last executing test programs: 5.929878686s ago: executing program 1 (id=1162): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='cgroup.controllers\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'gre0\x00', &(0x7f0000000600)={'gretap0\x00', 0x0, 0x20, 0xdc2a5a4117599bd4, 0x4, 0x8001, {{0x27, 0x4, 0x2, 0x1a, 0x9c, 0x65, 0x0, 0x7, 0x29, 0x0, @empty, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x82, [@loopback, @local]}, @end, @noop, @lsrr={0x83, 0x1b, 0x2c, [@local, @loopback, @dev={0xac, 0x14, 0x14, 0x41}, @remote, @private=0xa010101, @remote]}, @rr={0x7, 0x13, 0xb7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2, @broadcast]}, @timestamp={0x44, 0x20, 0xbb, 0x0, 0x2, [0x5, 0xfffffc01, 0x7f, 0x2, 0xffff7fff, 0x5, 0xff]}, @lsrr={0x83, 0x2b, 0xa0, [@broadcast, @private=0xa010100, @multicast2, @local, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x13}, @empty, @rand_addr=0x64010102, @remote]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'syztnl2\x00', r1, 0x2f, 0x2, 0x2, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}, @local, 0x7800, 0x40, 0x9b, 0x9}}) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000000)={0x10, 0x4, 0x80000000000, 0x3, 0x0, 0x0, 0x0, 0x8f}, 0x0, 0x0, 0x0, 0x0) close(r4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f00000000c0)=0x3, 0x4) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/59, 0x232000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000180)=0x40, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) bind$xdp(r6, &(0x7f00000001c0)={0x2c, 0x0, r8, 0x11}, 0x10) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x4, [@enum={0x8, 0x1, 0x0, 0x6, 0x4, [{0x8, 0x496}]}, @union={0xd, 0x3, 0x0, 0x5, 0x1, 0x435b, [{0x7, 0x5, 0xb6}, {0x0, 0x4}, {0xb, 0x5, 0x4}]}, @restrict={0x7, 0x0, 0x0, 0xb, 0x3}, @float={0x6, 0x0, 0x0, 0x10, 0x4}, @var={0xd, 0x0, 0x0, 0xe, 0x4, 0x2}]}, {0x0, [0x5f, 0x0]}}, &(0x7f0000000340)=""/129, 0x88, 0x81, 0x1, 0x3, 0x0, @void, @value}, 0x28) r10 = socket$packet(0x11, 0x2, 0x300) pselect6(0x40, &(0x7f00000007c0)={0x3, 0x9, 0x7fff, 0xffff, 0x2b, 0x1ff, 0x6, 0x401}, &(0x7f0000000800)={0x2, 0x6, 0x80f, 0x3, 0xbb, 0x3, 0x6, 0x7f}, &(0x7f0000000840)={0x2, 0x0, 0x4, 0x1, 0x5, 0x0, 0x101, 0xff}, &(0x7f0000000880)={0x0, 0x3938700}, &(0x7f0000000900)={&(0x7f00000008c0)={[0x5]}, 0x8}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) poll(&(0x7f0000000000)=[{r10, 0xa404}, {r11, 0x21}], 0x2, 0xfffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x12, &(0x7f00000001c0)=@raw=[@map_idx={0x18, 0x9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @ldst={0x0, 0x3, 0x3, 0xb, 0xb, 0x10, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x0, 0x2, 0x6, 0x3, 0x2, 0x1, 0xffffffffffffffff}], &(0x7f0000000080)='syzkaller\x00', 0xbd8, 0xe, &(0x7f0000000100)=""/14, 0x41100, 0x20, '\x00', r8, @fallback=0x14, r9, 0x8, &(0x7f0000000440)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0x7, 0x503, 0xbaf}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)=[r3, r3, r3, r4, r4, r11, r4, r3], 0x0, 0x10, 0x5, @void, @value}, 0x94) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)={0x14, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 5.123856287s ago: executing program 2 (id=1176): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1, 0x0, {0x256b5c06d61fe660, 0x1, 0x5}}, 0x18, &(0x7f0000000180)={&(0x7f00000003c0)="925bb68c5eb20f1248", 0x9}, 0x1, 0x0, 0x0, 0xb9fb632c8619d8b9}, 0xee) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000004000000000000000201801000020786c3500000000002020207b1af8ff00000000bfa10000000000000701000094ffffffb702000008000000b703000000000020850000002d000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r6, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) sendfile(r6, r7, 0x0, 0xffffffff000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711212000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r9, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r11, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r12, 0x84, 0x10, 0x0, &(0x7f0000000800)) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f8008000140000000000800034000000000080002"], 0x88}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r11, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x50}, 0x2c004000) 4.937327852s ago: executing program 1 (id=1178): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x6}, 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)='J', 0x1}], 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$inet_dccp(0x2, 0x6, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000380)=' ', 0x1, 0x20008801, &(0x7f0000000100)={0x11, 0x88a8, r7, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x14) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f00"/55], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000214010028bd7000fddbdf250900020073797a3100000000080001000000000008004400", @ANYBLOB="050054000100b2ac08000100000000000900020073"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) ioctl$FS_IOC_GETFSLABEL(r9, 0x81009431, &(0x7f0000000180)) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x0, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBPORT={0x5, 0x3}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x40030000000000}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001d00)={0x34, r2, 0x1, 0x70bd2d, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xe}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xeb}, @NL80211_ATTR_BSS_BASIC_RATES={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x0) 4.066574134s ago: executing program 2 (id=1185): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, @void, @value}, 0x28) unshare(0x40020000) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rcu_utilization\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000100)='b', 0x1, 0x0, &(0x7f00000005c0)={0xa, 0x0, 0x8000000, @dev={0xfe, 0x80, '\x00', 0x4}, 0x15}, 0x25) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x5, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="080000020001000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff00"/21], 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, [@NDA_VLAN={0x6}]}, 0x24}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$kcm(0x2, 0x1, 0x84) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[], 0x41) 3.898321078s ago: executing program 1 (id=1188): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000344000480240001800b040100736f636b6574000014000280080002400000000308000140000000011c0001800a00010071756575650000000c00028006003a3f000300000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x98}}, 0x0) 3.707410676s ago: executing program 1 (id=1190): r0 = getpid() bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60122d"], 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) unshare(0x20000400) r3 = socket(0x1d, 0x2, 0x6) bind$rds(r3, &(0x7f0000000680)={0x2, 0x4, @local}, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007500000004"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x491, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000200), 0x4) r9 = socket(0x10, 0x3, 0x0) sendmmsg$inet(r2, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="17d1fb768ce7f94f62ff070d0c8d9b8b64a72dc3a2baf40129a1d51637f1fc0c4e139a699b18b4b1c807b53f8cc94f1e0bd61572d25f12a5c419fe4224860089ff4da82291329980bc349ce7d7451f2e65fd56162ecccf37be2fdd0f818657a3edc19eb762e9b6fd4486d3c7b22ac84834f866792998ccdd591fd99c7e5030654641c4218cc437a0e6b592929a6ca101f59fc8e78b6ac3959adde96f938a31d8ef246780b1", 0xa5}], 0x1, &(0x7f0000000540)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x59099b62}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8d}}, @ip_retopts={{0x94, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0xe9, 0x0, 0x0, [0x4, 0xf, 0x3ff]}, @timestamp_addr={0x44, 0x34, 0xf0, 0x1, 0x2, [{@rand_addr=0x64010102, 0x8000}, {@local}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x40}, {@local, 0x562d}, {@rand_addr=0x64010102, 0xfffffff7}, {@local, 0xc58d}]}, @generic={0x82, 0xd, "a7431079697059711d2956"}, @lsrr={0x83, 0x13, 0x87, [@multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x39}, @loopback]}, @timestamp_addr={0x44, 0x1c, 0x72, 0x1, 0x0, [{@empty, 0xb6c2}, {@loopback, 0x3c1}, {@broadcast}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0xd4, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x3c, 0x1b, 0x3, 0xc, [{@rand_addr=0x64010100, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@rand_addr=0x64010102, 0x6}, {@remote, 0x616}, {@dev={0xac, 0x14, 0x14, 0x39}, 0xfffffffe}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x6}, {@rand_addr=0x64010101, 0x10001}]}, @ssrr={0x89, 0x2b, 0x7f, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @cipso={0x86, 0x18, 0x3, [{0x2, 0xa, "643d3b0cd0bec664"}, {0x2, 0x8, "93291da70d7c"}]}, @end, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0xb4, 0x3, 0x3, [{@local, 0x2}, {@rand_addr=0x64010100, 0x5}, {@empty, 0xffffffff}]}, @timestamp_addr={0x44, 0x24, 0xd4, 0x1, 0x6, [{@loopback, 0x800}, {@broadcast, 0xe83}, {@local, 0x2}, {@local, 0x4}]}]}}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@rr={0x7, 0xf, 0x58, [@rand_addr=0x64010101, @remote, @remote]}, @ssrr={0x89, 0x1f, 0xb4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast2, @multicast2, @multicast1, @private=0xa010102]}, @generic={0x44, 0xc, "e55b19e35aa92822764e"}, @end]}}}], 0x240}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)="140a75c23a7597d2848690252fff13438b05d111743bbc84f18d23e7b29bc51cfbeec0a94613dbe4ca37ea899f7b5a171863fac47813871655bc8648bbc6a0ed302c9e662ab1fb3400f2fb5124f9f443107c918b45b86c90806e2da6be747e6011116386c3026ab4563123f69e52a5b864ca61887cd0b63eb1492198f38e2d7471287ed56fc31f2db13bdcd13de7410bdbad0a860013118bb209f155736660072906120c9efe4d9f05add3adf3f2fc159d662d79d07d27f6f04e7eba8fe7743336", 0xc1}], 0x1}}, {{&(0x7f00000008c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000c80)=[{&(0x7f0000000900)="6c1d981ccf705171ed10e207ff99b711e0d6b9a4b29c936fddf5c1baccdca69fa1af72507cb73bdcf071a13e7e2b3c706d754e9c6a15018af60df282b012c5e7d18120887d9827f60715ef6cd3670298a1157e0f09d83f148f40dbf5d68927b928a616c8a702caad104bb412900ba63453da", 0x72}, {&(0x7f0000000980)="86d4b2bd4a846664c22762f911767b0b7ebf07625e0b2c0b4108360775c955d37dfcc4dc907ba1abe6b4d52e1c585557df39bd164f32a85d0791afb4a68c99092c79f8205f65a6b240a892b1ac354f943527d29c6014c1f94a7a6a2883bb86a951120ecfb7475241a7261e7a0750b33b274d7a4ae2f781b04b2db9f16e3a0b2cb94aa5", 0x83}, {&(0x7f0000000a40)="09f5997ca28711045dcbeab15bfe0168bf5f5a6a2e808c014917ee633b31bb4cdfc0c3b244bb7c1c46d4294a5038735217b16993efedac1ef6c1694ad519a3ef5bff861e88f134bbc6cee7159eb427aa5460a022366fd8e83181c9239dde4bef387dc517575ab02f555543a90a58419568d3d99b120f824ca4eb19320a4c527d6e479af1024e36346e51a6fd233c970c9dbb13843c6c6fd4b0f1a251438ef2833a2c1e84943cd9863e918f01ed5200772e3c7102b0c4efc59f6933c403f501d9d124b81eaa13ae6b05ad91", 0xcb}, {&(0x7f0000000b40)="a7a7206d532dd8be501360008f6a27c498b138bbee8e8be7ba0f003e16e2937dfc5d06c7c008372fdd8d14b5a6dca4ab6ed895d45503928352f6b6dbe3f8fbeed411bf98220dedca06e77320eb176296dad3a6a6a16646db8a13015d287915442310bf4520cadb4bce88ba4522c850fe0c20450aae7e31551b26ef74e85f3a23975d7e4374b954caf250c4efc7666d89774d845856128e5407f4b8a1d23a10aec153eed135d6f82e1455e1f2e9b3860019fb6244", 0xb4}, {&(0x7f0000000c00)="c182d2c95c26f6227bee91fb9a840b5e779cd39f835330f4302f1abdaf80fb56bd8df75249189859587d5f56a22fb726a9bbe89016d0a4912e2df54db7", 0x3d}, {&(0x7f0000000c40)}], 0x6, &(0x7f0000000d00)=[@ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @empty}}}, @ip_retopts={{0x84, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0xf1, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xe}]}, @ssrr={0x89, 0x17, 0xf4, [@multicast1, @multicast2, @multicast2, @multicast1, @local]}, @timestamp_addr={0x44, 0x44, 0xb3, 0x1, 0x4, [{@broadcast, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xce4}, {@rand_addr=0x64010100, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x8}, {@loopback, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0xfffffbb7}, {@multicast2, 0x401}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @lsrr={0x83, 0xb, 0xbb, [@private=0xa010100, @empty]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc}}, @ip_retopts={{0xe4, 0x0, 0x7, {[@rr={0x7, 0x27, 0xd0, [@broadcast, @dev={0xac, 0x14, 0x14, 0x22}, @rand_addr=0x64010102, @local, @rand_addr=0x64010100, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast1]}, @ra={0x94, 0x4}, @generic={0x89, 0xa, "d12196bfe5bdc130"}, @timestamp_addr={0x44, 0x2c, 0xba, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private=0xa010101, 0x9573}, {@remote, 0xffffffff}, {@multicast1, 0x6}, {@empty, 0x1}]}, @timestamp={0x44, 0x24, 0xa5, 0x0, 0x9, [0x7, 0x1b, 0x9, 0x2, 0x1e89, 0x7, 0x5, 0xc7e]}, @timestamp_addr={0x44, 0x2c, 0x80, 0x1, 0x7, [{@local, 0x1}, {@empty, 0x1}, {@remote, 0x9}, {@remote, 0x6}, {@private=0xa010102, 0x1}]}, @rr={0x7, 0x17, 0x44, [@private=0xa010101, @multicast1, @private=0xa010100, @multicast2, @multicast2]}, @generic={0x83, 0xa, "dcd170600b71225f"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @rand_addr=0x64010102}}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@noop, @lsrr={0x83, 0x1f, 0x7b, [@multicast1, @dev={0xac, 0x14, 0x14, 0x33}, @broadcast, @multicast2, @private=0xa010101, @local, @local]}, @timestamp_prespec={0x44, 0x3c, 0xed, 0x3, 0x8, [{@loopback, 0x580}, {@remote, 0xfffffda5}, {@rand_addr=0x8, 0x668f}, {@local}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x3d9}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x3}, {@rand_addr=0x7, 0x5}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x2a0}}, {{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000fc0)="ce0f7c13a192efb59731fb5ccba8f8716064b2b6f770e1a8f618e22699668e51aa03b73d3bb10a83a8f9108b77478459461fc6d838721fff95e3d2304a5a1085113f045fd6e5efbc721e284d97a66ce3343a3bdf93", 0x55}, {&(0x7f0000001040)="75bccd202b438eb321199980b33490a10914fe0518210da6bfc70b7715086c55d981e881476e635f31a0bc427817e9e2be0d15e3609421af912a76248578e0d59a1769b80ca14eb424d6663913207aa140fc7d3126aff7d24f045ce0bd525a14b7fbf4b6be6ce61f513c6d4ec6362644c0546ddc959acead0a945614bf48cd60333444bc954b6a6410bfe3a3f634c95df6acd61777057306286e8f130a576b28a495d4101245857acf8a0b5d5072bf123c83f6902ab4a97ba1262037e24eb1ef50094809eb5681f780853def02cb", 0xce}, {&(0x7f0000001140)="a5b630ac6594", 0x6}, {&(0x7f0000001180)="cc5ae23b5ea31e87a18708731c4cdf5a5b7ca1289696d1c3652d0f41255a6d6650b43fb84836ea524c012e71971d71eb6355397a9f2e8491d3f5a59452d9d9a0d46ac02f6e41bb5f9212be97128777a145d74a994408142cf7", 0x59}, {&(0x7f0000001200)}], 0x5, &(0x7f0000001380)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}, @ip_retopts={{0x40, 0x0, 0x7, {[@generic={0x44, 0xb, "b5080816d26b11f4ed"}, @lsrr={0x83, 0x17, 0x7c, [@local, @local, @remote, @local, @multicast2]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x50, [@broadcast]}, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffc}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0xd8}}], 0x4, 0x4004000) sendmsg$nl_route(r9, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) 3.033713443s ago: executing program 3 (id=1191): r0 = getpid() bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60122d"], 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) unshare(0x20000400) r3 = socket(0x1d, 0x2, 0x6) bind$rds(r3, &(0x7f0000000680)={0x2, 0x4, @local}, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007500000004"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x491, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000200), 0x4) r9 = socket(0x10, 0x3, 0x0) sendmmsg$inet(r2, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="17d1fb768ce7f94f62ff070d0c8d9b8b64a72dc3a2baf40129a1d51637f1fc0c4e139a699b18b4b1c807b53f8cc94f1e0bd61572d25f12a5c419fe4224860089ff4da82291329980bc349ce7d7451f2e65fd56162ecccf37be2fdd0f818657a3edc19eb762e9b6fd4486d3c7b22ac84834f866792998ccdd591fd99c7e5030654641c4218cc437a0e6b592929a6ca101f59fc8e78b6ac3959adde96f938a31d8ef246780b1", 0xa5}], 0x1, &(0x7f0000000540)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x59099b62}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8d}}, @ip_retopts={{0x94, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0xe9, 0x0, 0x0, [0x4, 0xf, 0x3ff]}, @timestamp_addr={0x44, 0x34, 0xf0, 0x1, 0x2, [{@rand_addr=0x64010102, 0x8000}, {@local}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x40}, {@local, 0x562d}, {@rand_addr=0x64010102, 0xfffffff7}, {@local, 0xc58d}]}, @generic={0x82, 0xd, "a7431079697059711d2956"}, @lsrr={0x83, 0x13, 0x87, [@multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x39}, @loopback]}, @timestamp_addr={0x44, 0x1c, 0x72, 0x1, 0x0, [{@empty, 0xb6c2}, {@loopback, 0x3c1}, {@broadcast}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0xd4, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x3c, 0x1b, 0x3, 0xc, [{@rand_addr=0x64010100, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@rand_addr=0x64010102, 0x6}, {@remote, 0x616}, {@dev={0xac, 0x14, 0x14, 0x39}, 0xfffffffe}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x6}, {@rand_addr=0x64010101, 0x10001}]}, @ssrr={0x89, 0x2b, 0x7f, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @cipso={0x86, 0x18, 0x3, [{0x2, 0xa, "643d3b0cd0bec664"}, {0x2, 0x8, "93291da70d7c"}]}, @end, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0xb4, 0x3, 0x3, [{@local, 0x2}, {@rand_addr=0x64010100, 0x5}, {@empty, 0xffffffff}]}, @timestamp_addr={0x44, 0x24, 0xd4, 0x1, 0x6, [{@loopback, 0x800}, {@broadcast, 0xe83}, {@local, 0x2}, {@local, 0x4}]}]}}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@rr={0x7, 0xf, 0x58, [@rand_addr=0x64010101, @remote, @remote]}, @ssrr={0x89, 0x1f, 0xb4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast2, @multicast2, @multicast1, @private=0xa010102]}, @generic={0x44, 0xc, "e55b19e35aa92822764e"}, @end]}}}], 0x240}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)="140a75c23a7597d2848690252fff13438b05d111743bbc84f18d23e7b29bc51cfbeec0a94613dbe4ca37ea899f7b5a171863fac47813871655bc8648bbc6a0ed302c9e662ab1fb3400f2fb5124f9f443107c918b45b86c90806e2da6be747e6011116386c3026ab4563123f69e52a5b864ca61887cd0b63eb1492198f38e2d7471287ed56fc31f2db13bdcd13de7410bdbad0a860013118bb209f155736660072906120c9efe4d9f05add3adf3f2fc159d662d79d07d27f6f04e7eba8fe7743336", 0xc1}], 0x1}}, {{&(0x7f00000008c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000c80)=[{&(0x7f0000000900)="6c1d981ccf705171ed10e207ff99b711e0d6b9a4b29c936fddf5c1baccdca69fa1af72507cb73bdcf071a13e7e2b3c706d754e9c6a15018af60df282b012c5e7d18120887d9827f60715ef6cd3670298a1157e0f09d83f148f40dbf5d68927b928a616c8a702caad104bb412900ba63453da", 0x72}, {&(0x7f0000000980)="86d4b2bd4a846664c22762f911767b0b7ebf07625e0b2c0b4108360775c955d37dfcc4dc907ba1abe6b4d52e1c585557df39bd164f32a85d0791afb4a68c99092c79f8205f65a6b240a892b1ac354f943527d29c6014c1f94a7a6a2883bb86a951120ecfb7475241a7261e7a0750b33b274d7a4ae2f781b04b2db9f16e3a0b2cb94aa5", 0x83}, {&(0x7f0000000a40)="09f5997ca28711045dcbeab15bfe0168bf5f5a6a2e808c014917ee633b31bb4cdfc0c3b244bb7c1c46d4294a5038735217b16993efedac1ef6c1694ad519a3ef5bff861e88f134bbc6cee7159eb427aa5460a022366fd8e83181c9239dde4bef387dc517575ab02f555543a90a58419568d3d99b120f824ca4eb19320a4c527d6e479af1024e36346e51a6fd233c970c9dbb13843c6c6fd4b0f1a251438ef2833a2c1e84943cd9863e918f01ed5200772e3c7102b0c4efc59f6933c403f501d9d124b81eaa13ae6b05ad91", 0xcb}, {&(0x7f0000000b40)="a7a7206d532dd8be501360008f6a27c498b138bbee8e8be7ba0f003e16e2937dfc5d06c7c008372fdd8d14b5a6dca4ab6ed895d45503928352f6b6dbe3f8fbeed411bf98220dedca06e77320eb176296dad3a6a6a16646db8a13015d287915442310bf4520cadb4bce88ba4522c850fe0c20450aae7e31551b26ef74e85f3a23975d7e4374b954caf250c4efc7666d89774d845856128e5407f4b8a1d23a10aec153eed135d6f82e1455e1f2e9b3860019fb6244", 0xb4}, {&(0x7f0000000c00)="c182d2c95c26f6227bee91fb9a840b5e779cd39f835330f4302f1abdaf80fb56bd8df75249189859587d5f56a22fb726a9bbe89016d0a4912e2df54db7", 0x3d}, {0x0}], 0x6, &(0x7f0000000d00)=[@ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @empty}}}, @ip_retopts={{0x84, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0xf1, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xe}]}, @ssrr={0x89, 0x17, 0xf4, [@multicast1, @multicast2, @multicast2, @multicast1, @local]}, @timestamp_addr={0x44, 0x44, 0xb3, 0x1, 0x4, [{@broadcast, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xce4}, {@rand_addr=0x64010100, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x8}, {@loopback, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0xfffffbb7}, {@multicast2, 0x401}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @lsrr={0x83, 0xb, 0xbb, [@private=0xa010100, @empty]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc}}, @ip_retopts={{0xe4, 0x0, 0x7, {[@rr={0x7, 0x27, 0xd0, [@broadcast, @dev={0xac, 0x14, 0x14, 0x22}, @rand_addr=0x64010102, @local, @rand_addr=0x64010100, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast1]}, @ra={0x94, 0x4}, @generic={0x89, 0xa, "d12196bfe5bdc130"}, @timestamp_addr={0x44, 0x2c, 0xba, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private=0xa010101, 0x9573}, {@remote, 0xffffffff}, {@multicast1, 0x6}, {@empty, 0x1}]}, @timestamp={0x44, 0x24, 0xa5, 0x0, 0x9, [0x7, 0x1b, 0x9, 0x2, 0x1e89, 0x7, 0x5, 0xc7e]}, @timestamp_addr={0x44, 0x2c, 0x80, 0x1, 0x7, [{@local, 0x1}, {@empty, 0x1}, {@remote, 0x9}, {@remote, 0x6}, {@private=0xa010102, 0x1}]}, @rr={0x7, 0x17, 0x44, [@private=0xa010101, @multicast1, @private=0xa010100, @multicast2, @multicast2]}, @generic={0x83, 0xa, "dcd170600b71225f"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @rand_addr=0x64010102}}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@noop, @lsrr={0x83, 0x1f, 0x7b, [@multicast1, @dev={0xac, 0x14, 0x14, 0x33}, @broadcast, @multicast2, @private=0xa010101, @local, @local]}, @timestamp_prespec={0x44, 0x3c, 0xed, 0x3, 0x8, [{@loopback, 0x580}, {@remote, 0xfffffda5}, {@rand_addr=0x8, 0x668f}, {@local}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x3d9}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x3}, {@rand_addr=0x7, 0x5}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x2a0}}, {{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000fc0)="ce0f7c13a192efb59731fb5ccba8f8716064b2b6f770e1a8f618e22699668e51aa03b73d3bb10a83a8f9108b77478459461fc6d838721fff95e3d2304a5a1085113f045fd6e5efbc721e284d97a66ce3343a3bdf93", 0x55}, {&(0x7f0000001040)="75bccd202b438eb321199980b33490a10914fe0518210da6bfc70b7715086c55d981e881476e635f31a0bc427817e9e2be0d15e3609421af912a76248578e0d59a1769b80ca14eb424d6663913207aa140fc7d3126aff7d24f045ce0bd525a14b7fbf4b6be6ce61f513c6d4ec6362644c0546ddc959acead0a945614bf48cd60333444bc954b6a6410bfe3a3f634c95df6acd61777057306286e8f130a576b28a495d4101245857acf8a0b5d5072bf123c83f6902ab4a97ba1262037e24eb1ef50094809eb5681f780853def02cb", 0xce}, {&(0x7f0000001140)="a5b630ac6594", 0x6}, {&(0x7f0000001180)="cc5ae23b5ea31e87a18708731c4cdf5a5b7ca1289696d1c3652d0f41255a6d6650b43fb84836ea524c012e71971d71eb6355397a9f2e8491d3f5a59452d9d9a0d46ac02f6e41bb5f9212be97128777a145d74a994408142cf7", 0x59}, {&(0x7f0000001200)}], 0x5, &(0x7f0000001380)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}, @ip_retopts={{0x40, 0x0, 0x7, {[@generic={0x44, 0xb, "b5080816d26b11f4ed"}, @lsrr={0x83, 0x17, 0x7c, [@local, @local, @remote, @local, @multicast2]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x50, [@broadcast]}, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffc}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0xd8}}], 0x4, 0x4004000) sendmsg$nl_route(r9, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) 2.897472314s ago: executing program 2 (id=1193): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0x6f, "e2161643085e39dcfcb7cc02c0b0442097c75139e4de9b18d32028e6dfbf87690cc0f77d6d5e0b4e47fd2df8c0095100f3f913abb53e02203e1850cb3df7f678e3af9bbab81918765016e56c461194f801b5d48c435c1aa230e4f92b269f76b93f43d404b3e2adf22c05d19b4d8dcf"}, &(0x7f00000000c0)=0x77) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) socket$isdn(0x22, 0x3, 0x26) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x11, r6, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x700000c, 0x6e073, 0xffffffffffffffff, 0x2000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7000fcdbdf256a00000008000300", @ANYRES32=r9, @ANYBLOB="0ca8"], 0xfffffffffffffd46}, 0x1, 0x0, 0x0, 0x4040}, 0x840) 2.650155549s ago: executing program 4 (id=1195): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000208000a40000000000900020073797a31000000000900010073797a300003000008000540000000213000118008000100636d7000240002801000038009000100357c8b80ae00000008000240000000010800014000000002140000001000010000000000000000000084000ae3a2b25fdb4e6cbc7d16d42778"], 0xb4}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000300)='neigh_update\x00', r2}, 0x18) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @multicast2}, {0x0, @link_local}, 0x0, {0x2, 0x0, @multicast1}, 'team_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) socket$can_j1939(0x1d, 0x2, 0x7) 2.548590427s ago: executing program 2 (id=1197): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) pwrite64(r0, &(0x7f0000000000)="e7030014000816112ee73cfe11f0102b510b2e73fce8a190dd2958d5", 0xfffffffffffffe34, 0x8001) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, 0x0, 0x2000c000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000580)=[@in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000180)=0x10) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000001c0)={0x1}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r4, @in6={{0xa, 0x4e22, 0x400, @empty, 0x4}}, 0xf, 0x4926, 0x10, 0x7, 0x82, 0x5, 0xdb}, &(0x7f0000000040)=0x9c) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}]}]}]}], {0x14, 0x10}}, 0xe8}}, 0x800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd", 0x16}, {&(0x7f0000000140)="9c74c3ab6a5fdfbf", 0x8}], 0x2) 2.377965595s ago: executing program 4 (id=1199): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xfffb, 0x4}, {}, {0x1c, 0x19}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1c, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xfff2}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x50}}, 0x24000000) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, 0x1c) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES64=r3, @ANYRES8=r3], 0x50}}, 0x200c08ca) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r6 = accept4$alg(r0, 0x0, 0x0, 0x800) r7 = socket(0xa, 0x3, 0x3a) getsockopt$nfc_llcp(r7, 0x3a, 0x1, 0x0, 0x20000000) read$alg(r6, &(0x7f0000000600)=""/208, 0xd0) bind$bt_l2cap(r5, 0x0, 0x0) (async) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x89fb, &(0x7f0000000900)={'bond0\x00', @random="0600002000"}) (async) unshare(0x68040200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) (async) socket$alg(0x26, 0x5, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x440001, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) 2.304296284s ago: executing program 1 (id=1200): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000013c0)={r0, 0x0, 0x1000, 0x9d, &(0x7f0000000140)="60b03b1d7d5ec2b8cf030938206797dcfe0271ba7ee88f23d1a7c758bb1688893f3214fddb5f2e39e37b66408f181a48aaa29bdc56c51a77bc560d26140612dc81b60400a6043331caf76bc43408412f664e114954e59bf151fdc159def9d6a21c9f8090091e2666f3773b82351d19f154df3ca75ba0c81dab5714a7b6d8fb3d8115128c164e30f21473616538d01ba31b0478b0c69c3d011a5199cc63ab6b80dc008bea6234537b6dcbd7e8ea36c8ebb72bc332c35b11a9ba61ada41fcb768a619bc832d6113accf9e8d1f65868af2a1833dc75f8f2c325e5f3424bed1b83f33d0ea0fbae8ece084250cd328368279a60224722e629ca2717e51cca1d008fb5e8dff848b20a70485438ec9f0cff28645a6567e40319e7515b9d69cca9df91e59a14f57713468c320ffa92b352933a425591514717c5301f6a3ba345959de95c484c65a518ea4a83bda0e7a092f7293cedb73731bec702e22e0a625fec57b367fb0b2836dcc53e98723af62897c5e661ef24e4c2a30c0445436e43a5059ae70951ca5bfeaf55e4a7c400321acb6e3e84e18526496d495414c3beb36837f9d8d42836f826cd0bb118309faf4158c4b02f33b4be0eef4296cdda8ef6518d546796d8b1f798ea4cedc0e84ce18a012b5b0759cfda0a9df80925d14af6722aac170b19fe7f2e9885232eb6bdbd118d6e9d1963238aac9000a08665f44864bea738390b52bad8598144a3ff1244ac4d626e0a8721386f0269610b78ecadb835ad41dece3fb5eb42bb55499c9046b142dfd81f79d7a4ee1426f5460847aae34bcac022574b811dbe8c036427bffc56caae8a449ebf1e56306dbeeabb4f898de4cadd89ed28d4b4908180d1e6374382c78434b1696cc5a71f6ce9103f3a93b23e1f4e26940322bf22d146e7c1aaafd2be1fe391abeca6b2c4c9cca0fed2274621dd4bc03be685cc4ea07a1f0b2e82e77179293e223a7f4c0b69fd0216f1f98e3a2f66cccfb445c72d16a8894415112b6fa745bb7515595238b26a9918fcf49763fd68dc1d6c5cf159cdea1d9933b02e434650330f92af46cad6863d80508921bcf8ef791aee0eede1e47c0e523ddc339b8693ef65cf847d346b2bff05acb76378c3edcfa54f540e813d365bf34ae30520e5d75912aab4aedd05e13b3cdfdb33ccc5d3162d19d2537de22f3896d5792e4c726521459f6d684689b41a4a448a1a575a6473239708d160a0b51322a8ef968d0c2e37ef540cd8ce77d2db6e4f03ec625869cec65fe4d9eeab9ef90ad1eee5457862a3b8e54a3a8553f1b02364ef456fa87c2cdd1091bf9d0e4c8a41e572ba3e4a1a3978721744935083a92a6d8e6f3f24e1244a4b705b1249016f3d0c199154219155f1b377e8d3315becf888bb16c656b19685d11408a71d592f9a4a16bf06a281496243b6c93aaee2aedb4c9ce8281b1a786908b87c527ceeb7dd3092e2e56d27232ed8fdfd2f77b2569d498e6a87021c6ca15c676eca212c134ce737b88ed3cb479f8059f2068b6308a5e9bc0db238f0f15892d84c34003498f8faf068a269df3639b8c663541e69952cde3a37d584ac7173ff78c7e98b2cb32d8ff0d77dc564eb955b070b3ac1ac2effd0612443cfebfd77a43f4e9423c06f6cb40046cc3b77e3a66a4ef800e4f1a741b5b539b0069bb9ef3a0309c688b8196f20bbbaf3faec1aebfc67c12c5cf808daca7356841bd407614d27a8c613226ae06df055f373d64a9110f390c7fc5a41aad0be57b1a3482559147399ba19191c97a75a7936aae85c832b83d8d273bd5701c190389d5262bc2fe710046ab5ceeedc5e340d61525a3db3e955c3e54f7f05a8d6becd114c3af6d8739f2b14d801f66cae75fe12ccbe9281faaea02134ba440f417f9ab5f6b0e8b3fb71b3bff1a8fc3b5618ff54026c008307d8a323ba3eb5e8821bad6191e3fa2547a5a747d02cbbd20812d5be69741240f87cac33158b3260e4f2689b6a950a3ae96a8848711ca078e2d6820a1b29fea82c531c54755efd4e47e8cd0c9f52a5fd78becbda301c887cbae302ac1527e0595da34a927ba3025df93a1214576d0fb1f3cdc762e26f1bb1c9610163b353c35c6e25f51f99ef90b9e45a53ad5c419caa76eae13b66f6651398b604d01346010ba44ef9ecacca3c8187ecca21b2d6c66d14ea20e61efdff3d747cce82b88bda2e472ca455ee5ef85c6bcd73314277a5882444680de7bebc11c26712eea2a12baa4f5c735c6fc5f97f27c43b55c3634363960356bd7b63558e2600863c3640122c6ac4ac62a29f8448d73e411b6f7bd6093b842a1f12721be57a64001a88b411d22345d41ffa26c904617399d8dbd5156ea76747ce5f28d81a979d813c66b1348a94db7014ab79c28a34f088bbfa0c81918078871d890d57f73eaf8b37ebd68b5ec3dc12ea44c54866b6f2b98658879be0d1258cd5bf2ed1914ed0b7d87843026bb8ff08890f106eeb12eea4d04fb0ca689bbdba19e0085b45ba2a268f2540e807f86eeac52d0d371ac8d2660a6bcd363b0ead1582a4c5395d3c41e0c40ecdc2c3d4d6177ddf26d8cab1ca01ea56bfed2756eff3b877583f664dc0c0e6078d09b57bb40c646728698dd01a19b537c8fa401de9178c768c5ca0d9a1fae63d1fe66fe66ed5ca7bd365171f5e9ed99ff370fa3c6f2f6230907ce27ce4a09376ac2fbf5eff6a799e171bf1a447754c547f8c85724e59ac20f19378795f8566966d56101d47887b89a338199a315277ec4e652ffc479b62bca7b519a234448b27fb8f896a249c425b3ff6d912eb101c1ae5fcd3036b24e217ff9751788cb122fa6bc7945d7d58a261f28eb684b76c216e837decd641477aa6af8950c295f8c0f94d58f6bbb8123078dd56a32e8836c6e1cb3d60c5c4491ae2b58af2fdca7e7c324c2693de58409026a72232974f5538321d7eb6919c39f9ecfad7a12bb22eb43d191b5b4d4b0f8ca8081223c0a06e1d28a4387f9f5def735bcc3b0143d4ea2dfc38d39f8e16d6c356b30de38da3c3adbd048dfb5a0755f4c87a10d993eee156647a22b827e1c41dc128ece7aff016e30a1b355304c60d51385b28dd59b63618ee8029dce2e5abc9721970bb3cb5b448c9d9d0ec14740504dfde315e1a206e89b8fe7bcff4a9aa3e0141f08d58e44fb307fd04cb0d9444aeb47624713d130699d12cb81f18d78a1e09e104f9c412648df710da6ffba44bb7ca390c255305f3d2d2a30d11c84655f2f46939be404a50f3cc7bded96f43d59c3ed0d59552b9bf229c6d29013cd8ae8ddf2a1c40e5b651d704cd2df7b86b2e00bff73971034f28ce7b348937b59a25480a5ae6ea8fd0837d640781b7180865f094044dcc4ee630945d10ab31ee89231d8092e704d4aadf56fa3274e24ca4997a88901049246d68d17a7fc861d17184341ba044c2a494d8371651a278a81a993c75008e3aa86fd61e7113d0b107102b757aa2e8f9f7726c6ee0e9c147c5fa712155ceba495c379cf268af49b75bea3e80d744f551bdb8f90d7c28f9b83e230bdace7d236d72f978c56036bc63cb770ee2c5cf68c8b9b3605b195eb22a6e7284ab0f9d597e584a78fbfb4e20f7b78420d45b0253a757a67de02138d30a5964a9129aa982dcf385d577ee5c0449fd0b8530db34a9e88163d6da0899402d6c60bbc58d777c95cd96d84c42cb618a75110d8ff24eaebe2870719651f9215f79fc14ccf894aaa87f88907dcbbcfd3d6f2a38deceeba77c5584ac12609a7171f537a405d20a84e4cf522711a321c6533a8d35bf22abc3a8997aa69aeff93659fd0b6b702ff3417075d248155132adefc3b7a6414487244eda168cffc2a9936f0ef7838642b5a42ccde2a068a6b488505e9bbdc8d563b247ed1fe45af7f5aaa3bfb0de06fae71e883f9e0f5e879ee020990341cd02bb65d35e88dc82e19589c12ad8c9473eedadc17fefcc4edc433a950f193bf6c47f5896340d9241d5cb3b346cbc88ffb28c606dc7c52f36df9c07c7b403a2aa538b37dbc04238dd75f32712de41b93aa700a5e7fb87fda706c0b85904f77ec4a7927041a73223d05c1c3b5d2fc0c8d8c9ff7401c31c4244395f0aeaa6cfef08353252ebf3cf7b5cf8aa956d8044c676aea380f93514a7497f899bae49a4c58430ef4b699a20292bdfd0197fbe688df4b65c1dc7f7c14921cf7830ebf3235476cb16ded140f850ad1cd3e9c5f829a83a46925472350babea0f6eda81f93214041929ba78d7ad399b9b1b96d5f4f7164658e5acd7b556f15ed9bf577c1443e5faa73faac21d17d625b02a16893a333fb7cd91f50d4334a74d96b14691d1554d43ea26e7a534eb5ead389d8aff8f813b91c57ec9b5cdd000fbf11e83971faa3c5f44a8de1e26c1d3ab5ed85446ebc0de712877f9a9d4380898133257f28aed247e0a0fc95e9b5be31605b9eb26cb89a28e620011c98b202d1f1f7d14f2e14f9523da1da6cba741fc637c0d6a644e4fe28ab2b80e4570c9476ab9fdf393780675a2ab578b015d0befafe2bfb6080e046a53fbad841800736d6cf7405a8f90ccf87f42641a463768579a1af1d7aae808ef4d0a75bf5d5ad1761b691a1058f030077625ed0ea9f6e21d0b8480e0d0b99e38e70f9e0e89cafebedcbd626ed16229b639f21b8d45525bf0e0570f1955887fb415ede9af1f94662d27575d1ada41e075843ef1e0d024d0336af72a21558955dc90f98e52b588d5540561c0ede99b4c4a10f477c6b6d5b22af7f09cc14248fdb1374762301dbc35205b4a3ff8ed4a2d8de02d8e4a5732b0bbe92e9df381cb5334626cb8d1484e67aabf59404efa400780660dba9645d61e6202ea5bb280af6a4f48b03b8a6e91d677dc0083d41e68f1fa3516e993cf88a9a6bc5ee00fd1d431401ca2513f87885ab3f5709b19bbff8dc911e66cef2b4b2444c989329e8a5059a4c27fb766de6279ad91fa25db7e7ad710247f5d61b32dd52e6ec6ff87919db7a7b519a5e743be9d2b9c94202e2a747e2269d65a08a8aaf42a9eacd6e12d3aef1e6d9510e285079b7dc05888fb0d78dcf57f2bcbbbf017e5134afa41231203e91bbb16936316dbcfba43d9d2ab1b879e5af6b9b4062a62c170f020f896e2e1b293a2f5a14f7b0dc61104b74819d6862df75876f1244e35925ad18561c9332089e45a72229b8d8cd9fe529b742ec5d719971f89535d0634ac14e35de440dd7c7b9845e5d66f6316d61a53216ef2d12becca94f08e59b1306582d6b454cac0de466322ad0f9267079142baefb5d39abef8b04b2c6bafdae36c71b9ae5bc2e445a21b2b11f7357b4c784363479d2580d9e57d7edf25820d1f5fdd299e648a2acd5c62c2dc8da3d27c7540e76cb99200971259530da5a7444fad4d0e5c4b283d2fded21e165a73081c176121df076672f9336f61d2af5619ee5e3598b13033e315682a00f5eb2915c18e017d640b9a14430b5f41a8243d5af8f9da3ec4b9a264b9c0856994c73dd128219d2d538ec9f80b97eb86be83e7a1d7fea66814d19da1563a43e5422610b9b462bab22e9f3b0a13960e224c53f3c05dc044f57cbcc9b81ab3a991addb08e5db89b176a44acedb2ac68b8dbdac8d441641ce0bf0e2b03acfdc2312f621ac15e650c0cd16ad4214ed6b2790b1f767c518c37b7057e2369eeef35b1d03fdb4fe428e2bcbf9fd5603ebc50929e6a73d0b99ae7b2ebef91ed5ea292e2dba6a9414e4973bddad7383f31cc79178ac705c2b7b23329ec77c8b6631d82ffca44d2c309f02a3bdaa750728cbf8efb88a0686be2d61e1ea547d91", &(0x7f0000001140)=""/157, 0x7, 0x0, 0x93, 0xe0, &(0x7f0000001200)="9bf02fbd8daeadba268da95d569e56ebeffdc77cec9d37cbeac179e68f68fcf823956f5ff2e316e3dc295cc39d70e8c553bf4a0434bb04e72a058096a109ee3c54befff10fde167e4cba6fb0fd16289fc8acb5f352b13ff32e5124b6b069cf8f18031dc828d8515674aa6345b3066ba74c7ad16f3a2caf8dbe69812e0d279a0a2746865309b93768c73599041b70e1a8412146", &(0x7f00000012c0)="639ed1c69ab34d85f49f161616e586a70db78512e4716104e9aa577188af39dad27e840befff550b53e2b4019c9cb1cb49c1b5bd1fbc131bc47a676df0327734613a7fea3f883ed764bdbedd21539b16495fe2245b6753270f9c10bc52186d5a4dcae72401b0c081d33770c428877afd6b9c481cd5149b46ad1971c58f9448b87c091ce96a3700291bcc2bd669810eec354a253dce1e8ed3b8aa4532f2bb873012f5b6fa40b737a68dff27749e516aa6b537578bd72fedbbf84d72ec702f24f2f47ea84cb05ada12d7b6a04611c08e67f54a536ff949f30a61c86a56c8d66a8d", 0x3, 0x0, 0x6}, 0x50) 2.12873623s ago: executing program 4 (id=1202): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[], 0x41) 1.990054747s ago: executing program 1 (id=1203): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000480)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8, {0xa}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x6, 0x7, 0xff4c, 0x9}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x70}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000000)={'nat\x00', 0x5, "7f699fcfbc"}, &(0x7f0000000100)=0x29) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) 1.954534321s ago: executing program 4 (id=1204): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000400)={0x7, 0x5, 0x4, 0x9, 0x2, 0xc, 0x2, 0x87, 0x80, 0x3, 0x40, 0x40, 0x4, 0xfd}, 0xe) close(r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x34, r5, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3da}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004800}, 0x80) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0xa, 0x5}, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, 0x0, 0x46, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r7 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001680)=@newchain={0x24, 0x64, 0x400, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0xffeb}, {0xd, 0xb}, {0x7, 0xfff1}}}, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x8}, {}, {0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_ACT={0x4}, @TCA_CGROUP_EMATCHES={0x2c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3, 0x3, 0x7}, {0xce10, 0xb, 0x5128, 0x4d}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x800}}]}]}}]}, 0x64}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113600000000008510000002000000850000004100000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 1.685465193s ago: executing program 2 (id=1205): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000003b00000003"], 0x48) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) readv(r2, &(0x7f0000000240)=[{&(0x7f0000000000)=""/81, 0x51}, {&(0x7f0000000080)=""/129, 0x81}, {&(0x7f00000001c0)=""/99, 0x63}, {&(0x7f0000000140)=""/42, 0x2a}], 0x4) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000001740)={r0, 0x0, 0x0}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r5, 0x331, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000100}, 0x4081) 1.582047288s ago: executing program 4 (id=1206): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000100)="8907040400", 0x5) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="08001eb3b04a8d42", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x6, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @map_idx={0x18, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x8}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2343, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'netpci0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x18, 0x2, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x17, 0xf, &(0x7f0000000300)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1c, '\x00', r6, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x8) r9 = accept4(r8, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x73, &(0x7f0000000200)={0x0, 0x5, 0x30, 0x4, 0x3}, &(0x7f0000000240)=0x18) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(0x0) syz_genetlink_get_family_id$tipc2(0x0, r1) 1.321513424s ago: executing program 0 (id=1208): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000008000000000000000000008500000041000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.244711315s ago: executing program 3 (id=1209): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x18000}], 0x11}}], 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$unix(r3, &(0x7f0000000240)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x1000000}, 0x6e, &(0x7f0000005e40)=[{&(0x7f0000006040)="0aa9037c", 0x4}, {0x0}], 0x2}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="70000000140009050000000000000000020100ff", @ANYRES32, @ANYBLOB="1400060006000000000000f0000000000000000008000200ac1414aa08000100ac1414aa080004007f00000108000400e0000002140006"], 0x70}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, 0x3c, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@nested={0x10, 0x136, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x8e\n'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) syz_emit_ethernet(0xaf, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaaaaab8faaaa81000167fbdd60f7d8ff00753c0020010000000000000000000000000000ff020000000000000000c910"], 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002580000000e0a01020000000000000040010000000900020073797a32000000001800038014000080100001800400028006000180000000000900010073797a30"], 0xc8}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)={0x98, r7, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x0, 0xc, 0x0, 0x1, [{0x0, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x0, 0x9, 0x1c775f02}, @NLBL_CIPSOV4_A_MLSCATREM={0x0, 0xa, 0x1167}, @NLBL_CIPSOV4_A_MLSCATREM={0x0, 0xa, 0x58d}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI]}, 0x98}, 0x1, 0x0, 0x0, 0x2004811}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r6) 1.139891554s ago: executing program 0 (id=1210): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @in={0x2, 0x0, @private=0xc0586300}, @in6={0xa, 0x0, 0x0, @private0}, @in={0x2, 0x4e20, @broadcast}], 0x58) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.097145135s ago: executing program 3 (id=1211): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000020000000000000000000071122800000000009500960000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1.072386559s ago: executing program 0 (id=1212): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x1, 0x0) vmsplice(r3, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000000000)="d1", 0x1, 0x24004000, &(0x7f0000000100)={0xa, 0x4e24, 0x7f, @remote, 0x5}, 0x1c) shutdown(r7, 0x1) write(r1, &(0x7f00000002c0)="8ef82f", 0x3) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x19, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x3, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea4680724809c20547406b18901b0aeff04c0300f3c75dc2d209003b89483b1002003475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200fec000000000000000000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="010004c40800000000002c"], 0x14}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r10, 0x6, 0x6, &(0x7f0000003d80)=0x6, 0x4) sendmsg$nl_generic(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x10) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000000), 0x4) 954.337518ms ago: executing program 3 (id=1213): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) (async) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) (async) sendmmsg$inet(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002640)="ef0ba6e0d60508dbbb", 0x9}], 0x1}}], 0x1, 0x20000010) (async) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) 930.276475ms ago: executing program 3 (id=1214): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000005000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x12, 0x0, &(0x7f0000000100)="e02742e8680d85ff970c2d2f88a88854ed1e", 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000002080)={0x0, 0x10, &(0x7f0000002040)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000020c0)=0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000001c0)='GPL\x00', 0x9, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r2, 0x380}, &(0x7f0000000100)=0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[], 0x41) 745.984063ms ago: executing program 0 (id=1215): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000001800)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)='\vG\x00\x00\x00\x00\x00\x00', 0x8}, {&(0x7f0000000600)='u', 0x1}], 0x2}], 0x1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x22, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f0000002440)="17000000", 0x4) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="240000002a000b0000000000ffdbdf2502ffffe50800020004000100080001"], 0x24}}, 0x800) r6 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x80000002, 0x12) ioctl$int_in(r6, 0x5452, &(0x7f0000000080)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESHEX], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000001940)=""/4103, 0x1007}, {&(0x7f00000004c0)=""/6, 0x6}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x5}, 0x80000000}], 0x4, 0x20, 0x0) 678.205648ms ago: executing program 2 (id=1216): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) pwrite64(r0, &(0x7f0000000000)="e7030014000816112ee73cfe11f0102b510b2e73fce8a190dd2958d5", 0xfffffffffffffe34, 0x8001) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, 0x0, 0x2000c000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000580)=[@in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000180)=0x10) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000001c0)={0x1}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r4, @in6={{0xa, 0x4e22, 0x400, @empty, 0x4}}, 0xf, 0x4926, 0x10, 0x7, 0x82, 0x5, 0xdb}, &(0x7f0000000040)=0x9c) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}]}]}]}], {0x14, 0x10}}, 0xe8}}, 0x800) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd", 0x16}, {&(0x7f0000000140)="9c74c3ab6a5fdfbf", 0x8}], 0x2) 564.131432ms ago: executing program 0 (id=1217): socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="bcff03400200"}) (async) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) listen(r0, 0x0) (async) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) (async) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40011}], 0x1}}], 0x1, 0x24008094) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) (async) getsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000100)=0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000080), &(0x7f0000000000)=@udp, 0x2}, 0x20) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000070000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c000240000000000000008108000340fffffffd0c0001"], 0xb8}}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x58, r5, 0x400, 0x70bd2b, 0xa5dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8081}, 0x4000800) 483.44544ms ago: executing program 4 (id=1218): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@getchain={0x44, 0x66, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xdfe54c12d8fa50bb}, {0xbaf70614125545c0, 0x1}, {0x0, 0x4}}, [{0x0, 0xb, 0x7}, {0x0, 0xb, 0x7}, {0x0, 0xb, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x20004440) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0xff00000000000000}, 0x10000}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0xffffffffffffffd9, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="3000000010000100fbff39194618d96d8b2e85bf53", @ANYRES8=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="d20dd91456a35308adab898e9480cad390b109f73a489e6c1e13db20ae71791151cb89a08640abaf1c0427eff571bf8f3341f5f5d4ee09acf8fa73608a762961ef73e4936ed402a0987d38e87b41b93a5e96c8bddd715724e5456fe1819fe504ac81f0715acee52a151a47b3cb3a43de184b2d08897edaffde36e673c1154c02cdccd255c398c2194fd233e76fce4c734db3a36c4793df04a9955adcf3c9b82891b9bf949566"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r11, {0xc, 0x7}, {}, {0xfff3, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1e0000002866b598006dd287ed895944836a9f11e17edf120eb4fef25c3c24a793d5efb5836527b21a3e8bcff796e647bfd5fc7b4b7fdc655acaed4d76b9", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000000000000000000059318761fd8e6439de8ec2107115db85398e8099bca9da93bbb4d49149809e092d9e8fb56b7aa6bf1c7a82ec24eaf220b6b07a642ef5961f31c1a540810db7388bf072c6f93b6b3058854163e8a34943aeb72799cac3823d36453e8a3b8e53931cc961b342cf9247740e99cf28904342ad1b3b3d2989ac3a531956bd8fd40fb6fa1f072479b807b92a47b32bd7e1df56f7b874c8144cfbd9f6f9ea2fdd4331ac7f7a", @ANYRES32=0x0, @ANYRES16=r3, @ANYRES64=r5], 0x48) 370.231132ms ago: executing program 0 (id=1219): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) socket$kcm(0x29, 0x2, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3631, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @bcast, @default, @bcast]}) vmsplice(r0, &(0x7f0000000600)=[{&(0x7f00000000c0)="abaac85d4ca40eb08dd69f10c9f3d9378516f63cc3e3a955ea8b3f3caabd538308955a41409969ad576d9efec3771e50d5138aff4d32ead046e39f2e154884ddd4a3239815ddb497013f21b5a3b9e7dd5f7297d89fdbb15dc43046e8553dc4ffd94d19426d6b78c9328d4098b1015961e6e46b398c4ee0ac4a82c0d79060366a01992d83dd32c4875783c83938d7b630b4a0f5a112513d997eca4756faea3c98b7646f63ceb336a9bd97719f9663ab6c7f59978e43e48a17166384de575859de496c99b342f9509e9c475c5c2ed399e6d4b53996f006a02f0cd5db9a785839e517abeeb9c2168722ccc5ce64d76eadd3871412461078bee6", 0xf8}, {&(0x7f0000000340)="3882df5d86df4cc10272cea0669119400ae61900564cd5f84777941c2093961beee75ef47ea252160fd8113fd0a626f66e781ee2c997ad3a1e6b1c66e12620e77ee22db51fd7f9a94c11a76ab7a4249b61f465d93a7437f7d8f0860820d8b0a24a86fbb3a081e7f3b78bb108e459a3983a9fb5f7901c58a0fb103305710a820308d2dd289f3862944d84185b015dbb90c8529b4465a133c9ebc7f7f28acb70a86a94daa682c9feec1a93c78491dc579d7bf9dd62eff5e27ea2470aeb1d193e5b2d1c3fb8a21f75000cfe6f2d37a74314b2814e4041b470535be17ebcbcabbc289f2a7964c5f4cdb9c3e790d7e5e581e0cf767d876e7d", 0xf6}, {&(0x7f00000001c0)="7f8eee429adefa8ecc093a56", 0xc}, {&(0x7f0000000200)="30780e0bbd4815a9e00fe7d0cdc1da7bf4dbf9be045d3e14fa366c3fdd148acbb94e3731717749b31e437cd311adbcd36bea8216362b2c1ef2", 0x39}, {&(0x7f0000000440)="50df701e31489e14d65a6da24da85432ac2a37a0623e92791bc94f7f72f4af5e84e53d95447dfe3695f677c16c3e603238b67723b79b3506f27099e043f7f338ff257699e1957ae05cdea880c67ff12dfdb3c362e27f6fe9a1e4fde9a610d7791909c4cbdfc87c8ff3c9ec254c247bb705f460d78bf6452549c12240f3b9bedd3c3d0f25eb0ebfd41dab5ad60c2e75a09f878aaf8c5bdf1b77b9671ba413b8b942dae2f4308ea506133f73f66076e0aa1866ea6fcb14242956af2dd7dabab3163ed2ed12abc0b637abda0b7d91f17775bab0eacd7c1503262221cc", 0xdb}, {&(0x7f0000000540)="69c619395a8dbdee2c985a4bb99a43cecf5314934e21bcbfee663d4752e42c767d62ebbd9c76968171a5e3fcf990f6603bec6365f1b72eaa06", 0x39}], 0x6, 0x8) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x10) 0s ago: executing program 3 (id=1220): r0 = getpid() bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60122d"], 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) unshare(0x20000400) r3 = socket(0x1d, 0x2, 0x6) bind$rds(r3, &(0x7f0000000680)={0x2, 0x4, @local}, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x491, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000200), 0x4) r9 = socket(0x10, 0x3, 0x0) sendmmsg$inet(r2, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="17d1fb768ce7f94f62ff070d0c8d9b8b64a72dc3a2baf40129a1d51637f1fc0c4e139a699b18b4b1c807b53f8cc94f1e0bd61572d25f12a5c419fe4224860089ff4da82291329980bc349ce7d7451f2e65fd56162ecccf37be2fdd0f818657a3edc19eb762e9b6fd4486d3c7b22ac84834f866792998ccdd591fd99c7e5030654641c4218cc437a0e6b592929a6ca101f59fc8e78b6ac3959adde96f938a31d8ef246780b1", 0xa5}], 0x1, &(0x7f0000000540)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x59099b62}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8d}}, @ip_retopts={{0x94, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0xe9, 0x0, 0x0, [0x4, 0xf, 0x3ff]}, @timestamp_addr={0x44, 0x34, 0xf0, 0x1, 0x2, [{@rand_addr=0x64010102, 0x8000}, {@local}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x40}, {@local, 0x562d}, {@rand_addr=0x64010102, 0xfffffff7}, {@local, 0xc58d}]}, @generic={0x82, 0xd, "a7431079697059711d2956"}, @lsrr={0x83, 0x13, 0x87, [@multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x39}, @loopback]}, @timestamp_addr={0x44, 0x1c, 0x72, 0x1, 0x0, [{@empty, 0xb6c2}, {@loopback, 0x3c1}, {@broadcast}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0xd4, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x3c, 0x1b, 0x3, 0xc, [{@rand_addr=0x64010100, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@rand_addr=0x64010102, 0x6}, {@remote, 0x616}, {@dev={0xac, 0x14, 0x14, 0x39}, 0xfffffffe}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x6}, {@rand_addr=0x64010101, 0x10001}]}, @ssrr={0x89, 0x2b, 0x7f, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @cipso={0x86, 0x18, 0x3, [{0x2, 0xa, "643d3b0cd0bec664"}, {0x2, 0x8, "93291da70d7c"}]}, @end, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0xb4, 0x3, 0x3, [{@local, 0x2}, {@rand_addr=0x64010100, 0x5}, {@empty, 0xffffffff}]}, @timestamp_addr={0x44, 0x24, 0xd4, 0x1, 0x6, [{@loopback, 0x800}, {@broadcast, 0xe83}, {@local, 0x2}, {@local, 0x4}]}]}}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@rr={0x7, 0xf, 0x58, [@rand_addr=0x64010101, @remote, @remote]}, @ssrr={0x89, 0x1f, 0xb4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast2, @multicast2, @multicast1, @private=0xa010102]}, @generic={0x44, 0xc, "e55b19e35aa92822764e"}, @end]}}}], 0x240}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)="140a75c23a7597d2848690252fff13438b05d111743bbc84f18d23e7b29bc51cfbeec0a94613dbe4ca37ea899f7b5a171863fac47813871655bc8648bbc6a0ed302c9e662ab1fb3400f2fb5124f9f443107c918b45b86c90806e2da6be747e6011116386c3026ab4563123f69e52a5b864ca61887cd0b63eb1492198f38e2d7471287ed56fc31f2db13bdcd13de7410bdbad0a860013118bb209f155736660072906120c9efe4d9f05add3adf3f2fc159d662d79d07d27f6f04e7eba8fe7743336", 0xc1}], 0x1}}, {{&(0x7f00000008c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000c80)=[{&(0x7f0000000900)="6c1d981ccf705171ed10e207ff99b711e0d6b9a4b29c936fddf5c1baccdca69fa1af72507cb73bdcf071a13e7e2b3c706d754e9c6a15018af60df282b012c5e7d18120887d9827f60715ef6cd3670298a1157e0f09d83f148f40dbf5d68927b928a616c8a702caad104bb412900ba63453da", 0x72}, {&(0x7f0000000980)="86d4b2bd4a846664c22762f911767b0b7ebf07625e0b2c0b4108360775c955d37dfcc4dc907ba1abe6b4d52e1c585557df39bd164f32a85d0791afb4a68c99092c79f8205f65a6b240a892b1ac354f943527d29c6014c1f94a7a6a2883bb86a951120ecfb7475241a7261e7a0750b33b274d7a", 0x73}, {&(0x7f0000000a40)="09f5997ca28711045dcbeab15bfe0168bf5f5a6a2e808c014917ee633b31bb4cdfc0c3b244bb7c1c46d4294a5038735217b16993efedac1ef6c1694ad519a3ef5bff861e88f134bbc6cee7159eb427aa5460a022366fd8e83181c9239dde4bef387dc517575ab02f555543a90a58419568d3d99b120f824ca4eb19320a4c527d6e479af1024e36346e51a6fd233c970c9dbb13843c6c6fd4b0f1a251438ef2833a2c1e84943cd9863e918f01ed5200772e3c7102b0c4efc59f6933c403f501d9d124b81eaa13ae6b05ad91", 0xcb}, {&(0x7f0000000b40)="a7a7206d532dd8be501360008f6a27c498b138bbee8e8be7ba0f003e16e2937dfc5d06c7c008372fdd8d14b5a6dca4ab6ed895d45503928352f6b6dbe3f8fbeed411bf98220dedca06e77320eb176296dad3a6a6a16646db8a13015d287915442310bf4520cadb4bce88ba4522c850fe0c20450aae7e31551b26ef74e85f3a23975d7e4374b954caf250c4efc7666d89774d845856128e5407f4b8a1d23a10aec153eed135d6f82e1455e1f2e9b3860019fb6244", 0xb4}, {&(0x7f0000000c00)="c182d2c95c26f6227bee91fb9a840b5e779cd39f835330f4302f1abdaf80fb56bd8df75249189859587d5f56a22fb726a9bbe89016d0a4912e2df54db7", 0x3d}, {&(0x7f0000000c40)="57dab86ca134e1d44faa146addcaec7284d7d7ef8c8143001a380d0ce395b527ea34cc1fdebf97cc86cf", 0x2a}], 0x6, &(0x7f0000000d00)=[@ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @empty}}}, @ip_retopts={{0x84, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0xf1, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xe}]}, @ssrr={0x89, 0x17, 0xf4, [@multicast1, @multicast2, @multicast2, @multicast1, @local]}, @timestamp_addr={0x44, 0x44, 0xb3, 0x1, 0x4, [{@broadcast, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xce4}, {@rand_addr=0x64010100, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x8}, {@loopback, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0xfffffbb7}, {@multicast2, 0x401}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @lsrr={0x83, 0xb, 0xbb, [@private=0xa010100, @empty]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc}}, @ip_retopts={{0xe4, 0x0, 0x7, {[@rr={0x7, 0x27, 0xd0, [@broadcast, @dev={0xac, 0x14, 0x14, 0x22}, @rand_addr=0x64010102, @local, @rand_addr=0x64010100, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast1]}, @ra={0x94, 0x4}, @generic={0x89, 0xa, "d12196bfe5bdc130"}, @timestamp_addr={0x44, 0x2c, 0xba, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private=0xa010101, 0x9573}, {@remote, 0xffffffff}, {@multicast1, 0x6}, {@empty, 0x1}]}, @timestamp={0x44, 0x24, 0xa5, 0x0, 0x9, [0x7, 0x1b, 0x9, 0x2, 0x1e89, 0x7, 0x5, 0xc7e]}, @timestamp_addr={0x44, 0x2c, 0x80, 0x1, 0x7, [{@local, 0x1}, {@empty, 0x1}, {@remote, 0x9}, {@remote, 0x6}, {@private=0xa010102, 0x1}]}, @rr={0x7, 0x17, 0x44, [@private=0xa010101, @multicast1, @private=0xa010100, @multicast2, @multicast2]}, @generic={0x83, 0xa, "dcd170600b71225f"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @rand_addr=0x64010102}}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@noop, @lsrr={0x83, 0x1f, 0x7b, [@multicast1, @dev={0xac, 0x14, 0x14, 0x33}, @broadcast, @multicast2, @private=0xa010101, @local, @local]}, @timestamp_prespec={0x44, 0x3c, 0xed, 0x3, 0x8, [{@loopback, 0x580}, {@remote, 0xfffffda5}, {@rand_addr=0x8, 0x668f}, {@local}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x3d9}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x3}, {@rand_addr=0x7, 0x5}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x2a0}}, {{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000fc0)="ce0f7c13a192efb59731fb5ccba8f8716064b2b6f770e1a8f618e22699668e51aa03b73d3bb10a83a8f9108b77478459461fc6d838721fff95e3d2304a5a1085113f045fd6e5efbc721e284d97a66ce3343a3bdf93", 0x55}, {&(0x7f0000001040)="75bccd202b438eb321199980b33490a10914fe0518210da6bfc70b7715086c55d981e881476e635f31a0bc427817e9e2be0d15e3609421af912a76248578e0d59a1769b80ca14eb424d6663913207aa140fc7d3126aff7d24f045ce0bd525a14b7fbf4b6be6ce61f513c6d4ec6362644c0546ddc959acead0a945614bf48cd60333444bc954b6a6410bfe3a3f634c95df6acd61777057306286e8f130a576b28a495d4101245857acf8a0b5d5072bf123c83f6902ab4a97ba1262037e24eb1ef50094809eb5681f780853def02cb", 0xce}, {&(0x7f0000001140)="a5b630ac6594", 0x6}, {&(0x7f0000001180)="cc5ae23b5ea31e87a18708731c4cdf5a5b7ca1289696d1c3652d0f41255a6d6650b43fb84836ea524c012e71971d71eb6355397a9f2e8491d3f5a59452d9d9a0d46ac02f6e41bb5f9212be97128777a145d74a994408142cf7", 0x59}, {&(0x7f0000001200)}], 0x5, &(0x7f0000001380)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}, @ip_retopts={{0x40, 0x0, 0x7, {[@generic={0x44, 0xb, "b5080816d26b11f4ed"}, @lsrr={0x83, 0x17, 0x7c, [@local, @local, @remote, @local, @multicast2]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x50, [@broadcast]}, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffc}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0xd8}}], 0x4, 0x4004000) sendmsg$nl_route(r9, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) kernel console output (not intermixed with test programs): m3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.015181][ T6476] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.023472][ T6476] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.221301][ T6562] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 107.289388][ T6562] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 107.812129][ T6580] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 107.862875][ T6580] bridge0: port 3(batadv1) entered blocking state [ 107.879633][ T6580] bridge0: port 3(batadv1) entered disabled state [ 107.935020][ T6580] batadv1: entered allmulticast mode [ 107.947558][ T6580] batadv1: entered promiscuous mode [ 107.981362][ T6580] bridge0: port 3(batadv1) entered blocking state [ 107.988238][ T6580] bridge0: port 3(batadv1) entered forwarding state [ 108.304518][ T6603] __nla_validate_parse: 3 callbacks suppressed [ 108.304539][ T6603] netlink: 232 bytes leftover after parsing attributes in process `syz.2.164'. [ 108.330670][ T3014] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 108.340457][ T3014] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 108.365623][ T6603] macvtap1: entered promiscuous mode [ 108.372186][ T6603] bond0: entered promiscuous mode [ 108.384307][ T6603] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 108.415751][ T6603] team0: Device macvtap1 failed to register rx_handler [ 108.493601][ T6603] bond0: left promiscuous mode [ 108.626350][ T6607] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.722760][ T6607] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.933477][ T6607] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.089355][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.169'. [ 109.120669][ T6616] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 109.143864][ T6607] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.153979][ T6616] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 109.346270][ T6618] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.404599][ T6607] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.473437][ T6607] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.516236][ T6618] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.625668][ T6607] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.673506][ T6607] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.772700][ T6612] lo speed is unknown, defaulting to 1000 [ 109.834541][ T6618] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.081215][ T6618] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.122987][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.173'. [ 110.451746][ T6652] sock: sock_set_timeout: `syz.4.176' (pid 6652) tries to set negative timeout [ 110.459079][ T6618] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.514417][ T6658] sock: sock_set_timeout: `syz.4.176' (pid 6658) tries to set negative timeout [ 110.590523][ T6618] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.606815][ T6618] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.630505][ T6618] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.839210][ T6664] lo speed is unknown, defaulting to 1000 [ 110.922803][ T30] audit: type=1800 audit(1742388643.575:2): pid=6667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.179" name="memory.events" dev="tmpfs" ino=198 res=0 errno=0 [ 110.965788][ T6667] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 111.260285][ T6673] lo speed is unknown, defaulting to 1000 [ 111.380988][ T6681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.183'. [ 111.656625][ T6687] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.679931][ T6685] netlink: 'syz.3.184': attribute type 4 has an invalid length. [ 111.963372][ T6687] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.185799][ T6687] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.258278][ T6696] lo speed is unknown, defaulting to 1000 [ 112.595968][ T6687] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.133347][ T6687] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.231724][ T6687] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.309206][ T6687] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.366521][ T6687] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.604326][ T6724] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 113.656138][ T6727] batman_adv: batadv0: Adding interface: dummy0 [ 113.662497][ T6727] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.710983][ T6727] batman_adv: batadv0: Interface activated: dummy0 [ 113.739844][ T6727] batadv0: mtu less than device minimum [ 113.756368][ T6727] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 113.769696][ T6727] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 113.782440][ T6727] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 113.795166][ T6727] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 113.807899][ T6727] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 113.820637][ T6727] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 113.833267][ T6727] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 113.906960][ T6731] xt_ecn: cannot match TCP bits for non-tcp packets [ 114.018851][ T6730] netlink: 'syz.2.193': attribute type 4 has an invalid length. [ 114.042501][ T6730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.193'. [ 114.195890][ T6737] lo speed is unknown, defaulting to 1000 [ 114.375521][ T6742] netlink: 'syz.0.198': attribute type 21 has an invalid length. [ 114.430705][ T6742] netlink: 'syz.0.198': attribute type 1 has an invalid length. [ 114.872150][ T6757] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 114.926059][ T6737] netlink: 64 bytes leftover after parsing attributes in process `syz.3.195'. [ 115.207168][ T6774] netlink: 16 bytes leftover after parsing attributes in process `syz.2.205'. [ 115.297520][ T6774] netlink: 44 bytes leftover after parsing attributes in process `syz.2.205'. [ 115.535513][ T6786] tun0: tun_chr_ioctl cmd 1074025677 [ 115.541093][ T6786] tun0: linktype set to 270 [ 115.785145][ T6795] netlink: 20 bytes leftover after parsing attributes in process `syz.0.210'. [ 115.838658][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.212'. [ 115.847724][ T6798] netlink: 16 bytes leftover after parsing attributes in process `syz.2.212'. [ 115.876938][ T6795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.210'. [ 116.926796][ T5844] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 116.988110][ T6844] x_tables: duplicate entry at hook 1 [ 117.104358][ T6846] netlink: 28 bytes leftover after parsing attributes in process `syz.1.226'. [ 117.125721][ T6848] netlink: 28 bytes leftover after parsing attributes in process `syz.3.227'. [ 117.178125][ T6848] erspan0: entered promiscuous mode [ 117.212955][ T6848] gretap0: entered promiscuous mode [ 117.409254][ T6857] netlink: 'syz.3.231': attribute type 1 has an invalid length. [ 117.436363][ T6857] net_ratelimit: 12 callbacks suppressed [ 117.436386][ T6857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.732817][ T6868] netlink: 'syz.1.232': attribute type 11 has an invalid length. [ 117.822753][ T6867] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.875449][ T6867] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.005575][ T6867] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.078547][ T6867] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.202637][ T6867] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.275449][ T6867] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.422132][ T6881] syzkaller0: entered promiscuous mode [ 118.445711][ T6881] syzkaller0: entered allmulticast mode [ 118.576168][ T874] IPVS: starting estimator thread 0... [ 118.588157][ T6889] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 118.631666][ T6889] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 118.664853][ T6891] IPVS: using max 20 ests per chain, 48000 per kthread [ 119.186220][ T6907] Driver unsupported XDP return value 0 on prog (id 91) dev N/A, expect packet loss! [ 120.496334][ T6867] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.506850][ T6867] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.710249][ T6867] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.730552][ T6867] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.788509][ T6867] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.809803][ T6867] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.857387][ T6867] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.894992][ T6867] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.941465][ T6867] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.980539][ T6867] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.077260][ T6926] netlink: 'syz.2.251': attribute type 11 has an invalid length. [ 121.643722][ T6946] pim6reg: entered allmulticast mode [ 121.696022][ T6948] team0: entered allmulticast mode [ 121.701208][ T6948] team_slave_0: entered allmulticast mode [ 121.715120][ T6948] team_slave_1: entered allmulticast mode [ 121.737593][ T6950] team0: left allmulticast mode [ 121.754821][ T6950] team_slave_0: left allmulticast mode [ 121.793474][ T6950] team_slave_1: left allmulticast mode [ 121.807008][ T6950] pim6reg: left allmulticast mode [ 122.150584][ T6965] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.291407][ T6965] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.292463][ T6975] __nla_validate_parse: 6 callbacks suppressed [ 122.292482][ T6975] netlink: 168 bytes leftover after parsing attributes in process `syz.3.264'. [ 122.357572][ T6971] sctp: [Deprecated]: syz.4.265 (pid 6971) Use of int in max_burst socket option. [ 122.357572][ T6971] Use struct sctp_assoc_value instead [ 122.389742][ T6965] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.516296][ T6965] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.702072][ T6965] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.774908][ T6965] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.862651][ T6965] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.920043][ T6965] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.191666][ T6999] lo speed is unknown, defaulting to 1000 [ 123.240230][ T7006] netlink: 136 bytes leftover after parsing attributes in process `syz.1.274'. [ 123.266049][ T7006] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 123.322771][ T7008] netlink: 56 bytes leftover after parsing attributes in process `syz.0.276'. [ 123.346124][ T7004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.274'. [ 123.592259][ T7025] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 123.638910][ T7022] vlan0: entered allmulticast mode [ 123.644410][ T7022] bond0: entered allmulticast mode [ 123.650431][ T5850] Bluetooth: hci4: command 0x0405 tx timeout [ 123.669882][ T7022] bond_slave_0: entered allmulticast mode [ 123.682463][ T7022] bond_slave_1: entered allmulticast mode [ 123.702926][ T7025] bridge_slave_0: left allmulticast mode [ 123.725209][ T7025] bridge_slave_0: left promiscuous mode [ 123.731037][ T7025] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.791105][ T7025] bridge_slave_1: left allmulticast mode [ 123.811142][ T7025] bridge_slave_1: left promiscuous mode [ 123.872548][ T7025] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.927823][ T7025] bond0: (slave bond_slave_0): Releasing backup interface [ 123.960294][ T7025] bond0: (slave bond_slave_1): Releasing backup interface [ 124.029488][ T7038] netlink: 'syz.4.283': attribute type 1 has an invalid length. [ 124.050604][ T7025] team0: Port device team_slave_0 removed [ 124.054781][ T7038] netlink: 224 bytes leftover after parsing attributes in process `syz.4.283'. [ 124.126043][ T7025] team0: Port device team_slave_1 removed [ 124.133292][ T7025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.141557][ T7025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.173206][ T7025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.202242][ T7025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.282678][ T7025] team0: Port device geneve0 removed [ 124.290098][ T7025] batadv1: left allmulticast mode [ 124.296399][ T7025] batadv1: left promiscuous mode [ 124.301644][ T7025] bridge0: port 3(batadv1) entered disabled state [ 124.384011][ T5885] lo speed is unknown, defaulting to 1000 [ 124.392379][ T7041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.285'. [ 124.623466][ T6996] netlink: 28 bytes leftover after parsing attributes in process `syz.3.272'. [ 124.626528][ T7051] netlink: 'syz.1.286': attribute type 13 has an invalid length. [ 124.668829][ T7051] netlink: 16 bytes leftover after parsing attributes in process `syz.1.286'. [ 124.679134][ T7053] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 124.693505][ T7053] bridge0: port 1(batadv1) entered blocking state [ 124.701611][ T7053] bridge0: port 1(batadv1) entered disabled state [ 124.708895][ T7053] batadv1: entered allmulticast mode [ 124.716220][ T7053] batadv1: entered promiscuous mode [ 124.722566][ T7053] bridge0: port 1(batadv1) entered blocking state [ 124.729224][ T7053] bridge0: port 1(batadv1) entered forwarding state [ 124.772353][ T6996] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 124.797250][ T7051] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 124.830141][ T7032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.282'. [ 124.877125][ T7032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.282'. [ 125.174327][ T2994] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 125.184136][ T2994] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 125.479400][ T7075] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 126.247399][ T7110] No such timeout policy "syz0" [ 126.452517][ T7115] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.574398][ T7126] sctp: [Deprecated]: syz.3.303 (pid 7126) Use of struct sctp_assoc_value in delayed_ack socket option. [ 126.574398][ T7126] Use struct sctp_sack_info instead [ 126.716878][ T7115] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.910059][ T7115] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.116402][ T7115] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.201690][ T7144] macvlan0: entered promiscuous mode [ 127.246349][ T7144] batadv_slave_1: entered promiscuous mode [ 127.474981][ T7115] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.578069][ T7115] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.643229][ T7115] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.779784][ T7115] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.962234][ T7172] __nla_validate_parse: 7 callbacks suppressed [ 127.962254][ T7172] netlink: 20 bytes leftover after parsing attributes in process `syz.2.314'. [ 128.146796][ T7178] netlink: 40 bytes leftover after parsing attributes in process `syz.3.315'. [ 128.219416][ T7179] netlink: 40 bytes leftover after parsing attributes in process `syz.3.315'. [ 128.335040][ T7186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.317'. [ 128.621653][ T7192] netlink: 52 bytes leftover after parsing attributes in process `syz.3.319'. [ 128.722705][ T7192] netlink: 'syz.3.319': attribute type 10 has an invalid length. [ 128.744418][ T7192] netlink: 2 bytes leftover after parsing attributes in process `syz.3.319'. [ 128.764151][ T7192] team0: entered promiscuous mode [ 128.773731][ T7192] team_slave_0: entered promiscuous mode [ 128.797692][ T7192] team_slave_1: entered promiscuous mode [ 128.822231][ T7192] bridge0: port 3(team0) entered blocking state [ 128.861221][ T7192] bridge0: port 3(team0) entered disabled state [ 128.875371][ T7192] team0: entered allmulticast mode [ 128.880712][ T7192] team_slave_0: entered allmulticast mode [ 128.897579][ T7192] team_slave_1: entered allmulticast mode [ 128.916306][ T7192] bridge0: port 3(team0) entered blocking state [ 128.922862][ T7192] bridge0: port 3(team0) entered forwarding state [ 128.966776][ T7198] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.118313][ T7198] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.164317][ T7204] lo: entered promiscuous mode [ 129.237119][ T7198] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.331576][ T7198] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.441489][ T7211] netlink: 60 bytes leftover after parsing attributes in process `syz.2.325'. [ 129.606123][ T7214] lo speed is unknown, defaulting to 1000 [ 130.277833][ T7225] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.310804][ T7214] netlink: 152 bytes leftover after parsing attributes in process `syz.1.327'. [ 130.320002][ T7214] netlink: 20 bytes leftover after parsing attributes in process `syz.1.327'. [ 130.343263][ T7214] netlink: 'syz.1.327': attribute type 39 has an invalid length. [ 130.528964][ T7225] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.771162][ T7225] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.992297][ T7248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.337'. [ 131.143235][ T7225] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.208057][ T7198] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.232349][ T7248] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 131.260514][ T7198] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.293878][ T7198] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.348399][ T7250] lo speed is unknown, defaulting to 1000 [ 131.392379][ T7198] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.596737][ T7225] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.640021][ T7225] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.774316][ T7225] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.846395][ T7225] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.812849][ T7284] syzkaller0: entered promiscuous mode [ 132.839702][ T7284] syzkaller0: entered allmulticast mode [ 133.098982][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.115873][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.782834][ T7294] delete_channel: no stack [ 135.479657][ T7322] __nla_validate_parse: 3 callbacks suppressed [ 135.479677][ T7322] netlink: 56 bytes leftover after parsing attributes in process `syz.0.358'. [ 135.519729][ T5887] IPVS: starting estimator thread 0... [ 135.614948][ T7330] IPVS: using max 25 ests per chain, 60000 per kthread [ 135.626861][ T7322] netlink: 16 bytes leftover after parsing attributes in process `syz.0.358'. [ 135.870288][ T7337] macsec0: entered promiscuous mode [ 135.935119][ T7337] veth1_macvtap: left promiscuous mode [ 136.083784][ T7337] macsec0 (unregistering): left promiscuous mode [ 136.106850][ T7339] IPVS: length: 8 != 20011992112 [ 136.298064][ T7351] tipc: Started in network mode [ 136.333317][ T7351] tipc: Node identity 00000000000000000000ffffac14142, cluster identity 4711 [ 136.361268][ T7351] tipc: Enabling of bearer rejected, failed to enable media [ 136.371506][ T7352] tipc: Enabling of bearer rejected, failed to enable media [ 136.415160][ T7358] netlink: 'syz.4.368': attribute type 13 has an invalid length. [ 136.423137][ T7358] netlink: 152 bytes leftover after parsing attributes in process `syz.4.368'. [ 136.702421][ T7367] team0: Mode changed to "loadbalance" [ 136.805140][ T7369] vlan1: entered promiscuous mode [ 136.851907][ T7373] netlink: 12 bytes leftover after parsing attributes in process `syz.4.373'. [ 136.867956][ T7373] tipc: Started in network mode [ 136.872986][ T7373] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 136.907591][ T7373] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 136.927988][ T7374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.373'. [ 136.967253][ T7373] tipc: Enabled bearer , priority 10 [ 136.981028][ T7375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.373'. [ 137.011543][ T7364] lo speed is unknown, defaulting to 1000 [ 137.082017][ T7377] lo speed is unknown, defaulting to 1000 [ 137.288944][ T7381] ip6t_REJECT: ECHOREPLY is not supported [ 137.521309][ T7382] lo speed is unknown, defaulting to 1000 [ 137.568753][ T7397] netlink: 16 bytes leftover after parsing attributes in process `syz.1.377'. [ 137.644145][ T7389] lo speed is unknown, defaulting to 1000 [ 137.728084][ T7403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.381'. [ 137.866901][ T7411] ax25_connect(): syz.4.379 uses autobind, please contact jreuter@yaina.de [ 137.977091][ T7413] smc: net device bond0 applied user defined pnetid SYZ2 [ 138.074860][ T26] tipc: Node number set to 1 [ 138.360514][ T7427] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? [ 138.774000][ T7435] lo speed is unknown, defaulting to 1000 [ 138.829932][ T7440] pimreg0: tun_chr_ioctl cmd 1074025677 [ 138.850522][ T7440] pimreg0: linktype set to 65534 [ 138.915056][ T7448] netlink: 'syz.4.391': attribute type 1 has an invalid length. [ 138.951614][ T7453] netlink: 'syz.0.392': attribute type 1 has an invalid length. [ 138.965786][ T7453] netlink: 'syz.0.392': attribute type 2 has an invalid length. [ 138.990801][ T7446] bridge0: port 1(batadv1) entered disabled state [ 138.999094][ T7453] netlink: 'syz.0.392': attribute type 1 has an invalid length. [ 139.049905][ T7454] lo speed is unknown, defaulting to 1000 [ 139.276711][ T7461] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 139.383166][ T53] batman_adv: batadv1: IGMP Querier appeared [ 139.389395][ T53] batman_adv: batadv1: MLD Querier appeared [ 139.403899][ T7466] netlink: 'syz.0.396': attribute type 1 has an invalid length. [ 139.442506][ T7466] netlink: 'syz.0.396': attribute type 2 has an invalid length. [ 139.590852][ T7473] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 139.696206][ T7477] netlink: 44 bytes leftover after parsing attributes in process `syz.4.397'. [ 139.766344][ T7480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.398'. [ 139.826236][ T7481] bridge_slave_0: left allmulticast mode [ 139.832072][ T7481] bridge_slave_0: left promiscuous mode [ 139.840318][ T7481] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.854076][ T7481] bridge_slave_1: left allmulticast mode [ 139.861651][ T7481] bridge_slave_1: left promiscuous mode [ 139.875039][ T7481] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.903046][ T7481] bond0: (slave bond_slave_0): Releasing backup interface [ 139.924480][ T7481] bond_slave_0: left allmulticast mode [ 139.955196][ T7481] bond0: (slave bond_slave_1): Releasing backup interface [ 139.966742][ T7481] bond_slave_1: left allmulticast mode [ 140.009493][ T7481] team0: Port device team_slave_0 removed [ 140.038393][ T7481] team0: Port device team_slave_1 removed [ 140.065083][ T7481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.072563][ T7481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.086885][ T7481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.094364][ T7481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.121961][ T7481] team0: Port device geneve0 removed [ 140.753797][ T7515] __nla_validate_parse: 1 callbacks suppressed [ 140.753819][ T7515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.403'. [ 140.900859][ T281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.937431][ T281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.135589][ T7520] syzkaller0: entered promiscuous mode [ 141.141148][ T7520] syzkaller0: entered allmulticast mode [ 141.190238][ T7529] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 141.343653][ T7532] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.411'. [ 141.482007][ T7534] netlink: 'syz.4.412': attribute type 9 has an invalid length. [ 141.844548][ T7550] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 142.211537][ T7566] team0: left allmulticast mode [ 142.219643][ T7573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.423'. [ 142.237877][ T7566] team_slave_0: left allmulticast mode [ 142.248711][ T7566] team_slave_1: left allmulticast mode [ 142.269902][ T7566] bridge0: port 3(team0) entered disabled state [ 142.340937][ T7566] bridge_slave_0: left allmulticast mode [ 142.364035][ T7566] bridge_slave_0: left promiscuous mode [ 142.384016][ T7566] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.413064][ T7566] bridge_slave_1: left allmulticast mode [ 142.425257][ T7566] bridge_slave_1: left promiscuous mode [ 142.465786][ T7566] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.516751][ T7566] bond0: (slave bond_slave_0): Releasing backup interface [ 142.538528][ T7566] bond0: (slave bond_slave_1): Releasing backup interface [ 142.562188][ T7566] team_slave_0: left promiscuous mode [ 142.637692][ T7566] team0: Port device team_slave_0 removed [ 142.658587][ T7566] team_slave_1: left promiscuous mode [ 142.672608][ T7566] team0: Port device team_slave_1 removed [ 142.680805][ T7566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.706711][ T7566] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.721159][ T7566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.732247][ T7566] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.840859][ T7576] team0: Mode changed to "loadbalance" [ 142.952437][ T7590] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 143.463444][ T7607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.432'. [ 143.557283][ T7607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.432'. [ 143.739704][ T7620] netlink: 68 bytes leftover after parsing attributes in process `syz.0.434'. [ 143.755102][ T7620] openvswitch: netlink: Flow key attr not present in new flow. [ 143.912785][ T7607] macvlan0 (unregistering): left promiscuous mode [ 143.976480][ T7630] netlink: 20 bytes leftover after parsing attributes in process `syz.4.435'. [ 143.995188][ T7623] 8021q: VLANs not supported on sit0 [ 143.999427][ T7630] netlink: 32 bytes leftover after parsing attributes in process `syz.4.435'. [ 144.068126][ T7623] netlink: 'syz.4.435': attribute type 2 has an invalid length. [ 144.106628][ T7623] netlink: 'syz.4.435': attribute type 1 has an invalid length. [ 144.128805][ T7634] lo: entered allmulticast mode [ 144.141870][ T7632] lo: left allmulticast mode [ 144.236383][ T7639] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.418497][ T7643] gre0: entered promiscuous mode [ 144.455541][ T7643] gre0: entered allmulticast mode [ 144.485087][ T7642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.440'. [ 144.512068][ T7647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'. [ 144.897320][ T7664] sctp: [Deprecated]: syz.1.447 (pid 7664) Use of struct sctp_assoc_value in delayed_ack socket option. [ 144.897320][ T7664] Use struct sctp_sack_info instead [ 145.489736][ T7698] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 145.571084][ T7702] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.601737][ T7701] gretap0: entered promiscuous mode [ 145.622491][ T7701] vlan1: entered promiscuous mode [ 145.631646][ T7698] netlink: 'syz.1.454': attribute type 1 has an invalid length. [ 145.665779][ T7698] nbd: illegal input index 393222 [ 145.702657][ T7702] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.816667][ T7702] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.901906][ T7711] bridge0: entered promiscuous mode [ 145.919296][ T7711] bridge0: port 1(macvlan0) entered blocking state [ 145.934085][ T7711] bridge0: port 1(macvlan0) entered disabled state [ 145.952304][ T7711] macvlan0: entered allmulticast mode [ 145.964894][ T7711] bridge0: entered allmulticast mode [ 145.988238][ T7711] macvlan0: left allmulticast mode [ 145.994935][ T7711] bridge0: left allmulticast mode [ 146.015745][ T7711] bridge0: left promiscuous mode [ 146.095681][ T7717] netlink: 'syz.3.460': attribute type 8 has an invalid length. [ 146.112749][ T7702] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.388587][ T7729] __nla_validate_parse: 3 callbacks suppressed [ 146.388606][ T7729] netlink: 56 bytes leftover after parsing attributes in process `syz.1.465'. [ 146.420281][ T7702] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.456290][ T7702] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.576391][ T7702] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.633990][ T7731] netlink: 16 bytes leftover after parsing attributes in process `syz.2.456'. [ 146.676485][ T7702] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.827896][ T7738] netlink: 80 bytes leftover after parsing attributes in process `syz.4.466'. [ 147.117114][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.469'. [ 147.138451][ T7749] netlink: 32 bytes leftover after parsing attributes in process `syz.3.469'. [ 147.536149][ T7773] netlink: 16 bytes leftover after parsing attributes in process `syz.1.474'. [ 148.303542][ T7793] netlink: 268 bytes leftover after parsing attributes in process `syz.1.482'. [ 148.325492][ T7795] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.372855][ T5210] udevd[5210]: worker [6450] terminated by signal 33 (Unknown signal 33) [ 148.408137][ T7793] netlink: 48 bytes leftover after parsing attributes in process `syz.1.482'. [ 148.437579][ T7793] netlink: 100 bytes leftover after parsing attributes in process `syz.1.482'. [ 148.485309][ T7800] dvmrp0: entered allmulticast mode [ 148.530454][ T7795] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.727630][ T7795] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.986695][ T7795] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.229351][ T7795] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.309532][ T7795] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.367889][ T7832] netlink: 56 bytes leftover after parsing attributes in process `syz.3.492'. [ 149.396343][ T7795] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.444959][ T7831] bridge2: entered promiscuous mode [ 149.460658][ T7831] bridge2: entered allmulticast mode [ 149.490057][ T7831] team0: Port device bridge2 added [ 149.610156][ T7795] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.206961][ T7830] lo speed is unknown, defaulting to 1000 [ 150.339403][ T7860] lo speed is unknown, defaulting to 1000 [ 150.844551][ T7880] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 151.589329][ T7913] __nla_validate_parse: 7 callbacks suppressed [ 151.589352][ T7913] netlink: 28 bytes leftover after parsing attributes in process `syz.2.513'. [ 151.614214][ T7913] netlink: 28 bytes leftover after parsing attributes in process `syz.2.513'. [ 151.808452][ T7920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.515'. [ 152.190182][ T26] IPVS: starting estimator thread 0... [ 152.304808][ T7934] IPVS: using max 27 ests per chain, 64800 per kthread [ 152.470365][ T7936] lo speed is unknown, defaulting to 1000 [ 152.624327][ T7942] netlink: 60 bytes leftover after parsing attributes in process `syz.4.523'. [ 152.689422][ T7940] netlink: 'syz.2.522': attribute type 16 has an invalid length. [ 152.724992][ T7940] netlink: 'syz.2.522': attribute type 17 has an invalid length. [ 152.793901][ T7940] bridge0: port 1(batadv1) entered blocking state [ 152.800628][ T7940] bridge0: port 1(batadv1) entered forwarding state [ 152.888747][ T13] batman_adv: batadv1: MLD Querier disappeared - multicast optimizations disabled [ 152.927301][ T7940] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.468269][ T7944] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 153.519500][ T7955] lo speed is unknown, defaulting to 1000 [ 153.708826][ T7963] syzkaller1: entered promiscuous mode [ 153.725104][ T7963] syzkaller1: entered allmulticast mode [ 154.474096][ T7993] netlink: 24 bytes leftover after parsing attributes in process `syz.0.534'. [ 154.572486][ T7991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.534'. [ 155.036515][ T8003] lo: entered promiscuous mode [ 155.433970][ T8015] tipc: Enabled bearer , priority 0 [ 155.516699][ T8004] tipc: Resetting bearer [ 156.100577][ T281] batman_adv: batadv1: MLD Querier appeared [ 156.495605][ T10] tipc: Node number set to 2887052255 [ 156.677065][ T8056] netlink: 'syz.3.548': attribute type 21 has an invalid length. [ 156.695463][ T8052] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 158.440898][ T8004] tipc: Disabling bearer [ 158.465284][ T8045] netlink: 'syz.0.550': attribute type 29 has an invalid length. [ 158.475859][ T8056] netlink: 152 bytes leftover after parsing attributes in process `syz.3.548'. [ 158.607510][ T8062] netlink: 64 bytes leftover after parsing attributes in process `syz.0.553'. [ 158.663013][ T8065] FAULT_INJECTION: forcing a failure. [ 158.663013][ T8065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.696693][ T8066] netlink: 16 bytes leftover after parsing attributes in process `syz.2.554'. [ 158.705980][ T8065] CPU: 1 UID: 0 PID: 8065 Comm: syz.1.555 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 158.706009][ T8065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 158.706023][ T8065] Call Trace: [ 158.706031][ T8065] [ 158.706040][ T8065] dump_stack_lvl+0x241/0x360 [ 158.706075][ T8065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.706099][ T8065] ? __pfx__printk+0x10/0x10 [ 158.706123][ T8065] ? __pfx_lock_release+0x10/0x10 [ 158.706164][ T8065] should_fail_ex+0x40a/0x550 [ 158.706201][ T8065] _copy_from_user+0x2d/0xb0 [ 158.706231][ T8065] copy_msghdr_from_user+0xae/0x680 [ 158.706269][ T8065] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 158.706298][ T8065] ? __fget_files+0x2a/0x410 [ 158.706332][ T8065] ? __fget_files+0x2a/0x410 [ 158.706372][ T8065] __sys_sendmsg+0x209/0x350 [ 158.706403][ T8065] ? __pfx___sys_sendmsg+0x10/0x10 [ 158.706442][ T8065] ? do_sys_openat2+0x17a/0x1d0 [ 158.706501][ T8065] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 158.706536][ T8065] ? do_syscall_64+0x100/0x230 [ 158.706568][ T8065] ? do_syscall_64+0xb6/0x230 [ 158.706600][ T8065] do_syscall_64+0xf3/0x230 [ 158.706628][ T8065] ? clear_bhb_loop+0x35/0x90 [ 158.706662][ T8065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.706690][ T8065] RIP: 0033:0x7f846598d169 [ 158.706709][ T8065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.706726][ T8065] RSP: 002b:00007f84667f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.706748][ T8065] RAX: ffffffffffffffda RBX: 00007f8465ba5fa0 RCX: 00007f846598d169 [ 158.706763][ T8065] RDX: 0000000000000800 RSI: 0000400000000140 RDI: 0000000000000003 [ 158.706776][ T8065] RBP: 00007f84667f7090 R08: 0000000000000000 R09: 0000000000000000 [ 158.706789][ T8065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.706801][ T8065] R13: 0000000000000000 R14: 00007f8465ba5fa0 R15: 00007fff50997ff8 [ 158.706832][ T8065] [ 159.349055][ T8086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.560'. [ 159.462489][ T8092] lo speed is unknown, defaulting to 1000 [ 159.592445][ T8092] netlink: 108 bytes leftover after parsing attributes in process `syz.1.561'. [ 159.960128][ T8117] pim6reg: entered allmulticast mode [ 160.097133][ T8118] bridge0: port 1(batadv1) entered disabled state [ 160.789123][ T8153] netlink: 16 bytes leftover after parsing attributes in process `syz.3.573'. [ 161.865053][ T8118] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.875000][ T8118] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.883397][ T8118] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.894410][ T8118] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.937643][ T8118] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 161.944910][ T8118] macsec1: left promiscuous mode [ 161.950163][ T8118] macsec1: left allmulticast mode [ 162.166396][ T8143] lo speed is unknown, defaulting to 1000 [ 162.544462][ T8179] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.558325][ T8179] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.593514][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.581'. [ 162.628201][ T8186] 8021q: VLANs not supported on ip6gre0 [ 162.714651][ T8179] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.752614][ T8188] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.776626][ T8179] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.815760][ T8188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.582'. [ 162.888995][ T8179] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.900562][ T8179] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.019272][ T8198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 163.037877][ T8198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.087767][ T8179] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.115519][ T8179] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.284475][ T8204] lo speed is unknown, defaulting to 1000 [ 163.541268][ T8179] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.595079][ T8179] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.676655][ T8220] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.752253][ T8179] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.766091][ T8227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.593'. [ 163.771843][ T8179] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.775990][ T8227] netlink: 55 bytes leftover after parsing attributes in process `syz.2.593'. [ 163.830702][ T8179] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.868168][ T8179] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.903328][ T8179] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.912875][ T8227] netlink: 55 bytes leftover after parsing attributes in process `syz.2.593'. [ 163.975040][ T8179] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.001777][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.592'. [ 164.099955][ T8220] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.118002][ T8232] netlink: 20 bytes leftover after parsing attributes in process `syz.4.592'. [ 164.144036][ T8232] nbd: socks must be embedded in a SOCK_ITEM attr [ 164.253540][ T8220] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.778308][ T8231] lo speed is unknown, defaulting to 1000 [ 164.841012][ T8220] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.180814][ T8257] x_tables: duplicate underflow at hook 1 [ 165.188664][ T8255] netlink: 'syz.3.600': attribute type 29 has an invalid length. [ 165.274639][ T8220] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.321555][ T8220] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.362587][ T8260] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.390512][ T8261] vti0: entered promiscuous mode [ 165.438079][ T8260] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.520564][ T8220] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.569445][ T8220] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.613140][ T8264] lo speed is unknown, defaulting to 1000 [ 165.666629][ T8260] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.958328][ T8260] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.211274][ T8280] geneve2: entered promiscuous mode [ 166.237074][ T8280] geneve2: entered allmulticast mode [ 166.543363][ T8260] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.643025][ T8288] lo speed is unknown, defaulting to 1000 [ 166.654535][ T8260] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.761063][ T8260] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.805423][ T8292] lo speed is unknown, defaulting to 1000 [ 166.846722][ T8260] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.163421][ T8305] xt_hashlimit: overflow, try lower: 0/0 [ 167.514231][ T8314] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.630460][ T8316] vcan1: entered allmulticast mode [ 167.773082][ T8314] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.897674][ T8325] veth1_to_hsr: mtu less than device minimum [ 167.986818][ T8314] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.229160][ T8314] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.445867][ T8314] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.477274][ T8314] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.505735][ T8314] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.533220][ T8314] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.021439][ T8356] tipc: Enabled bearer , priority 0 [ 169.075337][ T8355] tipc: Resetting bearer [ 169.968544][ T5850] Bluetooth: hci4: command 0x0405 tx timeout [ 170.447979][ T8347] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 171.372649][ T8355] tipc: Disabling bearer [ 171.383494][ T8365] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 171.421496][ T8382] netlink: 16 bytes leftover after parsing attributes in process `syz.3.630'. [ 171.643553][ T8390] lo speed is unknown, defaulting to 1000 [ 171.681098][ T8394] No such timeout policy "syz0" [ 173.953776][ T8398] lo speed is unknown, defaulting to 1000 [ 173.974444][ T8415] lo: entered promiscuous mode [ 173.982225][ T8415] tunl0: entered promiscuous mode [ 173.988963][ T8415] gre0: entered promiscuous mode [ 173.995080][ T8415] gretap0: entered promiscuous mode [ 174.001089][ T8415] erspan0: entered promiscuous mode [ 174.015466][ T8415] ip_vti0: entered promiscuous mode [ 174.031817][ T8415] ip6_vti0: entered promiscuous mode [ 174.067577][ T8415] sit0: entered promiscuous mode [ 174.073290][ T8415] ip6tnl0: entered promiscuous mode [ 174.089794][ T8415] ip6gre0: entered promiscuous mode [ 174.107763][ T8415] syz_tun: entered promiscuous mode [ 174.124178][ T8415] ip6gretap0: entered promiscuous mode [ 174.144523][ T8415] bridge0: entered promiscuous mode [ 174.151688][ T8415] vcan0: entered promiscuous mode [ 174.165500][ T8415] bond0: entered promiscuous mode [ 174.171677][ T8415] team0: entered promiscuous mode [ 174.192748][ T8415] dummy0: entered promiscuous mode [ 174.202433][ T8415] nlmon0: entered promiscuous mode [ 174.210886][ T8415] caif0: entered promiscuous mode [ 174.216197][ T8415] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 174.258588][ T8423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.641'. [ 174.375631][ T8411] syz.0.635 (8411) used greatest stack depth: 17336 bytes left [ 174.446624][ T8427] netlink: 'syz.3.643': attribute type 39 has an invalid length. [ 174.567867][ T8428] tipc: Started in network mode [ 174.573003][ T8428] tipc: Node identity aa7ee6f3079e, cluster identity 4711 [ 174.580918][ T8428] tipc: Enabled bearer , priority 0 [ 175.210534][ T8458] netlink: 'syz.4.652': attribute type 5 has an invalid length. [ 175.221608][ T8456] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.300848][ T8460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.652'. [ 175.399043][ T8456] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.439199][ T8466] netlink: 32 bytes leftover after parsing attributes in process `syz.3.654'. [ 175.521771][ T8456] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.619349][ T8456] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.694875][ T6539] tipc: Node number set to 2917197555 [ 175.757052][ T8479] netlink: 104 bytes leftover after parsing attributes in process `syz.4.659'. [ 175.806989][ T8456] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.848784][ T8456] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.881852][ T8456] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.917010][ T8456] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.118911][ T8496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.663'. [ 176.149574][ T8500] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 176.253551][ T8503] netlink: 'syz.1.666': attribute type 10 has an invalid length. [ 176.340361][ T8503] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 176.464269][ T8506] netlink: 84 bytes leftover after parsing attributes in process `syz.0.667'. [ 176.478173][ T8510] lo: left promiscuous mode [ 176.484300][ T8510] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.539236][ T8508] netlink: 84 bytes leftover after parsing attributes in process `syz.0.667'. [ 176.687291][ T8512] team0: Port device bridge2 removed [ 176.706979][ T8514] netlink: 96 bytes leftover after parsing attributes in process `syz.2.670'. [ 176.757678][ T8515] team0: Failed to send options change via netlink (err -105) [ 176.784011][ T8515] team0: Failed to send options change via netlink (err -105) [ 176.803985][ T8515] team0: Mode changed to "activebackup" [ 176.831609][ T8521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.671'. [ 176.994226][ T8530] ip6t_srh: unknown srh invflags 4449 [ 177.000366][ T8526] netlink: 16 bytes leftover after parsing attributes in process `syz.4.673'. [ 177.010488][ T8534] ip6t_srh: unknown srh invflags 4449 [ 177.022140][ T8528] netlink: 'syz.2.674': attribute type 11 has an invalid length. [ 177.030183][ T8528] netlink: 20 bytes leftover after parsing attributes in process `syz.2.674'. [ 177.123008][ T8537] lo speed is unknown, defaulting to 1000 [ 177.276398][ T8543] tipc: Enabled bearer , priority 22 [ 177.516713][ T8559] netlink: 596 bytes leftover after parsing attributes in process `syz.4.681'. [ 177.953734][ T8570] netlink: 'syz.3.684': attribute type 2 has an invalid length. [ 178.029449][ T8570] fþ: entered promiscuous mode [ 178.052122][ T8573] netlink: 40 bytes leftover after parsing attributes in process `syz.2.685'. [ 178.086182][ T8573] tipc: Enabling of bearer rejected, failed to enable media [ 178.114293][ T8573] netlink: 252 bytes leftover after parsing attributes in process `syz.2.685'. [ 178.389735][ T8588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.690'. [ 178.414002][ T8590] batadv3: entered promiscuous mode [ 178.421358][ T8590] batadv3: entered allmulticast mode [ 178.563130][ T8601] openvswitch: netlink: IPv4 tunnel dst address is zero [ 182.605392][ T8652] hsr0: entered promiscuous mode [ 182.625111][ T8651] hsr_slave_0: left promiscuous mode [ 182.633928][ T8651] hsr_slave_1: left promiscuous mode [ 182.737526][ T8651] hsr0 (unregistering): left promiscuous mode [ 182.755406][ T8670] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.778460][ T8677] xt_TPROXY: Can be used only with -p tcp or -p udp [ 182.788277][ T8675] netlink: 'syz.1.710': attribute type 9 has an invalid length. [ 182.852482][ T8670] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.950986][ T8670] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.983298][ T8685] netlink: 'syz.3.714': attribute type 15 has an invalid length. [ 182.996006][ T8685] __nla_validate_parse: 6 callbacks suppressed [ 182.996027][ T8685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.714'. [ 183.022989][ T8685] netlink: 'syz.3.714': attribute type 1 has an invalid length. [ 183.040464][ T8670] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.044931][ T8685] netlink: 'syz.3.714': attribute type 2 has an invalid length. [ 183.071009][ T8685] netlink: 80 bytes leftover after parsing attributes in process `syz.3.714'. [ 183.085983][ T8684] netlink: 16 bytes leftover after parsing attributes in process `syz.2.712'. [ 183.220274][ T8670] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.253779][ T8670] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.278945][ T8693] lo speed is unknown, defaulting to 1000 [ 183.296318][ T8670] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.361099][ T8696] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.403648][ T8696] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.463518][ T8670] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.501887][ T8699] netlink: 96 bytes leftover after parsing attributes in process `syz.0.719'. [ 183.525690][ T8702] netlink: 16 bytes leftover after parsing attributes in process `syz.1.716'. [ 184.056868][ T8696] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.165898][ T8696] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.194995][ T8713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.721'. [ 184.389121][ T8712] delete_channel: no stack [ 184.491316][ T8696] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.544987][ T8696] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.819711][ T8696] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.842555][ T8696] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.878716][ T8740] xt_TCPMSS: Only works on TCP SYN packets [ 184.989290][ T8696] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.009838][ T8696] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.052684][ T8696] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.101655][ T8696] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.145931][ T8696] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.157592][ T8696] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.174460][ T8696] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.183405][ T8696] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.336119][ T8755] netlink: 43 bytes leftover after parsing attributes in process `syz.4.732'. [ 185.370381][ T8756] netlink: 'syz.1.731': attribute type 1 has an invalid length. [ 185.402985][ T8756] netlink: 'syz.1.731': attribute type 1 has an invalid length. [ 185.422722][ T8757] netlink: 16 bytes leftover after parsing attributes in process `syz.1.731'. [ 185.431950][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.731'. [ 185.681157][ T8769] lo speed is unknown, defaulting to 1000 [ 186.836351][ T8812] FAULT_INJECTION: forcing a failure. [ 186.836351][ T8812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.868760][ T8812] CPU: 1 UID: 0 PID: 8812 Comm: syz.4.746 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 186.868793][ T8812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 186.868806][ T8812] Call Trace: [ 186.868813][ T8812] [ 186.868821][ T8812] dump_stack_lvl+0x241/0x360 [ 186.868865][ T8812] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.868889][ T8812] ? __pfx__printk+0x10/0x10 [ 186.868913][ T8812] ? __pfx_lock_release+0x10/0x10 [ 186.868959][ T8812] should_fail_ex+0x40a/0x550 [ 186.868994][ T8812] _copy_from_user+0x2d/0xb0 [ 186.869023][ T8812] __sys_bpf+0x1be/0x820 [ 186.869054][ T8812] ? __pfx___sys_bpf+0x10/0x10 [ 186.869094][ T8812] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 186.869126][ T8812] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 186.869162][ T8812] ? do_syscall_64+0x100/0x230 [ 186.869194][ T8812] __x64_sys_bpf+0x7c/0x90 [ 186.869221][ T8812] do_syscall_64+0xf3/0x230 [ 186.869249][ T8812] ? clear_bhb_loop+0x35/0x90 [ 186.869283][ T8812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.869308][ T8812] RIP: 0033:0x7f67a3d8d169 [ 186.869332][ T8812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.869349][ T8812] RSP: 002b:00007f67a4b47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 186.869380][ T8812] RAX: ffffffffffffffda RBX: 00007f67a3fa5fa0 RCX: 00007f67a3d8d169 [ 186.869395][ T8812] RDX: 0000000000000041 RSI: 0000400000000000 RDI: 0000000000000009 [ 186.869408][ T8812] RBP: 00007f67a4b47090 R08: 0000000000000000 R09: 0000000000000000 [ 186.869421][ T8812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.869433][ T8812] R13: 0000000000000000 R14: 00007f67a3fa5fa0 R15: 00007ffc9c8326b8 [ 186.869463][ T8812] [ 187.331101][ T8821] veth1_to_bond: entered allmulticast mode [ 187.356417][ T8821] veth1_to_bond: entered promiscuous mode [ 187.363832][ T8821] netlink: 24 bytes leftover after parsing attributes in process `syz.0.749'. [ 187.382042][ T8825] pim6reg1: entered promiscuous mode [ 187.387639][ T8825] pim6reg1: entered allmulticast mode [ 187.405224][ T8821] veth1_to_bond: left promiscuous mode [ 187.411369][ T8821] veth1_to_bond: left allmulticast mode [ 187.734102][ T8852] netlink: 'syz.2.751': attribute type 1 has an invalid length. [ 187.771143][ T8854] x_tables: duplicate underflow at hook 1 [ 188.035841][ T8866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.755'. [ 188.064956][ T8866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.755'. [ 188.197668][ T8876] syz_tun: entered allmulticast mode [ 188.205028][ T8876] syz_tun: left allmulticast mode [ 188.228713][ T8876] lo speed is unknown, defaulting to 1000 [ 189.236574][ T8907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.765'. [ 189.765531][ T8895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.932364][ T8908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.765'. [ 191.044233][ T8910] netlink: 32 bytes leftover after parsing attributes in process `syz.3.766'. [ 191.252529][ T8922] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.283906][ T8922] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.410031][ T8922] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.427691][ T8927] netlink: 40 bytes leftover after parsing attributes in process `syz.4.772'. [ 191.466942][ T8922] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.600669][ T8922] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.653270][ T8922] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.764164][ T8922] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.805091][ T8922] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.935848][ T8922] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.944147][ T8922] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.962610][ T8922] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.011194][ T8922] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.071105][ T8922] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.144116][ T8922] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.193401][ T8922] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.217331][ T8922] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.268452][ T8957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.779'. [ 192.278349][ T8957] netlink: 48 bytes leftover after parsing attributes in process `syz.1.779'. [ 192.637098][ T8974] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.716378][ T8978] openvswitch: netlink: Actions may not be safe on all matching packets [ 192.771733][ T8985] netlink: 16 bytes leftover after parsing attributes in process `syz.3.790'. [ 192.830755][ T8974] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.062320][ T8974] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.175353][ T8997] dummy0: entered promiscuous mode [ 193.228495][ T9003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.794'. [ 193.249573][ T8974] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.378279][ T8993] netlink: 88 bytes leftover after parsing attributes in process `syz.4.792'. [ 193.388879][ T8993] netlink: 24 bytes leftover after parsing attributes in process `syz.4.792'. [ 193.410141][ T8993] netlink: 16 bytes leftover after parsing attributes in process `syz.4.792'. [ 193.419509][ T8993] netlink: 80 bytes leftover after parsing attributes in process `syz.4.792'. [ 193.611398][ T9005] lo speed is unknown, defaulting to 1000 [ 193.698014][ T9010] netlink: 'syz.0.796': attribute type 21 has an invalid length. [ 193.707410][ T8974] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.733576][ T8974] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.781752][ T8974] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.828739][ T8974] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.949078][ T9000] dummy0: left promiscuous mode [ 194.514489][ T9039] FAULT_INJECTION: forcing a failure. [ 194.514489][ T9039] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.521402][ T9005] x_tables: duplicate entry at hook 2 [ 194.538273][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.544634][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.652771][ T9039] CPU: 0 UID: 0 PID: 9039 Comm: syz.3.803 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 194.652803][ T9039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 194.652816][ T9039] Call Trace: [ 194.652823][ T9039] [ 194.652832][ T9039] dump_stack_lvl+0x241/0x360 [ 194.652865][ T9039] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.652889][ T9039] ? __pfx__printk+0x10/0x10 [ 194.652913][ T9039] ? __pfx_lock_release+0x10/0x10 [ 194.652955][ T9039] should_fail_ex+0x40a/0x550 [ 194.652993][ T9039] _copy_from_user+0x2d/0xb0 [ 194.653024][ T9039] copy_msghdr_from_user+0xae/0x680 [ 194.653056][ T9039] ? __lock_acquire+0x1397/0x2100 [ 194.653092][ T9039] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 194.653122][ T9039] ? __fget_files+0x2a/0x410 [ 194.653156][ T9039] ? __fget_files+0x2a/0x410 [ 194.653197][ T9039] do_recvmmsg+0x3bd/0xab0 [ 194.653236][ T9039] ? __pfx_do_recvmmsg+0x10/0x10 [ 194.653285][ T9039] ? ksys_write+0x22a/0x2b0 [ 194.653309][ T9039] ? __pfx_lock_release+0x10/0x10 [ 194.653347][ T9039] ? sb_end_write+0xe9/0x1c0 [ 194.653378][ T9039] ? vfs_write+0x7fa/0xd10 [ 194.653411][ T9039] ? __mutex_unlock_slowpath+0x227/0x800 [ 194.653451][ T9039] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 194.653478][ T9039] ? __fget_files+0x2a/0x410 [ 194.653525][ T9039] __x64_sys_recvmmsg+0x199/0x250 [ 194.653555][ T9039] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 194.653584][ T9039] ? do_syscall_64+0x100/0x230 [ 194.653616][ T9039] ? do_syscall_64+0xb6/0x230 [ 194.653647][ T9039] do_syscall_64+0xf3/0x230 [ 194.653676][ T9039] ? clear_bhb_loop+0x35/0x90 [ 194.653709][ T9039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.653738][ T9039] RIP: 0033:0x7f90a118d169 [ 194.653756][ T9039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.653774][ T9039] RSP: 002b:00007f90a1f09038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 194.653802][ T9039] RAX: ffffffffffffffda RBX: 00007f90a13a5fa0 RCX: 00007f90a118d169 [ 194.653818][ T9039] RDX: 040000000000012d RSI: 0000400000000080 RDI: 0000000000000003 [ 194.653832][ T9039] RBP: 00007f90a1f09090 R08: 0000000000000000 R09: 0000000000000000 [ 194.653845][ T9039] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 194.653858][ T9039] R13: 0000000000000000 R14: 00007f90a13a5fa0 R15: 00007ffc38086eb8 [ 194.653889][ T9039] [ 195.584639][ T9071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.812'. [ 195.770805][ T9067] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.881690][ T9067] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.984228][ T9086] netlink: 6 bytes leftover after parsing attributes in process `syz.1.815'. [ 196.012760][ T9086] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.078848][ T9067] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.192447][ T9067] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.336435][ T9067] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.352183][ T9067] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.407641][ T9067] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.493513][ T9067] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.595078][ T9102] FAULT_INJECTION: forcing a failure. [ 196.595078][ T9102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.624964][ T9102] CPU: 1 UID: 0 PID: 9102 Comm: syz.3.819 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 196.625002][ T9102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 196.625014][ T9102] Call Trace: [ 196.625022][ T9102] [ 196.625031][ T9102] dump_stack_lvl+0x241/0x360 [ 196.625063][ T9102] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.625087][ T9102] ? __pfx__printk+0x10/0x10 [ 196.625109][ T9102] ? __pfx_lock_release+0x10/0x10 [ 196.625150][ T9102] should_fail_ex+0x40a/0x550 [ 196.625199][ T9102] _copy_from_user+0x2d/0xb0 [ 196.625229][ T9102] copy_msghdr_from_user+0xae/0x680 [ 196.625262][ T9102] ? __pfx___might_resched+0x10/0x10 [ 196.625294][ T9102] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 196.625331][ T9102] ? do_recvmmsg+0x44e/0xab0 [ 196.625357][ T9102] ? __might_fault+0xaa/0x120 [ 196.625384][ T9102] do_recvmmsg+0x3bd/0xab0 [ 196.625422][ T9102] ? __pfx_do_recvmmsg+0x10/0x10 [ 196.625470][ T9102] ? ksys_write+0x22a/0x2b0 [ 196.625493][ T9102] ? __pfx_lock_release+0x10/0x10 [ 196.625532][ T9102] ? sb_end_write+0xe9/0x1c0 [ 196.625563][ T9102] ? vfs_write+0x7fa/0xd10 [ 196.625588][ T9102] ? __mutex_unlock_slowpath+0x227/0x800 [ 196.625627][ T9102] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 196.625655][ T9102] ? __fget_files+0x2a/0x410 [ 196.625702][ T9102] __x64_sys_recvmmsg+0x199/0x250 [ 196.625732][ T9102] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 196.625760][ T9102] ? do_syscall_64+0x100/0x230 [ 196.625792][ T9102] ? do_syscall_64+0xb6/0x230 [ 196.625823][ T9102] do_syscall_64+0xf3/0x230 [ 196.625851][ T9102] ? clear_bhb_loop+0x35/0x90 [ 196.625883][ T9102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.625912][ T9102] RIP: 0033:0x7f90a118d169 [ 196.625931][ T9102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.625949][ T9102] RSP: 002b:00007f90a1f09038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 196.625972][ T9102] RAX: ffffffffffffffda RBX: 00007f90a13a5fa0 RCX: 00007f90a118d169 [ 196.625987][ T9102] RDX: 040000000000012d RSI: 0000400000000080 RDI: 0000000000000003 [ 196.626002][ T9102] RBP: 00007f90a1f09090 R08: 0000000000000000 R09: 0000000000000000 [ 196.626015][ T9102] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 196.626028][ T9102] R13: 0000000000000000 R14: 00007f90a13a5fa0 R15: 00007ffc38086eb8 [ 196.626059][ T9102] [ 196.988954][ T9105] netlink: 'syz.0.820': attribute type 1 has an invalid length. [ 197.057547][ T9105] netlink: 44 bytes leftover after parsing attributes in process `syz.0.820'. [ 197.197150][ T9120] pimreg: entered allmulticast mode [ 197.239755][ T9112] pimreg: left allmulticast mode [ 197.292934][ T9128] netlink: 20 bytes leftover after parsing attributes in process `syz.2.823'. [ 197.686971][ T9128] netlink: 20 bytes leftover after parsing attributes in process `syz.2.823'. [ 197.871979][ T9151] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.977589][ T9151] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.122246][ T9163] FAULT_INJECTION: forcing a failure. [ 198.122246][ T9163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.146675][ T9151] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.225134][ T9163] CPU: 0 UID: 0 PID: 9163 Comm: syz.1.834 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 198.225169][ T9163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 198.225180][ T9163] Call Trace: [ 198.225186][ T9163] [ 198.225194][ T9163] dump_stack_lvl+0x241/0x360 [ 198.225221][ T9163] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.225240][ T9163] ? __pfx__printk+0x10/0x10 [ 198.225258][ T9163] ? __pfx_lock_release+0x10/0x10 [ 198.225290][ T9163] should_fail_ex+0x40a/0x550 [ 198.225320][ T9163] _copy_from_user+0x2d/0xb0 [ 198.225344][ T9163] copy_msghdr_from_user+0xae/0x680 [ 198.225369][ T9163] ? __pfx___might_resched+0x10/0x10 [ 198.225394][ T9163] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 198.225423][ T9163] ? do_recvmmsg+0x44e/0xab0 [ 198.225443][ T9163] ? __might_fault+0xaa/0x120 [ 198.225465][ T9163] do_recvmmsg+0x3bd/0xab0 [ 198.225494][ T9163] ? __pfx_do_recvmmsg+0x10/0x10 [ 198.225530][ T9163] ? ksys_write+0x22a/0x2b0 [ 198.225548][ T9163] ? __pfx_lock_release+0x10/0x10 [ 198.225578][ T9163] ? sb_end_write+0xe9/0x1c0 [ 198.225602][ T9163] ? vfs_write+0x7fa/0xd10 [ 198.225622][ T9163] ? __mutex_unlock_slowpath+0x227/0x800 [ 198.225652][ T9163] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 198.225673][ T9163] ? __fget_files+0x2a/0x410 [ 198.225709][ T9163] __x64_sys_recvmmsg+0x199/0x250 [ 198.225732][ T9163] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 198.225754][ T9163] ? do_syscall_64+0x100/0x230 [ 198.225779][ T9163] ? do_syscall_64+0xb6/0x230 [ 198.225822][ T9163] do_syscall_64+0xf3/0x230 [ 198.225844][ T9163] ? clear_bhb_loop+0x35/0x90 [ 198.225871][ T9163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.225893][ T9163] RIP: 0033:0x7f846598d169 [ 198.225907][ T9163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.225922][ T9163] RSP: 002b:00007f84667f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 198.225941][ T9163] RAX: ffffffffffffffda RBX: 00007f8465ba5fa0 RCX: 00007f846598d169 [ 198.225954][ T9163] RDX: 040000000000012d RSI: 0000400000000080 RDI: 0000000000000003 [ 198.225966][ T9163] RBP: 00007f84667f7090 R08: 0000000000000000 R09: 0000000000000000 [ 198.225976][ T9163] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 198.225986][ T9163] R13: 0000000000000000 R14: 00007f8465ba5fa0 R15: 00007fff50997ff8 [ 198.226010][ T9163] [ 198.774458][ T9177] netlink: 'syz.1.836': attribute type 1 has an invalid length. [ 198.806541][ T9151] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.093329][ T9151] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.123931][ T47] IPVS: starting estimator thread 0... [ 199.152198][ T9151] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.222844][ T9151] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.234918][ T9189] IPVS: using max 22 ests per chain, 52800 per kthread [ 199.290608][ T9151] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.429083][ T47] hid-generic 0005:0458:0009.0001: unknown main item tag 0x0 [ 199.461257][ T47] hid-generic 0005:0458:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa [ 199.462667][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.841'. [ 199.508286][ T9197] netlink: 12 bytes leftover after parsing attributes in process `syz.4.842'. [ 199.519388][ T9195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.841'. [ 199.559618][ T9200] netlink: 44 bytes leftover after parsing attributes in process `syz.3.841'. [ 199.569437][ T9197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.842'. [ 199.569581][ T9195] nbd: socks must be embedded in a SOCK_ITEM attr [ 199.702107][ T9201] netlink: 32 bytes leftover after parsing attributes in process `syz.1.843'. [ 199.711304][ T9201] netlink: 7 bytes leftover after parsing attributes in process `syz.1.843'. [ 199.929028][ T9215] FAULT_INJECTION: forcing a failure. [ 199.929028][ T9215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.975298][ T9215] CPU: 0 UID: 0 PID: 9215 Comm: syz.0.847 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 199.975330][ T9215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 199.975343][ T9215] Call Trace: [ 199.975351][ T9215] [ 199.975360][ T9215] dump_stack_lvl+0x241/0x360 [ 199.975394][ T9215] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.975417][ T9215] ? __pfx__printk+0x10/0x10 [ 199.975441][ T9215] ? __pfx_lock_release+0x10/0x10 [ 199.975482][ T9215] should_fail_ex+0x40a/0x550 [ 199.975520][ T9215] _copy_from_user+0x2d/0xb0 [ 199.975550][ T9215] copy_msghdr_from_user+0xae/0x680 [ 199.975584][ T9215] ? __pfx___might_resched+0x10/0x10 [ 199.975615][ T9215] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 199.975652][ T9215] ? do_recvmmsg+0x44e/0xab0 [ 199.975678][ T9215] ? __might_fault+0xaa/0x120 [ 199.975705][ T9215] do_recvmmsg+0x3bd/0xab0 [ 199.975742][ T9215] ? __pfx_do_recvmmsg+0x10/0x10 [ 199.975786][ T9215] ? ksys_write+0x22a/0x2b0 [ 199.975811][ T9215] ? __pfx_lock_release+0x10/0x10 [ 199.975849][ T9215] ? sb_end_write+0xe9/0x1c0 [ 199.975880][ T9215] ? vfs_write+0x7fa/0xd10 [ 199.975912][ T9215] ? __mutex_unlock_slowpath+0x227/0x800 [ 199.975950][ T9215] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 199.975977][ T9215] ? __fget_files+0x2a/0x410 [ 199.976025][ T9215] __x64_sys_recvmmsg+0x199/0x250 [ 199.976055][ T9215] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 199.976085][ T9215] ? do_syscall_64+0x100/0x230 [ 199.976116][ T9215] ? do_syscall_64+0xb6/0x230 [ 199.976146][ T9215] do_syscall_64+0xf3/0x230 [ 199.976175][ T9215] ? clear_bhb_loop+0x35/0x90 [ 199.976205][ T9215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.976230][ T9215] RIP: 0033:0x7f4cdbb8d169 [ 199.976249][ T9215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.976266][ T9215] RSP: 002b:00007f4cdca00038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 199.976288][ T9215] RAX: ffffffffffffffda RBX: 00007f4cdbda5fa0 RCX: 00007f4cdbb8d169 [ 199.976303][ T9215] RDX: 040000000000012d RSI: 0000400000000080 RDI: 0000000000000003 [ 199.976317][ T9215] RBP: 00007f4cdca00090 R08: 0000000000000000 R09: 0000000000000000 [ 199.976334][ T9215] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 199.976347][ T9215] R13: 0000000000000000 R14: 00007f4cdbda5fa0 R15: 00007fff098353b8 [ 199.976377][ T9215] [ 200.516500][ T9240] netlink: 48 bytes leftover after parsing attributes in process `syz.3.853'. [ 200.538027][ T9240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.853'. [ 200.550364][ T9236] openvswitch: netlink: Missing valid actions attribute. [ 200.566893][ T9236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.934458][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.856'. [ 200.966150][ T9253] netlink: 'syz.1.856': attribute type 1 has an invalid length. [ 201.080050][ T9263] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.098172][ T9263] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.165302][ T9263] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.191633][ T9263] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.276566][ T9268] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.320218][ T9263] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.367262][ T9263] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.416546][ T9268] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.498580][ T9263] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.521700][ T9263] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.602025][ T9268] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.681783][ T9268] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.725055][ T5853] Bluetooth: hci3: command 0x0406 tx timeout [ 201.731288][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 201.737780][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 201.820725][ T9263] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.829744][ T9263] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.853497][ T9263] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.863631][ T9263] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.890172][ T9263] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.899484][ T9263] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.920475][ T9263] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.930214][ T9263] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.232225][ T9275] FAULT_INJECTION: forcing a failure. [ 202.232225][ T9275] name fail_futex, interval 1, probability 0, space 0, times 1 [ 202.245887][ T9275] CPU: 0 UID: 0 PID: 9275 Comm: syz.4.864 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 202.245917][ T9275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 202.245931][ T9275] Call Trace: [ 202.245938][ T9275] [ 202.245946][ T9275] dump_stack_lvl+0x241/0x360 [ 202.245979][ T9275] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.246003][ T9275] ? __pfx__printk+0x10/0x10 [ 202.246022][ T9275] ? is_valid_gup_args+0x124/0x200 [ 202.246047][ T9275] ? get_user_pages_fast+0xcc/0x160 [ 202.246073][ T9275] ? __pfx_get_user_pages_fast+0x10/0x10 [ 202.246098][ T9275] should_fail_ex+0x40a/0x550 [ 202.246136][ T9275] get_futex_key+0x9b3/0xf40 [ 202.246170][ T9275] ? __pfx_get_futex_key+0x10/0x10 [ 202.246199][ T9275] ? __lock_acquire+0x1397/0x2100 [ 202.246241][ T9275] futex_wake+0x12a/0x5c0 [ 202.246282][ T9275] ? __pfx_futex_wake+0x10/0x10 [ 202.246330][ T9275] do_futex+0x392/0x560 [ 202.246362][ T9275] ? __pfx_do_futex+0x10/0x10 [ 202.246387][ T9275] ? __mutex_unlock_slowpath+0x227/0x800 [ 202.246419][ T9275] ? __might_fault+0xaa/0x120 [ 202.246445][ T9275] mm_release+0x193/0x430 [ 202.246471][ T9275] ? exit_robust_list+0x2cf/0x2f0 [ 202.246508][ T9275] ? __pfx_mm_release+0x10/0x10 [ 202.246531][ T9275] ? _raw_spin_unlock_irq+0x23/0x50 [ 202.246554][ T9275] ? lockdep_hardirqs_on+0x99/0x150 [ 202.246592][ T9275] exit_mm+0xb0/0x310 [ 202.246625][ T9275] ? __pfx_exit_mm+0x10/0x10 [ 202.246656][ T9275] ? taskstats_exit+0x326/0xa60 [ 202.246694][ T9275] do_exit+0x9ad/0x28e0 [ 202.246737][ T9275] ? __pfx_do_exit+0x10/0x10 [ 202.246769][ T9275] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 202.246801][ T9275] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 202.246837][ T9275] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 202.246868][ T9275] ? _raw_spin_lock_irq+0xdf/0x120 [ 202.246896][ T9275] do_group_exit+0x207/0x2c0 [ 202.246926][ T9275] ? _raw_spin_unlock_irq+0x23/0x50 [ 202.246948][ T9275] ? lockdep_hardirqs_on+0x99/0x150 [ 202.246978][ T9275] get_signal+0x168c/0x1720 [ 202.247018][ T9275] ? __pfx_get_signal+0x10/0x10 [ 202.247053][ T9275] arch_do_signal_or_restart+0x96/0x860 [ 202.247083][ T9275] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 202.247109][ T9275] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 202.247154][ T9275] ? syscall_exit_to_user_mode+0xa3/0x340 [ 202.247185][ T9275] syscall_exit_to_user_mode+0xce/0x340 [ 202.247217][ T9275] do_syscall_64+0x100/0x230 [ 202.247247][ T9275] ? clear_bhb_loop+0x35/0x90 [ 202.247280][ T9275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.247308][ T9275] RIP: 0033:0x7f67a3d8d169 [ 202.247326][ T9275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.247344][ T9275] RSP: 002b:00007f67a4b47038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 202.247368][ T9275] RAX: fffffffffffffe00 RBX: 00007f67a3fa5fa0 RCX: 00007f67a3d8d169 [ 202.247384][ T9275] RDX: 040000000000012d RSI: 0000400000000080 RDI: 0000000000000003 [ 202.247399][ T9275] RBP: 00007f67a4b47090 R08: 0000000000000000 R09: 0000000000000000 [ 202.247412][ T9275] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 202.247425][ T9275] R13: 0000000000000000 R14: 00007f67a3fa5fa0 R15: 00007ffc9c8326b8 [ 202.247456][ T9275] [ 203.107997][ T9268] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.132721][ T9268] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.167280][ T9268] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.176396][ T9324] lo: entered allmulticast mode [ 203.190177][ T9325] lo speed is unknown, defaulting to 1000 [ 203.221099][ T9268] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.286574][ T9328] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.391193][ T9328] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.670947][ T9328] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.929285][ T9328] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.164124][ T9362] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.241235][ T9362] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.442109][ T9362] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.462213][ T9362] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.557270][ T9328] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.595147][ T9362] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.635273][ T9362] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.691606][ T9328] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.730589][ T9362] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.783487][ T9362] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.809035][ T9328] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.852424][ T9328] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.873124][ T9386] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.038516][ T9386] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.100158][ T9386] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.157485][ T9396] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 205.215389][ T9386] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.277668][ T9362] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.303610][ T9362] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.344563][ T9362] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.361297][ T9362] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.401787][ T9362] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.452535][ T9362] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.481145][ T9362] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.515169][ T9362] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.580221][ T9411] netlink: 'syz.2.898': attribute type 1 has an invalid length. [ 205.614931][ T9411] __nla_validate_parse: 5 callbacks suppressed [ 205.614955][ T9411] netlink: 224 bytes leftover after parsing attributes in process `syz.2.898'. [ 205.991944][ T9424] netlink: 128 bytes leftover after parsing attributes in process `syz.2.901'. [ 206.193546][ T9432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.904'. [ 206.200231][ T9386] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.286672][ T9386] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.306234][ T9432] netlink: 'syz.2.904': attribute type 2 has an invalid length. [ 206.313963][ T9432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.904'. [ 206.358632][ T9433] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.384046][ T9433] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.447145][ T9386] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.482123][ T9386] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.527608][ T9443] openvswitch: netlink: Actions may not be safe on all matching packets [ 206.567109][ T9433] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.631509][ T9446] delete_channel: no stack [ 206.664799][ T9433] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.806986][ T9433] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.827946][ T9433] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.930662][ T9451] lo speed is unknown, defaulting to 1000 [ 206.996962][ T9433] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.064896][ T9433] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.152285][ T9464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.917'. [ 207.202061][ T9464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.917'. [ 207.232388][ T9464] netlink: 'syz.0.917': attribute type 19 has an invalid length. [ 207.933204][ T9493] netlink: 'syz.0.922': attribute type 16 has an invalid length. [ 207.941678][ T9493] netlink: 'syz.0.922': attribute type 17 has an invalid length. [ 207.954277][ T9499] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 208.078705][ T9502] netlink: 'syz.1.924': attribute type 2 has an invalid length. [ 208.095557][ T9493] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 208.392212][ T9510] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.497054][ T9510] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.771395][ T9433] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.794774][ T9433] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.893906][ T9510] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.946968][ T9433] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.957488][ T9433] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.003390][ T9433] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.051512][ T9433] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.099579][ T9510] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.162491][ T9433] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.191442][ T9433] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.299714][ T9542] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 209.536580][ T9545] lo speed is unknown, defaulting to 1000 [ 209.803655][ T9563] netlink: 560 bytes leftover after parsing attributes in process `syz.1.936'. [ 209.813725][ T9563] netlink: 36 bytes leftover after parsing attributes in process `syz.1.936'. [ 210.075604][ T9571] netlink: 32 bytes leftover after parsing attributes in process `syz.2.942'. [ 210.354034][ T9582] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.365562][ T9582] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.446054][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.503427][ T9582] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.549362][ T9582] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.692905][ T9582] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.732206][ T9582] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.856664][ T9582] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.912392][ T9582] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.043608][ T9510] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.091826][ T9510] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.237598][ T9510] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.310378][ T9510] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.330268][ T9604] netlink: 16 bytes leftover after parsing attributes in process `syz.4.951'. [ 211.531910][ T9610] netlink: 'syz.1.953': attribute type 3 has an invalid length. [ 211.563592][ T9610] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.953'. [ 211.803116][ T9626] FAULT_INJECTION: forcing a failure. [ 211.803116][ T9626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.828035][ T9626] CPU: 0 UID: 0 PID: 9626 Comm: syz.4.956 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 211.828070][ T9626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 211.828084][ T9626] Call Trace: [ 211.828092][ T9626] [ 211.828100][ T9626] dump_stack_lvl+0x241/0x360 [ 211.828134][ T9626] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.828159][ T9626] ? __pfx__printk+0x10/0x10 [ 211.828187][ T9626] ? snprintf+0xda/0x120 [ 211.828213][ T9626] should_fail_ex+0x40a/0x550 [ 211.828250][ T9626] _copy_to_user+0x31/0xb0 [ 211.828282][ T9626] simple_read_from_buffer+0xca/0x150 [ 211.828316][ T9626] proc_fail_nth_read+0x1e9/0x250 [ 211.828350][ T9626] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 211.828384][ T9626] ? rw_verify_area+0x243/0x630 [ 211.828407][ T9626] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 211.828439][ T9626] vfs_read+0x1f8/0xb40 [ 211.828463][ T9626] ? fdget_pos+0x254/0x320 [ 211.828496][ T9626] ? __pfx___mutex_lock+0x10/0x10 [ 211.828525][ T9626] ? __pfx_vfs_read+0x10/0x10 [ 211.828552][ T9626] ? __fget_files+0x2a/0x410 [ 211.828584][ T9626] ? __fget_files+0x395/0x410 [ 211.828614][ T9626] ? __fget_files+0x2a/0x410 [ 211.828655][ T9626] ksys_read+0x18f/0x2b0 [ 211.828688][ T9626] ? __pfx_ksys_read+0x10/0x10 [ 211.828713][ T9626] ? do_syscall_64+0x100/0x230 [ 211.828744][ T9626] ? do_syscall_64+0xb6/0x230 [ 211.828776][ T9626] do_syscall_64+0xf3/0x230 [ 211.828805][ T9626] ? clear_bhb_loop+0x35/0x90 [ 211.828838][ T9626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.828867][ T9626] RIP: 0033:0x7f67a3d8bb7c [ 211.828885][ T9626] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 211.828904][ T9626] RSP: 002b:00007f67a4b47030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 211.828926][ T9626] RAX: ffffffffffffffda RBX: 00007f67a3fa5fa0 RCX: 00007f67a3d8bb7c [ 211.828942][ T9626] RDX: 000000000000000f RSI: 00007f67a4b470a0 RDI: 0000000000000003 [ 211.828955][ T9626] RBP: 00007f67a4b47090 R08: 0000000000000000 R09: 0000000000000000 [ 211.828968][ T9626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.828981][ T9626] R13: 0000000000000000 R14: 00007f67a3fa5fa0 R15: 00007ffc9c8326b8 [ 211.829013][ T9626] [ 212.505732][ T9638] netlink: 'syz.4.960': attribute type 10 has an invalid length. [ 212.514118][ T9638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.960'. [ 214.263652][ T9645] veth2: entered promiscuous mode [ 214.273951][ T9645] veth2: entered allmulticast mode [ 214.293163][ T9637] lo speed is unknown, defaulting to 1000 [ 214.306048][ T9582] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.324909][ T9582] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.369789][ T9582] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.380891][ T9582] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.442513][ T9582] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.455183][ T9582] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.479568][ T9582] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.500278][ T9582] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.720348][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.963'. [ 214.748057][ T9653] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 214.763987][ T9653] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 215.164108][ T9664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.968'. [ 215.670039][ T9676] netlink: 32 bytes leftover after parsing attributes in process `syz.0.972'. [ 215.916406][ T9681] lo speed is unknown, defaulting to 1000 [ 216.005912][ T9681] IPv6: addrconf: prefix option has invalid lifetime [ 216.013111][ T9681] IPv6: addrconf: prefix option has invalid lifetime [ 216.205337][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.167736][ T5850] Bluetooth: hci4: command 0x0405 tx timeout [ 218.616411][ T9705] lo: left promiscuous mode [ 218.673679][ T9705] team0: left promiscuous mode [ 218.680367][ T9715] openvswitch: netlink: IP tunnel TTL not specified. [ 218.694310][ T9705] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 218.936343][ T9727] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.030012][ T9727] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.110314][ T9727] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.236759][ T9727] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.371563][ T9727] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.417122][ T9727] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.431204][ T9727] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.454388][ T9727] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.543806][ T9740] lo speed is unknown, defaulting to 1000 [ 220.135552][ T9755] netlink: 28 bytes leftover after parsing attributes in process `syz.3.998'. [ 220.249670][ T9755] netlink: 20 bytes leftover after parsing attributes in process `syz.3.998'. [ 221.967753][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.066469][ T9786] syzkaller0: entered promiscuous mode [ 223.072365][ T9786] syzkaller0: entered allmulticast mode [ 226.018501][ T9822] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.725188][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.193498][ T9854] FAULT_INJECTION: forcing a failure. [ 228.193498][ T9854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.207764][ T9854] CPU: 1 UID: 0 PID: 9854 Comm: syz.2.1025 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 228.207792][ T9854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 228.207804][ T9854] Call Trace: [ 228.207810][ T9854] [ 228.207818][ T9854] dump_stack_lvl+0x241/0x360 [ 228.207850][ T9854] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.207874][ T9854] ? __pfx__printk+0x10/0x10 [ 228.207897][ T9854] ? __pfx_lock_release+0x10/0x10 [ 228.207937][ T9854] should_fail_ex+0x40a/0x550 [ 228.207974][ T9854] _copy_from_user+0x2d/0xb0 [ 228.208004][ T9854] copy_msghdr_from_user+0xae/0x680 [ 228.208035][ T9854] ? __lock_acquire+0x1397/0x2100 [ 228.208071][ T9854] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 228.208100][ T9854] ? __fget_files+0x2a/0x410 [ 228.208135][ T9854] ? __fget_files+0x2a/0x410 [ 228.208174][ T9854] do_recvmmsg+0x3bd/0xab0 [ 228.208212][ T9854] ? __pfx_do_recvmmsg+0x10/0x10 [ 228.208260][ T9854] ? ksys_write+0x22a/0x2b0 [ 228.208283][ T9854] ? __pfx_lock_release+0x10/0x10 [ 228.208321][ T9854] ? sb_end_write+0xe9/0x1c0 [ 228.208352][ T9854] ? vfs_write+0x7fa/0xd10 [ 228.208378][ T9854] ? __mutex_unlock_slowpath+0x227/0x800 [ 228.208416][ T9854] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 228.208443][ T9854] ? __fget_files+0x2a/0x410 [ 228.208487][ T9854] __x64_sys_recvmmsg+0x199/0x250 [ 228.208513][ T9854] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 228.208537][ T9854] ? do_syscall_64+0x100/0x230 [ 228.208563][ T9854] ? do_syscall_64+0xb6/0x230 [ 228.208589][ T9854] do_syscall_64+0xf3/0x230 [ 228.208621][ T9854] ? clear_bhb_loop+0x35/0x90 [ 228.208649][ T9854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.208673][ T9854] RIP: 0033:0x7fe84d78d169 [ 228.208690][ T9854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.208705][ T9854] RSP: 002b:00007fe84e649038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 228.208726][ T9854] RAX: ffffffffffffffda RBX: 00007fe84d9a5fa0 RCX: 00007fe84d78d169 [ 228.208739][ T9854] RDX: 0400000000000284 RSI: 0000400000000040 RDI: 0000000000000003 [ 228.208752][ T9854] RBP: 00007fe84e649090 R08: 0000000000000000 R09: 0000000000000000 [ 228.208763][ T9854] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 228.208773][ T9854] R13: 0000000000000000 R14: 00007fe84d9a5fa0 R15: 00007ffc44b235a8 [ 228.208800][ T9854] [ 228.891682][ T9822] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.993840][ T9822] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.100221][ T9822] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.237441][ T9870] netlink: 'syz.3.1030': attribute type 5 has an invalid length. [ 229.246505][ T9822] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.261152][ T9870] ip6erspan0: entered promiscuous mode [ 229.330333][ T9822] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.351718][ T9822] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.417355][ T9822] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.481068][ T9875] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.491457][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.491762][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.634566][ T9875] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.746177][ T9875] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.911007][ T9875] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.062999][ T9875] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.093995][ T9875] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.147281][ T9875] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.184553][ T9875] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.198339][ T9904] netlink: 'syz.3.1040': attribute type 5 has an invalid length. [ 230.243046][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1040'. [ 230.382223][ T9908] FAULT_INJECTION: forcing a failure. [ 230.382223][ T9908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.404959][ T9908] CPU: 0 UID: 0 PID: 9908 Comm: syz.0.1041 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 230.404993][ T9908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 230.405007][ T9908] Call Trace: [ 230.405014][ T9908] [ 230.405023][ T9908] dump_stack_lvl+0x241/0x360 [ 230.405057][ T9908] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.405081][ T9908] ? __pfx__printk+0x10/0x10 [ 230.405105][ T9908] ? __pfx_lock_release+0x10/0x10 [ 230.405147][ T9908] should_fail_ex+0x40a/0x550 [ 230.405184][ T9908] _copy_from_user+0x2d/0xb0 [ 230.405214][ T9908] copy_msghdr_from_user+0xae/0x680 [ 230.405247][ T9908] ? __pfx___might_resched+0x10/0x10 [ 230.405279][ T9908] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 230.405324][ T9908] ? do_recvmmsg+0x44e/0xab0 [ 230.405351][ T9908] ? __might_fault+0xaa/0x120 [ 230.405378][ T9908] do_recvmmsg+0x3bd/0xab0 [ 230.405416][ T9908] ? __pfx_do_recvmmsg+0x10/0x10 [ 230.405474][ T9908] ? ksys_write+0x22a/0x2b0 [ 230.405498][ T9908] ? __pfx_lock_release+0x10/0x10 [ 230.405536][ T9908] ? sb_end_write+0xe9/0x1c0 [ 230.405568][ T9908] ? vfs_write+0x7fa/0xd10 [ 230.405593][ T9908] ? __mutex_unlock_slowpath+0x227/0x800 [ 230.405632][ T9908] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 230.405660][ T9908] ? __fget_files+0x2a/0x410 [ 230.405707][ T9908] __x64_sys_recvmmsg+0x199/0x250 [ 230.405738][ T9908] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 230.405766][ T9908] ? do_syscall_64+0x100/0x230 [ 230.405798][ T9908] ? do_syscall_64+0xb6/0x230 [ 230.405830][ T9908] do_syscall_64+0xf3/0x230 [ 230.405859][ T9908] ? clear_bhb_loop+0x35/0x90 [ 230.405891][ T9908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.405924][ T9908] RIP: 0033:0x7f4cdbb8d169 [ 230.405943][ T9908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.405961][ T9908] RSP: 002b:00007f4cdca00038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 230.405984][ T9908] RAX: ffffffffffffffda RBX: 00007f4cdbda5fa0 RCX: 00007f4cdbb8d169 [ 230.406000][ T9908] RDX: 0400000000000284 RSI: 0000400000000040 RDI: 0000000000000003 [ 230.406014][ T9908] RBP: 00007f4cdca00090 R08: 0000000000000000 R09: 0000000000000000 [ 230.406028][ T9908] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 230.406040][ T9908] R13: 0000000000000000 R14: 00007f4cdbda5fa0 R15: 00007fff098353b8 [ 230.406071][ T9908] [ 230.946713][ T9922] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.029988][ T9922] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.079363][ T9928] netlink: 'syz.0.1049': attribute type 1 has an invalid length. [ 231.101824][ T9928] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1049'. [ 231.116641][ T9922] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.283804][ T9922] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.853542][ T9953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1054'. [ 232.850487][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.499107][ T9963] FAULT_INJECTION: forcing a failure. [ 233.499107][ T9963] name fail_futex, interval 1, probability 0, space 0, times 0 [ 233.512929][ T9963] CPU: 0 UID: 0 PID: 9963 Comm: syz.2.1057 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 233.512966][ T9963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 233.512980][ T9963] Call Trace: [ 233.512987][ T9963] [ 233.512995][ T9963] dump_stack_lvl+0x241/0x360 [ 233.513028][ T9963] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.513052][ T9963] ? __pfx__printk+0x10/0x10 [ 233.513075][ T9963] ? __pfx_register_lock_class+0x10/0x10 [ 233.513116][ T9963] should_fail_ex+0x40a/0x550 [ 233.513153][ T9963] get_futex_key+0x1a4/0xf40 [ 233.513190][ T9963] ? __pfx_get_futex_key+0x10/0x10 [ 233.513217][ T9963] ? __lock_acquire+0x1397/0x2100 [ 233.513256][ T9963] futex_wake+0x12a/0x5c0 [ 233.513296][ T9963] ? __pfx_futex_wake+0x10/0x10 [ 233.513344][ T9963] do_futex+0x392/0x560 [ 233.513376][ T9963] ? __pfx_do_futex+0x10/0x10 [ 233.513401][ T9963] ? __mutex_unlock_slowpath+0x227/0x800 [ 233.513433][ T9963] ? __might_fault+0xaa/0x120 [ 233.513459][ T9963] mm_release+0x193/0x430 [ 233.513484][ T9963] ? exit_robust_list+0x2cf/0x2f0 [ 233.513511][ T9963] ? __pfx_mm_release+0x10/0x10 [ 233.513534][ T9963] ? _raw_spin_unlock_irq+0x23/0x50 [ 233.513557][ T9963] ? lockdep_hardirqs_on+0x99/0x150 [ 233.513595][ T9963] exit_mm+0xb0/0x310 [ 233.513628][ T9963] ? __pfx_exit_mm+0x10/0x10 [ 233.513658][ T9963] ? taskstats_exit+0x326/0xa60 [ 233.513696][ T9963] do_exit+0x9ad/0x28e0 [ 233.513735][ T9963] ? __pfx_do_exit+0x10/0x10 [ 233.513765][ T9963] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 233.513797][ T9963] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 233.513832][ T9963] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 233.513862][ T9963] ? _raw_spin_lock_irq+0xdf/0x120 [ 233.513890][ T9963] do_group_exit+0x207/0x2c0 [ 233.513920][ T9963] ? _raw_spin_unlock_irq+0x23/0x50 [ 233.513950][ T9963] ? lockdep_hardirqs_on+0x99/0x150 [ 233.513979][ T9963] get_signal+0x168c/0x1720 [ 233.514018][ T9963] ? __pfx_get_signal+0x10/0x10 [ 233.514052][ T9963] arch_do_signal_or_restart+0x96/0x860 [ 233.514083][ T9963] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 233.514107][ T9963] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 233.514152][ T9963] ? syscall_exit_to_user_mode+0xa3/0x340 [ 233.514182][ T9963] syscall_exit_to_user_mode+0xce/0x340 [ 233.514214][ T9963] do_syscall_64+0x100/0x230 [ 233.514242][ T9963] ? clear_bhb_loop+0x35/0x90 [ 233.514275][ T9963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.514303][ T9963] RIP: 0033:0x7fe84d78d169 [ 233.514322][ T9963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.514340][ T9963] RSP: 002b:00007fe84e649038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 233.514363][ T9963] RAX: fffffffffffffe00 RBX: 00007fe84d9a5fa0 RCX: 00007fe84d78d169 [ 233.514378][ T9963] RDX: 0400000000000284 RSI: 0000400000000040 RDI: 0000000000000003 [ 233.514393][ T9963] RBP: 00007fe84e649090 R08: 0000000000000000 R09: 0000000000000000 [ 233.514406][ T9963] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 233.514418][ T9963] R13: 0000000000000000 R14: 00007fe84d9a5fa0 R15: 00007ffc44b235a8 [ 233.514449][ T9963] [ 234.559985][ T9956] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.612568][ T9922] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.649015][ T9956] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.694536][ T9922] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.720628][ T9922] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.758964][ T9956] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.783750][ T9922] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.871881][ T9956] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.016388][ T9956] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.041622][ T9956] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.078187][ T9956] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.114024][ T9956] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.217783][T10019] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 238.501149][T10038] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.604890][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.622439][T10038] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.662032][T10048] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1082'. [ 238.688968][T10048] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1082'. [ 238.738204][T10038] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.765516][T10048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1082'. [ 238.848295][T10038] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.015066][T10064] vlan3: entered promiscuous mode [ 239.035576][T10064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1087'. [ 239.049106][T10038] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.065040][T10064] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1087'. [ 239.106850][T10038] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.141424][T10038] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.194286][T10038] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.236610][T10072] netlink: 'syz.1.1090': attribute type 21 has an invalid length. [ 239.389530][T10077] sctp: [Deprecated]: syz.3.1091 (pid 10077) Use of int in max_burst socket option. [ 239.389530][T10077] Use struct sctp_assoc_value instead [ 239.590136][T10086] tipc: Enabled bearer , priority 0 [ 239.601002][T10083] tipc: Resetting bearer [ 240.203002][ T5841] Bluetooth: hci4: link tx timeout [ 240.209823][ T5841] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 240.220552][ T5841] Bluetooth: hci4: link tx timeout [ 240.226930][ T5841] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 240.237435][ T5841] Bluetooth: hci4: link tx timeout [ 240.242608][ T5841] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 240.252740][ T5841] Bluetooth: hci4: link tx timeout [ 240.258002][ T5841] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 242.167259][T10083] tipc: Disabling bearer [ 242.285170][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 242.481934][T10132] sctp: [Deprecated]: syz.1.1104 (pid 10132) Use of int in max_burst socket option. [ 242.481934][T10132] Use struct sctp_assoc_value instead [ 242.489234][T10135] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1102'. [ 242.544213][T10132] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1104'. [ 242.578168][T10132] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1104'. [ 242.598068][T10128] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1102'. [ 242.652908][T10128] nbd: device at index 64 is going down [ 243.100326][T10168] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1114'. [ 243.399309][T10173] pimreg: entered allmulticast mode [ 243.927512][T10179] team0: Port device gtp1 added [ 243.934351][T10177] tipc: Enabled bearer , priority 0 [ 243.966650][T10176] tipc: Resetting bearer [ 244.364981][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.373510][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.381930][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.445049][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 246.631475][T10176] tipc: Disabling bearer [ 246.672588][T10214] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.699970][T10219] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 246.778631][T10224] Bluetooth: MGMT ver 1.23 [ 246.826606][T10214] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.880523][T10229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1132'. [ 246.917701][T10214] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.951304][T10229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1132'. [ 247.054626][T10214] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.083670][T10237] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 247.149559][T10234] ipt_ECN: cannot use operation on non-tcp rule [ 247.208013][T10243] lo speed is unknown, defaulting to 1000 [ 247.242381][T10214] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.339342][T10214] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.340330][T10245] netlink: 'syz.4.1137': attribute type 2 has an invalid length. [ 247.379320][T10214] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.384103][T10245] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1137'. [ 247.409280][T10214] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.529348][T10245] xt_ecn: cannot match TCP bits for non-tcp packets [ 247.868456][T10262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1141'. [ 247.908832][T10259] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.946057][T10269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1142'. [ 247.976011][T10269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1142'. [ 247.978543][T10265] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1143'. [ 248.071158][T10259] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.173156][T10275] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1144'. [ 248.184055][T10265] 8021q: adding VLAN 0 to HW filter on device bond1 [ 248.196484][T10265] team0: Port device bond1 added [ 248.307286][T10259] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.566575][T10259] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.667822][T10279] lo speed is unknown, defaulting to 1000 [ 248.755849][T10300] netlink: 1004 bytes leftover after parsing attributes in process `syz.3.1149'. [ 248.960986][T10305] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1146'. [ 248.977272][T10259] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.327830][T10259] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.404982][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.456590][T10259] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.674000][T10259] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.705060][T10329] netlink: 'syz.0.1152': attribute type 2 has an invalid length. [ 249.750189][T10329] Tq€: entered promiscuous mode [ 249.800070][T10329] netlink: 'syz.0.1152': attribute type 10 has an invalid length. [ 250.078125][T10345] netlink: 'syz.4.1155': attribute type 1 has an invalid length. [ 250.242120][T10349] bond2: (slave gretap1): making interface the new active one [ 250.264452][T10349] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 250.378412][T10355] tipc: Enabling of bearer rejected, failed to enable media [ 250.558557][T10361] tipc: Enabling of bearer rejected, failed to enable media [ 250.703217][T10366] lo speed is unknown, defaulting to 1000 [ 250.730852][T10366] lo speed is unknown, defaulting to 1000 [ 250.745812][T10366] lo speed is unknown, defaulting to 1000 [ 250.759427][T10366] infiniband s›z0: RDMA CMA: cma_listen_on_dev, error -98 [ 250.789380][T10366] lo speed is unknown, defaulting to 1000 [ 250.796763][T10366] lo speed is unknown, defaulting to 1000 [ 250.804026][T10366] lo speed is unknown, defaulting to 1000 [ 250.836505][T10366] lo speed is unknown, defaulting to 1000 [ 250.860632][T10366] lo speed is unknown, defaulting to 1000 [ 251.279006][T10383] netlink: 'syz.4.1165': attribute type 1 has an invalid length. [ 251.390320][T10389] Cannot find add_set index 0 as target [ 251.452384][T10393] tipc: Enabled bearer , priority 0 [ 251.470909][T10392] tipc: Disabling bearer [ 251.919257][T10418] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073357230079) [ 251.920501][T10417] __nla_validate_parse: 6 callbacks suppressed [ 251.920521][T10417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1175'. [ 251.933085][T10418] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 251.967617][T10417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1175'. [ 251.979213][T10419] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1176'. [ 252.116166][T10425] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1178'. [ 252.280403][T10432] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1180'. [ 252.437478][T10434] syzkaller1: tun_chr_ioctl cmd 35108 [ 252.768100][T10437] tipc: Enabling of bearer rejected, already enabled [ 253.063846][T10449] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.085477][T10451] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1188'. [ 253.109639][T10451] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1188'. [ 253.154487][T10449] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.221402][T10455] lo speed is unknown, defaulting to 1000 [ 253.243958][T10449] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.274091][T10455] lo speed is unknown, defaulting to 1000 [ 253.297809][T10462] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.359851][T10449] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.411998][T10462] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.531588][T10462] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.595043][T10449] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.610308][T10449] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.626235][T10449] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.641164][T10449] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.659947][T10462] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.819873][T10462] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.857468][T10462] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.920129][T10462] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.990319][T10462] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.136912][T10467] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.165867][T10467] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.457037][T10467] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.502168][T10467] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.614862][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.623287][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.631822][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.736815][T10467] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.806144][T10467] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.851800][T10488] tipc: Started in network mode [ 254.860438][T10488] tipc: Node identity 7e5f2d76ea7a, cluster identity 4711 [ 254.905111][T10488] tipc: Enabled bearer , priority 0 [ 254.930100][T10467] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.984999][T10467] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.097475][T10487] tipc: Disabling bearer [ 255.371698][T10467] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.390818][T10467] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.447793][T10467] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.456836][T10467] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.473625][T10467] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.483590][T10467] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.503981][T10467] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.514222][T10467] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.713438][T10532] raw_sendmsg: syz.3.1209 forgot to set AF_INET. Fix it! [ 255.721981][T10532] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1209'. [ 255.732515][T10532] netlink: 'syz.3.1209': attribute type 2 has an invalid length. [ 255.740797][T10532] netlink: 'syz.3.1209': attribute type 1 has an invalid length. [ 255.752565][T10532] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1209'. [ 255.977709][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.994889][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.280346][T10551] netlink: 'syz.0.1215': attribute type 1 has an invalid length. [ 256.349332][T10553] tipc: Enabled bearer , priority 0 [ 256.495532][T10552] tipc: Resetting bearer [ 256.617846][T10563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1218'. [ 256.679421][T10565] netlink: 'syz.4.1218': attribute type 10 has an invalid length. [ 257.349450][ T7959] tipc: Node number set to 2485464438 [ 259.020019][T10552] tipc: Disabling bearer [ 259.046127][T10565] [ 259.048515][T10565] ====================================================== [ 259.055552][T10565] WARNING: possible circular locking dependency detected [ 259.062581][T10565] 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 Not tainted [ 259.069690][T10565] ------------------------------------------------------ [ 259.076711][T10565] syz.4.1218/10565 is trying to acquire lock: [ 259.082774][T10565] ffff888012ba8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_change_mac+0xc6/0x1160 [ 259.092551][T10565] [ 259.092551][T10565] but task is already holding lock: [ 259.099918][T10565] ffff8880127b4d28 (&dev->lock){+.+.}-{4:4}, at: dev_set_mac_address+0x2a/0x50 [ 259.108908][T10565] [ 259.108908][T10565] which lock already depends on the new lock. [ 259.108908][T10565] [ 259.119320][T10565] [ 259.119320][T10565] the existing dependency chain (in reverse order) is: [ 259.128336][T10565] [ 259.128336][T10565] -> #1 (&dev->lock){+.+.}-{4:4}: [ 259.135584][T10565] lock_acquire+0x1ed/0x550 [ 259.140624][T10565] __mutex_lock+0x19c/0x1010 [ 259.145750][T10565] register_netdevice+0x12d8/0x1b70 [ 259.151482][T10565] cfg80211_register_netdevice+0x149/0x2f0 [ 259.157821][T10565] ieee80211_if_add+0x119d/0x1780 [ 259.163374][T10565] ieee80211_register_hw+0x3708/0x42e0 [ 259.169359][T10565] mac80211_hwsim_new_radio+0x2a89/0x49f0 [ 259.175608][T10565] init_mac80211_hwsim+0x87a/0xb00 [ 259.181250][T10565] do_one_initcall+0x248/0x930 [ 259.186549][T10565] do_initcall_level+0x157/0x210 [ 259.192016][T10565] do_initcalls+0x71/0xd0 [ 259.196871][T10565] kernel_init_freeable+0x435/0x5d0 [ 259.202592][T10565] kernel_init+0x1d/0x2b0 [ 259.207466][T10565] ret_from_fork+0x4b/0x80 [ 259.212410][T10565] ret_from_fork_asm+0x1a/0x30 [ 259.217726][T10565] [ 259.217726][T10565] -> #0 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 259.225476][T10565] validate_chain+0x18ef/0x5920 [ 259.230876][T10565] __lock_acquire+0x1397/0x2100 [ 259.236269][T10565] lock_acquire+0x1ed/0x550 [ 259.241313][T10565] __mutex_lock+0x19c/0x1010 [ 259.246441][T10565] ieee80211_change_mac+0xc6/0x1160 [ 259.252179][T10565] netif_set_mac_address+0x327/0x510 [ 259.258003][T10565] dev_set_mac_address+0x38/0x50 [ 259.263484][T10565] bond_enslave+0xff3/0x3910 [ 259.268603][T10565] do_set_master+0x579/0x730 [ 259.273739][T10565] do_setlink+0xfee/0x40f0 [ 259.278704][T10565] rtnl_newlink+0x15a6/0x1d90 [ 259.283935][T10565] rtnetlink_rcv_msg+0x791/0xcf0 [ 259.289436][T10565] netlink_rcv_skb+0x206/0x480 [ 259.294746][T10565] netlink_unicast+0x7f6/0x990 [ 259.300047][T10565] netlink_sendmsg+0x8de/0xcb0 [ 259.305356][T10565] __sock_sendmsg+0x221/0x270 [ 259.310597][T10565] ____sys_sendmsg+0x53a/0x860 [ 259.315922][T10565] __sys_sendmsg+0x269/0x350 [ 259.321045][T10565] do_syscall_64+0xf3/0x230 [ 259.326110][T10565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.332564][T10565] [ 259.332564][T10565] other info that might help us debug this: [ 259.332564][T10565] [ 259.342795][T10565] Possible unsafe locking scenario: [ 259.342795][T10565] [ 259.350294][T10565] CPU0 CPU1 [ 259.355710][T10565] ---- ---- [ 259.361087][T10565] lock(&dev->lock); [ 259.365088][T10565] lock(&rdev->wiphy.mtx); [ 259.372132][T10565] lock(&dev->lock); [ 259.378648][T10565] lock(&rdev->wiphy.mtx); [ 259.383158][T10565] [ 259.383158][T10565] *** DEADLOCK *** [ 259.383158][T10565] [ 259.391304][T10565] 2 locks held by syz.4.1218/10565: [ 259.396506][T10565] #0: ffffffff8fed6e08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc4c/0x1d90 [ 259.405599][T10565] #1: ffff8880127b4d28 (&dev->lock){+.+.}-{4:4}, at: dev_set_mac_address+0x2a/0x50 [ 259.415031][T10565] [ 259.415031][T10565] stack backtrace: [ 259.420922][T10565] CPU: 0 UID: 0 PID: 10565 Comm: syz.4.1218 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 259.420944][T10565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 259.420955][T10565] Call Trace: [ 259.420962][T10565] [ 259.420971][T10565] dump_stack_lvl+0x241/0x360 [ 259.420995][T10565] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.421014][T10565] ? __pfx__printk+0x10/0x10 [ 259.421034][T10565] print_circular_bug+0x13a/0x1b0 [ 259.421057][T10565] check_noncircular+0x36a/0x4a0 [ 259.421078][T10565] ? __pfx_check_noncircular+0x10/0x10 [ 259.421103][T10565] ? lockdep_lock+0x123/0x2b0 [ 259.421127][T10565] ? radix_tree_node_alloc+0x19a/0x3c0 [ 259.421154][T10565] ? idr_get_free+0x296/0xab0 [ 259.421179][T10565] ? idr_alloc_u32+0x195/0x330 [ 259.421199][T10565] ? idr_alloc_cyclic+0x106/0x300 [ 259.421219][T10565] ? __kernfs_new_node+0x12d/0x870 [ 259.421245][T10565] ? kernfs_create_dir_ns+0x43/0x120 [ 259.421270][T10565] ? sysfs_create_dir_ns+0x189/0x3a0 [ 259.421291][T10565] ? kobject_add_internal+0x435/0x8d0 [ 259.421316][T10565] ? kobject_init_and_add+0x124/0x190 [ 259.421341][T10565] validate_chain+0x18ef/0x5920 [ 259.421370][T10565] ? __pfx_validate_chain+0x10/0x10 [ 259.421392][T10565] ? __pfx_validate_chain+0x10/0x10 [ 259.421411][T10565] ? kmem_cache_alloc_noprof+0x22d/0x380 [ 259.421436][T10565] ? __pfx_validate_chain+0x10/0x10 [ 259.421455][T10565] ? __pfx_validate_chain+0x10/0x10 [ 259.421473][T10565] ? __pfx_validate_chain+0x10/0x10 [ 259.421494][T10565] ? idr_get_free+0x91c/0xab0 [ 259.421514][T10565] ? __pfx_validate_chain+0x10/0x10 [ 259.421534][T10565] ? mark_lock+0x9a/0x360 [ 259.421551][T10565] __lock_acquire+0x1397/0x2100 [ 259.421584][T10565] lock_acquire+0x1ed/0x550 [ 259.421608][T10565] ? ieee80211_change_mac+0xc6/0x1160 [ 259.421635][T10565] ? __pfx_lock_acquire+0x10/0x10 [ 259.421662][T10565] ? __pfx___might_resched+0x10/0x10 [ 259.421692][T10565] __mutex_lock+0x19c/0x1010 [ 259.421715][T10565] ? ieee80211_change_mac+0xc6/0x1160 [ 259.421738][T10565] ? __pfx_lock_release+0x10/0x10 [ 259.421766][T10565] ? ieee80211_change_mac+0xc6/0x1160 [ 259.421789][T10565] ? __pfx___mutex_lock+0x10/0x10 [ 259.421814][T10565] ? __pfx_vxlan_netdevice_event+0x10/0x10 [ 259.421832][T10565] ? ib_device_get_by_netdev+0x85/0x5e0 [ 259.421862][T10565] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 259.421888][T10565] ? hsr_netdev_notify+0x295/0xb50 [ 259.421914][T10565] ieee80211_change_mac+0xc6/0x1160 [ 259.421938][T10565] ? ip6_route_dev_notify+0x99/0x600 [ 259.421959][T10565] ? notifier_call_chain+0x15a/0x3f0 [ 259.421984][T10565] ? notifier_call_chain+0x3cc/0x3f0 [ 259.422011][T10565] netif_set_mac_address+0x327/0x510 [ 259.422034][T10565] ? __pfx_netif_set_mac_address+0x10/0x10 [ 259.422060][T10565] dev_set_mac_address+0x38/0x50 [ 259.422079][T10565] bond_enslave+0xff3/0x3910 [ 259.422104][T10565] ? __pfx_fib6_run_gc+0x10/0x10 [ 259.422133][T10565] ? ip6_route_dev_notify+0x99/0x600 [ 259.422153][T10565] ? notifier_call_chain+0x15a/0x3f0 [ 259.422180][T10565] ? __pfx_bond_enslave+0x10/0x10 [ 259.422204][T10565] ? __pfx___dev_change_flags+0x10/0x10 [ 259.422221][T10565] ? validate_linkmsg+0x828/0xa40 [ 259.422245][T10565] ? mutex_is_locked+0x17/0x50 [ 259.422264][T10565] do_set_master+0x579/0x730 [ 259.422285][T10565] do_setlink+0xfee/0x40f0 [ 259.422310][T10565] ? mark_lock+0x9a/0x360 [ 259.422327][T10565] ? __pfx_do_setlink+0x10/0x10 [ 259.422343][T10565] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 259.422370][T10565] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 259.422398][T10565] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 259.422418][T10565] ? lockdep_hardirqs_on+0x99/0x150 [ 259.422440][T10565] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 259.422460][T10565] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 259.422481][T10565] ? rcu_is_watching+0x15/0xb0 [ 259.422502][T10565] ? __mutex_lock+0xba3/0x1010 [ 259.422525][T10565] ? __mutex_lock+0x602/0x1010 [ 259.422550][T10565] ? rtnl_newlink+0xc4c/0x1d90 [ 259.422576][T10565] ? __pfx___mutex_lock+0x10/0x10 [ 259.422603][T10565] ? ns_capable+0x8a/0xf0 [ 259.422623][T10565] ? rtnl_link_get_net_capable+0x168/0x340 [ 259.422642][T10565] rtnl_newlink+0x15a6/0x1d90 [ 259.422668][T10565] ? stack_depot_save_flags+0x37/0x940 [ 259.422702][T10565] ? __pfx_rtnl_newlink+0x10/0x10 [ 259.422727][T10565] ? __netlink_deliver_tap+0x561/0x7f0 [ 259.422754][T10565] ? __pfx_validate_chain+0x10/0x10 [ 259.422772][T10565] ? __sock_sendmsg+0x221/0x270 [ 259.422796][T10565] ? ____sys_sendmsg+0x53a/0x860 [ 259.422815][T10565] ? __sys_sendmsg+0x269/0x350 [ 259.422833][T10565] ? do_syscall_64+0xf3/0x230 [ 259.422857][T10565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.422894][T10565] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 259.422921][T10565] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 259.422950][T10565] ? mark_lock+0x9a/0x360 [ 259.422968][T10565] ? __lock_acquire+0x1397/0x2100 [ 259.423006][T10565] ? __pfx_lock_release+0x10/0x10 [ 259.423038][T10565] ? __pfx_rtnl_newlink+0x10/0x10 [ 259.423065][T10565] rtnetlink_rcv_msg+0x791/0xcf0 [ 259.423095][T10565] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 259.423123][T10565] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 259.423153][T10565] ? ref_tracker_free+0x643/0x7e0 [ 259.423172][T10565] netlink_rcv_skb+0x206/0x480 [ 259.423198][T10565] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 259.423225][T10565] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 259.423259][T10565] ? netlink_deliver_tap+0x2e/0x1b0 [ 259.423286][T10565] netlink_unicast+0x7f6/0x990 [ 259.423312][T10565] ? __pfx_netlink_unicast+0x10/0x10 [ 259.423334][T10565] ? __virt_addr_valid+0x45f/0x530 [ 259.423351][T10565] ? __phys_addr_symbol+0x2f/0x70 [ 259.423366][T10565] ? __check_object_size+0x47a/0x730 [ 259.423392][T10565] netlink_sendmsg+0x8de/0xcb0 [ 259.423423][T10565] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.423452][T10565] ? aa_sock_msg_perm+0x91/0x160 [ 259.423481][T10565] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.423507][T10565] __sock_sendmsg+0x221/0x270 [ 259.423533][T10565] ____sys_sendmsg+0x53a/0x860 [ 259.423556][T10565] ? __pfx_____sys_sendmsg+0x10/0x10 [ 259.423576][T10565] ? __fget_files+0x2a/0x410 [ 259.423602][T10565] ? __fget_files+0x2a/0x410 [ 259.423630][T10565] __sys_sendmsg+0x269/0x350 [ 259.423650][T10565] ? __pfx_futex_wake+0x10/0x10 [ 259.423678][T10565] ? __pfx___sys_sendmsg+0x10/0x10 [ 259.423715][T10565] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 259.423742][T10565] ? do_syscall_64+0x100/0x230 [ 259.423766][T10565] ? do_syscall_64+0xb6/0x230 [ 259.423790][T10565] do_syscall_64+0xf3/0x230 [ 259.423814][T10565] ? clear_bhb_loop+0x35/0x90 [ 259.423839][T10565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.423865][T10565] RIP: 0033:0x7f67a3d8d169 [ 259.423881][T10565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.423897][T10565] RSP: 002b:00007f67a17f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.423915][T10565] RAX: ffffffffffffffda RBX: 00007f67a3fa6240 RCX: 00007f67a3d8d169 [ 259.423929][T10565] RDX: 0000000000000000 RSI: 00004000000003c0 RDI: 000000000000000f [ 259.423939][T10565] RBP: 00007f67a3e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 259.423951][T10565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.423961][T10565] R13: 0000000000000000 R14: 00007f67a3fa6240 R15: 00007ffc9c8326b8 [ 259.423980][T10565] [ 260.142121][T10565] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 260.153068][T10572] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.175816][T10572] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.228599][T10572] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.241244][T10572] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.278747][T10572] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.288702][T10572] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.327375][T10572] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.337531][T10572] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.394986][T10572] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.403227][T10572] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.414999][T10572] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.423231][T10572] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.436155][T10572] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.444375][T10572] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.457013][T10572] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.465604][T10572] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.165326][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.124842][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog