last executing test programs: 3.303674004s ago: executing program 1 (id=1625): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f0000000000)="ba73997088d31a2636460cbb3c6a029e056dfc8f8eebda0272879679a92615a5ec3c6805a0b8b97e4b415364341a9ecf3055098a04f697cd2044ebe4") (async) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x200, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x8, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) (async) r2 = socket$inet6(0xa, 0x5, 0x400) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000140)=@nat={'nat\x00', 0x1b, 0x5, 0x490, 0xf0, 0xf0, 0xffffffff, 0x0, 0xf0, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, &(0x7f00000000c0), {[{{@ipv6={@mcast1, @loopback, [0xffffff00, 0xff, 0xffffff00, 0xff], [0xff000000, 0xff, 0xff000000, 0xff], 'gre0\x00', 'vxcan1\x00', {}, {}, 0x0, 0x9, 0x2, 0x75}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x1, @ipv6=@loopback, @ipv4=@private=0xa010100, @icmp_id=0x68, @port=0x4e24}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @empty}, [0xffffffff, 0x0, 0xff000000, 0xffffff00], [0xffffffff, 0x0, 0xff, 0xff000000], 'wg1\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x0, 0x6, 0x3, 0x10}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x8, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv6=@remote, @gre_key=0x4000, @port=0x4e24}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x17, @ipv6=@empty, @ipv4=@broadcast, @icmp_id=0x68, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'veth0_to_batadv\x00', {0x80000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) (async) socketpair(0xb, 0x2, 0xffffffff, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), r4) (async) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f00000006c0), &(0x7f0000000700)=0x40) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r4) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x35}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20040855}, 0x40084) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000008c0)={0x3, &(0x7f0000000880)=[{0x2, 0x4, 0x4, 0x9a5}, {0xe7, 0x9, 0x5, 0x8a65}, {0x1115, 0x81, 0x2, 0xffff}]}) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000980)=@mangle={'mangle\x00', 0x1f, 0x6, 0x498, 0x258, 0x0, 0x180, 0x180, 0x258, 0x400, 0x400, 0x400, 0x400, 0x400, 0x6, &(0x7f0000000900), {[{{@ip={@loopback, @multicast1, 0x0, 0xffffffff, 'wlan0\x00', 'ip6gretap0\x00', {0xff}, {0xff}, 0x4, 0x3}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@icmp={{0x28}, {0x11, "019b", 0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x2}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x9, 0x5, @ipv6=@empty, 0x4e22}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@icmp={{0x28}, {0x11, "dad2", 0x1}}, @inet=@rpfilter={{0x28}}]}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xff, 0xff000000, 'ipvlan1\x00', 'tunl0\x00', {0xff}, {}, 0x67, 0x1, 0x20}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) (async) socket$inet_icmp(0x2, 0x2, 0x1) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ec0), r3) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x34, r8, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x6}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xc}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x7}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x40}]}, 0x34}, 0x1, 0x0, 0x0, 0xc851}, 0x80) (async) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000fc0)={0x0, 0x7fff, 0xfffd, 0x6, 0x7d, 0x5}, &(0x7f0000001000)=0x14) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000001040)={r9, 0x2}, 0x8) r10 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f0000001080)={0x1c, 0x208, 0xb5c2, 0xffffff01, r9}, &(0x7f00000010c0)=0x10) (async) socket$netlink(0x10, 0x3, 0x14) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001100)={0xffffffffffffffff}) socket$can_raw(0x1d, 0x3, 0x1) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000002240)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001140)=""/4096, 0x1000, 0x0, &(0x7f0000002140)=""/237, 0xed}, &(0x7f0000002280)=0x40) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000022c0), &(0x7f0000002300)=r11}, 0x20) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000002540)={'erspan0\x00', &(0x7f00000024c0)={'gre0\x00', 0x0, 0x1, 0x7800, 0x3, 0x3, {{0xa, 0x4, 0x1, 0x5, 0x28, 0x68, 0x0, 0xc, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@ra={0x94, 0x4, 0x1}, @noop, @ra={0x94, 0x4}, @ssrr={0x89, 0xb, 0xe0, [@empty, @broadcast]}]}}}}}) (async) r14 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002600), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000002740)={0x20, 0xe, &(0x7f0000002380)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}], &(0x7f0000002400)='GPL\x00', 0x1, 0x55, &(0x7f0000002440)=""/85, 0x41100, 0x42, '\x00', r13, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000002580)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000025c0)={0x5, 0xb, 0x0, 0x9b48}, 0x10, 0xffffffffffffffff, r14, 0x2, &(0x7f00000026c0)=[0xffffffffffffffff], &(0x7f0000002700)=[{0x3, 0x5, 0x10, 0x18}, {0x1, 0x2, 0x7, 0x1}], 0x10, 0x1, @void, @value}, 0x94) 2.950944742s ago: executing program 1 (id=1629): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'wlan0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0x21, "4372071e845c1497c855383000000002000000372a72ee4d37968b002000005596"}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000030801020000000000000000070000000600024065580000040004805f6ff8bdfe6fb1ce8181f3cafffc436b25700430772d8234a74b554465cbdf6c8b7fab5db9a492c259dbcde9b2a5ad7875702535fe22d63e96f7672c0b322dbe446a308797d20b9836f5e7cb787320dd4d0d84862f6991948854d714e2d3f1cacb2e7f809e4c9cfe15b395b718910c4ac50dc1ad6f56c30aa5a3fae16790c9e0a792866622b92e370b79ce81b62ef6e8262c367a2a1c6f250a219d45a2becfb719c4"], 0x20}}, 0xd4) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000ec0)=ANY=[@ANYBLOB="0500270f0002030005006395f04203d62f0100000000000000000000ffff7f00000100000000000000000000ffffac1414bb2c000541640000001606023600000000fe80000000000000000000000000002afe8000000000000000000000000000aafc0100000000000000000000000000005c04000000000000072000000000060307004000000000000000340800000000000003000000000000000000000000005e360000000000000740000000020e0b03000200000000000000bb00000000000000ff07000000000000080000000000000005000000000000000200000000000000070000000000000001934e7a1e239856705edfb97df3ca910e717cfe69faf8845fc044abe55157e88803b505cd65adece6d848e167dd44113833387b28bd6b35fb203535a27a23b18baaa3f9911a5c67483517d7fd9f2500ce9985ba26230303f5af99733e41b72d00e6a03db60745dabbea635bd01a3edb5386a6858196ae6b98033cbc5e52e36ea2ef19774b58955f8682369a6c5fcacf4d176e424704010f4e9d23af6559cd068c4dca896c023b15885e00f70c835cd9d02c8d9b4ab5672e6911bc1c1261c7fa5d5d4b9a6bb5fb5d6fdbfbf2e3596c41c64b8eb86f461ee1446c93c2fc5ea01cf342e786e7f0b49fcbaab22889e7684b9b0effee3968c9a44723b4acedba11a3e5937209635da644cf933a4ba0e96e74ce4067cbb318b5f161b09096914770bc94af5107771fb6061fe3b75ff442dc52a3e0a4ae8a7552072000000003060509000300000000000000ff010000000000000100000000000000c91000000000000000000000ffffffffffff0502000200000000000000331400000000000007500000000012030800020000000000000006000000000000008000000000000000800000000000000008000000000000000100000000000000000000800000000008000000000000000400000000000000003c11bcd48b499ac6f5f00fd3286c16ea3a03d393f77f44ce1a7af47c9e57ce2db8d5a2531fcaf3c320fcbf46d71f3f71e0857f0fa279d19caf3800d12bc910fe8000000000000000000000000000aa0000000000003b080404f8404f0afc020000000000000000000000000000ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000066dcdc3f8bf5e0ff9f469ce4c8d93777bbf44238371b17e47b06a81f58eaace969621b53666165bbb53df75e551b4e91aaab3223cb2dc19f54ab96a52a5c22260e6807127b10eec3b164a576becd6b936fb4d0207a56f305d24b47a7d3347328dc10ba2ae9b5e8ee2a2eaf98025fe6ca402417cedc7d1d3b19dee9e3e2582eb77bfeea46be133cc6359cff19780e96e6b96343ba220fee8966cb8cf1a864d3429d656646023eacb0d5e466186a1"], 0x408) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)) (async) vmsplice(r2, &(0x7f0000000040), 0x100000000000026a, 0x0) (async) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x1}, 0x6) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) 2.926202814s ago: executing program 0 (id=1630): r0 = socket$inet6(0x10, 0x3, 0x0) accept(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x6c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) unshare(0x6a040000) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f0000002240)=[{{&(0x7f0000000380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000400)=""/11, 0xb}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/243, 0xf3}, {&(0x7f00000015c0)=""/244, 0xf4}, {&(0x7f00000016c0)=""/197, 0xc5}, {&(0x7f00000017c0)=""/163, 0xa3}], 0x6, &(0x7f0000001900)=""/143, 0x8f}, 0x9}, {{0x0, 0x0, &(0x7f0000001e00), 0x0, &(0x7f0000001e80)=""/214, 0xd6}, 0xfff}, {{&(0x7f0000001f80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000002140)=[{&(0x7f0000002000)=""/70, 0x46}, {&(0x7f0000002080)=""/97, 0x61}, {&(0x7f0000002100)}], 0x3, &(0x7f0000002180)=""/132, 0x84}, 0x1000000}], 0x3, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x20) ppoll(&(0x7f0000000200)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x3) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000051421060000"], 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={0x0}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002100)={&(0x7f0000002300)='spi_message_done\x00', r1, 0x0, 0xf}, 0x18) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x400) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) 2.673385345s ago: executing program 1 (id=1633): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) unshare(0x62040200) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r5) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r8, 0x1, 0x0, 0x0, {{}, {0x0, 0x4102}}}, 0x1c}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r9, 0x58, &(0x7f00000004c0)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711214000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x12, 0x0, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000002e00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002120207b1a00fe00000000bfa10000000000000701000078ffffffb702000008000000b70300000000000085000000c700000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)=ANY=[@ANYBLOB="1c0000002c00010000000000000000000400008008001a8004000480"], 0x1c}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES32=r10, @ANYBLOB="000000002f95abbe480012800e0001006970366772657461700000003400028008000100", @ANYRES32=r10, @ANYBLOB="14000600fe80000000000000000000000000000014000700ff050000000000000000000000000001080004"], 0x70}}, 0x0) 2.130422499s ago: executing program 2 (id=1638): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r4, &(0x7f00000004c0)='W', 0x1, 0x4000884, &(0x7f0000000100)={0xa, 0x4e20, 0x2, @loopback, 0x8}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x33, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000033c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0xfff1}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x24, 0x2, [@TCA_CGROUP_EMATCHES={0x20, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x457, 0x8, 0x3}, {0x3, 0x1, 0x8}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)={0x24, 0xf, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}, {0xfff3, 0x2}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x1, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x0, 0xe}}}, 0x24}}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000080)=0x3, 0x4) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x65, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x2c}}, 0x4040) 2.126759923s ago: executing program 4 (id=1639): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408048000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000fff800000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.986895427s ago: executing program 4 (id=1640): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8}]}, 0x20}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0xffffffff, 0x1}]}]}}, &(0x7f0000000500)=""/16, 0x46, 0x10, 0x1, 0x0, 0x0, @void, @value}, 0x1f) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) 1.894957933s ago: executing program 0 (id=1641): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) r1 = socket$phonet(0x23, 0x2, 0x1) (async, rerun: 64) r2 = socket(0x2, 0x80805, 0x0) (rerun: 64) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000001a40), &(0x7f0000001a80)=0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x34}, 0xfffffffd, 0x1, 0x3, 0x8, 0x9, 0xffff}, 0x20) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40000040) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000000007111af08000000008510000002000000850000000708000095000000000000009500a5058cea94461559338bf2c9b86f0eeed9cbf0c45a81c2d25e4ddeb5ce10616ef36177ebb93c90389eded5e6fbfb942bbcbd8830fece0ef6e6e9d594ef1f06477078da79c255071e6e6516591cb6e40d39a88c8348f663d47edb52304a0f6277bccd2cffb8b63b4585a9ced7e7ec617d070b6fdab3f538aac5f9d47731ee1ad84d0481efcc900c81eaa34ff0adb58158bac6e570884db05358c1e9bf7fa2e4f8d6dab8b13279e049"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (rerun: 64) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, 0x0) (async) epoll_create1(0x0) (async) close(0xffffffffffffffff) (async) socket(0x1d, 0x2, 0x6) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004", @ANYRESHEX=r5], 0x4c}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) socket$packet(0x11, 0x3, 0x300) (rerun: 32) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000340)=""/135, 0x87, 0x40002020, &(0x7f0000000100)=@in6={0x21, 0x1, 0x2, 0xffffffe3, {0xa, 0x4a24, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}, 0x24) (async, rerun: 32) listen(r7, 0x0) (async, rerun: 32) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) (async) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES64, @ANYRES64=r6], 0x10) 1.891873309s ago: executing program 3 (id=1642): r0 = socket(0x2b, 0x80801, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000040)={0x2c}, 0x8) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1ff93c5f4a7eff3f08971ef73e556e206d108a0e53ffe000220b3a25fb7c9255a4f6259c2c09a158a3942407e4778bc6c7b801a867fac49ef242f8680e8a07bdc7765a9f775fa6946e8437ed13b4dd092de711e378d8e8f77cb5d0831f1bc81a9616eed74bf9d6f5a7323562ec6b008860a5d37de189180000000000000000000000000000e000ca4acc0d85ef93be9412eeafe56ecafde856f016676cdfc01430fbc1a6e2bd0fc82bc09e86a3ff6c33f3ee3f39a102175c8074a4a49250501fca0d2cffe7ba173df04cb2c33964880b2ba0d2705d4eb7b6a05578ebedc7050499adc3e3c0021fad0d9d142ea673c7cc29fbcd35", @ANYBLOB="75391d7c238d0a7b53d6c058069567985dc95b4dcdff2345203b4a12815a944b0831e6c3d41cecbee2746f49c08a5a87bf1a3aa999bd3b2f5a90d1495ba6927c8c9c07648044d7407e47393dc9fad7904f2b8a9841702737b5957815ae0f8b3d22b006c0292ce7c671dfe3dda4a684241888cea48d1b0fe5eeb31217848402bc057440836dc5bd0a78551c1c8df0f11a60236bdb3edad6c8f1af3af51b734815c524f43ce880a8bb94c8f50fad4452a773692a8b55", @ANYBLOB="01002bbd700000000000010000000c0002000c000000000000001c0007800c00018008000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) 1.885062896s ago: executing program 4 (id=1643): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}], 0x1) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x6d}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000100000000000002000"/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffda8, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) (async) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x800) setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, 0x0, 0x0) 1.738988033s ago: executing program 1 (id=1644): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000340), 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000001200000024000000080000008500000005000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="ab6a999cba09aad3f30180c2000001a21428c6c08586dd61bcc1d700006cff00"/42], 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$inet6(0xa, 0x80003, 0xff) close(0x3) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x170, 0x1170, 0x1398, 0x0, 0x1170, 0x2b0, 0x1398, 0x1398, 0x2b0, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x108, 0x170, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'geneve1\x00', 'veth1_vlan\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xfffffffe, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xac}]}}]}, 0x3c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) accept$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="680000001400000428bd7000fcdbdf25021f00fe", @ANYRES32=r7, @ANYBLOB="1400060006000000010000000600000083000008000100ac1414aa08000400ac1e01010800080002000000080009000500000014000600010100000e00000004000000ff03000008000a0003000000"], 0x68}, 0x1, 0x0, 0x0, 0x44800}, 0x48001) ioctl$sock_rose_SIOCADDRT(r8, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x9, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default]}) connect$rose(r8, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0xfffffff9, 0x25dfdbfe, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x5, 0x4}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0xfffffff9}, @TCA_PIE_LIMIT={0x8, 0x2, 0x2}]}}]}, 0x40}}, 0x8000) 1.680697244s ago: executing program 4 (id=1645): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1a0, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x20000000}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0x14c, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xca}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x138, 0x6, [@m_mirred={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x2a, 0x6, "b9e6cb743efb5818279b291a7d56a99d728d0d3c5750442cdd89714a7135052ff6aa167b6d47"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0xb0, 0x9, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x5, 0x10000000, 0xae, 0x2}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x3, 0x10000000, 0x8, 0x8}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1336e5ff, 0x9, 0x6, 0x0, 0x1}, 0x7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x4, 0x20000000, 0x8}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_bpf={0x2c, 0x4, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x81}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x11, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000001640)}}], 0x1, 0x7c9ce320e12db95) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a093400000000000000000200fffe0900020073797a32000000000900010073797a30000000003800048024000180090001006d657461000000001400028008000140000000"], 0x8c}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r2, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, 0x0, 0x480c4) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000100)=""/217, &(0x7f0000000200)=0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0x8}, {0xc, 0x9}}}]}]}, 0x68}}, 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0xfffc, 0x41, 0x2}, {0x5, 0x3, 0xfffffffffffffffe, 0x0, 0x4, 0x0, 0x80000000000000}, {0x400, 0x3, 0x0, 0x800}, 0x8, 0x0, 0x1, 0x0, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0xe}, 0x10000000, 0x2b}, 0x2, @in=@empty, 0xffffffff, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe}}, 0xe8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}}, 0x1c) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) 1.633802029s ago: executing program 3 (id=1646): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000002cc0)=[{{&(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)=""/176, 0xb0}, {&(0x7f00000001c0)=""/146, 0x92}, {&(0x7f0000000000)=""/33, 0x21}, {&(0x7f0000000340)=""/170, 0xaa}], 0x4, &(0x7f0000000400)=""/229, 0xe5}, 0x8}, {{&(0x7f0000000500)=@tipc=@name, 0x80, &(0x7f0000002940)=[{&(0x7f0000000580)=""/71, 0x47}, {&(0x7f0000000600)=""/144, 0x90}, {&(0x7f00000006c0)=""/85, 0x55}, {&(0x7f0000000740)=""/209, 0xd1}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/151, 0x97}, {&(0x7f0000002900)=""/44, 0x2c}], 0x8, &(0x7f00000029c0)=""/167, 0xa7}, 0x4}, {{&(0x7f0000002a80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000002b00)=""/139, 0x8b}], 0x1, &(0x7f0000002c00)=""/172, 0xac}, 0x1}], 0x3, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.43377291s ago: executing program 3 (id=1647): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x94, 0x2c, 0xd29, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xa, 0xfff3}, {}, {0xc}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x3, 0x4}}, @filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_POLICE={0x48, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x2, 0x5, 0x800, 0x0, {0x7, 0x1, 0x2, 0x7, 0x5}, {0x1, 0x2, 0xfffe, 0x3, 0x607, 0xd2}, 0x0, 0x6, 0x7}}]}]}}]}, 0x94}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bind$rds(0xffffffffffffffff, 0x0, 0x0) (async) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001d40)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r7, {0xc, 0x4}, {}, {0x5, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r9, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500040000001400040073"], 0x58}}, 0x0) 1.332443686s ago: executing program 2 (id=1648): r0 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0xfffe, 0x0, @empty}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x18, 0x4, 0x200) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000001c0)={r4, 0x9}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000540)={r4, 0x19, "ebe9db810b4ca6c9f6ccd451d6fbf9adc18a84f54a996ad0b1"}, &(0x7f00000005c0)=0x21) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={r4, @in={{0x2, 0x4e21, @loopback}}, 0x7, 0x7f, 0x1, 0x4, 0x4, 0x2, 0xe}, &(0x7f00000000c0)=0x9c) 1.094835779s ago: executing program 0 (id=1649): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x1}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x8}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x1}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x5}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xd0}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x2}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x4}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x8}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x2}, @ETHTOOL_A_RINGS_RX_MINI={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x20000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x5}]]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) (async, rerun: 64) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x700, 0x8, 0xdae8, 0x3ff, {{0x2a, 0x4, 0x0, 0x6, 0xa8, 0x68, 0x0, 0x9, 0x38, 0x0, @loopback, @loopback, {[@timestamp_prespec={0x44, 0x24, 0xff, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@remote, 0x81}, {@local, 0x2}, {@multicast2, 0x800}]}, @timestamp_prespec={0x44, 0x2c, 0x85, 0x3, 0x0, [{@multicast2, 0x3}, {@broadcast, 0x7}, {@empty, 0x7}, {@loopback, 0x999}, {@local, 0x8}]}, @timestamp_addr={0x44, 0x1c, 0x4b, 0x1, 0x3, [{@multicast2, 0x40}, {@remote, 0x6}, {@rand_addr=0x64010102, 0xfffffffa}]}, @rr={0x7, 0xf, 0xd4, [@rand_addr=0x64010102, @private=0xa010102, @multicast2]}, @end, @generic={0x7, 0x9, "98afcafc7e64fd"}, @rr={0x7, 0xb, 0x2b, [@empty, @loopback]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000540)={'wg1\x00', 0x0}) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6tnl0\x00', 0x0, 0x2f, 0x30, 0xfa, 0xc998, 0x20, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x10, 0x6e9400, 0x9}}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000008c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000680)={0x1fc, r5, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xd0, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1c}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x40040}, 0x800) (async, rerun: 32) r12 = socket$netlink(0x10, 0x3, 0xb) (async, rerun: 32) r13 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r13, &(0x7f0000000900)={0x1a, 0x7, 0x8, 0xe5, 0x72, 0x2, @random="4f238c98b0be"}, 0x10) (async) r14 = openat$cgroup_ro(r1, &(0x7f0000000980)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) (async) ioctl$sock_SIOCGPGRP(r12, 0x8904, &(0x7f00000009c0)=0x0) sendmsg$nl_route(r3, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=@RTM_NEWNSID={0x34, 0x58, 0x6dea55c0a1f94928, 0x70bd2a, 0x25dfdbfc, {}, [@NETNSA_FD={0x8, 0x3, r14}, @NETNSA_PID={0x8, 0x2, r15}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_NSID={0x8, 0x1, 0x2}]}, 0x34}}, 0x10) (async) sendmsg$inet(r12, &(0x7f0000000ec0)={&(0x7f0000000ac0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000b00)="29decfc24a8e296ed32e122565ed69e9bc35c6085f55b3e7eab9dc21f116bfb086b5c86220f7c79e10c786d56edd34817b104dd2a5c3833c65ffb8ba49ec393934ec46c864b8dd820a0508832217c798c13f9558768a8dfaacb76789a99a67798c220053a9cc1187804f4053db56fbc089d4effbe520f0333359b27e9cdddd28b40926e61f74570de61b5e38d089b5da9dc719a8c0d68df82d63f6e2abc0e60d665a0491410f6ced0145a7001734578a0f360052defae68e233765f0a17ec8b59eed9361abecde9bb8744bd357", 0xcd}, {&(0x7f0000000c00)="7c5d9ba08f84cdc82d090176c342658882639979e25866899be8fddb9e3f0adc201fe5fbeb72a80e154937d8d40e4b608ef0f58394df42662748a08425095ec99902ac45", 0x44}, {&(0x7f0000000c80)="ebfea27274616ed1e0c00eaa545003a0e1ad", 0x12}, {&(0x7f0000000cc0)="d7477f39a15bc7a823248db6192e43c9c7679ce377f60f96ac524657be91e322bb1be351f58117", 0x27}, {&(0x7f0000000d00)="e4b5cb7f0dcf4cd87583bd4a094b76ffbb2b1b6ba88eecd7d39dfbcceb2f5245c0956171f7c8faad9d173252d354be0b932d85c94cd4b58292edcb7157a155f7ac693cc049", 0x45}, {&(0x7f0000000d80)="e1a7efac163d3559864c27822b0e5fac762e1ebd41a569d63474414845411360f7da44a389d6f23760177140ee2ab0d992562ebef11352cb9632f0ac823eb129bb51e69e021ecdeda1d6e1d91bc440df38719a070c024379e0d86c989a78411be2ac88f7b08aebac610a275bf66f7c99c8ff8438af779d09d924d6486c5800321bf6644ab4069eae4521d0dcf10448552a7eaa841d0e2134b9ff9535780d29bc2cfaa4b92487239c7deb97", 0xab}], 0x6}, 0x20048041) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x4000010, r14, 0xa2a1c000) r16 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000f40), r4) sendmsg$WG_CMD_SET_DEVICE(r12, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000100}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x30, r16, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xfffffffe}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x2000c000) (async) r17 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_KEY(r17, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x24, r2, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c801}, 0x800) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) setsockopt$EBT_SO_SET_ENTRIES(r14, 0x0, 0x80, &(0x7f00000016c0)=@broute={'broute\x00', 0x20, 0x4, 0x530, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000001180], 0x0, &(0x7f0000001140), &(0x7f0000001180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x1b, 0x9, 0x883e, 'ipvlan0\x00', 'ip6gretap0\x00', 'veth1_virt_wifi\x00', 'dvmrp0\x00', @random="f8ac7d6421cf", [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x18, 0x21, 0x88fb, 'bond_slave_0\x00', 'hsr0\x00', 'veth0_vlan\x00', 'veth0\x00', @remote, [0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, [0x0, 0x0, 0xff, 0xff, 0xff], 0xa6, 0x1d6, 0x206, [@mac={{'mac\x00', 0x0, 0x10}, {{@local, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x9, 'system_u:object_r:getty_exec_t:s0\x00'}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x89d}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x2, [{0x9, 0x8, 0x86dd, 'nicvf0\x00', 'veth1_macvtap\x00', 'macvlan1\x00', 'veth0\x00', @broadcast, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], @broadcast, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], 0xbe, 0xbe, 0x10e, [@nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz0\x00', 0x9}}}], [], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x3, {0x7fffffffffffffff}}}}}, {0x9, 0x18, 0xf7, 'dummy0\x00', 'veth1_to_bridge\x00', 'syzkaller1\x00', 'syzkaller1\x00', @link_local, [0x0, 0xff, 0x0, 0xff], @random="d981957a2934", [0x0, 0xff, 0xff, 0x0, 0x0, 0x278abd5da9bdff1b], 0x6e, 0x6e, 0xbe, [], [], @common=@log={'log\x00', 0x28, {{0x3, "4e1cbf4c80d59fe37168512177e2cf61dd8862605fe2c5b2b20706e4868d"}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x5a8) (async) socket$netlink(0x10, 0x3, 0x13) 1.093134614s ago: executing program 2 (id=1650): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @private}, 0x4}}, 0x26) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)=r0}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x100}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}]}]}]}, 0x44}}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x138, 0x138, 0x7, [@enum64={0x6, 0x7, 0x0, 0x13, 0x1, 0x3, [{0x5, 0x0, 0x6}, {0xf, 0x8, 0x63}, {0x7, 0x7ff, 0xd5}, {0xf, 0x859, 0x5}, {0x6, 0x8, 0x1}, {0xc, 0x29c, 0xe}, {0x3, 0x4, 0xfffffffe}]}, @enum64={0x4, 0x6, 0x0, 0x13, 0x1, 0x5, [{0x3, 0x4, 0x1}, {0xf, 0x32f59c2f, 0x6}, {0x10, 0x0, 0x1}, {0x2, 0x3, 0x8}, {0x7, 0x6, 0x400}, {0x8, 0x7f, 0x1}]}, @float={0x6, 0x0, 0x0, 0x10, 0xc}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x3, 0x4}, {0xe, 0x800}, {0x8, 0x2}, {0xd, 0x5}]}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x4, 0x6}, @decl_tag={0xb, 0x0, 0x0, 0x11, 0x2}, @var={0x10, 0x0, 0x0, 0xe, 0x4}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x3}, @func={0xa, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x5f, 0x5f, 0x5f, 0x5f, 0x0]}}, &(0x7f0000001000)=""/4096, 0x157, 0x1000, 0x1, 0xdc12, 0x10000, @value=r2}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0xfffffffb, 0x7fff, 0x37, 0x40, r3, 0x7fffffff, '\x00', r5, r6, 0x5, 0x4, 0x5, 0xd, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f0000000580)={'ip_vti0\x00', 0x0, 0x80, 0x8, 0x4, 0xfffffffa, {{0xc, 0x4, 0x0, 0x8, 0x30, 0x68, 0x0, 0x9, 0x2f, 0x0, @multicast2, @multicast2, {[@rr={0x7, 0x3, 0x35}, @rr={0x7, 0x17, 0x1d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x34}, @local, @loopback]}]}}}}}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYRES8=r8, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r8, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0xffff93d3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r10, 0x58, &(0x7f0000000300)}, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002400)=@delchain={0x24, 0x66, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000300)={'gretap0\x00', 0x0, 0x700, 0x7, 0x5, 0x0, {{0x5, 0x4, 0x1, 0x6, 0x14, 0x67, 0x0, 0xe, 0x4, 0x0, @multicast2, @local}}}}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a30000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a00010071756575650000001c000280060002400ffe009b06000140faff"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r15 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r15, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r16 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r16, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r15, 0x84, 0x84, &(0x7f0000000440)={r17, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r15, 0x84, 0x75, &(0x7f00000000c0)={r18, 0xa}, &(0x7f00000001c0)=0x8) 1.004157793s ago: executing program 4 (id=1651): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="da17530080ff", @ANYRES32=0x0, @ANYBLOB="08d10000000000006401128009000100766c616e00000000540102800c0002000e0000000c0000000600050088a800007c0003800c0001007b4b0000000000000c00010005000000090000000c00010002"], 0x198}}, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r1, 0x101, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) 976.86052ms ago: executing program 3 (id=1652): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000002f00)=0x2) ioctl$PPPIOCSMAXCID(r0, 0x4004743c, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) pwritev(r3, &(0x7f00000001c0)=[{&(0x7f0000000340)="ed98a952c0b88299fd069df7114696", 0xfffffffffffffe5c}, {&(0x7f00000000c0)="10948b40d53ba01febbb69367ce1", 0xe}], 0x2, 0x0, 0xffffffff) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x4, 0x2}, 0xb) write(r2, &(0x7f0000000000)="2e000400", 0x4) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x408dc}, 0x4000080) sendmmsg$inet6(r4, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0xe2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10000}, 0x1c, &(0x7f0000000480)}}], 0x2, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000030400000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="7fff0000000000003c0012800b000100697036746e6c00002c00028014000300fc00000000000000000000ea0000000114002c0000000000000000000000ffff64010100"], 0x5c}}, 0x0) shutdown(r4, 0x1) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0x101}, 0x18) r11 = epoll_create(0x3ff) r12 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r12, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r11, 0x3, r12, &(0x7f0000000280)={0x2000000}) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f00000002c0)={r13}, &(0x7f0000000100)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000007000000000000000800000d00000000080000000100000001"], &(0x7f0000000200)=""/6, 0x6b, 0x6, 0x1, 0x4, 0x0, @void, @value}, 0x28) 782.985953ms ago: executing program 0 (id=1653): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x2, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x1000, &(0x7f0000001c80)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, r2, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001e00), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000001e40)={0xfffffffffffffdd2, r6, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {0x0, 0x4107}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getnexthop={0x28, 0x6a, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@NHA_MASTER={0x8, 0xa, 0x1}, @NHA_OIF={0x8, 0x5, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x20000) 689.11483ms ago: executing program 0 (id=1654): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) unshare(0x62040200) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r5) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r8, 0x1, 0x0, 0x0, {{}, {0x0, 0x4102}}}, 0x1c}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r9, 0x58, &(0x7f00000004c0)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711214000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x12, 0x0, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000002e00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002120207b1a00fe00000000bfa10000000000000701000078ffffffb702000008000000b70300000000000085000000c700000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)=ANY=[@ANYBLOB="1c0000002c00010000000000000000000400008008001a8004000480"], 0x1c}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES32=r10, @ANYBLOB="000000002f95abbe480012800e0001006970366772657461700000003400028008000100", @ANYRES32=r10, @ANYBLOB="14000600fe80000000000000000000000000000014000700ff050000000000000000000000000001080004"], 0x70}}, 0x0) 688.439136ms ago: executing program 2 (id=1655): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6015690900442f"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, 0x0, 0x0}, 0x20) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 602.065602ms ago: executing program 4 (id=1656): r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom(r0, &(0x7f0000000000)=""/249, 0xf9, 0x10020, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x338, 0xffffffff, 0x98, 0x1b8, 0x98, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ip={@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffff00, 'nicvf0\x00', 'veth0_to_bridge\x00', {0xff}, {}, 0x5e, 0x2, 0x22}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@loopback, @multicast1, 0xffffffff, 0x0, 'ip6gretap0\x00', 'macvlan1\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@set4={{0x50}, {{0x3, 0x5, 0x4}, {{0x9}}, {{0x6}, 0x2}, 0xd}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="ead100715669", 0x6, 0xd, [0x18, 0x32, 0x33, 0xa, 0x1b, 0x30, 0x5, 0x1d, 0x1d, 0x0, 0x3f, 0x1b, 0x1e, 0x38, 0x20, 0x34], 0x0, 0x80, 0x5}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x2, 0x1, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000540)=0x3ff, 0x4) setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f0000000580)=0xfffffffa, 0x4) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f00000005c0), &(0x7f0000000600)=0x8) socket$inet6(0xa, 0x80000, 0x1026a9e) (async) r3 = socket$inet6(0xa, 0x80000, 0x1026a9e) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=@ipv6_newroute={0x1c, 0x18, 0x4, 0x70bd28, 0x25dfdbfb, {0xa, 0x80, 0x20, 0xf, 0xfc, 0x2, 0xff, 0x4, 0x1600}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) (async) sendmsg$nl_route(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=@ipv6_newroute={0x1c, 0x18, 0x4, 0x70bd28, 0x25dfdbfb, {0xa, 0x80, 0x20, 0xf, 0xfc, 0x2, 0xff, 0x4, 0x1600}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r5, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000044}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={0xffffffffffffffff, 0x0, 0x97, 0x0, &(0x7f0000000880)="e26818dd30ede095ac498cf0cfda5805598329e5db09df88c8a9e6978f97a3faca4c33f30ff80d7abd5374d365472c006919ab57e4df7b8f2e3a1f3f024ba138611a8da3a486ba0c5633b5aa4141f899bc8d3fabdb59ab6d43587c21d4791c3fc41bf81123e21c379ed2d829c0df021528dd1eca3c3cda2851c5c76ea5267008a4b68957f5ecf3d5a59d4244bd4026fb33fa9de7fdf910", &(0x7f0000000940), 0x1, 0x0, 0xce, 0x42, &(0x7f0000000980)="9909f3e1b5eabd157469f1f1b52685e10949e408798c1a5ebf2e18703883637021f85a86bb9f8e0f439afd3fd22723db619e6195279c1a5239f52bc27a195ea878f565ecb910cf80a61175145ff4414d40e9417ab1e03653773d7924b6eeb988be7c5f166261bd8e55f8bdd45fed1f3b0d62b87666f9634d2850a72b5d9b06ce930c54acb9a723d5ba23d32347e422870d724efbd4001f5c74c76b2ce092b7bc755974739bc38649e60128c32ebc9785f2947cc65cf2c333c82d1eaacd446ed8562ed2f884280e87f16751ecc9a2", &(0x7f0000000a80)="4ff3b45aa0d4d3e38868b4f99b4e0bc6b1de4d0143e3f2210d883f89c2f6a3c3bad2f0f609b78f0010cb01707ec8b2a8318d3d70808aacd5c363834d93019aed3ee1", 0x1, 0x0, 0xfffff02c}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x8844}, 0x40000) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x8844}, 0x40000) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000c80)={r2, 0x2, 0x2, 0x7}) setsockopt$inet_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000cc0), 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000d00), r7) setsockopt$sock_void(r7, 0x1, 0x9, 0x0, 0x0) (async) setsockopt$sock_void(r7, 0x1, 0x9, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r7) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x48, r8, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x2}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x6}, @NL80211_ATTR_SCAN_FLAGS={0x8}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x48}, 0x1, 0x0, 0x0, 0x4084}, 0x4) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x48, r8, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x2}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x6}, @NL80211_ATTR_SCAN_FLAGS={0x8}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x48}, 0x1, 0x0, 0x0, 0x4084}, 0x4) connect$inet6(r3, &(0x7f0000000f00)={0xa, 0x4e20, 0x7fff, @dev={0xfe, 0x80, '\x00', 0xd}, 0x7}, 0x1c) socketpair(0x1d, 0x4, 0x7, &(0x7f0000000f40)) (async) socketpair(0x1d, 0x4, 0x7, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r10, &(0x7f00000014c0)={&(0x7f0000000f80)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x80, &(0x7f0000001100)=[{&(0x7f0000001000)="54bbe946c5697d19fa7683200f1efebf908dc1209c45748192473813e34f00ab6256472b630a40c65d67e45a9409a031fd56e8c383fbe1acdb41ac3ecdb24a79fec03133ece232d2f0b3e2cd4298b67ac12c9130814fda58203a243d8f784816a5ad2dba4b6e37271864551f5167e29184c34c910ff765b54b7ae3617fdfcb9b6c86b3bd64b7af03158fd4c89d0a5d6ba5a3a72809d80b3e877a6748265711", 0x9f}, {&(0x7f00000010c0)="58640435151b19df28d831d0f8d9db990fb7e68a830984b25f49f5ab36ad42e35e448b6ec16fc2ff1331815f97204562f9b612279495bf0d28d81e98", 0x3c}], 0x2, &(0x7f0000001140)=[{0x78, 0x10c, 0x81, "ce29facdf867cf1fa8e1b25c82ca7672fe65e8d06128ff3103582d4dc1a1fbcda110e15c22a138c4ac0b9c1cd6714f2955bbb372072a2f545f8f8ff9293ed047053c18db6dd65458ef1963b464e2f3f62c209b8f130afe07265bea27999debd72b1dc4e894a565"}, {0x58, 0x102, 0x0, "ace5257f671916aee864bcd33054022e78e5e66a17d5ade97af7e1155d58f2ef59e4cd8e9f249e01afd33e42637424eb6b3dd0cb727692c2dff7ba033eb6c1a27215"}, {0xa8, 0x104, 0x2, "4d470a496843d7e995036764205bc66bed22e36c26e92de880f995ab6dac001d8f00d64dc9c9aca4a6411faafbe88f9101cf8226535c7a6c28eecf2fa186bd7d718946cb6879f04d9d1a6fc3afe24b18080148987734cc155f67a553692f8d58e374133202677f716bda72a9b7358843c5ebed5efce8bf216914a2a052dbd48febf07ea3bc51c4ad39662c976572a6b1935d8b5688c9"}, {0x78, 0x112, 0x8, "e577603a3e2bfad9e3cee3cc6fce69b7b6ed6dbeca727fd2db6bcedaa898a5b47ae36641013c72e6a0045f8b2f7aabf4e714a303dadb3b2e957adfedb0d75ec570f1629320573ab651221f80ad8b14ea8030266e6569fd02ff5e58c494cfab9dd0804e77"}, {0xf0, 0x116, 0x3719, "c052600ef105a3e0719e8c38bf1b8b3e8ac6feaaad797a8ff0fa61b926e47e0edfa1e8364f60610bf8cfae117864599ed9df91f800229431c7db6d290024c597e1583cf3b549b1a15084dec9c274f139d2417152cddccc46f1285ceee1eca2d91f4adf444adeb5f749341979359b74464a857f424bb8d77c3c373611e9fd6809898e2c9bf46097e10efbbc16c7a0b3fa2bb45055c1f96ec09c5e8b13a07dda5876c5220f8c22d915d13bfabc8f0ab2848e7d9f2694200ba017da77c46f1603a43821f574439d16f463ee1a29a4eac42e19e01bb5481283ee69f851653b"}, {0x58, 0x111, 0x81, "7b6ad524b1d6585c43324efea3675deef7f3c52a7fe514c3fa5c42b3a9348291a7f88fea8817d70c3938477808da51caeb956d4d1c747e2de3aacb394c9d1991a0cd9ffc8958a2fa"}, {0x28, 0x10b, 0x0, "b71a1a404cf41a3361914dacbef90cbf4e6cd0e1"}], 0x360}, 0x0) socket$igmp6(0xa, 0x3, 0x2) (async) r11 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000001540)=@raw={'raw\x00', 0x9, 0x3, 0x328, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f0000001500), {[{{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x7}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x40, 0x8, {0xe}}}}, {{@ipv6={@rand_addr=' \x01\x00', @private2, [0x0, 0xffffff00, 0xffffff00, 0xffff00], [0xff000000, 0x0, 0xff000000, 0xff000000], 'bridge0\x00', 'nr0\x00', {0xff}, {0xff}, 0x16, 0x5, 0x4, 0x10}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x4, 0x8, 0xf}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) getpeername(r11, &(0x7f0000001900)=@nfc, &(0x7f0000001980)=0x80) (async) getpeername(r11, &(0x7f0000001900)=@nfc, &(0x7f0000001980)=0x80) ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0x17) (async) ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0x17) 541.202517ms ago: executing program 1 (id=1657): ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @remote}}) socket(0x200000000000011, 0x2, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffefe, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000088000000060a010400000000000000000100000808000b400000000060000480140001800b000100657874686472000004000280480001800c00010062697477697365003800028008000340000000020800014000000014080002400000001214000780040001f00400010007000100dc47a20008000640000000020900010073797a3000000000140000001100010000000000000000000700000a"], 0xfc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001a2142800008586dd61bcc1d700006cff0000010000000000000000000002000100"/53], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, r4, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="80000000000101040000000000000000020000002400018014000180080001"], 0x80}, 0x1, 0x0, 0x0, 0x4040011}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv6_getaddr={0x30, 0x16, 0x20, 0x70bd29, 0x25dfdbfc, {0xa, 0x1f, 0x64}, [@IFA_FLAGS={0x8, 0x8, 0x80}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7a3}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8090) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r7, 0x6, 0x23, &(0x7f0000000000)=""/48, &(0x7f0000000040)=0x30) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xc, @mcast1, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) socket$rds(0x15, 0x5, 0x0) 302.541516ms ago: executing program 2 (id=1658): mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000840)={0x0, @multicast2, @dev}, &(0x7f0000000a00)=0xc) sendmmsg$inet(r1, &(0x7f0000000d80)=[{{&(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000005c0)=[{&(0x7f00000002c0)="1ac881647a5de60b6ac61cecc65af3031cb805590704e09b6d14f0052d8c0b683afeb77766f9d0a8c28a6ac8fb6ce9fc819c8788a6f9dc93712c0f577aab5a3c05b7a1172e170eb8e9604def3c53647d783be927781b403ec52806d17f75a7c028225d961044043c83c973346573e626089cab871ef8e39f1ebabdd698fcc1502bb8613e65a2d8c1330102138b9200c35082c632b683ca95b17f9dfe2f18e8a7d75086aa442ce693d16a7294847ebcc6", 0xb0}, {&(0x7f0000000380)="cec19951cb0198cedac8472440a06e960a64d23f184688e7b428e8947fa8f4d1c4a87faf16b17cc2dd99f0147f20f37fc8bb3721b859f9b4c12a20343aa0f325f2f655f23bccd4dde9f097af1065e59ff00d1c3c19590dd9168553e94a6fb905e1fc10a33b0395aaa34191603a154f80d8481d9ac474761dfc2fb2fc8cd4fe22b245c138b662a79260cd0432aa1b6ef761384772eb23851f9f955da821964b14335f503d44831406723cac75fb6d720b17fb56db9e5ea796a1c417fd4ed43224af9cae3f17739e1dc91fe34635622118d02fd4d77013359128f4b1b68f7b83a31109e63042966656542715a37ae608", 0xef}, {&(0x7f00000000c0)="bc7014ba2627", 0x6}, {&(0x7f0000000480)="dcb5379ed37c5ff6d656b4e571e5768fe09eaeed65743824021fb6544d7e4fcb932e59e1df3c0bbf45c1dd141c3c72f450a6273eb310a86cd1ae106d61ca0dffae4d62017e66923de8ba67528317c4705de8848ffbeabde4c7cf31a2744893c97b7705ce29dfe470531e5a0e", 0x6c}, {&(0x7f0000000500)="217f5a4d0edf0aa8ea624759491f5355f402a2ab0b1a9d01651fcbb86d67f259afa58f356c188013efb2a50d462e068a83dff05220f989d40689af7633d685bc5c0ec3e917af8e91455ba70a9f01cccd30af91b373cb121bdbf248b34eacc42dcf7f384d8baa8ba86d5702a1dd66183608e0c7d2e9aabfca0b67499d238d0bd34feebb461c9ad228179f1aa2e35592a78b931bb6d02f614746fb353dc1f7a7e7772c04d89534e3c064335a1f281ad6585db5e83a5974836d1bc321da732ae5", 0xbf}], 0x5, &(0x7f0000000140)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010101, @multicast2}}}], 0x38}}, {{&(0x7f0000000240)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000640)="c39279d0b924dae7079581369f93735dbc830fb0c968007d3c90b80a1be69bd98eb224899aa741c23dc254a1274e1ed28889570113c31b26b9436a7423962bd3d5d4231e78c56c2f91128dea45825b5e0ed6062a7f7aeb301e9e3a9345d6f21007a61120e2bd4f495cd9a5a67e7ceff8ab9f34805e3db543425e2e6ac5e1334c132fb6a067bfd04bdb772a5b5436703eef4de023b9a9343d331c68b3fb36c94ae2063df78bcfbcc323697c", 0xab}, {&(0x7f0000000700)="5a50f922665c22", 0x7}, {&(0x7f0000000740)="923f1c87018dc1e72ab823e559dcd462bbbee4c60137fd44d092007ba6f83cf239ba9e92180a532aa357448cd7576b9c1f96319f96428bcc2a2b0f2518df19344fbe72ec9ea9121976250487bca955203cfdbfabde24", 0x56}, {&(0x7f00000007c0)="b969cf859f96bf5d9776", 0xa}, {&(0x7f00000008c0)="f9e895e1862e661db57ecc0724e764fdc5d8e44ef7e666aec47d343112fac965012f7bf45a06128124e533b8f2b7d62415926612bddd85cb4883f3016f766ed47d451cf39dd55c22ee33c3e819b29813ffd2f577f92f7bf0d228097e59fff48c5bf9a195017bd9a75d08993660d116d1fbd04d794f8258d526c2a58a1cb990c04ff052deff8631ffd73bc8b6", 0x8c}, {&(0x7f0000000800)="1c2f531fe990", 0x6}], 0x6, &(0x7f0000000ac0)=[@ip_retopts={{0x38, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0xc8, 0x0, 0x7, [0x9, 0x7fffffff, 0xfffffe01, 0x6d24, 0xe, 0x7]}, @rr={0x7, 0xb, 0xd8, [@local, @local]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private=0xa010101}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x33}}], 0xa0}}, {{&(0x7f0000000a40)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000b80)="489af9dd23e3ce1f1e0ab6c7cf70a946d56c4ca6e9b323b7d66bc4edf7dd34c0edb5c8295f7856bed0d825e0e377025fb3501974370f0ae1313ac82ba3673d5c9f2ac47cf3359934ed8d841a0094d7bcb30fea5d1f804e135fe483f997143ef5ce174c03aa846742a5d1a57197c848c404b8d53374613bec1f5dc658097f001c2ff6d9034a412ff92c37f9300a73aabc08011b2426f6bb4894618815bfdc4c1c0671d4522db48f6ec16d03baa6122b69f2630fb9e6935384cbd0d5cd61a2ab51c2917292f5969c2f4c971932a64b5ce6be07e0ecdf09f34103", 0xd9}, {&(0x7f0000000c80)="9eec587052c7ebf862531b6456032c85a27a1698e05cbaed7b2afb81b72ae825ea93bc2b9ff226b64d6569ac67a4d4993e7cfe747668312a7db92659eb4836c6ece850c27b242bbf93875c36d14c90c875b3868ae12ab387d53d9d", 0x5b}], 0x2, &(0x7f0000000d40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x18}}], 0x3, 0x4000000) ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ad56b6aff71b62bbb0fe006eea66c7000000001800000008", 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)={0x1028, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x1004, 0x3ffd, 0x0, 0x0, @binary="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"}, @nested={0x4, 0x1}, @typed={0xc, 0x2, 0x0, 0x0, @u64=0xfffffffffffffffd}]}, 0x1028}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) 247.872259ms ago: executing program 3 (id=1659): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@qipcrtr, &(0x7f0000000080)=0x80) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x40, 0x423c656c5739a7b1, 0x9, 0xc4, {{0x36, 0x4, 0x1, 0x2, 0xd8, 0x65, 0x0, 0x3, 0x2f, 0x0, @multicast2, @rand_addr=0x64010102, {[@timestamp={0x44, 0x1c, 0xff, 0x0, 0x7, [0x9, 0x0, 0x6, 0x4, 0x80000000, 0x0]}, @timestamp_addr={0x44, 0x4c, 0x61, 0x1, 0x8, [{@remote, 0x1}, {@multicast2, 0x9}, {@empty, 0x8000}, {@remote, 0x10000}, {@loopback, 0x7}, {@local, 0x4}, {@multicast2, 0x5d94}, {@multicast1, 0xe}, {@remote, 0xe}]}, @timestamp_prespec={0x44, 0xc, 0x2e, 0x3, 0x4, [{@loopback, 0x2}]}, @lsrr={0x83, 0x1b, 0x7d, [@dev={0xac, 0x14, 0x14, 0x21}, @multicast2, @empty, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @timestamp_prespec={0x44, 0x14, 0xaf, 0x3, 0x2, [{@remote, 0x6}, {@rand_addr=0x64010102, 0x407}]}, @rr={0x7, 0x1b, 0x8e, [@broadcast, @broadcast, @empty, @empty, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000280)={@remote, @multicast2, 0x0}, &(0x7f00000002c0)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'ip6gre0\x00', 0x0, 0x2f, 0x7, 0x2, 0x8, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x40, 0x1, 0x7, 0x3}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xd8, r1, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010081) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0xb3, '\x00', r6, 0xffffffffffffffff, 0x3, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x10}, 0x18) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000008c0)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0x20, &(0x7f0000000ac0)={&(0x7f0000000980)=""/209, 0xd1, 0x0, &(0x7f0000000a80)=""/56, 0x38}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000b40), &(0x7f0000000b80)='%-010d \x00'}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0xb, 0x15, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffd}, @exit, @generic={0x1, 0xf, 0x8, 0x3, 0xfffffffc}, @map_val={0x18, 0x7, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x800}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xa3f721af5fa29582}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='syzkaller\x00', 0x4, 0x8f, &(0x7f0000000800)=""/143, 0x41000, 0x4, '\x00', r3, @fallback=0x13, r9, 0x8, &(0x7f0000000900)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000940)={0x5, 0x2, 0xe, 0x5}, 0x10, r10, 0xffffffffffffffff, 0x9, &(0x7f0000000c00)=[r11], &(0x7f0000000c40)=[{0x5, 0x2, 0x5, 0x7}, {0x1, 0x4, 0x6, 0x6}, {0x3, 0x3, 0x2, 0x8}, {0x0, 0x3, 0x6, 0xa}, {0x2, 0x1, 0xe}, {0x4, 0x5, 0xe, 0x9}, {0x0, 0x2, 0xb, 0xe}, {0x5, 0x1, 0x5, 0xc}, {0x4, 0x4, 0xe, 0x3}], 0x10, 0x8d0, @void, @value}, 0x94) sendfile(r0, r7, 0x0, 0x3) accept4$alg(r0, 0x0, 0x0, 0x81000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r12, 0x400c6615, &(0x7f0000000dc0)={0x0, @aes128, 0x0, @desc1}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x1010, r12, 0x13e26000) bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=@base={0xb, 0x6, 0x9, 0x200, 0x4100, r8, 0x13, '\x00', r6, r9, 0x1, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r13 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000e80)={0x4}, 0x4) connect$can_bcm(r12, &(0x7f0000000ec0)={0x1d, r3}, 0x10) r14 = socket(0x18, 0x800, 0x0) r15 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001000)={@cgroup=r15, 0xd, 0x1, 0x8, &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f80)=[0x0], &(0x7f0000000fc0)=[0x0, 0x0, 0x0]}, 0x40) sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f00000012c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)={0x1c0, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x40}}}}, [@NL80211_ATTR_FRAME_MATCH={0x9a, 0x5b, "655249fac4b793abbd7c4fae7eea310b9af3536032ce4c7d96484a0ecc001ea439d8b3873f58e579a14f9449bfa3da39496fc6bd867c5737b217c3480313c952ea09373d758a42de7fb45fdaf5e81764b8ac79bd851682aecae302fa98160f380f7bacb6671ed4059d2a69e59293d3b1592d61807d28539083703ef04200b7694ef75d9eaca2b44540e5cdcd7a08850d9c75758b3bd2"}, @NL80211_ATTR_FRAME_MATCH={0x102, 0x5b, "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"}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) getsockopt$SO_TIMESTAMP(r13, 0x1, 0x40, &(0x7f0000001300), &(0x7f0000001340)=0x4) r16 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$FIONCLEX(r16, 0x5450) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r14, 0x84, 0x76, &(0x7f0000001400)={0x0, 0x9}, 0x8) 159.64403ms ago: executing program 0 (id=1660): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000002400010300000000"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000a026301568dbef85435d38700000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000040)=0x9, 0x4) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000040)=0x9, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000400)={'filter\x00', 0x4b, "836a7a27d73af2f77617ccb0ab0b6c695da24889a14d229f80e3d03474be880b1c9e8b8b0fde46ca51f8449d4d2a6d40cf4a43d50a98df76d7914d6a08798f949532b23a3c5f4fbaca5b9a"}, &(0x7f0000000380)=0x6f) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002d00210000000000000000000400"], 0x1c}], 0x1}, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002d00210000000000000000000400"], 0x1c}], 0x1}, 0x0) socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2000007, 0x12, 0xffffffffffffffff, 0x12574000) syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd608709000000000000000000000000000001fc0200000000000000000000000000000001000000000000c20412"], 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd608709000000000000000000000000000001fc0200000000000000000000000000000001000000000000c20412"], 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x10) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x53b2}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004065}, 0x4090) (async) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x53b2}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004065}, 0x4090) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f00000003c0)=0x1800, 0x34) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 91.121975ms ago: executing program 2 (id=1661): unshare(0x8040600) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1820000000000000000000000000000085100000fdffffff06000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x22) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x44, 0x0, 0x0, 0xfffff024}, {0x80000006}]}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[], 0x28}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) unshare(0x20000400) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080200000100040080000000b3e9f81b95d7301b923fed4714de0724c50d95bafbc3ba622fa5be2760c5684c5fa60072414e049f261ebe67841b246e19a25cefc1f038ef5ef73e6df673763c980a5bf5c6ce90fd876ca9436bd384f532cfcbafdeb02999d5c24ec49f929022e403aed9df16995d888fccb5899f1194017ea03327e2d86d937b71125c96accf5f3aa8fd73ad883e76461c68c677866d1103b63601a76716cad5a0faa6e75de7ef48283f092e3cc31a4f95248c07fc59e54d343ed1702060d1126b06ce063e6f475dc7afbe7c2ffb0ab743070fc87abaf5543e55a4d0378dd5ed46313cd74a45282aa0007c50efd9bcd5dacb93b3fc87ffd4aa9aef4965ed86d284baf97b2c4f3120", @ANYRES32=0x0, @ANYBLOB="fc03000000000000000021316755000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000008000000000000000000000000000000ee37583f7975fd8c6e7bd36800f723c5fbf52bc6864c813706d389d7d98c8d6deaed9ce7dc02e3031e5f8b1957fcf3e66a481a34b90de897b747278f9d81cc8cf5eb8c746ca984446b004669cf2f773690f40b254ea51cf7248f5a4de16301fa3c1c1c261a6b45ef2f768eb35e03451ae1bf3039bcfbe6d5e0e5e6c84a0c68b51281d17ff05ec15fedc24a083eb97958f2ed73bb000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000500)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(r5) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getpeername$packet(r5, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000700)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f00000001c0)={r8, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x30}, 0x1, 0xffffa888, 0x0, 0x80000}, 0x8810) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r10, &(0x7f0000000080)='syz0\x00', 0x1ff) 37.479023ms ago: executing program 3 (id=1662): unshare(0x62040200) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbfa4000000000000070000000800ffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000046000000760000006d00ffff00000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x6) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540), 0x4) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x80800) setsockopt$sock_int(r8, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_raw(r8, &(0x7f0000001480)={&(0x7f0000000600)=@isdn, 0x80, &(0x7f0000000680)=[{&(0x7f0000000c40)=""/196, 0xc4}, {&(0x7f0000000d40)=""/148, 0x94}, {&(0x7f0000001380)=""/255, 0xff}], 0x3, &(0x7f0000000e00)=""/17, 0x11}, 0x2000) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x6, 0x4, 0x6db22e68, 0x40, r1, 0x4, '\x00', r5, r6, 0x2, 0x3, 0x5, 0xc, @void, @value, @void, @value}, 0x50) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af9cc9e5ef6bda9df2c3af36effff9af2551ce935b0f327cb3f011a2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7511d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1525320e716660000000000b02b001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d3294000000000000000000000000000000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10738d3c9f7a98eccb26f7e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe977076ce7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d1a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1c77a211bfa02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc084075ad10727522934a87a4ddcdb112754ca5bdec0ead14b6c0f19a4b126bbe0c2b8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcb1a47a87baf63e4edf11c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c158ae8f44bfbfa7c2730302b66a99f66705b71e6205e7cbf36435e1eabb9a63fcd604d5cc27e1317ad94cf438d7187a2fe4e06fa6cbf84ef1efa82cb2c4af6bd1370616cdbe2b98fd89b79824ba089df1f81e6fcef073059f5f1d6a221d791839d7826ed1759c2153532c393fd1bd7be2e7f5abf2f0800000000ea46c07adee10d0f2bc85cf37182256e4fd8f56942726efc07180eaa5421d697665c8bacd39cdb392e6153af80bc1a69e3bfab032e78c9a96eab13be845a0d44ef2a4ab414ac2e4802a3b5d3aa2a4a4fc259206d97d0cc1602d6b45ff414c53fc9f5f68438f0423e168a97923ca0464b40b2f797841fb2bb2e5ad9feff37220ab7c34f4c382c247e7735adb55c209f7c0f8880733dbd3f5a095cc6a2"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1d, 0xf, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x7}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x6}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @generic={0x7, 0x1, 0xa, 0x39, 0x9}]}, &(0x7f0000000000)='GPL\x00', 0xa7a, 0xcf, &(0x7f0000000280)=""/207, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x5, 0x4, 0xc, 0x3ff}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0xffffffffffffffff], &(0x7f0000000200)=[{0x4, 0x1, 0x9, 0xa}, {0x1, 0x3, 0xa, 0xb}], 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000500)='snd_soc_dapm_connected\x00', r10}, 0x18) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100e8ffffff00000000260000002000018008000100", @ANYRES32, @ANYBLOB="14000200776731"], 0x34}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 0s ago: executing program 1 (id=1663): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000001580)=ANY=[], 0x32600) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000940)=@security={'security\x00', 0xe, 0x4, 0x13f0, 0xffffffff, 0x1128, 0x0, 0x1220, 0xffffffff, 0xffffffff, 0x1320, 0x1320, 0x1320, 0xffffffff, 0x4, &(0x7f0000000200), {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @local}, [0x0, 0x0, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff, 0xffffff00], 'syzkaller1\x00', 'dvmrp0\x00', {0xff}, {0xff}, 0x3b, 0xa, 0x4, 0x28}, 0x0, 0x1100, 0x1128, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, '|z', 0x1}}, @common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.net/syz0\x00', 0xfffffffd, {0x6}}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x8, 0x31}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x6, 0x4663}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}, {0x2b, 0xff, 0x5, 0x5, 0xf, 0x1, 0x200}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1450) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): allmulticast mode [ 137.717085][ T7443] FAULT_INJECTION: forcing a failure. [ 137.717085][ T7443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.784826][ T7443] CPU: 0 UID: 0 PID: 7443 Comm: syz.2.383 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 137.784854][ T7443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 137.784866][ T7443] Call Trace: [ 137.784883][ T7443] [ 137.784891][ T7443] dump_stack_lvl+0x189/0x250 [ 137.784923][ T7443] ? __lock_acquire+0xaac/0xd20 [ 137.784955][ T7443] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.784983][ T7443] ? __pfx__printk+0x10/0x10 [ 137.785003][ T7443] ? __might_fault+0xb0/0x130 [ 137.785040][ T7443] should_fail_ex+0x414/0x560 [ 137.785079][ T7443] _copy_from_iter+0x1db/0x15a0 [ 137.785111][ T7443] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 137.785133][ T7443] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 137.785160][ T7443] ? __pfx__copy_from_iter+0x10/0x10 [ 137.785185][ T7443] ? __build_skb_around+0x257/0x3e0 [ 137.785212][ T7443] ? netlink_sendmsg+0x642/0xb30 [ 137.785233][ T7443] ? skb_put+0x11b/0x210 [ 137.785260][ T7443] netlink_sendmsg+0x6b2/0xb30 [ 137.785293][ T7443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.785319][ T7443] ? aa_sock_msg_perm+0x94/0x160 [ 137.785342][ T7443] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 137.785371][ T7443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.785394][ T7443] __sock_sendmsg+0x219/0x270 [ 137.785429][ T7443] ____sys_sendmsg+0x505/0x830 [ 137.785460][ T7443] ? __pfx_____sys_sendmsg+0x10/0x10 [ 137.785496][ T7443] ? import_iovec+0x74/0xa0 [ 137.785526][ T7443] ___sys_sendmsg+0x21f/0x2a0 [ 137.785554][ T7443] ? __pfx____sys_sendmsg+0x10/0x10 [ 137.785619][ T7443] ? __fget_files+0x2a/0x420 [ 137.785643][ T7443] ? __fget_files+0x3a0/0x420 [ 137.785680][ T7443] __x64_sys_sendmsg+0x19b/0x260 [ 137.785708][ T7443] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 137.785753][ T7443] ? do_syscall_64+0xba/0x210 [ 137.785787][ T7443] do_syscall_64+0xf6/0x210 [ 137.785817][ T7443] ? clear_bhb_loop+0x45/0xa0 [ 137.785841][ T7443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.785864][ T7443] RIP: 0033:0x7f432158e969 [ 137.785887][ T7443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.785903][ T7443] RSP: 002b:00007f43224e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.785923][ T7443] RAX: ffffffffffffffda RBX: 00007f43217b5fa0 RCX: 00007f432158e969 [ 137.785937][ T7443] RDX: 000000002000c094 RSI: 0000200000000000 RDI: 0000000000000003 [ 137.785950][ T7443] RBP: 00007f43224e3090 R08: 0000000000000000 R09: 0000000000000000 [ 137.785961][ T7443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.785972][ T7443] R13: 0000000000000000 R14: 00007f43217b5fa0 R15: 00007fff44bb99e8 [ 137.786003][ T7443] [ 138.419470][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 138.441778][ T7466] __nla_validate_parse: 21 callbacks suppressed [ 138.441797][ T7466] netlink: 24 bytes leftover after parsing attributes in process `syz.1.387'. [ 138.550678][ T7475] sock: sock_set_timeout: `syz.1.387' (pid 7475) tries to set negative timeout [ 138.810982][ T7487] netlink: 104 bytes leftover after parsing attributes in process `syz.4.391'. [ 139.253092][ T7507] netlink: 24 bytes leftover after parsing attributes in process `syz.2.397'. [ 139.301894][ T36] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 139.459335][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 139.525392][ T7517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.400'. [ 139.603670][ T7520] xt_recent: Unsupported userspace flags (00000048) [ 139.917879][ T7518] syz.0.390 (7518) used greatest stack depth: 19968 bytes left [ 140.149727][ T7535] netlink: 104 bytes leftover after parsing attributes in process `syz.4.405'. [ 140.205929][ T7521] vxcan1: entered allmulticast mode [ 140.284870][ T7540] netlink: 104 bytes leftover after parsing attributes in process `syz.1.406'. [ 140.426605][ T7544] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.407'. [ 140.459371][ T7545] netlink: 12 bytes leftover after parsing attributes in process `syz.0.409'. [ 140.493349][ T7545] nbd: illegal input index -381222912 [ 140.500178][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 140.512443][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.409'. [ 140.724613][ T7554] netlink: 16 bytes leftover after parsing attributes in process `syz.3.411'. [ 141.048050][ T7576] nbd: socks must be embedded in a SOCK_ITEM attr [ 141.062981][ T7576] block nbd9: shutting down sockets [ 141.539341][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 141.862229][ T1146] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 142.078026][ T7618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.511760][ T1146] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 142.533613][ T7618] team0 (unregistering): Port device team_slave_0 removed [ 142.548199][ T7618] team0 (unregistering): Port device team_slave_1 removed [ 142.579339][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 143.140446][ T5904] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 143.619367][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 143.723653][ T7690] __nla_validate_parse: 13 callbacks suppressed [ 143.723674][ T7690] netlink: 104 bytes leftover after parsing attributes in process `syz.2.444'. [ 143.727319][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.446'. [ 144.044325][ T7707] netlink: 'syz.0.450': attribute type 4 has an invalid length. [ 144.060171][ T7706] nbd: socks must be embedded in a SOCK_ITEM attr [ 144.087208][ T7706] block nbd9: shutting down sockets [ 144.422784][ T7724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.455'. [ 144.467055][ T7724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.455'. [ 144.488798][ T7724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.455'. [ 144.524554][ T7728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.455'. [ 144.529969][ T7726] netlink: 36 bytes leftover after parsing attributes in process `syz.2.456'. [ 144.546260][ T7728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.455'. [ 144.584909][ T7728] FAULT_INJECTION: forcing a failure. [ 144.584909][ T7728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.623047][ T7728] CPU: 0 UID: 0 PID: 7728 Comm: syz.3.455 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 144.623076][ T7728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 144.623088][ T7728] Call Trace: [ 144.623096][ T7728] [ 144.623105][ T7728] dump_stack_lvl+0x189/0x250 [ 144.623138][ T7728] ? __lock_acquire+0xaac/0xd20 [ 144.623169][ T7728] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.623198][ T7728] ? __pfx__printk+0x10/0x10 [ 144.623218][ T7728] ? __might_fault+0xb0/0x130 [ 144.623256][ T7728] should_fail_ex+0x414/0x560 [ 144.623295][ T7728] _copy_from_user+0x2d/0xb0 [ 144.623323][ T7728] kstrtouint_from_user+0xc4/0x170 [ 144.623349][ T7728] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 144.623391][ T7728] proc_fail_nth_write+0x88/0x240 [ 144.623427][ T7728] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 144.623462][ T7728] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 144.623492][ T7728] vfs_write+0x27b/0xa90 [ 144.623524][ T7728] ? __pfx_vfs_write+0x10/0x10 [ 144.623549][ T7728] ? __fget_files+0x2a/0x420 [ 144.623580][ T7728] ? __fget_files+0x3a0/0x420 [ 144.623603][ T7728] ? __fget_files+0x2a/0x420 [ 144.623638][ T7728] ksys_write+0x145/0x250 [ 144.623659][ T7728] ? rcu_is_watching+0x15/0xb0 [ 144.623691][ T7728] ? __pfx_ksys_write+0x10/0x10 [ 144.623717][ T7728] ? do_syscall_64+0xba/0x210 [ 144.623751][ T7728] do_syscall_64+0xf6/0x210 [ 144.623782][ T7728] ? clear_bhb_loop+0x45/0xa0 [ 144.623807][ T7728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.623825][ T7728] RIP: 0033:0x7f66d898d41f [ 144.623842][ T7728] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 144.623858][ T7728] RSP: 002b:00007f66d67d5030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 144.623878][ T7728] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f66d898d41f [ 144.623891][ T7728] RDX: 0000000000000001 RSI: 00007f66d67d50a0 RDI: 000000000000000a [ 144.623903][ T7728] RBP: 00007f66d67d5090 R08: 0000000000000000 R09: 0000000000000000 [ 144.623914][ T7728] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 144.623925][ T7728] R13: 0000000000000000 R14: 00007f66d8bb6160 R15: 00007ffc931a2f98 [ 144.623956][ T7728] [ 144.659426][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 144.873936][ T7733] netlink: 'syz.0.459': attribute type 13 has an invalid length. [ 144.993736][ T7733] netlink: 16 bytes leftover after parsing attributes in process `syz.0.459'. [ 145.019414][ T7733] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 145.061656][ T12] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 145.109390][ T7748] netlink: 16 bytes leftover after parsing attributes in process `syz.3.461'. [ 145.472052][ T7758] nbd: socks must be embedded in a SOCK_ITEM attr [ 145.485058][ T7758] block nbd9: shutting down sockets [ 145.699058][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 146.541199][ T7802] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.550830][ T7802] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.561026][ T7802] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.570672][ T7802] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.580588][ T7802] geneve2: entered allmulticast mode [ 146.611365][ T7803] nbd: socks must be embedded in a SOCK_ITEM attr [ 146.640130][ T7803] block nbd9: shutting down sockets [ 146.668365][ T7801] ip6tnl1: entered promiscuous mode [ 146.688833][ T7804] netlink: 'syz.0.477': attribute type 1 has an invalid length. [ 146.689962][ T7801] ip6tnl1: entered allmulticast mode [ 146.739672][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 146.915063][ T1090] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 147.276334][ T7818] netlink: 'syz.1.480': attribute type 29 has an invalid length. [ 147.537636][ T7838] xt_l2tp: v2 sid > 0xffff: 262144 [ 147.779114][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 147.820307][ T7852] netlink: 'syz.0.489': attribute type 21 has an invalid length. [ 147.863786][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 148.269935][ T13] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 148.361007][ T30] audit: type=1800 audit(1746463501.047:2): pid=7862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.493" name="memory.events" dev="tmpfs" ino=559 res=0 errno=0 [ 148.395580][ T7870] sctp: [Deprecated]: syz.4.495 (pid 7870) Use of int in max_burst socket option. [ 148.395580][ T7870] Use struct sctp_assoc_value instead [ 148.509867][ T7870] bridge2: entered promiscuous mode [ 148.520778][ T7877] sctp: [Deprecated]: syz.4.495 (pid 7877) Use of int in max_burst socket option. [ 148.520778][ T7877] Use struct sctp_assoc_value instead [ 148.670939][ T7870] bridge3: entered promiscuous mode [ 148.806991][ T30] audit: type=1107 audit(1746463501.487:3): pid=7888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='^+@/=EaX2<;+Au%4TQA_>X%' [ 148.823842][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 149.097727][ T7897] bond0: entered promiscuous mode [ 149.103818][ T7897] bond_slave_0: entered promiscuous mode [ 149.111026][ T7897] bond_slave_1: entered promiscuous mode [ 149.118686][ T7897] bond0: left promiscuous mode [ 149.146024][ T7897] bond_slave_0: left promiscuous mode [ 149.157312][ T7897] bond_slave_1: left promiscuous mode [ 149.542964][ T5911] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 149.557673][ T7911] __nla_validate_parse: 17 callbacks suppressed [ 149.557691][ T7911] netlink: 16 bytes leftover after parsing attributes in process `syz.2.506'. [ 149.598509][ T7911] netlink: 20 bytes leftover after parsing attributes in process `syz.2.506'. [ 149.738912][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 149.859156][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 149.966834][ T7923] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 150.013010][ T7922] netlink: 'syz.4.509': attribute type 10 has an invalid length. [ 150.017984][ T7929] netlink: 'syz.3.511': attribute type 5 has an invalid length. [ 150.255474][ T7937] netlink: 44 bytes leftover after parsing attributes in process `syz.1.512'. [ 150.337642][ T7933] netlink: 16 bytes leftover after parsing attributes in process `syz.1.512'. [ 150.377296][ T7932] netlink: 16 bytes leftover after parsing attributes in process `syz.1.512'. [ 150.530647][ T7946] ipip0: entered promiscuous mode [ 150.547152][ T7946] ipip0: entered allmulticast mode [ 150.591020][ T7951] netlink: 'syz.4.518': attribute type 1 has an invalid length. [ 150.602579][ T7951] netlink: 244 bytes leftover after parsing attributes in process `syz.4.518'. [ 150.821314][ T81] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 150.830228][ T5911] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 150.882688][ T7965] netlink: 16 bytes leftover after parsing attributes in process `syz.0.523'. [ 150.913384][ T7965] netlink: 20 bytes leftover after parsing attributes in process `syz.0.523'. [ 150.924843][ T7970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.522'. [ 151.005934][ T7965] geneve2: entered allmulticast mode [ 151.073668][ T7966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.522'. [ 151.643592][ T7998] dummy0: entered promiscuous mode [ 151.651734][ T8000] netlink: 'syz.0.528': attribute type 1 has an invalid length. [ 151.654472][ T7998] vlan3: entered promiscuous mode [ 151.797089][ T8000] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.834707][ T8002] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.842163][ T8002] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 151.855100][ T8002] bond1: (slave vcan1): Error -95 calling set_mac_address [ 152.386614][ T8021] vti0: entered promiscuous mode [ 152.513087][ T8032] tc_dump_action: action bad kind [ 152.701924][ T8043] ip6gre0: entered promiscuous mode [ 152.753620][ T5837] Bluetooth: hci4: link tx timeout [ 152.759465][ T5837] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.979074][ C1] net_ratelimit: 6 callbacks suppressed [ 152.979093][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 153.377965][ T8071] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.566503][ T8071] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.691216][ T8071] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.831374][ T8071] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.002396][ T8071] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.021012][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 154.031886][ T13] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 154.069448][ T8071] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.130881][ T8071] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.165343][ T8071] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.514448][ T8118] netlink: 'syz.4.561': attribute type 1 has an invalid length. [ 154.795850][ T8124] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 154.796239][ T8125] __nla_validate_parse: 13 callbacks suppressed [ 154.796257][ T8125] netlink: 672 bytes leftover after parsing attributes in process `syz.1.563'. [ 154.824551][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 154.836203][ T8124] bond2: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 154.913937][ T8124] bond2: (slave vcan1): making interface the new active one [ 154.982209][ T8124] bond2: (slave vcan1): Enslaving as an active interface with an up link [ 155.021297][ T8127] bond2: (slave vcan2): The slave device specified does not support setting the MAC address [ 155.057227][ T8124] netlink: 164 bytes leftover after parsing attributes in process `syz.4.561'. [ 155.066440][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 155.123780][ T8127] bond2: (slave vcan2): Enslaving as a backup interface with an up link [ 155.138107][ T8118] 8021q: adding VLAN 0 to HW filter on device bond2 [ 155.335209][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.570'. [ 155.392488][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.570'. [ 155.426385][ T8159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.571'. [ 155.628251][ T8167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.572'. [ 155.641721][ T8167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.572'. [ 155.650848][ T8167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.572'. [ 155.916010][ T8184] netlink: 36 bytes leftover after parsing attributes in process `syz.4.576'. [ 155.943297][ T12] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 155.954784][ T5911] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 155.962893][ T1761] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 155.992058][ T8184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.576'. [ 156.099135][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 156.262686][ T8195] netlink: 'syz.0.579': attribute type 11 has an invalid length. [ 156.440606][ T8206] netlink: 'syz.3.580': attribute type 1 has an invalid length. [ 157.139069][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 158.179195][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 158.266537][ T8263] veth0_to_bond: entered promiscuous mode [ 158.355374][ T8266] xt_ecn: cannot match TCP bits for non-tcp packets [ 158.504702][ T81] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 158.794623][ T8276] xt_nfacct: accounting object `syz1' does not exists [ 159.029674][ T8285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.144152][ T5904] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 159.184057][ T8289] bond0: entered promiscuous mode [ 159.201549][ T8289] @: entered promiscuous mode [ 159.219118][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 159.228388][ T8289] bond_slave_1: entered promiscuous mode [ 159.236396][ T8289] batadv0: entered promiscuous mode [ 159.248248][ T8289] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 159.274053][ T8289] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 159.288378][ T8289] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 159.305165][ T8289] bond0: left promiscuous mode [ 159.312564][ T8289] @: left promiscuous mode [ 159.317691][ T8289] bond_slave_1: left promiscuous mode [ 159.332645][ T8289] batadv0: left promiscuous mode [ 159.810111][ T81] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 159.895554][ T8300] __nla_validate_parse: 19 callbacks suppressed [ 159.895575][ T8300] netlink: 104 bytes leftover after parsing attributes in process `syz.4.612'. [ 159.945034][ T8298] syzkaller0: entered promiscuous mode [ 159.951288][ T8298] syzkaller0: entered allmulticast mode [ 160.172481][ T8305] netlink: 16 bytes leftover after parsing attributes in process `syz.4.613'. [ 160.216703][ T8305] netlink: 20 bytes leftover after parsing attributes in process `syz.4.613'. [ 160.259218][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 160.304644][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 160.312931][ T5881] IPVS: starting estimator thread 0... [ 160.339551][ T81] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 160.420562][ T8310] IPVS: using max 29 ests per chain, 69600 per kthread [ 161.060160][ T13] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 161.301603][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 162.486106][ T8305] geneve2: entered allmulticast mode [ 162.710122][ T8320] netlink: 24 bytes leftover after parsing attributes in process `syz.0.617'. [ 163.061037][ T8336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.621'. [ 163.301038][ T8340] netlink: 104 bytes leftover after parsing attributes in process `syz.3.623'. [ 163.379048][ C1] net_ratelimit: 3 callbacks suppressed [ 163.379066][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 163.768874][ T8355] SET target dimension over the limit! [ 163.932771][ T8368] netlink: 104 bytes leftover after parsing attributes in process `syz.1.630'. [ 164.036024][ T8371] unsupported nla_type 52263 [ 164.206077][ T8374] netlink: 16 bytes leftover after parsing attributes in process `syz.0.633'. [ 164.262394][ T81] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 164.419061][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 164.515008][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.635'. [ 164.579489][ T8383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.635'. [ 164.671660][ T5839] block nbd9: Receive control failed (result -107) [ 164.710021][ T8383] nbd9: detected capacity change from 0 to 256 [ 164.732621][ T7428] block nbd9: Dead connection, failed to find a fallback [ 164.903060][ T1090] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 164.965992][ T8400] __nla_validate_parse: 2 callbacks suppressed [ 164.966050][ T8400] netlink: 104 bytes leftover after parsing attributes in process `syz.0.639'. [ 165.321585][ T8407] netlink: 40 bytes leftover after parsing attributes in process `syz.1.641'. [ 165.424000][ T8404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.638'. [ 165.459058][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 165.613193][ T8412] netlink: 104 bytes leftover after parsing attributes in process `syz.4.642'. [ 165.675489][ T1092] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 165.683138][ T5911] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 166.003715][ T8422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.643'. [ 166.050096][ T8422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.643'. [ 166.090410][ T8422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.643'. [ 166.126529][ T8423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.643'. [ 166.159522][ T8423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.643'. [ 166.180994][ T36] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 166.499060][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 166.512243][ T8433] xt_TPROXY: Can be used only with -p tcp or -p udp [ 166.663633][ T8437] netlink: 104 bytes leftover after parsing attributes in process `syz.0.651'. [ 166.831007][ T1090] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 167.465602][ T5839] block nbd10: Receive control failed (result -107) [ 167.510195][ T8463] nbd10: detected capacity change from 0 to 256 [ 167.585532][ T7855] block nbd10: Dead connection, failed to find a fallback [ 167.894324][ T8479] netlink: 'syz.0.661': attribute type 13 has an invalid length. [ 168.037923][ T8292] syz.2.608: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 168.057447][ T8292] CPU: 1 UID: 0 PID: 8292 Comm: syz.2.608 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 168.057474][ T8292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 168.057493][ T8292] Call Trace: [ 168.057501][ T8292] [ 168.057509][ T8292] dump_stack_lvl+0x189/0x250 [ 168.057545][ T8292] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 168.057573][ T8292] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.057602][ T8292] ? __pfx__printk+0x10/0x10 [ 168.057623][ T8292] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 168.057658][ T8292] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 168.057701][ T8292] warn_alloc+0x214/0x310 [ 168.057738][ T8292] ? __pfx_warn_alloc+0x10/0x10 [ 168.057778][ T8292] ? __get_vm_area_node+0x1c5/0x2d0 [ 168.057804][ T8292] ? __get_vm_area_node+0x25a/0x2d0 [ 168.057837][ T8292] __vmalloc_node_range_noprof+0x5f2/0x12c0 [ 168.057892][ T8292] ? __kasan_kmalloc+0x93/0xb0 [ 168.057921][ T8292] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 168.057954][ T8292] ? __get_vm_area_node+0x1c5/0x2d0 [ 168.057979][ T8292] ? __get_vm_area_node+0x25a/0x2d0 [ 168.058012][ T8292] __vmalloc_node_range_noprof+0x4e8/0x12c0 [ 168.058042][ T8292] ? nf_tables_newset+0x132b/0x2530 [ 168.058101][ T8292] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 168.058129][ T8292] ? __kasan_kmalloc_large+0x1a/0xa0 [ 168.058157][ T8292] ? rcu_is_watching+0x15/0xb0 [ 168.058193][ T8292] ? nf_tables_newset+0x132b/0x2530 [ 168.058218][ T8292] ? nf_tables_newset+0x132b/0x2530 [ 168.058241][ T8292] __kvmalloc_node_noprof+0x3a0/0x5e0 [ 168.058275][ T8292] ? nf_tables_newset+0x132b/0x2530 [ 168.058302][ T8292] ? nft_table_lookup+0x211/0x230 [ 168.058326][ T8292] ? nft_set_lookup+0x128/0x150 [ 168.058364][ T8292] ? nft_hash_privsize+0x6f/0xf0 [ 168.058390][ T8292] nf_tables_newset+0x132b/0x2530 [ 168.058436][ T8292] ? __pfx_nf_tables_newset+0x10/0x10 [ 168.058487][ T8292] ? __nla_parse+0x40/0x60 [ 168.058518][ T8292] nfnetlink_rcv+0x113f/0x2530 [ 168.058584][ T8292] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 168.058670][ T8292] ? skb_clone+0x246/0x3a0 [ 168.058716][ T8292] ? netlink_deliver_tap+0x2e/0x1b0 [ 168.058739][ T8292] ? netlink_deliver_tap+0x2e/0x1b0 [ 168.058768][ T8292] netlink_unicast+0x758/0x8d0 [ 168.058802][ T8292] netlink_sendmsg+0x805/0xb30 [ 168.058837][ T8292] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.058865][ T8292] ? aa_sock_msg_perm+0x94/0x160 [ 168.058891][ T8292] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 168.058913][ T8292] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.058937][ T8292] __sock_sendmsg+0x219/0x270 [ 168.058973][ T8292] ____sys_sendmsg+0x505/0x830 [ 168.059005][ T8292] ? __pfx_____sys_sendmsg+0x10/0x10 [ 168.059042][ T8292] ? import_iovec+0x74/0xa0 [ 168.059074][ T8292] ___sys_sendmsg+0x21f/0x2a0 [ 168.059103][ T8292] ? __pfx____sys_sendmsg+0x10/0x10 [ 168.059171][ T8292] ? __fget_files+0x2a/0x420 [ 168.059197][ T8292] ? __fget_files+0x3a0/0x420 [ 168.059234][ T8292] __x64_sys_sendmsg+0x19b/0x260 [ 168.059264][ T8292] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 168.059310][ T8292] ? do_syscall_64+0xba/0x210 [ 168.059352][ T8292] do_syscall_64+0xf6/0x210 [ 168.059385][ T8292] ? clear_bhb_loop+0x45/0xa0 [ 168.059409][ T8292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.059428][ T8292] RIP: 0033:0x7f432158e969 [ 168.059447][ T8292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.059468][ T8292] RSP: 002b:00007f43224c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.059489][ T8292] RAX: ffffffffffffffda RBX: 00007f43217b6080 RCX: 00007f432158e969 [ 168.059503][ T8292] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000a [ 168.059515][ T8292] RBP: 00007f4321610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 168.059527][ T8292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.059538][ T8292] R13: 0000000000000000 R14: 00007f43217b6080 R15: 00007fff44bb99e8 [ 168.059570][ T8292] [ 168.492146][ T8292] Mem-Info: [ 168.495315][ T8292] active_anon:5543 inactive_anon:0 isolated_anon:0 [ 168.495315][ T8292] active_file:1496 inactive_file:38352 isolated_file:0 [ 168.495315][ T8292] unevictable:768 dirty:91 writeback:0 [ 168.495315][ T8292] slab_reclaimable:10305 slab_unreclaimable:115994 [ 168.495315][ T8292] mapped:29861 shmem:1418 pagetables:976 [ 168.495315][ T8292] sec_pagetables:0 bounce:0 [ 168.495315][ T8292] kernel_misc_reclaimable:0 [ 168.495315][ T8292] free:1296257 free_pcp:1125 free_cma:0 [ 168.579043][ C1] net_ratelimit: 3 callbacks suppressed [ 168.579061][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 168.611458][ T8292] Node 0 active_anon:22072kB inactive_anon:0kB active_file:5984kB inactive_file:153336kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119444kB dirty:364kB writeback:0kB shmem:4136kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11480kB pagetables:3904kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 168.780831][ T8292] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 168.813093][ T8292] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 168.840684][ T8292] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 168.846511][ T8292] Node 0 DMA32 free:1263972kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:21664kB inactive_anon:0kB active_file:5984kB inactive_file:153236kB unevictable:1536kB writepending:364kB present:3129332kB managed:2564076kB mlocked:0kB bounce:0kB free_pcp:1792kB local_pcp:1064kB free_cma:0kB [ 168.885010][ T8292] lowmem_reserve[]: 0 0 0 0 0 [ 168.890043][ T8292] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 169.046700][ T8292] lowmem_reserve[]: 0 0 0 0 0 [ 169.058591][ T8292] Node 1 Normal free:3910104kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:172kB local_pcp:0kB free_cma:0kB [ 169.116366][ T8292] lowmem_reserve[]: 0 0 0 0 0 [ 169.123216][ T8292] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 169.133541][ T8496] batadv1: entered promiscuous mode [ 169.140520][ T8292] Node 0 DMA32: 10*4kB (M) 12*8kB (ME) 110*16kB (UME) 182*32kB (UME) 91*64kB (ME) 24*128kB (UME) 10*256kB (ME) 90*512kB (UM) 81*1024kB (UME) 27*2048kB (UME) 259*4096kB (UM) = 1264360kB [ 169.151558][ T8496] batadv1: entered allmulticast mode [ 169.170815][ T8292] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 169.186439][ T8292] Node 1 Normal: 220*4kB (UE) 69*8kB (UME) 46*16kB (UME) 225*32kB (UME) 105*64kB (UME) 28*128kB (UME) 17*256kB (UME) 10*512kB (UME) 4*1024kB (UME) 1*2048kB (U) 946*4096kB (M) = 3910104kB [ 169.214650][ T8292] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 169.233987][ T8292] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 169.256212][ T8292] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 169.263224][ T8498] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 169.277669][ T8498] gretap1: entered promiscuous mode [ 169.286040][ T8498] gretap1: entered allmulticast mode [ 169.300282][ T8292] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 169.326094][ T8292] 41280 total pagecache pages [ 169.365674][ T8292] 9 pages in swap cache [ 169.384820][ T8292] Free swap = 124780kB [ 169.393480][ T8292] Total swap = 124996kB [ 169.399615][ T8292] 2097051 pages RAM [ 169.406205][ T8292] 0 pages HighMem/MovableOnly [ 169.406659][ T8501] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 169.423432][ T8292] 424374 pages reserved [ 169.445756][ T8292] 0 pages cma reserved [ 169.593415][ T8507] netlink: 'syz.1.672': attribute type 1 has an invalid length. [ 169.619064][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 169.655201][ T8507] bond3: entered allmulticast mode [ 169.667268][ T8507] 8021q: adding VLAN 0 to HW filter on device bond3 [ 169.739675][ T8512] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 169.748444][ T8512] bond3: (slave batadv1): making interface the new active one [ 169.789345][ T8512] batadv1: entered allmulticast mode [ 169.796608][ T8512] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 169.863459][ T8516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.880863][ T8516] batadv_slave_0: entered promiscuous mode [ 169.994119][ T8522] __nla_validate_parse: 10 callbacks suppressed [ 169.994140][ T8522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.675'. [ 170.021223][ T53] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 170.041241][ T8522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.675'. [ 170.050524][ T8524] netlink: 104 bytes leftover after parsing attributes in process `syz.0.677'. [ 170.071374][ T8525] netlink: 104 bytes leftover after parsing attributes in process `syz.1.676'. [ 170.080755][ T8522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.675'. [ 170.332540][ T8292] syz.2.608 (8292) used greatest stack depth: 16008 bytes left [ 170.601235][ T8535] tipc: Started in network mode [ 170.616995][ T8535] tipc: Node identity ac14140f, cluster identity 4711 [ 170.650434][ T8538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.682'. [ 170.659178][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 170.666678][ T8535] tipc: New replicast peer: 255.255.255.255 [ 170.673018][ T36] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 170.705738][ T8538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.682'. [ 170.723369][ T8535] tipc: Enabled bearer , priority 10 [ 171.136565][ T8554] netlink: 16 bytes leftover after parsing attributes in process `syz.0.687'. [ 171.159294][ T8554] openvswitch: netlink: Missing key (keys=40, expected=80) [ 171.195785][ T8554] netlink: 'syz.0.687': attribute type 21 has an invalid length. [ 171.213987][ T8554] IPv6: NLM_F_CREATE should be specified when creating new route [ 171.214389][ T8559] netlink: 104 bytes leftover after parsing attributes in process `syz.3.688'. [ 171.299436][ T1092] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 171.310384][ T53] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 171.496593][ T8568] netlink: 104 bytes leftover after parsing attributes in process `syz.0.689'. [ 171.609869][ T8570] nbd: socks must be embedded in a SOCK_ITEM attr [ 171.616729][ T8570] block nbd11: shutting down sockets [ 171.699036][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 171.830197][ T5904] tipc: Node number set to 2886997007 [ 173.030366][ T8611] nbd: socks must be embedded in a SOCK_ITEM attr [ 173.037427][ T8611] block nbd11: shutting down sockets [ 173.325339][ T5839] block nbd11: Receive control failed (result -107) [ 173.419352][ T8619] nbd11: detected capacity change from 0 to 256 [ 173.445209][ T8624] netlink: 'syz.3.710': attribute type 1 has an invalid length. [ 173.470014][ T8624] netlink: 'syz.3.710': attribute type 1 has an invalid length. [ 173.486873][ T7723] block nbd11: Dead connection, failed to find a fallback [ 173.516617][ T8627] syzkaller1: entered promiscuous mode [ 173.530504][ T8627] syzkaller1: entered allmulticast mode [ 173.623189][ T8632] sctp: [Deprecated]: syz.4.713 (pid 8632) Use of int in max_burst socket option deprecated. [ 173.623189][ T8632] Use struct sctp_assoc_value instead [ 173.779041][ C1] net_ratelimit: 4 callbacks suppressed [ 173.779059][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 173.952265][ T8642] netlink: 'syz.4.717': attribute type 1 has an invalid length. [ 173.965916][ T8642] netlink: 'syz.4.717': attribute type 21 has an invalid length. [ 174.063797][ T8647] nbd: socks must be embedded in a SOCK_ITEM attr [ 174.087697][ T8647] block nbd12: shutting down sockets [ 174.430804][ T5839] block nbd12: Receive control failed (result -107) [ 174.479219][ T8659] nbd12: detected capacity change from 0 to 256 [ 174.516157][ T7407] block nbd12: Dead connection, failed to find a fallback [ 174.587326][ T8668] FAULT_INJECTION: forcing a failure. [ 174.587326][ T8668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.627265][ T8668] CPU: 0 UID: 0 PID: 8668 Comm: syz.4.727 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 174.627293][ T8668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 174.627305][ T8668] Call Trace: [ 174.627313][ T8668] [ 174.627322][ T8668] dump_stack_lvl+0x189/0x250 [ 174.627354][ T8668] ? __lock_acquire+0xaac/0xd20 [ 174.627399][ T8668] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.627428][ T8668] ? __pfx__printk+0x10/0x10 [ 174.627448][ T8668] ? __might_fault+0xb0/0x130 [ 174.627485][ T8668] should_fail_ex+0x414/0x560 [ 174.627523][ T8668] _copy_from_user+0x2d/0xb0 [ 174.627551][ T8668] ___sys_sendmsg+0x158/0x2a0 [ 174.627579][ T8668] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.627645][ T8668] ? __fget_files+0x2a/0x420 [ 174.627669][ T8668] ? __fget_files+0x3a0/0x420 [ 174.627706][ T8668] __x64_sys_sendmsg+0x19b/0x260 [ 174.627735][ T8668] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 174.627780][ T8668] ? do_syscall_64+0xba/0x210 [ 174.627813][ T8668] do_syscall_64+0xf6/0x210 [ 174.627842][ T8668] ? clear_bhb_loop+0x45/0xa0 [ 174.627866][ T8668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.627884][ T8668] RIP: 0033:0x7f0cddd8e969 [ 174.627902][ T8668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.627917][ T8668] RSP: 002b:00007f0cdecb0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.627938][ T8668] RAX: ffffffffffffffda RBX: 00007f0cddfb5fa0 RCX: 00007f0cddd8e969 [ 174.627951][ T8668] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 174.627962][ T8668] RBP: 00007f0cdecb0090 R08: 0000000000000000 R09: 0000000000000000 [ 174.627973][ T8668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.627983][ T8668] R13: 0000000000000000 R14: 00007f0cddfb5fa0 R15: 00007ffe5a4337b8 [ 174.628015][ T8668] [ 174.819317][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 174.846087][ T8661] bridge: RTM_NEWNEIGH with invalid ether address [ 174.951620][ T8671] ipt_ECN: cannot use operation on non-tcp rule [ 175.016115][ T8673] __nla_validate_parse: 32 callbacks suppressed [ 175.016136][ T8673] netlink: 104 bytes leftover after parsing attributes in process `syz.4.730'. [ 175.105066][ T8677] netlink: 104 bytes leftover after parsing attributes in process `syz.3.729'. [ 175.354591][ T8688] nbd: socks must be embedded in a SOCK_ITEM attr [ 175.363362][ T8688] block nbd13: shutting down sockets [ 175.381212][ T8690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.734'. [ 175.591472][ T8698] netlink: 104 bytes leftover after parsing attributes in process `syz.0.738'. [ 175.627283][ T8699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.737'. [ 175.646902][ T8699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.737'. [ 175.673396][ T8699] netlink: 32 bytes leftover after parsing attributes in process `syz.1.737'. [ 175.721647][ T5839] block nbd13: Receive control failed (result -107) [ 175.760690][ T8699] nbd13: detected capacity change from 0 to 256 [ 175.783650][ T6886] block nbd13: Dead connection, failed to find a fallback [ 175.792326][ T81] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 175.859037][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 175.883832][ T8706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.740'. [ 176.006895][ T8709] FAULT_INJECTION: forcing a failure. [ 176.006895][ T8709] name failslab, interval 1, probability 0, space 0, times 0 [ 176.029725][ T8709] CPU: 1 UID: 0 PID: 8709 Comm: syz.4.741 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 176.029754][ T8709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 176.029767][ T8709] Call Trace: [ 176.029776][ T8709] [ 176.029784][ T8709] dump_stack_lvl+0x189/0x250 [ 176.029822][ T8709] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.029851][ T8709] ? __pfx__printk+0x10/0x10 [ 176.029877][ T8709] ? __pfx___might_resched+0x10/0x10 [ 176.029901][ T8709] should_fail_ex+0x414/0x560 [ 176.029939][ T8709] should_failslab+0xa8/0x100 [ 176.029967][ T8709] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 176.029993][ T8709] ? __alloc_skb+0x112/0x2d0 [ 176.030022][ T8709] __alloc_skb+0x112/0x2d0 [ 176.030048][ T8709] netlink_sendmsg+0x5c6/0xb30 [ 176.030083][ T8709] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.030108][ T8709] ? aa_sock_msg_perm+0x94/0x160 [ 176.030132][ T8709] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 176.030166][ T8709] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.030188][ T8709] __sock_sendmsg+0x219/0x270 [ 176.030232][ T8709] ____sys_sendmsg+0x505/0x830 [ 176.030263][ T8709] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.030298][ T8709] ? import_iovec+0x74/0xa0 [ 176.030327][ T8709] ___sys_sendmsg+0x21f/0x2a0 [ 176.030354][ T8709] ? __pfx____sys_sendmsg+0x10/0x10 [ 176.030413][ T8709] ? __fget_files+0x2a/0x420 [ 176.030433][ T8709] ? __fget_files+0x3a0/0x420 [ 176.030461][ T8709] __x64_sys_sendmsg+0x19b/0x260 [ 176.030485][ T8709] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 176.030528][ T8709] ? do_syscall_64+0xba/0x210 [ 176.030557][ T8709] do_syscall_64+0xf6/0x210 [ 176.030581][ T8709] ? clear_bhb_loop+0x45/0xa0 [ 176.030600][ T8709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.030615][ T8709] RIP: 0033:0x7f0cddd8e969 [ 176.030629][ T8709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.030643][ T8709] RSP: 002b:00007f0cdecb0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.030660][ T8709] RAX: ffffffffffffffda RBX: 00007f0cddfb5fa0 RCX: 00007f0cddd8e969 [ 176.030675][ T8709] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 176.030685][ T8709] RBP: 00007f0cdecb0090 R08: 0000000000000000 R09: 0000000000000000 [ 176.030694][ T8709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.030703][ T8709] R13: 0000000000000000 R14: 00007f0cddfb5fa0 R15: 00007ffe5a4337b8 [ 176.030727][ T8709] [ 176.424864][ T81] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 176.453504][ T8717] netlink: 148 bytes leftover after parsing attributes in process `syz.4.743'. [ 176.899150][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 177.064334][ T1090] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 177.064965][ T1146] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 177.072714][ T1090] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 177.309551][ T8714] netlink: 'syz.4.743': attribute type 5 has an invalid length. [ 177.569763][ T8727] nbd: socks must be embedded in a SOCK_ITEM attr [ 177.579650][ T8727] block nbd14: shutting down sockets [ 177.601971][ T8733] netlink: 104 bytes leftover after parsing attributes in process `syz.2.745'. [ 177.650163][ T8729] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 177.671103][ T8735] wireguard0: entered promiscuous mode [ 177.676709][ T8735] wireguard0: entered allmulticast mode [ 177.872065][ T5839] block nbd14: Receive control failed (result -107) [ 177.931175][ T8746] nbd14: detected capacity change from 0 to 256 [ 178.818274][ T8786] nbd: must specify an index to disconnect [ 178.924724][ T8788] netlink: 'syz.2.767': attribute type 10 has an invalid length. [ 178.979590][ C1] net_ratelimit: 3 callbacks suppressed [ 178.979608][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 179.032132][ T8788] team0: Device ipvlan1 failed to register rx_handler [ 179.276008][ T8798] C: renamed from team_slave_0 (while UP) [ 179.291209][ T8802] FAULT_INJECTION: forcing a failure. [ 179.291209][ T8802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.292487][ T5839] block nbd15: Receive control failed (result -107) [ 179.311555][ T8798] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 179.336474][ T8802] CPU: 0 UID: 0 PID: 8802 Comm: syz.4.773 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 179.336504][ T8802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 179.336517][ T8802] Call Trace: [ 179.336525][ T8802] [ 179.336534][ T8802] dump_stack_lvl+0x189/0x250 [ 179.336566][ T8802] ? __lock_acquire+0xaac/0xd20 [ 179.336596][ T8802] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.336625][ T8802] ? __pfx__printk+0x10/0x10 [ 179.336645][ T8802] ? __might_fault+0xb0/0x130 [ 179.336682][ T8802] should_fail_ex+0x414/0x560 [ 179.336719][ T8802] _copy_from_iter+0x1db/0x15a0 [ 179.336750][ T8802] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 179.336772][ T8802] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 179.336798][ T8802] ? __pfx__copy_from_iter+0x10/0x10 [ 179.336823][ T8802] ? __build_skb_around+0x257/0x3e0 [ 179.336854][ T8802] ? netlink_sendmsg+0x642/0xb30 [ 179.336875][ T8802] ? skb_put+0x11b/0x210 [ 179.336903][ T8802] netlink_sendmsg+0x6b2/0xb30 [ 179.336935][ T8802] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.336962][ T8802] ? aa_sock_msg_perm+0x94/0x160 [ 179.336984][ T8802] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 179.337007][ T8802] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.337031][ T8802] __sock_sendmsg+0x219/0x270 [ 179.337065][ T8802] ____sys_sendmsg+0x505/0x830 [ 179.337097][ T8802] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.337133][ T8802] ? import_iovec+0x74/0xa0 [ 179.337168][ T8802] ___sys_sendmsg+0x21f/0x2a0 [ 179.337197][ T8802] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.337262][ T8802] ? __fget_files+0x2a/0x420 [ 179.337288][ T8802] ? __fget_files+0x3a0/0x420 [ 179.337325][ T8802] __x64_sys_sendmsg+0x19b/0x260 [ 179.337353][ T8802] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 179.337398][ T8802] ? do_syscall_64+0xba/0x210 [ 179.337432][ T8802] do_syscall_64+0xf6/0x210 [ 179.337463][ T8802] ? clear_bhb_loop+0x45/0xa0 [ 179.337487][ T8802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.337507][ T8802] RIP: 0033:0x7f0cddd8e969 [ 179.337524][ T8802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.337541][ T8802] RSP: 002b:00007f0cdecb0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.337562][ T8802] RAX: ffffffffffffffda RBX: 00007f0cddfb5fa0 RCX: 00007f0cddd8e969 [ 179.337577][ T8802] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 179.337589][ T8802] RBP: 00007f0cdecb0090 R08: 0000000000000000 R09: 0000000000000000 [ 179.337601][ T8802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.337613][ T8802] R13: 0000000000000000 R14: 00007f0cddfb5fa0 R15: 00007ffe5a4337b8 [ 179.337644][ T8802] [ 179.339173][ T8800] nbd15: detected capacity change from 0 to 256 [ 180.019122][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 180.140803][ T8828] __nla_validate_parse: 20 callbacks suppressed [ 180.140823][ T8828] netlink: 24 bytes leftover after parsing attributes in process `syz.0.783'. [ 180.200050][ T8825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.782'. [ 180.275735][ T8825] tc_dump_action: action bad kind [ 180.427269][ T8815] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 180.443326][ T8815] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 180.640431][ T8838] netlink: 104 bytes leftover after parsing attributes in process `syz.4.785'. [ 180.761067][ T8841] netlink: 32 bytes leftover after parsing attributes in process `syz.3.786'. [ 180.859349][ T8845] nbd: must specify a device to reconfigure [ 181.059113][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 181.069439][ T8852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.788'. [ 181.200560][ T8852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.788'. [ 181.247342][ T8852] netlink: 32 bytes leftover after parsing attributes in process `syz.2.788'. [ 181.313104][ T5839] block nbd16: Receive control failed (result -107) [ 181.337535][ T8861] netlink: 'syz.1.789': attribute type 1 has an invalid length. [ 181.350028][ T8852] nbd16: detected capacity change from 0 to 256 [ 181.382054][ T8860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.791'. [ 181.431602][ T8861] bond4: entered promiscuous mode [ 181.437222][ T8861] 8021q: adding VLAN 0 to HW filter on device bond4 [ 181.471951][ T8860] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 181.539598][ T13] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 181.571513][ T8864] 8021q: adding VLAN 0 to HW filter on device bond5 [ 181.597316][ T8864] bond4: (slave bond5): making interface the new active one [ 181.629082][ T8864] bond5: entered promiscuous mode [ 181.665959][ T8864] bond4: (slave bond5): Enslaving as an active interface with an up link [ 182.099192][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 182.155895][ T8896] dummy0: entered promiscuous mode [ 182.169639][ T8896] macsec1: entered promiscuous mode [ 182.181018][ T8896] macsec1: entered allmulticast mode [ 182.182672][ T36] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 182.197722][ T8896] dummy0: entered allmulticast mode [ 182.229486][ T8896] dummy0: left allmulticast mode [ 182.242447][ T8896] dummy0: left promiscuous mode [ 182.273400][ T8903] netlink: 24 bytes leftover after parsing attributes in process `syz.1.800'. [ 182.312562][ T8900] vlan2: entered promiscuous mode [ 182.317786][ T8900] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 182.329899][ T8900] vlan2: entered allmulticast mode [ 182.335072][ T8900] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 182.596368][ T8909] netlink: 32 bytes leftover after parsing attributes in process `syz.2.801'. [ 182.821362][ T12] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 182.825053][ T13] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 182.975699][ T5839] block nbd17: Receive control failed (result -107) [ 183.029703][ T8920] nbd17: detected capacity change from 0 to 256 [ 183.585327][ T8940] sctp: [Deprecated]: syz.4.809 (pid 8940) Use of int in max_burst socket option deprecated. [ 183.585327][ T8940] Use struct sctp_assoc_value instead [ 183.681921][ T8940] af_packet: tpacket_rcv: packet too big, clamped from 4032 to 3952. macoff=96 [ 184.101560][ T53] net_ratelimit: 4 callbacks suppressed [ 184.101580][ T53] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 184.179191][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 184.557896][ T8977] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 184.899232][ T8988] netlink: 'syz.3.820': attribute type 10 has an invalid length. [ 185.032698][ T8993] FAULT_INJECTION: forcing a failure. [ 185.032698][ T8993] name failslab, interval 1, probability 0, space 0, times 0 [ 185.050710][ T8993] CPU: 0 UID: 0 PID: 8993 Comm: syz.0.823 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 185.050743][ T8993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 185.050755][ T8993] Call Trace: [ 185.050763][ T8993] [ 185.050771][ T8993] dump_stack_lvl+0x189/0x250 [ 185.050807][ T8993] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.050835][ T8993] ? __pfx__printk+0x10/0x10 [ 185.050861][ T8993] ? __pfx___might_resched+0x10/0x10 [ 185.050884][ T8993] should_fail_ex+0x414/0x560 [ 185.050920][ T8993] should_failslab+0xa8/0x100 [ 185.050946][ T8993] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 185.050973][ T8993] ? __alloc_skb+0x112/0x2d0 [ 185.051000][ T8993] __alloc_skb+0x112/0x2d0 [ 185.051026][ T8993] xfrm_get_policy+0x5af/0xc40 [ 185.051060][ T8993] ? kasan_quarantine_put+0xdd/0x220 [ 185.051081][ T8993] ? __pfx_aa_get_newest_label+0x10/0x10 [ 185.051103][ T8993] ? __pfx_xfrm_get_policy+0x10/0x10 [ 185.051134][ T8993] ? apparmor_capable+0x137/0x1b0 [ 185.051166][ T8993] ? __nla_parse+0x40/0x60 [ 185.051192][ T8993] xfrm_user_rcv_msg+0x7a0/0xab0 [ 185.051221][ T8993] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 185.051285][ T8993] ? __mutex_trylock_common+0x153/0x260 [ 185.051309][ T8993] ? __pfx___mutex_trylock_common+0x10/0x10 [ 185.051350][ T8993] netlink_rcv_skb+0x219/0x490 [ 185.051375][ T8993] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 185.051399][ T8993] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 185.051445][ T8993] ? netlink_deliver_tap+0x2e/0x1b0 [ 185.051467][ T8993] ? netlink_deliver_tap+0x2e/0x1b0 [ 185.051492][ T8993] xfrm_netlink_rcv+0x79/0x90 [ 185.051514][ T8993] netlink_unicast+0x758/0x8d0 [ 185.051545][ T8993] netlink_sendmsg+0x805/0xb30 [ 185.051579][ T8993] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.051606][ T8993] ? aa_sock_msg_perm+0x94/0x160 [ 185.051629][ T8993] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 185.051651][ T8993] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.051675][ T8993] __sock_sendmsg+0x219/0x270 [ 185.051710][ T8993] ____sys_sendmsg+0x505/0x830 [ 185.051741][ T8993] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.051776][ T8993] ? import_iovec+0x74/0xa0 [ 185.051804][ T8993] ___sys_sendmsg+0x21f/0x2a0 [ 185.051831][ T8993] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.051893][ T8993] ? __fget_files+0x2a/0x420 [ 185.051918][ T8993] ? __fget_files+0x3a0/0x420 [ 185.051956][ T8993] __x64_sys_sendmsg+0x19b/0x260 [ 185.051986][ T8993] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 185.052031][ T8993] ? do_syscall_64+0xba/0x210 [ 185.052067][ T8993] do_syscall_64+0xf6/0x210 [ 185.052098][ T8993] ? clear_bhb_loop+0x45/0xa0 [ 185.052123][ T8993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.052142][ T8993] RIP: 0033:0x7f6bed18e969 [ 185.052160][ T8993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.052177][ T8993] RSP: 002b:00007f6bedff5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.052198][ T8993] RAX: ffffffffffffffda RBX: 00007f6bed3b5fa0 RCX: 00007f6bed18e969 [ 185.052213][ T8993] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 185.052225][ T8993] RBP: 00007f6bedff5090 R08: 0000000000000000 R09: 0000000000000000 [ 185.052238][ T8993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.052249][ T8993] R13: 0000000000000000 R14: 00007f6bed3b5fa0 R15: 00007ffe75c07c68 [ 185.052282][ T8993] [ 185.219145][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 185.605132][ T9000] __nla_validate_parse: 8 callbacks suppressed [ 185.605151][ T9000] netlink: 24 bytes leftover after parsing attributes in process `syz.1.827'. [ 185.905826][ T9013] netlink: 300 bytes leftover after parsing attributes in process `syz.1.832'. [ 185.954679][ T9013] netlink: 28 bytes leftover after parsing attributes in process `syz.1.832'. [ 186.003299][ T9019] netlink: 24 bytes leftover after parsing attributes in process `syz.3.835'. [ 186.136013][ T9030] netlink: 104 bytes leftover after parsing attributes in process `syz.4.837'. [ 186.145517][ T9030] FAULT_INJECTION: forcing a failure. [ 186.145517][ T9030] name failslab, interval 1, probability 0, space 0, times 0 [ 186.160106][ T9030] CPU: 1 UID: 0 PID: 9030 Comm: syz.4.837 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 186.160134][ T9030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 186.160147][ T9030] Call Trace: [ 186.160155][ T9030] [ 186.160163][ T9030] dump_stack_lvl+0x189/0x250 [ 186.160200][ T9030] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.160229][ T9030] ? __pfx__printk+0x10/0x10 [ 186.160250][ T9030] ? __kasan_kmalloc+0x93/0xb0 [ 186.160274][ T9030] ? __pfx_copy_to_user_tmpl+0x10/0x10 [ 186.160294][ T9030] ? xfrm_get_policy+0x5af/0xc40 [ 186.160314][ T9030] ? netlink_rcv_skb+0x219/0x490 [ 186.160333][ T9030] ? xfrm_netlink_rcv+0x79/0x90 [ 186.160356][ T9030] ? netlink_unicast+0x758/0x8d0 [ 186.160373][ T9030] ? netlink_sendmsg+0x805/0xb30 [ 186.160399][ T9030] should_fail_ex+0x414/0x560 [ 186.160437][ T9030] should_failslab+0xa8/0x100 [ 186.160472][ T9030] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 186.160498][ T9030] ? __alloc_skb+0x112/0x2d0 [ 186.160526][ T9030] __alloc_skb+0x112/0x2d0 [ 186.160553][ T9030] xfrm_alloc_compat+0x1a6/0x16f0 [ 186.160585][ T9030] ? xfrm_get_translator+0x1b/0x240 [ 186.160614][ T9030] dump_one_policy+0x89a/0xd30 [ 186.160647][ T9030] ? __pfx_dump_one_policy+0x10/0x10 [ 186.160672][ T9030] ? __build_skb_around+0x257/0x3e0 [ 186.160700][ T9030] ? __alloc_skb+0x1bc/0x2d0 [ 186.160726][ T9030] xfrm_get_policy+0x5f7/0xc40 [ 186.160760][ T9030] ? kasan_quarantine_put+0xdd/0x220 [ 186.160786][ T9030] ? __pfx_xfrm_get_policy+0x10/0x10 [ 186.160817][ T9030] ? apparmor_capable+0x137/0x1b0 [ 186.160850][ T9030] ? __nla_parse+0x40/0x60 [ 186.160878][ T9030] xfrm_user_rcv_msg+0x7a0/0xab0 [ 186.160908][ T9030] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 186.160973][ T9030] ? __mutex_trylock_common+0x153/0x260 [ 186.160998][ T9030] ? __pfx___mutex_trylock_common+0x10/0x10 [ 186.161031][ T9030] netlink_rcv_skb+0x219/0x490 [ 186.161055][ T9030] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 186.161078][ T9030] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 186.161125][ T9030] ? netlink_deliver_tap+0x2e/0x1b0 [ 186.161147][ T9030] ? netlink_deliver_tap+0x2e/0x1b0 [ 186.161171][ T9030] xfrm_netlink_rcv+0x79/0x90 [ 186.161190][ T9030] netlink_unicast+0x758/0x8d0 [ 186.161217][ T9030] netlink_sendmsg+0x805/0xb30 [ 186.161244][ T9030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.161265][ T9030] ? aa_sock_msg_perm+0x94/0x160 [ 186.161283][ T9030] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 186.161301][ T9030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.161320][ T9030] __sock_sendmsg+0x219/0x270 [ 186.161348][ T9030] ____sys_sendmsg+0x505/0x830 [ 186.161374][ T9030] ? __pfx_____sys_sendmsg+0x10/0x10 [ 186.161402][ T9030] ? import_iovec+0x74/0xa0 [ 186.161427][ T9030] ___sys_sendmsg+0x21f/0x2a0 [ 186.161450][ T9030] ? __pfx____sys_sendmsg+0x10/0x10 [ 186.161508][ T9030] ? __fget_files+0x2a/0x420 [ 186.161529][ T9030] ? __fget_files+0x3a0/0x420 [ 186.161558][ T9030] __x64_sys_sendmsg+0x19b/0x260 [ 186.161581][ T9030] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 186.161617][ T9030] ? do_syscall_64+0xba/0x210 [ 186.161646][ T9030] do_syscall_64+0xf6/0x210 [ 186.161671][ T9030] ? clear_bhb_loop+0x45/0xa0 [ 186.161691][ T9030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.161705][ T9030] RIP: 0033:0x7f0cddd8e969 [ 186.161720][ T9030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.161735][ T9030] RSP: 002b:00007f0cdecb0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.161752][ T9030] RAX: ffffffffffffffda RBX: 00007f0cddfb5fa0 RCX: 00007f0cddd8e969 [ 186.161764][ T9030] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 186.161774][ T9030] RBP: 00007f0cdecb0090 R08: 0000000000000000 R09: 0000000000000000 [ 186.161784][ T9030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.161793][ T9030] R13: 0000000000000000 R14: 00007f0cddfb5fa0 R15: 00007ffe5a4337b8 [ 186.161818][ T9030] [ 186.544899][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 186.659671][ T53] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 186.830618][ T9042] netlink: 24 bytes leftover after parsing attributes in process `syz.2.843'. [ 187.089200][ T9049] netlink: 16 bytes leftover after parsing attributes in process `syz.4.844'. [ 187.110787][ T9049] netlink: 20 bytes leftover after parsing attributes in process `syz.4.844'. [ 187.123847][ T9055] netlink: 16 bytes leftover after parsing attributes in process `syz.3.845'. [ 187.173634][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 187.182370][ T9055] netlink: 20 bytes leftover after parsing attributes in process `syz.3.845'. [ 187.619463][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 187.868004][ T13] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 187.944556][ T12] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 189.186681][ T9123] FAULT_INJECTION: forcing a failure. [ 189.186681][ T9123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.232162][ T9123] CPU: 0 UID: 0 PID: 9123 Comm: syz.1.866 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 189.232192][ T9123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 189.232205][ T9123] Call Trace: [ 189.232212][ T9123] [ 189.232221][ T9123] dump_stack_lvl+0x189/0x250 [ 189.232258][ T9123] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.232287][ T9123] ? __pfx__printk+0x10/0x10 [ 189.232320][ T9123] should_fail_ex+0x414/0x560 [ 189.232355][ T9123] _copy_to_user+0x31/0xb0 [ 189.232384][ T9123] simple_read_from_buffer+0xe1/0x170 [ 189.232413][ T9123] proc_fail_nth_read+0x1df/0x250 [ 189.232458][ T9123] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 189.232494][ T9123] ? rw_verify_area+0x258/0x650 [ 189.232515][ T9123] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 189.232543][ T9123] vfs_read+0x1fd/0x980 [ 189.232576][ T9123] ? __pfx___mutex_lock+0x10/0x10 [ 189.232631][ T9123] ? __pfx_vfs_read+0x10/0x10 [ 189.232654][ T9123] ? __fget_files+0x2a/0x420 [ 189.232685][ T9123] ? __fget_files+0x3a0/0x420 [ 189.232714][ T9123] ? __fget_files+0x2a/0x420 [ 189.232753][ T9123] ksys_read+0x145/0x250 [ 189.232778][ T9123] ? __pfx_ksys_read+0x10/0x10 [ 189.232805][ T9123] ? do_syscall_64+0xba/0x210 [ 189.232844][ T9123] do_syscall_64+0xf6/0x210 [ 189.232875][ T9123] ? clear_bhb_loop+0x45/0xa0 [ 189.232922][ T9123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.232947][ T9123] RIP: 0033:0x7f3910d8d37c [ 189.232965][ T9123] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 189.232982][ T9123] RSP: 002b:00007f3911cc5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 189.233008][ T9123] RAX: ffffffffffffffda RBX: 00007f3910fb5fa0 RCX: 00007f3910d8d37c [ 189.233023][ T9123] RDX: 000000000000000f RSI: 00007f3911cc50a0 RDI: 0000000000000004 [ 189.233035][ T9123] RBP: 00007f3911cc5090 R08: 0000000000000000 R09: 0000000000000000 [ 189.233047][ T9123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 189.233058][ T9123] R13: 0000000000000000 R14: 00007f3910fb5fa0 R15: 00007ffc0583f738 [ 189.233096][ T9123] [ 189.699142][ C1] net_ratelimit: 5 callbacks suppressed [ 189.699164][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 189.870657][ T1146] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 189.922106][ T9139] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 189.964355][ T9139] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 190.645276][ T9160] netlink: 'syz.0.877': attribute type 21 has an invalid length. [ 190.701184][ T9162] __nla_validate_parse: 8 callbacks suppressed [ 190.701205][ T9162] netlink: 104 bytes leftover after parsing attributes in process `syz.1.876'. [ 190.739171][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 190.832592][ T9165] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 190.928849][ T9160] netlink: 132 bytes leftover after parsing attributes in process `syz.0.877'. [ 191.227984][ T9180] netlink: 16 bytes leftover after parsing attributes in process `syz.2.880'. [ 191.253706][ T9180] netlink: 20 bytes leftover after parsing attributes in process `syz.2.880'. [ 191.342426][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 191.484450][ T9188] can: request_module (can-proto-5) failed. [ 191.590689][ T9195] nbd: socks must be embedded in a SOCK_ITEM attr [ 191.605187][ T9195] block nbd18: shutting down sockets [ 191.646673][ T9200] veth0_to_bond: entered promiscuous mode [ 191.699611][ T12] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 191.779719][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 191.948079][ T9216] netlink: 24 bytes leftover after parsing attributes in process `syz.3.892'. [ 192.072579][ T9222] netlink: 20 bytes leftover after parsing attributes in process `syz.1.895'. [ 192.851695][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 193.062530][ T5904] hid-generic 0005:07C0:0A0F.0001: item fetching failed at offset 0/3 [ 193.072222][ T12] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 193.082771][ T5904] hid-generic 0005:07C0:0A0F.0001: probe with driver hid-generic failed with error -22 [ 193.167103][ T9256] nbd: socks must be embedded in a SOCK_ITEM attr [ 193.199696][ T9256] block nbd18: shutting down sockets [ 193.416210][ T9263] netlink: 104 bytes leftover after parsing attributes in process `syz.0.905'. [ 193.572923][ T9264] netlink: 16 bytes leftover after parsing attributes in process `syz.4.904'. [ 193.612930][ T9264] netlink: 20 bytes leftover after parsing attributes in process `syz.4.904'. [ 193.674395][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 193.704087][ T12] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 193.976511][ T9286] netlink: 104 bytes leftover after parsing attributes in process `syz.0.910'. [ 194.346189][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.354239][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.900028][ C1] net_ratelimit: 4 callbacks suppressed [ 194.900047][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 195.257418][ T9345] nbd: socks must be embedded in a SOCK_ITEM attr [ 195.275666][ T9345] block nbd18: shutting down sockets [ 195.620537][ T1146] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 195.831654][ T9361] __nla_validate_parse: 6 callbacks suppressed [ 195.831676][ T9361] netlink: 16 bytes leftover after parsing attributes in process `syz.0.922'. [ 195.900336][ T9361] netlink: 20 bytes leftover after parsing attributes in process `syz.0.922'. [ 195.939125][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 195.964799][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 195.969547][ T9364] netlink: 40 bytes leftover after parsing attributes in process `syz.1.923'. [ 196.247736][ T9370] netlink: 5 bytes leftover after parsing attributes in process `syz.1.924'. [ 196.450676][ T9377] netlink: 24 bytes leftover after parsing attributes in process `syz.0.927'. [ 196.979148][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 197.073134][ T9386] xt_CT: No such helper "pptp" [ 197.165262][ T9391] netlink: 16 bytes leftover after parsing attributes in process `syz.1.931'. [ 197.331628][ T9394] nbd: socks must be embedded in a SOCK_ITEM attr [ 197.341458][ T9394] block nbd18: shutting down sockets [ 197.539833][ T9314] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 197.705047][ T9404] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 197.742634][ T9404] sctp: [Deprecated]: syz.3.935 (pid 9404) Use of struct sctp_assoc_value in delayed_ack socket option. [ 197.742634][ T9404] Use struct sctp_sack_info instead [ 197.895210][ T9412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.938'. [ 197.898880][ T9408] netlink: 16 bytes leftover after parsing attributes in process `syz.1.937'. [ 197.917550][ T9408] netlink: 20 bytes leftover after parsing attributes in process `syz.1.937'. [ 197.926325][ T9412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.938'. [ 197.991625][ T5839] block nbd18: Receive control failed (result -107) [ 198.019884][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 198.069760][ T9412] nbd18: detected capacity change from 0 to 256 [ 198.131185][ T9331] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 198.167860][ T9410] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.175689][ T9410] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.357117][ T9410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.405984][ T9410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.082870][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 199.241025][ T9410] ip6tnl1: left promiscuous mode [ 199.254138][ T9410] ip6tnl1: left allmulticast mode [ 199.317960][ T9410] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.330181][ T9410] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.339364][ T9410] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.348383][ T9410] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.358665][ T9410] geneve2: left allmulticast mode [ 199.387544][ T9410] vlan0: left allmulticast mode [ 199.398111][ T9410] veth0_vlan: left allmulticast mode [ 199.410415][ T9410] vlan0: left promiscuous mode [ 199.421898][ T9410] macvtap1: left promiscuous mode [ 199.443653][ T9410] macvtap1: left allmulticast mode [ 199.972730][ T9233] net_ratelimit: 3 callbacks suppressed [ 199.972751][ T9233] Set syz1 is full, maxelem 65536 reached [ 200.099158][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 200.290029][ T9463] nbd: socks must be embedded in a SOCK_ITEM attr [ 200.299490][ T9463] block nbd19: shutting down sockets [ 200.492374][ T9477] x_tables: duplicate underflow at hook 1 [ 200.587987][ T9482] pim6reg: entered allmulticast mode [ 200.647540][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 200.748405][ T9496] netlink: 'syz.2.958': attribute type 3 has an invalid length. [ 200.785721][ T9496] netlink: 'syz.2.958': attribute type 1 has an invalid length. [ 201.047430][ T9503] veth17: entered promiscuous mode [ 201.057039][ T9507] netlink: 'syz.2.963': attribute type 3 has an invalid length. [ 201.080194][ T9506] __nla_validate_parse: 11 callbacks suppressed [ 201.080214][ T9506] netlink: 16 bytes leftover after parsing attributes in process `syz.0.962'. [ 201.138268][ T9506] netlink: 20 bytes leftover after parsing attributes in process `syz.0.962'. [ 201.147398][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 201.204587][ T9511] netlink: 104 bytes leftover after parsing attributes in process `syz.2.965'. [ 201.366613][ T9512] netlink: 104 bytes leftover after parsing attributes in process `syz.1.964'. [ 201.385067][ T9331] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 201.441829][ T9518] netlink: 9 bytes leftover after parsing attributes in process `syz.0.968'. [ 201.458927][ T9518] gretap0: entered promiscuous mode [ 201.670061][ T9524] nbd: socks must be embedded in a SOCK_ITEM attr [ 201.677205][ T9524] block nbd19: shutting down sockets [ 201.970355][ T9530] netlink: 16 bytes leftover after parsing attributes in process `syz.4.971'. [ 202.179116][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 202.250719][ T9543] netlink: 'syz.0.974': attribute type 2 has an invalid length. [ 202.264207][ T9544] netlink: 16 bytes leftover after parsing attributes in process `syz.4.976'. [ 202.292901][ T9544] netlink: 20 bytes leftover after parsing attributes in process `syz.4.976'. [ 202.355688][ T9543] netlink: 104 bytes leftover after parsing attributes in process `syz.0.974'. [ 202.375736][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 202.384198][ T9543] netlink: 131 bytes leftover after parsing attributes in process `syz.0.974'. [ 202.443604][ T9542] bridge0: entered promiscuous mode [ 202.456394][ T9542] bridge0: left promiscuous mode [ 202.572628][ T9550] vxcan1: entered allmulticast mode [ 203.219069][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 203.249643][ T9571] nbd: socks must be embedded in a SOCK_ITEM attr [ 203.258014][ T9571] block nbd19: shutting down sockets [ 203.432911][ T9575] : entered promiscuous mode [ 203.588619][ T9580] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 203.814288][ T5839] block nbd19: Receive control failed (result -107) [ 203.850633][ T9587] nbd19: detected capacity change from 0 to 256 [ 203.942390][ T12] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 204.192993][ T9601] veth0_to_bond: entered allmulticast mode [ 204.259044][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 204.489977][ T9611] nbd: socks must be embedded in a SOCK_ITEM attr [ 204.507023][ T9611] block nbd20: shutting down sockets [ 204.850090][ T9625] netlink: 'syz.1.1000': attribute type 21 has an invalid length. [ 204.888148][ T9628] IPv6: Can't replace route, no match found [ 205.230871][ T9314] net_ratelimit: 1 callbacks suppressed [ 205.230892][ T9314] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 205.254607][ T12] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 205.269826][ T6854] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 205.299028][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 205.307726][ T6854] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 205.372484][ T5839] block nbd20: Receive control failed (result -107) [ 205.402306][ T9640] nbd20: detected capacity change from 0 to 256 [ 205.820840][ T30] audit: type=1800 audit(1746463558.497:4): pid=9624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.998" name="cgroup.controllers" dev="tmpfs" ino=1162 res=0 errno=0 [ 206.103750][ T9667] __nla_validate_parse: 22 callbacks suppressed [ 206.103770][ T9667] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1011'. [ 206.136875][ T9667] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1011'. [ 206.242152][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 206.314348][ T9672] netlink: 'syz.0.1014': attribute type 4 has an invalid length. [ 206.339152][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 206.495106][ T9681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1016'. [ 206.586763][ T9681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1016'. [ 206.599941][ T9681] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1016'. [ 206.685225][ T5839] block nbd21: Receive control failed (result -107) [ 206.729669][ T9681] nbd21: detected capacity change from 0 to 256 [ 206.817012][ T9696] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1021'. [ 206.832997][ T9693] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1019'. [ 207.075619][ T9705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1024'. [ 207.356659][ T9713] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1026'. [ 207.379035][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 207.414393][ T9713] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1026'. [ 207.696515][ T9724] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 208.027824][ T9746] netlink: 'syz.3.1036': attribute type 11 has an invalid length. [ 208.316422][ T9759] trusted_key: syz.2.1041 sent an empty control message without MSG_MORE. [ 208.419057][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 208.700053][ T9770] nbd: socks must be embedded in a SOCK_ITEM attr [ 208.715018][ T9770] block nbd22: shutting down sockets [ 208.754423][ T9779] --map-set only usable from mangle table [ 209.459025][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 209.708404][ T9809] netlink: 'syz.2.1055': attribute type 2 has an invalid length. [ 209.719348][ T5904] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 210.499035][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 210.731476][ T9838] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 210.983611][ T6854] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 210.991619][ T12] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 210.999670][ T9314] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 211.224549][ T9856] __nla_validate_parse: 17 callbacks suppressed [ 211.224569][ T9856] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1070'. [ 211.451052][ T9862] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1073'. [ 211.470684][ T9859] sctp: [Deprecated]: syz.1.1072 (pid 9859) Use of struct sctp_assoc_value in delayed_ack socket option. [ 211.470684][ T9859] Use struct sctp_sack_info instead [ 211.539063][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 211.634497][ T9872] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1072'. [ 211.690109][ T9873] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 211.782226][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 211.782794][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 211.788822][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 211.794478][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 212.369166][ T9908] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1083'. [ 212.480805][ T9910] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1084'. [ 212.579032][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 212.831290][ T9924] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1089'. [ 213.044950][ T9931] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1092'. [ 213.077197][ T9926] pim6reg1: entered allmulticast mode [ 213.099260][ T9931] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1092'. [ 213.128302][ T9933] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1093'. [ 213.158275][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 213.214767][ T9933] bond2: entered promiscuous mode [ 213.223807][ T9933] 8021q: adding VLAN 0 to HW filter on device bond2 [ 213.304740][ T9943] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 213.418120][ T9933] bond2 (unregistering): Released all slaves [ 213.619139][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 213.716762][ T9954] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1097'. [ 213.893905][ T9959] Bluetooth: MGMT ver 1.23 [ 214.074497][ T9968] veth1_to_team: entered promiscuous mode [ 214.103330][ T9968] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 214.465276][ T9984] vlan2: entered promiscuous mode [ 214.474724][ T9984] bond0: entered promiscuous mode [ 214.482314][ T9984] bond_slave_0: entered promiscuous mode [ 214.488639][ T9984] bond_slave_1: entered promiscuous mode [ 214.947693][T10003] netlink: 'syz.1.1113': attribute type 3 has an invalid length. [ 215.000087][T10004] netlink: 'syz.3.1114': attribute type 1 has an invalid length. [ 215.007955][T10004] netlink: 'syz.3.1114': attribute type 1 has an invalid length. [ 215.365308][T10023] netlink: 'syz.4.1120': attribute type 3 has an invalid length. [ 215.491910][T10016] pim6reg: entered allmulticast mode [ 215.633016][T10012] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.699142][ C1] net_ratelimit: 2 callbacks suppressed [ 215.699161][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 215.726054][T10021] pim6reg: left allmulticast mode [ 215.745340][T10039] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 216.103535][ T12] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 216.118553][ T1090] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 216.144170][T10012] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.205902][T10049] nbd: socks must be embedded in a SOCK_ITEM attr [ 216.317229][T10053] netlink: 'syz.2.1127': attribute type 10 has an invalid length. [ 216.345903][T10051] netlink: 'syz.2.1127': attribute type 10 has an invalid length. [ 216.369699][T10051] __nla_validate_parse: 13 callbacks suppressed [ 216.369717][T10051] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1127'. [ 216.445157][T10012] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.470906][T10053] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 216.513322][T10051] team0: entered promiscuous mode [ 216.526089][T10059] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1129'. [ 216.529037][T10051] C: entered promiscuous mode [ 216.544520][T10051] team_slave_1: entered promiscuous mode [ 216.551897][T10051] bond1: entered promiscuous mode [ 216.556108][T10059] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1129'. [ 216.560363][T10051] team0: entered allmulticast mode [ 216.576917][T10051] C: entered allmulticast mode [ 216.585774][T10051] team_slave_1: entered allmulticast mode [ 216.592221][T10051] bond1: entered allmulticast mode [ 216.598402][T10051] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 216.634058][T10012] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.739193][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 216.742633][ T12] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 216.793857][T10067] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 217.018464][T10012] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.041273][T10076] sctp: [Deprecated]: syz.4.1134 (pid 10076) Use of int in max_burst socket option. [ 217.041273][T10076] Use struct sctp_assoc_value instead [ 217.085028][T10080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1135'. [ 217.090637][T10012] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.333124][T10092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1139'. [ 217.353296][T10012] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.362144][T10092] nbd: socks must be embedded in a SOCK_ITEM attr [ 217.524810][T10012] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.766553][T10118] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1143'. [ 217.779023][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 217.801518][T10120] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1145'. [ 217.812110][T10120] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1145'. [ 217.862422][T10123] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1146'. [ 217.872688][T10123] netlink: 280 bytes leftover after parsing attributes in process `syz.0.1146'. [ 218.819067][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 219.144537][T10171] geneve1: entered promiscuous mode [ 219.859034][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 220.188701][T10215] netlink: 'syz.4.1169': attribute type 27 has an invalid length. [ 220.601698][T10215] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.603961][T10240] Cannot find add_set index 2 as target [ 220.609533][T10215] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.876678][T10215] veth0_to_bond: left allmulticast mode [ 220.899137][ C1] net_ratelimit: 1 callbacks suppressed [ 220.899154][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 220.922814][T10215] batadv_slave_0: left promiscuous mode [ 220.935091][T10215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.144730][T10215] ip6tnl1: left promiscuous mode [ 221.156802][T10215] ip6tnl1: left allmulticast mode [ 221.168805][T10215] bridge2: left promiscuous mode [ 221.183287][T10215] bridge3: left promiscuous mode [ 221.193579][T10215] vti0: left promiscuous mode [ 221.223469][T10215] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.232205][T10215] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.240718][T10215] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.249778][T10215] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.258395][T10215] geneve2: left allmulticast mode [ 221.426470][T10258] __nla_validate_parse: 10 callbacks suppressed [ 221.426494][T10258] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1176'. [ 221.569157][T10258] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1176'. [ 221.798318][T10269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1180'. [ 221.817869][T10274] syzkaller1: entered promiscuous mode [ 221.827399][T10274] syzkaller1: entered allmulticast mode [ 221.863746][ T9317] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 221.939122][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 222.026242][T10280] pim6reg: entered allmulticast mode [ 222.163385][T10287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1183'. [ 222.390846][T10296] 0ȟ: renamed from lo (while UP) [ 222.505566][ T6854] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 222.815477][T10323] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 222.844022][T10323] IPv6: NLM_F_CREATE should be specified when creating new route [ 222.979179][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 223.424456][T10338] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1195'. [ 223.473112][T10338] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1195'. [ 224.019019][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 224.053280][T10358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1201'. [ 224.079378][T10358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1201'. [ 224.088435][T10358] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1201'. [ 224.172842][ T5140] block nbd22: Receive control failed (result -107) [ 224.209329][T10358] nbd22: detected capacity change from 0 to 256 [ 224.226942][T10361] syzkaller1: entered promiscuous mode [ 224.251403][T10361] syzkaller1: entered allmulticast mode [ 224.424790][T10368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1205'. [ 224.563901][T10368] pim6reg1: entered promiscuous mode [ 224.577806][T10368] pim6reg1: entered allmulticast mode [ 224.640267][T10352] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 225.060565][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 225.101469][T10388] FAULT_INJECTION: forcing a failure. [ 225.101469][T10388] name failslab, interval 1, probability 0, space 0, times 0 [ 225.134468][T10388] CPU: 1 UID: 0 PID: 10388 Comm: syz.3.1209 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 225.134499][T10388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 225.134512][T10388] Call Trace: [ 225.134520][T10388] [ 225.134529][T10388] dump_stack_lvl+0x189/0x250 [ 225.134570][T10388] ? lockdep_hardirqs_on+0x9c/0x150 [ 225.134600][T10388] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.134646][T10388] should_fail_ex+0x414/0x560 [ 225.134684][T10388] should_failslab+0xa8/0x100 [ 225.134712][T10388] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 225.134739][T10388] ? __alloc_skb+0x112/0x2d0 [ 225.134766][T10388] __alloc_skb+0x112/0x2d0 [ 225.134794][T10388] netlink_sendmsg+0x5c6/0xb30 [ 225.134827][T10388] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.134854][T10388] ? aa_sock_msg_perm+0x94/0x160 [ 225.134878][T10388] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 225.134900][T10388] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.134924][T10388] __sock_sendmsg+0x219/0x270 [ 225.134959][T10388] ____sys_sendmsg+0x505/0x830 [ 225.134991][T10388] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.135026][T10388] ? import_iovec+0x74/0xa0 [ 225.135057][T10388] ___sys_sendmsg+0x21f/0x2a0 [ 225.135089][T10388] ? __pfx____sys_sendmsg+0x10/0x10 [ 225.135154][T10388] ? __fget_files+0x2a/0x420 [ 225.135180][T10388] ? __fget_files+0x3a0/0x420 [ 225.135217][T10388] __x64_sys_sendmsg+0x19b/0x260 [ 225.135246][T10388] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 225.135290][T10388] ? do_syscall_64+0xba/0x210 [ 225.135326][T10388] do_syscall_64+0xf6/0x210 [ 225.135356][T10388] ? clear_bhb_loop+0x45/0xa0 [ 225.135381][T10388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.135400][T10388] RIP: 0033:0x7f66d898e969 [ 225.135418][T10388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.135435][T10388] RSP: 002b:00007f66d67f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.135456][T10388] RAX: ffffffffffffffda RBX: 00007f66d8bb6080 RCX: 00007f66d898e969 [ 225.135471][T10388] RDX: 0000000000000800 RSI: 0000200000006040 RDI: 0000000000000005 [ 225.135483][T10388] RBP: 00007f66d67f6090 R08: 0000000000000000 R09: 0000000000000000 [ 225.135496][T10388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.135515][T10388] R13: 0000000000000000 R14: 00007f66d8bb6080 R15: 00007ffc931a2f98 [ 225.135546][T10388] [ 225.586923][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 225.846842][T10397] batman_adv: batadv0: Adding interface: dummy0 [ 225.853616][T10397] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.914771][T10397] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 225.953129][ T5140] Bluetooth: hci1: command 0x0406 tx timeout [ 226.099055][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 226.269616][T10411] xt_TCPMSS: Only works on TCP SYN packets [ 226.357653][T10413] netlink: 'syz.2.1216': attribute type 9 has an invalid length. [ 226.533211][T10417] __nla_validate_parse: 7 callbacks suppressed [ 226.533231][T10417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1217'. [ 227.139144][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 227.179435][T10434] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1222'. [ 227.624357][ T9321] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 228.120632][T10459] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1226'. [ 228.141394][T10459] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1226'. [ 228.168279][T10456] macvlan2: entered promiscuous mode [ 228.179041][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 228.192084][T10456] bridge0: port 3(macvlan2) entered blocking state [ 228.215030][T10456] bridge0: port 3(macvlan2) entered disabled state [ 228.232557][T10464] netlink: 'syz.4.1228': attribute type 10 has an invalid length. [ 228.260586][ T9331] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 228.263739][T10456] macvlan2: entered allmulticast mode [ 228.279206][T10464] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1228'. [ 228.304175][T10456] bridge0: entered allmulticast mode [ 228.323146][T10456] macvlan2: left allmulticast mode [ 228.328636][T10456] bridge0: left allmulticast mode [ 228.404351][T10464] batadv0: entered promiscuous mode [ 228.419771][T10464] batadv0: entered allmulticast mode [ 228.435947][T10464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.450123][T10464] bridge0: port 3(batadv0) entered blocking state [ 228.460536][T10464] bridge0: port 3(batadv0) entered disabled state [ 228.661244][T10469] xt_CT: You must specify a L4 protocol and not use inversions on it [ 228.772018][T10479] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 228.788149][ T5140] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 228.831840][T10479] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 228.878230][T10476] tipc: Started in network mode [ 228.893937][T10476] tipc: Node identity 4, cluster identity 4711 [ 228.929505][T10476] tipc: Node number set to 4 [ 228.980464][ T53] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 228.990288][ T53] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 229.086411][T10485] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 229.219149][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 229.424687][T10494] netlink: 'syz.3.1238': attribute type 5 has an invalid length. [ 229.593525][T10497] veth17: entered allmulticast mode [ 229.604259][T10497] bridge0: port 4(veth17) entered blocking state [ 229.622956][T10497] bridge0: port 4(veth17) entered disabled state [ 229.641558][T10497] veth17: entered promiscuous mode [ 229.706173][T10511] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1243'. [ 229.748471][T10511] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1243'. [ 229.803010][T10500] bridge0: port 4(veth17) entered blocking state [ 229.809606][T10500] bridge0: port 4(veth17) entered forwarding state [ 229.821635][T10500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.831154][T10500] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.844658][T10512] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1244'. [ 229.897070][ T9321] bridge0: port 4(veth17) entered disabled state [ 229.936239][T10518] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1246'. [ 230.147066][T10532] IPv6: Can't replace route, no match found [ 230.293316][T10535] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1250'. [ 230.403455][T10538] syzkaller0: entered promiscuous mode [ 230.409177][T10538] syzkaller0: entered allmulticast mode [ 230.553224][T10550] netlink: 'syz.2.1253': attribute type 4 has an invalid length. [ 230.697529][ T5140] block nbd23: Receive control failed (result -107) [ 230.760640][T10553] nbd23: detected capacity change from 0 to 256 [ 231.169646][T10573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.309170][ C1] net_ratelimit: 3 callbacks suppressed [ 231.309190][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 231.620768][T10594] __nla_validate_parse: 8 callbacks suppressed [ 231.620788][T10594] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1267'. [ 232.097221][T10609] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1269'. [ 232.114020][T10609] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1269'. [ 232.123233][T10609] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1269'. [ 232.138493][T10609] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1269'. [ 232.340931][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 232.740201][ T9321] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 233.277576][T10616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1272'. [ 233.331839][T10616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1272'. [ 233.341086][T10616] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1272'. [ 233.352609][T10624] xt_bpf: check failed: parse error [ 233.379187][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 233.393260][ T5140] block nbd24: Receive control failed (result -107) [ 233.461878][T10616] nbd24: detected capacity change from 0 to 256 [ 233.527366][T10618] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1274'. [ 233.559571][T10634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1277'. [ 233.574624][T10618] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 233.724175][T10640] ip6tnl2: entered promiscuous mode [ 233.736945][T10640] ip6tnl2: entered allmulticast mode [ 233.867724][T10655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.875670][T10655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.892419][T10655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.901214][T10655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.920239][T10651] nbd: socks must be embedded in a SOCK_ITEM attr [ 233.941471][T10651] block nbd25: shutting down sockets [ 234.021167][ T9317] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 234.301221][T10678] nbd: socks must be embedded in a SOCK_ITEM attr [ 234.364824][T10684] xt_cluster: node mask cannot exceed total number of nodes [ 234.419002][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 235.007516][T10716] xt_recent: Unsupported userspace flags (00000048) [ 235.459132][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 235.656335][T10753] netlink: 'syz.3.1311': attribute type 10 has an invalid length. [ 235.682487][T10729] netlink: 'syz.1.1308': attribute type 3 has an invalid length. [ 235.957544][T10758] netlink: 'syz.0.1313': attribute type 1 has an invalid length. [ 236.036520][T10765] netlink: 'syz.4.1314': attribute type 58 has an invalid length. [ 236.405026][T10784] smc: net device veth1_to_team applied user defined pnetid SYZ2 [ 236.414513][T10784] smc: net device veth1_to_team erased user defined pnetid SYZ2 [ 236.499013][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 236.633347][T10792] __nla_validate_parse: 20 callbacks suppressed [ 236.633379][T10792] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1324'. [ 236.699884][T10806] IPVS: length: 78 != 8 [ 236.783683][T10808] gtp0: entered promiscuous mode [ 236.824272][T10810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1329'. [ 236.833814][T10810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1329'. [ 236.863730][T10812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1330'. [ 236.914759][T10812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1330'. [ 237.005362][T10819] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1332'. [ 237.075725][T10819] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1332'. [ 237.089434][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 237.460709][T10842] nbd: socks must be embedded in a SOCK_ITEM attr [ 237.477547][T10842] block nbd25: shutting down sockets [ 237.542622][T10850] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 237.549116][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 237.573911][T10850] Bluetooth: MGMT ver 1.23 [ 237.734151][T10856] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1345'. [ 237.776441][T10860] lo: entered allmulticast mode [ 237.782753][T10857] lo: left allmulticast mode [ 237.860945][ T9317] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 237.918255][T10865] netlink: 'syz.3.1349': attribute type 10 has an invalid length. [ 237.980998][T10865] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1349'. [ 238.199806][T10878] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1351'. [ 238.579108][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 239.452283][T10931] IPVS: stopping backup sync thread 6526 ... [ 239.619123][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 239.629531][T10935] x9: renamed from bridge_slave_0 (while UP) [ 239.788340][ T9317] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 240.659435][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 241.699122][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 241.866340][T10977] __nla_validate_parse: 9 callbacks suppressed [ 241.866360][T10977] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1379'. [ 242.035433][T10985] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 242.070169][T10987] netlink: 'syz.4.1382': attribute type 11 has an invalid length. [ 242.100080][T10987] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1382'. [ 242.274202][T11002] x_tables: duplicate underflow at hook 1 [ 242.301963][T11002] x_tables: duplicate underflow at hook 1 [ 242.404169][T11011] netlink: 264 bytes leftover after parsing attributes in process `syz.3.1384'. [ 242.436634][T11013] netlink: 'syz.2.1387': attribute type 3 has an invalid length. [ 242.518510][T10999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1384'. [ 242.656306][T11026] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1391'. [ 242.726118][T11026] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1391'. [ 242.739025][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 243.293351][T11038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1392'. [ 243.313387][T11038] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1392'. [ 243.621914][ T9317] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 243.779134][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 243.857926][T11068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1403'. [ 243.876362][T11064] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1403'. [ 244.030274][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 244.035938][T11078] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 244.334836][T11098] netlink: 'syz.4.1411': attribute type 10 has an invalid length. [ 244.418471][T11082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.465353][T11082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.481262][T11082] bond0 (unregistering): Released all slaves [ 244.534073][T11098] macvlan0: entered promiscuous mode [ 244.546876][T11098] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 244.559475][T11101] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$UvyآDUDw}zR3 [ 244.819092][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 244.905561][T11114] netlink: 'syz.4.1415': attribute type 1 has an invalid length. [ 244.937248][T11114] 8021q: adding VLAN 0 to HW filter on device bond3 [ 245.004647][T11114] bond3: (slave gretap1): making interface the new active one [ 245.042150][T11114] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 245.109630][T11124] nbd: socks must be embedded in a SOCK_ITEM attr [ 245.116337][T11124] block nbd25: shutting down sockets [ 245.532071][T11139] netlink: 'syz.3.1423': attribute type 1 has an invalid length. [ 245.556493][ T9317] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 245.832694][T11151] netlink: 'syz.0.1427': attribute type 21 has an invalid length. [ 245.859076][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 245.935268][ T5140] block nbd25: Receive control failed (result -107) [ 245.968359][T11154] nbd25: detected capacity change from 0 to 256 [ 246.301077][T11168] nbd: socks must be embedded in a SOCK_ITEM attr [ 246.312080][T11168] block nbd26: shutting down sockets [ 246.519222][T11188] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 246.545925][T11190] netlink: 'syz.4.1438': attribute type 1 has an invalid length. [ 246.565408][T11191] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 246.653134][T11190] nbd: socks must be embedded in a SOCK_ITEM attr [ 246.666111][T11190] block nbd26: shutting down sockets [ 246.899093][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 246.987529][T11204] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 247.044925][T11206] dvmrp0: entered allmulticast mode [ 247.070859][T11211] dvmrp0: left allmulticast mode [ 247.155876][T11215] ip6gretap1: entered allmulticast mode [ 247.205987][T11218] netlink: 'syz.1.1444': attribute type 21 has an invalid length. [ 247.256961][T11218] netlink: 'syz.1.1444': attribute type 6 has an invalid length. [ 247.276284][T11218] __nla_validate_parse: 24 callbacks suppressed [ 247.276305][T11218] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1444'. [ 247.300241][T11217] vlan0: entered promiscuous mode [ 247.318743][T11223] netdevsim netdevsim3 nEtdevsim0: renamed from netdevsim0 [ 247.368152][T11223] netdevsim netdevsim3 nEtdevsim0: entered promiscuous mode [ 247.388558][T11223] netdevsim netdevsim3 nEtdevsim0: entered allmulticast mode [ 247.415478][T11223] A link change request failed with some changes committed already. Interface nEtdevsim0 may have been left with an inconsistent configuration, please check. [ 247.486543][T11226] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1446'. [ 247.611821][T11234] nbd: socks must be embedded in a SOCK_ITEM attr [ 247.632053][T11234] block nbd26: shutting down sockets [ 247.701414][T11232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1449'. [ 247.712191][T11243] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1450'. [ 247.749467][T11243] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1450'. [ 247.808726][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 247.871528][T11251] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1451'. [ 247.902563][T11251] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1451'. [ 247.939196][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 247.956936][T11251] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1451'. [ 248.035759][T11251] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1451'. [ 248.926982][T11287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1460'. [ 248.979129][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 249.015029][T11296] netlink: 'syz.3.1463': attribute type 1 has an invalid length. [ 249.200535][T11296] bond3: entered promiscuous mode [ 249.206899][T11296] 8021q: adding VLAN 0 to HW filter on device bond3 [ 249.390648][ T9331] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 249.850698][T11327] netlink: 'syz.4.1470': attribute type 39 has an invalid length. [ 250.029153][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 250.243828][T11342] SET target dimension over the limit! [ 250.389850][T11351] nbd: socks must be embedded in a SOCK_ITEM attr [ 250.399536][T11351] block nbd26: shutting down sockets [ 250.659925][ T9331] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 250.730753][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 250.945748][T11383] netlink: 'syz.1.1486': attribute type 15 has an invalid length. [ 250.967939][T11383] netlink: 'syz.1.1486': attribute type 3 has an invalid length. [ 251.178121][T11383] SET target dimension over the limit! [ 251.396993][ T5140] block nbd26: Receive control failed (result -107) [ 251.419229][T11398] nbd26: detected capacity change from 0 to 256 [ 251.510357][T11402] netlink: 'syz.4.1491': attribute type 3 has an invalid length. [ 252.099119][ C1] net_ratelimit: 1 callbacks suppressed [ 252.099139][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 252.221638][T11444] vlan0: entered promiscuous mode [ 252.242713][ T5140] block nbd27: Receive control failed (result -107) [ 252.270277][T11441] nbd27: detected capacity change from 0 to 256 [ 252.413251][T11451] __nla_validate_parse: 23 callbacks suppressed [ 252.413270][T11451] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1508'. [ 252.588192][T11461] netlink: 'syz.4.1511': attribute type 3 has an invalid length. [ 252.596220][T11461] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1511'. [ 252.631884][T11462] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1510'. [ 252.641242][T11462] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1510'. [ 252.652269][T11462] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1510'. [ 252.662208][T11462] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1510'. [ 252.694789][T11465] netlink: 3696 bytes leftover after parsing attributes in process `syz.4.1512'. [ 252.704503][T11465] netlink: 3696 bytes leftover after parsing attributes in process `syz.4.1512'. [ 252.792285][T11469] pim6reg: entered allmulticast mode [ 252.966517][T11476] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1515'. [ 252.988227][T11476] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1515'. [ 253.139004][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 253.443895][T11492] ip6t_REJECT: ECHOREPLY is not supported [ 254.189065][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 254.372337][T11531] SET target dimension over the limit! [ 254.408663][T11532] SET target dimension over the limit! [ 254.857125][T11556] netlink: 'syz.1.1538': attribute type 4 has an invalid length. [ 254.912669][T11556] netlink: 'syz.1.1538': attribute type 4 has an invalid length. [ 255.145801][T11568] ipip0: entered promiscuous mode [ 255.162346][T11571] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 255.219138][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 255.474732][T11591] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 255.784939][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.791567][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.157308][T11610] netlink: 'syz.0.1551': attribute type 1 has an invalid length. [ 256.259012][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 256.357070][T11610] bond0: entered promiscuous mode [ 256.376625][T11610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.395280][ T5140] block nbd28: Receive control failed (result -107) [ 256.450290][T11621] nbd28: detected capacity change from 0 to 256 [ 256.964480][T11653] tap0: tun_chr_ioctl cmd 2147767506 [ 257.146667][T11666] FAULT_INJECTION: forcing a failure. [ 257.146667][T11666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.209576][T11666] CPU: 0 UID: 0 PID: 11666 Comm: syz.4.1570 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 257.209608][T11666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 257.209633][T11666] Call Trace: [ 257.209641][T11666] [ 257.209650][T11666] dump_stack_lvl+0x189/0x250 [ 257.209683][T11666] ? __lock_acquire+0xaac/0xd20 [ 257.209714][T11666] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.209743][T11666] ? __pfx__printk+0x10/0x10 [ 257.209764][T11666] ? __might_fault+0xb0/0x130 [ 257.209803][T11666] should_fail_ex+0x414/0x560 [ 257.209840][T11666] _copy_from_iter+0x1db/0x15a0 [ 257.209873][T11666] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 257.209895][T11666] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 257.209922][T11666] ? __pfx__copy_from_iter+0x10/0x10 [ 257.209949][T11666] ? __build_skb_around+0x257/0x3e0 [ 257.209976][T11666] ? netlink_sendmsg+0x642/0xb30 [ 257.209998][T11666] ? skb_put+0x11b/0x210 [ 257.210033][T11666] netlink_sendmsg+0x6b2/0xb30 [ 257.210066][T11666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.210093][T11666] ? aa_sock_msg_perm+0x94/0x160 [ 257.210118][T11666] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 257.210140][T11666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.210164][T11666] __sock_sendmsg+0x219/0x270 [ 257.210200][T11666] ____sys_sendmsg+0x505/0x830 [ 257.210232][T11666] ? __pfx_____sys_sendmsg+0x10/0x10 [ 257.210268][T11666] ? import_iovec+0x74/0xa0 [ 257.210300][T11666] ___sys_sendmsg+0x21f/0x2a0 [ 257.210329][T11666] ? __pfx____sys_sendmsg+0x10/0x10 [ 257.210396][T11666] ? __fget_files+0x2a/0x420 [ 257.210421][T11666] ? __fget_files+0x3a0/0x420 [ 257.210459][T11666] __x64_sys_sendmsg+0x19b/0x260 [ 257.210489][T11666] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 257.210534][T11666] ? do_syscall_64+0xba/0x210 [ 257.210568][T11666] do_syscall_64+0xf6/0x210 [ 257.210599][T11666] ? clear_bhb_loop+0x45/0xa0 [ 257.210624][T11666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.210644][T11666] RIP: 0033:0x7f0cddd8e969 [ 257.210661][T11666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.210678][T11666] RSP: 002b:00007f0cdecb0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.210699][T11666] RAX: ffffffffffffffda RBX: 00007f0cddfb5fa0 RCX: 00007f0cddd8e969 [ 257.210714][T11666] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 257.210726][T11666] RBP: 00007f0cdecb0090 R08: 0000000000000000 R09: 0000000000000000 [ 257.210739][T11666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.210750][T11666] R13: 0000000000000000 R14: 00007f0cddfb5fa0 R15: 00007ffe5a4337b8 [ 257.210782][T11666] [ 257.329090][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 257.570209][T11671] __nla_validate_parse: 52 callbacks suppressed [ 257.570236][T11671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1573'. [ 257.619688][T11671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1573'. [ 257.628821][T11671] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1573'. [ 257.658539][T11676] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1574'. [ 257.681867][ T5140] block nbd29: Receive control failed (result -107) [ 257.719170][T11671] nbd29: detected capacity change from 0 to 256 [ 257.737378][T11679] netlink: 'syz.4.1572': attribute type 5 has an invalid length. [ 257.752908][T11679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1572'. [ 257.988070][T11684] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1575'. [ 258.339041][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 258.351934][T11699] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1577'. [ 258.361464][T11699] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1577'. [ 258.371524][T11701] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1580'. [ 258.380864][T11699] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1577'. [ 259.379013][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 259.385395][T11742] FAULT_INJECTION: forcing a failure. [ 259.385395][T11742] name failslab, interval 1, probability 0, space 0, times 0 [ 259.417549][T11742] CPU: 0 UID: 0 PID: 11742 Comm: syz.0.1592 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 259.417580][T11742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 259.417593][T11742] Call Trace: [ 259.417601][T11742] [ 259.417610][T11742] dump_stack_lvl+0x189/0x250 [ 259.417649][T11742] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.417678][T11742] ? __pfx__printk+0x10/0x10 [ 259.417706][T11742] ? __pfx___might_resched+0x10/0x10 [ 259.417724][T11742] ? fs_reclaim_acquire+0x7d/0x100 [ 259.417760][T11742] should_fail_ex+0x414/0x560 [ 259.417807][T11742] should_failslab+0xa8/0x100 [ 259.417836][T11742] __kmalloc_cache_noprof+0x70/0x3d0 [ 259.417861][T11742] ? genl_start+0x1c9/0x6c0 [ 259.417895][T11742] genl_start+0x1c9/0x6c0 [ 259.417922][T11742] ? netlink_lookup+0x30/0x200 [ 259.417951][T11742] __netlink_dump_start+0x466/0x7e0 [ 259.417983][T11742] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 259.418017][T11742] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 259.418054][T11742] ? rcu_is_watching+0x15/0xb0 [ 259.418082][T11742] ? __pfx_genl_start+0x10/0x10 [ 259.418108][T11742] ? __pfx_genl_dumpit+0x10/0x10 [ 259.418132][T11742] ? __pfx_genl_done+0x10/0x10 [ 259.418164][T11742] ? bpf_lsm_capable+0x9/0x20 [ 259.418192][T11742] ? security_capable+0x7e/0x2e0 [ 259.418220][T11742] genl_rcv_msg+0x5da/0x790 [ 259.418257][T11742] ? __pfx_genl_rcv_msg+0x10/0x10 [ 259.418285][T11742] ? __pfx_batadv_tt_local_dump+0x10/0x10 [ 259.418313][T11742] ? ref_tracker_free+0x63a/0x7d0 [ 259.418332][T11742] ? __copy_skb_header+0xa7/0x550 [ 259.418370][T11742] netlink_rcv_skb+0x219/0x490 [ 259.418394][T11742] ? __pfx_genl_rcv_msg+0x10/0x10 [ 259.418425][T11742] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 259.418475][T11742] ? down_read+0x1ad/0x2e0 [ 259.418497][T11742] genl_rcv+0x28/0x40 [ 259.418523][T11742] netlink_unicast+0x758/0x8d0 [ 259.418560][T11742] netlink_sendmsg+0x805/0xb30 [ 259.418595][T11742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.418623][T11742] ? aa_sock_msg_perm+0x94/0x160 [ 259.418647][T11742] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 259.418669][T11742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.418693][T11742] __sock_sendmsg+0x219/0x270 [ 259.418729][T11742] ____sys_sendmsg+0x505/0x830 [ 259.418762][T11742] ? __pfx_____sys_sendmsg+0x10/0x10 [ 259.418805][T11742] ? import_iovec+0x74/0xa0 [ 259.418838][T11742] ___sys_sendmsg+0x21f/0x2a0 [ 259.418867][T11742] ? __pfx____sys_sendmsg+0x10/0x10 [ 259.418935][T11742] ? __fget_files+0x2a/0x420 [ 259.418959][T11742] ? __fget_files+0x3a0/0x420 [ 259.418996][T11742] __x64_sys_sendmsg+0x19b/0x260 [ 259.419026][T11742] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 259.419072][T11742] ? do_syscall_64+0xba/0x210 [ 259.419107][T11742] do_syscall_64+0xf6/0x210 [ 259.419138][T11742] ? clear_bhb_loop+0x45/0xa0 [ 259.419163][T11742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.419182][T11742] RIP: 0033:0x7f6bed18e969 [ 259.419200][T11742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.419217][T11742] RSP: 002b:00007f6bedff5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.419239][T11742] RAX: ffffffffffffffda RBX: 00007f6bed3b5fa0 RCX: 00007f6bed18e969 [ 259.419253][T11742] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 259.419266][T11742] RBP: 00007f6bedff5090 R08: 0000000000000000 R09: 0000000000000000 [ 259.419277][T11742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.419289][T11742] R13: 0000000000000000 R14: 00007f6bed3b5fa0 R15: 00007ffe75c07c68 [ 259.419323][T11742] [ 259.847782][ T5140] Bluetooth: hci4: command 0x0405 tx timeout [ 259.943756][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 260.419134][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 260.670966][T11789] netlink: 'syz.4.1605': attribute type 2 has an invalid length. [ 260.811144][T11799] FAULT_INJECTION: forcing a failure. [ 260.811144][T11799] name failslab, interval 1, probability 0, space 0, times 0 [ 260.822779][T11789] : entered promiscuous mode [ 260.830435][T11799] CPU: 1 UID: 0 PID: 11799 Comm: syz.2.1606 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 260.830464][T11799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 260.830476][T11799] Call Trace: [ 260.830484][T11799] [ 260.830493][T11799] dump_stack_lvl+0x189/0x250 [ 260.830529][T11799] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.830558][T11799] ? __pfx__printk+0x10/0x10 [ 260.830585][T11799] ? __pfx___might_resched+0x10/0x10 [ 260.830610][T11799] should_fail_ex+0x414/0x560 [ 260.830648][T11799] should_failslab+0xa8/0x100 [ 260.830685][T11799] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 260.830711][T11799] ? __alloc_skb+0x112/0x2d0 [ 260.830740][T11799] __alloc_skb+0x112/0x2d0 [ 260.830768][T11799] netlink_dump+0x245/0xe70 [ 260.830805][T11799] ? __pfx_netlink_dump+0x10/0x10 [ 260.830851][T11799] ? __asan_memset+0x22/0x50 [ 260.830871][T11799] ? genl_start+0x499/0x6c0 [ 260.830907][T11799] __netlink_dump_start+0x5cb/0x7e0 [ 260.830950][T11799] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 260.830983][T11799] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 260.831018][T11799] ? rcu_is_watching+0x15/0xb0 [ 260.831045][T11799] ? __pfx_genl_start+0x10/0x10 [ 260.831070][T11799] ? __pfx_genl_dumpit+0x10/0x10 [ 260.831093][T11799] ? __pfx_genl_done+0x10/0x10 [ 260.831124][T11799] ? bpf_lsm_capable+0x9/0x20 [ 260.831150][T11799] ? security_capable+0x7e/0x2e0 [ 260.831178][T11799] genl_rcv_msg+0x5da/0x790 [ 260.831213][T11799] ? __pfx_genl_rcv_msg+0x10/0x10 [ 260.831239][T11799] ? __pfx_batadv_tt_local_dump+0x10/0x10 [ 260.831267][T11799] ? ref_tracker_free+0x63a/0x7d0 [ 260.831285][T11799] ? __copy_skb_header+0xa7/0x550 [ 260.831320][T11799] netlink_rcv_skb+0x219/0x490 [ 260.831343][T11799] ? __pfx_genl_rcv_msg+0x10/0x10 [ 260.831372][T11799] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 260.831420][T11799] ? down_read+0x1ad/0x2e0 [ 260.831441][T11799] genl_rcv+0x28/0x40 [ 260.831466][T11799] netlink_unicast+0x758/0x8d0 [ 260.831498][T11799] netlink_sendmsg+0x805/0xb30 [ 260.831531][T11799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.831556][T11799] ? aa_sock_msg_perm+0x94/0x160 [ 260.831578][T11799] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 260.831599][T11799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.831622][T11799] __sock_sendmsg+0x219/0x270 [ 260.831664][T11799] ____sys_sendmsg+0x505/0x830 [ 260.831696][T11799] ? __pfx_____sys_sendmsg+0x10/0x10 [ 260.831732][T11799] ? import_iovec+0x74/0xa0 [ 260.831762][T11799] ___sys_sendmsg+0x21f/0x2a0 [ 260.831789][T11799] ? __pfx____sys_sendmsg+0x10/0x10 [ 260.831854][T11799] ? __fget_files+0x2a/0x420 [ 260.831877][T11799] ? __fget_files+0x3a0/0x420 [ 260.831913][T11799] __x64_sys_sendmsg+0x19b/0x260 [ 260.831942][T11799] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 260.831987][T11799] ? do_syscall_64+0xba/0x210 [ 260.832020][T11799] do_syscall_64+0xf6/0x210 [ 260.832049][T11799] ? clear_bhb_loop+0x45/0xa0 [ 260.832074][T11799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.832092][T11799] RIP: 0033:0x7f432158e969 [ 260.832109][T11799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.832126][T11799] RSP: 002b:00007f43224e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.832146][T11799] RAX: ffffffffffffffda RBX: 00007f43217b5fa0 RCX: 00007f432158e969 [ 260.832160][T11799] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 260.832172][T11799] RBP: 00007f43224e3090 R08: 0000000000000000 R09: 0000000000000000 [ 260.832184][T11799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.832194][T11799] R13: 0000000000000000 R14: 00007f43217b5fa0 R15: 00007fff44bb99e8 [ 260.832227][T11799] [ 261.459001][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 261.983346][T11834] sctp: [Deprecated]: syz.2.1617 (pid 11834) Use of struct sctp_assoc_value in delayed_ack socket option. [ 261.983346][T11834] Use struct sctp_sack_info instead [ 262.230371][T11847] netlink: 'syz.4.1618': attribute type 1 has an invalid length. [ 262.333785][T11847] 8021q: adding VLAN 0 to HW filter on device bond4 [ 262.377485][T11849] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 262.499011][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 262.936898][T11882] x_tables: duplicate underflow at hook 1 [ 263.418014][T11913] __nla_validate_parse: 17 callbacks suppressed [ 263.418033][T11913] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1630'. [ 263.471514][ T5851] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 263.539000][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 263.630059][T11922] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1633'. [ 263.639919][T11922] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1633'. [ 263.660747][T11922] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1633'. [ 263.694037][T11922] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1633'. [ 263.735950][T11924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1634'. [ 264.118192][T11944] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1638'. [ 264.357494][T11960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1638'. [ 264.579093][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 264.653685][T11970] IPVS: Scheduler module ip_vs_sip not found [ 264.673344][T11973] IPVS: length: 24 != 16106127384 [ 265.169718][T12000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1650'. [ 265.204404][T11999] netlink: 'syz.4.1651': attribute type 58 has an invalid length. [ 265.237727][T11999] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1651'. [ 265.572407][T12013] x_tables: duplicate underflow at hook 2 [ 265.619015][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 265.657835][T12013] x_tables: duplicate underflow at hook 3 [ 266.022308][ T31] INFO: task udevd:5878 blocked for more than 143 seconds. [ 266.033421][ T31] Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 [ 266.046205][T12026] ieee80211 phy26: Selected rate control algorithm 'minstrel_ht' [ 266.081495][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 266.097912][T12028] netlink: 'syz.2.1661': attribute type 23 has an invalid length. [ 266.116475][ T31] task:udevd state:D stack:23528 pid:5878 tgid:5878 ppid:1 task_flags:0x400140 flags:0x00004002 [ 266.141698][ T31] Call Trace: [ 266.145172][ T31] [ 266.148874][ T31] __schedule+0x16e2/0x4cd0 [ 266.157445][ T31] ? blk_mq_flush_plug_list+0x10e/0x1760 [ 266.164042][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 266.174335][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 266.182105][ T31] ? schedule+0x165/0x360 [ 266.186653][ T31] ? __pfx___schedule+0x10/0x10 [ 266.195458][ T31] ? schedule+0x91/0x360 [ 266.199977][ T31] schedule+0x165/0x360 [ 266.204282][ T31] schedule_timeout+0x12b/0x270 [ 266.216576][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 266.222418][ T31] ? __pfx_process_timeout+0x10/0x10 [ 266.228073][ T31] ? prepare_to_wait_event+0x437/0x480 [ 266.234154][ T31] nbd_queue_rq+0x662/0xf10 [ 266.239122][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 266.244366][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 266.250753][ T31] ? __lock_acquire+0xaac/0xd20 [ 266.255818][ T31] blk_mq_dispatch_rq_list+0xa60/0x19b0 [ 266.267140][ T31] ? sbitmap_get+0x229/0x390 [ 266.271991][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 266.278217][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 266.284116][ T31] __blk_mq_sched_dispatch_requests+0xdb2/0x15a0 [ 266.290601][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 266.297605][ T31] ? __lock_acquire+0xaac/0xd20 [ 266.302646][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 266.307950][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 266.314223][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 266.319635][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 266.324787][ T31] blk_mq_flush_plug_list+0xff9/0x1760 [ 266.330612][ T31] ? trace_block_plug+0x7a/0x1f0 [ 266.335600][ T31] ? blk_mq_flush_plug_list+0xb80/0x1760 [ 266.341762][ T31] ? blk_mq_submit_bio+0xd78/0x2240 [ 266.347007][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 266.356668][ T31] ? blk_mq_submit_bio+0x44e/0x2240 [ 266.379730][ T31] __blk_flush_plug+0x3d3/0x4b0 [ 266.384953][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 266.394046][ T31] __submit_bio+0x2d3/0x5a0 [ 266.398617][ T31] ? ktime_get+0x3e/0x1f0 [ 266.403022][ T31] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 266.413651][ T31] ? __pfx___submit_bio+0x10/0x10 [ 266.418741][ T31] ? bio_associate_blkg+0x6d/0x230 [ 266.426046][ T31] submit_bio_noacct_nocheck+0x4b1/0xb50 [ 266.435378][ T31] ? bio_associate_blkg+0x6d/0x230 [ 266.440605][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 266.447304][ T31] ? submit_bio_noacct+0xd65/0x1a70 [ 266.456441][ T31] block_read_full_folio+0x7b7/0x830 [ 266.461846][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 266.467269][ T31] filemap_read_folio+0x114/0x380 [ 266.472634][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 266.478143][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 266.483889][ T31] do_read_cache_folio+0x354/0x590 [ 266.489177][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 266.494688][ T31] read_part_sector+0xb6/0x270 [ 266.508343][ T31] adfspart_check_ICS+0xa4/0xa50 [ 266.513757][ T31] ? snprintf+0xda/0x120 [ 266.518547][ T31] ? policy_nodemask+0x27c/0x720 [ 266.523864][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 266.529720][ T31] ? set_page_refcounted+0xa0/0x1e0 [ 266.534989][ T31] bdev_disk_changed+0x75c/0x14b0 [ 266.540136][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 266.545626][ T31] ? wait_on_inode+0xc0/0x230 [ 266.550392][ T31] blkdev_get_whole+0x380/0x510 [ 266.555286][ T31] bdev_open+0x31e/0xd30 [ 266.560058][ T31] blkdev_open+0x3a8/0x510 [ 266.564533][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 266.569620][ T31] do_dentry_open+0xdf0/0x1970 [ 266.574453][ T31] vfs_open+0x3b/0x340 [ 266.578567][ T31] ? path_openat+0x2ecd/0x3830 [ 266.583667][ T31] path_openat+0x2ee5/0x3830 [ 266.588290][ T31] ? arch_stack_walk+0xfc/0x150 [ 266.593264][ T31] ? __pfx_path_openat+0x10/0x10 [ 266.598235][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.604404][ T31] do_filp_open+0x1fa/0x410 [ 266.608976][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 266.614104][ T31] ? _raw_spin_unlock+0x28/0x50 [ 266.619074][ T31] ? alloc_fd+0x64c/0x6c0 [ 266.623458][ T31] do_sys_openat2+0x121/0x1c0 [ 266.628172][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 266.633442][ T31] __x64_sys_openat+0x138/0x170 [ 266.638319][ T31] do_syscall_64+0xf6/0x210 [ 266.642909][ T31] ? asm_common_interrupt+0x26/0x40 [ 266.648127][ T31] ? clear_bhb_loop+0x45/0xa0 [ 266.652877][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.658789][ T31] RIP: 0033:0x7fbfee7169a4 [ 266.663613][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 266.670845][ T31] RSP: 002b:00007ffef1213780 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 266.679342][ T31] RAX: ffffffffffffffda RBX: 00005605f4c54930 RCX: 00007fbfee7169a4 [ 266.687458][ T31] RDX: 00000000000a0800 RSI: 00005605f4c4af50 RDI: 00000000ffffff9c [ 266.695527][ T31] RBP: 00005605f4c4af50 R08: 0000000000000001 R09: 7fffffffffffffff [ 266.703570][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 266.711608][ T31] R13: 00005605f4c4f320 R14: 0000000000000001 R15: 00005605f4c2e910 [ 266.719748][ T31] [ 266.722956][ T31] INFO: task udevd:5944 blocked for more than 144 seconds. [ 266.732390][ T31] Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 [ 266.740252][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 266.749263][ T31] task:udevd state:D stack:23528 pid:5944 tgid:5944 ppid:1 task_flags:0x400140 flags:0x00004002 [ 266.761505][ T31] Call Trace: [ 266.764832][ T31] [ 266.767785][ T31] __schedule+0x16e2/0x4cd0 [ 266.772541][ T31] ? blk_mq_flush_plug_list+0x10e/0x1760 [ 266.778216][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 266.783657][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 266.789723][ T31] ? schedule+0x165/0x360 [ 266.794175][ T31] ? __pfx___schedule+0x10/0x10 [ 266.799127][ T31] ? schedule+0x91/0x360 [ 266.803416][ T31] schedule+0x165/0x360 [ 266.807623][ T31] schedule_timeout+0x12b/0x270 [ 266.812597][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 266.817999][ T31] ? __pfx_process_timeout+0x10/0x10 [ 266.823350][ T31] ? prepare_to_wait_event+0x437/0x480 [ 266.828834][ T31] nbd_queue_rq+0x662/0xf10 [ 266.833558][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 266.838632][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 266.844869][ T31] ? __lock_acquire+0xaac/0xd20 [ 266.849796][ T31] blk_mq_dispatch_rq_list+0xa60/0x19b0 [ 266.855399][ T31] ? sbitmap_get+0x229/0x390 [ 266.860137][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 266.866155][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 266.872145][ T31] __blk_mq_sched_dispatch_requests+0xdb2/0x15a0 [ 266.878565][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 266.885411][ T31] ? __lock_acquire+0xaac/0xd20 [ 266.890565][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 266.895888][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 266.902026][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 266.907340][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 266.912538][ T31] blk_mq_flush_plug_list+0xff9/0x1760 [ 266.918027][ T31] ? trace_block_plug+0x7a/0x1f0 [ 266.923038][ T31] ? blk_mq_flush_plug_list+0xb80/0x1760 [ 266.928713][ T31] ? blk_mq_submit_bio+0xd78/0x2240 [ 266.933966][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 266.939943][ T31] ? blk_mq_submit_bio+0x44e/0x2240 [ 266.945187][ T31] __blk_flush_plug+0x3d3/0x4b0 [ 266.950128][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 266.955535][ T31] __submit_bio+0x2d3/0x5a0 [ 266.960110][ T31] ? ktime_get+0x3e/0x1f0 [ 266.964559][ T31] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 266.970864][ T31] ? __pfx___submit_bio+0x10/0x10 [ 266.975947][ T31] ? bio_associate_blkg+0x6d/0x230 [ 266.981158][ T31] submit_bio_noacct_nocheck+0x4b1/0xb50 [ 266.986830][ T31] ? bio_associate_blkg+0x6d/0x230 [ 266.992034][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 266.998351][ T31] ? submit_bio_noacct+0xd65/0x1a70 [ 267.003760][ T31] block_read_full_folio+0x7b7/0x830 [ 267.009128][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 267.014551][ T31] filemap_read_folio+0x114/0x380 [ 267.019989][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 267.025503][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 267.031148][ T31] do_read_cache_folio+0x354/0x590 [ 267.036295][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 267.041845][ T31] read_part_sector+0xb6/0x270 [ 267.046648][ T31] adfspart_check_ICS+0xa4/0xa50 [ 267.051682][ T31] ? snprintf+0xda/0x120 [ 267.055956][ T31] ? policy_nodemask+0x27c/0x720 [ 267.065462][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 267.074718][ T31] ? set_page_refcounted+0xa0/0x1e0 [ 267.080129][ T31] bdev_disk_changed+0x75c/0x14b0 [ 267.085219][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 267.095123][ T31] ? wait_on_inode+0xc0/0x230 [ 267.100153][ T31] blkdev_get_whole+0x380/0x510 [ 267.105549][ T31] bdev_open+0x31e/0xd30 [ 267.110103][ T31] blkdev_open+0x3a8/0x510 [ 267.114566][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 267.119555][ T31] do_dentry_open+0xdf0/0x1970 [ 267.124358][ T31] vfs_open+0x3b/0x340 [ 267.128436][ T31] ? path_openat+0x2ecd/0x3830 [ 267.133316][ T31] path_openat+0x2ee5/0x3830 [ 267.137931][ T31] ? arch_stack_walk+0xfc/0x150 [ 267.142991][ T31] ? __pfx_path_openat+0x10/0x10 [ 267.147967][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.154153][ T31] do_filp_open+0x1fa/0x410 [ 267.158683][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 267.163775][ T31] ? _raw_spin_unlock+0x28/0x50 [ 267.168646][ T31] ? alloc_fd+0x64c/0x6c0 [ 267.173084][ T31] do_sys_openat2+0x121/0x1c0 [ 267.177796][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 267.183050][ T31] __x64_sys_openat+0x138/0x170 [ 267.187927][ T31] do_syscall_64+0xf6/0x210 [ 267.192510][ T31] ? asm_sysvec_call_function_single+0x1a/0x20 [ 267.198772][ T31] ? clear_bhb_loop+0x45/0xa0 [ 267.203522][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.209552][ T31] RIP: 0033:0x7fbfee7169a4 [ 267.213992][ T31] RSP: 002b:00007ffef1213780 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 267.222627][ T31] RAX: ffffffffffffffda RBX: 00005605f4c53c40 RCX: 00007fbfee7169a4 [ 267.230658][ T31] RDX: 00000000000a0800 RSI: 00005605f4c52a40 RDI: 00000000ffffff9c [ 267.238674][ T31] RBP: 00005605f4c52a40 R08: 0000000000000001 R09: 7fffffffffffffff [ 267.246759][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 267.254789][ T31] R13: 00005605f4c45890 R14: 0000000000000001 R15: 00005605f4c2e910 [ 267.262858][ T31] [ 267.275402][ T31] INFO: task udevd:6140 blocked for more than 144 seconds. [ 267.284283][ T31] Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 [ 267.312679][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 267.321969][ T31] task:udevd state:D stack:23528 pid:6140 tgid:6140 ppid:1 task_flags:0x400140 flags:0x00004002 [ 267.334890][ T31] Call Trace: [ 267.338412][ T31] [ 267.342084][ T31] __schedule+0x16e2/0x4cd0 [ 267.347024][ T31] ? blk_mq_flush_plug_list+0x10e/0x1760 [ 267.353668][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 267.358955][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 267.366029][ T31] ? schedule+0x165/0x360 [ 267.370685][ T31] ? __pfx___schedule+0x10/0x10 [ 267.375586][ T31] ? schedule+0x91/0x360 [ 267.379907][ T31] schedule+0x165/0x360 [ 267.384108][ T31] schedule_timeout+0x12b/0x270 [ 267.389224][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 267.394719][ T31] ? __pfx_process_timeout+0x10/0x10 [ 267.400065][ T31] ? prepare_to_wait_event+0x437/0x480 [ 267.405688][ T31] nbd_queue_rq+0x662/0xf10 [ 267.410282][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 267.415339][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 267.421561][ T31] ? __lock_acquire+0xaac/0xd20 [ 267.426431][ T31] blk_mq_dispatch_rq_list+0xa60/0x19b0 [ 267.432076][ T31] ? sbitmap_get+0x229/0x390 [ 267.436703][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 267.442842][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 267.448701][ T31] __blk_mq_sched_dispatch_requests+0xdb2/0x15a0 [ 267.455106][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 267.462074][ T31] ? __lock_acquire+0xaac/0xd20 [ 267.467182][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 267.472536][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 267.478559][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 267.483915][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 267.489101][ T31] blk_mq_flush_plug_list+0xff9/0x1760 [ 267.494594][ T31] ? trace_block_plug+0x7a/0x1f0 [ 267.499631][ T31] ? blk_mq_flush_plug_list+0xb80/0x1760 [ 267.505365][ T31] ? blk_mq_submit_bio+0xd78/0x2240 [ 267.510718][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 267.516640][ T31] ? blk_mq_submit_bio+0x44e/0x2240 [ 267.521874][ T31] __blk_flush_plug+0x3d3/0x4b0 [ 267.526742][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 267.532184][ T31] __submit_bio+0x2d3/0x5a0 [ 267.536714][ T31] ? ktime_get+0x3e/0x1f0 [ 267.547358][ T31] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 267.553804][ T31] ? __pfx___submit_bio+0x10/0x10 [ 267.558870][ T31] ? bio_associate_blkg+0x6d/0x230 [ 267.564051][ T31] submit_bio_noacct_nocheck+0x4b1/0xb50 [ 267.569742][ T31] ? bio_associate_blkg+0x6d/0x230 [ 267.574884][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 267.581096][ T31] ? submit_bio_noacct+0xd65/0x1a70 [ 267.586312][ T31] block_read_full_folio+0x7b7/0x830 [ 267.591665][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 267.597081][ T31] filemap_read_folio+0x114/0x380 [ 267.602172][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 267.607829][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 267.613472][ T31] do_read_cache_folio+0x354/0x590 [ 267.618608][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 267.624144][ T31] read_part_sector+0xb6/0x270 [ 267.628961][ T31] adfspart_check_ICS+0xa4/0xa50 [ 267.633946][ T31] ? snprintf+0xda/0x120 [ 267.638215][ T31] ? policy_nodemask+0x27c/0x720 [ 267.643218][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 267.648775][ T31] ? set_page_refcounted+0xa0/0x1e0 [ 267.654049][ T31] bdev_disk_changed+0x75c/0x14b0 [ 267.659272][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 267.664757][ T31] ? wait_on_inode+0xc0/0x230 [ 267.669519][ T31] blkdev_get_whole+0x380/0x510 [ 267.674412][ T31] bdev_open+0x31e/0xd30 [ 267.678676][ T31] blkdev_open+0x3a8/0x510 [ 267.683143][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 267.688095][ T31] do_dentry_open+0xdf0/0x1970 [ 267.692931][ T31] vfs_open+0x3b/0x340 [ 267.697030][ T31] ? path_openat+0x2ecd/0x3830 [ 267.701927][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 267.708964][ T31] path_openat+0x2ee5/0x3830 [ 267.713798][ T31] ? arch_stack_walk+0xfc/0x150 [ 267.718707][ T31] ? __lock_acquire+0xaac/0xd20 [ 267.723649][ T31] ? __pfx_path_openat+0x10/0x10 [ 267.728606][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.734717][ T31] do_filp_open+0x1fa/0x410 [ 267.739278][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 267.744343][ T31] ? _raw_spin_unlock+0x28/0x50 [ 267.749246][ T31] ? alloc_fd+0x64c/0x6c0 [ 267.753612][ T31] do_sys_openat2+0x121/0x1c0 [ 267.758303][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 267.763554][ T31] __x64_sys_openat+0x138/0x170 [ 267.768427][ T31] do_syscall_64+0xf6/0x210 [ 267.773110][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 267.779449][ T31] ? clear_bhb_loop+0x45/0xa0 [ 267.784150][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.790094][ T31] RIP: 0033:0x7fbfee7169a4 [ 267.794539][ T31] RSP: 002b:00007ffef1213780 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 267.803020][ T31] RAX: ffffffffffffffda RBX: 00005605f4c2e500 RCX: 00007fbfee7169a4 [ 267.811063][ T31] RDX: 00000000000a0800 RSI: 00005605f4c40b60 RDI: 00000000ffffff9c [ 267.819204][ T31] RBP: 00005605f4c40b60 R08: 0000000000000001 R09: 7fffffffffffffff [ 267.827206][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 267.835265][ T31] R13: 00005605f4c45890 R14: 0000000000000001 R15: 00005605f4c2e910 [ 267.843323][ T31] [ 267.854876][ T31] INFO: task udevd:6385 blocked for more than 145 seconds. [ 267.884118][ T31] Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 [ 267.895901][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 267.904639][ T31] task:udevd state:D stack:23528 pid:6385 tgid:6385 ppid:1 task_flags:0x400140 flags:0x00004002 [ 267.916668][ T31] Call Trace: [ 267.920025][ T31] [ 267.922982][ T31] __schedule+0x16e2/0x4cd0 [ 267.927508][ T31] ? blk_mq_flush_plug_list+0x10e/0x1760 [ 267.933206][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 267.938422][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 267.944652][ T31] ? schedule+0x165/0x360 [ 267.949068][ T31] ? __pfx___schedule+0x10/0x10 [ 267.953984][ T31] ? schedule+0x91/0x360 [ 267.958274][ T31] schedule+0x165/0x360 [ 267.962676][ T31] schedule_timeout+0x12b/0x270 [ 267.967555][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 267.973183][ T31] ? __pfx_process_timeout+0x10/0x10 [ 267.978534][ T31] ? prepare_to_wait_event+0x437/0x480 [ 267.984047][ T31] nbd_queue_rq+0x662/0xf10 [ 267.988578][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 267.993650][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 267.999887][ T31] ? __lock_acquire+0xaac/0xd20 [ 268.004795][ T31] blk_mq_dispatch_rq_list+0xa60/0x19b0 [ 268.010442][ T31] ? sbitmap_get+0x229/0x390 [ 268.015068][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 268.021282][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 268.027124][ T31] __blk_mq_sched_dispatch_requests+0xdb2/0x15a0 [ 268.033504][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 268.040323][ T31] ? __lock_acquire+0xaac/0xd20 [ 268.045214][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 268.050585][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 268.056592][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 268.061916][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 268.067045][ T31] blk_mq_flush_plug_list+0xff9/0x1760 [ 268.072564][ T31] ? trace_block_plug+0x7a/0x1f0 [ 268.077518][ T31] ? blk_mq_flush_plug_list+0xb80/0x1760 [ 268.083256][ T31] ? blk_mq_submit_bio+0xd78/0x2240 [ 268.088484][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 268.094422][ T31] ? blk_mq_submit_bio+0x44e/0x2240 [ 268.099672][ T31] __blk_flush_plug+0x3d3/0x4b0 [ 268.104568][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 268.110124][ T31] __submit_bio+0x2d3/0x5a0 [ 268.114655][ T31] ? ktime_get+0x3e/0x1f0 [ 268.119121][ T31] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 268.125395][ T31] ? __pfx___submit_bio+0x10/0x10 [ 268.130483][ T31] ? bio_associate_blkg+0x6d/0x230 [ 268.135620][ T31] submit_bio_noacct_nocheck+0x4b1/0xb50 [ 268.141289][ T31] ? bio_associate_blkg+0x6d/0x230 [ 268.146437][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 268.152627][ T31] ? submit_bio_noacct+0xd65/0x1a70 [ 268.157842][ T31] block_read_full_folio+0x7b7/0x830 [ 268.163170][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 268.168558][ T31] filemap_read_folio+0x114/0x380 [ 268.173605][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 268.179130][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 268.184712][ T31] do_read_cache_folio+0x354/0x590 [ 268.189889][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 268.195388][ T31] read_part_sector+0xb6/0x270 [ 268.200201][ T31] adfspart_check_ICS+0xa4/0xa50 [ 268.205159][ T31] ? snprintf+0xda/0x120 [ 268.209468][ T31] ? policy_nodemask+0x27c/0x720 [ 268.214437][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 268.220184][ T31] ? set_page_refcounted+0xa0/0x1e0 [ 268.225547][ T31] bdev_disk_changed+0x75c/0x14b0 [ 268.230651][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 268.236140][ T31] ? wait_on_inode+0xc0/0x230 [ 268.240915][ T31] blkdev_get_whole+0x380/0x510 [ 268.245807][ T31] bdev_open+0x31e/0xd30 [ 268.250146][ T31] blkdev_open+0x3a8/0x510 [ 268.254596][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 268.259608][ T31] do_dentry_open+0xdf0/0x1970 [ 268.264418][ T31] vfs_open+0x3b/0x340 [ 268.268496][ T31] ? path_openat+0x2ecd/0x3830 [ 268.273303][ T31] path_openat+0x2ee5/0x3830 [ 268.277896][ T31] ? arch_stack_walk+0xfc/0x150 [ 268.282868][ T31] ? __pfx_path_openat+0x10/0x10 [ 268.287839][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.293978][ T31] do_filp_open+0x1fa/0x410 [ 268.298492][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 268.303569][ T31] ? _raw_spin_unlock+0x28/0x50 [ 268.308422][ T31] ? alloc_fd+0x64c/0x6c0 [ 268.312788][ T31] do_sys_openat2+0x121/0x1c0 [ 268.317496][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 268.322749][ T31] __x64_sys_openat+0x138/0x170 [ 268.327701][ T31] do_syscall_64+0xf6/0x210 [ 268.332335][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 268.338499][ T31] ? clear_bhb_loop+0x45/0xa0 [ 268.343256][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.349210][ T31] RIP: 0033:0x7fbfee7169a4 [ 268.353650][ T31] RSP: 002b:00007ffef1213780 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 268.362178][ T31] RAX: ffffffffffffffda RBX: 00005605f4c38860 RCX: 00007fbfee7169a4 [ 268.370222][ T31] RDX: 00000000000a0800 RSI: 00005605f4c2f5f0 RDI: 00000000ffffff9c [ 268.378223][ T31] RBP: 00005605f4c2f5f0 R08: 0000000000000001 R09: 7fffffffffffffff [ 268.386378][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 268.394399][ T31] R13: 00005605f4c3f9e0 R14: 0000000000000001 R15: 00005605f4c2e910 [ 268.402443][ T31] [ 268.405525][ T31] [ 268.405525][ T31] Showing all locks held in the system: [ 268.413300][ T31] 1 lock held by khungtaskd/31: [ 268.418171][ T31] #0: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 268.428181][ T31] 2 locks held by getty/5580: [ 268.432891][ T31] #0: ffff8880346e20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 268.442790][ T31] #1: ffffc90002ffe2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 268.453013][ T31] 3 locks held by udevd/5878: [ 268.457703][ T31] #0: ffff8880245c5358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 268.467004][ T31] #1: ffff888024662790 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 268.476583][ T31] #2: ffff888024917178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc8/0xf10 [ 268.485516][ T31] 3 locks held by udevd/5879: [ 268.490245][ T31] #0: ffff8880248ff358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 268.499954][ T31] #1: ffff88801f39fb10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 268.509553][ T31] #2: ffff888024b1e178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc8/0xf10 [ 268.519018][ T31] 3 locks held by udevd/5944: [ 268.523727][ T31] #0: ffff888024849358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 268.533342][ T31] #1: ffff88801f367e10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 268.542944][ T31] #2: ffff8880248b7178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc8/0xf10 [ 268.552026][ T31] 3 locks held by udevd/6140: [ 268.556710][ T31] #0: ffff888144749358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 268.566019][ T31] #1: ffff888024662f10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 268.575571][ T31] #2: ffff8880249be178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc8/0xf10 [ 268.591535][ T31] 3 locks held by udevd/6244: [ 268.596251][ T31] #0: ffff88802496f358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 268.605552][ T31] #1: ffff8881443d8e10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 268.615088][ T31] #2: ffff888024aee178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc8/0xf10 [ 268.624028][ T31] 3 locks held by udevd/6385: [ 268.628723][ T31] #0: ffff88802484d358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 268.638086][ T31] #1: ffff88801f391490 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 268.647639][ T31] #2: ffff888024980178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc8/0xf10 [ 268.656648][ T31] 5 locks held by kworker/u8:9/6854: [ 268.662173][ T31] #0: ffff88801aef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 268.673123][ T31] #1: ffffc90002f57c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 268.683746][ T31] #2: ffffffff8f2e7c10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x8a0 [ 268.693101][ T31] #3: ffffffff8f2f4748 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xdc/0x890 [ 268.703161][ T31] #4: ffffffff8df41338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f4/0x730 [ 268.714095][ T31] 3 locks held by udevd/6886: [ 268.718773][ T31] #0: ffff888024a66358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 268.728056][ T31] #1: ffff8881443f3490 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 268.737712][ T31] #2: ffff8880250f51f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc8/0xf10 [ 268.746664][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 268.753653][ T31] 3 locks held by udevd/6887: [ 268.758336][ T31] #0: ffff8880248fb358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 268.767615][ T31] #1: ffff88801f39f390 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 268.777284][ T31] #2: ffff888024a851f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc8/0xf10 [ 268.786283][ T31] 3 locks held by udevd/7407: [ 268.791141][ T31] #0: ffff888024acc358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 268.800563][ T31] #1: ffff88801f3c3910 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 268.810235][ T31] #2: ffff888025070178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc8/0xf10 [ 268.819458][ T31] 3 locks held by udevd/7428: [ 268.824177][ T31] #0: ffff888024a53358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 268.833488][ T31] #1: ffff8881443ea590 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 268.843126][ T31] #2: ffff888024b551f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc8/0xf10 [ 268.852111][ T31] 3 locks held by udevd/7723: [ 268.856808][ T31] #0: ffff888024a62358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 268.866089][ T31] #1: ffff8881443ead90 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 268.875653][ T31] #2: ffff88802504e178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc8/0xf10 [ 268.884670][ T31] 3 locks held by udevd/7855: [ 268.889375][ T31] #0: ffff888024ac8358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 268.898638][ T31] #1: ffff88801f3c3210 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 268.908287][ T31] #2: ffff888024ba7178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc8/0xf10 [ 268.917253][ T31] 2 locks held by syz.3.1662/12032: [ 268.922484][ T31] #0: ffffffff8f2e7c10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590 [ 268.931943][ T31] #1: ffffffff8f2f4748 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x1d0 [ 268.941491][ T31] 2 locks held by syz.3.1662/12035: [ 268.946708][ T31] #0: ffffffff8f7f7350 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 268.956309][ T31] #1: ffffffff8df41200 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 268.966305][ T31] [ 268.968808][ T31] ============================================= [ 268.968808][ T31] [ 268.977391][ T31] NMI backtrace for cpu 1 [ 268.977408][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 268.977430][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 268.977441][ T31] Call Trace: [ 268.977448][ T31] [ 268.977457][ T31] dump_stack_lvl+0x189/0x250 [ 268.977482][ T31] ? __wake_up_klogd+0xd9/0x110 [ 268.977503][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.977525][ T31] ? __pfx__printk+0x10/0x10 [ 268.977551][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 268.977573][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 268.977590][ T31] ? _printk+0xcf/0x120 [ 268.977609][ T31] ? __pfx__printk+0x10/0x10 [ 268.977626][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 268.977643][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 268.977665][ T31] watchdog+0xfee/0x1030 [ 268.977686][ T31] ? watchdog+0x1de/0x1030 [ 268.977712][ T31] kthread+0x70e/0x8a0 [ 268.977733][ T31] ? __pfx_watchdog+0x10/0x10 [ 268.977756][ T31] ? __pfx_kthread+0x10/0x10 [ 268.977775][ T31] ? __pfx_kthread+0x10/0x10 [ 268.977792][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 268.977812][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.977835][ T31] ? __pfx_kthread+0x10/0x10 [ 268.977852][ T31] ret_from_fork+0x4b/0x80 [ 268.977866][ T31] ? __pfx_kthread+0x10/0x10 [ 268.977885][ T31] ret_from_fork_asm+0x1a/0x30 [ 268.977912][ T31] [ 268.977925][ T31] Sending NMI from CPU 1 to CPUs 0: [ 269.125071][ C0] NMI backtrace for cpu 0 [ 269.125087][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 269.125105][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 269.125115][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 269.125143][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 1b 11 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 269.125156][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 269.125169][ C0] RAX: 82800ef627cebc00 RBX: ffffffff81973f28 RCX: 82800ef627cebc00 [ 269.125181][ C0] RDX: 0000000000000001 RSI: ffffffff8d74f5e8 RDI: ffffffff8bc1d020 [ 269.125191][ C0] RBP: ffffffff8dc07ec0 R08: ffff8880b8832b5b R09: 1ffff1101710656b [ 269.125203][ C0] R10: dffffc0000000000 R11: ffffed101710656c R12: ffffffff8f7f2c70 [ 269.125214][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a48 [ 269.125224][ C0] FS: 0000000000000000(0000) GS:ffff8881260c1000(0000) knlGS:0000000000000000 [ 269.125236][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 269.125246][ C0] CR2: 000056033337d978 CR3: 000000003400c000 CR4: 00000000003526f0 [ 269.125260][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 269.125269][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 269.125278][ C0] Call Trace: [ 269.125284][ C0] [ 269.125290][ C0] default_idle+0x13/0x20 [ 269.125304][ C0] default_idle_call+0x74/0xb0 [ 269.125319][ C0] do_idle+0x1e8/0x510 [ 269.125336][ C0] ? __pfx_do_idle+0x10/0x10 [ 269.125359][ C0] cpu_startup_entry+0x44/0x60 [ 269.125372][ C0] rest_init+0x2de/0x300 [ 269.125387][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 269.125412][ C0] start_kernel+0x470/0x4f0 [ 269.125431][ C0] x86_64_start_reservations+0x2a/0x30 [ 269.125453][ C0] x86_64_start_kernel+0x66/0x70 [ 269.125473][ C0] common_startup_64+0x13e/0x147 [ 269.125503][ C0] [ 269.126148][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 269.330836][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 269.342644][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 269.352723][ T31] Call Trace: [ 269.356016][ T31] [ 269.358955][ T31] dump_stack_lvl+0x99/0x250 [ 269.363562][ T31] ? __asan_memcpy+0x40/0x70 [ 269.368155][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.373365][ T31] ? __pfx__printk+0x10/0x10 [ 269.377970][ T31] panic+0x2db/0x790 [ 269.381882][ T31] ? __pfx_panic+0x10/0x10 [ 269.386304][ T31] ? tick_nohz_tick_stopped+0x86/0xb0 [ 269.391684][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 269.397060][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 269.403230][ T31] watchdog+0x102d/0x1030 [ 269.407569][ T31] ? watchdog+0x1de/0x1030 [ 269.411997][ T31] kthread+0x70e/0x8a0 [ 269.416076][ T31] ? __pfx_watchdog+0x10/0x10 [ 269.420764][ T31] ? __pfx_kthread+0x10/0x10 [ 269.425365][ T31] ? __pfx_kthread+0x10/0x10 [ 269.429958][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 269.435166][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 269.440377][ T31] ? __pfx_kthread+0x10/0x10 [ 269.444970][ T31] ret_from_fork+0x4b/0x80 [ 269.449390][ T31] ? __pfx_kthread+0x10/0x10 [ 269.453989][ T31] ret_from_fork_asm+0x1a/0x30 [ 269.458767][ T31] [ 269.462101][ T31] Kernel Offset: disabled [ 269.466429][ T31] Rebooting in 86400 seconds..