last executing test programs: 12.636390383s ago: executing program 3 (id=3010): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000600)={&(0x7f0000000080)="01cf0cf6c29bb5832d970063a802eddb030fc299945ab48f176045db2e63fd67d070feaf88a24e485efd0ed8e5f2126d10e3ea7251aab0699a47f4b4811e1d60ae8312250ad559e62cb7f900", &(0x7f0000000140)=""/158, &(0x7f00000002c0)="ebc0c3698ad382e05eb795ae617f1491437f5b1ea09b11832d3a5b5d3a7b65d8b0b1681748b0f4500b2eba861e3817952c4f7e45f4a4cda00562707b766222eb93191a096bd260722912f5d06c", &(0x7f00000003c0)="73814d7109b60a8d644f038041324ea71e1f7a7a694898cc37bacd2acf9beab8178ecf29f62732d679d134e9e123a9a75fffb3aa4d07e83ebab4af373c404750a54a17d15f1a6ab74ad1358288bb524cded75572382c87ec4e38ec28e7032fc3673513a371f3a1be3ec64d0bea4eb33d6d7dbc18a806bf768cf2e6ea53d611c0af145c086950aa77cd39bebb9ce80dd3c5778baeeb69ee5a4ba6ffd9be5793ed748c64c63dc727218b8f6d29", 0x2aa, r1, 0x4}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x702, 0xfc67, 0x0, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d0a0000000000000000000006040098"], &(0x7f0000000f40)=""/4088, 0x3e, 0xff8, 0x1}, 0x28) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="480000001000010400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000034000000280012800b0001006572737061e50058ff0f00000000000000000000b3f2addde6bd39d168dad7c0c53d865db5a0b2fd88bb1badd4e2bc88ce79d735a0f4c271c0bfb9566077188d6282f424894b2468022ed97903a1ea9c00772592ef58bf529ae9a0e2ad97e982e9fd2005e84049ea2fcbf95380d7a01e005b1300000000200000000000000000000400"], 0x48}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x200000d, 0x12, r3, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) 12.005662369s ago: executing program 3 (id=3015): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000001, 0x10, r1, 0x0) (async) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000240)=0x1, 0x4) (async) syz_init_net_socket$llc(0x1a, 0x0, 0x0) 11.700667304s ago: executing program 3 (id=3018): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x70c3c000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f00000015c0)=""/4059, 0xfdb, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50006fcb5d15966b46ca64f7e76268cd64007095adfef77465b69ec03139854d6f07d5f9bd01000046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f0000000540)="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", 0xde4}], 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$kcm(0x21, 0x2, 0xa) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x0, 0x84) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x11, 0x3, 0x0) 10.760987671s ago: executing program 3 (id=3024): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r1, &(0x7f0000000400)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x10) r2 = socket(0x1d, 0x80802, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x3, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x2400c855}, 0x40804) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 10.222807069s ago: executing program 3 (id=3028): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r0, &(0x7f0000000100), 0x0}, 0x20) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x6, 0xfffffffffffffffe, 0xfffffffffffffffc}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r3, @ANYBLOB="0100000002"], 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@delneigh={0x30, 0x1a, 0x1, 0x70bd28, 0x25dfdbfd, {0x1c, 0x0, 0x0, 0x0, 0x1, 0x84}, [@NDA_DST_IPV6={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000680)={r4, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000702000000b0ffb0bc26100000000000bf672000000000001602000000b0ffb06702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x48) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl1\x00', &(0x7f00000007c0)={'tunl0\x00', 0x0, 0x0, 0x80, 0x4, 0x9, {{0xa, 0x4, 0x3, 0x3c, 0x28, 0x68, 0x0, 0xb4, 0x29, 0x0, @empty, @local, {[@cipso={0x86, 0x12, 0x2, [{0x7, 0xc, "6d187952e3cee9addb3f"}]}]}}}}}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, 0x0, 0x4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "41b57012b47bc8e8d8e3484d9c5998b3"}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x8, 0x1a95, 0x88ad, 0x2, 0x7, 0x2752}}, {0x4}}]}]}, 0x6c}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {0x0, 0xff}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) socket$key(0xf, 0x3, 0x2) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000003f000500000000000000000002000000060000000f0001006f76732d73797374656d"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f0000000440)={&(0x7f0000000140), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010026bd7000ffdbdf25210000000c000500000000000000000009001f00706879310000000009001f007068793200000000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r10 = socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80805, 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000500)=0x5) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'dummy0\x00'}) r11 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r11, 0x89a3, &(0x7f0000000200)='bridge0\x00') 7.165268258s ago: executing program 3 (id=3035): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, 'bridge_slave_1\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'gre0\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x3918, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x20040800, &(0x7f0000000000)={0xa, 0x4e24, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000040)=0x8, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl(r3, 0x40047438, &(0x7f0000000040)) 4.393050224s ago: executing program 1 (id=3052): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100040000000100000009000000300003800800032000000000140002007663616e30000000000000000000000d50e9b8ee0ae0c7710008000100020000"], 0x44}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) accept(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000140)=0x3) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, 0x0, 0x40010) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) unshare(0x22020400) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2d, &(0x7f0000000700)=0xfffffffe, 0x4) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 4.295625756s ago: executing program 2 (id=3053): r0 = socket(0x1f, 0x4, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x86, 0x9, &(0x7f00000000c0)="be537ccb8900000000631e865a8e0292e19d788dfe880cfb8aefa906959e1f5e7781b58649", 0x25) setsockopt(r2, 0x84, 0x80, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00', 0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x25, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r6 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)=ANY=[], 0x20000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x4c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESDEC], 0xa4}}, 0x40000010) socket$l2tp(0x2, 0x2, 0x73) socket$pppoe(0x18, 0x1, 0x0) sendmsg$IPSET_CMD_LIST(r3, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) connect$can_bcm(r8, &(0x7f0000000080)={0x1d, r9}, 0x10) sendmsg$can_bcm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="05000000"], 0x48}}, 0x4) sendmsg$nl_generic(r7, 0x0, 0x48010) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000300)) 4.169667806s ago: executing program 1 (id=3054): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x12, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffffff1f}, {}, {}, [], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000108000003400000008007300000000000e0001006e44446465767365746465767300"/54], 0x3c}}, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket(0x2, 0x80805, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffbb4, 0x5, 0x5, 0x6e0, 0x5}, 0x43}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r2 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000048000000030a01040000000000000000020000000900010073797a30000000000900030073797a30000000001400048008000140000000030800024000000000080005400000000198000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000006c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c0003006c6f00000000000000000000000000002000"], 0x128}}, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r6, &(0x7f0000000800)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe, 0x12, r7, 0x952de000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r8, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r3], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) 3.561012233s ago: executing program 2 (id=3056): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000008c0), 0x4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00'}) (async) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="eea2fd02e593d9b54ff96355c402cfefaa65874028c338a42e2656a80d0a7fadefb70d83f813933b411f365f3af250afefc570d81ec6adf90255927cf6e9222bff69649bcc3885cec88cfab6282314d72c2f93128f207eb6d08dfc5530361fddc9a1747edfefba5ce95710001e2fbe5a2dbd302958e2b5c247da13a0f1cfbbfa2e526c8034d725d47df07c6b3f7cbac720e6be530ccb8e17f0035489a9ed062ed26e826dac464dbcd108662a2d4f2bdd24b4e2406f64ac8da96d2883935d4d09697887", 0xc3, 0x40010, &(0x7f0000000140)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x17, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000600000000000000030000dc767a5dfa", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000c67b03254aab00ec1f00b7030000fffe000085000000cb000000bf0900000000000055090100000000809500000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff07000085000000d2000000bf91000000000000b7020000030000008500000084000000b7000000000500009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x3, 0xff8, &(0x7f0000002380)=""/4088, 0x40f00, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) (async) gettid() (async) socket(0x10, 0x803, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800"], 0x50) (rerun: 32) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002340)={&(0x7f0000000080), 0x0, 0x0, 0x0, 0x3ff, r5}, 0x38) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001780)=ANY=[@ANYRESDEC], 0x74}}, 0x0) (async) r6 = socket$kcm(0x2d, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x3a) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async, rerun: 32) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) unshare(0x8040480) (async) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)}], 0x1) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1802}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async, rerun: 64) pread64(r8, &(0x7f0000002200)=""/87, 0x57, 0xfffd) (async, rerun: 64) accept(r6, 0x0, 0x0) 2.604123678s ago: executing program 1 (id=3059): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0400000004000000040000001000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000f5167e365a4fa94e4cf4f5eec5963ede208e36ab51a37623dfee3ecb3bd186ac4d2b5df005ddcd7158fa5006159eabab60c7749cbd2f9cd4405577079dea70993830a0876b3da0b6b069b7"], 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, 0x0, 0x2d) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)={0x90, r2, 0x1, 0x70bd25, 0x2, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x48, 0x8, 0x0, 0x1, [{0x4}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x24393edd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xde}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5045c766}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c20160a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x29}]}, {0x4}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x90}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000bfa400000000000007040000f8ffffffb70500000000000085000000190000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$igmp(0x2, 0x3, 0x2) recvfrom(r4, &(0x7f0000000040)=""/115, 0x73, 0x41, 0x0, 0x0) 2.596474334s ago: executing program 1 (id=3061): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) (fail_nth: 43) shutdown(r1, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRESHEX=r1, @ANYRES32], 0x1c}}, 0x840) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000"], 0x0, 0x3c}, 0x28) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000300)}, 0x20) sendmsg$inet6(r3, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c0000f93be3d8"], 0x18}, 0x40) 2.348374106s ago: executing program 0 (id=3063): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000040)={0x23, 0xc, 0xe, 0xfb}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003b1528bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="04000001ffffffffffffff7f00010067747000140002800800020000", @ANYRESHEX=r1, @ANYRES32, @ANYRES8=r0], 0x40}, 0x1, 0x0, 0x0, 0x6008009}, 0x0) 2.307106557s ago: executing program 1 (id=3064): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket(0x1, 0x2, 0x0) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r1}, 0x20) (async) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) (async, rerun: 32) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002f00090027bd9f0000000000040000000c00180002ac0f0004ac0f"], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x4) (rerun: 32) 2.185565169s ago: executing program 2 (id=3065): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket(0x10, 0x803, 0x2) socket$kcm(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000019440)=[{&(0x7f0000000340)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed090f0000600000f3a1bc5603ca00000f7f89e3ff296aa1f6475322f000200000004a2471083ec6991778581acb6c0101ff00", 0x48}], 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r3) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) close(0x3) close(r0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x0) 2.060013952s ago: executing program 4 (id=3066): unshare(0x20000400) unshare(0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24008851}, 0x40040) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYRES16=r0], 0x30}, 0x1, 0x0, 0x0, 0xc854}, 0x8041) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x1, 0x0, &(0x7f0000000000)) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000100)=""/30, 0x1e}], 0x1, 0xe8, 0x8) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@gettaction={0x14, 0x32, 0x800, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40090}, 0x404c801) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r4 = socket$inet(0x2, 0x4000000000000001, 0xffffff1c) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r4, 0x0, 0x0, 0x8000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000001e00)="140f46d07e87b75a3db5ffe146b320ed28c28fc2bc4618e71f2ec678323037058bec18b2eaec2a89380500f980edf960762d3262a81054ea8c836b7dba5bcff3f882fc942cf69698b77e542f40baab169de1dd133891f6b01ff80500f3faf660e540cfd9b3fcf43a2e0163babcdf2a38bfbc076cb988b4e8f1d131749ddaccba8f22c430ba68ddcd7b8fce07442cb6b0ffabc0f15add3f52fc732f24ba643f9f49ec4d6c7667d059830226aa3248aa3dd4fb8a6729c5b14b8950779edc138f3a673e7311108b8730740600a04394639d23a4f20339ef4dd80d61003aee7564786aa68c05aa0000000000", 0xea, 0x4044880, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@deltfilter={0x24, 0x2d, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {0xa, 0x10}, {0xfff2, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000003480)=[{{&(0x7f0000000580)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x89}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80, &(0x7f0000000980)=[{&(0x7f00000006c0)="9fe1885ef9b1f3addd30684f842ff4e573dd53660d6d51341abf3df29ff8a51a61d60f132a6ab8a5d80b0c4c3e631ad7f83f3b3a591da9432248a2abd34a35e11ee31f31cdd4edb080e75e879f52aa9d74ae71c1c6c2a6a28d6808bf1d74e1f9d2b6275636f30511ccbff16018c663c74aced00e124bdaf86e38793d7740d4dab93735b16d1c972e38505350f9d991558bdc852d8b0a36a51cee083da743886a05b1827dce6d45f08a55f955d175dc23a2aab503895c836325", 0xb9}, {&(0x7f0000000780)="7420e97830ed9537f5b67367ad1cca6492f726c80ae77de05a531dfbe9b86f582aadc7c3736a2b98870d8ba198fdbf31132b7a7dcbf514793e5392f0a30e524e71bbb9c1637a1cfaaaf9f6146754ac0ddde1a7c508866d04260dc139071ae56730cbe215d29ca0e228cab4691b3aed036ad129dc20ecc328c51457e32e10566f46bf5013386f6d6e9c012efd2daecc0d288da605d51765", 0x97}, {&(0x7f0000000840)="ca84483766b2b7e00c55b4128f4ed5ff54a452ad6115b57d5921c9ac6a244a70210774867bd18a493a00a217885f31d77c95604b05f5cc454718076fe734243b6dd55c794fb959214ec88b1f5355ac52c19dc6e33613390923d6b437254243fd91ff54c9f443421ee2538a7204382cb006b6abcfe41392fe87123ae1381f876c54507b3c5731a2060936539117f16789f360904d55937bd140a38666654caf60b819667ffc33fcb71d7eb7bb43ed879f54ccde1972cbb81847be6b8751f7d3e3b9b21bd40e34c2c6d279b4135e041bd1ceb293e45a3863afd5ddfdd639a7a384eebda1da07af596e698e5a21432bb2b5f6f7fa4113a2ea43fc", 0xf9}, {&(0x7f0000001400)="f600c0942930f73c6700", 0xa}], 0x4, &(0x7f00000009c0)=ANY=[]}}, {{&(0x7f0000001ac0)=@pptp={0x18, 0x2, {0x3, @multicast1}}, 0x80, &(0x7f0000001b40), 0x0, &(0x7f0000001f00)=ANY=[], 0x268}}, {{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001bc0)="a87879e81c79e0dcd1f6dcec1dc47ac1d37b39c8ed09bc326a602750c945278618e6616dac4df4f882de29c84d1f3ded5b0ea159b518ac809b8718e6682b5e3b8685a43288e0571cf476b1fb7bc0", 0x4e}, {&(0x7f0000001c40)="279d859c0bd4c5d3db7fa2fc874abbfb7010904bb0419bd7543f5437cd6d934b6f6e609e0fc0ed476e5210aa4a08b1d683de279b1724b28536b36a089a285b090125eb6486cd461627527ec84040444460", 0x51}, {&(0x7f0000001cc0)="337920fb0af534a8c1b0664236ea1d036b782463b38b5bbaea57bd4816f48bc8ccc0ff4205197eb2db78824b9c310f4c913cc2bd11de53c2df5cee4fbcac02ab002c14e73d7b14eeff4de9b60b2b9a14ad822bd32f6f35bbb26757653e82c4987c065fb607cadc7dc9f869dac3b8d6070a4da3bd6a794ebe66de09497c2ad9cb", 0x80}, {&(0x7f00000012c0)="144709e3cf5ce8b6da63c11f0fd384a6cc78a69583ab9444c4172551b693e1f9ff6dcebfc991b4030d79b4d60275ce6a4020419cee191273dd759e3458eba59870a90148137d1568633e68facdbb184d23b8e87c8b958185de8e9e7ebfb08be7fdbae4a392c0979b1de5a54b328c11d21578dad75afb6d0f221ff0a426d2591ce84a679b39f9fac3e77c486252729c4c2c27fb39efa5d633e51dbce9c77d695acf247df4040beec7d50d42193ff6ad185592e4ebb3a9c090bac2a26c12d8a5cf4172d2ac865d8924a168a9820ee948dc5aa1c255328672d149751bffeb5a064cd1de", 0xe2}], 0x4, &(0x7f00000023c0)=ANY=[@ANYBLOB="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"], 0x13}}], 0x3, 0x20040001) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x20, 0x2, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9bee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x0) 1.94342985s ago: executing program 0 (id=3067): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000030425bd70000400000000000000", @ANYRES32=0x0, @ANYBLOB="00abdee14d800000240012890b000100627269646765000085e30280050025000100000005008b837b7aef00"], 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x2004c0c0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'vlan0\x00', &(0x7f0000000040)=@ethtool_perm_addr={0x4b, 0x3c, "5c83276f6c020086200db0e102ea1d0d85d4bc6900000000000000fbffff325b713940db001d40a2100000"}}) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000a40)=@broute={'broute\x00', 0x20, 0x1, 0x22e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000700], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/568]}, 0x2b0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f00000000c0)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfffc, 0x2}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYRESOCT], &(0x7f00000000c0)='GPL\x00', 0x1, 0x4f, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e24, @local}}, 0x30, 0x2}, &(0x7f0000000100)=0x90) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000030425bd70000400000000000000", @ANYRES32=0x0, @ANYBLOB="00abdee14d800000240012890b000100627269646765000085e30280050025000100000005008b837b7aef00"], 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x2004c0c0) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'vlan0\x00', &(0x7f0000000040)=@ethtool_perm_addr={0x4b, 0x3c, "5c83276f6c020086200db0e102ea1d0d85d4bc6900000000000000fbffff325b713940db001d40a2100000"}}) (async) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000a40)=@broute={'broute\x00', 0x20, 0x1, 0x22e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000700], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/568]}, 0x2b0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) bind$bt_l2cap(r4, &(0x7f00000000c0)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfffc, 0x2}, 0xe) (async) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000080), 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYRESOCT], &(0x7f00000000c0)='GPL\x00', 0x1, 0x4f, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e24, @local}}, 0x30, 0x2}, &(0x7f0000000100)=0x90) (async) 1.857214714s ago: executing program 0 (id=3068): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000ff000000000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007c00000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100}, 0x94) 1.765692407s ago: executing program 2 (id=3069): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000f0)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x20}}, 0x20004000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4389}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x74cf}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x74cf}, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000002140)=@filter={'filter\x00', 0x42, 0x4, 0x1350, 0xffffffff, 0x0, 0x0, 0x1220, 0xffffffff, 0xffffffff, 0x12b8, 0x12b8, 0x12b8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'pim6reg0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x1160, 0x1188, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0x4000000000000000}}}, @common=@unspec=@string={{0xc0}, {0x4a, 0xfff, 'fsm\x00', "bb306f1a10bd0ba5fc36156ddf3c07659aa78b676a6d24da2c2e72ebc70f03e8fc2a67ed8594a958e8857370ea75ec62940b08c939231d5f7b091abb9155d934d0c3647ab48351a4419075c76b38a28c62d4f8479aea58be8d5f986f780cffb042d909156e4389330510cf49bcfc2aa48d8c9406a773b7d93b72967ae6d1caa9", 0x31, 0x1, {0x8}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x13b0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) (async) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYRES8=r3], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x74}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r7, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r5}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r7, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r5}, 0x20) sendmmsg$inet6(r5, &(0x7f0000002440), 0x400, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r8 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r8, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000001540)=0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000005a80)=ANY=[@ANYBLOB="38000000030101040000000000000000020000002400018014000180080001"], 0x38}, 0x1, 0x0, 0x0, 0x2004c090}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x8e19b000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000001, 0x810, r4, 0x905f3000) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000001, 0x810, r4, 0x905f3000) r10 = socket(0x28, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000000)={r10}) 1.65487626s ago: executing program 4 (id=3070): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xcc26, 0xffb, 0xae, 0xb69, 0xbd, 0x81, 0x1, 0x3, 0x5, 0xa1, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0xfffffffa, 0x4, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x6, 0x1c00, 0xb, 0x8, 0xbed4, 0x2000008, 0x8000100, 0x3, 0x0, 0x8, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x5, 0x4, 0x7, 0x7, 0x10, 0x101, 0xd7, 0x1fa0860a, 0x200, 0xaa, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0x2, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x6, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x0, 0x401, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x4, 0x10, 0x6, 0x6, 0x3, 0x80000000, 0xfdffffff, 0x5a3, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x3, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x0, 0x401, 0x66cd, 0x10, 0x8000, 0x2008da0, 0x1fc, 0x0, 0x4]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3a0, 0xffffffff, 0xf0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r0, @ANYRES64=r1, @ANYRES32=r1], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) (async) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="98000000", @ANYRES16=r4, @ANYBLOB="04002abd7000fddbdf2503000000140002006970ae827265300000000000000000000000030073797a30000000001400020076657468315f746f5f6261746164760014000200766972745f7769666930000000230000000002006d616374746170300000000020000000140002006d6163766c616e3100000000000000000900010073797a300000000014006e65747063693000"/158], 0xfffffffffffffce7}}, 0x40851) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a31000000000800030000000006300004800800010000001234140002"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) (async) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b25, &(0x7f0000000000)={'wlan1\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r8, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x64, r9, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0xb}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x80}, {0x8, 0xb, 0x6}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r7, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r9, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3dc8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8001}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 1.653177498s ago: executing program 0 (id=3071): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) connect$unix(r0, &(0x7f0000000940)=@abs={0x1, 0x0, 0x4e23}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x100000001, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000002080)=@deltfilter={0x113c, 0x2d, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x6, 0x7}, {0x7, 0x9}, {0x0, 0xfff3}}, [@f_rsvp={{0x9}, {0x4}}, @f_rsvp6={{0xa}, {0x10fc, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x19}}, @TCA_RSVP_POLICE={0x10b0, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x0, 0xa7e4, 0x1, 0x40, 0x7, 0x9, 0x52, 0x3, 0x7, 0x8, 0xcec4, 0x5, 0x1, 0xffffb9ae, 0x0, 0x0, 0xbd, 0x7fff, 0x7fff, 0x0, 0x8001, 0x8, 0x5d02, 0xe9, 0x81, 0x9, 0x3a, 0x4, 0xd, 0x7, 0x6, 0x21, 0xc538, 0xe, 0x1, 0x6, 0x100, 0xffffffc0, 0x2, 0x81, 0x1, 0x1, 0x6, 0x310, 0x2, 0xfffffffc, 0xfffffffb, 0x2f, 0x8, 0x7, 0x9, 0x80, 0x8, 0xc, 0x3, 0x4, 0x81, 0x4, 0x4800000, 0x1631, 0x200, 0x2, 0x400, 0x10000, 0x1, 0x7, 0x4, 0x4, 0x3, 0x7, 0xff, 0x5, 0x40, 0x3ff, 0x401, 0x80, 0x9, 0xe164, 0xd, 0xa, 0x0, 0xe6, 0x7, 0x2, 0x8, 0x10000, 0x8, 0x3, 0x8001, 0x5, 0x9, 0x8, 0x3, 0x9bd, 0x3, 0x2, 0x6, 0x5, 0x3, 0x0, 0xffffffc8, 0x4, 0x2, 0x27d, 0x2, 0x2, 0x3, 0x6, 0xffff, 0x7, 0x3, 0x7fff, 0xf, 0x10000, 0x7fffffff, 0xffffffff, 0xbe6d, 0x0, 0xffffffff, 0x4, 0x80000001, 0x7, 0x800, 0x1, 0xff, 0xfffffffc, 0xfffeffff, 0xb, 0xf, 0x81, 0x4, 0x8, 0x3, 0x6, 0x7, 0x8, 0x9, 0x2e710435, 0x3, 0x1, 0x3, 0x0, 0xffffff7f, 0xc4, 0xfffffff6, 0x4, 0x4, 0x10000, 0x80000001, 0x1, 0x5, 0x0, 0xfffffff9, 0xb9c, 0x1, 0xf, 0x900, 0x8, 0x80000000, 0x9167, 0x5, 0x7, 0x7, 0x2e7, 0x1, 0x101, 0x7fff, 0xc, 0x101, 0x3, 0x80, 0x7, 0x6a335b25, 0x6, 0x5, 0xfffffffb, 0x9, 0x6, 0x800, 0x81, 0x9, 0x2, 0xd1c, 0x4, 0x6df3, 0x1, 0x7, 0x1000, 0xc36, 0xf038, 0x40, 0x8, 0xff, 0x3ff, 0x10, 0x5501, 0xffffffff, 0x2, 0x0, 0x0, 0x95, 0x5, 0x5, 0x6, 0xb221, 0x18, 0x822, 0x7, 0x54a29947, 0x3ff, 0x4, 0xfffffb15, 0x4459, 0x1000, 0x8, 0xfffffff9, 0x599, 0xe9, 0x4, 0x1, 0xfffffe01, 0xe, 0x1, 0xffff, 0x80, 0x2, 0x0, 0x5, 0xfffffffc, 0x1, 0x28, 0x7f, 0x9, 0x7, 0x40, 0x9, 0x800, 0x1d7e, 0x100, 0x72be, 0x0, 0x7, 0x34, 0xd61, 0x3, 0x7f, 0x80000001, 0x100a957, 0x8, 0xfffff76b, 0x8, 0xdd, 0x1, 0x5, 0xfffffffb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7fffffff, 0x56, 0x7, 0x6, 0x6, 0x3, 0xfffffff7, 0x2, 0x9, 0x678, 0x0, 0x3, 0x7, 0x8, 0x512, 0x5, 0xc, 0x1ff, 0x1, 0x1000, 0x0, 0x9, 0x8001, 0xffff, 0x1, 0x2, 0x8, 0x4, 0xc6, 0xd849ac8a, 0xbde, 0x4be, 0x5, 0x3, 0x1, 0xa6e, 0x5, 0x100f, 0x23, 0x0, 0x400, 0x7, 0x340, 0x6, 0x5, 0x3, 0x80000000, 0x400, 0x6, 0x8000, 0x3, 0x8, 0x81, 0xd4b3, 0x1, 0x181bcec2, 0x6, 0x0, 0x3, 0x8, 0x6, 0x400, 0x9, 0x1, 0x1, 0x4, 0x8, 0xf, 0x2, 0x6, 0xffffffff, 0x7fff, 0x7, 0x1e9, 0xfffff000, 0x7ff, 0x2, 0x5, 0x8, 0x5, 0x0, 0x5, 0x5, 0x7, 0x800, 0x1, 0x8, 0x4, 0x200, 0x5, 0xffff0000, 0x3, 0xfffffef4, 0x8000, 0x0, 0x0, 0x200, 0x2, 0x1, 0xf, 0x6, 0xffffff52, 0xffffffb3, 0x0, 0xec5, 0x21b, 0x9, 0x1, 0x2, 0x7, 0xfff, 0x7, 0x6, 0x252, 0x0, 0x1, 0x3ff, 0x7, 0x7, 0x800, 0xb, 0x9, 0x8, 0x6, 0x9, 0xf589, 0x9, 0xea, 0x8, 0x0, 0x0, 0xac, 0x9, 0xffff, 0xb4d, 0x8, 0x5, 0x8, 0x2, 0x0, 0x9, 0x4b7, 0x1000, 0x6, 0x9, 0xb152, 0xdbd, 0x7, 0x4, 0x4, 0xfffffff8, 0x8f9, 0x0, 0x9, 0x1c00000, 0x9, 0x10000000, 0x97, 0x6, 0x400, 0x341b, 0x8, 0xb, 0x1, 0xd43c, 0x9, 0x3f1, 0xbfd5, 0x96, 0x1, 0x1000, 0x9, 0xfff, 0x8, 0xfffffffa, 0x80000000, 0xff, 0x9, 0xaf, 0x5, 0x2, 0x9, 0x3, 0x3ff, 0x9, 0x2, 0x2a2b, 0x4, 0x10001, 0x91e8, 0x6, 0x800, 0xad, 0x101, 0xfffffff6, 0x2, 0x6, 0xff, 0x0, 0x6, 0x4b6, 0xfffffff9, 0xc2, 0xd07, 0x1ff, 0x7, 0x4, 0xf, 0xab3, 0x1000000, 0x6, 0xda, 0x657a, 0x5, 0xff25, 0x7, 0x0, 0x9, 0x0, 0x1, 0x2, 0x0, 0x56aa3517, 0x6, 0x2, 0x352c1b8c, 0x6c, 0x101, 0x8, 0x606d7fe4, 0xffffff81, 0x3, 0x1, 0x1, 0xf0, 0x83, 0xffffff7f, 0x1, 0x20000000, 0x9, 0xd7f9, 0x6, 0xfff, 0x1, 0xc8, 0x8, 0x8, 0x8, 0x2, 0x81, 0x6, 0x3, 0xffff, 0x80000000, 0x7, 0x2d5b]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x41, 0x4, 0x9, 0x200, 0x6, 0x7, 0x9, 0x7f, 0x0, 0x4, 0x2, 0x100, 0xfffffffc, 0x10, 0x5, 0x3, 0x6, 0x7, 0x4, 0x5240, 0x401, 0x551ec7a9, 0x5, 0x8, 0xc, 0x9, 0x8, 0xfffffff7, 0x8, 0x5, 0x5, 0x5c, 0x7fffffff, 0x80000000, 0x7fff, 0x0, 0x4f2, 0x7, 0x100, 0x1, 0xb0b, 0x80000001, 0xffffff00, 0x5, 0x6, 0x76f0, 0x807, 0x3, 0x7, 0x0, 0x626, 0x2, 0x0, 0x7f07, 0x2f, 0x80000000, 0xcb55, 0xa, 0x1, 0xc, 0x1, 0x7f, 0xb, 0x100, 0x101, 0x1, 0x5, 0x7, 0x4, 0x6, 0x80000001, 0x200, 0x4, 0x0, 0x9d, 0x1, 0x0, 0x1, 0x6, 0x10, 0x3, 0x10, 0x2cff, 0x81, 0x4, 0x0, 0x7, 0x101, 0x54, 0xda1, 0xc6fd, 0x7, 0x6, 0xfffffff1, 0x2, 0x80000001, 0x4, 0x0, 0x10, 0x2, 0x6e, 0x1, 0x6c6, 0xc, 0x19d, 0x5, 0x3, 0x2, 0xfffffff8, 0x3d9ada49, 0x5, 0x9, 0x4, 0xb641, 0x80000, 0x6, 0xf, 0x400, 0xe, 0xb, 0xfff, 0x4, 0x6, 0xeb, 0x3, 0x7, 0x0, 0x7f, 0x238, 0x7, 0x0, 0x3, 0x2, 0xe118, 0x8, 0xffffffff, 0x5, 0x0, 0xd530, 0x8, 0x7, 0x739, 0x6, 0x8, 0x5, 0x4, 0x6, 0x6, 0x9, 0x1, 0x3, 0x3ff, 0x7, 0x401, 0x9, 0x800, 0x4, 0x0, 0x1, 0x9, 0x800, 0xec, 0xcc0000, 0x32f1, 0x2, 0x7, 0x8, 0x9, 0x0, 0x7cc, 0x7fff, 0x0, 0x2, 0x3ff, 0x3d, 0x1, 0x4, 0x1, 0x2, 0x3, 0x3, 0x7, 0x5, 0xffffffff, 0x6, 0x2, 0x2, 0x1, 0x7, 0x8000, 0x2f9, 0x4260, 0x9, 0x2, 0x9d, 0x2, 0x1000, 0x9, 0x5, 0x8001, 0x3, 0x1ff, 0x9, 0x6, 0x7fffffff, 0x9, 0x9, 0xddf6, 0x7, 0xc6ed730, 0x0, 0x1, 0x3, 0xffff, 0xfff, 0x9, 0x7fffffff, 0x3ff, 0xff, 0xf7, 0x665, 0x7fff, 0x8, 0xffffffff, 0x0, 0x2, 0x800, 0xa, 0x1, 0x0, 0xfffffbff, 0x10001, 0x8, 0x3cef, 0xf4, 0x100, 0x800, 0x6, 0x5, 0xffff8000, 0x9, 0x7f, 0x9, 0xa, 0x3, 0x0, 0xb66e, 0x0, 0x4, 0x94, 0x2, 0xf, 0xe, 0xf16]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x0, 0x1, 0x6, 0x4, {0xb, 0x0, 0x0, 0x6, 0x7, 0x200}, {0x7, 0x1, 0x6, 0xe, 0x4, 0x10}, 0x6, 0xfae1, 0x1}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x400}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x2b, 0x2e, 0x1, 0x8, 0xfffffffb, 0x7, 0x6, 0x80000000, 0x7617, 0x9, 0x0, 0xd, 0x3, 0x2, 0x6, 0x1000, 0x1, 0x6, 0xfffffff7, 0x50f0e551, 0x10000, 0x1, 0x7, 0xfffeffff, 0xe5, 0x80, 0x7, 0x6, 0x4ac, 0x3, 0x4, 0x7f, 0x100, 0x40, 0x0, 0x200, 0x6, 0x5, 0x2, 0x3, 0x52e, 0x0, 0xf0, 0x9, 0x8, 0x1, 0x40, 0x7, 0x10, 0xffff8000, 0x6, 0x0, 0x2, 0xfffffc01, 0x3b36, 0x9, 0x6, 0x3f2d, 0x4, 0x6340, 0x5, 0x7, 0x4, 0x5f, 0x7, 0x3, 0x380, 0x8, 0x400, 0x6, 0x0, 0xa74, 0x4, 0x0, 0x4, 0x5, 0x4, 0x40, 0x0, 0x3, 0x0, 0x4, 0x0, 0x200, 0xfffff800, 0x98f, 0x3, 0x47, 0x1, 0x90, 0x9, 0x1, 0x5, 0x100, 0x0, 0x3, 0x6, 0x2, 0x8000, 0x1, 0xb9400, 0x4, 0x9, 0x4, 0x8, 0x9, 0x1, 0x0, 0xffffffff, 0x3, 0x71, 0x7, 0x8, 0x2c6, 0x8001, 0x8b, 0x3, 0x0, 0x2, 0x2, 0x2, 0x5, 0x3, 0xd163, 0x9, 0x1, 0x7b, 0x1, 0x0, 0x2, 0x2, 0x519289f0, 0xffffff7f, 0x3, 0x7, 0x3, 0x8001, 0x4, 0x8, 0x6c, 0x2, 0x7ff, 0x2, 0x8, 0x5, 0x100, 0x1, 0x7fff, 0x2, 0x8, 0x6, 0x0, 0xd, 0x3, 0x4, 0x81, 0x200, 0xea4, 0xfff, 0xfe, 0x2, 0x4, 0x100, 0x1, 0x7e6, 0xbf8, 0x80000001, 0xb, 0x5, 0x200, 0x2, 0x5, 0x3, 0x9, 0x1, 0xfffffffd, 0x7, 0x4, 0x80000000, 0xfffffffd, 0x80000000, 0x6, 0xc, 0xfffff800, 0x4, 0x8, 0xe290, 0x5, 0x6, 0x80, 0xcc2, 0x842, 0x1, 0x6, 0x1, 0x8001, 0x40, 0x3, 0x3a, 0xfffffff8, 0x1f4, 0x4, 0x800, 0x3, 0x1, 0xe9fe, 0xd, 0x8001, 0x8001, 0x4, 0xd099, 0x8, 0xa, 0x8, 0x6, 0x5, 0xff, 0x0, 0x9, 0xffffffff, 0x65, 0x9, 0xa145, 0x5, 0x7fff, 0x5dc, 0x6, 0x5, 0xfffffcab, 0x3, 0x9, 0x2, 0x447548ea, 0x40, 0x5, 0x80, 0x7f, 0x7, 0x10, 0x2, 0x2, 0x7fffffff, 0x1, 0x4, 0xfffffff9, 0x5, 0x2f6, 0x8, 0x8, 0x9, 0xe4, 0x81, 0x5, 0x3, 0x8cd7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x70000}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffff, 0x6, 0x1, 0x8e, 0x76cf, {0xec, 0x0, 0xd632, 0x800, 0x1bbd, 0x1}, {0x5, 0x2, 0x5, 0x204, 0x6, 0x3}, 0xdad, 0xa9, 0xf}}]}, @TCA_RSVP_DST={0x14, 0x2, @mcast1}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x7, 0xf}}, @TCA_RSVP_POLICE={0x10, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xa, 0xfff2}}]}}]}, 0x113c}, 0x1, 0x0, 0x0, 0x4000800}, 0x44) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e25, 0x419, @loopback, 0xfffffffa}, 0x1c) listen(r1, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$netlink(0x10, 0x3, 0x9) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r5) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES8=r2, @ANYRES16=r6, @ANYRES8=r5], 0x30}, 0x1, 0x0, 0x0, 0x48040}, 0x880) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000850000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b0ced4697c7b1259773570483cc6ec977659795ae85955ab1c8d37632ce0fa84062ef5d173e1997a7e278a8b1b701f6616a8b020a90e302b89f27bba0f36b57cd0b30aef433c0af6dd4ed5db"], 0x38}, 0x1, 0x0, 0x0, 0x4000094}, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x5, 0x0, 0x33ab37b7d47988ab, 0x0, 0x0, 0x0}, 0xfffffc62) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x8000002, 0x0, @remote, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200025bd7000fbdbdf253b0000000c009900ff0700003700000004008700040087000800cd000000040008009f00010000000800270002000000080057006113000008002600a80900000800270000000000050019010400000004008700"], 0x64}, 0x1, 0x0, 0x0, 0x2004c841}, 0x20000014) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000000)={0x44, "f91d0437613efc0b03cdf46ee84852ac39ca51a0236c1e38bd33a5b80401bb83ca4aa8090c702d4acd9c55b9c0c893d467d29bba243a842110722919d372d372aa3673f5d276610805818ed1eadae92d4aaff561fbb2a21ca0953b6f0d303632ece724070608b973c9e459ca72ae90e4048733179f91b856b9406494f7f56992"}) 1.546112693s ago: executing program 2 (id=3072): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x50, r3, 0x100, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_vlan\x00'}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004080}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x484, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x458, 0x2, [@TCA_BPF_FD={0x8, 0x6, r0}, @TCA_BPF_FLAGS={0x8, 0x8, 0xffffffff}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x4, 0x4c0a, 0x7ff, 0x9, 0x5, 0x661f, 0xce4, 0x5, 0xd1, 0x5, 0x2, 0x7, 0x0, 0x0, 0x8001, 0x9098, 0x7fffffff, 0x7fffffff, 0x0, 0x2, 0x34f, 0x3d7ed312, 0x3, 0x4, 0x5, 0x2, 0x7ff, 0xe7, 0x7, 0x7, 0x8, 0x3, 0xfffff47b, 0x998, 0x5, 0xfffffff7, 0xb, 0x7ff, 0xff, 0x1, 0x8, 0x5, 0x2b2, 0x7, 0x4, 0x6, 0x10, 0x3, 0x120, 0x8, 0x7, 0x8000, 0x80000000, 0x0, 0x4, 0x4000000, 0x200, 0x100, 0x7ff, 0x8, 0x8001, 0x9ef8, 0xfffffffe, 0x6, 0x7ff, 0xd, 0x401, 0x6, 0x8000, 0x13, 0x2, 0x5, 0x9, 0x3, 0xfffffff4, 0x7, 0x4, 0xe, 0x9, 0x5, 0x1, 0x0, 0xffff, 0x9, 0x2e, 0x90000000, 0x10000000, 0x3, 0x40000002, 0x1, 0x0, 0x0, 0x7f, 0x7, 0x7, 0xfffffffb, 0x1, 0x8, 0x5983, 0x4, 0x0, 0x1, 0xa, 0x2, 0x33b7, 0x5, 0x5, 0xa, 0x3, 0x35, 0x6, 0x0, 0xdf, 0x9, 0x3, 0x5, 0x5, 0x7, 0x3, 0xfffffff7, 0x3ce, 0x7, 0x7, 0x6, 0x10000, 0x9, 0xb, 0x0, 0x7, 0x3, 0x200, 0x5, 0x2f, 0xfffffffb, 0x9c7e, 0x6, 0x0, 0x4, 0x1, 0x6, 0x2, 0x0, 0x95, 0x4, 0x1, 0x89, 0x8, 0x0, 0x5e7c14df, 0x6, 0x4, 0x13c0, 0x3, 0x200, 0xddd3000, 0x40, 0x7, 0x80, 0x8, 0x80000000, 0x3f, 0x3, 0x2, 0xb4a9, 0x400, 0x60f, 0x8, 0x3, 0x3, 0xcba9, 0x7, 0x1, 0x9, 0xa3f0, 0x0, 0x5, 0x4, 0xfffffff8, 0x10001, 0x7, 0x1, 0x4f0a, 0xe, 0x81, 0x5, 0xffff, 0x1000001, 0x32c, 0x5, 0x5c, 0x6, 0x7, 0xa3, 0x0, 0x8001, 0xfffff255, 0x1, 0x5, 0x80000001, 0xa, 0x4, 0x78962c2e, 0xffff, 0x9, 0x8, 0x6, 0xff, 0x1, 0x10000, 0x5, 0x5, 0x6, 0x0, 0x1, 0x32, 0x8, 0x0, 0x7ff, 0x8, 0x2246, 0x10000, 0x8, 0x3, 0xc, 0x9, 0x6, 0x7, 0x1, 0x2, 0x3ef, 0x1, 0xadc2, 0x6, 0x0, 0x3, 0x5, 0x1, 0xb6, 0x7, 0x3, 0xfffffffc, 0x6, 0x3, 0x3ff, 0xd, 0x4, 0x6, 0x2a2, 0x5fd751c9, 0xfffffff3, 0x3, 0x9, 0x9, 0x7fffffff, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x2, 0x5, 0x4, 0x7fffffff, {0x3, 0x0, 0x5, 0xb, 0x2, 0x100}, {0x4, 0x2, 0xd, 0xb, 0x7}, 0x11, 0x2, 0x7}}]}]}}]}, 0x484}}, 0x0) 1.241602409s ago: executing program 1 (id=3073): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg0\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = getpid() syz_open_procfs$namespace(r2, &(0x7f0000000180)='ns/time_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r1, 0x215eb000) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e23, 0x800, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x220080c1, &(0x7f0000000040)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x1c) sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x406f413, 0x0) 1.123695428s ago: executing program 2 (id=3074): bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1e0000000000000005000000ef00e7ff04"], 0x50) r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000000)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x50, &(0x7f00000a2000)={0x0, 0x0}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_int(r1, 0x1, 0x30, 0x0, &(0x7f0000000b00)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090000000000feffffff0a00000008000300", @ANYRES32=r5, @ANYBLOB="0c005080050005"], 0x28}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newqdisc={0x154, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x128, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0xe, 0x80, 0x8, 0xe, 0x8, 0x8}}, @TCA_RED_STAB={0x104}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0x8}}]}}]}, 0x154}}, 0x0) 1.114709097s ago: executing program 4 (id=3075): syz_emit_ethernet(0x66, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0xffff, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x8e0}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0xfe}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x9}}}}}}}}, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd700000dcdf2503000000050002001c"], 0x24}, 0x1, 0x0, 0x0, 0x20040044}, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x439, 0x0, 0x40000000, {0x0, 0x0, 0xe403, r5}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x1b, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1830000075000000000000000500000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b703000003000000850000000600000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000006000000180100002020692500000000002020207b1af8ff00000000bfe79c000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xf8, &(0x7f0000000100)=""/248, 0x0, 0x2c}, 0x24) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000000308010100000000000000000480080006400000000008000840000000000800074069174f580000000005000300"], 0x38}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0x1}, 0x50) sendmsg$AUDIT_TTY_SET(r7, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x18, 0x3f9, 0x8, 0x70bd25, 0x25dfdbff, {0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r7}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r10, &(0x7f0000000080), 0x0}, 0x20) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000340), 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x80fe, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x4008, r6}, 0x18) 970.362923ms ago: executing program 4 (id=3076): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010003b15000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="40020000808200001800128008000100677470000c000280"], 0x40}}, 0x8000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r1, @ANYBLOB="8000260b0a0002000180c200000c00000c000e8005"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv4_newrule={0x2c, 0x1e, 0x1, 0x3, 0x2, {0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xe}, [@FRA_DST={0x8, 0x1, @rand_addr=0x64010102}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x42}, 0x4002810) 627.939072ms ago: executing program 0 (id=3077): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40002022) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_delroute={0x2c, 0x19, 0x1, 0x70bd27, 0x1000, {0x2, 0x18, 0x80, 0x0, 0x0, 0x3, 0xff, 0x0, 0x1900}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x38}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000014}, 0x4000040) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x2c, r4, 0x1, 0xfffffffd, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) 557.649126ms ago: executing program 4 (id=3078): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket(0x10, 0x803, 0x2) socket$kcm(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000019440)=[{&(0x7f0000000340)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed090f0000600000f3a1bc5603ca00000f7f89e3ff296aa1f6475322f000200000004a2471083ec6991778581acb6c0101ff00", 0x48}], 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r3) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) close(0x3) close(r0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x0) 149.437903ms ago: executing program 4 (id=3079): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x20c}, 0x1, 0x0, 0x0, 0x890}, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001000010825bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="804001000000010008001b000000000008000d000600"], 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r5, &(0x7f0000000400)={&(0x7f00000008c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x20) sendmsg$tipc(r5, &(0x7f00000000c0)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x0, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8811}, 0x40) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000100180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000880)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r7, 0x8970, &(0x7f0000000080)={'dummy0\x00', @ifru_flags=0x100}) r8 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r9, &(0x7f00000002c0)="b9ba48", 0x3) socket$kcm(0x2, 0xa, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 0s ago: executing program 0 (id=3080): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0xfe}]}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28}}}, &(0x7f00000003c0)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) kernel console output (not intermixed with test programs): nq: UDP 224.0.0.2:0 - no destination available [ 477.376867][T15372] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2233'. [ 477.733897][T15393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2239'. [ 477.796211][T15392] netlink: 'syz.2.2240': attribute type 4 has an invalid length. [ 477.799874][T15388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2239'. [ 477.810592][T15388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2239'. [ 477.965720][T15398] netlink: 'syz.4.2241': attribute type 4 has an invalid length. [ 478.203732][T15407] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2243'. [ 478.203782][T15407] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2243'. [ 478.249332][T15409] team_slave_0: left promiscuous mode [ 478.392751][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 478.395763][T15412] netlink: 810 bytes leftover after parsing attributes in process `syz.1.2243'. [ 479.295912][T15448] netlink: 'syz.3.2254': attribute type 11 has an invalid length. [ 479.432771][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 480.102569][T15468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2260'. [ 480.472732][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 480.773623][T15490] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2265'. [ 480.951895][T15493] bond10: (slave batadv0): Releasing active interface [ 481.305423][T15500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2269'. [ 481.305481][T15500] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2269'. [ 481.328510][T15502] netlink: 'syz.2.2268': attribute type 3 has an invalid length. [ 481.513136][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 482.030487][T15537] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 482.552733][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 482.610183][T15553] netlink: 'syz.2.2279': attribute type 4 has an invalid length. [ 482.776964][T15566] syzkaller0: entered promiscuous mode [ 482.786511][T15566] syzkaller0: entered allmulticast mode [ 482.875948][T15568] netlink: 'syz.0.2282': attribute type 3 has an invalid length. [ 482.969462][T15561] tipc: Enabled bearer , priority 0 [ 482.985462][T15560] tipc: Resetting bearer [ 483.061821][T15560] tipc: Disabling bearer [ 483.430840][T15591] sctp: [Deprecated]: syz.2.2289 (pid 15591) Use of struct sctp_assoc_value in delayed_ack socket option. [ 483.430840][T15591] Use struct sctp_sack_info instead [ 483.592909][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 483.891766][T15613] netlink: 'syz.3.2293': attribute type 3 has an invalid length. [ 483.936799][T15605] __nla_validate_parse: 7 callbacks suppressed [ 483.936859][T15605] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2291'. [ 484.081459][T15621] FAULT_INJECTION: forcing a failure. [ 484.081459][T15621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 484.081521][T15621] CPU: 1 UID: 0 PID: 15621 Comm: syz.2.2294 Not tainted syzkaller #0 PREEMPT(full) [ 484.081545][T15621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 484.081555][T15621] Call Trace: [ 484.081562][T15621] [ 484.081570][T15621] dump_stack_lvl+0xe8/0x150 [ 484.081602][T15621] should_fail_ex+0x410/0x560 [ 484.081639][T15621] _copy_from_user+0x2d/0xb0 [ 484.081679][T15621] ___sys_sendmsg+0x1c6/0x360 [ 484.081704][T15621] ? __lock_acquire+0x6df/0x2e50 [ 484.081728][T15621] ? __pfx____sys_sendmsg+0x10/0x10 [ 484.081782][T15621] ? __fget_files+0x2a/0x420 [ 484.081805][T15621] ? __fget_files+0x3a2/0x420 [ 484.081838][T15621] __x64_sys_sendmsg+0x1b1/0x290 [ 484.081864][T15621] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 484.081904][T15621] do_syscall_64+0x166/0x520 [ 484.081929][T15621] ? trace_irq_disable+0x3b/0x140 [ 484.081947][T15621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.081966][T15621] ? clear_bhb_loop+0x70/0xc0 [ 484.081988][T15621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.082006][T15621] RIP: 0033:0x7f9775d9e159 [ 484.082024][T15621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.082040][T15621] RSP: 002b:00007f9776d13028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 484.082061][T15621] RAX: ffffffffffffffda RBX: 00007f9776025fa0 RCX: 00007f9775d9e159 [ 484.082083][T15621] RDX: 0000000000028000 RSI: 0000200000006000 RDI: 0000000000000004 [ 484.082096][T15621] RBP: 00007f9776d13090 R08: 0000000000000000 R09: 0000000000000000 [ 484.082107][T15621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.082119][T15621] R13: 00007f9776026038 R14: 00007f9776025fa0 R15: 00007fff26259818 [ 484.082148][T15621] [ 484.082883][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 484.632733][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 484.908740][T15655] netlink: 'syz.4.2305': attribute type 11 has an invalid length. [ 484.908794][T15655] netlink: 'syz.4.2305': attribute type 4 has an invalid length. [ 484.908809][T15655] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2305'. [ 485.040953][T15660] FAULT_INJECTION: forcing a failure. [ 485.040953][T15660] name failslab, interval 1, probability 0, space 0, times 0 [ 485.041007][T15660] CPU: 1 UID: 0 PID: 15660 Comm: syz.2.2306 Not tainted syzkaller #0 PREEMPT(full) [ 485.041032][T15660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 485.041044][T15660] Call Trace: [ 485.041053][T15660] [ 485.041062][T15660] dump_stack_lvl+0xe8/0x150 [ 485.041097][T15660] should_fail_ex+0x410/0x560 [ 485.041133][T15660] ? __alloc_skb+0x1db/0x7a0 [ 485.041250][T15660] should_failslab+0xa8/0x100 [ 485.041284][T15660] ? __alloc_skb+0x1db/0x7a0 [ 485.041311][T15660] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 485.041342][T15660] ? __alloc_skb+0x18d/0x7a0 [ 485.041372][T15660] ? __alloc_skb+0x1db/0x7a0 [ 485.041409][T15660] __alloc_skb+0x1db/0x7a0 [ 485.041440][T15660] netlink_sendmsg+0x5d4/0xb40 [ 485.041526][T15660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.041558][T15660] ? apparmor_socket_sendmsg+0x98/0x360 [ 485.041648][T15660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.041673][T15660] sock_sendmsg_nosec+0x13a/0x180 [ 485.041704][T15660] ____sys_sendmsg+0x54e/0x850 [ 485.041734][T15660] ? __pfx_____sys_sendmsg+0x10/0x10 [ 485.041782][T15660] ? import_iovec+0x73/0xa0 [ 485.041810][T15660] ___sys_sendmsg+0x2a5/0x360 [ 485.041833][T15660] ? __lock_acquire+0x6df/0x2e50 [ 485.041860][T15660] ? __pfx____sys_sendmsg+0x10/0x10 [ 485.041920][T15660] ? __fget_files+0x2a/0x420 [ 485.041946][T15660] ? __fget_files+0x3a2/0x420 [ 485.041985][T15660] __x64_sys_sendmsg+0x1b1/0x290 [ 485.042006][T15660] ? sched_clock+0x41/0x60 [ 485.042059][T15660] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 485.042104][T15660] do_syscall_64+0x166/0x520 [ 485.042135][T15660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.042157][T15660] ? clear_bhb_loop+0x70/0xc0 [ 485.042183][T15660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.042204][T15660] RIP: 0033:0x7f9775d9e159 [ 485.042226][T15660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.042242][T15660] RSP: 002b:00007f9776d13028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 485.042265][T15660] RAX: ffffffffffffffda RBX: 00007f9776025fa0 RCX: 00007f9775d9e159 [ 485.042280][T15660] RDX: 0000000000028000 RSI: 0000200000006000 RDI: 0000000000000004 [ 485.042295][T15660] RBP: 00007f9776d13090 R08: 0000000000000000 R09: 0000000000000000 [ 485.042308][T15660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.042320][T15660] R13: 00007f9776026038 R14: 00007f9776025fa0 R15: 00007fff26259818 [ 485.042351][T15660] [ 485.325456][T15666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2307'. [ 485.325520][T15666] netlink: 'syz.1.2307': attribute type 21 has an invalid length. [ 485.407116][T15674] netlink: 'syz.0.2310': attribute type 3 has an invalid length. [ 485.664227][T15683] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2313'. [ 485.673591][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 485.673933][T15682] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 485.707293][T15683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2313'. [ 485.749793][T15685] sch_fq: defrate 2 ignored. [ 485.759158][T15685] syzkaller0: entered promiscuous mode [ 485.759202][T15685] syzkaller0: entered allmulticast mode [ 485.765531][T15685] tipc: Enabled bearer , priority 0 [ 485.793378][T15684] tipc: Resetting bearer [ 485.945675][T15684] tipc: Disabling bearer [ 485.985281][T15683] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2313'. [ 486.327245][T15704] netlink: 'syz.0.2323': attribute type 3 has an invalid length. [ 486.423484][T15706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2322'. [ 486.712815][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 486.731459][T15706] ip6gre3: entered promiscuous mode [ 486.731513][T15706] ip6gre3: entered allmulticast mode [ 486.750512][T15719] syzkaller1: entered promiscuous mode [ 486.751496][T15719] syzkaller1: entered allmulticast mode [ 486.768285][ T49] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 486.768563][ T49] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 486.794127][ T5621] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 486.927178][T15726] netlink: 'syz.0.2327': attribute type 2 has an invalid length. [ 486.935576][T15726] netlink: 'syz.0.2327': attribute type 1 has an invalid length. [ 486.943708][T15726] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2327'. [ 487.392979][ T5621] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 487.499919][T15751] FAULT_INJECTION: forcing a failure. [ 487.499919][T15751] name failslab, interval 1, probability 0, space 0, times 0 [ 487.519679][T15751] CPU: 0 UID: 0 PID: 15751 Comm: syz.2.2334 Not tainted syzkaller #0 PREEMPT(full) [ 487.519711][T15751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 487.519724][T15751] Call Trace: [ 487.519733][T15751] [ 487.519742][T15751] dump_stack_lvl+0xe8/0x150 [ 487.519780][T15751] should_fail_ex+0x410/0x560 [ 487.519818][T15751] should_failslab+0xa8/0x100 [ 487.519844][T15751] __kmalloc_noprof+0xfe/0x720 [ 487.519874][T15751] ? is_bpf_text_address+0x26/0x2b0 [ 487.519898][T15751] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 487.519929][T15751] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 487.519969][T15751] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 487.520010][T15751] genl_family_rcv_msg_doit+0xda/0x340 [ 487.520050][T15751] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 487.520089][T15751] ? apparmor_capable+0x126/0x170 [ 487.520119][T15751] ? bpf_lsm_capable+0x9/0x20 [ 487.520191][T15751] ? security_capable+0x7e/0x2c0 [ 487.520273][T15751] genl_rcv_msg+0x614/0x7a0 [ 487.520307][T15751] ? __pfx_genl_rcv_msg+0x10/0x10 [ 487.520333][T15751] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 487.520409][T15751] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 487.520454][T15751] ? __pfx_nl80211_post_doit+0x10/0x10 [ 487.520489][T15751] netlink_rcv_skb+0x226/0x4a0 [ 487.520515][T15751] ? __pfx_genl_rcv_msg+0x10/0x10 [ 487.520547][T15751] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 487.520590][T15751] ? down_read+0x2be/0x330 [ 487.520642][T15751] genl_rcv+0x28/0x40 [ 487.520668][T15751] netlink_unicast+0x7bd/0x940 [ 487.520703][T15751] netlink_sendmsg+0x813/0xb40 [ 487.520740][T15751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.520776][T15751] ? apparmor_socket_sendmsg+0x98/0x360 [ 487.520808][T15751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.520832][T15751] sock_sendmsg_nosec+0x13a/0x180 [ 487.520864][T15751] ____sys_sendmsg+0x54e/0x850 [ 487.520894][T15751] ? __pfx_____sys_sendmsg+0x10/0x10 [ 487.520927][T15751] ? import_iovec+0x73/0xa0 [ 487.520954][T15751] ___sys_sendmsg+0x2a5/0x360 [ 487.520975][T15751] ? __lock_acquire+0x6df/0x2e50 [ 487.521001][T15751] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.521065][T15751] ? __fget_files+0x2a/0x420 [ 487.521092][T15751] ? __fget_files+0x3a2/0x420 [ 487.521130][T15751] __x64_sys_sendmsg+0x1b1/0x290 [ 487.521156][T15751] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 487.521212][T15751] do_syscall_64+0x166/0x520 [ 487.521241][T15751] ? trace_irq_disable+0x3b/0x140 [ 487.521262][T15751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.521283][T15751] ? clear_bhb_loop+0x70/0xc0 [ 487.521308][T15751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.521330][T15751] RIP: 0033:0x7f9775d9e159 [ 487.521351][T15751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.521369][T15751] RSP: 002b:00007f9776d13028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.521393][T15751] RAX: ffffffffffffffda RBX: 00007f9776025fa0 RCX: 00007f9775d9e159 [ 487.521408][T15751] RDX: 0000000000028000 RSI: 0000200000006000 RDI: 0000000000000004 [ 487.521422][T15751] RBP: 00007f9776d13090 R08: 0000000000000000 R09: 0000000000000000 [ 487.521436][T15751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.521449][T15751] R13: 00007f9776026038 R14: 00007f9776025fa0 R15: 00007fff26259818 [ 487.521485][T15751] [ 487.533766][ T5621] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 487.755624][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 487.900510][T15760] syzkaller0: entered promiscuous mode [ 487.906344][T15760] syzkaller0: entered allmulticast mode [ 487.940977][T15760] tipc: Enabled bearer , priority 0 [ 487.967217][T15760] tipc: Resetting bearer [ 487.980076][T15758] tipc: Resetting bearer [ 488.056214][T15758] tipc: Disabling bearer [ 488.271692][T15774] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2340'. [ 488.272010][T15774] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2340'. [ 488.792878][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 488.880790][T15801] netlink: 'syz.2.2346': attribute type 3 has an invalid length. [ 489.214078][T15812] __nla_validate_parse: 30 callbacks suppressed [ 489.215064][T15812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2350'. [ 489.303335][T15812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2350'. [ 489.303397][T15812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2350'. [ 489.307390][T15812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2350'. [ 489.307412][T15812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2350'. [ 489.832748][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 490.292238][T15842] netlink: 165 bytes leftover after parsing attributes in process `syz.3.2358'. [ 490.694305][T15860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2364'. [ 490.694355][T15860] nbd: couldn't find a device at index 65546 [ 490.734870][T15860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2364'. [ 490.734917][T15860] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2364'. [ 490.872872][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 490.919516][T15872] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2367'. [ 490.999305][T15875] syzkaller0: entered promiscuous mode [ 490.999382][T15875] syzkaller0: entered allmulticast mode [ 491.112889][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 491.250036][T15884] macsec3: entered promiscuous mode [ 491.911913][T15924] xt_l2tp: v2 sid > 0xffff: 33554432 [ 491.917503][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 492.346210][ T31] audit: type=1804 audit(1788718275.196:9): pid=15946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2387" name="/newroot/466/cgroup.controllers" dev="tmpfs" ino=2409 res=1 errno=0 [ 492.373333][ T31] audit: type=1800 audit(1788718275.226:10): pid=15946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2387" name="cgroup.controllers" dev="tmpfs" ino=2409 res=0 errno=0 [ 492.417377][ T31] audit: type=1804 audit(1788718275.266:11): pid=15951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2387" name="/newroot/466/cgroup.controllers" dev="tmpfs" ino=2409 res=1 errno=0 [ 492.676498][T15952] bond8: option tlb_dynamic_lb: invalid value (128) [ 492.695818][T15952] bond8 (unregistering): Released all slaves [ 492.772470][T15955] netlink: 'syz.3.2389': attribute type 1 has an invalid length. [ 492.952730][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 492.985374][T15964] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 492.989085][T15971] netlink: 'syz.0.2394': attribute type 1 has an invalid length. [ 493.080942][T15975] netlink: 'syz.1.2393': attribute type 3 has an invalid length. [ 493.080990][T15975] netlink: 'syz.1.2393': attribute type 1 has an invalid length. [ 493.157118][T15971] bond14: entered promiscuous mode [ 493.157624][T15971] 8021q: adding VLAN 0 to HW filter on device bond14 [ 493.230566][T15976] 8021q: adding VLAN 0 to HW filter on device bond14 [ 493.233789][T15976] bond14: (slave gre3): The slave device specified does not support setting the MAC address [ 493.233823][T15976] bond14: (slave gre3): Setting fail_over_mac to active for active-backup mode [ 493.264088][T15976] bond14: (slave gre3): making interface the new active one [ 493.264143][T15976] gre3: entered promiscuous mode [ 493.277874][T15976] bond14: (slave gre3): Enslaving as an active interface with an up link [ 493.306982][T15980] bond14 (unregistering): (slave gre3): Releasing backup interface [ 493.316477][T15980] gre3: left promiscuous mode [ 493.326484][T15980] bond14 (unregistering): Released all slaves [ 493.513061][T15982] bond14: Invalid ad_actor_system MAC address. [ 493.513108][T15982] bond14: option ad_actor_system: invalid value (7) [ 493.529405][T15982] bond14 (unregistering): Released all slaves [ 493.992877][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 494.174096][T16033] netlink: 'syz.1.2404': attribute type 1 has an invalid length. [ 494.245270][T16031] __nla_validate_parse: 47 callbacks suppressed [ 494.251771][T16031] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2407'. [ 494.525679][T16048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2411'. [ 494.561001][T16048] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2411'. [ 494.636070][T16047] FAULT_INJECTION: forcing a failure. [ 494.636070][T16047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 494.636131][T16047] CPU: 1 UID: 0 PID: 16047 Comm: syz.2.2410 Not tainted syzkaller #0 PREEMPT(full) [ 494.636156][T16047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 494.636168][T16047] Call Trace: [ 494.636181][T16047] [ 494.636190][T16047] dump_stack_lvl+0xe8/0x150 [ 494.636225][T16047] should_fail_ex+0x410/0x560 [ 494.636262][T16047] _copy_from_user+0x2d/0xb0 [ 494.636287][T16047] ___sys_recvmsg+0x173/0x5a0 [ 494.636319][T16047] ? __pfx____sys_recvmsg+0x10/0x10 [ 494.636349][T16047] ? lock_acquire+0x115/0x350 [ 494.636403][T16047] do_recvmmsg+0x31a/0x7f0 [ 494.636437][T16047] ? __pfx_do_recvmmsg+0x10/0x10 [ 494.636474][T16047] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 494.636507][T16047] ? __fget_files+0x3a2/0x420 [ 494.636547][T16047] __x64_sys_recvmmsg+0x198/0x250 [ 494.636574][T16047] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 494.636612][T16047] do_syscall_64+0x166/0x520 [ 494.636650][T16047] ? trace_irq_disable+0x3b/0x140 [ 494.636671][T16047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.636692][T16047] ? clear_bhb_loop+0x70/0xc0 [ 494.636718][T16047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.636739][T16047] RIP: 0033:0x7f9775d9e159 [ 494.636760][T16047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.636779][T16047] RSP: 002b:00007f9776d13028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 494.636802][T16047] RAX: ffffffffffffffda RBX: 00007f9776025fa0 RCX: 00007f9775d9e159 [ 494.636818][T16047] RDX: 0000000000000f00 RSI: 0000200000000400 RDI: 0000000000000004 [ 494.636831][T16047] RBP: 00007f9776d13090 R08: 0000000000000000 R09: 0000000000000000 [ 494.636844][T16047] R10: 0000004c42bb4f92 R11: 0000000000000246 R12: 0000000000000001 [ 494.636858][T16047] R13: 00007f9776026038 R14: 00007f9776025fa0 R15: 00007fff26259818 [ 494.636892][T16047] [ 494.660934][T16059] syzkaller0: entered promiscuous mode [ 494.660956][T16059] syzkaller0: entered allmulticast mode [ 494.763865][ T49] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 494.818934][T16065] netlink: 'syz.1.2414': attribute type 3 has an invalid length. [ 494.960083][T16055] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 495.032731][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 495.776654][T16110] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2424'. [ 495.821919][T16110] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 495.890335][T16110] bond8 (unregistering): Released all slaves [ 496.039885][T16118] FAULT_INJECTION: forcing a failure. [ 496.039885][T16118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.039949][T16118] CPU: 0 UID: 0 PID: 16118 Comm: syz.2.2426 Not tainted syzkaller #0 PREEMPT(full) [ 496.039973][T16118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 496.039983][T16118] Call Trace: [ 496.039990][T16118] [ 496.039997][T16118] dump_stack_lvl+0xe8/0x150 [ 496.040029][T16118] should_fail_ex+0x410/0x560 [ 496.040062][T16118] _copy_from_user+0x2d/0xb0 [ 496.040084][T16118] ___sys_recvmsg+0x173/0x5a0 [ 496.040111][T16118] ? __pfx____sys_recvmsg+0x10/0x10 [ 496.040147][T16118] ? lock_acquire+0x115/0x350 [ 496.040196][T16118] do_recvmmsg+0x31a/0x7f0 [ 496.040226][T16118] ? __pfx_do_recvmmsg+0x10/0x10 [ 496.040259][T16118] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 496.040286][T16118] ? __fget_files+0x3a2/0x420 [ 496.040321][T16118] __x64_sys_recvmmsg+0x198/0x250 [ 496.040345][T16118] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 496.040378][T16118] do_syscall_64+0x166/0x520 [ 496.040402][T16118] ? trace_irq_disable+0x3b/0x140 [ 496.040420][T16118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.040438][T16118] ? clear_bhb_loop+0x70/0xc0 [ 496.040461][T16118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.040479][T16118] RIP: 0033:0x7f9775d9e159 [ 496.040497][T16118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.040513][T16118] RSP: 002b:00007f9776d13028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 496.040534][T16118] RAX: ffffffffffffffda RBX: 00007f9776025fa0 RCX: 00007f9775d9e159 [ 496.040548][T16118] RDX: 0000000000000f00 RSI: 0000200000000400 RDI: 0000000000000004 [ 496.040560][T16118] RBP: 00007f9776d13090 R08: 0000000000000000 R09: 0000000000000000 [ 496.040572][T16118] R10: 0000004c42bb4f92 R11: 0000000000000246 R12: 0000000000000001 [ 496.040583][T16118] R13: 00007f9776026038 R14: 00007f9776025fa0 R15: 00007fff26259818 [ 496.040619][T16118] [ 496.072777][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 496.519456][T16139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2431'. [ 496.649848][T16146] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 497.112730][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 497.246918][T16171] FAULT_INJECTION: forcing a failure. [ 497.246918][T16171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 497.246972][T16171] CPU: 1 UID: 0 PID: 16171 Comm: syz.2.2440 Not tainted syzkaller #0 PREEMPT(full) [ 497.246995][T16171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 497.247007][T16171] Call Trace: [ 497.247016][T16171] [ 497.247024][T16171] dump_stack_lvl+0xe8/0x150 [ 497.247059][T16171] should_fail_ex+0x410/0x560 [ 497.247093][T16171] _copy_from_user+0x2d/0xb0 [ 497.247115][T16171] ___sys_recvmsg+0x173/0x5a0 [ 497.247144][T16171] ? __pfx____sys_recvmsg+0x10/0x10 [ 497.247171][T16171] ? lock_acquire+0x115/0x350 [ 497.247220][T16171] do_recvmmsg+0x31a/0x7f0 [ 497.247250][T16171] ? __pfx_do_recvmmsg+0x10/0x10 [ 497.247284][T16171] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 497.247319][T16171] ? __fget_files+0x3a2/0x420 [ 497.247354][T16171] __x64_sys_recvmmsg+0x198/0x250 [ 497.247379][T16171] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 497.247413][T16171] do_syscall_64+0x166/0x520 [ 497.247440][T16171] ? trace_irq_disable+0x3b/0x140 [ 497.247458][T16171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.247479][T16171] ? clear_bhb_loop+0x70/0xc0 [ 497.247503][T16171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.247522][T16171] RIP: 0033:0x7f9775d9e159 [ 497.247541][T16171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.247558][T16171] RSP: 002b:00007f9776d13028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 497.247580][T16171] RAX: ffffffffffffffda RBX: 00007f9776025fa0 RCX: 00007f9775d9e159 [ 497.247602][T16171] RDX: 0000000000000f00 RSI: 0000200000000400 RDI: 0000000000000004 [ 497.247615][T16171] RBP: 00007f9776d13090 R08: 0000000000000000 R09: 0000000000000000 [ 497.247627][T16171] R10: 0000004c42bb4f92 R11: 0000000000000246 R12: 0000000000000001 [ 497.247640][T16171] R13: 00007f9776026038 R14: 00007f9776025fa0 R15: 00007fff26259818 [ 497.247671][T16171] [ 497.296676][T16168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2439'. [ 497.382228][T16178] netlink: 272 bytes leftover after parsing attributes in process `syz.4.2439'. [ 497.382253][T16178] openvswitch: netlink: Flow key attr not present in new flow. [ 497.763935][T16190] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2443'. [ 497.918832][T16204] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2444'. [ 498.153351][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 498.428155][T16219] syzkaller0: entered promiscuous mode [ 498.434139][T16219] syzkaller0: entered allmulticast mode [ 498.481419][T16231] netlink: 'syz.4.2452': attribute type 1 has an invalid length. [ 498.645993][T16243] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2452'. [ 498.745776][T16232] bond14: (slave veth7): Enslaving as an active interface with a down link [ 498.814143][T16237] bond14: (slave veth9): Enslaving as an active interface with a down link [ 498.943688][T16248] FAULT_INJECTION: forcing a failure. [ 498.943688][T16248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.943751][T16248] CPU: 0 UID: 0 PID: 16248 Comm: syz.1.2455 Not tainted syzkaller #0 PREEMPT(full) [ 498.943775][T16248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 498.943785][T16248] Call Trace: [ 498.943792][T16248] [ 498.943799][T16248] dump_stack_lvl+0xe8/0x150 [ 498.943835][T16248] should_fail_ex+0x410/0x560 [ 498.943868][T16248] _copy_from_user+0x2d/0xb0 [ 498.943889][T16248] ___sys_recvmsg+0x173/0x5a0 [ 498.943916][T16248] ? __pfx____sys_recvmsg+0x10/0x10 [ 498.943942][T16248] ? lock_acquire+0x115/0x350 [ 498.943990][T16248] do_recvmmsg+0x31a/0x7f0 [ 498.944018][T16248] ? __pfx_do_recvmmsg+0x10/0x10 [ 498.944059][T16248] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 498.944088][T16248] ? __fget_files+0x3a2/0x420 [ 498.944122][T16248] __x64_sys_recvmmsg+0x198/0x250 [ 498.944146][T16248] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 498.944178][T16248] do_syscall_64+0x166/0x520 [ 498.944203][T16248] ? trace_irq_disable+0x3b/0x140 [ 498.944220][T16248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.944239][T16248] ? clear_bhb_loop+0x70/0xc0 [ 498.944262][T16248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.944280][T16248] RIP: 0033:0x7ff2e519e159 [ 498.944298][T16248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.944314][T16248] RSP: 002b:00007ff2e5fb7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 498.944336][T16248] RAX: ffffffffffffffda RBX: 00007ff2e5425fa0 RCX: 00007ff2e519e159 [ 498.944349][T16248] RDX: 0000000000000f00 RSI: 0000200000000400 RDI: 0000000000000004 [ 498.944361][T16248] RBP: 00007ff2e5fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 498.944373][T16248] R10: 0000004c42bb4f92 R11: 0000000000000246 R12: 0000000000000001 [ 498.944385][T16248] R13: 00007ff2e5426038 R14: 00007ff2e5425fa0 R15: 00007ffe26fe5d28 [ 498.944415][T16248] [ 499.192797][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 499.777280][T16272] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2461'. [ 499.808209][T16277] netlink: 'syz.2.2462': attribute type 23 has an invalid length. [ 499.976488][T16284] xt_hashlimit: size too large, truncated to 1048576 [ 500.072871][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 500.232740][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 500.499665][T16305] sctp: [Deprecated]: syz.3.2467 (pid 16305) Use of struct sctp_assoc_value in delayed_ack socket option. [ 500.499665][T16305] Use struct sctp_sack_info instead [ 500.718508][T16312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2470'. [ 500.797933][T16307] FAULT_INJECTION: forcing a failure. [ 500.797933][T16307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.797975][T16307] CPU: 1 UID: 0 PID: 16307 Comm: syz.4.2468 Not tainted syzkaller #0 PREEMPT(full) [ 500.798000][T16307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 500.798011][T16307] Call Trace: [ 500.798020][T16307] [ 500.798028][T16307] dump_stack_lvl+0xe8/0x150 [ 500.798060][T16307] should_fail_ex+0x410/0x560 [ 500.798102][T16307] _copy_from_user+0x2d/0xb0 [ 500.798124][T16307] ___sys_recvmsg+0x173/0x5a0 [ 500.798151][T16307] ? __pfx____sys_recvmsg+0x10/0x10 [ 500.798177][T16307] ? lock_acquire+0x115/0x350 [ 500.798225][T16307] do_recvmmsg+0x31a/0x7f0 [ 500.798254][T16307] ? __pfx_do_recvmmsg+0x10/0x10 [ 500.798287][T16307] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 500.798315][T16307] ? __fget_files+0x3a2/0x420 [ 500.798349][T16307] __x64_sys_recvmmsg+0x198/0x250 [ 500.798373][T16307] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 500.798405][T16307] do_syscall_64+0x166/0x520 [ 500.798430][T16307] ? trace_irq_disable+0x3b/0x140 [ 500.798448][T16307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.798467][T16307] ? clear_bhb_loop+0x70/0xc0 [ 500.798490][T16307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.798508][T16307] RIP: 0033:0x7f579739e159 [ 500.798526][T16307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.798542][T16307] RSP: 002b:00007f579820b028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 500.798563][T16307] RAX: ffffffffffffffda RBX: 00007f5797625fa0 RCX: 00007f579739e159 [ 500.798577][T16307] RDX: 0000000000000f00 RSI: 0000200000000400 RDI: 0000000000000004 [ 500.798589][T16307] RBP: 00007f579820b090 R08: 0000000000000000 R09: 0000000000000000 [ 500.798600][T16307] R10: 0000004c42bb4f92 R11: 0000000000000246 R12: 0000000000000001 [ 500.798611][T16307] R13: 00007f5797626038 R14: 00007f5797625fa0 R15: 00007fff4d7b1008 [ 500.798638][T16307] [ 500.855597][T16314] netlink: 'syz.0.2469': attribute type 3 has an invalid length. [ 500.895324][T16312] 8021q: adding VLAN 0 to HW filter on device bond8 [ 501.083345][T16320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2470'. [ 501.114333][T16312] 8021q: adding VLAN 0 to HW filter on device bond9 [ 501.116365][T16312] bond8: (slave bond9): Enslaving as an active interface with an up link [ 501.197065][T16320] bond8 (unregistering): (slave bond9): Releasing backup interface [ 501.210528][T16320] bond8 (unregistering): Released all slaves [ 501.272856][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 501.612793][T16342] netlink: 'syz.3.2476': attribute type 1 has an invalid length. [ 501.612845][T16342] netlink: 'syz.3.2476': attribute type 2 has an invalid length. [ 501.646545][T16342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2476'. [ 502.312733][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 502.341531][T16345] x_tables: duplicate underflow at hook 1 [ 503.352865][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 503.609513][T16390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2487'. [ 503.620509][T16393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2487'. [ 503.715638][T16394] netlink: 'syz.3.2488': attribute type 1 has an invalid length. [ 503.717399][T16394] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2488'. [ 504.178893][T16414] netlink: 'syz.3.2491': attribute type 4 has an invalid length. [ 504.203121][T16414] netlink: 'syz.3.2491': attribute type 4 has an invalid length. [ 504.292976][T16410] bond8: Unable to set peer notification delay as MII monitoring is disabled [ 504.328577][T16426] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 504.393291][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 504.437853][T16410] bond8 (unregistering): Released all slaves [ 504.613339][T16415] batman_adv: batadv0: Adding interface: gretap2 [ 504.614642][T16415] batman_adv: batadv0: Interface activated: gretap2 [ 504.825048][T16429] FAULT_INJECTION: forcing a failure. [ 504.825048][T16429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.825491][T16429] CPU: 1 UID: 0 PID: 16429 Comm: syz.3.2493 Not tainted syzkaller #0 PREEMPT(full) [ 504.825515][T16429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 504.825525][T16429] Call Trace: [ 504.825532][T16429] [ 504.825539][T16429] dump_stack_lvl+0xe8/0x150 [ 504.825569][T16429] should_fail_ex+0x410/0x560 [ 504.825601][T16429] _copy_from_user+0x2d/0xb0 [ 504.825622][T16429] ___sys_recvmsg+0x173/0x5a0 [ 504.825650][T16429] ? __pfx____sys_recvmsg+0x10/0x10 [ 504.825675][T16429] ? lock_acquire+0x115/0x350 [ 504.825722][T16429] do_recvmmsg+0x31a/0x7f0 [ 504.825750][T16429] ? __pfx_do_recvmmsg+0x10/0x10 [ 504.825782][T16429] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 504.825809][T16429] ? __fget_files+0x3a2/0x420 [ 504.825843][T16429] __x64_sys_recvmmsg+0x198/0x250 [ 504.825866][T16429] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 504.825899][T16429] do_syscall_64+0x166/0x520 [ 504.825924][T16429] ? trace_irq_disable+0x3b/0x140 [ 504.825941][T16429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.825960][T16429] ? clear_bhb_loop+0x70/0xc0 [ 504.825982][T16429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.826000][T16429] RIP: 0033:0x7f64b099e159 [ 504.826028][T16429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.826044][T16429] RSP: 002b:00007f64b18ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 504.826065][T16429] RAX: ffffffffffffffda RBX: 00007f64b0c25fa0 RCX: 00007f64b099e159 [ 504.826079][T16429] RDX: 0000000000000f00 RSI: 0000200000000400 RDI: 0000000000000004 [ 504.826091][T16429] RBP: 00007f64b18ec090 R08: 0000000000000000 R09: 0000000000000000 [ 504.826103][T16429] R10: 0000004c42bb4f92 R11: 0000000000000246 R12: 0000000000000001 [ 504.826114][T16429] R13: 00007f64b0c26038 R14: 00007f64b0c25fa0 R15: 00007ffcaf0323f8 [ 504.826144][T16429] [ 505.291025][T16439] FAULT_INJECTION: forcing a failure. [ 505.291025][T16439] name failslab, interval 1, probability 0, space 0, times 0 [ 505.291140][T16439] CPU: 1 UID: 0 PID: 16439 Comm: syz.2.2495 Not tainted syzkaller #0 PREEMPT(full) [ 505.291166][T16439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 505.291178][T16439] Call Trace: [ 505.291187][T16439] [ 505.291196][T16439] dump_stack_lvl+0xe8/0x150 [ 505.291232][T16439] should_fail_ex+0x410/0x560 [ 505.291268][T16439] ? __alloc_skb+0x1db/0x7a0 [ 505.291299][T16439] should_failslab+0xa8/0x100 [ 505.291324][T16439] ? __alloc_skb+0x1db/0x7a0 [ 505.291351][T16439] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 505.291382][T16439] ? __alloc_skb+0x18d/0x7a0 [ 505.291418][T16439] ? __alloc_skb+0x1db/0x7a0 [ 505.291455][T16439] __alloc_skb+0x1db/0x7a0 [ 505.291490][T16439] netlink_ack+0x136/0xb30 [ 505.291522][T16439] ? __pfx_genl_rcv_msg+0x10/0x10 [ 505.291572][T16439] netlink_rcv_skb+0x2a4/0x4a0 [ 505.291598][T16439] ? __pfx_genl_rcv_msg+0x10/0x10 [ 505.291631][T16439] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 505.291673][T16439] ? down_read+0x2be/0x330 [ 505.291699][T16439] genl_rcv+0x28/0x40 [ 505.291727][T16439] netlink_unicast+0x7bd/0x940 [ 505.291763][T16439] netlink_sendmsg+0x813/0xb40 [ 505.291798][T16439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 505.291832][T16439] ? apparmor_socket_sendmsg+0x18b/0x360 [ 505.291866][T16439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 505.291887][T16439] sock_sendmsg_nosec+0x13a/0x180 [ 505.291915][T16439] ____sys_sendmsg+0x54e/0x850 [ 505.291943][T16439] ? __pfx_____sys_sendmsg+0x10/0x10 [ 505.291976][T16439] ? import_iovec+0x73/0xa0 [ 505.292003][T16439] ___sys_sendmsg+0x2a5/0x360 [ 505.292022][T16439] ? __lock_acquire+0x6df/0x2e50 [ 505.292049][T16439] ? __pfx____sys_sendmsg+0x10/0x10 [ 505.292110][T16439] ? __fget_files+0x2a/0x420 [ 505.292136][T16439] ? __fget_files+0x3a2/0x420 [ 505.292174][T16439] __x64_sys_sendmsg+0x1b1/0x290 [ 505.292199][T16439] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 505.292247][T16439] do_syscall_64+0x166/0x520 [ 505.292274][T16439] ? trace_irq_disable+0x3b/0x140 [ 505.292294][T16439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.292315][T16439] ? clear_bhb_loop+0x70/0xc0 [ 505.292341][T16439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.292361][T16439] RIP: 0033:0x7f9775d9e159 [ 505.292381][T16439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.292400][T16439] RSP: 002b:00007f9776d13028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 505.292424][T16439] RAX: ffffffffffffffda RBX: 00007f9776025fa0 RCX: 00007f9775d9e159 [ 505.292439][T16439] RDX: 0000000020000000 RSI: 0000200000000bc0 RDI: 0000000000000005 [ 505.292478][T16439] RBP: 00007f9776d13090 R08: 0000000000000000 R09: 0000000000000000 [ 505.292492][T16439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.292505][T16439] R13: 00007f9776026038 R14: 00007f9776025fa0 R15: 00007fff26259818 [ 505.292573][T16439] [ 505.433191][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 505.435082][T16443] bond0: (slave veth1_to_bond): Device is not bonding slave [ 505.435102][T16443] bond0: option active_slave: invalid value (veth1_to_bond) [ 505.658637][T16445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2498'. [ 505.716022][T16447] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2498'. [ 505.716312][T16447] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2498'. [ 505.716520][T16447] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2498'. [ 505.716734][T16447] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2498'. [ 505.716931][T16447] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2498'. [ 505.717127][T16447] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2498'. [ 505.717325][T16447] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2498'. [ 505.741843][T16447] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2498'. [ 505.847900][T16447] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2498'. [ 505.877039][T16460] tipc: Enabling of bearer rejected, failed to enable media [ 506.154408][T16467] xt_CT: No such helper "snmp_trap" [ 506.400519][T16475] syzkaller0: entered promiscuous mode [ 506.408748][T16475] syzkaller0: entered allmulticast mode [ 506.472740][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 506.478115][T16480] tipc: Enabled bearer , priority 0 [ 506.488101][T16485] tipc: Resetting bearer [ 506.598682][T16495] FAULT_INJECTION: forcing a failure. [ 506.598682][T16495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 506.613438][T16495] CPU: 0 UID: 0 PID: 16495 Comm: syz.3.2510 Not tainted syzkaller #0 PREEMPT(full) [ 506.613469][T16495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 506.613482][T16495] Call Trace: [ 506.613491][T16495] [ 506.613500][T16495] dump_stack_lvl+0xe8/0x150 [ 506.613537][T16495] should_fail_ex+0x410/0x560 [ 506.613575][T16495] _copy_from_user+0x2d/0xb0 [ 506.613598][T16495] kstrtouint_from_user+0xd6/0x180 [ 506.613632][T16495] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 506.613672][T16495] ? lock_acquire+0x115/0x350 [ 506.613700][T16495] proc_fail_nth_write+0x8e/0x210 [ 506.613764][T16495] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 506.613804][T16495] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 506.613835][T16495] vfs_write+0x296/0xba0 [ 506.613875][T16495] ? __pfx_vfs_write+0x10/0x10 [ 506.613906][T16495] ? __fget_files+0x2a/0x420 [ 506.613937][T16495] ? __fget_files+0x3a2/0x420 [ 506.613961][T16495] ? __fget_files+0x2a/0x420 [ 506.613998][T16495] ksys_write+0x150/0x270 [ 506.614048][T16495] ? __pfx_ksys_write+0x10/0x10 [ 506.614091][T16495] do_syscall_64+0x166/0x520 [ 506.614121][T16495] ? trace_irq_disable+0x3b/0x140 [ 506.614142][T16495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.614162][T16495] ? clear_bhb_loop+0x70/0xc0 [ 506.614188][T16495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.614208][T16495] RIP: 0033:0x7f64b095e98e [ 506.614228][T16495] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 506.614247][T16495] RSP: 002b:00007f64b18ebfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 506.614271][T16495] RAX: ffffffffffffffda RBX: 00007f64b18ec6c0 RCX: 00007f64b095e98e [ 506.614287][T16495] RDX: 0000000000000001 RSI: 00007f64b18ec0a0 RDI: 0000000000000004 [ 506.614300][T16495] RBP: 00007f64b18ec090 R08: 0000000000000000 R09: 0000000000000000 [ 506.614312][T16495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.614324][T16495] R13: 00007f64b0c26038 R14: 00007f64b0c25fa0 R15: 00007ffcaf0323f8 [ 506.614358][T16495] [ 507.023291][T16473] tipc: Resetting bearer [ 507.061740][T16513] netlink: 'syz.0.2512': attribute type 23 has an invalid length. [ 507.107640][T16473] tipc: Disabling bearer [ 507.147403][T16516] No such timeout policy "s" [ 507.156398][T16516] netlink: Failed to associated timeout policy 's' [ 507.205243][T16519] SET target dimension over the limit! [ 507.317091][T16526] tipc: Enabling of bearer rejected, failed to enable media [ 507.512719][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 508.139736][T16559] syzkaller0: entered promiscuous mode [ 508.153254][T16559] syzkaller0: entered allmulticast mode [ 508.552830][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 508.796896][T16594] netlink: 'syz.4.2532': attribute type 23 has an invalid length. [ 508.869239][T16592] syzkaller1: entered promiscuous mode [ 508.878148][T16592] syzkaller1: entered allmulticast mode [ 508.984174][T16594] No such timeout policy "s" [ 508.984216][T16594] netlink: Failed to associated timeout policy 's' [ 509.158160][T16606] xt_CT: No such helper "netbios-ns" [ 509.291777][T16612] bond8: entered promiscuous mode [ 509.292474][T16612] 8021q: adding VLAN 0 to HW filter on device bond8 [ 509.519956][T16622] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 509.592835][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 509.632345][T16622] xt_CT: No such helper "netbios-ns" [ 509.640639][T16631] bridge0: entered promiscuous mode [ 510.040765][T16645] netlink: 'syz.1.2546': attribute type 3 has an invalid length. [ 510.633540][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 511.189036][T16660] __nla_validate_parse: 135 callbacks suppressed [ 511.189100][T16660] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2550'. [ 511.467081][T16666] tipc: Enabled bearer , priority 0 [ 511.492584][T16667] syzkaller0: entered promiscuous mode [ 511.497344][T16667] syzkaller0: entered allmulticast mode [ 511.605450][T16662] tipc: Resetting bearer [ 511.672722][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 511.684465][T16662] tipc: Disabling bearer [ 511.692207][T16681] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 512.020131][T16691] xt_connbytes: Forcing CT accounting to be enabled [ 512.035701][T16691] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 512.239443][T16704] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2564'. [ 512.239499][T16704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2564'. [ 512.590100][T16716] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2565'. [ 512.590158][T16716] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2565'. [ 512.590175][T16716] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2565'. [ 512.620998][T16729] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2565'. [ 512.621043][T16729] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2565'. [ 512.621084][T16729] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2565'. [ 512.712717][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 512.970743][ T5620] block nbd4: Receive control failed (result -32) [ 512.971488][ T5620] block nbd4: Receive control failed (result -32) [ 513.358486][T16745] netlink: 'syz.2.2570': attribute type 4 has an invalid length. [ 513.358530][T16745] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2570'. [ 513.442436][T16754] netlink: 'syz.3.2572': attribute type 1 has an invalid length. [ 513.752889][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 513.773648][T16754] 8021q: adding VLAN 0 to HW filter on device bond8 [ 514.056277][T16790] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 514.139353][T16794] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 514.792776][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 515.832722][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 516.872816][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 517.354284][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 517.478715][T16855] syzkaller0: entered promiscuous mode [ 517.484537][T16855] syzkaller0: entered allmulticast mode [ 517.611182][T16857] sctp: [Deprecated]: syz.2.2596 (pid 16857) Use of struct sctp_assoc_value in delayed_ack socket option. [ 517.611182][T16857] Use struct sctp_sack_info instead [ 517.678598][T16861] __nla_validate_parse: 8 callbacks suppressed [ 517.678655][T16861] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2595'. [ 517.686722][T16861] netlink: 'syz.4.2595': attribute type 62 has an invalid length. [ 517.825638][T16871] IPVS: set_ctl: invalid protocol: 640 0.32.0.0:8192 [ 517.912732][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 517.962447][T16889] netlink: 'syz.3.2599': attribute type 13 has an invalid length. [ 517.993263][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 518.059198][T16864] macsec2: entered promiscuous mode [ 518.059243][T16864] hsr0: entered promiscuous mode [ 518.499243][T16889] netlink: 'syz.3.2599': attribute type 13 has an invalid length. [ 518.533303][ T8462] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 518.612384][T16889] netlink: 'syz.3.2599': attribute type 13 has an invalid length. [ 518.635963][ T8462] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 518.815768][T16895] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 518.952865][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 519.268614][T16932] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2609'. [ 519.276987][T16932] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 519.417811][T16933] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2607'. [ 519.570871][T16939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2611'. [ 519.720580][T16939] ip6gre4: entered promiscuous mode [ 519.727856][T16939] ip6gre4: entered allmulticast mode [ 519.835220][T16895] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 519.858481][T11628] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 519.858736][T11628] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 519.885333][ T5621] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 519.992748][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 520.063213][ T8442] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 521.011895][T17003] netlink: 'syz.0.2621': attribute type 4 has an invalid length. [ 521.014487][T17005] netlink: 'syz.0.2621': attribute type 4 has an invalid length. [ 521.033099][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 521.468815][T17013] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.469359][T17013] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.072732][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 523.112816][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 523.599630][T16981] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 523.612016][T17023] netlink: 'syz.2.2624': attribute type 12 has an invalid length. [ 523.832975][ C1] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 523.833036][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 523.867435][T17036] netlink: 'syz.0.2629': attribute type 29 has an invalid length. [ 523.867496][T17036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2629'. [ 523.872198][T17036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2629'. [ 524.022324][T17046] geneve8: entered promiscuous mode [ 524.035078][T17046] geneve8: entered allmulticast mode [ 524.152714][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 524.845930][T17065] syzkaller0: tun_chr_ioctl cmd 35108 [ 525.112251][T17068] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2636'. [ 525.192774][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 526.232713][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 527.100483][T17048] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 527.272846][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 527.736864][T17113] netlink: 'syz.3.2651': attribute type 3 has an invalid length. [ 527.778409][T17109] FAULT_INJECTION: forcing a failure. [ 527.778409][T17109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.778469][T17109] CPU: 0 UID: 0 PID: 17109 Comm: syz.2.2649 Not tainted syzkaller #0 PREEMPT(full) [ 527.778496][T17109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 527.778508][T17109] Call Trace: [ 527.778518][T17109] [ 527.778526][T17109] dump_stack_lvl+0xe8/0x150 [ 527.778563][T17109] should_fail_ex+0x410/0x560 [ 527.778602][T17109] _copy_from_user+0x2d/0xb0 [ 527.778626][T17109] ___sys_recvmsg+0x173/0x5a0 [ 527.778657][T17109] ? __pfx____sys_recvmsg+0x10/0x10 [ 527.778687][T17109] ? lock_acquire+0x115/0x350 [ 527.778742][T17109] do_recvmmsg+0x31a/0x7f0 [ 527.778776][T17109] ? __pfx_do_recvmmsg+0x10/0x10 [ 527.778817][T17109] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 527.778851][T17109] ? __fget_files+0x3a2/0x420 [ 527.778891][T17109] __x64_sys_recvmmsg+0x198/0x250 [ 527.778919][T17109] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 527.778956][T17109] do_syscall_64+0x166/0x520 [ 527.778984][T17109] ? trace_irq_disable+0x3b/0x140 [ 527.779004][T17109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.779025][T17109] ? clear_bhb_loop+0x70/0xc0 [ 527.779050][T17109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.779071][T17109] RIP: 0033:0x7f9775d9e159 [ 527.779091][T17109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.779108][T17109] RSP: 002b:00007f9776d13028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 527.779132][T17109] RAX: ffffffffffffffda RBX: 00007f9776025fa0 RCX: 00007f9775d9e159 [ 527.779147][T17109] RDX: 0000000000000f00 RSI: 0000200000000400 RDI: 0000000000000004 [ 527.779160][T17109] RBP: 00007f9776d13090 R08: 0000000000000000 R09: 0000000000000000 [ 527.779172][T17109] R10: 0000004c42bb4f92 R11: 0000000000000246 R12: 0000000000000002 [ 527.779185][T17109] R13: 00007f9776026038 R14: 00007f9776025fa0 R15: 00007fff26259818 [ 527.779220][T17109] [ 527.829251][T17113] netlink: 'syz.3.2651': attribute type 3 has an invalid length. [ 528.312854][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 528.554466][T17143] tipc: Enabled bearer , priority 0 [ 528.555199][T17145] syzkaller0: entered promiscuous mode [ 528.555218][T17145] syzkaller0: entered allmulticast mode [ 528.769710][T17150] syzkaller0: mtu less than device minimum [ 528.800787][T17153] bridge7: entered promiscuous mode [ 529.019112][T17165] syz.2.2664: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 529.019270][T17165] CPU: 1 UID: 0 PID: 17165 Comm: syz.2.2664 Not tainted syzkaller #0 PREEMPT(full) [ 529.019292][T17165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 529.019301][T17165] Call Trace: [ 529.019309][T17165] [ 529.019317][T17165] dump_stack_lvl+0xe8/0x150 [ 529.019354][T17165] warn_alloc+0x24d/0x270 [ 529.019383][T17165] ? kasan_save_track+0x4f/0x80 [ 529.019401][T17165] ? kasan_save_track+0x3e/0x80 [ 529.019421][T17165] ? __pfx_warn_alloc+0x10/0x10 [ 529.019444][T17165] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 529.019463][T17165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.019499][T17165] __vmalloc_node_range_noprof+0x127/0x1540 [ 529.019545][T17165] ? rcu_is_watching+0x16/0xb0 [ 529.019605][T17165] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 529.019629][T17165] ? __kmalloc_cache_noprof+0x321/0x600 [ 529.019655][T17165] ? __kmalloc_cache_noprof+0x14d/0x600 [ 529.019680][T17165] ? xskq_create+0x56/0x220 [ 529.019777][T17165] xskq_create+0x148/0x220 [ 529.019801][T17165] ? xsk_init_queue+0x8a/0xe0 [ 529.019835][T17165] xsk_init_queue+0x8a/0xe0 [ 529.019860][T17165] xsk_setsockopt+0x52a/0x960 [ 529.019885][T17165] ? __pfx_xsk_setsockopt+0x10/0x10 [ 529.019907][T17165] ? __pfx_aa_sk_perm+0x10/0x10 [ 529.019961][T17165] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 529.019982][T17165] ? __pfx_xsk_setsockopt+0x10/0x10 [ 529.020005][T17165] do_sock_setsockopt+0x17c/0x1b0 [ 529.020029][T17165] __x64_sys_setsockopt+0x13d/0x1b0 [ 529.020053][T17165] do_syscall_64+0x166/0x520 [ 529.020078][T17165] ? trace_irq_disable+0x3b/0x140 [ 529.020097][T17165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.020115][T17165] ? clear_bhb_loop+0x70/0xc0 [ 529.020138][T17165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.020156][T17165] RIP: 0033:0x7f9775d9e159 [ 529.020174][T17165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.020189][T17165] RSP: 002b:00007f9776cf2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 529.020209][T17165] RAX: ffffffffffffffda RBX: 00007f9776026090 RCX: 00007f9775d9e159 [ 529.020223][T17165] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 529.020234][T17165] RBP: 00007f9775e35024 R08: 0000000000000004 R09: 0000000000000000 [ 529.020245][T17165] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.020256][T17165] R13: 00007f9776026128 R14: 00007f9776026090 R15: 00007fff26259818 [ 529.020287][T17165] [ 529.020306][T17165] Mem-Info: [ 529.020315][T17165] active_anon:8991 inactive_anon:5 isolated_anon:0 [ 529.020315][T17165] active_file:384 inactive_file:43391 isolated_file:0 [ 529.020315][T17165] unevictable:22 dirty:91 writeback:0 [ 529.020315][T17165] slab_reclaimable:11443 slab_unreclaimable:168153 [ 529.020315][T17165] mapped:29893 shmem:1232 pagetables:1296 [ 529.020315][T17165] sec_pagetables:0 bounce:0 [ 529.020315][T17165] kernel_misc_reclaimable:0 [ 529.020315][T17165] free:1237748 free_pcp:20808 free_cma:0 [ 529.020365][T17165] Node 0 active_anon:35964kB inactive_anon:20kB active_file:1536kB inactive_file:173364kB unevictable:88kB isolated(anon):0kB isolated(file):0kB mapped:119572kB dirty:364kB writeback:0kB shmem:4928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15208kB pagetables:5068kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 529.020415][T17165] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 529.020463][T17165] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 529.020515][T17165] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 529.020550][T17165] Node 0 DMA32 free:986228kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:35964kB inactive_anon:20kB active_file:1536kB inactive_file:173364kB unevictable:88kB writepending:364kB zspages:0kB present:3129332kB managed:2546700kB mlocked:88kB bounce:0kB free_pcp:83232kB local_pcp:37796kB free_cma:0kB [ 529.020605][T17165] lowmem_reserve[]: 0 0 0 0 0 [ 529.024845][T17165] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 529.024897][T17165] lowmem_reserve[]: 0 0 0 0 0 [ 529.024930][T17165] Node 1 Normal free:3949404kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 529.024983][T17165] lowmem_reserve[]: 0 0 0 0 0 [ 529.025016][T17165] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 529.025125][T17165] Node 0 DMA32: 928*4kB (ME) 378*8kB (M) 173*16kB (UM) 173*32kB (ME) 145*64kB (UME) 57*128kB (UME) 17*256kB (UM) 12*512kB (UE) 14*1024kB (UME) 8*2048kB (UM) 223*4096kB (UM) = 986240kB [ 529.025275][T17165] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 529.025367][T17165] Node 1 Normal: 3*4kB (UM) 6*8kB (UM) 12*16kB (UM) 5*32kB (UM) 11*64kB (UM) 4*128kB (UM) 3*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 962*4096kB (M) = 3949404kB [ 529.025513][T17165] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 529.025543][T17165] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 529.025559][T17165] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 529.025573][T17165] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 529.025588][T17165] 45003 total pagecache pages [ 529.025595][T17165] 0 pages in swap cache [ 529.025601][T17165] Free swap = 124996kB [ 529.025608][T17165] Total swap = 124996kB [ 529.025616][T17165] 2097051 pages RAM [ 529.025622][T17165] 0 pages HighMem/MovableOnly [ 529.025629][T17165] 428760 pages reserved [ 529.025635][T17165] 0 pages cma reserved [ 529.070910][T17174] syzkaller0: entered promiscuous mode [ 529.070933][T17174] syzkaller0: entered allmulticast mode [ 529.119662][T17163] tipc: Enabled bearer , priority 0 [ 529.179829][T17166] tipc: Resetting bearer [ 529.192527][T17168] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2664'. [ 529.378575][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 529.724283][ T31] audit: type=1107 audit(1788718312.566:12): pid=17186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ÎÏùJíA]1HÏUÃd!l-Þ§a€]*è¸èa®ýï þŠ"þ§¥¸à>o>ñð3ðI{|Ô+ÀUÞz÷q±Gõ~((c‡à^MöÂñ‰ý@Zxp±ðçàRÚ:À~vàa:†=Aˆöm—Û”è5ŽÜÒ®)£.?:¹==4pO\‘2”¤ ÊÑùž¢ú`' [ 529.772517][T17160] tipc: Resetting bearer [ 529.856602][T17160] tipc: Disabling bearer [ 529.896882][T17164] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 530.079858][T17196] FAULT_INJECTION: forcing a failure. [ 530.079858][T17196] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.079924][T17196] CPU: 1 UID: 0 PID: 17196 Comm: syz.3.2666 Not tainted syzkaller #0 PREEMPT(full) [ 530.079948][T17196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 530.079958][T17196] Call Trace: [ 530.079965][T17196] [ 530.079972][T17196] dump_stack_lvl+0xe8/0x150 [ 530.080005][T17196] should_fail_ex+0x410/0x560 [ 530.080038][T17196] _copy_from_user+0x2d/0xb0 [ 530.080059][T17196] ___sys_recvmsg+0x173/0x5a0 [ 530.080087][T17196] ? __pfx____sys_recvmsg+0x10/0x10 [ 530.080112][T17196] ? lock_acquire+0x115/0x350 [ 530.080158][T17196] do_recvmmsg+0x31a/0x7f0 [ 530.080187][T17196] ? __pfx_do_recvmmsg+0x10/0x10 [ 530.080217][T17196] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 530.080245][T17196] ? __fget_files+0x3a2/0x420 [ 530.080278][T17196] __x64_sys_recvmmsg+0x198/0x250 [ 530.080302][T17196] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 530.080334][T17196] do_syscall_64+0x166/0x520 [ 530.080358][T17196] ? trace_irq_disable+0x3b/0x140 [ 530.080375][T17196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.080394][T17196] ? clear_bhb_loop+0x70/0xc0 [ 530.080417][T17196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.080435][T17196] RIP: 0033:0x7f64b099e159 [ 530.080453][T17196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.080469][T17196] RSP: 002b:00007f64b18ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 530.080490][T17196] RAX: ffffffffffffffda RBX: 00007f64b0c25fa0 RCX: 00007f64b099e159 [ 530.080504][T17196] RDX: 0000000000000f00 RSI: 0000200000000400 RDI: 0000000000000004 [ 530.080516][T17196] RBP: 00007f64b18ec090 R08: 0000000000000000 R09: 0000000000000000 [ 530.080528][T17196] R10: 0000004c42bb4f92 R11: 0000000000000246 R12: 0000000000000002 [ 530.080539][T17196] R13: 00007f64b0c26038 R14: 00007f64b0c25fa0 R15: 00007ffcaf0323f8 [ 530.080569][T17196] [ 530.383051][T17218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2670'. [ 530.393011][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 530.549200][T17226] netlink: 'syz.3.2673': attribute type 34 has an invalid length. [ 530.549242][T17226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2673'. [ 530.628239][T17235] netlink: 'syz.3.2673': attribute type 34 has an invalid length. [ 530.628287][T17235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2673'. [ 530.729680][T17226] bond9: option lacp_strict: invalid value (64) [ 530.747655][T17226] bond9 (unregistering): Released all slaves [ 530.895041][T17235] bond9: option lacp_strict: invalid value (64) [ 530.906142][T17235] bond9 (unregistering): Released all slaves [ 531.327832][T17270] lo: entered promiscuous mode [ 531.338395][T17270] tunl0: entered promiscuous mode [ 531.344778][T17270] gre0: entered promiscuous mode [ 531.353493][T17270] erspan0: entered promiscuous mode [ 531.360514][T17270] ip_vti0: entered promiscuous mode [ 531.366374][T17270] ip6_vti0: entered promiscuous mode [ 531.372510][T17270] sit0: entered promiscuous mode [ 531.381862][T17270] ip6tnl0: entered promiscuous mode [ 531.391782][T17270] ip6gre0: entered promiscuous mode [ 531.398820][T17270] syz_tun: entered promiscuous mode [ 531.404794][T17270] ip6gretap0: entered promiscuous mode [ 531.410890][T17270] bridge0: entered promiscuous mode [ 531.417450][T17270] bond0: entered promiscuous mode [ 531.425018][T17270] bond_slave_0: entered promiscuous mode [ 531.431055][T17270] bond_slave_1: entered promiscuous mode [ 531.437196][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 531.446142][T17270] team0: entered promiscuous mode [ 531.451363][T17270] team_slave_0: entered promiscuous mode [ 531.459136][T17270] team_slave_1: entered promiscuous mode [ 531.465688][T17270] nlmon0: entered promiscuous mode [ 531.478927][T17270] veth0: entered promiscuous mode [ 531.479397][T17270] veth1: entered promiscuous mode [ 531.479818][T17270] wg0: entered promiscuous mode [ 531.480217][T17270] wg2: entered promiscuous mode [ 531.499182][T17270] veth0_to_bridge: entered promiscuous mode [ 531.499997][T17270] veth1_to_bridge: entered promiscuous mode [ 531.515040][T17270] veth0_to_bond: entered promiscuous mode [ 531.521575][T17270] veth1_to_bond: entered promiscuous mode [ 531.528144][T17270] veth0_to_team: entered promiscuous mode [ 531.534717][T17270] veth1_to_team: entered promiscuous mode [ 531.541232][T17270] veth0_to_batadv: entered promiscuous mode [ 531.548090][T17270] batadv_slave_0: entered promiscuous mode [ 531.554627][T17270] veth1_to_batadv: entered promiscuous mode [ 531.561429][T17270] batadv_slave_1: entered promiscuous mode [ 531.568043][T17270] xfrm0: entered promiscuous mode [ 531.573749][T17270] veth0_to_hsr: entered promiscuous mode [ 531.580401][T17270] veth1_to_hsr: entered promiscuous mode [ 531.660231][T17280] FAULT_INJECTION: forcing a failure. [ 531.660231][T17280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.660305][T17280] CPU: 1 UID: 0 PID: 17280 Comm: syz.2.2683 Not tainted syzkaller #0 PREEMPT(full) [ 531.660330][T17280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 531.660342][T17280] Call Trace: [ 531.660350][T17280] [ 531.660357][T17280] dump_stack_lvl+0xe8/0x150 [ 531.660389][T17280] should_fail_ex+0x410/0x560 [ 531.660420][T17280] _copy_from_user+0x2d/0xb0 [ 531.660442][T17280] ___sys_recvmsg+0x173/0x5a0 [ 531.660469][T17280] ? __pfx____sys_recvmsg+0x10/0x10 [ 531.660495][T17280] ? lock_acquire+0x115/0x350 [ 531.660542][T17280] do_recvmmsg+0x31a/0x7f0 [ 531.660571][T17280] ? __pfx_do_recvmmsg+0x10/0x10 [ 531.660603][T17280] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 531.660631][T17280] ? __fget_files+0x3a2/0x420 [ 531.660671][T17280] __x64_sys_recvmmsg+0x198/0x250 [ 531.660695][T17280] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 531.660727][T17280] do_syscall_64+0x166/0x520 [ 531.660751][T17280] ? trace_irq_disable+0x3b/0x140 [ 531.660768][T17280] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.660787][T17280] ? clear_bhb_loop+0x70/0xc0 [ 531.660809][T17280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.660827][T17280] RIP: 0033:0x7f9775d9e159 [ 531.660846][T17280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.660861][T17280] RSP: 002b:00007f9776d13028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 531.660890][T17280] RAX: ffffffffffffffda RBX: 00007f9776025fa0 RCX: 00007f9775d9e159 [ 531.660904][T17280] RDX: 0000000000000f00 RSI: 0000200000000400 RDI: 0000000000000004 [ 531.660916][T17280] RBP: 00007f9776d13090 R08: 0000000000000000 R09: 0000000000000000 [ 531.660928][T17280] R10: 0000004c42bb4f92 R11: 0000000000000246 R12: 0000000000000002 [ 531.660940][T17280] R13: 00007f9776026038 R14: 00007f9776025fa0 R15: 00007fff26259818 [ 531.660970][T17280] [ 532.038132][T17291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2685'. [ 532.076809][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 532.113908][T17298] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2686'. [ 532.141853][T17291] IPv6: sit2: Disabled Multicast RS [ 532.187880][T17300] netlink: 'syz.0.2684': attribute type 1 has an invalid length. [ 532.198888][T17302] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2686'. [ 532.469339][T17318] netlink: 'syz.2.2689': attribute type 32 has an invalid length. [ 532.469392][T17318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2689'. [ 532.477428][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 532.514696][T17321] openvswitch: netlink: Missing valid actions attribute. [ 532.514762][T17321] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 532.534514][T17311] veth7: entered allmulticast mode [ 532.547407][T17311] bond14: (slave veth7): Enslaving as an active interface with a down link [ 532.577867][T17287] bond14: (slave veth0_to_bond): making interface the new active one [ 532.588312][T17287] bond14: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 532.590761][T17318] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 532.689681][T17325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 532.691335][T17325] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2691'. [ 533.127487][T17339] netlink: 'syz.0.2695': attribute type 1 has an invalid length. [ 533.191594][T17339] 8021q: adding VLAN 0 to HW filter on device bond15 [ 533.201356][T17343] ip_vti0: left promiscuous mode [ 533.232164][T17343] 8021q: adding VLAN 0 to HW filter on device bond15 [ 533.249414][T17343] bond15: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 533.250280][T17343] bond15: (slave ip_vti0): Error -95 calling set_mac_address [ 533.344266][T17345] netlink: 'syz.1.2697': attribute type 3 has an invalid length. [ 533.512756][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 533.557244][T17351] netlink: 'syz.1.2700': attribute type 3 has an invalid length. [ 533.770990][T17356] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 534.363418][T17365] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2703'. [ 534.552881][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 534.563441][T17369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2703'. [ 534.942226][T17384] syzkaller0: entered promiscuous mode [ 534.942279][T17384] syzkaller0: entered allmulticast mode [ 535.234761][ T31] audit: type=1804 audit(1788718318.086:13): pid=17395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2708" name="/newroot/564/cgroup.controllers" dev="tmpfs" ino=2924 res=1 errno=0 [ 535.269455][ T31] audit: type=1800 audit(1788718318.116:14): pid=17395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2708" name="cgroup.controllers" dev="tmpfs" ino=2924 res=0 errno=0 [ 535.446418][T17402] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 535.592726][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 535.920898][T17435] netlink: 'syz.1.2716': attribute type 4 has an invalid length. [ 535.946589][T17435] netlink: 'syz.1.2716': attribute type 4 has an invalid length. [ 536.131448][T17441] netlink: 'syz.0.2718': attribute type 10 has an invalid length. [ 536.131451][T17442] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2719'. [ 536.131839][T17441] : left promiscuous mode [ 536.153622][T17441] : entered promiscuous mode [ 536.159168][T17441] team0: Port device  added [ 536.443364][T17450] tc action pedit unable to extract header offset for header type (0x5) [ 536.443411][T17450] tc action pedit unable to extract header offset for header type (0x5) [ 536.443441][T17450] tc action pedit unable to extract header offset for header type (0x5) [ 536.443456][T17450] tc action pedit unable to extract header offset for header type (0x5) [ 536.444938][T17450] tc action pedit unable to extract header offset for header type (0x5) [ 536.444962][T17450] tc action pedit unable to extract header offset for header type (0x5) [ 536.444980][T17450] tc action pedit unable to extract header offset for header type (0x5) [ 536.444997][T17450] tc action pedit unable to extract header offset for header type (0x5) [ 536.445014][T17450] tc action pedit unable to extract header offset for header type (0x5) [ 536.445031][T17450] tc action pedit unable to extract header offset for header type (0x5) [ 536.445059][T17450] 0: reclassify loop, rule prio 0, protocol 800 [ 536.553206][T17457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2723'. [ 536.586578][T17458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2723'. [ 536.632781][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 537.380494][T17499] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2731'. [ 537.672708][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 537.952317][T17487] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2730'. [ 538.650308][T17520] SET target dimension over the limit! [ 538.712678][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 539.251407][T17502] infiniband syz0: set active [ 539.251514][T17502] infiniband syz0: added ipvlan1 [ 539.324533][T17548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2745'. [ 539.357601][T17548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2745'. [ 539.358700][T17548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2745'. [ 539.389614][T17548] __nla_validate_parse: 1 callbacks suppressed [ 539.389951][T17548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2745'. [ 539.390240][T17548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2745'. [ 539.390526][T17502] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 539.390558][T17502] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 539.390594][T17502] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 539.664734][T17502] RDS/IB: syz0: added [ 539.692456][T17502] smc: adding ib device syz0 with port count 1 [ 539.692788][T17502] smc: ib device syz0 port 1 has pnetid SYZ2 (user defined) [ 539.752696][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 539.777307][T17557] netlink: 'syz.1.2749': attribute type 1 has an invalid length. [ 539.915371][T17557] 8021q: adding VLAN 0 to HW filter on device bond8 [ 539.980637][T17556] bridge8: entered promiscuous mode [ 540.036715][T17556] bond8: (slave bridge8): Enslaving as an active interface with an up link [ 540.058377][T17552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2747'. [ 540.411941][T17580] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2756'. [ 540.422239][T17578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2755'. [ 540.491241][T17578] 8021q: adding VLAN 0 to HW filter on device bond9 [ 540.685936][T17595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2760'. [ 540.701295][T17584] 8021q: adding VLAN 0 to HW filter on device bond10 [ 540.703901][T17584] bond9: (slave bond10): Enslaving as an active interface with an up link [ 540.717398][T17584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2755'. [ 540.747986][T17595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2760'. [ 540.768072][T17584] bond9 (unregistering): (slave bond10): Releasing backup interface [ 540.786033][T17584] bond9 (unregistering): Released all slaves [ 540.793064][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 541.173978][ T8442] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 541.356874][T17616] nbd: must specify a size in bytes for the device [ 541.474586][ T9978] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 541.833012][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 541.913370][ T8442] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 542.370842][T17652] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2773'. [ 542.432291][T17654] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2773'. [ 542.555948][ T9978] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 542.556303][ T9978] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 542.872870][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 542.931309][T17671] veth11: entered allmulticast mode [ 542.939249][T17671] team0: Port device veth11 added [ 543.094979][ T8462] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 543.914460][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 544.399271][T17718] __nla_validate_parse: 7 callbacks suppressed [ 544.405731][T17718] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2791'. [ 544.428011][T17710] FAULT_INJECTION: forcing a failure. [ 544.428011][T17710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 544.428101][T17710] CPU: 0 UID: 0 PID: 17710 Comm: syz.3.2788 Not tainted syzkaller #0 PREEMPT(full) [ 544.428122][T17710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 544.428133][T17710] Call Trace: [ 544.428141][T17710] [ 544.428149][T17710] dump_stack_lvl+0xe8/0x150 [ 544.428182][T17710] should_fail_ex+0x410/0x560 [ 544.428220][T17710] _copy_from_user+0x2d/0xb0 [ 544.428240][T17710] ___sys_recvmsg+0x173/0x5a0 [ 544.428268][T17710] ? __pfx____sys_recvmsg+0x10/0x10 [ 544.428294][T17710] ? lock_acquire+0x115/0x350 [ 544.428341][T17710] do_recvmmsg+0x31a/0x7f0 [ 544.428370][T17710] ? __pfx_do_recvmmsg+0x10/0x10 [ 544.428403][T17710] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 544.428431][T17710] ? __fget_files+0x3a2/0x420 [ 544.428466][T17710] __x64_sys_recvmmsg+0x198/0x250 [ 544.428490][T17710] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 544.428522][T17710] do_syscall_64+0x166/0x520 [ 544.428547][T17710] ? trace_irq_disable+0x3b/0x140 [ 544.428565][T17710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.428584][T17710] ? clear_bhb_loop+0x70/0xc0 [ 544.428607][T17710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.428624][T17710] RIP: 0033:0x7f64b099e159 [ 544.428642][T17710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.428659][T17710] RSP: 002b:00007f64b18ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 544.428680][T17710] RAX: ffffffffffffffda RBX: 00007f64b0c25fa0 RCX: 00007f64b099e159 [ 544.428694][T17710] RDX: 0000000000000f00 RSI: 0000200000000400 RDI: 0000000000000004 [ 544.428707][T17710] RBP: 00007f64b18ec090 R08: 0000000000000000 R09: 0000000000000000 [ 544.428718][T17710] R10: 0000004c42bb4f92 R11: 0000000000000246 R12: 0000000000000002 [ 544.428730][T17710] R13: 00007f64b0c26038 R14: 00007f64b0c25fa0 R15: 00007ffcaf0323f8 [ 544.428760][T17710] [ 544.792399][T17728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2792'. [ 544.792443][T17728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2792'. [ 544.814194][T17728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2792'. [ 544.823234][T17728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2792'. [ 544.889638][T17737] netlink: 'syz.1.2792': attribute type 3 has an invalid length. [ 544.952801][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 545.258127][T17759] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2802'. [ 545.338736][T17759] dummy0 (unregistering): left allmulticast mode [ 545.338872][T17759] bridge0: port 1(dummy0) entered disabled state [ 545.992703][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 546.377396][T17785] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 546.391201][T17775] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2807'. [ 546.392937][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 546.398934][T17775] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2807'. [ 546.509353][T17788] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2811'. [ 546.609426][T17795] netlink: 'syz.4.2810': attribute type 13 has an invalid length. [ 546.870154][T17804] lo: Caught tx_queue_len zero misconfig [ 546.893185][ T5621] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 547.032693][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 547.083758][T17821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2815'. [ 547.139791][T17826] netlink: 'syz.3.2816': attribute type 3 has an invalid length. [ 547.191602][T17820] FAULT_INJECTION: forcing a failure. [ 547.191602][T17820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.191662][T17820] CPU: 0 UID: 0 PID: 17820 Comm: syz.0.2817 Not tainted syzkaller #0 PREEMPT(full) [ 547.191687][T17820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 547.191700][T17820] Call Trace: [ 547.191709][T17820] [ 547.191719][T17820] dump_stack_lvl+0xe8/0x150 [ 547.191756][T17820] should_fail_ex+0x410/0x560 [ 547.191794][T17820] _copy_from_user+0x2d/0xb0 [ 547.191819][T17820] ___sys_recvmsg+0x173/0x5a0 [ 547.191850][T17820] ? __pfx____sys_recvmsg+0x10/0x10 [ 547.191880][T17820] ? lock_acquire+0x115/0x350 [ 547.191933][T17820] do_recvmmsg+0x31a/0x7f0 [ 547.191967][T17820] ? __pfx_do_recvmmsg+0x10/0x10 [ 547.192004][T17820] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 547.192037][T17820] ? __fget_files+0x3a2/0x420 [ 547.192116][T17820] __x64_sys_recvmmsg+0x198/0x250 [ 547.192144][T17820] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 547.192182][T17820] do_syscall_64+0x166/0x520 [ 547.192210][T17820] ? trace_irq_disable+0x3b/0x140 [ 547.192230][T17820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.192251][T17820] ? clear_bhb_loop+0x70/0xc0 [ 547.192278][T17820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.192299][T17820] RIP: 0033:0x7fb32539e159 [ 547.192320][T17820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.192338][T17820] RSP: 002b:00007fb326227028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 547.192363][T17820] RAX: ffffffffffffffda RBX: 00007fb325625fa0 RCX: 00007fb32539e159 [ 547.192378][T17820] RDX: 0000000000000f00 RSI: 0000200000000400 RDI: 0000000000000004 [ 547.192391][T17820] RBP: 00007fb326227090 R08: 0000000000000000 R09: 0000000000000000 [ 547.192404][T17820] R10: 0000004c42bb4f92 R11: 0000000000000246 R12: 0000000000000002 [ 547.192418][T17820] R13: 00007fb325626038 R14: 00007fb325625fa0 R15: 00007ffcd28b1408 [ 547.192462][T17820] [ 547.238706][T17829] bridge6: entered promiscuous mode [ 547.238762][T17829] bridge6: entered allmulticast mode [ 547.672998][ T8442] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 547.911312][T17848] ipip1: entered promiscuous mode [ 547.946306][T17850] pim6reg: entered allmulticast mode [ 548.073035][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 548.501439][T17866] netlink: 'syz.4.2828': attribute type 34 has an invalid length. [ 548.712880][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 549.112695][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 549.869080][T17913] gtp0: entered promiscuous mode [ 549.875678][T17913] gtp0: entered allmulticast mode [ 549.992883][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 550.152818][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 550.174045][T17927] __nla_validate_parse: 48 callbacks suppressed [ 550.174105][T17927] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2844'. [ 550.346711][T17931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2845'. [ 550.507097][T17941] FAULT_INJECTION: forcing a failure. [ 550.507097][T17941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.523224][T17948] pim6reg: entered allmulticast mode [ 550.540601][T17941] CPU: 0 UID: 0 PID: 17941 Comm: syz.2.2849 Not tainted syzkaller #0 PREEMPT(full) [ 550.540635][T17941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 550.540648][T17941] Call Trace: [ 550.540657][T17941] [ 550.540666][T17941] dump_stack_lvl+0xe8/0x150 [ 550.540708][T17941] should_fail_ex+0x410/0x560 [ 550.540750][T17941] _copy_from_user+0x2d/0xb0 [ 550.540773][T17941] ___sys_recvmsg+0x173/0x5a0 [ 550.540810][T17941] ? __pfx____sys_recvmsg+0x10/0x10 [ 550.540841][T17941] ? lock_acquire+0x115/0x350 [ 550.540902][T17941] do_recvmmsg+0x31a/0x7f0 [ 550.540937][T17941] ? __pfx_do_recvmmsg+0x10/0x10 [ 550.540975][T17941] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 550.541012][T17941] ? __fget_files+0x3a2/0x420 [ 550.541055][T17941] __x64_sys_recvmmsg+0x198/0x250 [ 550.541083][T17941] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 550.541121][T17941] do_syscall_64+0x166/0x520 [ 550.541150][T17941] ? trace_irq_disable+0x3b/0x140 [ 550.541173][T17941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.541195][T17941] ? clear_bhb_loop+0x70/0xc0 [ 550.541221][T17941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.541243][T17941] RIP: 0033:0x7f9775d9e159 [ 550.541273][T17941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.541291][T17941] RSP: 002b:00007f9776d13028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 550.541316][T17941] RAX: ffffffffffffffda RBX: 00007f9776025fa0 RCX: 00007f9775d9e159 [ 550.541332][T17941] RDX: 0000000000000f00 RSI: 0000200000000400 RDI: 0000000000000004 [ 550.541346][T17941] RBP: 00007f9776d13090 R08: 0000000000000000 R09: 0000000000000000 [ 550.541359][T17941] R10: 0000004c42bb4f92 R11: 0000000000000246 R12: 0000000000000002 [ 550.541373][T17941] R13: 00007f9776026038 R14: 00007f9776025fa0 R15: 00007fff26259818 [ 550.541408][T17941] [ 550.618079][T17951] pim6reg: left allmulticast mode [ 550.878002][T17955] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2850'. [ 550.957964][T17955] bond9 (unregistering): Released all slaves [ 551.192683][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 551.479331][T17987] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 552.056687][T18019] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20001 [ 552.232809][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 552.469069][T18039] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2866'. [ 552.644025][ T5620] block nbd6: Receive control failed (result -32) [ 552.648988][T18042] block nbd6: Receive control failed (result -32) [ 552.652843][T16737] block nbd5: Receive control failed (result -32) [ 552.656884][ T5624] block nbd5: Receive control failed (result -32) [ 553.193491][T18062] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2869'. [ 553.272679][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 553.832890][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 554.021825][T18077] netlink: 'syz.3.2873': attribute type 4 has an invalid length. [ 554.071013][T18073] netlink: 'syz.3.2873': attribute type 4 has an invalid length. [ 554.312702][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 554.447154][T18084] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2874'. [ 554.665608][T18092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2876'. [ 554.844675][T18088] bond9: invalid NS target :: specified for addition [ 554.851853][T18088] bond9: option ns_ip6_target: invalid value (18446744073709551615) [ 554.866768][T18088] bond9 (unregistering): Released all slaves [ 554.876129][T18101] netlink: 'syz.0.2880': attribute type 21 has an invalid length. [ 554.950817][T18092] hsr_slave_1 (unregistering): left promiscuous mode [ 555.005091][T18101] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2880'. [ 555.160377][T16911] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 555.352700][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 555.680673][T18122] netlink: 'syz.1.2885': attribute type 1 has an invalid length. [ 555.680733][T18122] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2885'. [ 555.757505][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 555.770202][ T5624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 555.780072][ T5624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 555.788690][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 555.800341][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 556.000245][T18133] bridge0: port 4(vlan4) entered blocking state [ 556.000391][T18133] bridge0: port 4(vlan4) entered disabled state [ 556.000580][T18133] vlan4: entered allmulticast mode [ 556.000603][T18133] geneve0: entered allmulticast mode [ 556.063974][T18133] vlan4: entered promiscuous mode [ 556.064005][T18133] geneve0: entered promiscuous mode [ 556.294179][T18149] openvswitch: netlink: IP tunnel dst address not specified [ 556.302718][T18149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 556.392758][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 556.732031][T18144] bridge0: port 1(syz_tun) entered disabled state [ 557.287130][T18177] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2899'. [ 557.432702][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 557.531454][T18189] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2901'. [ 557.548713][T18144] veth1_vlan: left allmulticast mode [ 557.914047][T16737] Bluetooth: hci5: command tx timeout [ 558.472819][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 559.512697][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 559.645529][ T61] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.645629][ T61] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.645675][ T61] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.645701][ T61] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.645738][ T61] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.645763][ T61] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.645800][ T61] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.645826][ T61] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.804919][T18200] IPv6: NLM_F_CREATE should be specified when creating new route [ 559.805051][T18200] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 559.805063][T18200] IPv6: NLM_F_CREATE should be set when creating new route [ 559.805115][T18200] IPv6: NLM_F_CREATE should be set when creating new route [ 559.805139][T18200] IPv6: NLM_F_CREATE should be set when creating new route [ 559.810598][T18200] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2902'. [ 559.858094][T16895] syz0: Port: 1 Link DOWN [ 559.909266][T18207] sch_tbf: peakrate 7 is lower than or equals to rate 213 ! [ 559.994351][T16737] Bluetooth: hci5: command tx timeout [ 560.123078][T18218] openvswitch: netlink: Message has 4 unknown bytes. [ 560.552848][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 560.968591][T18254] lo: Caught tx_queue_len zero misconfig [ 561.122184][T18260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2914'. [ 561.490916][T18278] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2917'. [ 561.592707][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 561.656617][T18283] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2919'. [ 561.666050][T18283] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2919'. [ 561.958028][T18129] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.967397][T18129] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.967569][T18129] bridge_slave_0: entered allmulticast mode [ 561.983491][T18129] bridge_slave_0: entered promiscuous mode [ 562.007155][T18129] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.012223][T18129] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.012395][T18129] bridge_slave_1: entered allmulticast mode [ 562.027408][T18129] bridge_slave_1: entered promiscuous mode [ 562.073139][T16737] Bluetooth: hci5: command tx timeout [ 562.168377][T18312] netlink: 'syz.4.2926': attribute type 21 has an invalid length. [ 562.183320][T18129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.198952][T18129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.209816][T18312] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2926'. [ 562.209886][T18312] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2926'. [ 562.210193][T18310] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2923'. [ 562.210210][T18310] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2923'. [ 562.292763][T18129] team0: Port device team_slave_0 added [ 562.313603][T18129] team0: Port device team_slave_1 added [ 562.357078][T18129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 562.364317][T18310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 562.373838][T18129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 562.400238][T18129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 562.413498][T18129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 562.420566][T18129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 562.430295][T18129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.562939][T18318] tap0: tun_chr_ioctl cmd 1074025672 [ 562.562989][T18318] tap0: ignored: set checksum disabled [ 562.587440][T18129] hsr_slave_0: entered promiscuous mode [ 562.594514][T18129] hsr_slave_1: entered promiscuous mode [ 562.601092][T18129] debugfs: 'hsr0' already exists in 'hsr' [ 562.601117][T18129] Cannot create hsr debugfs directory [ 562.632708][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 562.846429][T18306] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 562.927087][T18328] tipc: New replicast peer: 172.20.20.187 [ 562.927409][T18328] tipc: Enabled bearer , priority 26 [ 563.025429][T18331] tunl0: Caught tx_queue_len zero misconfig [ 563.306386][T18129] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.348582][T18350] netlink: 'syz.4.2936': attribute type 8 has an invalid length. [ 563.349520][T18350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2936'. [ 563.594208][T18352] ip_tables: iptables: counters copy to user failed while replacing table [ 563.620928][T18129] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.635677][T18354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2938'. [ 563.672703][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 563.831093][T18129] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.136358][T18129] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.152889][T16737] Bluetooth: hci5: command tx timeout [ 564.502151][T16895] tipc: Node number set to 3581222103 [ 564.547602][T18355] syzkaller1: entered promiscuous mode [ 564.547647][T18355] syzkaller1: entered allmulticast mode [ 564.552472][T18369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.712869][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 565.752698][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 565.775643][T18129] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 565.812137][T18129] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 565.813623][T18129] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 565.836907][T18129] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 565.890110][T18129] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 565.910797][T18129] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 565.915483][T18129] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 565.938367][T18129] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 566.067863][T18416] IPVS: length: 147 != 8 [ 566.224018][T18420] syzkaller0: entered promiscuous mode [ 566.224065][T18420] syzkaller0: entered allmulticast mode [ 566.249525][T18420] tipc: Enabled bearer , priority 0 [ 566.265177][T18420] __nla_validate_parse: 4 callbacks suppressed [ 566.275208][T18420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2952'. [ 566.465113][T18419] tipc: Resetting bearer [ 566.531692][T18419] tipc: Disabling bearer [ 566.770061][T18129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 566.792699][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 566.838667][T18129] 8021q: adding VLAN 0 to HW filter on device team0 [ 566.850454][ T3379] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.850576][ T3379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.870804][T18456] netlink: 'syz.4.2959': attribute type 1 has an invalid length. [ 566.906830][T18456] 8021q: adding VLAN 0 to HW filter on device bond15 [ 566.925119][T16911] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.925251][T16911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 566.947898][T18456] veth0_to_bond: left promiscuous mode [ 566.954261][T18456] bond15: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 567.558315][T18129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 567.643769][T18129] veth0_vlan: entered promiscuous mode [ 567.659404][T18129] veth1_vlan: entered promiscuous mode [ 567.704698][T18129] veth0_macvtap: entered promiscuous mode [ 567.712462][T18129] veth1_macvtap: entered promiscuous mode [ 567.737684][T18129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 567.748537][T18129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 567.793770][T11633] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.793844][T11633] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.793898][T11633] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.793949][T11633] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.832782][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 568.873030][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 569.123443][T18430] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 569.379062][T11633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.387383][T11633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.502228][T11633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.502279][T11633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.912808][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 570.811450][T18522] bond16: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 570.848722][ T5624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 570.855734][ T5624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 570.857101][ T5624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 570.859603][ T5624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 570.867911][ T5624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 570.938834][T18522] bond16 (unregistering): Released all slaves [ 570.952753][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 571.411372][ T5616] bond0: (slave syz_tun): Releasing backup interface [ 571.871700][T18549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2980'. [ 571.932803][T18534] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2971'. [ 571.992696][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 572.721656][T18574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2983'. [ 572.889294][T18592] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 572.953832][ T5624] Bluetooth: hci4: command tx timeout [ 573.032880][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 573.487754][T18526] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.487908][T18526] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.488036][T18526] bridge_slave_0: entered allmulticast mode [ 573.489996][T18526] bridge_slave_0: entered promiscuous mode [ 573.497330][T18526] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.497613][T18526] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.497746][T18526] bridge_slave_1: entered allmulticast mode [ 573.499563][T18526] bridge_slave_1: entered promiscuous mode [ 573.549787][T18526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 573.570208][T18526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.628072][T18526] team0: Port device team_slave_0 added [ 573.631250][T18526] team0: Port device team_slave_1 added [ 573.680557][T18526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 573.680621][T18526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 573.680650][T18526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 573.683261][T18526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 573.683276][T18526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 573.683299][T18526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.767346][T18526] hsr_slave_0: entered promiscuous mode [ 573.768710][T18526] hsr_slave_1: entered promiscuous mode [ 573.769657][T18526] debugfs: 'hsr0' already exists in 'hsr' [ 573.769676][T18526] Cannot create hsr debugfs directory [ 574.072804][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 575.032725][ T5624] Bluetooth: hci4: command tx timeout [ 575.112940][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 575.509952][T18569] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 575.586180][T18526] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 575.644803][T18526] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 575.645720][T18526] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 575.682463][T18526] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 575.692522][T18526] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 575.727920][T18526] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 575.733638][T18526] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 575.744786][T18526] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 575.858462][T18648] syzkaller0: entered promiscuous mode [ 575.864190][T18648] syzkaller0: entered allmulticast mode [ 575.887671][T18648] netlink: 'syz.3.2991': attribute type 13 has an invalid length. [ 575.895865][T18648] netlink: 'syz.3.2991': attribute type 17 has an invalid length. [ 575.998062][T18648] bridge0: left promiscuous mode [ 576.124240][T18648] hsr0: left allmulticast mode [ 576.124294][T18648] hsr_slave_0: left allmulticast mode [ 576.152752][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 576.171492][T18648] v: left promiscuous mode [ 576.186225][T18648] v: entered promiscuous mode [ 576.219404][T18662] netlink: 'syz.2.2995': attribute type 1 has an invalid length. [ 576.306162][T18648] ip6gre1: left allmulticast mode [ 576.315087][T18648] 8021q: adding VLAN 0 to HW filter on device bond2 [ 576.322403][T18648] bridge2: left promiscuous mode [ 576.324883][T18648] bridge2: left allmulticast mode [ 576.339043][T18648] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 576.354521][T18648] 8021q: adding VLAN 0 to HW filter on device bond4 [ 576.365864][T18648] 8021q: adding VLAN 0 to HW filter on device bond5 [ 576.375164][T18648] ieee802154 phy2 wpan0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 576.377249][T18648] bond6: left promiscuous mode [ 576.377269][T18648] bridge4: left promiscuous mode [ 576.398861][T18648] netdevsim netdevsim3 eth0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 576.401053][T18648] 8021q: adding VLAN 0 to HW filter on device eth0 [ 576.409759][T18648] netdevsim netdevsim3 eth1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 576.411540][T18648] 8021q: adding VLAN 0 to HW filter on device eth1 [ 576.415658][T18648] netdevsim netdevsim3 eth2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 576.417493][T18648] 8021q: adding VLAN 0 to HW filter on device eth2 [ 576.425170][T18648] netdevsim netdevsim3 eth3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 576.427136][T18648] 8021q: adding VLAN 0 to HW filter on device eth3 [ 576.432217][T18648] veth5: left allmulticast mode [ 576.444748][T18648] 8021q: adding VLAN 0 to HW filter on device bond7 [ 576.451759][T18648] ip6gre3: left promiscuous mode [ 576.451807][T18648] ip6gre3: left allmulticast mode [ 576.469148][T18648] ieee802154 phy10 wpan1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 576.472321][T18648] A link change request failed with some changes committed already. Interface syzkallerB may have been left with an inconsistent configuration, please check. [ 576.473166][ T8462] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 576.566968][T18664] vlan2: entered allmulticast mode [ 576.572295][T18664] veth0: entered allmulticast mode [ 576.775758][ T13] bond5: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 576.828984][ T13] bond5: (slave veth0_to_bond): making interface the new active one [ 576.880858][ T13] bond5: active interface up! [ 576.992451][T18674] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 577.107354][T18679] tipc: New replicast peer: 255.255.255.255 [ 577.108361][T18679] tipc: Enabled bearer , priority 26 [ 577.115773][T18679] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3000'. [ 577.120042][ T5624] Bluetooth: hci4: command tx timeout [ 577.139766][T18679] netlink: 'syz.1.3000': attribute type 1 has an invalid length. [ 577.164124][T18683] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2998'. [ 577.192908][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 577.273386][ T8462] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 577.302473][T18679] bond10: entered promiscuous mode [ 577.303165][T18679] 8021q: adding VLAN 0 to HW filter on device bond10 [ 577.333329][T18526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.345201][T18679] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3000'. [ 577.348706][T18679] bond10: entered allmulticast mode [ 577.471449][T18688] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3002'. [ 577.555918][T18679] bond10: (slave bridge11): making interface the new active one [ 577.555972][T18679] bridge11: entered promiscuous mode [ 577.556193][T18679] bridge11: entered allmulticast mode [ 577.575573][T18679] bond10: (slave bridge11): Enslaving as an active interface with an up link [ 577.642115][T18526] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.690042][T11633] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.690180][T11633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.779037][T11633] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.779174][T11633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.854670][T18698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3005'. [ 577.878128][T18698] netlink: 'syz.0.3005': attribute type 21 has an invalid length. [ 577.886998][T18698] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3005'. [ 577.909257][T18698] netlink: 'syz.0.3005': attribute type 4 has an invalid length. [ 577.918177][T18698] netlink: 'syz.0.3005': attribute type 5 has an invalid length. [ 577.926517][T18698] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3005'. [ 577.937864][T18698] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3005'. [ 577.954846][T18698]  (unregistering): left promiscuous mode [ 577.976748][T18698] team0: Port device  removed [ 578.233041][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 578.406987][T18715] syzkaller1: entered promiscuous mode [ 578.413276][T18715] syzkaller1: entered allmulticast mode [ 578.882203][T18728] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3010'. [ 578.979130][T18737] x_tables: ip_tables: ah match: only valid for protocol 51 [ 579.068958][T18741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3012'. [ 579.192817][ T5624] Bluetooth: hci4: command tx timeout [ 579.272751][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 579.318343][T18526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.519494][T18758] ip6tnl0: entered promiscuous mode [ 579.525732][T18758] ip6tnl0: entered allmulticast mode [ 580.012108][T18772] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 580.241024][T18526] veth0_vlan: entered promiscuous mode [ 580.282165][T18526] veth1_vlan: entered promiscuous mode [ 580.312802][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 580.441895][T18526] veth0_macvtap: entered promiscuous mode [ 580.481318][T18526] veth1_macvtap: entered promiscuous mode [ 580.554904][T18787] netlink: 'syz.3.3024': attribute type 1 has an invalid length. [ 580.562031][T18526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 580.626877][T18787] 8021q: adding VLAN 0 to HW filter on device bond9 [ 580.646355][T18526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 580.673363][T16911] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.673713][T16911] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.673779][T16911] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.673823][T16911] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.096186][T18803] netlink: 'syz.3.3028': attribute type 1 has an invalid length. [ 581.150423][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.150495][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.354721][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 582.392844][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 583.432754][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 583.860847][T18797] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 583.952279][ T3379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.952330][ T3379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.217268][T18828] netlink: 'syz.4.2973': attribute type 1 has an invalid length. [ 584.472898][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 584.927171][T16737] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 584.940883][T16737] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 584.960246][T16737] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 584.989583][T16737] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 585.000009][T16737] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 585.512692][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 585.531630][T18865] __nla_validate_parse: 8 callbacks suppressed [ 585.538113][T18865] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3042'. [ 585.547586][T18865] netlink: 239 bytes leftover after parsing attributes in process `syz.4.3042'. [ 585.581407][T18865] netlink: 'syz.4.3042': attribute type 1 has an invalid length. [ 585.581476][T18865] netlink: 'syz.4.3042': attribute type 4 has an invalid length. [ 585.581509][T18865] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3042'. [ 586.004120][T18877] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3045'. [ 586.027666][T18877] Bluetooth: hci0: unsupported parameter 512 [ 586.027708][T18877] Bluetooth: hci0: unsupported parameter 4608 [ 586.029092][T18877] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 586.357279][T18886] FAULT_INJECTION: forcing a failure. [ 586.357279][T18886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 586.370605][T18886] CPU: 0 UID: 0 PID: 18886 Comm: syz.4.3047 Not tainted syzkaller #0 PREEMPT(full) [ 586.370634][T18886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 586.370647][T18886] Call Trace: [ 586.370656][T18886] [ 586.370665][T18886] dump_stack_lvl+0xe8/0x150 [ 586.370700][T18886] should_fail_ex+0x410/0x560 [ 586.370735][T18886] _copy_from_user+0x2d/0xb0 [ 586.370757][T18886] ___sys_recvmsg+0x173/0x5a0 [ 586.370786][T18886] ? __pfx____sys_recvmsg+0x10/0x10 [ 586.370815][T18886] ? lock_acquire+0x115/0x350 [ 586.370868][T18886] do_recvmmsg+0x31a/0x7f0 [ 586.370897][T18886] ? __pfx_do_recvmmsg+0x10/0x10 [ 586.370934][T18886] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 586.370963][T18886] ? __fget_files+0x3a2/0x420 [ 586.371001][T18886] __x64_sys_recvmmsg+0x198/0x250 [ 586.371026][T18886] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 586.371064][T18886] do_syscall_64+0x166/0x520 [ 586.371091][T18886] ? trace_irq_disable+0x3b/0x140 [ 586.371110][T18886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.371132][T18886] ? clear_bhb_loop+0x70/0xc0 [ 586.371158][T18886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.371178][T18886] RIP: 0033:0x7ff468f9e159 [ 586.371198][T18886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.371214][T18886] RSP: 002b:00007ff4671f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 586.371240][T18886] RAX: ffffffffffffffda RBX: 00007ff469225fa0 RCX: 00007ff468f9e159 [ 586.371255][T18886] RDX: 0000000000000f00 RSI: 0000200000000400 RDI: 0000000000000004 [ 586.371268][T18886] RBP: 00007ff4671f6090 R08: 0000000000000000 R09: 0000000000000000 [ 586.371278][T18886] R10: 0000004c42bb4f92 R11: 0000000000000246 R12: 0000000000000002 [ 586.371292][T18886] R13: 00007ff469226038 R14: 00007ff469225fa0 R15: 00007fff60c998b8 [ 586.371325][T18886] [ 586.553492][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 587.112905][ T5624] Bluetooth: hci2: command tx timeout [ 587.559231][ T31] audit: type=1800 audit(1788718370.406:15): pid=18913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3054" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=3130 res=0 errno=0 [ 587.592761][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 587.923918][T18935] netlink: 16170 bytes leftover after parsing attributes in process `syz.0.3057'. [ 587.924279][T18935] netlink: 16170 bytes leftover after parsing attributes in process `syz.0.3057'. [ 588.253767][T18847] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.253976][T18847] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.254135][T18847] bridge_slave_0: entered allmulticast mode [ 588.256129][T18847] bridge_slave_0: entered promiscuous mode [ 588.259035][T18847] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.259171][T18847] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.259299][T18847] bridge_slave_1: entered allmulticast mode [ 588.261192][T18847] bridge_slave_1: entered promiscuous mode [ 588.344780][T18847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.372108][T18847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.411941][T18950] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 588.538521][T18953] FAULT_INJECTION: forcing a failure. [ 588.538521][T18953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 588.558471][T18953] CPU: 0 UID: 0 PID: 18953 Comm: syz.1.3061 Not tainted syzkaller #0 PREEMPT(full) [ 588.558502][T18953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 588.558514][T18953] Call Trace: [ 588.558522][T18953] [ 588.558531][T18953] dump_stack_lvl+0xe8/0x150 [ 588.558566][T18953] should_fail_ex+0x410/0x560 [ 588.558601][T18953] _copy_from_user+0x2d/0xb0 [ 588.558624][T18953] ___sys_recvmsg+0x173/0x5a0 [ 588.558652][T18953] ? __pfx____sys_recvmsg+0x10/0x10 [ 588.558681][T18953] ? lock_acquire+0x115/0x350 [ 588.558729][T18953] do_recvmmsg+0x31a/0x7f0 [ 588.558762][T18953] ? __pfx_do_recvmmsg+0x10/0x10 [ 588.558797][T18953] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 588.558830][T18953] ? __fget_files+0x3a2/0x420 [ 588.558869][T18953] __x64_sys_recvmmsg+0x198/0x250 [ 588.558896][T18953] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 588.558933][T18953] do_syscall_64+0x166/0x520 [ 588.558961][T18953] ? trace_irq_disable+0x3b/0x140 [ 588.558981][T18953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.559002][T18953] ? clear_bhb_loop+0x70/0xc0 [ 588.559027][T18953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.559048][T18953] RIP: 0033:0x7ff2e519e159 [ 588.559068][T18953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.559086][T18953] RSP: 002b:00007ff2e5fb7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 588.559110][T18953] RAX: ffffffffffffffda RBX: 00007ff2e5425fa0 RCX: 00007ff2e519e159 [ 588.559124][T18953] RDX: 0000000000000f00 RSI: 0000200000000400 RDI: 0000000000000004 [ 588.559138][T18953] RBP: 00007ff2e5fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 588.559151][T18953] R10: 0000004c42bb4f92 R11: 0000000000000246 R12: 0000000000000002 [ 588.559164][T18953] R13: 00007ff2e5426038 R14: 00007ff2e5425fa0 R15: 00007ffe26fe5d28 [ 588.559197][T18953] [ 588.618481][T18847] team0: Port device team_slave_0 added [ 588.629724][T18847] team0: Port device team_slave_1 added [ 588.632984][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 588.997496][T18972] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3063'. [ 589.046014][T18975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3064'. [ 589.086748][T18847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 589.094412][T18847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 589.120807][T18847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.136197][T18847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 589.143616][T18847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 589.170676][T18847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 589.193706][ T5624] Bluetooth: hci2: command tx timeout [ 589.231470][T18975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3064'. [ 589.254897][T18980] ip_tables: iptables: counters copy to user failed while replacing table [ 589.327665][T18975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3064'. [ 589.357415][T18847] hsr_slave_0: entered promiscuous mode [ 589.364493][T18847] hsr_slave_1: entered promiscuous mode [ 589.372492][T18847] debugfs: 'hsr0' already exists in 'hsr' [ 589.378446][T18847] Cannot create hsr debugfs directory [ 589.675632][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 590.123333][T19009] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 590.129176][T19009] pim6reg0: persist disabled [ 590.352844][T19020] netlink: 'syz.4.3076': attribute type 6 has an invalid length. [ 590.372808][T18847] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 590.372866][T18847] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 590.691724][T18847] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 590.691803][T18847] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 590.713205][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 590.762945][T19023] nbd: nbd0 already in use [ 590.767094][T19023] block nbd0: NBD_DISCONNECT [ 590.788653][T19023] block nbd0: Send disconnect failed -104 [ 590.788718][T19023] block nbd0: shutting down sockets [ 590.871831][T18847] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 590.871899][T18847] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 591.053185][T18847] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 591.053244][T18847] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 591.156044][T18847] [ 591.158449][T18847] ====================================================== [ 591.165520][T18847] WARNING: possible circular locking dependency detected [ 591.173244][T18847] syzkaller #0 Not tainted [ 591.177687][T18847] ------------------------------------------------------ [ 591.184766][T18847] syz-executor/18847 is trying to acquire lock: [ 591.191041][T18847] ffff88801c2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 591.200983][T18847] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 591.200983][T18847] but task is already holding lock: [ 591.208377][T18847] ffffffff8f7fffe0 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 591.217317][T18847] [ 591.217317][T18847] which lock already depends on the new lock. [ 591.217317][T18847] [ 591.227920][T18847] [ 591.227920][T18847] the existing dependency chain (in reverse order) is: [ 591.236958][T18847] [ 591.236958][T18847] -> #12 (gdp_mutex){+.+.}-{4:4}: [ 591.244263][T18847] __mutex_lock+0x19d/0x1550 [ 591.249395][T18847] get_device_parent+0x16f/0x3a0 [ 591.254860][T18847] device_add+0x2d4/0xb80 [ 591.259723][T18847] device_create+0x269/0x300 [ 591.264840][T18847] msr_device_create+0x33/0x50 [ 591.270130][T18847] cpuhp_invoke_callback+0x434/0x810 [ 591.275964][T18847] cpuhp_thread_fun+0x362/0x780 [ 591.281345][T18847] smpboot_thread_fn+0x565/0xa70 [ 591.286815][T18847] kthread+0x38b/0x480 [ 591.291408][T18847] ret_from_fork+0x514/0xb70 [ 591.296609][T18847] ret_from_fork_asm+0x1a/0x30 [ 591.301914][T18847] [ 591.301914][T18847] -> #11 (cpuhp_state-up){+.+.}-{0:0}: [ 591.309564][T18847] cpuhp_thread_fun+0x127/0x780 [ 591.314967][T18847] smpboot_thread_fn+0x565/0xa70 [ 591.320452][T18847] kthread+0x38b/0x480 [ 591.325041][T18847] ret_from_fork+0x514/0xb70 [ 591.330153][T18847] ret_from_fork_asm+0x1a/0x30 [ 591.335475][T18847] [ 591.335475][T18847] -> #10 (cpu_hotplug_lock){++++}-{0:0}: [ 591.343296][T18847] cpus_read_lock+0x42/0x160 [ 591.348415][T18847] static_key_slow_inc+0x12/0x30 [ 591.353897][T18847] ipv6_flowlabel_opt+0x1cb1/0x2ae0 [ 591.359695][T18847] do_ipv6_setsockopt+0xdff/0x3180 [ 591.365387][T18847] ipv6_setsockopt+0x59/0x170 [ 591.370589][T18847] do_sock_setsockopt+0x17c/0x1b0 [ 591.376188][T18847] __x64_sys_setsockopt+0x13d/0x1b0 [ 591.381910][T18847] do_syscall_64+0x166/0x520 [ 591.387034][T18847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.393476][T18847] [ 591.393476][T18847] -> #9 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 591.401212][T18847] lock_sock_nested+0x41/0x100 [ 591.406505][T18847] tls_sw_sendmsg+0x15f/0x2b50 [ 591.411864][T18847] sock_sendmsg_nosec+0x90/0x180 [ 591.417336][T18847] sock_write_iter+0x2de/0x3e0 [ 591.422643][T18847] do_iter_readv_writev+0x612/0x8c0 [ 591.428547][T18847] vfs_writev+0x343/0x990 [ 591.433410][T18847] do_writev+0x154/0x2e0 [ 591.438179][T18847] do_syscall_64+0x166/0x520 [ 591.443302][T18847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.449822][T18847] [ 591.449822][T18847] -> #8 (&ctx->tx_lock){+.+.}-{4:4}: [ 591.457325][T18847] __mutex_lock+0x19d/0x1550 [ 591.462479][T18847] tls_sw_sendmsg+0x13a/0x2b50 [ 591.467776][T18847] sock_sendmsg_nosec+0x90/0x180 [ 591.473243][T18847] sock_sendmsg+0x1ca/0x2d0 [ 591.478338][T18847] __sock_xmit+0x245/0x4f0 [ 591.483336][T18847] nbd_disconnect+0x3ad/0x560 [ 591.488538][T18847] nbd_disconnect_and_put+0x32/0x280 [ 591.494345][T18847] nbd_genl_disconnect+0x4af/0x590 [ 591.499988][T18847] genl_family_rcv_msg_doit+0x233/0x340 [ 591.506066][T18847] genl_rcv_msg+0x614/0x7a0 [ 591.511100][T18847] netlink_rcv_skb+0x226/0x4a0 [ 591.516422][T18847] genl_rcv+0x28/0x40 [ 591.520940][T18847] netlink_unicast+0x7bd/0x940 [ 591.526321][T18847] netlink_sendmsg+0x813/0xb40 [ 591.531612][T18847] sock_sendmsg_nosec+0x13a/0x180 [ 591.537184][T18847] ____sys_sendmsg+0x54e/0x850 [ 591.542469][T18847] ___sys_sendmsg+0x2a5/0x360 [ 591.547668][T18847] __x64_sys_sendmsg+0x1b1/0x290 [ 591.553147][T18847] do_syscall_64+0x166/0x520 [ 591.558266][T18847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.564685][T18847] [ 591.564685][T18847] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 591.572348][T18847] __mutex_lock+0x19d/0x1550 [ 591.577472][T18847] nbd_queue_rq+0x373/0xff0 [ 591.582532][T18847] blk_mq_dispatch_rq_list+0x499/0x1990 [ 591.588718][T18847] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 591.595604][T18847] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 591.602116][T18847] blk_mq_run_work_fn+0x16c/0x300 [ 591.607667][T18847] process_scheduled_works+0xc3d/0x1630 [ 591.613756][T18847] worker_thread+0xa47/0xfb0 [ 591.618881][T18847] kthread+0x38b/0x480 [ 591.623478][T18847] ret_from_fork+0x514/0xb70 [ 591.628678][T18847] ret_from_fork_asm+0x1a/0x30 [ 591.633975][T18847] [ 591.633975][T18847] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 591.641192][T18847] __mutex_lock+0x19d/0x1550 [ 591.646334][T18847] nbd_queue_rq+0xc1/0xff0 [ 591.651306][T18847] blk_mq_dispatch_rq_list+0x499/0x1990 [ 591.657388][T18847] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 591.664244][T18847] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 591.670749][T18847] blk_mq_run_work_fn+0x16c/0x300 [ 591.676306][T18847] process_scheduled_works+0xc3d/0x1630 [ 591.682413][T18847] worker_thread+0xa47/0xfb0 [ 591.687530][T18847] kthread+0x38b/0x480 [ 591.692136][T18847] ret_from_fork+0x514/0xb70 [ 591.697246][T18847] ret_from_fork_asm+0x1a/0x30 [ 591.702542][T18847] [ 591.702542][T18847] -> #5 (set->srcu){.+.+}-{0:0}: [ 591.709765][T18847] __synchronize_srcu+0xc9/0x2f0 [ 591.715229][T18847] elevator_switch+0x1e8/0x7b0 [ 591.720605][T18847] elevator_change+0x2fa/0x480 [ 591.725900][T18847] elevator_set_default+0x375/0x440 [ 591.731649][T18847] blk_register_queue+0x3f3/0x4e0 [ 591.737248][T18847] __add_disk+0x6cb/0xe30 [ 591.742103][T18847] add_disk_fwnode+0x100/0x3a0 [ 591.747487][T18847] nbd_dev_add+0x733/0xb60 [ 591.752453][T18847] nbd_init+0x168/0x1f0 [ 591.752686][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 591.764174][T18847] do_one_initcall+0x250/0x870 [ 591.769480][T18847] do_initcall_level+0x10a/0x1a0 [ 591.774972][T18847] do_initcalls+0x59/0xa0 [ 591.779826][T18847] kernel_init_freeable+0x29d/0x3e0 [ 591.785550][T18847] kernel_init+0x22/0x1d0 [ 591.790404][T18847] ret_from_fork+0x514/0xb70 [ 591.795525][T18847] ret_from_fork_asm+0x1a/0x30 [ 591.800839][T18847] [ 591.800839][T18847] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 591.808666][T18847] __mutex_lock+0x19d/0x1550 [ 591.813801][T18847] elevator_change+0x1af/0x480 [ 591.819124][T18847] elevator_set_none+0xb5/0x140 [ 591.824531][T18847] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 591.830891][T18847] nbd_start_device+0x189/0xb30 [ 591.836273][T18847] nbd_genl_connect+0x167d/0x1cd0 [ 591.841844][T18847] genl_family_rcv_msg_doit+0x233/0x340 [ 591.847921][T18847] genl_rcv_msg+0x614/0x7a0 [ 591.853067][T18847] netlink_rcv_skb+0x226/0x4a0 [ 591.858378][T18847] genl_rcv+0x28/0x40 [ 591.862898][T18847] netlink_unicast+0x7bd/0x940 [ 591.868203][T18847] netlink_sendmsg+0x813/0xb40 [ 591.873499][T18847] sock_sendmsg_nosec+0x13a/0x180 [ 591.879095][T18847] ____sys_sendmsg+0x54e/0x850 [ 591.884407][T18847] ___sys_sendmsg+0x2a5/0x360 [ 591.889622][T18847] __x64_sys_sendmsg+0x1b1/0x290 [ 591.895093][T18847] do_syscall_64+0x166/0x520 [ 591.900215][T18847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.906652][T18847] [ 591.906652][T18847] -> #3 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 591.915308][T18847] blk_alloc_queue+0x544/0x690 [ 591.920608][T18847] __blk_mq_alloc_disk+0x194/0x390 [ 591.926244][T18847] nbd_dev_add+0x494/0xb60 [ 591.931194][T18847] nbd_init+0x168/0x1f0 [ 591.935881][T18847] do_one_initcall+0x250/0x870 [ 591.941180][T18847] do_initcall_level+0x10a/0x1a0 [ 591.946646][T18847] do_initcalls+0x59/0xa0 [ 591.951497][T18847] kernel_init_freeable+0x29d/0x3e0 [ 591.957222][T18847] kernel_init+0x22/0x1d0 [ 591.962079][T18847] ret_from_fork+0x514/0xb70 [ 591.967194][T18847] ret_from_fork_asm+0x1a/0x30 [ 591.972492][T18847] [ 591.972492][T18847] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 591.979712][T18847] fs_reclaim_acquire+0x71/0x100 [ 591.985189][T18847] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 591.991442][T18847] alloc_inode+0xb8/0x1b0 [ 591.996301][T18847] iget_locked+0x131/0x6a0 [ 592.001244][T18847] kernfs_get_inode+0x4f/0x770 [ 592.006539][T18847] kernfs_get_tree+0x5cd/0x980 [ 592.011836][T18847] vfs_get_tree+0x92/0x2a0 [ 592.016790][T18847] do_new_mount+0x319/0xdc0 [ 592.021844][T18847] __se_sys_mount+0x31d/0x420 [ 592.027054][T18847] do_syscall_64+0x166/0x520 [ 592.032182][T18847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.038599][T18847] [ 592.038599][T18847] -> #1 (&root->kernfs_rwsem){++++}-{4:4}: [ 592.046598][T18847] down_write+0x96/0x200 [ 592.051366][T18847] kernfs_remove_by_name_ns+0x4e/0x140 [ 592.057348][T18847] device_links_driver_bound+0x4ab/0x1440 [ 592.063604][T18847] driver_bound+0xd8/0x2e0 [ 592.068618][T18847] really_probe+0x774/0xae0 [ 592.073648][T18847] __driver_probe_device+0x1e8/0x360 [ 592.079457][T18847] driver_probe_device+0x4f/0x240 [ 592.085007][T18847] __device_attach_driver+0x270/0x410 [ 592.090902][T18847] bus_for_each_drv+0x258/0x2f0 [ 592.096281][T18847] __device_attach+0x2c4/0x450 [ 592.101566][T18847] device_initial_probe+0xa1/0xd0 [ 592.107112][T18847] bus_probe_device+0x12a/0x220 [ 592.112490][T18847] device_add+0x7d7/0xb80 [ 592.117349][T18847] faux_device_create_with_groups+0x1a5/0x2b0 [ 592.124021][T18847] regulator_dummy_init+0x19/0x40 [ 592.129620][T18847] regulator_init+0xca/0x110 [ 592.134742][T18847] do_one_initcall+0x250/0x870 [ 592.140038][T18847] do_initcall_level+0x10a/0x1a0 [ 592.145500][T18847] do_initcalls+0x59/0xa0 [ 592.150356][T18847] kernel_init_freeable+0x29d/0x3e0 [ 592.156078][T18847] kernel_init+0x22/0x1d0 [ 592.160943][T18847] ret_from_fork+0x514/0xb70 [ 592.166056][T18847] ret_from_fork_asm+0x1a/0x30 [ 592.171352][T18847] [ 592.171352][T18847] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 592.179955][T18847] __lock_acquire+0x15ff/0x2e50 [ 592.185330][T18847] lock_acquire+0x115/0x350 [ 592.190357][T18847] down_read+0x4a/0x330 [ 592.195052][T18847] kernfs_remove+0x35/0x80 [ 592.199995][T18847] __kobject_del+0xe0/0x310 [ 592.205081][T18847] kobject_del+0x45/0x60 [ 592.209856][T18847] cleanup_glue_dir+0x1a3/0x220 [ 592.215237][T18847] device_del+0x77d/0x8f0 [ 592.220097][T18847] unregister_netdevice_many_notify+0x1be1/0x2140 [ 592.227098][T18847] unregister_netdevice_queue+0x2f5/0x340 [ 592.233349][T18847] nsim_destroy+0x275/0x800 [ 592.238478][T18847] __nsim_dev_port_del+0x14e/0x200 [ 592.244149][T18847] nsim_dev_reload_destroy+0x288/0x490 [ 592.250131][T18847] nsim_drv_remove+0x58/0x170 [ 592.255355][T18847] device_release_driver_internal+0x48b/0x880 [ 592.261945][T18847] bus_remove_device+0x444/0x560 [ 592.267410][T18847] device_del+0x524/0x8f0 [ 592.272267][T18847] device_unregister+0x21/0xf0 [ 592.277562][T18847] del_device_store+0x2b5/0x370 [ 592.282944][T18847] kernfs_fop_write_iter+0x3a4/0x540 [ 592.288756][T18847] vfs_write+0x612/0xba0 [ 592.293530][T18847] ksys_write+0x150/0x270 [ 592.298389][T18847] do_syscall_64+0x166/0x520 [ 592.303510][T18847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.309926][T18847] [ 592.309926][T18847] other info that might help us debug this: [ 592.309926][T18847] [ 592.320154][T18847] Chain exists of: [ 592.320154][T18847] &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex [ 592.320154][T18847] [ 592.333544][T18847] Possible unsafe locking scenario: [ 592.333544][T18847] [ 592.341038][T18847] CPU0 CPU1 [ 592.346401][T18847] ---- ---- [ 592.351773][T18847] lock(gdp_mutex); [ 592.355691][T18847] lock(cpuhp_state-up); [ 592.362544][T18847] lock(gdp_mutex); [ 592.368966][T18847] rlock(&root->kernfs_supers_rwsem); [ 592.374426][T18847] [ 592.374426][T18847] *** DEADLOCK *** [ 592.374426][T18847] [ 592.382572][T18847] locks held by syz-executor/18847: 8, last CPU#1: [ 592.389143][T18847] #0: ffff88803693c460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 592.398036][T18847] #1: ffff888028ddec80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 592.407785][T18847] #2: ffff8880291360f8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 592.417920][T18847] #3: ffffffff8fac85a0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 592.428197][T18847] #4: ffff888034426128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 592.438753][T18847] #5: ffff888057449258 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 592.448773][T18847] #6: ffffffff90250960 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 592.457748][T18847] #7: ffffffff8f7fffe0 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 592.466896][T18847] [ 592.466896][T18847] stack backtrace: [ 592.472792][T18847] CPU: 1 UID: 0 PID: 18847 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 592.482337][T18847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 592.492394][T18847] Call Trace: [ 592.495675][T18847] [ 592.498646][T18847] dump_stack_lvl+0xe8/0x150 [ 592.503248][T18847] print_circular_bug+0x2e2/0x300 [ 592.508284][T18847] check_noncircular+0x12f/0x150 [ 592.513231][T18847] __lock_acquire+0x15ff/0x2e50 [ 592.518098][T18847] ? lockdep_hardirqs_on+0x7b/0x110 [ 592.523308][T18847] ? __pfx___schedule+0x10/0x10 [ 592.528171][T18847] lock_acquire+0x115/0x350 [ 592.532682][T18847] ? kernfs_remove+0x35/0x80 [ 592.537559][T18847] down_read+0x4a/0x330 [ 592.541722][T18847] ? kernfs_remove+0x35/0x80 [ 592.546319][T18847] kernfs_remove+0x35/0x80 [ 592.550745][T18847] __kobject_del+0xe0/0x310 [ 592.555280][T18847] kobject_del+0x45/0x60 [ 592.559530][T18847] cleanup_glue_dir+0x1a3/0x220 [ 592.564393][T18847] device_del+0x77d/0x8f0 [ 592.568735][T18847] ? __pfx_device_del+0x10/0x10 [ 592.573688][T18847] ? pm_runtime_set_memalloc_noio+0x1e7/0x260 [ 592.579850][T18847] ? netdev_unregister_kobject+0x347/0x450 [ 592.585788][T18847] unregister_netdevice_many_notify+0x1be1/0x2140 [ 592.592227][T18847] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 592.598995][T18847] ? __mutex_lock+0x30b/0x1550 [ 592.603769][T18847] ? __kfree_rcu_sheaf+0x21/0x6c0 [ 592.608807][T18847] ? __kfree_rcu_sheaf+0x21/0x6c0 [ 592.613842][T18847] ? __kfree_rcu_sheaf+0x21/0x6c0 [ 592.618881][T18847] unregister_netdevice_queue+0x2f5/0x340 [ 592.624630][T18847] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 592.630900][T18847] nsim_destroy+0x275/0x800 [ 592.635425][T18847] __nsim_dev_port_del+0x14e/0x200 [ 592.640546][T18847] nsim_dev_reload_destroy+0x288/0x490 [ 592.646022][T18847] nsim_drv_remove+0x58/0x170 [ 592.650727][T18847] ? __pfx_nsim_bus_remove+0x10/0x10 [ 592.656038][T18847] device_release_driver_internal+0x48b/0x880 [ 592.662125][T18847] bus_remove_device+0x444/0x560 [ 592.667076][T18847] ? __pfx_bus_remove_device+0x10/0x10 [ 592.672543][T18847] ? kernfs_remove_by_name_ns+0x101/0x140 [ 592.678276][T18847] device_del+0x524/0x8f0 [ 592.682620][T18847] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 592.688437][T18847] ? __pfx_device_del+0x10/0x10 [ 592.693296][T18847] ? lock_acquire+0x115/0x350 [ 592.697977][T18847] device_unregister+0x21/0xf0 [ 592.702754][T18847] del_device_store+0x2b5/0x370 [ 592.707620][T18847] ? __pfx_del_device_store+0x10/0x10 [ 592.713001][T18847] ? sysfs_file_kobj+0x1e4/0x230 [ 592.717950][T18847] ? sysfs_kf_write+0x166/0x260 [ 592.722810][T18847] ? __pfx_sysfs_kf_write+0x10/0x10 [ 592.728019][T18847] kernfs_fop_write_iter+0x3a4/0x540 [ 592.733320][T18847] vfs_write+0x612/0xba0 [ 592.737613][T18847] ? __pfx_vfs_write+0x10/0x10 [ 592.742393][T18847] ? do_sys_openat2+0x14e/0x200 [ 592.747246][T18847] ? kmem_cache_free+0x182/0x650 [ 592.752194][T18847] ksys_write+0x150/0x270 [ 592.756535][T18847] ? __pfx_ksys_write+0x10/0x10 [ 592.761399][T18847] do_syscall_64+0x166/0x520 [ 592.766017][T18847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.772203][T18847] ? clear_bhb_loop+0x70/0xc0 [ 592.776915][T18847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.782832][T18847] RIP: 0033:0x7f9745d5e98e [ 592.787263][T18847] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 592.792637][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 592.813714][T18847] RSP: 002b:00007ffe7f1be9d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 592.822135][T18847] RAX: ffffffffffffffda RBX: 0000555590665500 RCX: 00007f9745d5e98e [ 592.830114][T18847] RDX: 0000000000000001 RSI: 00007ffe7f1bea60 RDI: 0000000000000005 [ 592.838116][T18847] RBP: 00007f9745e358a7 R08: 0000000000000000 R09: 0000000000000000 [ 592.846110][T18847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.854111][T18847] R13: 00007ffe7f1bea60 R14: 00007f9746b54620 R15: 0000000000000003 [ 592.862119][T18847] [ 592.894236][ T5624] Bluetooth: hci2: command tx timeout [ 593.142907][ T3379] bridge_slave_0: left allmulticast mode [ 593.142948][ T3379] bridge_slave_0: left promiscuous mode [ 593.143120][ T3379] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.832732][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 594.173618][ T3379] bond0 (unregistering): (slave bridge2): Releasing backup interface [ 594.192932][ T3379] bond6 (unregistering): (slave bridge4): Releasing backup interface [ 594.213740][ T3379] bond1 (unregistering): Released all slaves [ 594.226667][ T3379] bond0 (unregistering): Released all slaves [ 594.238765][ T3379] bond2 (unregistering): Released all slaves [ 594.257329][ T3379] bond3 (unregistering): Released all slaves [ 594.262307][ T3379] bond4 (unregistering): Released all slaves [ 594.276814][ T3379] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 594.289357][ T3379] bond5 (unregistering): Released all slaves [ 594.308365][ T3379] bond6 (unregistering): Released all slaves [ 594.323456][ T3379] bond7 (unregistering): Released all slaves [ 594.335750][ T3379] bond8 (unregistering): Released all slaves [ 594.348096][ T3379] bond10 (unregistering): Released all slaves [ 594.356098][ T3379] bond9 (unregistering): Released all slaves [ 594.508877][ T3379] tipc: Left network mode [ 594.600212][T19031] syz_tun (unregistering): left allmulticast mode [ 594.600314][T19031] bridge0: port 1(syz_tun) entered disabled state [ 594.872766][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 595.040129][ T3379] hsr_slave_0: left promiscuous mode [ 595.048401][ T3379] veth1_macvtap: left promiscuous mode [ 595.048438][ T3379] veth0_macvtap: left promiscuous mode [ 595.048519][ T3379] veth1_vlan: left promiscuous mode [ 595.048556][ T3379] v: left promiscuous mode [ 595.410772][ T3379] IPVS: stop unused estimator thread 0... [ 595.469259][ T3379] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.520508][ T3379] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.567029][ T3379] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.636376][ T3379] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.720223][ T3379] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.720263][ T3379] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.720314][ T3379] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 595.753726][ T61] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.753876][ T61] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.753933][ T61] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.753969][ T61] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.798574][ T3379] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.809514][ T3379] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.819995][ T3379] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 595.899461][ T3379] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.899526][ T3379] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.899552][ T3379] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 595.920912][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 595.955033][ T3379] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.968452][ T3379] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.968517][ T3379] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 596.061456][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 596.091376][ T3379] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.103929][ T61] netdevsim netdevsim1 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.112672][ T13] netdevsim netdevsim1 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.112734][ T13] netdevsim netdevsim1 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.112769][ T13] netdevsim netdevsim1 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.140386][ T3379] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.188032][ T3379] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.220484][ T3379] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.291237][T11628] netdevsim netdevsim4 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.295931][ T3379] bridge_slave_1: left allmulticast mode [ 596.295954][ T3379] bridge_slave_1: left promiscuous mode [ 596.296100][ T3379] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.319918][ T3379] bridge_slave_0: left allmulticast mode [ 596.319959][ T3379] bridge_slave_0: left promiscuous mode [ 596.320106][ T3379] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.347912][ T3379] bridge_slave_1: left allmulticast mode [ 596.353871][ T3379] bridge_slave_1: left promiscuous mode [ 596.359777][ T3379] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.369113][ T3379] bridge_slave_0: left allmulticast mode [ 596.377518][ T3379] bridge_slave_0: left promiscuous mode [ 596.377714][ T3379] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.405256][ T3379] bridge0: left allmulticast mode [ 596.413161][ T3379] bridge_slave_1: left allmulticast mode [ 596.419257][ T3379] bridge_slave_1: left promiscuous mode [ 596.431279][ T3379] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.446948][ T3379] bridge_slave_0: left allmulticast mode [ 596.452792][ T3379] bridge_slave_0: left promiscuous mode [ 596.458601][ T3379] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.474584][ T3379] bridge_slave_1: left allmulticast mode [ 596.474617][ T3379] bridge_slave_1: left promiscuous mode [ 596.474779][ T3379] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.489717][ T3379] bridge_slave_0: left allmulticast mode [ 596.489743][ T3379] bridge_slave_0: left promiscuous mode [ 596.489888][ T3379] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.508041][ T3379] batman_adv: batadv0: Interface deactivated: gretap1 [ 596.508091][ T3379] batman_adv: batadv0: Interface deactivated: gretap2 [ 596.636805][ T3379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 596.647065][ T3379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 596.657937][ T3379] bond0 (unregistering): Released all slaves [ 596.789745][ T3379] batman_adv: batadv0: Removing interface: gretap1 [ 596.797553][ T3379] batman_adv: batadv0: Removing interface: gretap2 [ 596.837084][ T3379] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 596.866730][ T3379] bond6 (unregistering): (slave bridge5): Releasing backup interface [ 596.866771][ T3379] bridge5 (unregistering): left promiscuous mode [ 596.889074][ T3379] bond8 (unregistering): (slave bridge8): Releasing backup interface [ 596.916262][ T3379] bond10 (unregistering): (slave bridge11): Releasing backup interface [ 596.916302][ T3379] bridge11 (unregistering): left promiscuous mode [ 596.916319][ T3379] bridge11 (unregistering): left allmulticast mode [ 596.943198][ T3379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 596.952181][T11633] smbdirect: ib_dev[syz1] removed [ 596.959492][ T3379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 596.969800][ T3379] bond0 (unregistering): Released all slaves [ 596.975391][ T3379] bond1 (unregistering): Released all slaves [ 596.984464][ T3379] bond2 (unregistering): (slave veth3): Releasing active interface [ 596.995490][ T3379] bond2 (unregistering): Released all slaves [ 597.000557][ T3379] bond3 (unregistering): Released all slaves [ 597.006066][ T3379] bond4 (unregistering): Released all slaves [ 597.011154][ T3379] bond5 (unregistering): Released all slaves [ 597.021983][ T3379] bond6 (unregistering): Released all slaves [ 597.026994][ T3379] bond7 (unregistering): Released all slaves [ 597.036709][ T3379] bond9 (unregistering): Released all slaves [ 597.042532][ T3379] bond8 (unregistering): Released all slaves [ 597.049410][ T3379] bond10 (unregistering): Released all slaves [ 597.098473][ T3379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 597.109097][ T3379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 597.118620][ T3379] bond0 (unregistering): Released all slaves [ 597.139831][ T3379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 597.149808][ T3379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 597.161410][ T3379] bond0 (unregistering): Released all slaves [ 597.172713][T11628] netdevsim netdevsim4 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.172771][T11628] netdevsim netdevsim4 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.172805][T11628] netdevsim netdevsim4 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.198678][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 597.358322][ T3379] tipc: Disabling bearer [ 597.358895][ T3379] tipc: Disabling bearer [ 597.358979][ T3379] tipc: Disabling bearer [ 597.359044][ T3379] tipc: Left network mode [ 597.592391][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 597.874451][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4 [ 598.270713][ T5279] 8021q: adding VLAN 0 to HW filter on device eth5 [ 598.497719][ T3379] hsr_slave_0: left promiscuous mode [ 598.505411][ T3379] hsr_slave_1: left promiscuous mode [ 598.506048][ T3379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 598.506065][ T3379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.511483][ T3379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 598.511500][ T3379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.542959][ T3379] hsr_slave_0: left promiscuous mode [ 598.548896][ T3379] hsr_slave_1: left promiscuous mode [ 598.550502][ T3379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 598.550521][ T3379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.556345][ T3379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 598.556364][ T3379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.587047][ T3379] hsr_slave_0: left promiscuous mode [ 598.594848][ T3379] hsr_slave_1: left promiscuous mode [ 598.598036][ T3379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 598.598058][ T3379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.620137][ T3379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 598.627787][ T3379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.641196][ T3379] hsr_slave_0: left promiscuous mode [ 598.647241][ T3379] hsr_slave_1: left promiscuous mode [ 598.656494][ T3379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.664485][ T3379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.682534][ T3379] veth1_macvtap: left promiscuous mode [ 598.688222][ T3379] veth0_macvtap: left promiscuous mode [ 598.694153][ T3379] veth1_vlan: left promiscuous mode [ 598.699501][ T3379] veth0_vlan: left promiscuous mode [ 598.706041][ T3379] veth1_macvtap: left promiscuous mode [ 598.711812][ T3379] veth0_macvtap: left promiscuous mode [ 598.719247][ T3379] veth1_vlan: left promiscuous mode [ 598.726249][ T3379] veth1_macvtap: left promiscuous mode [ 598.726293][ T3379] veth0_macvtap: left promiscuous mode [ 598.726368][ T3379] veth1_vlan: left promiscuous mode [ 598.726411][ T3379] veth0_vlan: left promiscuous mode [ 598.923762][ T3379] team0 (unregistering): Port device team_slave_1 removed [ 598.931355][ T3379] team0 (unregistering): Port device team_slave_0 removed [ 599.201390][ T3379] team0 (unregistering): Port device team_slave_1 removed [ 599.209637][ T3379] team0 (unregistering): Port device team_slave_0 removed [ 599.314059][ T3379] team0 (unregistering): Port device team_slave_1 removed [ 599.321690][ T3379] team0 (unregistering): Port device team_slave_0 removed [ 599.366772][ T5279] 8021q: adding VLAN 0 to HW filter on device eth6 [ 599.823739][ T5279] 8021q: adding VLAN 0 to HW filter on device eth7 [ 600.099893][ T5279] 8021q: adding VLAN 0 to HW filter on device eth8 [ 600.114623][ T3379] IPVS: stop unused estimator thread 0... [ 600.346962][ T5279] 8021q: adding VLAN 0 to HW filter on device eth9 [ 600.579805][ T5279] 8021q: adding VLAN 0 to HW filter on device eth10 [ 600.803994][ T5279] 8021q: adding VLAN 0 to HW filter on device eth11 [ 601.029310][ T5279] 8021q: adding VLAN 0 to HW filter on device eth12