dacf47d16438cbe77810b9d504a83c590a6311841658043a6715f05edb74a3ee982655b22d45ef4b4a73869d8d6452d7a94920f4e9cc3b0016994e67fe5798e084d72c5483097f5bd163998645fe1c3b80af46b8b4880c8259dad4efc029fae12c09a4cdbc581cca7dabfa623d0c8ed21d2fafeefd9a1b6932e524ba3054179bcb2b8b315b4046e5072bdce13dce8ac6152441d1230713ecc2a325882670810514bfb9b4986eb3ad2399043e397d454f4d56358f7d5d86702b73b507e41458fec490ba1c7c9512fba1cdc95ef98dd8f0964d67a319be1ff4357a273deb792b740ab0cf788e08416575632d76131e8c08f83b4bdfd370df767c4c77a2aa62b8babb9b239307b4a34963677cdb81b808642a8619f2608fec6cb071fab0bdfc28aa307f06c66ad8de770015138faa29043e29953392545d8d223325f498fb2dfed47ea08bf3bfc6c0a2425aea89e69562a37503949bd35d05ee433682dc62f0e209c6b1a2fe9723ad3b1751d2fd7734d5678a6214974f3ff080072dccc885f9337ca1663e590b5b934b977fb735f319e9d7f6efce8e2329e6c17ad974006b4f541587be1bc2717e1f362d0e81edd4e115a70678223810e63349c45bdf6a36eb8f6df1941283c90864ed83547a7bd8f30dbb4806b096c5b1e7368d0d55150e3fcc4012f0583132cd7c8121b9c651258e204bd83bda11a818cd9abb48519f2d80cc340dd50c7a50772e1a3724c2f1fe86b0acb52e932020c60bf4f5e17f015daf35bbb8788667effeac8facffad4b3752e8b87f07766d18e2ea1800c70a24713ed7f511aef286b5d915d0829052a06141f3a8fead43364615840ee8bbd54c86685b3c72bcd5f8d49f457efefd0c87849e49ed6cd735b9569c5d145107b0ae711b236e8edf1442dc3f8a3af38eca592cd7d1dcc6c25b2725475ba9e4e5e7b58c8bfa6eaf23435297a384b725135fbaff888ad4c4ce76cf4a7d00781101fd4217cec342b0aa46df912cb0b0f4bfbe1c77c4beac9da1820f1ee57297d3a80eaacff08fd9e7d3370bd60b96ee616aef93e49805e26454c17b3845b93f254742ecc2a794340b92f0727f5bc5f134bf878b1d72d0198a42658ad7d7e85a8ded2ca6055784753d704a0fb533c2adc1bf40798f369fcc091f1b9f260ff2e109d43c99c562c7f2694e8004765947607c2d3e1e42fd46cf305c8dc6f69550911cfa33fd0219fcae4322414beaea5fe776659656048fcc85c28baf3588c00bf6f0f9adca83ac497a6c739ea09135135d2a64965bd7765a4c03c17169a06a61be60e826c6862aac507d51b61aede5e99d04ce6fcd4bef2f6f7143bf17b09d91c8eea7efc1aae192508567cc0ef3f8b917cae4fe7577ec364da4c541951e81adb7ddc1874416aa416013dbfa8d6ab1300a168ade01c3b9c885c9b5615b35bccd11c7d66a5be239ad8da0801732f9577ce64ea63416ced84e9aad2eca0158b3a58a4d132abd76ace0c2ad9dc52f933cc46bae0868049a1313cd7bee060fc19c6a4fbb17d44eb85c76b2bc61514d6ca390149bcf266228e5ae9f2e4360281c43f403a8cdcd6c9f0f3253a43dd6de3d25af88b5dfeb3283b3c5b1ddd7426111f6df54c9f566f4053a4b84fd49f39e34344fb7f59d44e41c6b65c881e2e0b6827c4e142534880799ae6b6bfbf6482743b53ae44eb38887077ad3abfdc087fd3072f4d259d91bf536a72ba12c463c93b6f51b8fc5fb2e7460f4cefe28bb2022ab500d0a1f7b9370919b5ac52db9071ed5a9bba046a81ab41ce88707226e021fd4c55b14f0fe406a8dbe2777a80d07f8feba74f22526906ae36c0d725b175062b0fad08de74be94ce5911afe45f30d5b2e09639a490b30a18234597d6330ace41406d39814bcb238f529ecfaa0b3f9dd1b588bcbb9aaaab9e7be3edb077edd8a9326e3b55cddbce909bc1ab9321fb6df84e23429c22f59eade6f29bd950ac8aeb5267f3d75e286f0890828032228e7f895d4a3a0130a6ef62aa50654a419e91aad2615598c32370946e45ecf1701e65610cadcca416453cb05df7e9cc889bd3ebc934757de82b08ba1042917cd3e0b71e78f5a6a37f0301f85022cee2ddb7cc453c1eb0b8972c5b221aa6e3b72c65bb258bfae376eb5d66be6ebe85e879f23a88836671c896d6ea1dfc8380459d989f005be6360e35fcc8c5abc2d99bb6724b8958f82639a15e83b4b75bd93d92726435a69129b72e6c161381cdebfc487892cdddbc1415cd150474bc3946c595dbd16954510ea23f2be76f2bdafb5af010e2f9ae96953a224058cf2944bdf5b1eb1d6e20f0c315c91f38ac15757c7e7fc200f922a6c813cecedcf96bf31d65a5b395beb7a922d45dde620039dd5a3f12937a895ff235fb8e8582752a157c3b6f66656bd3e3bb129b2945feef4848d13772a039a04cd84980fd0f2da373323da9e67fb636b1cfc36c9b4333e67b606ee10a01d68c6e423609ee53559d0872a37207ab0f9a379e1a9cd57e21d8773ef1d527cdd2fa6d3d46cf7bd701a5257e355cfc6665dc21ab6cf11f5761bb27435c5e0d6ba63fa90bc3afe540233855e59e0f7fbdbaeb11f485ec889492f1a74e54efa4ad19368733117055752fc93e10c79cca55ed5987c07e976856c2fd2cbb7db5c7d92dcf15900e8635d4c34193457c2b7fa0de90fdb8e7a338ee9f9ff06a6f7ac8161d1b39df47d45ddd91bdc569cbaf4584f18f6c5b68d6d8e6f04f03c9407063f4d62be12a6eaf816dc49ef977557eb07530020cbdc0a62a140e5917c5e419380f97ca0f3978ee69b9d1b08adb6adca57afe5ce2d8fb4f1f9af6203f5c92da24d1c21e2a892dfbcb93e3c676ad82ed50836f10b67f82ece940fda60252c43213b28d70efd0514e0d69dc67c568bf004a98da70b71", 0x1000, 0xfc, 0x0, 0x3, r8}, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x1, 0x5853, r9, &(0x7f0000001200)="98e7052cbb794eaafe900ffffa2fe8a3e83d82d0ffcdaf623b4e8be9eacb55f58795c67d637e1f092c28bd645a48428d06997bc87faa8ec36dbb0ebc4f9fdfe0101ffe882474bb", 0x47, 0x3, 0x0, 0x1}]) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) 23:16:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x801054db, 0x0) 23:16:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454df, 0x0) 23:16:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETSTEERINGEBPF(r0, 0x801054db, 0x0) 23:16:49 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x30400, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) 23:16:49 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x4001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) r3 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r3, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@remote, 0x0, r4}) getpeername$ax25(r2, &(0x7f0000000240)={{0x3, @rose}, [@netrom, @default, @bcast, @rose, @default, @default, @rose, @netrom]}, &(0x7f00000001c0)=0x48) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000100)={0xfffffffffffffffe, 0x3f, 0x4, 0x0, 0x0, [{{r1}, 0x10001}, {{r2}}, {{}, 0x7}, {{r5}, 0x1}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = fcntl$dupfd(r6, 0x0, r1) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) ioctl$IOC_PR_CLEAR(r7, 0x401070cd, &(0x7f0000000000)={0x6}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) 23:16:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETSTEERINGEBPF(r0, 0x801054db, 0x0) 23:16:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8916, &(0x7f0000000000)) ioctl(r1, 0x8936, &(0x7f0000000000)) r2 = fcntl$dupfd(r1, 0x0, r0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000040)=0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) openat$urandom(0xffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x591180, 0x0) ioctl$TUNSETSTEERINGEBPF(r3, 0x541b, 0x0) 23:16:50 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454df, 0x0) 23:16:50 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x180, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'ip6_vti0\x00', 0x81bf9e1fd14afe42}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) [ 377.234192][ T8711] Bluetooth: hci3: command 0x041b tx timeout 23:16:50 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454df, 0x0) 23:16:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETSTEERINGEBPF(r0, 0x801054db, 0x0) 23:16:50 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) openat$vga_arbiter(0xffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x3819c0, 0x0) openat$vimc1(0xffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, &(0x7f00000000c0)) 23:16:50 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00', 0x20}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f0000000180)={0x0, 0x2, @stop_pts=0x7fff}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) r4 = socket(0xa, 0x1, 0x0) r5 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r5, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@remote, 0x0, r6}) r8 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r8, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000140)=0x1c) ioctl(r4, 0x8916, &(0x7f0000000000)) ioctl(r4, 0x8936, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 23:16:51 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454df, 0x0) 23:16:51 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) accept4$inet6(r1, 0x0, &(0x7f0000000000), 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) 23:16:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x801054db, 0x0) 23:16:51 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x14c, 0x6600, 0x2f47, 0x14c, 0x245, 0x368, 0x2e8, 0x2e8, 0x368, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'veth1_to_bond\x00', 'bond_slave_0\x00'}, 0x0, 0x10c, 0x14c, 0x0, {}, [@common=@unspec=@helper={{0x44, 'helper\x00'}, {0x0, 'pptp\x00'}}, @common=@inet=@socket3={{0x24, 'socket\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "dc7a73a7d350a2a045620000000000007b070000000000000000005900"}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'macsec0\x00'}, 0x0, 0xa4, 0xe4}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3f65f85bc16b25e62c933f3a0d96d1624805e10ff4b1010f4d826034e500"}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x354) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2}) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) sendmsg$AUDIT_SIGNAL_INFO(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f2, 0x10, 0x70bd29, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000840}, 0x4) ioctl$TUNSETSTEERINGEBPF(r2, 0x400454d1, 0x0) 23:16:51 executing program 3: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454df, 0x0) 23:16:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x801054db, 0x0) 23:16:51 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r1) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)="6ae0a3080ecc596ea3d7e477f2f8c776f355c5309b637fcfa1129f840df3e278018f9a33620510c69192ad6fe58805c41b10654c357a67c8be2484684c14bd3b136014cea4d1f0d2", 0x48, r1) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000180)={r2, 0x15, 0xfd}, &(0x7f00000001c0)={'enc=', 'oaep', ' hash=', {'sha3-256-generic\x00'}}, &(0x7f0000000240)="3bec13934c4f7fb74999b15545684b108d47309c83", &(0x7f0000000280)=""/253) 23:16:51 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fcntl$dupfd(r1, 0x0, r0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0195000800000067e5409f982c1918000300", @ANYRES32=0x0, @ANYBLOB="08000600", @ANYRES32=r3, @ANYBLOB='\b\x00;\x00\x00\x00\x00\x00'], 0x2c}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@remote, 0x0, r5}) r7 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r7, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000000)={@remote, 0x0, r8}) ioctl$sock_ifreq(r6, 0x8915, &(0x7f00000015c0)={'ip6tnl0\x00', @ifru_addrs=@xdp={0x2c, 0x1, r8, 0x20}}) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f00000016c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000050}, 0x4008005) ioctl$TUNSETSTEERINGEBPF(r1, 0x541b, 0x0) [ 379.312224][ T9910] Bluetooth: hci3: command 0x040f tx timeout 23:16:52 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x20002, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) 23:16:52 executing program 3: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454df, 0x0) 23:16:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x801054db, 0x0) 23:16:52 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f0000000000)={0x0, 0x1, @stop_pts=0x8}) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x14) 23:16:52 executing program 3: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454df, 0x0) 23:16:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@setlink={0x20, 0x13, 0x41d, 0x0, 0x0, {0x8, 0x0, 0xc002, r3, 0x300}}, 0x20}, 0x1, 0x5e}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) 23:16:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00', 0x20}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f0000000180)={0x0, 0x2, @stop_pts=0x7fff}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) r4 = socket(0xa, 0x1, 0x0) r5 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r5, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@remote, 0x0, r6}) r8 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r8, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000140)=0x1c) ioctl(r4, 0x8916, &(0x7f0000000000)) ioctl(r4, 0x8936, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 23:16:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$null(0xffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x181000, 0x0) read$snddsp(r1, &(0x7f0000000280)=""/232, 0xe8) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000)={0xa2, 0x5}, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = fcntl$dupfd(r3, 0x0, r2) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_FM_LOAD_INSTR(r4, 0x40285107) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r4, &(0x7f0000000380)="90c675b21c06ee2c75a8df05e83775fb88522e6bef6cdb4c8909167960cab94e39f17014078ef4dc9e", &(0x7f0000000100)=""/236, 0x4}, 0x1c) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) [ 380.375368][T10856] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 380.447976][T10856] 8021q: adding VLAN 0 to HW filter on device bond1 [ 380.467832][T10859] device bond1 entered promiscuous mode 23:16:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454df, 0x0) [ 380.737791][T10856] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 23:16:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00', 0x20}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f0000000180)={0x0, 0x2, @stop_pts=0x7fff}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) r4 = socket(0xa, 0x1, 0x0) r5 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r5, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@remote, 0x0, r6}) r8 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r8, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000140)=0x1c) ioctl(r4, 0x8916, &(0x7f0000000000)) ioctl(r4, 0x8936, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 23:16:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fcntl$dupfd(r1, 0x0, r0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0x1, 0x12) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r3, 0x541b, 0x0) 23:16:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454df, 0x0) 23:16:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@remote, 0x0, r5}) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0185649, &(0x7f0000000100)={0xfffffff, 0xa5a, 0x800, r6, 0x0, &(0x7f0000000040)={0x9b090d, 0x59, [], @string=&(0x7f0000000000)=0xc1}}) getsockopt$EBT_SO_GET_INIT_ENTRIES(r7, 0x0, 0x83, &(0x7f00000001c0)={'nat\x00', 0x0, 0x3, 0x0, [], 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f0000000180)}, &(0x7f0000000240)=0x50) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) 23:16:54 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x6200, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8916, &(0x7f0000000000)) ioctl(r1, 0x8936, &(0x7f0000000000)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) 23:16:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454df, 0x0) 23:16:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00', 0x20}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f0000000180)={0x0, 0x2, @stop_pts=0x7fff}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) r4 = socket(0xa, 0x1, 0x0) r5 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r5, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@remote, 0x0, r6}) r8 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r8, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000140)=0x1c) ioctl(r4, 0x8916, &(0x7f0000000000)) ioctl(r4, 0x8936, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 381.672572][ T8708] Bluetooth: hci3: command 0x0419 tx timeout 23:16:54 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f0000000000)=0x2) 23:16:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454df, 0x0) 23:16:54 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xd60b, 0x20801) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r1, 0x400454d1, 0x0) 23:16:55 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00', 0x20}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f0000000180)={0x0, 0x2, @stop_pts=0x7fff}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) r4 = socket(0xa, 0x1, 0x0) r5 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r5, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@remote, 0x0, r6}) r8 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r8, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000140)=0x1c) ioctl(r4, 0x8916, &(0x7f0000000000)) ioctl(r4, 0x8936, &(0x7f0000000000)) 23:16:55 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x801, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4004240b, &(0x7f0000000000)={0x2, 0x70, 0x80, 0x0, 0x5, 0x4, 0x0, 0xd75, 0x8c00, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0xfffffffffffffff7}, 0x10000, 0x4, 0x7ff, 0x2, 0x9, 0x7, 0x4}) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) r4 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@remote, 0x0, r5}) preadv(r6, &(0x7f0000002600)=[{&(0x7f00000000c0)=""/138, 0x8a}, {&(0x7f0000000180)=""/234, 0xea}, {&(0x7f0000000280)=""/120, 0x78}, {&(0x7f0000000300)=""/115, 0x73}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/242, 0xf2}, {&(0x7f0000002480)=""/142, 0x8e}, {&(0x7f0000002540)=""/185, 0xb9}], 0x9, 0x9, 0xfffffff9) 23:16:55 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454df, 0x0) 23:16:55 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00', 0x20}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f0000000180)={0x0, 0x2, @stop_pts=0x7fff}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) r4 = socket(0xa, 0x1, 0x0) r5 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r5, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@remote, 0x0, r6}) r8 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r8, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000140)=0x1c) ioctl(r4, 0x8916, &(0x7f0000000000)) 23:16:55 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8916, &(0x7f0000000000)) ioctl(r1, 0x8936, &(0x7f0000000000)) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x1401, 0x906, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20008010) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) 23:16:55 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454df, 0x0) 23:16:56 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00', 0x20}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f0000000180)={0x0, 0x2, @stop_pts=0x7fff}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) socket(0xa, 0x1, 0x0) r4 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@remote, 0x0, r5}) r7 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r7, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000140)=0x1c) 23:16:56 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8916, &(0x7f0000000000)) ioctl(r1, 0x8936, &(0x7f0000000000)) r2 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="e8e08bbcbb7307b22749ab7a2f622ef9b897cf6fd499c3eccbf7b0383bb661c2d8dcd8255feb4e1310a130b9a9fd75101be3dcc43853f01bf20c0b4460223407a1670fb5fa16e7d7764abaf1303199cd1a4d0eedfeb490a807948daf02bc10dc79b064b455de6fca5154849fd5eaf3f4433f8182cc"], 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000040)={{r2}, 0x5, 0x86c1, 0x3}) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) r3 = getpid() pidfd_open(r3, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000000)='net/raw\x00') ioctl$VIDIOC_DECODER_CMD(r4, 0xc0485660, &(0x7f00000000c0)={0x1, 0x1, @start={0x8000, 0x1}}) 23:16:56 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) write$tun(r0, &(0x7f0000000000)={@void, @val={0x2, 0x3, 0x1, 0xb230, 0x9, 0xde4}, @mpls={[{0x40, 0x0, 0x1}, {0xda3}, {0x5d7, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x4}, {0x401}, {0x2, 0x0, 0x1}, {0xffffc, 0x0, 0x1}, {0x38}], @llc={@llc={0xf4, 0xff, "df99"}}}}, 0x32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) 23:16:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454df, 0x0) 23:16:56 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0xa5, 0x0, 0x4) 23:16:56 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00', 0x20}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f0000000180)={0x0, 0x2, @stop_pts=0x7fff}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) socket(0xa, 0x1, 0x0) r4 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@remote, 0x0, r5}) r7 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r7, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) 23:16:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454df, 0x0) 23:16:56 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 23:16:57 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00', 0x20}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f0000000180)={0x0, 0x2, @stop_pts=0x7fff}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) socket(0xa, 0x1, 0x0) r4 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@remote, 0x0, r5}) socket$inet(0x2, 0x3, 0x5) 23:16:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fcntl$dupfd(r1, 0x0, r0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r3, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) dup(r3) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f00000000c0)}}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = fcntl$dupfd(r5, 0x0, r4) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {0x0, r8, 0x3}}, 0x18) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r8, 0x8f3}}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r9, 0x541b, 0x0) 23:16:57 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454df, 0x0) 23:16:57 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0xa703, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) ioctl$BLKGETSIZE64(r3, 0x80041272, &(0x7f0000000180)) openat(r3, &(0x7f0000000000)='./file0\x00', 0x284000, 0x142) r4 = dup3(r1, 0xffffffffffffffff, 0x0) getsockname$ax25(r4, &(0x7f0000000100)={{}, [@rose, @bcast, @bcast, @netrom, @bcast, @remote, @bcast, @default]}, &(0x7f0000000080)=0x48) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) 23:16:57 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) r1 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200040, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r3, 0xb03, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000002300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000022c0)={&(0x7f00000000c0)={0x21fc, r3, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}, @TIPC_NLA_NODE={0x1014, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}, @TIPC_NLA_SOCK={0xc4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4434}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x27ef}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_NODE={0x10cc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xad, 0x3, "09a591fd9a7edd5e7fe3679df111c919d3d2ce20e0f8abc0363a8aa03b8bd03cf49e42e5283e6d5ea0bdd1c801d7d658f20dace281181c70157227f00e8cef98b43cd4f2f8bac2aff73193e1d80ea46b4e19dcd3c46d0baa94c357d5dc72325a7bf2ed30590d5cf8537c25038e9e4869852264571039bccd7cc7eaa92fe63ee9c0ce7ac94d4449dfde21a4f05669428a5d552dc66428b4b12fa1bc5de47ce490b7e194ce67966d0acc"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x21fc}}, 0x4000404) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002380)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000002580)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002540)={&(0x7f00000023c0)={0x178, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}]}, @TIPC_NLA_NODE={0xb4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x67, 0x3, "96b7083cd5a8a58681935ecb4466e97d6fb02cb458cbdf4de5ae3b9fca8a449d534dab362c25e8355f9ada2551fb16b85d1e61b33029ba5341084970523421f94d11be47a7e3d4091780166df3123eec2d31d6baedf5a46c2f3e556461135692922980"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "6fbefc03daf9e86ee8c6382e8ca7d762914b142d51866325530338f18a07"}}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000007}, 0x20000004) 23:16:57 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00', 0x20}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f0000000180)={0x0, 0x2, @stop_pts=0x7fff}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) socket(0xa, 0x1, 0x0) r4 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@remote, 0x0, r5}) 23:16:58 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454df, 0x0) 23:16:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00', 0x20}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f0000000180)={0x0, 0x2, @stop_pts=0x7fff}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) socket(0xa, 0x1, 0x0) r4 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) 23:16:58 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x1, 0x0) ioctl(r4, 0x8916, &(0x7f0000000000)) ioctl(r4, 0x8936, &(0x7f0000000000)) ioctl$SIOCX25SCUDMATCHLEN(r4, 0x89e7, &(0x7f0000000000)={0x23}) r5 = openat$nvme_fabrics(0xffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x28000, 0x0) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff7000/0x9000)=nil, 0x2000}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) 23:16:58 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000100)={0x0, @reserved}) openat$vimc2(0xffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) r1 = openat$sndtimer(0xffffff9c, &(0x7f0000001480)='/dev/snd/timer\x00', 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40046607, &(0x7f00000014c0)=0xfffffffc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r2, 0x400454d1, 0x0) syz_mount_image$btrfs(&(0x7f00000001c0)='btrfs\x00', &(0x7f0000000200)='./file0\x00', 0x3, 0x4, &(0x7f0000001400)=[{&(0x7f0000000240)="3317ea3b42e01357a807d8d9b59f06f9e38412354a937cec7800f669c543fd9392acdc22895e071a2af670123f8cf1022e383e8874ac23c0d6930d62e9558565a3c657179923afa903ebbdb1583ddfeffbcd15088461fbbd149c4f8f0fab5bd6ef0c9ba16235acdf0c863e39b79c3f2a916a0acc0a7b86b67f913d4671ecf5f32e2e1f576417d1f465c871f3e47211b47e944662e5b9a44d091e3bf416d28ff9f735c84ee50ff9a470217d50ee1188fd14df9740bdad6c9718b2b38f9174c09f7b5b58f67a9c585249bd39d779", 0xcd}, {&(0x7f0000000340)="bd69438ea6b234a0d37fe27ce1ab1db6b7458abdd0be9119a87fb4d2b093450f6aa125c3893984bb13f2440c05c286ebc1532356017c3440de1200c0", 0x3c, 0xff}, {&(0x7f0000000380)="4fd32451ea7cecc92717815f7eecee5569c1323818667b3573e4e3062ec745bd033933328284b11d07460010dd470f454d8d086e437a7512ac0aeaf72dc3fe6c80f457d8145a7de88262028890378c3bf9beef867ebf5376b910be1e8194f61772a9519748a4f48739dd964b9aaa5ea7094cd0", 0x73, 0x5}, {&(0x7f0000000400)="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", 0x1000}], 0x200000, &(0x7f0000001440)={[{@thread_pool={'thread_pool', 0x3d, 0xfffffffeffffffff}}], [{@dont_appraise='dont_appraise'}]}) 23:16:58 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454df, 0x0) 23:16:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00', 0x20}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f0000000180)={0x0, 0x2, @stop_pts=0x7fff}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) socket(0xa, 0x1, 0x0) r4 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) 23:16:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fcntl$dupfd(r1, 0x0, r0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000000)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x480040, 0x0) ioctl$TUNSETSTEERINGEBPF(r3, 0x541b, 0x0) 23:16:59 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454df, 0x0) 23:16:59 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00', 0x20}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f0000000180)={0x0, 0x2, @stop_pts=0x7fff}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) socket(0xa, 0x1, 0x0) r4 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) 23:16:59 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f0000000000)=""/60) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@remote, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6gre0\x00', r4, 0x29, 0x1, 0x1f, 0x6, 0x3d, @loopback, @remote, 0x7800, 0x40, 0x6d37, 0x400000}}) r7 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r7, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000000)={@remote, 0x0, r8}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', r8}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x154, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={[], [], @rand_addr=0x64010101}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x154}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) 23:16:59 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454df, 0x0) 23:16:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r1, 0xb03, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000500)={0x1d8, r1, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xc8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xc4, 0x3, "4bba630d4b32287113c7c50d50877855363414c35bf15be36c651b02fbe3e65189f08294675a2fc0a6523f14a124a65a7a5b11799924f0d73524287b1dfde2bc86f9ed161d14b08dd13f2ba5ed58a6ab4f1af29fdd9d4aa4d91ec9e21b7ca402f54a5e632ee61d59a72a175c3aebae4adf9701787bc99936fcc93af053bd30d567cfdeeb07c278267a9870afed6b4078bb6fd4e88def521966df0dc6ced5b33fd37261639fbd6a3ef7766e2038aae9b29d59248f5dbbb1e907c8f99ef80190d8"}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1f}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xec}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x500}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6be6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x8090}, 0x40) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r2, 0x541b, 0x0) 23:17:00 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x74b000, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) r2 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@remote, 0x0, r3}) ioctl$F2FS_IOC_RESIZE_FS(r4, 0x4008f510, &(0x7f0000000080)=0x3) fsmount(r0, 0x0, 0x0) r5 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ipvlan0\x00', 0x1000}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) 23:17:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00', 0x20}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f0000000180)={0x0, 0x2, @stop_pts=0x7fff}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) socket(0xa, 0x1, 0x0) socket$inet(0x2, 0x3, 0x5) 23:17:00 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$chown(0x4, r1, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x6f30e968, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000001c0)={[{@quiet='quiet'}, {@dir_umask={'dir_umask', 0x3d, 0x80000001}}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$vcsa(0xffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x50000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'veth0_to_batadv\x00', 0x8000}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = fcntl$dupfd(r7, 0x0, r6) mq_timedsend(r8, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r8, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_CLOCK(r4, 0x8030ae7c, &(0x7f0000000000)) r9 = socket(0xa, 0x1, 0x0) ioctl(r9, 0x8916, &(0x7f0000000000)) ioctl(r9, 0x8936, &(0x7f0000000000)) setsockopt$netrom_NETROM_N2(r9, 0x103, 0x3, &(0x7f0000000100)=0xd4a, 0x4) 23:17:00 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454df, 0x0) [ 387.705453][T11111] SELinux: duplicate or incompatible mount options 23:17:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00', 0x20}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f0000000180)={0x0, 0x2, @stop_pts=0x7fff}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) socket(0xa, 0x1, 0x0) 23:17:00 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4000}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) syz_open_pts(r3, 0x8a100) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) 23:17:00 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454df, 0x0) 23:17:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000080)="b9fa8a00") r3 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r3, &(0x7f0000000140)="08ec656984f08c20e7080782bb564056e82dd7cacbd66f75dab31b01bbb76fad26ab6787c38a9c4cbfb9c097dad3f70862133f00000000000000b0648118fcef70381e440524d01243a556c9f8a8d6e1d6f284a7a9c401b2e8e52bce0fabc6a20de9d05ddc0d4c2b1d8bec4e7746124624c28278", 0x74, 0x10, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r3, 0x1) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000040)={r5}, 0x14) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000040)={r5, 0x1f}, 0x8) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, &(0x7f0000000100), 0x4) r7 = fcntl$dupfd(r1, 0x0, r0) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x233, 0x8) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000000)=0xff) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x541b, 0x0) 23:17:01 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) 23:17:01 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00', 0x20}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f0000000180)={0x0, 0x2, @stop_pts=0x7fff}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) 23:17:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fcntl$dupfd(r1, 0x0, r0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r3, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) dup(r3) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f00000000c0)}}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = fcntl$dupfd(r5, 0x0, r4) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {0x0, r8, 0x3}}, 0x18) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r8, 0x8f3}}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r9, 0x541b, 0x0) 23:17:01 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x42440, 0x1a, 0x11}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {0x0, r3, 0x3}}, 0x18) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x5, @local, 0x3}, r3}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x5) 23:17:01 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00', 0x20}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f0000000180)={0x0, 0x2, @stop_pts=0x7fff}) 23:17:01 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x4000}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) read$snapshot(r3, &(0x7f00000000c0)=""/205, 0xcd) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) 23:17:02 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x4001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) r3 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r3, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@remote, 0x0, r4}) getpeername$ax25(r2, &(0x7f0000000240)={{0x3, @rose}, [@netrom, @default, @bcast, @rose, @default, @default, @rose, @netrom]}, &(0x7f00000001c0)=0x48) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000100)={0xfffffffffffffffe, 0x3f, 0x4, 0x0, 0x0, [{{r1}, 0x10001}, {{r2}}, {{}, 0x7}, {{r5}, 0x1}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = fcntl$dupfd(r6, 0x0, r1) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) ioctl$IOC_PR_CLEAR(r7, 0x401070cd, &(0x7f0000000000)={0x6}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) 23:17:02 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000000c0)=0x1c, 0x4) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000000040)={r4, 0x13}) 23:17:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00', 0x20}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) 23:17:02 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454cf, 0x0) 23:17:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fcntl$dupfd(r1, 0x0, r0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000040)=0x32) syz_extract_tcp_res(&(0x7f0000000000), 0xfffffeff, 0x7fff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="f3b1bd166f8c94f9d0015039897767bbc62021ae40b2afebdd0d2a777f6384ab825ed9e3b27872965eed83d02a9be9934e6e08ea22ec7df6ad50cffd1db39795ab4fc148f6922b8e5d2501f7863f014859bb68b9fc042d746554d653fe85d08df355"], 0x1) r5 = socket(0xa, 0x1, 0x0) ioctl(r5, 0x8916, &(0x7f0000000000)) ioctl(r5, 0x8936, &(0x7f0000000000)) r6 = socket(0xa, 0x1, 0x0) ioctl(r6, 0x8916, &(0x7f0000000000)) ioctl(r6, 0x8936, &(0x7f0000000000)) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000180)={0x0, @local, @local}, &(0x7f0000000140)=0xfffffffffffffff4) ioctl$TUNSETSTEERINGEBPF(r3, 0x541b, 0x0) 23:17:03 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00', 0x20}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$dupfd(r2, 0x0, r1) 23:17:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454cf, 0x0) 23:17:03 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = getpid() pidfd_open(r1, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) ioprio_set$pid(0x2, r2, 0x4004) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = fcntl$dupfd(r5, 0x0, r4) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) write$sequencer(r6, &(0x7f0000000040)=[@l={0x92, 0x8, 0xe0, 0x13, 0x0, 0xab, 0x8}], 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = fcntl$dupfd(r7, 0x0, r3) mq_timedsend(r8, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000100)) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/time\x00') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) 23:17:03 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8916, &(0x7f0000000000)) ioctl(r1, 0x8936, &(0x7f0000000000)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00', @ANYRES16=r2, @ANYBLOB="000125bd7000fcdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000814}, 0x10084) 23:17:03 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00', 0x20}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 23:17:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454cf, 0x0) 23:17:04 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x180040, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) 23:17:04 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00', 0x20}) socket$inet6_tcp(0xa, 0x1, 0x0) 23:17:04 executing program 3: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454cf, 0x0) 23:17:04 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00', 0x20}) 23:17:04 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x39d5c3, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = fcntl$dupfd(r3, 0x0, r2) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE(r4, 0xab02, 0x9) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x4, 0x10002) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000140)={0xb6, 0x66}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x50, r6, 0x1, 0x0, 0x0, {0x2d}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}]}, 0x50}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x104, r6, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}]}, 0x104}, 0x1, 0x0, 0x0, 0x4840}, 0x40080) 23:17:04 executing program 3: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454cf, 0x0) 23:17:05 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d0, 0x0) 23:17:05 executing program 2: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00', 0x20}) 23:17:05 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) 23:17:05 executing program 3: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454cf, 0x0) 23:17:05 executing program 2: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00', 0x20}) 23:17:05 executing program 3: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454cf, 0x0) 23:17:05 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f0000000200)=ANY=[], 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0185648, &(0x7f00000000c0)={0xfffffff, 0x10000, 0xffffff3d, r4, 0x0, &(0x7f0000000040)={0x9b091a, 0x11ce43da, [], @p_u16=&(0x7f0000000000)=0x1}}) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) r5 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r5, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="a8"], 0x1) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@remote, 0x0, r6}) setsockopt$inet6_opts(r7, 0x29, 0x3b, &(0x7f0000000100)=@fragment={0x3b, 0x0, 0x7, 0x0, 0x0, 0x6, 0x68}, 0x8) 23:17:06 executing program 2: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00', 0x20}) 23:17:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454cf, 0x0) 23:17:06 executing program 2: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00', 0x20}) [ 393.815772][T11238] IPVS: ftp: loaded support on port[0] = 21 23:17:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454cf, 0x0) 23:17:07 executing program 2: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00', 0x20}) [ 394.776673][T11238] chnl_net:caif_netlink_parms(): no params data found [ 395.156017][T11238] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.163995][T11238] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.173902][T11238] device bridge_slave_0 entered promiscuous mode [ 395.188138][T11238] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.195405][T11238] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.205251][T11238] device bridge_slave_1 entered promiscuous mode [ 395.299189][T11238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.378325][T11238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.532106][T11238] team0: Port device team_slave_0 added [ 395.565676][T11238] team0: Port device team_slave_1 added [ 395.683635][T11238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.690831][T11238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.717040][T11238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.802597][T11238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.810672][T11238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.836944][T11238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.044784][T11238] device hsr_slave_0 entered promiscuous mode [ 396.127666][T11238] device hsr_slave_1 entered promiscuous mode [ 396.146326][T11238] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 396.153963][T11238] Cannot create hsr debugfs directory [ 396.755687][T11238] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 396.781260][T11238] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 396.804529][T11238] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 396.825983][T11238] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 397.226360][T11238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.284615][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 397.296754][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 397.324857][T11238] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.359600][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 397.371033][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 397.380599][ T8708] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.387957][ T8708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.442579][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 397.452368][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 397.462535][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 397.472146][ T8708] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.479521][ T8708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.488773][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 397.499982][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 397.539071][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 397.550731][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 397.592251][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 397.602391][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 397.613167][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 397.665166][T11238] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 397.676301][T11238] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 397.696756][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 397.706789][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 397.718218][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 397.728154][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 397.777733][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 397.808698][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 397.816705][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 397.878813][T11238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.265205][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 398.275706][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 398.394710][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 398.405555][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 398.431596][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 398.441495][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 398.462345][T11238] device veth0_vlan entered promiscuous mode [ 398.508589][T11238] device veth1_vlan entered promiscuous mode [ 398.583593][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 398.593481][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 398.603090][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 398.613092][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 398.637662][T11238] device veth0_macvtap entered promiscuous mode [ 398.659913][T11238] device veth1_macvtap entered promiscuous mode [ 398.710201][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 398.720675][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 398.742586][T11238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 398.753942][T11238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.764037][T11238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 398.774684][T11238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.784765][T11238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 398.795435][T11238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.805684][T11238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 398.816376][T11238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.830637][T11238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.841210][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 398.851421][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 398.879954][T11238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 398.890892][T11238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.902136][T11238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 398.912719][T11238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.922730][T11238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 398.933320][T11238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.943334][T11238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 398.953920][T11238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.968420][T11238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.978951][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 398.989200][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 23:17:13 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d0, 0x0) 23:17:13 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454cf, 0x0) 23:17:13 executing program 2: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00', 0x20}) 23:17:13 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0x9, 0x6, '9P2000'}, 0x13) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) 23:17:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000100)={0x4, 0x2bf2df11}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) r4 = socket(0xa, 0x1, 0x0) ioctl(r4, 0x8916, &(0x7f0000000000)) ioctl(r4, 0x8936, &(0x7f0000000000)) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, 0x0, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10000}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4014) r5 = socket$inet(0x2, 0x3, 0x5) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000180)={0x1, 'dummy0\x00', 0x1}, 0x18) setsockopt$inet_msfilter(r5, 0x0, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="40c1d7e3a944dfba24d46701f2ac532ac19265a2922569f883e5b462ebae04db19c098279fe3448d0adfeaadf4f2b1036f8c512e71"], 0x1) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r6 = dup2(r0, r5) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x8000}) ioctl$SOUND_MIXER_READ_RECSRC(0xffffffffffffffff, 0x80044dff, &(0x7f0000000300)) 23:17:14 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x3, 0x3, &(0x7f00000002c0)=[{&(0x7f00000000c0), 0x0, 0x4}, {&(0x7f0000000100)="ff406c754aa6cfaee91cd2772e4d15c4783d425055d03696dd49b6f6f4e7520091b608f3fe1f554305e458d004f4648474b8825351590c6bf5c4f2aea11f716f8bd813cd5211520bea99fe562a3a2d70cfcf3ca3422f4fc8f80257a00f778ce5a62406d28963a322644123644eb7b51ab70f189d67000cb72bd551260409fede379781b42368cc5bced8619dd5b16ac0ada64dcad05338d87a328ff258f680fe68b65a354652a6ad57721471a537c77e2297ced3253b76c09c410623d2ed0abcb8f5fc51be4876a98500a5c3776fd10557bfde72d6437e9ded212345845d213e1f672e4623ab02", 0xe7, 0x4}, {&(0x7f0000000200)="2c13214946f56a8a8b2e84ef3475838b29bae7a01ffe44649c420d3fad27a6d2e5d75cce95b473845a792ab7f46780c7b7dc8216cbafb8bf2646656f825571e7b02346d45ece7a4191aeb1020518dcb2d39fdfa13455456830936708791c062193d04e45ec816b739a2d0137b443d48cc9d782c96c4edc705b88c2cc96fc73d5d1a873a6084575ccaf799374377903bc", 0x90, 0x9}], 0x301000, &(0x7f0000000300)={[{@map_normal='map=normal'}], [{@euid_gt={'euid>', 0xee01}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/['}}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@hash='hash'}]}) 23:17:14 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454cf, 0x0) 23:17:14 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00', 0x20}) 23:17:14 executing program 0: r0 = openat$dlm_control(0xffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x802, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000001180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x28, 0x3f7, 0x200, 0x70bd2a, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008080}, 0xc004) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001200)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r2 = shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000100)=""/4096) ioctl$TUNSETSTEERINGEBPF(r1, 0x400454d1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = fcntl$dupfd(r4, 0x0, r3) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001240)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000001300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x3c, r6, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xf9}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8040040}, 0x840) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGSOFTCAR(r5, 0x5419, &(0x7f00000011c0)) 23:17:14 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d0, 0x0) 23:17:15 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454cf, 0x0) 23:17:15 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x300080, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0185648, &(0x7f0000000480)={0x0, 0x8, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x990a91, 0x8, [], @p_u8=&(0x7f0000000400)=0x2}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000004c0)) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000200)='./file0\x00') ioctl$DRM_IOCTL_VERSION(r2, 0xc0246400, &(0x7f0000000040)={0xffffffff, 0x5, 0x400, 0x39, &(0x7f00000003c0)=""/57, 0x73, &(0x7f00000000c0)=""/115, 0xae, &(0x7f0000000140)=""/174}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r4) io_setup(0x2, &(0x7f0000000140)=0x0) io_submit(r5, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r4, 0x0, 0x10011}]) io_submit(r5, 0x2, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x2, r1, &(0x7f0000000240)="619babf809869d9efc2a51ce9ef8c697a429bc9efc60b9655598b9d7780a9a1c887c082223f7760d523c220af13bf7e8654dfa426d0296b54b11fad36ae4601dbbfb7d2ace77b09d2157626478203d2b570bab15316cd0083d8ee2d2685f86a0a54e9b2ebdf0d798ec5c1856614f7da93a0086699cca46c5bda3550c376d47598ac1b014d51d5a2b0e24f0a1a912b2e50bb81a0c3ea4a1d8b8220eff61a70ab6137e697773ff7882dd005f74091eeed7d73b76c4f9f96ece096abf602a0abfc0704d", 0xc2, 0x0, 0x0, 0x3, r2}, 0x0]) 23:17:15 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00', 0x20}) [ 402.506503][ T8708] Bluetooth: hci4: command 0x0409 tx timeout 23:17:15 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d0, 0x0) 23:17:15 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8916, &(0x7f0000000000)) ioctl(r1, 0x8936, &(0x7f0000000000)) getsockname$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10) 23:17:15 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00', 0x20}) 23:17:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454c9, 0x0) 23:17:16 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8916, &(0x7f0000000000)) ioctl(r1, 0x8936, &(0x7f0000000000)) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, &(0x7f0000000000)={r1, 0x5, 0x6, 0x4e80}) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)={0x2c, r5, 0x201, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x2c}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r8, 0x541b, 0x0) 23:17:16 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d0, 0x0) 23:17:16 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) 23:17:16 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000000)=0x4) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'xfrm0\x00', 0x1000}) r4 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) accept4$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @empty}, &(0x7f0000000100)=0x10, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) 23:17:16 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) execveat(r3, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=[&(0x7f0000000040)='-\x00'], &(0x7f00000001c0)=[&(0x7f0000000100)='}^#!$*%\x00', &(0x7f0000000140)='/dev/net/tun\x00', &(0x7f0000000180)='\x00'], 0x1000) 23:17:16 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454c9, 0x0) 23:17:16 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d0, 0x0) 23:17:16 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) 23:17:17 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f00000001c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0xa, 0x1, 0x0) ioctl(r5, 0x8916, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000300)='./file0\x00', 0x302) sendmsg$AUDIT_TTY_SET(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x3f9, 0x8, 0x70bd26, 0x25dfdbfe, {0x0, 0x1}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x2040881}, 0x40004000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = fcntl$dupfd(r7, 0x0, r4) mq_timedsend(r8, 0x0, 0x0, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000180)={'syz', 0x2}) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'\x00', 0x1000}) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="c4040000", @ANYRES16=0x0, @ANYBLOB="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"], 0x4c4}, 0x1, 0x0, 0x0, 0x40040}, 0x20000001) 23:17:17 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = fcntl$dupfd(r5, 0x0, r4) r7 = openat$autofs(0xffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x200000, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = fcntl$dupfd(r9, 0x0, r8) mq_timedsend(r10, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r10, 0x8008af00, &(0x7f0000000040)) ioctl$TIOCCBRK(r7, 0x5428) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) 23:17:17 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x400454d0, 0x0) 23:17:17 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454c9, 0x0) 23:17:17 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) [ 404.596441][ T8708] Bluetooth: hci4: command 0x041b tx timeout 23:17:17 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x189000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCGFLAG(r3, 0x8004480e, &(0x7f0000000000)) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) 23:17:17 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00'}) 23:17:18 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x400454d0, 0x0) 23:17:18 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454c9, 0x0) 23:17:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00'}) 23:17:18 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x400454d0, 0x0) 23:17:18 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454c9, 0x0) 23:17:18 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socket(0x4, 0x2, 0xfff) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r1) io_setup(0x2, &(0x7f0000000140)=0x0) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r1, 0x0, 0x10011}]) r3 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r3, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@remote, 0x0, r4}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = fcntl$dupfd(r7, 0x0, r6) mq_timedsend(r8, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x9, r5, &(0x7f0000000000)="ae4d6ebcf8419f4023252c34dd0908e5cf279fefd10cd62f3f1a00d1d5019641fc3b0ed5bee875f78e07c46cee169b65bbc8b0467e15516fecc4c859c1a84bf35987fd9e0bfe5ab069c98187d639abcfb821f4688f", 0x55, 0x3, 0x0, 0x3, r8}, &(0x7f0000000100)) 23:17:19 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00'}) 23:17:19 executing program 4: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d0, 0x0) [ 406.666051][ T17] Bluetooth: hci4: command 0x040f tx timeout 23:17:19 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454c9, 0x0) 23:17:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fcntl$dupfd(r1, 0x0, r0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = fcntl$dupfd(r4, 0x0, r3) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="660f38f65f87c80080d4660ff4880ae50fc72bce0f22200f0135ba6100b0c0ee360f01c5baf80c66b8d81f1d8266efbafc0c66ed", 0x34}], 0x1, 0x50, &(0x7f00000000c0), 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r6, 0x541b, 0x0) 23:17:20 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00'}) 23:17:20 executing program 4: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d0, 0x0) 23:17:20 executing program 1: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x541b, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) write$nbd(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0xc3) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2) 23:17:20 executing program 3: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x400454c9, 0x0) 23:17:20 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00'}) 23:17:20 executing program 4: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d0, 0x0) 23:17:20 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fcntl$dupfd(r1, 0x0, r0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r2, 0x541b, 0x0) 23:17:21 executing program 3: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x400454c9, 0x0) 23:17:21 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00'}) 23:17:21 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$nvram(0xffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x258940, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = fcntl$dupfd(r6, 0x0, r5) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) write$UHID_DESTROY(r7, &(0x7f00000001c0), 0x4) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)={0x20, r4, 0x703, 0x0, 0x0, {0x7, 0x7}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x4, 0x2}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x42}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = fcntl$dupfd(r8, 0x0, r1) mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0) ioctl$UI_GET_SYSNAME(r9, 0x8040552c, &(0x7f0000000040)) 23:17:21 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d0, 0x0) 23:17:21 executing program 3: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x400454c9, 0x0) [ 408.755727][ T8708] Bluetooth: hci4: command 0x0419 tx timeout 23:17:21 executing program 2: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00'}) 23:17:21 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x84c0, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) dup3(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = fcntl$dupfd(r5, 0x0, r4) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = fcntl$dupfd(r8, 0x0, r7) mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r9, 0x541b, 0x0) 23:17:22 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d0, 0x0) 23:17:22 executing program 2: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00'}) 23:17:22 executing program 3: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454c9, 0x0) 23:17:22 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r3, 0x80104132, &(0x7f0000000000)) 23:17:22 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d0, 0x0) 23:17:22 executing program 2: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00'}) 23:17:22 executing program 3: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454c9, 0x0) 23:17:23 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) 23:17:23 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d0, 0x0) 23:17:23 executing program 2: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00'}) 23:17:23 executing program 5 (fault-call:1 fault-nth:0): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00', 0x20}) 23:17:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454c9, 0x0) 23:17:23 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = getpid() pidfd_open(r1, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) r2 = openat$ipvs(0xffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) r3 = getpid() pidfd_open(r3, 0x0) sendmsg$AUDIT_SET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x3e9, 0x100, 0x70bd2a, 0x25dfdbfd, {0x5a, 0x1, 0x1, r3, 0x4b, 0x5, 0x400, 0x80000000, 0x0, 0x7}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x2004c004}, 0x4000) 23:17:23 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d0, 0x0) 23:17:23 executing program 2: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00'}) 23:17:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454c9, 0x0) 23:17:24 executing program 2: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00'}) 23:17:24 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@remote, 0x0, r3}) r5 = fcntl$dupfd(r4, 0x406, r1) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f0000000000)={0x7f, 0x8, 0x7, 0x73, "14706a3be3de85fdfd6e87333425045ce220d6b3347d7940685decd8649a977a"}) 23:17:24 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d0, 0x0) 23:17:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454c9, 0x0) 23:17:24 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00'}) 23:17:25 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d0, 0x0) [ 412.403685][T11735] IPVS: ftp: loaded support on port[0] = 21 [ 413.124179][T11735] chnl_net:caif_netlink_parms(): no params data found [ 413.389726][T11735] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.397749][T11735] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.407291][T11735] device bridge_slave_0 entered promiscuous mode [ 413.423783][T11735] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.431097][T11735] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.441235][T11735] device bridge_slave_1 entered promiscuous mode [ 413.478597][T11735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.492886][T11735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.538627][T11735] team0: Port device team_slave_0 added [ 413.552002][T11735] team0: Port device team_slave_1 added [ 413.607975][T11735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.614969][T11735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.641509][T11735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.660017][T11735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.667127][T11735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.693625][T11735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.740304][T11735] device hsr_slave_0 entered promiscuous mode [ 413.748213][T11735] device hsr_slave_1 entered promiscuous mode [ 413.755759][T11735] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 413.763380][T11735] Cannot create hsr debugfs directory [ 413.998590][T11735] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 414.011453][T11735] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 414.032451][T11735] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 414.051903][T11735] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 414.301905][T11735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.334256][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 414.343371][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 414.364347][T11735] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.385488][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 414.396326][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 414.405985][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.413254][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.440469][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 414.449473][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 414.460360][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 414.470134][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.477522][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.501042][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 414.537126][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 414.548633][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 414.559787][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 414.603525][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 414.613693][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 414.623934][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 414.633909][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 414.643741][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 414.669955][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 414.679305][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 414.705988][T11735] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 414.761278][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 414.769569][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 414.797029][T11735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.910551][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 414.922644][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 414.973229][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 414.984655][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 414.997094][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 415.007487][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 415.026377][T11735] device veth0_vlan entered promiscuous mode [ 415.054260][T11735] device veth1_vlan entered promiscuous mode [ 415.116095][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 415.125709][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 415.142094][T11735] device veth0_macvtap entered promiscuous mode [ 415.166255][T11735] device veth1_macvtap entered promiscuous mode [ 415.208544][T11735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 415.219431][T11735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.229466][T11735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 415.240084][T11735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.250218][T11735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 415.260840][T11735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.270899][T11735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 415.281524][T11735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.291565][T11735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 415.302187][T11735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.315338][T11735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.324653][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 415.334345][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 415.344477][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 415.354611][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 415.381860][T11735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 415.393069][T11735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.403172][T11735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 415.413787][T11735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.423876][T11735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 415.434520][T11735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.444582][T11735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 415.455368][T11735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.465442][T11735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 415.476052][T11735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.490290][T11735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.498760][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 415.509023][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 417.261903][T11966] FAULT_INJECTION: forcing a failure. [ 417.261903][T11966] name failslab, interval 1, probability 0, space 0, times 0 [ 417.274976][T11966] CPU: 0 PID: 11966 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 417.283725][T11966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 417.293854][T11966] Call Trace: [ 417.297259][T11966] dump_stack+0x21c/0x280 [ 417.301714][T11966] should_fail+0x8b7/0x9e0 [ 417.306265][T11966] __should_failslab+0x1f6/0x290 [ 417.311341][T11966] should_failslab+0x29/0x70 [ 417.316045][T11966] __kmalloc+0xae/0x410 [ 417.320318][T11966] ? kmsan_get_metadata+0x116/0x180 [ 417.325630][T11966] ? tomoyo_realpath_from_path+0x15a/0xcb0 [ 417.331565][T11966] tomoyo_realpath_from_path+0x15a/0xcb0 [ 417.337335][T11966] tomoyo_path_number_perm+0x2a4/0xaf0 [ 417.342952][T11966] tomoyo_file_ioctl+0x74/0x90 [ 417.347833][T11966] ? tomoyo_inode_getattr+0x60/0x60 [ 417.353133][T11966] security_file_ioctl+0x10a/0x210 [ 417.358367][T11966] __se_compat_sys_ioctl+0x166/0x1100 [ 417.363870][T11966] ? kmsan_set_origin_checked+0x95/0xf0 [ 417.369537][T11966] ? kmsan_get_metadata+0x116/0x180 [ 417.374850][T11966] __ia32_compat_sys_ioctl+0x4a/0x70 [ 417.381056][T11966] __do_fast_syscall_32+0x2af/0x480 [ 417.386396][T11966] do_fast_syscall_32+0x6b/0xd0 [ 417.391383][T11966] do_SYSENTER_32+0x73/0x90 [ 417.396009][T11966] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 417.402420][T11966] RIP: 0023:0xf7f74549 [ 417.406546][T11966] Code: Bad RIP value. [ 417.410693][T11966] RSP: 002b:00000000f556e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 417.419222][T11966] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000400454ca [ 417.427273][T11966] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 417.435335][T11966] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 417.443387][T11966] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 417.451443][T11966] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 417.461158][T11966] ERROR: Out of memory at tomoyo_realpath_from_path. 23:17:30 executing program 5 (fault-call:1 fault-nth:1): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00', 0x20}) 23:17:30 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454c9, 0x0) 23:17:30 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00'}) 23:17:30 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d0, 0x0) 23:17:30 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x1, 0x0) ioctl(r4, 0x8916, &(0x7f0000000000)) ioctl(r4, 0x8936, &(0x7f0000000000)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x20, r6, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xc, 0x11d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8}, @NL80211_BAND_60GHZ={0x4, 0xd}]}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_WME={0x3c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x40}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xec}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7f}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000000) r7 = socket(0xa, 0x1, 0x0) ioctl(r7, 0x8916, &(0x7f0000000000)) ioctl(r7, 0x8936, &(0x7f0000000000)) getsockopt$netrom_NETROM_N2(r7, 0x103, 0x3, &(0x7f0000000040)=0x4, &(0x7f00000000c0)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f0000000000)={0x2, 0x7}) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) 23:17:30 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'ip6tnl0\x00', 0x1}) ioctl$TUNSETSTEERINGEBPF(r1, 0x400454d1, 0x0) pkey_alloc(0x0, 0x0) r2 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x0, r2) r3 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x0, r3) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000009, r3) 23:17:30 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00'}) 23:17:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fcntl$dupfd(r1, 0x0, r0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = fcntl$dupfd(r4, 0x0, r3) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000040)=r6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r7, 0x400454d1, 0x0) [ 418.042808][T11983] FAULT_INJECTION: forcing a failure. [ 418.042808][T11983] name failslab, interval 1, probability 0, space 0, times 0 [ 418.056195][T11983] CPU: 1 PID: 11983 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 418.064940][T11983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 418.075312][T11983] Call Trace: [ 418.078721][T11983] dump_stack+0x21c/0x280 [ 418.083165][T11983] should_fail+0x8b7/0x9e0 [ 418.087700][T11983] __should_failslab+0x1f6/0x290 23:17:30 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454c9, 0x0) 23:17:30 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d0, 0x0) [ 418.092760][T11983] should_failslab+0x29/0x70 [ 418.097502][T11983] __kmalloc+0xae/0x410 [ 418.101772][T11983] ? kmsan_get_metadata+0x116/0x180 [ 418.107084][T11983] ? tomoyo_encode2+0x5b1/0xab0 [ 418.112052][T11983] tomoyo_encode2+0x5b1/0xab0 [ 418.116876][T11983] tomoyo_realpath_from_path+0xba0/0xcb0 [ 418.122642][T11983] tomoyo_path_number_perm+0x2a4/0xaf0 [ 418.128264][T11983] tomoyo_file_ioctl+0x74/0x90 [ 418.133144][T11983] ? tomoyo_inode_getattr+0x60/0x60 [ 418.138447][T11983] security_file_ioctl+0x10a/0x210 [ 418.143678][T11983] __se_compat_sys_ioctl+0x166/0x1100 [ 418.149169][T11983] ? kmsan_set_origin_checked+0x95/0xf0 [ 418.154825][T11983] ? kmsan_get_metadata+0x116/0x180 [ 418.160129][T11983] __ia32_compat_sys_ioctl+0x4a/0x70 [ 418.165527][T11983] __do_fast_syscall_32+0x2af/0x480 [ 418.170827][T11983] do_fast_syscall_32+0x6b/0xd0 [ 418.175753][T11983] do_SYSENTER_32+0x73/0x90 [ 418.180325][T11983] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 418.186695][T11983] RIP: 0023:0xf7f74549 [ 418.190809][T11983] Code: Bad RIP value. [ 418.194914][T11983] RSP: 002b:00000000f556e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 418.203398][T11983] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000400454ca [ 418.211414][T11983] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 418.219433][T11983] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 418.227445][T11983] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 418.235475][T11983] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 23:17:31 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x200, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) [ 418.243761][T11983] ERROR: Out of memory at tomoyo_realpath_from_path. 23:17:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) [ 418.837042][ T8711] Bluetooth: hci5: command 0x0409 tx timeout 23:17:32 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00', 0x20}) 23:17:32 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x400454d0, 0x0) 23:17:32 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8916, &(0x7f0000000000)) ioctl(r1, 0x8936, &(0x7f0000000000)) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x50b5b5da20af11cb}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x713}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x810) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) 23:17:32 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x14800, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_PPC_ALLOCATE_HTAB(r3, 0xc004aea7, &(0x7f0000000000)=0xd8a) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r5 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x9, 0x20002) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000100)={0xb0}, 0x1) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = fcntl$dupfd(r7, 0x0, r6) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/sysvipc/msg\x00', 0x0, 0x0) mq_timedsend(r8, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_EPOCH_SET(r8, 0x4004700e, 0x1) 23:17:32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454c9, 0x0) 23:17:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) 23:17:32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454c9, 0x0) 23:17:32 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x400454d0, 0x0) 23:17:32 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8916, &(0x7f0000000000)) ioctl(r1, 0x8936, &(0x7f0000000000)) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000040)) 23:17:32 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x200902, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x4000}) 23:17:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) 23:17:32 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x2, &(0x7f0000000000)={'ip6gre0\x00', 0x20}) 23:17:33 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454c9, 0x0) 23:17:33 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) prctl$PR_GET_FP_MODE(0x2e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCGRAWINFO(r3, 0x80084803, &(0x7f0000000040)=""/48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x38}, 0x8) 23:17:33 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0cc5640, &(0x7f0000000200)={0x3, @win={{0x7f, 0x1, 0xffffffff, 0x7fffffff}, 0x9, 0x5, &(0x7f0000000140)={{0x8001, 0x3ff, 0x4, 0x8}, &(0x7f0000000100)={{0x0, 0x1ff, 0x7, 0x1}, &(0x7f0000000040)={{0xa1, 0x0, 0x1, 0x2}}}}, 0x1000, &(0x7f0000000180)="c1cd13b6b0206c35902efad7a321946df885ca61943031591f064317728c41e66ca3b1ecc2dcae1ce322783735136477655eafb46c0a32d8e27e0356209fc3f7dbcb58f9eaa1c70e597337e34a6f553657e42354c3d8d7cff9af3c29", 0x40}}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) r4 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) flistxattr(r4, &(0x7f0000000300)=""/4096, 0x1000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = fcntl$dupfd(r6, 0x0, r5) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mq_timedsend(r8, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r8, 0x5402, &(0x7f0000001300)={0x80000000, 0x7ff, 0x6, 0x8, 0x11, "7ad6c5b5c6384b269463c59a6d5b2f6dfc6d42"}) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) ioctl$KDGKBMETA(r7, 0x4b62, &(0x7f0000000000)) 23:17:33 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x400454d0, 0x0) 23:17:33 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x32, 0x99, 0x48, 0x40, 0x557, 0x2002, 0x9427, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xda, 0xb2, 0x22}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:17:33 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x10, &(0x7f0000000000)={'ip6gre0\x00', 0x20}) 23:17:33 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454c9, 0x0) [ 420.941378][ T17] Bluetooth: hci5: command 0x041b tx timeout 23:17:34 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socket(0x5, 0x4, 0xba) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dummy0\x00', 0x8000}) 23:17:34 executing program 4: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000f80)=ANY=[@ANYBLOB="1201a80011f79e08070ada00458f000000010902240001000000000904120002c750dc000905810b0500000e0009050103"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) [ 421.280110][ T8710] usb 3-1: new high-speed USB device number 2 using dummy_hcd 23:17:34 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x4b47, &(0x7f0000000000)={'ip6gre0\x00', 0x20}) 23:17:34 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8916, &(0x7f0000000000)) ioctl(r1, 0x8936, &(0x7f0000000000)) r2 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r2, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r2, 0x1) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000040)={r4}, 0x14) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000100)={r4, @in6={{0xa, 0x4e21, 0x2, @mcast2, 0x8}}, 0x401, 0x1, 0x40, 0x8, 0xb8, 0x3, 0x9}, &(0x7f0000000000)=0x9c) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) 23:17:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454c9, 0x0) [ 421.647126][ T8710] usb 3-1: New USB device found, idVendor=0557, idProduct=2002, bcdDevice=94.27 [ 421.656709][ T8710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.804621][ T8710] usb 3-1: config 0 descriptor?? 23:17:34 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x120, r1, 0x100, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x165cc1, 0x0) r3 = accept4$llc(r0, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000002c0)=0x10, 0x40c00) ioctl$FS_IOC_SETVERSION(r3, 0x40047602, &(0x7f0000000300)=0x8) ioctl$TUNSETSTEERINGEBPF(r2, 0x541b, 0x0) 23:17:34 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x4b49, &(0x7f0000000000)={'ip6gre0\x00', 0x20}) [ 422.065692][ T8710] kaweth 3-1:0.0: Firmware present in device. [ 422.087719][ T17] usb 5-1: new high-speed USB device number 2 using dummy_hcd 23:17:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x400454c9, 0x0) [ 422.267634][ T8710] kaweth 3-1:0.0: Statistics collection: 0 [ 422.273682][ T8710] kaweth 3-1:0.0: Multicast filter limit: 0 [ 422.280068][ T8710] kaweth 3-1:0.0: MTU: 0 [ 422.284536][ T8710] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 23:17:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fcntl$dupfd(r1, 0x0, r0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) openat$cgroup_freezer_state(r2, &(0x7f0000000000)='freezer.state\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(r3, 0x400454d1, 0x0) [ 422.355008][ T17] usb 5-1: Using ep0 maxpacket: 8 [ 422.488804][ T8710] kaweth: probe of 3-1:0.0 failed with error -5 [ 422.506243][ T17] usb 5-1: config 0 has an invalid interface number: 18 but max is 0 [ 422.514693][ T17] usb 5-1: config 0 has no interface number 0 [ 422.521122][ T17] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.532399][ T17] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 422.543520][ T17] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 422.553630][ T17] usb 5-1: New USB device found, idVendor=0a07, idProduct=00da, bcdDevice=8f.45 [ 422.562911][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.565567][ T8710] usb 3-1: USB disconnect, device number 2 [ 422.971976][ T17] usb 5-1: config 0 descriptor?? [ 422.986051][ T8711] Bluetooth: hci5: command 0x040f tx timeout [ 423.066663][ T17] adutux 5-1:0.18: ADU218 now attached to /dev/usb/adutux0 [ 423.265461][ T8708] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 423.424483][ T3226] usb 5-1: USB disconnect, device number 2 [ 423.639560][ T8708] usb 3-1: New USB device found, idVendor=0557, idProduct=2002, bcdDevice=94.27 [ 423.648950][ T8708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.699699][ T8708] usb 3-1: config 0 descriptor?? [ 423.978663][ T8708] kaweth 3-1:0.0: Firmware present in device. 23:17:36 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x32, 0x99, 0x48, 0x40, 0x557, 0x2002, 0x9427, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xda, 0xb2, 0x22}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:17:36 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x541b, &(0x7f0000000000)={'ip6gre0\x00', 0x20}) 23:17:36 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000b, 0x110, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000000)=0x3, 0x0, 0x4) ioctl$TUNSETSTEERINGEBPF(r1, 0x541b, 0x0) 23:17:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x400454c9, 0x0) [ 424.085518][ T8708] kaweth 3-1:0.0: Error reading configuration (-71), no net device created [ 424.094553][ T8708] kaweth: probe of 3-1:0.0 failed with error -5 [ 424.166754][ T8708] usb 3-1: USB disconnect, device number 3 [ 424.225132][ T8710] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 424.465827][ T8710] usb 5-1: Using ep0 maxpacket: 8 [ 424.586577][ T8710] usb 5-1: config 0 has an invalid interface number: 18 but max is 0 [ 424.594929][ T8710] usb 5-1: config 0 has no interface number 0 [ 424.601103][ T8710] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.612820][ T8710] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 424.624050][ T8710] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 424.634177][ T8710] usb 5-1: New USB device found, idVendor=0a07, idProduct=00da, bcdDevice=8f.45 [ 424.643566][ T8710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.674416][ T8710] usb 5-1: config 0 descriptor?? [ 424.724471][ T8710] adutux 5-1:0.18: ADU218 now attached to /dev/usb/adutux0 23:17:37 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xec, 0x2e, 0x1, 0x8, 0x1d19, 0x1104, 0x5ef7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf, 0xa5, 0x3c}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001200)={0x2c, &(0x7f0000001580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x87, 0x2}, 0x0}) 23:17:37 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x5, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = openat$autofs(0xffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x460800, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000140)) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) lsetxattr$security_evm(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.evm\x00', &(0x7f0000000200)=@sha1={0x1, "7779ad40120965cee0b459cfcb5c0f83cfdf5c64"}, 0x15, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = fcntl$dupfd(r3, 0x0, r2) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f0000000040)) 23:17:37 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x80000, 0x3d41) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000002c0)=ANY=[@ANYRES64], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@remote, 0x0, r2}) r4 = inotify_init1(0x80000) finit_module(r4, &(0x7f0000000100)='\xddf\xad', 0x3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r6}, 0x8) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0xc) openat$ttyS3(0xffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x2000, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) r7 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r7, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="e8"], 0x1) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xffffffffffffffde) getpeername$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @remote}, &(0x7f0000000240)=0x10) 23:17:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x400454c9, 0x0) 23:17:37 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x5421, &(0x7f0000000000)={'ip6gre0\x00', 0x20}) [ 424.776269][ T8708] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 424.805900][ T8710] usb 5-1: USB disconnect, device number 3 [ 425.074967][ T17] Bluetooth: hci5: command 0x0419 tx timeout [ 425.180122][ T8708] usb 3-1: New USB device found, idVendor=0557, idProduct=2002, bcdDevice=94.27 [ 425.189480][ T8708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 23:17:38 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x5450, &(0x7f0000000000)={'ip6gre0\x00', 0x20}) [ 425.289360][ T8708] usb 3-1: config 0 descriptor?? 23:17:38 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0xf705, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, &(0x7f00000003c0)={0x14, &(0x7f0000000280)={0x20, 0x0, 0x71, {0x71, 0x0, "fab0ed35cc397d30e59f53a5c2a1b722bbd0bb58287e27f83a65f0358980ee6fad35185712066ee5c3d256ffb818ec5d3b979c2f299a9cfdcc114c309e297723cd4d6b2a567ec2d38511a18755582433f4f8303ec24e6ce02bff66976df9239f3aa9807adc8200a0c6b8c22cb8fdb7"}}, 0x0}, 0x0) [ 425.566710][ T8708] kaweth 3-1:0.0: Firmware present in device. [ 425.573937][T12146] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 425.786163][ T8708] kaweth 3-1:0.0: Statistics collection: 0 [ 425.792445][ T8708] kaweth 3-1:0.0: Multicast filter limit: 0 [ 425.798717][ T8708] kaweth 3-1:0.0: MTU: 0 [ 425.803234][ T8708] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 23:17:38 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x10b00, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x420000015001}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xd00, 0x80) ioctl$TUNSETSTEERINGEBPF(r1, 0x400454d1, 0x0) [ 425.855854][T12146] usb 5-1: Using ep0 maxpacket: 8 [ 425.980892][T12146] usb 5-1: New USB device found, idVendor=1d19, idProduct=1104, bcdDevice=5e.f7 [ 425.990263][T12146] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.000511][ T8708] kaweth: probe of 3-1:0.0 failed with error -5 [ 426.024840][ T8708] usb 3-1: USB disconnect, device number 4 [ 426.060161][T12146] usb 5-1: config 0 descriptor?? [ 426.175012][ T3226] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 426.335442][T12146] usb 5-1: dvb_usb_v2: found a 'MSI DIGIVOX Micro HD' in warm state 23:17:39 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x32, 0x99, 0x48, 0x40, 0x557, 0x2002, 0x9427, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xda, 0xb2, 0x22}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:17:39 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x5451, &(0x7f0000000000)={'ip6gre0\x00', 0x20}) 23:17:39 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCCONS(r3, 0x541d) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) [ 426.588926][ T3226] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.600061][ T3226] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.610212][ T3226] usb 4-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.40 [ 426.619543][ T3226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.709061][ T3226] usb 4-1: config 0 descriptor?? 23:17:39 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x5452, &(0x7f0000000000)={'ip6gre0\x00', 0x20}) [ 427.105846][ T3226] usbhid 4-1:0.0: can't add hid device: -71 [ 427.112169][ T3226] usbhid: probe of 4-1:0.0 failed with error -71 [ 427.159652][ T3226] usb 4-1: USB disconnect, device number 2 [ 427.314792][ T17] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 427.696557][ T17] usb 3-1: New USB device found, idVendor=0557, idProduct=2002, bcdDevice=94.27 [ 427.705934][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.751059][ T17] usb 3-1: config 0 descriptor?? [ 427.785845][ T3226] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 428.035857][ T17] kaweth 3-1:0.0: Firmware present in device. [ 428.157322][ T3226] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.168763][ T3226] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.178933][ T3226] usb 4-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.40 [ 428.188337][ T3226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.235669][T12146] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 428.246512][ T17] kaweth 3-1:0.0: Statistics collection: 0 [ 428.252759][ T17] kaweth 3-1:0.0: Multicast filter limit: 0 [ 428.259008][ T17] kaweth 3-1:0.0: MTU: 0 [ 428.263482][ T17] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 428.280093][T12146] usb 5-1: USB disconnect, device number 4 [ 428.338575][ T3226] usb 4-1: config 0 descriptor?? [ 428.456000][ T17] kaweth: probe of 3-1:0.0 failed with error -5 [ 428.482354][ T17] usb 3-1: USB disconnect, device number 5 [ 428.808820][ T3226] acrux 0003:1A34:F705.0001: unknown main item tag 0x7 [ 428.816192][ T3226] acrux 0003:1A34:F705.0001: item fetching failed at offset 2/5 [ 428.824434][ T3226] acrux 0003:1A34:F705.0001: parse failed [ 428.831235][ T3226] acrux: probe of 0003:1A34:F705.0001 failed with error -22 [ 428.915629][T12146] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 429.009197][ T3226] usb 4-1: USB disconnect, device number 3 [ 429.165201][T12146] usb 5-1: Using ep0 maxpacket: 8 [ 429.285690][T12146] usb 5-1: New USB device found, idVendor=1d19, idProduct=1104, bcdDevice=5e.f7 [ 429.295058][T12146] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.320260][T12146] usb 5-1: config 0 descriptor?? 23:17:42 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0x22, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x22, {0x4b, 0x0, "eb2b20da341f5b2aae21c107b91850b0b1600ab5c5b31fc6c16e3d012890917f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x4805, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x1, 0x0, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x400c4808, &(0x7f0000000040)) ioctl$HIDIOCSREPORT(r2, 0x400c4808, 0x0) 23:17:42 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x406, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, &(0x7f0000000180)={0x657d96469b717243, 0x0, 0x3, r2, 0x0, &(0x7f0000000140)={0xa2093e, 0xefff, [], @string=&(0x7f0000000100)=0x39}}) r5 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r5, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r5, 0x1) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000013c0)=@assoc_value={0x0}, &(0x7f0000001400)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000040)={r6}, 0x14) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f00000001c0)={r6, 0x9, 0x10, 0xf3fe}, &(0x7f0000000200)=0x18) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) mq_timedsend(r4, &(0x7f0000000240)="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", 0x1000, 0x2, &(0x7f0000001280)={r7, r8+60000000}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000000c0)={0x7ff, 0x3ff}) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015002}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)='trusted.overlay.opaque\x00', &(0x7f0000001340)='y\x00', 0x2, 0x3) 23:17:42 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x5460, &(0x7f0000000000)={'ip6gre0\x00', 0x20}) 23:17:42 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x32, 0x99, 0x48, 0x40, 0x557, 0x2002, 0x9427, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xda, 0xb2, 0x22}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:17:42 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8916, &(0x7f0000000000)) ioctl(r1, 0x8936, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) r4 = socket(0xa, 0x1, 0x0) ioctl(r4, 0x8916, &(0x7f0000000000)) ioctl(r4, 0x0, &(0x7f00000000c0)) r5 = socket(0xa, 0x1, 0x0) ioctl(r5, 0x8916, &(0x7f0000000000)) ioctl(r5, 0x8936, &(0x7f0000000000)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xb8, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffffffff7fff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x10}, 0xe791d59d23a6ba03) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x1000}) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) [ 429.595296][T12146] dvb_usb_rtl28xxu 5-1:0.0: chip type detection failed -71 [ 429.603487][T12146] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 429.703211][T12146] usb 5-1: USB disconnect, device number 5 [ 429.885631][ T9910] usb 4-1: new high-speed USB device number 4 using dummy_hcd 23:17:42 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x20}) [ 430.095181][ T3226] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 430.255954][ T9910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.267299][ T9910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.277423][ T9910] usb 4-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.40 [ 430.286778][ T9910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.374699][T12146] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 430.419370][ T9910] usb 4-1: config 0 descriptor?? 23:17:43 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0xf705, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, &(0x7f00000003c0)={0x14, &(0x7f0000000280)={0x20, 0x0, 0x71, {0x71, 0x0, "fab0ed35cc397d30e59f53a5c2a1b722bbd0bb58287e27f83a65f0358980ee6fad35185712066ee5c3d256ffb818ec5d3b979c2f299a9cfdcc114c309e297723cd4d6b2a567ec2d38511a18755582433f4f8303ec24e6ce02bff66976df9239f3aa9807adc8200a0c6b8c22cb8fdb7"}}, 0x0}, 0x0) 23:17:43 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4004550c, &(0x7f0000000000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'veth1_to_batadv\x00', 0x2}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f0000000040)=""/8) 23:17:43 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x541b, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r3, 0xc0385720, &(0x7f0000000000)={0x1}) 23:17:43 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x894c, &(0x7f0000000000)={'ip6gre0\x00', 0x20}) [ 430.475769][ T9910] usb 4-1: can't set config #0, error -71 [ 430.496459][ T3226] usb 3-1: New USB device found, idVendor=0557, idProduct=2002, bcdDevice=94.27 [ 430.505835][ T3226] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.517526][ T9910] usb 4-1: USB disconnect, device number 4 [ 430.553423][ T3226] usb 3-1: config 0 descriptor?? [ 430.778232][T12146] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.789391][T12146] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.800186][T12146] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 430.809558][T12146] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.846598][ T3226] kaweth 3-1:0.0: Firmware present in device. 23:17:43 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fcntl$dupfd(r1, 0x0, r0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) signalfd(r0, &(0x7f0000000000)={[0x2907, 0x8000]}, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = fcntl$dupfd(r4, 0x0, r3) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r5, 0x541b, 0x0) 23:17:43 executing program 0: r0 = getpid() pidfd_open(r0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/mcfilter6\x00') ioctl$CAPI_CLR_FLAGS(r1, 0x80044325, &(0x7f0000000040)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = fcntl$dupfd(r4, 0x0, r3) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSBRK(r5, 0x5427) ioctl$TUNSETSTEERINGEBPF(r2, 0x400454d1, 0x0) [ 431.051961][T12146] usb 5-1: config 0 descriptor?? [ 431.084863][ T3226] kaweth 3-1:0.0: Statistics collection: 0 [ 431.090997][ T3226] kaweth 3-1:0.0: Multicast filter limit: 0 [ 431.097611][ T3226] kaweth 3-1:0.0: MTU: 0 [ 431.102070][ T3226] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 431.194845][ T12] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 431.315490][ T3226] kaweth: probe of 3-1:0.0 failed with error -5 [ 431.348319][ T3226] usb 3-1: USB disconnect, device number 6 [ 431.535749][T12146] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0002/input/input5 [ 431.556645][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.568214][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.578433][ T12] usb 4-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.40 [ 431.587980][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.609654][T12146] cm6533_jd 0003:0D8C:0022.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 431.668933][ T12] usb 4-1: config 0 descriptor?? [ 431.800648][T12331] ===================================================== [ 431.807668][T12331] BUG: KMSAN: kernel-usb-infoleak in kmsan_handle_urb+0x28/0x40 [ 431.815318][T12331] CPU: 0 PID: 12331 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 431.823993][T12331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 431.834142][T12331] Call Trace: [ 431.837459][T12331] dump_stack+0x21c/0x280 [ 431.841815][T12331] kmsan_report+0xf7/0x1e0 [ 431.846258][T12331] kmsan_internal_check_memory+0x358/0x3d0 [ 431.852085][T12331] ? __ia32_compat_sys_ioctl+0x4a/0x70 [ 431.857569][T12331] ? __do_fast_syscall_32+0x2af/0x480 [ 431.862956][T12331] ? do_fast_syscall_32+0x6b/0xd0 [ 431.867996][T12331] ? do_SYSENTER_32+0x73/0x90 [ 431.872693][T12331] ? kfree+0xaf8/0x3000 [ 431.876885][T12331] kmsan_handle_urb+0x28/0x40 [ 431.881650][T12331] usb_submit_urb+0x861/0x2470 [ 431.886473][T12331] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 431.892308][T12331] ? kmsan_set_origin_checked+0x95/0xf0 [ 431.898034][T12331] hid_submit_ctrl+0xc3d/0x1260 [ 431.902919][T12331] usbhid_restart_ctrl_queue+0x3e9/0x5c0 [ 431.908592][T12331] usbhid_submit_report+0xa63/0x13a0 [ 431.913935][T12331] usbhid_init_reports+0x231/0x5e0 [ 431.919076][T12331] hiddev_ioctl+0x1157/0x3a60 [ 431.923792][T12331] ? kmsan_get_metadata+0x116/0x180 [ 431.929026][T12331] ? hiddev_poll+0x390/0x390 [ 431.933635][T12331] compat_ptr_ioctl+0xe2/0x150 [ 431.938421][T12331] ? __ia32_sys_ioctl+0x70/0x70 [ 431.943285][T12331] __se_compat_sys_ioctl+0x55f/0x1100 [ 431.948684][T12331] ? kmsan_get_metadata+0x116/0x180 [ 431.953878][T12331] __ia32_compat_sys_ioctl+0x4a/0x70 [ 431.959155][T12331] __do_fast_syscall_32+0x2af/0x480 [ 431.964354][T12331] do_fast_syscall_32+0x6b/0xd0 [ 431.969222][T12331] do_SYSENTER_32+0x73/0x90 [ 431.973730][T12331] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 431.980051][T12331] RIP: 0023:0xf7f76549 [ 431.984101][T12331] Code: Bad RIP value. [ 431.988152][T12331] RSP: 002b:00000000f55700cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 431.996555][T12331] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000004805 [ 432.004512][T12331] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 432.012558][T12331] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 432.020525][T12331] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 432.028496][T12331] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 432.036468][T12331] [ 432.038781][T12331] Uninit was created at: [ 432.043018][T12331] kmsan_internal_poison_shadow+0x66/0xd0 [ 432.048725][T12331] kmsan_slab_alloc+0x8a/0xe0 [ 432.053389][T12331] __kmalloc+0x312/0x410 [ 432.057620][T12331] hcd_buffer_alloc+0x279/0x650 [ 432.062463][T12331] usb_alloc_coherent+0x11a/0x190 [ 432.067479][T12331] usbhid_start+0x1125/0x3fa0 [ 432.072212][T12331] hid_hw_start+0xa6/0x2a0 [ 432.076658][T12331] cmhid_probe+0x260/0x440 [ 432.081065][T12331] hid_device_probe+0x480/0x940 [ 432.085978][T12331] really_probe+0xe46/0x20b0 [ 432.090561][T12331] driver_probe_device+0x293/0x390 [ 432.095666][T12331] __device_attach_driver+0x63f/0x830 [ 432.101029][T12331] bus_for_each_drv+0x2ca/0x3f0 [ 432.105867][T12331] __device_attach+0x4e2/0x7f0 [ 432.110618][T12331] device_initial_probe+0x4a/0x60 [ 432.115628][T12331] bus_probe_device+0x177/0x3d0 [ 432.120470][T12331] device_add+0x3b0e/0x40d0 [ 432.124962][T12331] hid_add_device+0x15fc/0x1760 [ 432.129797][T12331] usbhid_probe+0x187f/0x1b90 [ 432.134479][T12331] usb_probe_interface+0xece/0x1550 [ 432.139754][T12331] really_probe+0xf20/0x20b0 [ 432.144332][T12331] driver_probe_device+0x293/0x390 [ 432.149432][T12331] __device_attach_driver+0x63f/0x830 [ 432.154790][T12331] bus_for_each_drv+0x2ca/0x3f0 [ 432.159626][T12331] __device_attach+0x4e2/0x7f0 [ 432.164399][T12331] device_initial_probe+0x4a/0x60 [ 432.169419][T12331] bus_probe_device+0x177/0x3d0 [ 432.174261][T12331] device_add+0x3b0e/0x40d0 [ 432.178760][T12331] usb_set_configuration+0x380f/0x3f10 [ 432.184207][T12331] usb_generic_driver_probe+0x138/0x300 [ 432.189743][T12331] usb_probe_device+0x311/0x490 [ 432.194583][T12331] really_probe+0xf20/0x20b0 [ 432.199163][T12331] driver_probe_device+0x293/0x390 [ 432.204265][T12331] __device_attach_driver+0x63f/0x830 [ 432.209624][T12331] bus_for_each_drv+0x2ca/0x3f0 [ 432.214465][T12331] __device_attach+0x4e2/0x7f0 [ 432.219219][T12331] device_initial_probe+0x4a/0x60 [ 432.224232][T12331] bus_probe_device+0x177/0x3d0 [ 432.229072][T12331] device_add+0x3b0e/0x40d0 [ 432.233572][T12331] usb_new_device+0x1bd4/0x2a30 [ 432.238410][T12331] hub_event+0x5e7b/0x8a70 [ 432.242889][T12331] process_one_work+0x1688/0x2140 [ 432.247914][T12331] worker_thread+0x10bc/0x2730 [ 432.252662][T12331] kthread+0x551/0x590 [ 432.256719][T12331] ret_from_fork+0x1f/0x30 [ 432.261111][T12331] [ 432.263429][T12331] Bytes 0-8191 of 8192 are uninitialized [ 432.269042][T12331] Memory access of size 8192 starts at ffff88801ef48000 [ 432.275953][T12331] ===================================================== [ 432.282867][T12331] Disabling lock debugging due to kernel taint [ 432.289005][T12331] Kernel panic - not syncing: panic_on_warn set ... [ 432.295588][T12331] CPU: 0 PID: 12331 Comm: syz-executor.4 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 432.305627][T12331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 432.315665][T12331] Call Trace: [ 432.318951][T12331] dump_stack+0x21c/0x280 [ 432.323333][T12331] panic+0x4d7/0xef7 [ 432.327235][T12331] ? add_taint+0x17c/0x210 [ 432.331649][T12331] kmsan_report+0x1df/0x1e0 [ 432.336151][T12331] kmsan_internal_check_memory+0x358/0x3d0 [ 432.341948][T12331] ? __ia32_compat_sys_ioctl+0x4a/0x70 [ 432.347397][T12331] ? __do_fast_syscall_32+0x2af/0x480 [ 432.352764][T12331] ? do_fast_syscall_32+0x6b/0xd0 [ 432.357777][T12331] ? do_SYSENTER_32+0x73/0x90 [ 432.363574][T12331] ? kfree+0xaf8/0x3000 [ 432.367723][T12331] kmsan_handle_urb+0x28/0x40 [ 432.372391][T12331] usb_submit_urb+0x861/0x2470 [ 432.377146][T12331] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 432.382947][T12331] ? kmsan_set_origin_checked+0x95/0xf0 [ 432.388493][T12331] hid_submit_ctrl+0xc3d/0x1260 [ 432.393348][T12331] usbhid_restart_ctrl_queue+0x3e9/0x5c0 [ 432.398978][T12331] usbhid_submit_report+0xa63/0x13a0 [ 432.404275][T12331] usbhid_init_reports+0x231/0x5e0 [ 432.409381][T12331] hiddev_ioctl+0x1157/0x3a60 [ 432.414062][T12331] ? kmsan_get_metadata+0x116/0x180 [ 432.419251][T12331] ? hiddev_poll+0x390/0x390 [ 432.423830][T12331] compat_ptr_ioctl+0xe2/0x150 [ 432.428586][T12331] ? __ia32_sys_ioctl+0x70/0x70 [ 432.433431][T12331] __se_compat_sys_ioctl+0x55f/0x1100 [ 432.438802][T12331] ? kmsan_get_metadata+0x116/0x180 [ 432.444018][T12331] __ia32_compat_sys_ioctl+0x4a/0x70 [ 432.449295][T12331] __do_fast_syscall_32+0x2af/0x480 [ 432.454491][T12331] do_fast_syscall_32+0x6b/0xd0 [ 432.459417][T12331] do_SYSENTER_32+0x73/0x90 [ 432.463916][T12331] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 432.470230][T12331] RIP: 0023:0xf7f76549 [ 432.474280][T12331] Code: Bad RIP value. [ 432.478333][T12331] RSP: 002b:00000000f55700cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 432.486743][T12331] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000004805 [ 432.494702][T12331] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 432.502661][T12331] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 432.510617][T12331] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 432.518589][T12331] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 432.527982][T12331] Kernel Offset: disabled [ 432.532303][T12331] Rebooting in 86400 seconds..