last executing test programs: 8.703053764s ago: executing program 3 (id=14501): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000ff0300000000000000000000850000001100000085000000a000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.550691618s ago: executing program 4 (id=14504): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000002d040000000000a149a09b768f944df630ac709d46ed7561133fa4a7f93288dbdf18d3615405ad00834fe297e90e8f65b4bd795a0e1a715bd91ca94f0d844427c821821df314add2c9a41cf5ef5e5fa474ae3a93b416f0d4de93a1bb00831d6761b68c91161d50da6e2b37a683728be808011133eda6025d525d83806639cd4412006da459aafdb85d7e5bc0218b746b37b629b5d8c8ed5c90e5dfe938ff0761592f96d900bab252790de0867fa47cb158b902655b014dc9998ccbf5228c2047f20a17466fe25f369a2c6f36a8ce7a8bac154d08c36cdfeef494c6ef", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x6}, @jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0xfffffffffffffff4, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x6, 0x0, 0x9, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x3}, 0x94) 8.479508443s ago: executing program 0 (id=14505): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x3, 0x6369, 0x7, 0x0, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x4, 0x80, 0x800, 0x6eec}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000001200)={0x60000010}) syz_emit_ethernet(0x134, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, 0x0) epoll_create1(0x80000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x9}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3}}, @typedef={0x4, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x4e, 0x0, 0x4}, 0x20) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 8.433472735s ago: executing program 3 (id=14507): r0 = socket$inet6(0xa, 0x3, 0x7) (async) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab00070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x3) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRESHEX], 0x44}}, 0x0) 8.290754525s ago: executing program 4 (id=14509): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x488, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0x141}, @nested={0x46e, 0x1, 0x0, 0x1, [@generic="1064598c3382549b51d045c198b8dd44d1d2e0638a3e330986e2a8cbce4d18bb3fe217a3ac833cef2910aeb269801db463affee4165e394e2766ba", @generic="2e029df8de122d4e72bdd40b4ee9f0f753b3645c6d15fefe4ee276", @typed={0x41, 0xf5, 0x0, 0x0, @binary="26b901c058667782000bb6861b67cf785e07f8c7e998c4b2cfc54c7ee94cd599253f951e2266b268ef916c9013e2ba277e161441e5a53fa95470f4ac0b"}, @nested={0x4, 0xe8}, @nested={0x3cb, 0x9f, 0x0, 0x1, [@nested={0x4, 0x2f}, @generic="c2ddcd436c46840ffd91109eace01481647c839584490a447e6b08cd79893d2121fbcb965dad9e2dfed8c5d5d60b4cb48ac25c0b514b7e1444cf8eb4638b0cc963534bf3e1c8ea089fea4e834a529e7919ec05082cf59b4750fa1118dfdd5fc6c7617c5140d0791588a5a39358c9b76d19ae31d6636e629cdfba49960af0aab08f02d1a9b4ea5b19c67e386800ec019399c1187dfdca3a897194be19559a47836da931da4226a49554d536a761e887b8a18077ff923c84dfe8e034e85ded43b198688066bceb755eced189756dc79964b099f531e5", @generic="ce583e5be546fe79fe2ebcd90771ebe2b0a85bdc9e96458cf9dfa8ef23ec656b651987bf4865e7e85a3eeb7a2984079fe9b8f37158ffecb3786c17a5f5c98f6612d8eebca4859ec3b0a224552dd311943724ff00a62cf5fa6ee8d4bb39dcfa85b6db0b8fb83c39528fc5164ddebdd6f0b97736a5662515a1ff6be7a7993af7152a61", @nested={0x26c, 0xb5, 0x0, 0x1, [@nested={0x267, 0x4, 0x0, 0x1, [@nested={0x15f, 0x157, 0x0, 0x1, [@nested={0x4, 0xed}, @typed={0x4, 0x100}, @typed={0x8, 0x68, 0x0, 0x0, @uid=0xee00}, @generic="128b2a350fe49604796b7f03f4617faabed33d03106fb06615968ed9793903a197ce6de7e4366a5c3916cc6088c214ef4ca478eb4e424766e65e6cf8a0b48a13226368611004dd858050b4635470d9a0346da0743ba1562a10f8719cf355e831a162b12609f51827dd17244974bcfb4f635c", @generic="dc021f167108cbb0c063ebd6f2eeeb2246402f013c4c231d1cd7342f8bad2a7d24f2b4eca67a77226b1b0deca7db82a58ebce126b2759598173cac1c7ec7192e7ff6854e82e65dadd7354ae51705a1fb7399608b19980e207d3214283cf612fbb938f3f3101415c27ab1ddb94caab2a7e87387477bf76bcb029184c6408dceb76781349c04ab121866a3bed2624bb8153ed931ffc75b91bb2dade109c80c261303a891bdcb0c5471ef0842142ab0d1bf42f7e3f48cdbf3f71f3d114b4de99623adf4d3a34e12bad3903efb6e5916ef10efc4cb085b03d93910"]}, @generic="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", @nested={0x8, 0x113, 0x0, 0x1, [@generic, @typed={0x4, 0x9}]}]}]}]}]}]}, 0x488}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x82800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r1, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x6008010) 8.103775325s ago: executing program 4 (id=14511): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001000)={'ip6_vti0\x00', &(0x7f0000001480)={'ip6_vti0\x00', r3, 0x4, 0x0, 0xb, 0x53f4d13b, 0x13, @private2, @remote, 0x700, 0x1, 0x4, 0x101}}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback, @local}}}], 0x40}, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8906, &(0x7f0000000000)={'gre0\x00', @ifru_settings={0xa75c, 0x1ff, @sync=&(0x7f0000001200)={0x0, 0x5, 0xffff}}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/ipc\x00') unshare(0x6a040000) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000002680), 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) r8 = syz_genetlink_get_family_id$fou(&(0x7f00000011c0), r6) sendmsg$FOU_CMD_GET(r6, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001240)={&(0x7f00000012c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00082609efffffffffffffff0c00000000bd1dcb2478c6344475001b994b7abf4eb8b4302ca93200000000009d7d344afb612cc000009addec54f5493c69026510b8bec2a8d6e8361ef4d360692b3f501f5f3c55d700d5eed9342b7fa62fd53517ad74cf5ed1aa620d4d11de8d868e5fda5c854ff859f68549f19edf8683fd0387c43632321697d2cbe9b24ac838345bb8c4e38d6cd8d8b42185a4874c1c6c29612874747c23733701b73c9266f322e051cc3145a6ecdecf0e59020b36766a8f912b3fb962f0f72e4d18d0c8e6bf6d89370b"], 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x48090) r9 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r9, 0x0, 0xf, &(0x7f0000000000)=0xfffffffc, 0x4) bind$inet(r9, &(0x7f00000000c0)={0x2, 0x4e1e, @rand_addr=0x64010102}, 0x10) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x5c3153ef303afdb3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) ioctl$sock_netdev_private(r5, 0x89f3, &(0x7f0000000000)) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000010c0), &(0x7f0000001100)=0x4) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x8000) 8.103148538s ago: executing program 0 (id=14512): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 8.004364346s ago: executing program 3 (id=14513): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, 0x21, 0x400, 0x70bd29, 0x25dfdbff, {}, [@typed={0xc, 0x69, 0x0, 0x0, @u64=0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008810}, 0x4000051) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x7}, 0x1c) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x14, 0x0, &(0x7f0000000080)="259a001471a76d2688a24e6588a8fb5e0af66395", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x58, 0x7, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xe}]}, 0x58}, 0x1, 0x0, 0x0, 0x8095}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000070000009500000000000000388be62809740986184098e85791618cad008c867214c6b1659815277d5c40d4686c088cb1f6186653a2ce5da2adb6d03e5fa2ed1327937d216dc0e33cfeea61ecb1e926eb5f7a9fd6b9cca4198d1912c71319dceca64675479c3f05f696df2a7b1ceb0c5aa0f0fbd7840ff567fc4ebdcb449d6fb59fd3053a214d20b93be7252d4d37b27b4fe0e8a6c22d08aead9a09ce5fffc7e9521aa429f4339dd68f7bffd1c33338e23b3f50a888e1b8bc8d901aff3a31a97463a0ff8c7824b452941b06575de141044bbbaf362db113e246cea294397be0e6adfcf474030576f53eacc0fc031f7bbd88dbef98b178"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6}, 0x94) r7 = socket$kcm(0x2, 0xa, 0x2) sendto(r7, 0x0, 0x0, 0x80, 0x0, 0x0) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r8, 0x104, 0x7bb5ab18c4fc9ad, &(0x7f00000002c0)=0x3, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="182000de1000000000000080bfe1a11e181100a5", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000880)={@fallback, 0xffffffffffffffff, 0x1}, 0x20) 7.752995981s ago: executing program 0 (id=14515): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fcffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffffbb702000008000000b703000000000038efa504c20d472e291a80850000007300"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}}, 0x10, &(0x7f00000004c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="20040000060000008400000001000000000001000c0000000000e7ffffff000000000000000000fdff000062", @ANYRES32=0x0], 0x30}], 0x1, 0x804) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40041, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x10, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) pipe(0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r3, &(0x7f0000000840)=ANY=[@ANYBLOB], 0xfce) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r6, 0x1) recvmmsg(r5, &(0x7f0000001d00), 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) recvmsg(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x10000) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x1, r7, 0x400000}, 0x10) 825.649475ms ago: executing program 1 (id=14520): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r0, 0x8923, &(0x7f0000000540)="cc3a30") (fail_nth: 7) 825.155198ms ago: executing program 2 (id=14522): socket$kcm(0x10, 0x7, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000240)) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="29316b3a200a185a258d3a3b43dd129487d902c9ad6a6ecee5a07242661c28368d6f44d8bc4db4b577a8bdeb5c1b425f3056e4aa047724df38409c874ceee47f0d60e7bd48436ce61eaed91b87a7df1050e172ec970a58ca372f40e199786102e3f7f0c8f4fd36e6e6a92b50970a23bc06023b79c96e6a66903d77d37cf47d01f0ae99c50eae23153640cfa47cf2b5e74f2d7382d030855e49cdedf25b8552d48b0ecf434a6ef2a07a06a4df877b89a993ec", 0xb2}, {&(0x7f00000000c0)="f96a69ce83a70e93", 0x8}, {&(0x7f0000000100)="a5b9a15854ee41c36a42589893e693e09727ec239f21b0c3d96122319fa9758ec612a4139d1d3e61b9d4606d32032d11a4a1c2c22229283e8997e2352562c23c979877734f1902c5827c148c1fc699a8b5ff492bda82f49d26168341c396facfe152fb7495e285e24c3d8fa356ec2ac9fdcc67", 0x73}, {&(0x7f0000000180)="8f1755f0b9e3dba874b40215e7ccae283f54e281ab90e7e9ebcb586363f25b261462ff32c7384737240943b2b502b322c831b73dbd98119ed678edd7ffc2cebf4b83753a7069612bef54143abbb0f26492", 0x51}], 0x4}, 0x0) 541.734369ms ago: executing program 1 (id=14523): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000a40)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="77167ead34cd1eaf2108c04de96e99fa4435f9041368e8dfec6af2ae8080b56c53c12b8431d17955ae1ec78709eee9acf825fdb672651f7eafb44b576930aff4b6a86ced3e4392cfe57a2c11b97e93f38debd6dc69", 0x55}], 0x1, 0x0, 0x0, 0x40880}], 0x1, 0x4814) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x1, 0x84) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYRES64=0x0], 0x30}, 0x1, 0x0, 0x0, 0x8090}, 0x0) 541.458141ms ago: executing program 2 (id=14524): r0 = socket$phonet(0x23, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='erspan0\x00', 0x10) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000000)=0x2f9d) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004) 541.328761ms ago: executing program 1 (id=14525): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 483.936976ms ago: executing program 0 (id=14526): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd23, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x35a38, 0x4a011}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x81}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040044) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000000)={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}, 0xc) 483.268955ms ago: executing program 1 (id=14527): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @local, 0x8, 0x10000000}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000800)="e3bc03a46f04", 0x6}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'caif0\x00', @random="0200ac7f7f00"}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x800) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="0800101d89b5eb00", 0x8}], 0x1}, 0x20010404) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0x4, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x4c238}, [@IFLA_VF_PORTS={0x4}, @IFLA_LINK={0x8}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x34}}, 0x8000002) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 482.021103ms ago: executing program 2 (id=14528): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000ff0300000000000000000000850000001100000085000000a000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 481.65967ms ago: executing program 3 (id=14529): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d030000000000000000000002000000000000000000000009030000000000000063"], 0x0, 0x52}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000010073797a310000800008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a39002b6c7417613282ca7387030b1df4830000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f140000001100012ea01fe9f67553efd11729bc18f587d5ff83e6556558b77419dee22f4576acb821e300000000000000d43f34eb2849b1ff4030f0f9d897836bcc8d52543feafb5cb5ccfe7e5eed481a090c01fdc2b5a2f90a587ced93a4a7f0f6d162d20c1941cf2164f59be29796cf0936d58e0cb8a053be6a36ba70210a723d03e7d1cd6555d5ad90b872a5d174cd8f60883f133a422be14a3f0385f0157cf7004f0697ee80f515768d7b4ef2b0304b4da2851c144cdc985c8390933319fcc71abaafa3d20aaf78"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="380000000d0a010800000000000000000a0000000900020073797a31000000000900012073797a31000000000c0003800800008004000180"], 0x38}, 0x1, 0x0, 0x0, 0x4004001}, 0x8000) 480.209223ms ago: executing program 4 (id=14530): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f00000000c0)=0x6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4060000000000007111b100000000008510000002000000850000000700000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) 326.955018ms ago: executing program 2 (id=14531): close(0x4) syz_open_procfs$namespace(0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xeb0, 0x30, 0xb, 0x0, 0x0, {}, [{0xe9c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x20003, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffbc, 0x80, 0x3}, {0x3ff, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0xffffffff, 0x3, 0x80, 0x0, 0xacc4, 0x42}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0x1001, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3fd, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x1, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x5, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x4, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x3, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x3, 0x40007023, 0x1ff, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0xc000, 0x2, 0x89, 0x2}, {0x10001, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x1, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x5}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xffd, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x8, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0x9, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x55, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff4, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x8, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0xf9, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x2, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0xfffffff1, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0x40c651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0xe4ffffff, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1ac6}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x7, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d3, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x808, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x40000004, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xebd8}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x4}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb0}}, 0x0) 320.345195ms ago: executing program 4 (id=14532): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum={0x0, 0x0, 0x0, 0x10}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x4, [{0x0, 0x2}]}]}}, 0x0, 0x4a}, 0x20) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_FSGEOMETRY_V1(0xffffffffffffffff, 0x80705864, &(0x7f0000000580)) (async) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d80), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup, 0xf, 0x1, 0x200, &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0], 0x0}, 0x40) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz0\x00', 0x200002, 0x0) (async) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)=@generic={&(0x7f00000004c0)='./file0\x00', 0x0, 0x4}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@cgroup=r4, 0xffffffffffffffff, 0x32, 0x14, 0x0, @void, @value=r5, @void, @void, r3}, 0x20) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000700)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0], 0x0, 0x50, &(0x7f00000007c0)=[{}], 0x8, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0xa3, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)={@ifindex=r6, 0xffffffffffffffff, 0x26, 0x8, 0x0, @void, @value, @void, @void, r3}, 0x20) (async) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000000)={0x30, r1, 0xd34cad49073c667, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x2}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0080c0}, 0x48000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000180100000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6(0xa, 0x1, 0x6) (async) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r2) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r9, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x24000880) getsockopt$sock_linger(r8, 0x1, 0xd, 0x0, &(0x7f0000000140)) (async, rerun: 32) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (rerun: 32) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) socket$kcm(0x29, 0x4, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "74016aff130000fd"}, 0x38) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000000014000000000000001a"], 0x100}, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) (async, rerun: 64) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa280180c200000e86dd6000000000183a0006000000000000000000000000000001000000000000000000000000000000011a4d5527000936c0fe8000000000000000000000000000bb"], 0x0) (async, rerun: 32) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 223.378073ms ago: executing program 3 (id=14533): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000cf00e3000000000085100000fcffffff2500ffff1000000095000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x8}, 0x94) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000001740), 0x0, &(0x7f0000000080)=""/192, 0x105}, 0x40002000) 211.198855ms ago: executing program 1 (id=14534): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x500, 0x340, 0x11, 0x148, 0x0, 0x0, 0x468, 0x2a8, 0x2a8, 0x468, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x6, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xf8, 0x128, 0x0, {0x0, 0x100000}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x4, 0x0, 0x2}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x560) 184.330157ms ago: executing program 0 (id=14535): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x5a0, 0x0, 0xffffff80, 0x178, 0xd0040000, 0x178, 0x4d0, 0x22b, 0x258, 0x4d0, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x368, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {0x0, 0x0, 0x1}, {0x0, 0x40}, {}, {0x0, 0x7, 0x8}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x4}, {}, {0x6, 0x0, 0x0, 0xb1000000}, {}, {0x9}, {}, {}, {}, {0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x870}, {}, {}, {}, {0x2, 0xfe}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x3, 0x10}, {}, {}, {0xfffe, 0x7, 0x4}, {0x0, 0x0, 0x1}, {0x0, 0x1}, {0x8, 0x8, 0x0, 0xfffffffc}, {}, {0x0, 0xfc, 0xe4}, {0x0, 0x0, 0xff}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x4, 0x8a}, {}, {}, {}, {0x0, 0x4}]}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1c, 0x7, 0x279, 0x2, 'netbios-ns\x00', 'syz1\x00', {0x170}}}}, {{@ipv6={@private2, @empty, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xffffff00], 'vlan1\x00', 'pim6reg1\x00', {}, {0xff}, 0x0, 0x9, 0x1, 0x12}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x11, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) 123.533727ms ago: executing program 2 (id=14536): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d000000040000000200000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000400)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r4, &(0x7f0000000000), &(0x7f0000000500)=""/216}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffdef) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}, 0x1, 0x0, 0x0, 0x28008000}, 0x20000800) r7 = openat$cgroup_devices(r5, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB='b\t'], 0x9) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000090a010400000000000000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797ab10000000008000640ffffff000800084000000001080003400000011c14000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 121.948633ms ago: executing program 4 (id=14537): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) unshare(0x2c020400) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b0000000500000000040000"], 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) pipe(&(0x7f0000002740)) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800"/11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="0a006558bbbbbbbbbbbbaaaaaaaa2abb86dd6d002000009c1100fe80000000600000000000000000001aff85"], 0xd6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x50, 0x71, 0x10, 0x1a}}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x48}, 0x94) 121.280934ms ago: executing program 3 (id=14538): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r0, 0x8923, &(0x7f0000000540)="cc3a30") (fail_nth: 8) 51.871556ms ago: executing program 0 (id=14539): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x0, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0xfffffffffffffe9a, 0x1, {{0x0, 0x0, 0x0, r1, 0x201, 0x68320}}}}}}, @IFLA_LINKMODE={0x0, 0x11, 0x38}]}, 0x48}, 0x1, 0x2000, 0x0, 0x40}, 0x240400c4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000002c0)}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000680)={r2, &(0x7f0000000580)="293995c9c34cbac71490757e7da71e2f1286ce7f2b1ea10c8d055992d9140d4096a431e1c5b254597b34e16dc6fd29442282eca8854dd746f13974209ff270d51b516dfb7e5d46cb90c45b3b241580a7e4f128a0caacf85e4193e6f9df33a1ce758d306e", &(0x7f0000000640)=@udp6=r3}, 0x20) r4 = socket$kcm(0x29, 0x7, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000100)=@nfc_llcp={0x27, r5, 0xffffffffffffffff, 0x3, 0x86, 0xac, "f5243470a548040f65a930823cfb084fb9b6b4eadb23c59e0b75d3eb07e252daad72e8eb54a7c5c0b176f55557a3b1f00ea53072974b0dc9d3ae418cbb6e3b", 0x29}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000180)="4aba8956bde8d79a0c5126c56aca82ba172bf4c3391b0f060010240b168b0e79dde5256ca4bfab62a39674791c0638701108ac97572facc343fbaf23b5581327605d7b02186b934986cbe445ca8b3d3219ac496fd9fc05e42abb323f3cd1c6ca0fcbe0739fda58a231118eefe42989299c059d0a7629d51068efd12155ef624665d441478f513b73e604285daa7587742fcf9a1ec58fb906939b7ac885f7fb6c683b732e1d19f94352d3bd0a06c9e38994", 0xb1}, {&(0x7f00000003c0)="a50b1960b08a4122d3a029dbae9adf6432fdcff55e7f33dea9df5c9d60e418705929a7d56747c6a69cfcf056f3a1e8bd1e39ff3885cbd29b8fc0c6cd944f5fd34934af9c03598624bb936872d966bd2f250b8e9968b7978013a045f19f36942092075e515a00e7fb02304a8aa9a4b0d4e3a470b47663640ab28f9a84eeda9e522dcefc9beb165ff28de8d1c132f6f69e88e25e2b2e8dfd3052b3ceb8e6178637db70e9b32fee2bb2444409c09b71d06d3c9f2ceef4e00de802d78b95cbae0214297fec3c92fbe3eb9617e097a56a12a23b7b3e414a384003c68bc153095ed0bb373e68fa369408f227f027c42d7a907b5ad81c208815c3e264ca", 0xfa}, {&(0x7f00000004c0)="aa165adcd850b4b92bc894a82ee428e9bfbbec3e2a3952f8", 0x18}], 0x3}, 0x40000) 51.488507ms ago: executing program 1 (id=14540): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r5 = accept$alg(r4, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000002880)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="fc4406008e199ae0898c7a8988823619badd4fe626289574f86d0809dc46543a7397ceafd65272d07668", 0x2a}, {&(0x7f00000048c0)="4aa6ebbaadac821a088be79aff597e399b67d0e0d8b16af93d4078939730787afd7ca85bd5aa74fab362b0585f095ee8c513e864ee7783500a577bfbf648389284cb6744ba7d2e73d9d618702e712ecd6a199286326ff22d59544afc715f8eccf9b851691d3b14dac31434bfec34c03dce1c596738e7f8a4ac186af40bad817595723a21c333b257df41c2a304d5f8d5315fd712508ae16bdaf38e6393b3937971c39c171b44fc2e9ec39572aed0bd04469e4ae3a79961", 0xb7}], 0x2, 0x0, 0x0, 0x800}], 0x1, 0x4815) recvmmsg(r5, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000980)=""/87, 0x57}], 0x1}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x34, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf3c4}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffffffff}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0xfffffffffffffe61, 0xb, 0x6}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x7}, @TCA_FQ_CODEL_ECN={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1e, 0x2, 0x3, 0x9, 0x2, 0xffffffff, 0x3}}, {0x4}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000005700)=""/4112, 0x1010}, {&(0x7f0000003700)=""/4087, 0xff7}, {&(0x7f0000000280)=""/42, 0x2a}, {&(0x7f00000016c0)=""/4095, 0xfff}, {&(0x7f00000005c0)=""/209, 0xd1}, {&(0x7f0000004700)=""/4096, 0x1000}, {&(0x7f0000000040)=""/53, 0x35}], 0x7}, 0x32120) 0s ago: executing program 2 (id=14541): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000ff0300000000000000000000850000001100000085000000a000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): gister+0x10/0x10 [ 2077.672045][T19618] ? __pfx_netdev_run_todo+0x10/0x10 [ 2077.672070][T19618] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 2077.672121][T19618] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 2077.672154][T19618] ieee80211_register_hw+0x3d82/0x4a70 [ 2077.672181][T19618] ? __lock_acquire+0x6b5/0x2cf0 [ 2077.672231][T19618] ? ieee80211_register_hw+0x1901/0x4a70 [ 2077.672291][T19618] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2077.672329][T19618] ? __hrtimer_setup+0x181/0x200 [ 2077.672361][T19618] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2077.672468][T19618] mac80211_hwsim_new_radio+0x3334/0x5ba0 [ 2077.672567][T19618] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2077.672600][T19618] ? kstrndup+0xbf/0x160 [ 2077.672645][T19618] hwsim_new_radio_nl+0xf6a/0x1c00 [ 2077.672710][T19618] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2077.672757][T19618] ? rcu_is_watching+0x15/0xb0 [ 2077.672791][T19618] ? trace_kmalloc+0x2a/0x110 [ 2077.672827][T19618] ? __nla_parse+0x40/0x60 [ 2077.672859][T19618] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 2077.672885][T19618] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 2077.672921][T19618] genl_family_rcv_msg_doit+0x22a/0x330 [ 2077.672956][T19618] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2077.672998][T19618] ? bpf_lsm_capable+0x9/0x20 [ 2077.673031][T19618] ? security_capable+0x7e/0x2c0 [ 2077.673076][T19618] genl_rcv_msg+0x61c/0x7a0 [ 2077.673110][T19618] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2077.673141][T19618] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2077.673195][T19618] netlink_rcv_skb+0x232/0x4b0 [ 2077.673229][T19618] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2077.673256][T19618] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2077.673310][T19618] ? down_read+0x272/0x2e0 [ 2077.673338][T19618] ? genl_rcv+0xd/0x40 [ 2077.673363][T19618] genl_rcv+0x28/0x40 [ 2077.673385][T19618] netlink_unicast+0x75c/0x8e0 [ 2077.673430][T19618] netlink_sendmsg+0x813/0xb40 [ 2077.673475][T19618] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2077.673513][T19618] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2077.673539][T19618] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2077.673571][T19618] ____sys_sendmsg+0x972/0x9f0 [ 2077.673620][T19618] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2077.673668][T19618] ? import_iovec+0x73/0xa0 [ 2077.673701][T19618] ___sys_sendmsg+0x2a5/0x360 [ 2077.673745][T19618] ? __pfx____sys_sendmsg+0x10/0x10 [ 2077.673789][T19618] ? futex_wake+0x4ac/0x580 [ 2077.673859][T19618] ? __fget_files+0x2a/0x420 [ 2077.673880][T19618] ? __fget_files+0x3a0/0x420 [ 2077.673916][T19618] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2077.673955][T19618] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2077.674003][T19618] ? rcu_is_watching+0x15/0xb0 [ 2077.674054][T19618] do_syscall_64+0x14d/0xf80 [ 2077.674080][T19618] ? trace_irq_disable+0x3b/0x150 [ 2077.674101][T19618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2077.674131][T19618] ? clear_bhb_loop+0x40/0x90 [ 2077.674162][T19618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2077.674187][T19618] RIP: 0033:0x7fde8399c819 [ 2077.674211][T19618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2077.674232][T19618] RSP: 002b:00007fde8485b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2077.674259][T19618] RAX: ffffffffffffffda RBX: 00007fde83c15fa0 RCX: 00007fde8399c819 [ 2077.674277][T19618] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000007 [ 2077.674293][T19618] RBP: 00007fde83a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 2077.674308][T19618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2077.674322][T19618] R13: 00007fde83c16038 R14: 00007fde83c15fa0 R15: 00007ffe7b2201a8 [ 2077.674363][T19618] [ 2078.117584][T19619] netem: change failed [ 2078.158391][T19624] tipc: Resetting bearer [ 2078.279654][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2078.533583][T19630] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13639'. [ 2078.545385][T19630] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13639'. [ 2079.320325][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2080.359915][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2081.400179][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2082.439710][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2083.480488][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2084.519693][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2085.560150][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2086.599718][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2087.640217][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2088.681814][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2089.720091][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2090.759654][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2091.810132][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2091.980244][T19699] syzkaller1: entered promiscuous mode [ 2091.992754][T19699] syzkaller1: entered allmulticast mode [ 2092.839831][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2093.880208][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2094.731561][T19688] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2094.871892][T19735] netlink: 116 bytes leftover after parsing attributes in process `syz.4.13659'. [ 2094.919581][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2095.128892][T19757] xt_hashlimit: max too large, truncated to 1048576 [ 2095.960232][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2096.999743][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2098.040185][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2098.926207][ T1304] lec:lec_start_xmit: lec0:No lecd attached [ 2099.079580][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2100.120245][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2101.159701][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2101.854878][T19804] netlink: 'syz.1.13672': attribute type 15 has an invalid length. [ 2102.006278][T19817] netlink: 'syz.4.13675': attribute type 1 has an invalid length. [ 2102.015368][T19817] openvswitch: netlink: Missing valid actions attribute. [ 2102.023194][T19817] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2102.117686][T19822] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13676'. [ 2102.200300][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2103.239704][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2103.939417][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 2103.947724][ C0] lec:lec_tx_timeout: lec0 [ 2103.953207][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 2104.280167][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2104.719121][T19796] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2104.899988][T19836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2105.319665][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2106.360152][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2107.399760][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2108.440116][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2108.969562][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 2108.977904][ C0] lec:lec_tx_timeout: lec0 [ 2109.479646][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2110.520089][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2111.559779][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2112.600186][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2113.639670][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2114.680118][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2115.719614][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2116.760307][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2117.799689][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2118.840165][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2119.879658][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2120.920071][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2121.959624][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2123.000212][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2124.039676][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2125.080084][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2126.119666][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2127.160223][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2128.199620][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2128.240424][T19926] netlink: 'syz.3.13686': attribute type 6 has an invalid length. [ 2128.833002][T19949] lo speed is unknown, defaulting to 1000 [ 2128.839741][T19945] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13692'. [ 2129.128345][T19966] netlink: 'syz.1.13698': attribute type 1 has an invalid length. [ 2129.173892][ T404] block nbd0: Receive control failed (result -32) [ 2129.240303][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2129.396130][T19966] bond59: entered promiscuous mode [ 2129.427765][T19979] netlink: 'syz.1.13698': attribute type 17 has an invalid length. [ 2129.463367][T19966] 8021q: adding VLAN 0 to HW filter on device bond59 [ 2129.530670][T19949] syzkaller0 speed is unknown, defaulting to 1000 [ 2129.579117][T19966] netlink: 72 bytes leftover after parsing attributes in process `syz.1.13698'. [ 2129.632945][T19990] netlink: 5092 bytes leftover after parsing attributes in process `syz.2.13704'. [ 2129.673453][T19993] netlink: 'syz.0.13705': attribute type 1 has an invalid length. [ 2129.707469][T19995] xt_bpf: check failed: parse error [ 2129.869157][T19999] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13707'. [ 2129.871464][T20000] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2130.033667][T20005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13712'. [ 2130.279586][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2130.293305][T19949] lo speed is unknown, defaulting to 1000 [ 2130.315708][T20003] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13710'. [ 2130.662180][T20040] syzkaller1: entered promiscuous mode [ 2130.667796][T20040] syzkaller1: entered allmulticast mode [ 2130.725162][T20044] xt_bpf: check failed: parse error [ 2130.921969][T20050] IPVS: length: 242 != 8 [ 2130.956630][T20050] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13722'. [ 2131.061051][T20055] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13724'. [ 2131.071746][T20056] Cannot find set identified by id 65534 to match [ 2131.320084][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2132.359629][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2133.400125][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2134.439720][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2135.480198][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2136.519755][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2137.560168][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2138.129597][T20087] sctp: [Deprecated]: syz.2.13727 (pid 20087) Use of int in max_burst socket option. [ 2138.129597][T20087] Use struct sctp_assoc_value instead [ 2138.337768][T20108] xt_bpf: check failed: parse error [ 2138.514407][T20119] netlink: 'syz.2.13737': attribute type 4 has an invalid length. [ 2138.548326][T20119] netlink: 'syz.2.13737': attribute type 4 has an invalid length. [ 2138.568798][T20124] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13739'. [ 2138.599740][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2138.950966][T20134] sit0: left promiscuous mode [ 2139.114079][T20134] veth10: left promiscuous mode [ 2139.127794][T20134] vlan6: left promiscuous mode [ 2139.136138][T20134] geneve1: left promiscuous mode [ 2139.142242][T20134] vlan6: left allmulticast mode [ 2139.147240][T20134] geneve1: left allmulticast mode [ 2139.152826][T20134] ip6tnl5: left allmulticast mode [ 2139.176620][T20134] tipc: Resetting bearer [ 2139.195405][T20134] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 2139.203429][T20134] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 2139.214595][T20134] vlan7: left allmulticast mode [ 2139.220178][T20134] bridge27: left allmulticast mode [ 2139.226534][T20134] bond26: left promiscuous mode [ 2139.232886][T20134] gretap3: left promiscuous mode [ 2139.238663][T20134] bond27: left promiscuous mode [ 2139.266893][T20134] bridge31: left allmulticast mode [ 2139.280085][T20134] hsr0: left promiscuous mode [ 2139.295347][T20134] bond39: left promiscuous mode [ 2139.301124][T20134] bridge32: left promiscuous mode [ 2139.506887][T20134] bond59: left promiscuous mode [ 2139.548680][ T7250] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2139.557452][T20142] FAULT_INJECTION: forcing a failure. [ 2139.557452][T20142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2139.571749][ T1167] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2139.586144][ T1167] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2139.596142][ T1167] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2139.618670][T20142] CPU: 1 UID: 0 PID: 20142 Comm: syz.2.13743 Not tainted syzkaller #0 PREEMPT(full) [ 2139.618719][T20142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2139.618742][T20142] Call Trace: [ 2139.618752][T20142] [ 2139.618764][T20142] dump_stack_lvl+0xe8/0x150 [ 2139.618803][T20142] should_fail_ex+0x412/0x560 [ 2139.618846][T20142] _copy_to_user+0x31/0xb0 [ 2139.618878][T20142] simple_read_from_buffer+0xe1/0x170 [ 2139.618924][T20142] proc_fail_nth_read+0x1bb/0x230 [ 2139.618963][T20142] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2139.619002][T20142] ? rw_verify_area+0x2a6/0x4d0 [ 2139.619028][T20142] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2139.619064][T20142] vfs_read+0x20c/0xa70 [ 2139.619088][T20142] ? fdget_pos+0x246/0x320 [ 2139.619116][T20142] ? __pfx___mutex_lock+0x10/0x10 [ 2139.619145][T20142] ? __pfx_vfs_read+0x10/0x10 [ 2139.619173][T20142] ? __fget_files+0x2a/0x420 [ 2139.619200][T20142] ? __fget_files+0x3a0/0x420 [ 2139.619221][T20142] ? __fget_files+0x2a/0x420 [ 2139.619254][T20142] ksys_read+0x150/0x270 [ 2139.619282][T20142] ? __pfx_ksys_read+0x10/0x10 [ 2139.619319][T20142] do_syscall_64+0x14d/0xf80 [ 2139.619343][T20142] ? trace_irq_disable+0x3b/0x150 [ 2139.619363][T20142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2139.619386][T20142] ? clear_bhb_loop+0x40/0x90 [ 2139.619414][T20142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2139.619438][T20142] RIP: 0033:0x7fde8395d04e [ 2139.619459][T20142] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2139.619478][T20142] RSP: 002b:00007fde8485afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2139.619505][T20142] RAX: ffffffffffffffda RBX: 00007fde8485b6c0 RCX: 00007fde8395d04e [ 2139.619521][T20142] RDX: 000000000000000f RSI: 00007fde8485b0a0 RDI: 0000000000000004 [ 2139.619534][T20142] RBP: 00007fde8485b090 R08: 0000000000000000 R09: 0000000000000000 [ 2139.619549][T20142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2139.619563][T20142] R13: 00007fde83c16038 R14: 00007fde83c15fa0 R15: 00007ffe7b2201a8 [ 2139.619602][T20142] [ 2139.839773][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2139.939126][T20157] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13748'. [ 2140.075558][T20163] FAULT_INJECTION: forcing a failure. [ 2140.075558][T20163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2140.127045][T20163] CPU: 0 UID: 0 PID: 20163 Comm: syz.2.13750 Not tainted syzkaller #0 PREEMPT(full) [ 2140.127078][T20163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2140.127093][T20163] Call Trace: [ 2140.127103][T20163] [ 2140.127114][T20163] dump_stack_lvl+0xe8/0x150 [ 2140.127152][T20163] should_fail_ex+0x412/0x560 [ 2140.127195][T20163] _copy_from_user+0x2d/0xb0 [ 2140.127233][T20163] __sys_connect+0x156/0x450 [ 2140.127267][T20163] ? __pfx___sys_connect+0x10/0x10 [ 2140.127312][T20163] ? __pfx_ksys_write+0x10/0x10 [ 2140.127349][T20163] __x64_sys_connect+0x7a/0x90 [ 2140.127382][T20163] do_syscall_64+0x14d/0xf80 [ 2140.127407][T20163] ? trace_irq_disable+0x3b/0x150 [ 2140.127428][T20163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2140.127452][T20163] ? clear_bhb_loop+0x40/0x90 [ 2140.127481][T20163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2140.127504][T20163] RIP: 0033:0x7fde8399c819 [ 2140.127526][T20163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2140.127546][T20163] RSP: 002b:00007fde8485b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2140.127572][T20163] RAX: ffffffffffffffda RBX: 00007fde83c15fa0 RCX: 00007fde8399c819 [ 2140.127589][T20163] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000005 [ 2140.127604][T20163] RBP: 00007fde8485b090 R08: 0000000000000000 R09: 0000000000000000 [ 2140.127618][T20163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2140.127633][T20163] R13: 00007fde83c16038 R14: 00007fde83c15fa0 R15: 00007ffe7b2201a8 [ 2140.127671][T20163] [ 2140.313654][T20171] netlink: 'syz.4.13751': attribute type 1 has an invalid length. [ 2140.370988][T20172] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2140.516830][T20171] 8021q: adding VLAN 0 to HW filter on device bond60 [ 2140.529127][T20173] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13747'. [ 2140.559627][T20178] Cannot find set identified by id 65534 to match [ 2140.609440][T20173] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13747'. [ 2140.619532][T20173] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13747'. [ 2140.653950][T20181] xt_ecn: cannot match TCP bits for non-tcp packets [ 2140.661544][T20173] netlink: 1036 bytes leftover after parsing attributes in process `syz.0.13747'. [ 2140.821460][T20184] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13755'. [ 2140.919697][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2141.054902][T20198] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 2141.062549][T20198] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 2141.072356][T20198] tipc: Resetting bearer [ 2141.302319][T20211] netlink: 136 bytes leftover after parsing attributes in process `syz.4.13761'. [ 2141.344963][T20211] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 2141.367751][T20218] FAULT_INJECTION: forcing a failure. [ 2141.367751][T20218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2141.385838][T20218] CPU: 0 UID: 0 PID: 20218 Comm: syz.3.13764 Not tainted syzkaller #0 PREEMPT(full) [ 2141.385871][T20218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2141.385884][T20218] Call Trace: [ 2141.385894][T20218] [ 2141.385904][T20218] dump_stack_lvl+0xe8/0x150 [ 2141.385942][T20218] should_fail_ex+0x412/0x560 [ 2141.385984][T20218] _copy_to_user+0x31/0xb0 [ 2141.386015][T20218] simple_read_from_buffer+0xe1/0x170 [ 2141.386056][T20218] proc_fail_nth_read+0x1bb/0x230 [ 2141.386107][T20218] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2141.386154][T20218] ? rw_verify_area+0x2a6/0x4d0 [ 2141.386186][T20218] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2141.386236][T20218] vfs_read+0x20c/0xa70 [ 2141.386260][T20218] ? fdget_pos+0x246/0x320 [ 2141.386287][T20218] ? __pfx_nr_connect+0x10/0x10 [ 2141.386318][T20218] ? __pfx___mutex_lock+0x10/0x10 [ 2141.386347][T20218] ? __pfx_vfs_read+0x10/0x10 [ 2141.386376][T20218] ? __fget_files+0x2a/0x420 [ 2141.386403][T20218] ? __fget_files+0x3a0/0x420 [ 2141.386424][T20218] ? __fget_files+0x2a/0x420 [ 2141.386464][T20218] ksys_read+0x150/0x270 [ 2141.386494][T20218] ? __pfx_ksys_read+0x10/0x10 [ 2141.386541][T20218] do_syscall_64+0x14d/0xf80 [ 2141.386571][T20218] ? trace_irq_disable+0x3b/0x150 [ 2141.386593][T20218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2141.386617][T20218] ? clear_bhb_loop+0x40/0x90 [ 2141.386646][T20218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2141.386669][T20218] RIP: 0033:0x7f6751f5d04e [ 2141.386691][T20218] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2141.386710][T20218] RSP: 002b:00007f6752dedfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2141.386737][T20218] RAX: ffffffffffffffda RBX: 00007f6752dee6c0 RCX: 00007f6751f5d04e [ 2141.386754][T20218] RDX: 000000000000000f RSI: 00007f6752dee0a0 RDI: 0000000000000004 [ 2141.386769][T20218] RBP: 00007f6752dee090 R08: 0000000000000000 R09: 0000000000000000 [ 2141.386783][T20218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2141.386797][T20218] R13: 00007f6752216038 R14: 00007f6752215fa0 R15: 00007fff9ac7eb48 [ 2141.386836][T20218] [ 2141.608021][T20217] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13763'. [ 2141.791331][T20230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13769'. [ 2141.814385][T20231] netlink: 'syz.1.13767': attribute type 11 has an invalid length. [ 2141.844190][T20232] openvswitch: netlink: Flow key attr not present in new flow. [ 2141.959745][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2142.401022][T20254] netlink: 'syz.2.13775': attribute type 29 has an invalid length. [ 2142.999626][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2143.057449][T20269] sctp: [Deprecated]: syz.3.13780 (pid 20269) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2143.057449][T20269] Use struct sctp_sack_info instead [ 2143.646858][T20275] __nla_validate_parse: 5 callbacks suppressed [ 2143.646881][T20275] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13783'. [ 2143.861611][T20286] tipc: Enabling of bearer rejected, already enabled [ 2143.907223][T20288] lo speed is unknown, defaulting to 1000 [ 2143.908857][T20286] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13786'. [ 2143.936306][T20291] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13788'. [ 2143.988392][T20291] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13788'. [ 2144.039681][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2144.049149][T20291] netlink: 52 bytes leftover after parsing attributes in process `syz.4.13788'. [ 2144.111338][T20294] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2144.235607][T20305] xt_hashlimit: max too large, truncated to 1048576 [ 2144.244115][T20304] netlink: 176 bytes leftover after parsing attributes in process `syz.1.13789'. [ 2144.244115][T20306] netlink: 176 bytes leftover after parsing attributes in process `syz.1.13789'. [ 2144.515823][T20288] syzkaller0 speed is unknown, defaulting to 1000 [ 2144.545507][T20314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13792'. [ 2144.632768][T20321] netlink: 48 bytes leftover after parsing attributes in process `syz.1.13795'. [ 2144.678969][T31008] nci: nci_rsp_packet: unknown rsp opcode 0x629 [ 2145.079616][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2145.105706][T20288] lo speed is unknown, defaulting to 1000 [ 2145.735056][T20352] netlink: 68 bytes leftover after parsing attributes in process `syz.1.13803'. [ 2145.746528][T20352] netlink: 'syz.1.13803': attribute type 1 has an invalid length. [ 2145.864504][T20352] 8021q: adding VLAN 0 to HW filter on device bond60 [ 2145.910430][T20354] bond60: (slave geneve6): making interface the new active one [ 2145.921283][T20354] bond60: (slave geneve6): Enslaving as an active interface with an up link [ 2145.931708][T31008] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2145.952323][T31008] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2145.976726][T31008] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2145.989932][T31008] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2146.129989][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2147.159659][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2147.530660][T20316] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2147.679824][T20370] netlink: 'syz.4.13808': attribute type 3 has an invalid length. [ 2147.882217][T20378] netpci0: tun_chr_ioctl cmd 1074025678 [ 2147.887930][T20378] netpci0: group set to 0 [ 2147.931840][T20386] xt_hashlimit: max too large, truncated to 1048576 [ 2148.034847][T20383] lo speed is unknown, defaulting to 1000 [ 2148.199712][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2148.288986][T20406] netlink: 'syz.0.13818': attribute type 1 has an invalid length. [ 2148.300747][T20383] syzkaller0 speed is unknown, defaulting to 1000 [ 2148.469960][T20411] netlink: 'syz.3.13819': attribute type 1 has an invalid length. [ 2148.529231][T20406] 8021q: adding VLAN 0 to HW filter on device bond45 [ 2148.605414][T20413] bond45: (slave geneve7): making interface the new active one [ 2148.627086][T20413] bond45: (slave geneve7): Enslaving as an active interface with an up link [ 2148.750890][T20411] 8021q: adding VLAN 0 to HW filter on device bond48 [ 2148.776386][T20383] lo speed is unknown, defaulting to 1000 [ 2148.910951][T20415] bond48: (slave geneve7): making interface the new active one [ 2148.922885][T20415] bond48: (slave geneve7): Enslaving as an active interface with an up link [ 2148.956347][T31010] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2148.982573][T31010] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2149.010990][T31010] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2149.031801][T31008] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2149.239536][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2149.658718][T20451] __nla_validate_parse: 3 callbacks suppressed [ 2149.658743][T20451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13831'. [ 2150.174039][T20471] xt_hashlimit: max too large, truncated to 1048576 [ 2150.279607][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2151.319537][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2151.455209][T20468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13835'. [ 2151.489362][T20468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13835'. [ 2151.671035][T31007] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2151.686582][T20468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13835'. [ 2151.706299][T31007] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2151.730340][T20468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13835'. [ 2151.750584][T31007] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2151.836234][T31007] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2152.359632][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2153.399624][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2154.439738][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2155.479729][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2156.520044][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2157.559648][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2157.990803][T20550] xt_hashlimit: max too large, truncated to 1048576 [ 2158.175438][T20563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13858'. [ 2158.335551][T20573] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.13859'. [ 2158.425729][T20575] netlink: 'syz.1.13862': attribute type 29 has an invalid length. [ 2158.454420][T20575] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13862'. [ 2158.599964][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2158.939781][T20592] netlink: 'syz.0.13869': attribute type 4 has an invalid length. [ 2159.016173][T20597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13870'. [ 2159.038602][T20597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13870'. [ 2159.173991][T20601] bond61: option xmit_hash_policy: invalid value (10) [ 2159.192597][T20601] bond61 (unregistering): Released all slaves [ 2159.215944][T20608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13875'. [ 2159.234588][T20605] netlink: 'syz.2.13874': attribute type 29 has an invalid length. [ 2159.243501][T20605] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13874'. [ 2159.450537][T20620] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2159.610027][T20612] nbd9: detected capacity change from 0 to 63 [ 2159.635415][ T51] block nbd9: Receive control failed (result -32) [ 2159.637254][ T404] block nbd9: Receive control failed (result -32) [ 2159.643032][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2159.709793][T20627] block nbd9: Dead connection, failed to find a fallback [ 2159.729608][T20627] block nbd9: shutting down sockets [ 2159.736552][T20627] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2159.768616][T20627] Buffer I/O error on dev nbd9, logical block 0, async page read [ 2159.778003][T20627] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2159.790785][T20627] Buffer I/O error on dev nbd9, logical block 1, async page read [ 2159.798678][T20627] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2159.811591][T20627] Buffer I/O error on dev nbd9, logical block 2, async page read [ 2159.829642][T20627] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2159.850520][T20627] Buffer I/O error on dev nbd9, logical block 3, async page read [ 2159.858473][T20627] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2159.874856][T20627] Buffer I/O error on dev nbd9, logical block 0, async page read [ 2159.909584][T20627] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2159.922816][T20627] Buffer I/O error on dev nbd9, logical block 1, async page read [ 2159.937986][T20635] netlink: 80 bytes leftover after parsing attributes in process `syz.1.13884'. [ 2159.949595][T20627] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2159.971859][T20627] Buffer I/O error on dev nbd9, logical block 2, async page read [ 2160.000054][T20627] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2160.029553][T20627] Buffer I/O error on dev nbd9, logical block 3, async page read [ 2160.037725][T20627] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2160.070676][T20627] Buffer I/O error on dev nbd9, logical block 0, async page read [ 2160.099405][T20627] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2160.109133][T20627] Buffer I/O error on dev nbd9, logical block 1, async page read [ 2160.135893][T20627] ldm_validate_partition_table(): Disk read failed. [ 2160.150646][T20627] Dev nbd9: unable to read RDB block 0 [ 2160.216918][T20627] nbd9: unable to read partition table [ 2160.264893][T20627] ldm_validate_partition_table(): Disk read failed. [ 2160.289394][T20627] Dev nbd9: unable to read RDB block 0 [ 2160.310734][T20627] nbd9: unable to read partition table [ 2160.369562][ T1304] lec:lec_start_xmit: lec0:No lecd attached [ 2160.629249][T20653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13890'. [ 2160.675668][T20655] xt_hashlimit: max too large, truncated to 1048576 [ 2160.683965][T20653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13890'. [ 2160.693775][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2160.815909][T20660] netlink: 'syz.4.13892': attribute type 4 has an invalid length. [ 2160.842598][T20660] netlink: 'syz.4.13892': attribute type 8 has an invalid length. [ 2160.860902][T20666] netlink: 'syz.0.13895': attribute type 3 has an invalid length. [ 2160.894920][T20666] netlink: 'syz.0.13895': attribute type 3 has an invalid length. [ 2161.315556][T20692] Cannot find set identified by id 65534 to match [ 2161.470692][T20703] tipc: Resetting bearer [ 2161.729822][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2161.892522][T20724] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2162.212799][T20737] netlink: 'syz.2.13923': attribute type 1 has an invalid length. [ 2162.347738][T20749] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2162.397894][T20750] gretap3: entered allmulticast mode [ 2162.413461][T20750] bond57: (slave gretap3): making interface the new active one [ 2162.424663][T20750] bond57: (slave gretap3): Enslaving as an active interface with an up link [ 2162.435493][T20749] netlink: 'syz.1.13925': attribute type 10 has an invalid length. [ 2162.540460][T20755] netlink: 'syz.0.13927': attribute type 1 has an invalid length. [ 2162.751563][T20761] sit0: left promiscuous mode [ 2162.759633][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2162.802297][T20761] team0: left allmulticast mode [ 2162.834347][T20761] wg2: left promiscuous mode [ 2162.839043][T20761] wg2: left allmulticast mode [ 2162.883462][T20761] veth0_to_batadv: left promiscuous mode [ 2162.900157][T20761] veth0_to_batadv: left allmulticast mode [ 2162.966877][T20761] xfrm0: left allmulticast mode [ 2163.015102][T20761] hsr0: left promiscuous mode [ 2163.045184][T20761] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 2163.102558][T20761] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 2163.129894][T20761] team1: left promiscuous mode [ 2163.155237][T20761] team1: left allmulticast mode [ 2163.166066][T20761] ipvlan2: left promiscuous mode [ 2163.171737][T20761] team2: left promiscuous mode [ 2163.176745][T20761] team2: left allmulticast mode [ 2163.182673][T20761] geneve4: left promiscuous mode [ 2163.188244][T20761] bridge2: left promiscuous mode [ 2163.194140][T20761] bridge2: left allmulticast mode [ 2163.200748][T20761] bond6: left promiscuous mode [ 2163.205807][T20761] gre1: left promiscuous mode [ 2163.211872][T20761] bridge3: left allmulticast mode [ 2163.218557][T20761] erspan1: left allmulticast mode [ 2163.224524][T20761] ip6erspan1: left allmulticast mode [ 2163.231014][T20761] team3: left promiscuous mode [ 2163.236428][T20761] team3: left allmulticast mode [ 2163.243131][T20761] team4: left promiscuous mode [ 2163.248613][T20761] team4: left allmulticast mode [ 2163.254635][T20761] bridge7: left allmulticast mode [ 2163.262425][T20761] vlan0: left promiscuous mode [ 2163.273786][T20792] sctp: [Deprecated]: syz.1.13934 (pid 20792) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2163.273786][T20792] Use struct sctp_sack_info instead [ 2163.309955][T20761] gretap0: left promiscuous mode [ 2163.342320][T20761] sit1: left promiscuous mode [ 2163.368309][T20761] bridge13: left promiscuous mode [ 2163.389167][T20761] bond26: left promiscuous mode [ 2163.404778][T20761] bridge16: left allmulticast mode [ 2163.411678][T20761] bond29: left promiscuous mode [ 2163.417215][T20761] ip6gre1: left promiscuous mode [ 2163.440517][T20761] ip6gre1: left allmulticast mode [ 2163.450744][T20761] bond33: left promiscuous mode [ 2163.460618][T20761] vcan1: left promiscuous mode [ 2163.468121][T20761] tipc: Resetting bearer [ 2163.495841][T20761] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 2163.522093][T20761] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 2163.555474][T20761] bond34: left promiscuous mode [ 2163.573359][T20761] vlan3: left allmulticast mode [ 2163.586439][T20761] bond38: left allmulticast mode [ 2163.595261][T20761] vlan5: left allmulticast mode [ 2163.600778][T20761] bridge29: left allmulticast mode [ 2163.606627][T20761] ip6gre3: left promiscuous mode [ 2163.612132][T20761] ip6gre3: left allmulticast mode [ 2163.617715][T20761] macsec2: left promiscuous mode [ 2163.624223][T20761] macvtap0: left promiscuous mode [ 2163.632599][T20761] macvtap0: left allmulticast mode [ 2163.638973][T20803] __nla_validate_parse: 10 callbacks suppressed [ 2163.639001][T20803] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.13937'. [ 2163.655723][T20761] geneve9: left promiscuous mode [ 2163.661519][T20761] geneve9: left allmulticast mode [ 2163.667838][T20761] bond49: left promiscuous mode [ 2163.673676][T20761] veth21: left allmulticast mode [ 2163.680664][T20761] bond54: left allmulticast mode [ 2163.685960][T20805] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.13937'. [ 2163.710126][T20761] gretap3: left allmulticast mode [ 2163.799550][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2163.985268][T20814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13939'. [ 2164.132090][T20823] openvswitch: netlink: IP tunnel TTL not specified. [ 2164.193258][T20827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13942'. [ 2164.361456][T20843] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13948'. [ 2164.532558][T20854] netlink: 'syz.3.13951': attribute type 1 has an invalid length. [ 2164.607368][T20854] bond50: entered promiscuous mode [ 2164.613326][T20854] 8021q: adding VLAN 0 to HW filter on device bond50 [ 2164.637436][T20862] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13952'. [ 2164.676521][T20854] bond50: (slave bridge28): making interface the new active one [ 2164.685102][T20854] bridge28: entered promiscuous mode [ 2164.692499][T20854] bond50: (slave bridge28): Enslaving as an active interface with an up link [ 2164.849648][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2164.922072][T20875] netlink: 'syz.3.13958': attribute type 6 has an invalid length. [ 2164.933125][T20875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13958'. [ 2165.740581][T20919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13965'. [ 2165.793622][T20916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13965'. [ 2165.879310][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5510 ms [ 2165.879935][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2165.887405][ C0] lec:lec_tx_timeout: lec0 [ 2165.889635][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 2165.946429][T20919] macvtap0: entered promiscuous mode [ 2165.972822][T20919] macvtap0: entered allmulticast mode [ 2166.072271][T20929] netlink: 'syz.2.13969': attribute type 3 has an invalid length. [ 2166.117031][T20931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13968'. [ 2166.559407][T20947] netlink: 'syz.1.13974': attribute type 5 has an invalid length. [ 2166.919765][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2167.441548][T20965] netlink: 'syz.3.13978': attribute type 21 has an invalid length. [ 2167.673212][T20979] Cannot find set identified by id 65534 to match [ 2167.869453][T20994] netlink: 'syz.1.13985': attribute type 5 has an invalid length. [ 2167.959585][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2168.370072][T21019] Cannot find set identified by id 65534 to match [ 2168.535684][T21022] bond47: entered promiscuous mode [ 2168.541847][T21022] 8021q: adding VLAN 0 to HW filter on device bond47 [ 2168.550383][T21022] bridge0: port 2(bond47) entered blocking state [ 2168.557088][T21022] bridge0: port 2(bond47) entered disabled state [ 2168.564204][T21022] bond47: entered allmulticast mode [ 2168.905657][T21042] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 2168.931422][T21042] CPU: 0 UID: 0 PID: 21042 Comm: syz.1.14000 Not tainted syzkaller #0 PREEMPT(full) [ 2168.931456][T21042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2168.931470][T21042] Call Trace: [ 2168.931480][T21042] [ 2168.931495][T21042] dump_stack_lvl+0xe8/0x150 [ 2168.931541][T21042] sysfs_warn_dup+0x8e/0xa0 [ 2168.931578][T21042] sysfs_do_create_link_sd+0xc0/0x110 [ 2168.931616][T21042] device_add_class_symlinks+0x1cf/0x240 [ 2168.931714][T21042] device_add+0x475/0xb70 [ 2168.931769][T21042] wiphy_register+0x1dc5/0x2dc0 [ 2168.931811][T21042] ? __pfx_wiphy_register+0x10/0x10 [ 2168.931832][T21042] ? __pfx_netdev_run_todo+0x10/0x10 [ 2168.931873][T21042] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 2168.931907][T21042] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 2168.931938][T21042] ieee80211_register_hw+0x3d82/0x4a70 [ 2168.931960][T21042] ? __lock_acquire+0x6b5/0x2cf0 [ 2168.932006][T21042] ? ieee80211_register_hw+0x1901/0x4a70 [ 2168.932061][T21042] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2168.932090][T21042] ? __hrtimer_setup+0x181/0x200 [ 2168.932117][T21042] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2168.932141][T21042] mac80211_hwsim_new_radio+0x3334/0x5ba0 [ 2168.932199][T21042] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2168.932234][T21042] ? kstrndup+0xbf/0x160 [ 2168.932271][T21042] hwsim_new_radio_nl+0xf6a/0x1c00 [ 2168.932323][T21042] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2168.932360][T21042] ? rcu_is_watching+0x15/0xb0 [ 2168.932388][T21042] ? trace_kmalloc+0x2a/0x110 [ 2168.932416][T21042] ? __nla_parse+0x40/0x60 [ 2168.932442][T21042] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 2168.932462][T21042] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 2168.932491][T21042] genl_family_rcv_msg_doit+0x22a/0x330 [ 2168.932519][T21042] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2168.932552][T21042] ? bpf_lsm_capable+0x9/0x20 [ 2168.932579][T21042] ? security_capable+0x7e/0x2c0 [ 2168.932615][T21042] genl_rcv_msg+0x61c/0x7a0 [ 2168.932641][T21042] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2168.932660][T21042] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2168.932708][T21042] netlink_rcv_skb+0x232/0x4b0 [ 2168.932737][T21042] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2168.932759][T21042] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2168.932801][T21042] ? down_read+0x272/0x2e0 [ 2168.932825][T21042] ? genl_rcv+0xd/0x40 [ 2168.932845][T21042] genl_rcv+0x28/0x40 [ 2168.932862][T21042] netlink_unicast+0x75c/0x8e0 [ 2168.932897][T21042] netlink_sendmsg+0x813/0xb40 [ 2168.932933][T21042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2168.932964][T21042] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2168.932985][T21042] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2168.933010][T21042] ____sys_sendmsg+0x972/0x9f0 [ 2168.933038][T21042] ? futex_unqueue+0x211/0x240 [ 2168.933069][T21042] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2168.933106][T21042] ? import_iovec+0x73/0xa0 [ 2168.933133][T21042] ___sys_sendmsg+0x2a5/0x360 [ 2168.933167][T21042] ? __pfx____sys_sendmsg+0x10/0x10 [ 2168.933203][T21042] ? futex_wait+0x29a/0x380 [ 2168.933265][T21042] ? __fget_files+0x2a/0x420 [ 2168.933287][T21042] ? __fget_files+0x3a0/0x420 [ 2168.933334][T21042] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2168.933368][T21042] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2168.933406][T21042] ? rcu_is_watching+0x15/0xb0 [ 2168.933446][T21042] do_syscall_64+0x14d/0xf80 [ 2168.933468][T21042] ? trace_irq_disable+0x3b/0x150 [ 2168.933484][T21042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2168.933504][T21042] ? clear_bhb_loop+0x40/0x90 [ 2168.933527][T21042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2168.933547][T21042] RIP: 0033:0x7f294bf9c819 [ 2168.933566][T21042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2168.933583][T21042] RSP: 002b:00007f294cdff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2168.933607][T21042] RAX: ffffffffffffffda RBX: 00007f294c215fa0 RCX: 00007f294bf9c819 [ 2168.933622][T21042] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000007 [ 2168.933635][T21042] RBP: 00007f294c032c91 R08: 0000000000000000 R09: 0000000000000000 [ 2168.933647][T21042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2168.933659][T21042] R13: 00007f294c216038 R14: 00007f294c215fa0 R15: 00007fff173ad5e8 [ 2168.933691][T21042] [ 2169.040422][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2169.660186][T21070] tipc: Enabling of bearer rejected, already enabled [ 2169.689725][T21070] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 2169.729437][T21070] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 2169.757265][T21070] tipc: Resetting bearer [ 2170.129623][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2170.919450][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 2170.927509][ C0] lec:lec_tx_timeout: lec0 [ 2171.159661][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2172.199613][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2173.239716][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2174.279600][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2175.329636][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2176.063255][T21115] netlink: 'syz.3.14012': attribute type 1 has an invalid length. [ 2176.089379][T21115] __nla_validate_parse: 71 callbacks suppressed [ 2176.089400][T21115] netlink: 936 bytes leftover after parsing attributes in process `syz.3.14012'. [ 2176.278337][T21126] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 2176.300146][T21126] CPU: 0 UID: 0 PID: 21126 Comm: syz.2.14017 Not tainted syzkaller #0 PREEMPT(full) [ 2176.300185][T21126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2176.300201][T21126] Call Trace: [ 2176.300211][T21126] [ 2176.300223][T21126] dump_stack_lvl+0xe8/0x150 [ 2176.300263][T21126] sysfs_warn_dup+0x8e/0xa0 [ 2176.300385][T21126] sysfs_do_create_link_sd+0xc0/0x110 [ 2176.300428][T21126] device_add_class_symlinks+0x1cf/0x240 [ 2176.300566][T21126] device_add+0x475/0xb70 [ 2176.300622][T21126] wiphy_register+0x1dc5/0x2dc0 [ 2176.300673][T21126] ? __pfx_wiphy_register+0x10/0x10 [ 2176.300701][T21126] ? __pfx_netdev_run_todo+0x10/0x10 [ 2176.300726][T21126] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 2176.300773][T21126] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 2176.300807][T21126] ieee80211_register_hw+0x3d82/0x4a70 [ 2176.300835][T21126] ? __lock_acquire+0x6b5/0x2cf0 [ 2176.300890][T21126] ? ieee80211_register_hw+0x1901/0x4a70 [ 2176.300952][T21126] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2176.300989][T21126] ? __hrtimer_setup+0x181/0x200 [ 2176.301022][T21126] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2176.301084][T21126] mac80211_hwsim_new_radio+0x3334/0x5ba0 [ 2176.301160][T21126] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2176.301201][T21126] ? kstrndup+0xbf/0x160 [ 2176.301248][T21126] hwsim_new_radio_nl+0xf6a/0x1c00 [ 2176.301319][T21126] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2176.301370][T21126] ? rcu_is_watching+0x15/0xb0 [ 2176.301406][T21126] ? trace_kmalloc+0x2a/0x110 [ 2176.301443][T21126] ? __nla_parse+0x40/0x60 [ 2176.301489][T21126] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 2176.301516][T21126] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 2176.301564][T21126] genl_family_rcv_msg_doit+0x22a/0x330 [ 2176.301601][T21126] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2176.301660][T21126] ? bpf_lsm_capable+0x9/0x20 [ 2176.301694][T21126] ? security_capable+0x7e/0x2c0 [ 2176.301740][T21126] genl_rcv_msg+0x61c/0x7a0 [ 2176.301775][T21126] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2176.301799][T21126] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2176.301854][T21126] netlink_rcv_skb+0x232/0x4b0 [ 2176.301889][T21126] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2176.301916][T21126] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2176.301966][T21126] ? down_read+0x272/0x2e0 [ 2176.301993][T21126] ? genl_rcv+0xd/0x40 [ 2176.302020][T21126] genl_rcv+0x28/0x40 [ 2176.302042][T21126] netlink_unicast+0x75c/0x8e0 [ 2176.302088][T21126] netlink_sendmsg+0x813/0xb40 [ 2176.302134][T21126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2176.302173][T21126] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2176.302199][T21126] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2176.302230][T21126] ____sys_sendmsg+0x972/0x9f0 [ 2176.302264][T21126] ? futex_unqueue+0x211/0x240 [ 2176.302301][T21126] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2176.302348][T21126] ? import_iovec+0x73/0xa0 [ 2176.302381][T21126] ___sys_sendmsg+0x2a5/0x360 [ 2176.302425][T21126] ? __pfx____sys_sendmsg+0x10/0x10 [ 2176.302470][T21126] ? futex_wait+0x29a/0x380 [ 2176.302550][T21126] ? __fget_files+0x2a/0x420 [ 2176.302574][T21126] ? __fget_files+0x3a0/0x420 [ 2176.302609][T21126] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2176.302648][T21126] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2176.302694][T21126] ? rcu_is_watching+0x15/0xb0 [ 2176.302746][T21126] do_syscall_64+0x14d/0xf80 [ 2176.302772][T21126] ? trace_irq_disable+0x3b/0x150 [ 2176.302793][T21126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2176.302818][T21126] ? clear_bhb_loop+0x40/0x90 [ 2176.302847][T21126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2176.302871][T21126] RIP: 0033:0x7fde8399c819 [ 2176.302893][T21126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2176.302915][T21126] RSP: 002b:00007fde8485b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2176.302942][T21126] RAX: ffffffffffffffda RBX: 00007fde83c15fa0 RCX: 00007fde8399c819 [ 2176.302960][T21126] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000007 [ 2176.302975][T21126] RBP: 00007fde83a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 2176.302990][T21126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2176.303004][T21126] R13: 00007fde83c16038 R14: 00007fde83c15fa0 R15: 00007ffe7b2201a8 [ 2176.303045][T21126] [ 2176.370885][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2176.779052][T21132] netlink: 632 bytes leftover after parsing attributes in process `syz.0.14018'. [ 2176.992565][T21146] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 2177.393353][T21172] tipc: Enabling of bearer rejected, failed to enable media [ 2177.402511][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2177.423851][T21172] netlink: 3 bytes leftover after parsing attributes in process `syz.0.14031'. [ 2177.437955][T21172] 1ªX¹¦À: renamed from 60ªX¹¦À [ 2177.450587][T21172] 1ªX¹¦À: entered allmulticast mode [ 2177.456196][T21172] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 2177.483939][T21175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2177.502659][T21175] netlink: 'syz.2.14032': attribute type 10 has an invalid length. [ 2177.512552][T21175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14032'. [ 2177.660118][T21186] netlink: 'syz.1.14036': attribute type 58 has an invalid length. [ 2177.965455][T21195] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14037'. [ 2178.320289][T21217] xt_hashlimit: max too large, truncated to 1048576 [ 2178.344845][T21213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14043'. [ 2178.439832][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2178.439964][T21224] netlink: 84 bytes leftover after parsing attributes in process `syz.1.14048'. [ 2178.456637][T21225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14048'. [ 2178.480950][T21225] vlan9: entered allmulticast mode [ 2178.497344][T21222] nbd: nbd4 already in use [ 2178.532556][T21230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14049'. [ 2178.549664][T21230] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14049'. [ 2178.911853][T21240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2178.943104][T21240] netlink: 'syz.1.14053': attribute type 10 has an invalid length. [ 2179.280524][T21257] netlink: 'syz.2.14056': attribute type 1 has an invalid length. [ 2179.489538][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2180.025145][T21287] bond61 (unregistering): Released all slaves [ 2180.302780][T21305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2180.344844][T21305] netlink: 'syz.4.14074': attribute type 10 has an invalid length. [ 2180.519534][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2180.798707][T21344] lo speed is unknown, defaulting to 1000 [ 2180.811359][T21347] netlink: 'syz.1.14087': attribute type 33 has an invalid length. [ 2181.074228][T21355] 8021q: adding VLAN 0 to HW filter on device bond62 [ 2181.205446][T21344] syzkaller0 speed is unknown, defaulting to 1000 [ 2181.503218][T21378] __nla_validate_parse: 10 callbacks suppressed [ 2181.503241][T21378] netlink: 180 bytes leftover after parsing attributes in process `syz.4.14092'. [ 2181.545013][T21378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14092'. [ 2181.559790][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2181.763852][T21344] lo speed is unknown, defaulting to 1000 [ 2181.925843][T21394] Cannot find set identified by id 65534 to match [ 2182.013544][T21398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14101'. [ 2182.082429][T21398] 8021q: adding VLAN 0 to HW filter on device bond48 [ 2182.217351][T21386] siw: device registration error -23 [ 2182.599647][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2182.720482][T21427] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14107'. [ 2182.741302][T21427] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14107'. [ 2182.785245][T21427] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14107'. [ 2182.846203][T21427] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14107'. [ 2182.939144][T21427] netlink: 816 bytes leftover after parsing attributes in process `syz.1.14107'. [ 2183.262211][T21446] SET target dimension over the limit! [ 2183.639650][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2183.692523][T21455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14118'. [ 2183.850667][T21452] netlink: 'syz.3.14117': attribute type 2 has an invalid length. [ 2184.469671][T21476] Cannot find set identified by id 65534 to match [ 2184.679967][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2184.776504][T21487] netlink: 'syz.0.14127': attribute type 13 has an invalid length. [ 2184.804237][T21487] netlink: 'syz.0.14127': attribute type 27 has an invalid length. [ 2184.925271][T21494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14128'. [ 2184.939447][T21493] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2185.024187][T21494] 8021q: adding VLAN 0 to HW filter on device bond58 [ 2185.242730][T21505] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 2185.719574][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2186.759594][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2187.799617][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2188.839608][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2189.879667][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2190.919534][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2191.404308][T21541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2191.444817][T21541] netlink: 'syz.4.14137': attribute type 10 has an invalid length. [ 2191.455519][T21541] __nla_validate_parse: 1 callbacks suppressed [ 2191.455539][T21541] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14137'. [ 2191.486075][T21541] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 2191.500134][T21541] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 2191.516444][T21541] tipc: Resetting bearer [ 2191.526578][T21547] Cannot find set identified by id 65534 to match [ 2191.573246][T21552] Cannot find add_set index 3 as target [ 2191.579146][T21548] IPVS: set_ctl: invalid protocol: 22 224.0.0.1:20004 [ 2191.606269][T21548] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14138'. [ 2191.687359][T21554] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14142'. [ 2191.754782][T21554] 8021q: adding VLAN 0 to HW filter on device bond51 [ 2191.959615][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2192.168930][T21584] Cannot find set identified by id 65534 to match [ 2192.202597][T21586] 8021q: VLANs not supported on tunl0 [ 2192.478009][T21607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14157'. [ 2192.659889][T21615] netlink: 52 bytes leftover after parsing attributes in process `syz.1.14154'. [ 2192.772684][T21607] 8021q: adding VLAN 0 to HW filter on device bond52 [ 2192.838135][T21612] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14149'. [ 2192.914275][T21629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2192.928994][T21629] netlink: 'syz.3.14162': attribute type 10 has an invalid length. [ 2192.938691][T21629] bond0: (slave wlan1): refused to change device type [ 2192.946783][T21629] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14162'. [ 2192.962295][T21629] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 2192.973749][T21629] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 2192.984765][T21629] tipc: Resetting bearer [ 2192.999672][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2193.168178][T21643] xt_hashlimit: max too large, truncated to 1048576 [ 2193.353535][T21657] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 2193.901552][T21672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14171'. [ 2194.039510][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2194.367481][T21689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14176'. [ 2194.550080][T21692] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14176'. [ 2195.079577][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2196.022245][T21631] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2196.119679][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2196.241582][T21709] netlink: 'syz.1.14180': attribute type 1 has an invalid length. [ 2196.287438][T21709] 8021q: adding VLAN 0 to HW filter on device bond61 [ 2196.332842][T21709] bond61: (slave geneve7): making interface the new active one [ 2196.355198][T21709] bond61: (slave geneve7): Enslaving as an active interface with an up link [ 2196.387364][T21720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2196.491379][T21710] netlink: 'syz.0.14182': attribute type 10 has an invalid length. [ 2196.513490][T21710] __nla_validate_parse: 3 callbacks suppressed [ 2196.513526][T21710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14182'. [ 2196.523307][T21722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14184'. [ 2196.552227][T21722] chnl_net:caif_netlink_parms(): no params data found [ 2196.591176][T21710] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 2196.598387][T21710] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 2196.610634][T21710] tipc: Resetting bearer [ 2196.658729][T21722] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14184'. [ 2196.674155][T21729] sctp: [Deprecated]: syz.3.14187 (pid 21729) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2196.674155][T21729] Use struct sctp_sack_info instead [ 2196.721408][T21729] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 2196.740651][T21729] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 2196.770421][T21729] tipc: Resetting bearer [ 2196.920553][T21744] netlink: 'syz.4.14191': attribute type 21 has an invalid length. [ 2196.928869][T21744] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14191'. [ 2196.961233][T21744] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14191'. [ 2196.997532][T21747] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14192'. [ 2197.041462][T21751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14191'. [ 2197.159669][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2197.171941][T21754] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14193'. [ 2197.188496][T21754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14193'. [ 2197.551725][T21774] syz0: rxe_newlink: already configured on lo [ 2197.563239][T21772] Cannot find set identified by id 65534 to match [ 2197.666031][T21779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14203'. [ 2197.712352][T21777] sctp: [Deprecated]: syz.3.14202 (pid 21777) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2197.712352][T21777] Use struct sctp_sack_info instead [ 2197.852448][T21786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2197.866747][T21786] netlink: 'syz.3.14206': attribute type 10 has an invalid length. [ 2197.883434][T21786] bond0: (slave wlan1): refused to change device type [ 2197.927398][T21786] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 2197.935794][T21786] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 2197.944280][T21786] tipc: Resetting bearer [ 2198.170112][T21800] x_tables: duplicate underflow at hook 2 [ 2198.199626][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2198.362385][T21806] netlink: 'syz.1.14212': attribute type 10 has an invalid length. [ 2198.386819][T21806] netlink: 'syz.1.14212': attribute type 10 has an invalid length. [ 2198.479140][T21817] sctp: [Deprecated]: syz.4.14216 (pid 21817) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2198.479140][T21817] Use struct sctp_sack_info instead [ 2198.499806][T21817] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 2198.507813][T21817] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 2198.547976][T21817] tipc: Resetting bearer [ 2198.985352][T21837] 8021q: adding VLAN 0 to HW filter on device bond63 [ 2199.239756][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2199.244037][T21853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2199.263665][T21853] netlink: 'syz.4.14228': attribute type 10 has an invalid length. [ 2199.276082][T21853] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 2199.283781][T21853] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 2199.307191][T21853] tipc: Resetting bearer [ 2199.422793][T21859] sctp: [Deprecated]: syz.1.14230 (pid 21859) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2199.422793][T21859] Use struct sctp_sack_info instead [ 2200.198169][T21889] lo speed is unknown, defaulting to 1000 [ 2200.279686][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2200.665195][T21889] syzkaller0 speed is unknown, defaulting to 1000 [ 2200.757178][T21909] FAULT_INJECTION: forcing a failure. [ 2200.757178][T21909] name failslab, interval 1, probability 0, space 0, times 0 [ 2200.782543][T21909] CPU: 1 UID: 0 PID: 21909 Comm: syz.1.14251 Not tainted syzkaller #0 PREEMPT(full) [ 2200.782576][T21909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2200.782591][T21909] Call Trace: [ 2200.782601][T21909] [ 2200.782611][T21909] dump_stack_lvl+0xe8/0x150 [ 2200.782650][T21909] should_fail_ex+0x412/0x560 [ 2200.782692][T21909] should_failslab+0xa8/0x100 [ 2200.782725][T21909] __kmalloc_cache_noprof+0x88/0x660 [ 2200.782754][T21909] ? call_usermodehelper_setup+0x8e/0x270 [ 2200.782791][T21909] call_usermodehelper_setup+0x8e/0x270 [ 2200.782818][T21909] ? __pfx_free_modprobe_argv+0x10/0x10 [ 2200.782855][T21909] __request_module+0x3ba/0x660 [ 2200.782887][T21909] ? __pfx___request_module+0x10/0x10 [ 2200.782915][T21909] ? kasan_quarantine_put+0xbb/0x1f0 [ 2200.782944][T21909] ? __pfx___request_module+0x10/0x10 [ 2200.782979][T21909] ? apparmor_capable+0x126/0x170 [ 2200.783019][T21909] ? dev_load+0x21/0x1f0 [ 2200.783050][T21909] dev_ioctl+0x59f/0x1150 [ 2200.783083][T21909] sock_do_ioctl+0x23e/0x320 [ 2200.783112][T21909] ? __pfx_sock_do_ioctl+0x10/0x10 [ 2200.783135][T21909] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 2200.783179][T21909] sock_ioctl+0x5c6/0x7f0 [ 2200.783207][T21909] ? __pfx_sock_ioctl+0x10/0x10 [ 2200.783240][T21909] ? __fget_files+0x2a/0x420 [ 2200.783261][T21909] ? __fget_files+0x3a0/0x420 [ 2200.783281][T21909] ? __fget_files+0x2a/0x420 [ 2200.783307][T21909] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2200.783337][T21909] ? __pfx_sock_ioctl+0x10/0x10 [ 2200.783361][T21909] __se_sys_ioctl+0xfc/0x170 [ 2200.783394][T21909] do_syscall_64+0x14d/0xf80 [ 2200.783418][T21909] ? trace_irq_disable+0x3b/0x150 [ 2200.783438][T21909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2200.783462][T21909] ? clear_bhb_loop+0x40/0x90 [ 2200.783490][T21909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2200.783519][T21909] RIP: 0033:0x7f294bf9c819 [ 2200.783541][T21909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2200.783563][T21909] RSP: 002b:00007f294cdff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2200.783589][T21909] RAX: ffffffffffffffda RBX: 00007f294c215fa0 RCX: 00007f294bf9c819 [ 2200.783606][T21909] RDX: 00002000000000c0 RSI: 0000000000008923 RDI: 0000000000000005 [ 2200.783621][T21909] RBP: 00007f294cdff090 R08: 0000000000000000 R09: 0000000000000000 [ 2200.783635][T21909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2200.783649][T21909] R13: 00007f294c216038 R14: 00007f294c215fa0 R15: 00007fff173ad5e8 [ 2200.783687][T21909] [ 2201.188204][T21914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2201.254744][T21914] netlink: 'syz.0.14253': attribute type 10 has an invalid length. [ 2201.267678][T21916] m1Ie5èÿá: entered promiscuous mode [ 2201.319773][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2201.535813][T21889] lo speed is unknown, defaulting to 1000 [ 2202.309924][T21928] __nla_validate_parse: 9 callbacks suppressed [ 2202.309947][T21928] netlink: 84 bytes leftover after parsing attributes in process `syz.3.14257'. [ 2202.345157][T21930] SET target dimension over the limit! [ 2202.359722][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2202.584532][T21941] FAULT_INJECTION: forcing a failure. [ 2202.584532][T21941] name failslab, interval 1, probability 0, space 0, times 0 [ 2202.641136][T21941] CPU: 0 UID: 0 PID: 21941 Comm: syz.4.14261 Not tainted syzkaller #0 PREEMPT(full) [ 2202.641167][T21941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2202.641182][T21941] Call Trace: [ 2202.641192][T21941] [ 2202.641202][T21941] dump_stack_lvl+0xe8/0x150 [ 2202.641240][T21941] should_fail_ex+0x412/0x560 [ 2202.641293][T21941] should_failslab+0xa8/0x100 [ 2202.641328][T21941] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 2202.641357][T21941] ? trace_kmalloc+0x2a/0x110 [ 2202.641380][T21941] ? page_pool_create_percpu+0x76/0xb80 [ 2202.641412][T21941] page_pool_create_percpu+0x76/0xb80 [ 2202.641438][T21941] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 2202.641473][T21941] bpf_test_run_xdp_live+0x23d/0x1cf0 [ 2202.641503][T21941] ? arch_stack_walk+0xfb/0x150 [ 2202.641556][T21941] ? __pfx_stack_trace_save+0x10/0x10 [ 2202.641585][T21941] ? stack_depot_save_flags+0x33/0x810 [ 2202.641631][T21941] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 2202.641661][T21941] ? bpf_test_init+0x9f/0x150 [ 2202.641688][T21941] ? bpf_prog_test_run_xdp+0x529/0x1160 [ 2202.641718][T21941] ? bpf_prog_test_run+0x2c7/0x340 [ 2202.641741][T21941] ? __sys_bpf+0x643/0x950 [ 2202.641761][T21941] ? __x64_sys_bpf+0x7c/0x90 [ 2202.641848][T21941] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 2202.641894][T21941] ? _copy_from_user+0x94/0xb0 [ 2202.641922][T21941] ? bpf_test_init+0x113/0x150 [ 2202.641949][T21941] ? xdp_convert_md_to_buff+0x5b/0x330 [ 2202.641983][T21941] bpf_prog_test_run_xdp+0x81c/0x1160 [ 2202.642036][T21941] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 2202.642075][T21941] ? __fget_files+0x2a/0x420 [ 2202.642104][T21941] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 2202.642137][T21941] bpf_prog_test_run+0x2c7/0x340 [ 2202.642167][T21941] __sys_bpf+0x643/0x950 [ 2202.642192][T21941] ? __pfx___sys_bpf+0x10/0x10 [ 2202.642234][T21941] ? ksys_write+0x242/0x270 [ 2202.642263][T21941] ? __pfx_ksys_write+0x10/0x10 [ 2202.642308][T21941] __x64_sys_bpf+0x7c/0x90 [ 2202.642341][T21941] do_syscall_64+0x14d/0xf80 [ 2202.642366][T21941] ? trace_irq_disable+0x3b/0x150 [ 2202.642387][T21941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2202.642409][T21941] ? clear_bhb_loop+0x40/0x90 [ 2202.642438][T21941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2202.642460][T21941] RIP: 0033:0x7fa92ab9c819 [ 2202.642482][T21941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2202.642503][T21941] RSP: 002b:00007fa92ba2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2202.642530][T21941] RAX: ffffffffffffffda RBX: 00007fa92ae15fa0 RCX: 00007fa92ab9c819 [ 2202.642547][T21941] RDX: 0000000000000050 RSI: 0000200000000200 RDI: 000000000000000a [ 2202.642562][T21941] RBP: 00007fa92ba2f090 R08: 0000000000000000 R09: 0000000000000000 [ 2202.642577][T21941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2202.642591][T21941] R13: 00007fa92ae16038 R14: 00007fa92ae15fa0 R15: 00007ffff6a72898 [ 2202.642628][T21941] [ 2203.100312][T21949] FAULT_INJECTION: forcing a failure. [ 2203.100312][T21949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2203.157118][T21946] ±ÿïâؤŠœFN&: renamed from lo (while UP) [ 2203.184402][T21949] CPU: 0 UID: 0 PID: 21949 Comm: syz.1.14259 Not tainted syzkaller #0 PREEMPT(full) [ 2203.184437][T21949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2203.184452][T21949] Call Trace: [ 2203.184463][T21949] [ 2203.184473][T21949] dump_stack_lvl+0xe8/0x150 [ 2203.184531][T21949] should_fail_ex+0x412/0x560 [ 2203.184720][T21949] _copy_from_iter+0x1d3/0x1670 [ 2203.184756][T21949] ? rcu_is_watching+0x15/0xb0 [ 2203.184797][T21949] ? __pfx__copy_from_iter+0x10/0x10 [ 2203.184842][T21949] ? netlink_sendmsg+0x650/0xb40 [ 2203.184872][T21949] ? skb_put+0x11b/0x210 [ 2203.184908][T21949] netlink_sendmsg+0x6c0/0xb40 [ 2203.184952][T21949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2203.184989][T21949] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2203.185022][T21949] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2203.185055][T21949] ____sys_sendmsg+0x972/0x9f0 [ 2203.185101][T21949] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2203.185147][T21949] ? import_iovec+0x73/0xa0 [ 2203.185178][T21949] ___sys_sendmsg+0x2a5/0x360 [ 2203.185219][T21949] ? __pfx____sys_sendmsg+0x10/0x10 [ 2203.185296][T21949] ? __fget_files+0x2a/0x420 [ 2203.185317][T21949] ? __fget_files+0x3a0/0x420 [ 2203.185351][T21949] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2203.185390][T21949] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2203.185436][T21949] ? __pfx_ksys_write+0x10/0x10 [ 2203.185477][T21949] do_syscall_64+0x14d/0xf80 [ 2203.185503][T21949] ? trace_irq_disable+0x3b/0x150 [ 2203.185534][T21949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2203.185558][T21949] ? clear_bhb_loop+0x40/0x90 [ 2203.185587][T21949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2203.185609][T21949] RIP: 0033:0x7f294bf9c819 [ 2203.185632][T21949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2203.185661][T21949] RSP: 002b:00007f294cdff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2203.185687][T21949] RAX: ffffffffffffffda RBX: 00007f294c215fa0 RCX: 00007f294bf9c819 [ 2203.185704][T21949] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2203.185719][T21949] RBP: 00007f294cdff090 R08: 0000000000000000 R09: 0000000000000000 [ 2203.185734][T21949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2203.185747][T21949] R13: 00007f294c216038 R14: 00007f294c215fa0 R15: 00007fff173ad5e8 [ 2203.185782][T21949] [ 2203.403341][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2203.628845][T21957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2203.742155][T21957] netlink: 'syz.1.14266': attribute type 10 has an invalid length. [ 2203.751739][T21957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14266'. [ 2203.842551][T21957] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 2203.889958][T21957] tipc: Resetting bearer [ 2204.439618][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2205.479698][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2206.519677][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2207.559672][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2208.599759][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2209.639701][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2210.679703][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2211.729647][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2212.769609][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2213.799684][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2214.839775][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2215.879699][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2216.432148][T21993] netem: change failed [ 2216.451468][T21999] FAULT_INJECTION: forcing a failure. [ 2216.451468][T21999] name failslab, interval 1, probability 0, space 0, times 0 [ 2216.479807][T21993] sctp: [Deprecated]: syz.0.14269 (pid 21993) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2216.479807][T21993] Use struct sctp_sack_info instead [ 2216.483393][T21999] CPU: 0 UID: 0 PID: 21999 Comm: syz.4.14273 Not tainted syzkaller #0 PREEMPT(full) [ 2216.483478][T21999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2216.483520][T21999] Call Trace: [ 2216.483607][T21999] [ 2216.483630][T21999] dump_stack_lvl+0xe8/0x150 [ 2216.483735][T21999] should_fail_ex+0x412/0x560 [ 2216.483850][T21999] should_failslab+0xa8/0x100 [ 2216.483946][T21999] __kvmalloc_node_noprof+0x178/0x8a0 [ 2216.484029][T21999] ? page_pool_create_percpu+0x2dd/0xb80 [ 2216.484088][T21999] ? page_pool_create_percpu+0xaf/0xb80 [ 2216.484186][T21999] page_pool_create_percpu+0x2dd/0xb80 [ 2216.484302][T21999] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 2216.484391][T21999] bpf_test_run_xdp_live+0x23d/0x1cf0 [ 2216.484475][T21999] ? arch_stack_walk+0xfb/0x150 [ 2216.484611][T21999] ? __pfx_stack_trace_save+0x10/0x10 [ 2216.484687][T21999] ? stack_depot_save_flags+0x33/0x810 [ 2216.484805][T21999] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 2216.484889][T21999] ? bpf_test_init+0x9f/0x150 [ 2216.484954][T21999] ? bpf_prog_test_run_xdp+0x529/0x1160 [ 2216.485040][T21999] ? bpf_prog_test_run+0x2c7/0x340 [ 2216.485104][T21999] ? __sys_bpf+0x643/0x950 [ 2216.485151][T21999] ? __x64_sys_bpf+0x7c/0x90 [ 2216.485381][T21999] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 2216.485490][T21999] ? _copy_from_user+0x94/0xb0 [ 2216.485574][T21999] ? bpf_test_init+0x113/0x150 [ 2216.485668][T21999] ? xdp_convert_md_to_buff+0x5b/0x330 [ 2216.485782][T21999] bpf_prog_test_run_xdp+0x81c/0x1160 [ 2216.485922][T21999] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 2216.486019][T21999] ? __fget_files+0x2a/0x420 [ 2216.486098][T21999] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 2216.486190][T21999] bpf_prog_test_run+0x2c7/0x340 [ 2216.486266][T21999] __sys_bpf+0x643/0x950 [ 2216.486340][T21999] ? __pfx___sys_bpf+0x10/0x10 [ 2216.486455][T21999] ? ksys_write+0x242/0x270 [ 2216.486543][T21999] ? __pfx_ksys_write+0x10/0x10 [ 2216.486645][T21999] __x64_sys_bpf+0x7c/0x90 [ 2216.486732][T21999] do_syscall_64+0x14d/0xf80 [ 2216.486796][T21999] ? trace_irq_disable+0x3b/0x150 [ 2216.486856][T21999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2216.486920][T21999] ? clear_bhb_loop+0x40/0x90 [ 2216.487004][T21999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2216.487069][T21999] RIP: 0033:0x7fa92ab9c819 [ 2216.487143][T21999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2216.487196][T21999] RSP: 002b:00007fa92ba2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2216.487268][T21999] RAX: ffffffffffffffda RBX: 00007fa92ae15fa0 RCX: 00007fa92ab9c819 [ 2216.487319][T21999] RDX: 0000000000000050 RSI: 0000200000000200 RDI: 000000000000000a [ 2216.487354][T21999] RBP: 00007fa92ba2f090 R08: 0000000000000000 R09: 0000000000000000 [ 2216.487395][T21999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2216.487429][T21999] R13: 00007fa92ae16038 R14: 00007fa92ae15fa0 R15: 00007ffff6a72898 [ 2216.487541][T21999] [ 2216.497611][T21999] page_pool_create_percpu() gave up with errno -12 [ 2216.646790][T22005] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 2216.841751][T22005] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 2216.849835][T22005] tipc: Resetting bearer [ 2216.919657][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2217.025300][T22017] FAULT_INJECTION: forcing a failure. [ 2217.025300][T22017] name failslab, interval 1, probability 0, space 0, times 0 [ 2217.040289][T22017] CPU: 1 UID: 0 PID: 22017 Comm: syz.4.14278 Not tainted syzkaller #0 PREEMPT(full) [ 2217.040319][T22017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2217.040334][T22017] Call Trace: [ 2217.040343][T22017] [ 2217.040353][T22017] dump_stack_lvl+0xe8/0x150 [ 2217.040389][T22017] should_fail_ex+0x412/0x560 [ 2217.040435][T22017] should_failslab+0xa8/0x100 [ 2217.040475][T22017] ? skb_clone+0x212/0x3a0 [ 2217.040508][T22017] kmem_cache_alloc_noprof+0x87/0x650 [ 2217.040533][T22017] ? apparmor_capable+0x126/0x170 [ 2217.040569][T22017] skb_clone+0x212/0x3a0 [ 2217.040600][T22017] ? nfnetlink_rcv+0x4b0/0x27b0 [ 2217.040632][T22017] nfnetlink_rcv+0x4e2/0x27b0 [ 2217.040672][T22017] ? lockdep_hardirqs_on+0x7a/0x110 [ 2217.040697][T22017] ? __dev_queue_xmit+0x2b6/0x3980 [ 2217.040717][T22017] ? __local_bh_enable_ip+0xd0/0x130 [ 2217.040746][T22017] ? __dev_queue_xmit+0x1fe5/0x3980 [ 2217.040766][T22017] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 2217.040815][T22017] ? __dev_queue_xmit+0x2b6/0x3980 [ 2217.040843][T22017] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2217.040895][T22017] ? ref_tracker_free+0x693/0x840 [ 2217.040923][T22017] ? __pfx_ref_tracker_free+0x10/0x10 [ 2217.040966][T22017] ? skb_clone+0x246/0x3a0 [ 2217.041003][T22017] ? __netlink_deliver_tap+0x807/0x850 [ 2217.041035][T22017] ? netlink_deliver_tap+0x2e/0x1b0 [ 2217.041073][T22017] ? netlink_deliver_tap+0x2e/0x1b0 [ 2217.041104][T22017] ? netlink_deliver_tap+0x2e/0x1b0 [ 2217.041141][T22017] netlink_unicast+0x75c/0x8e0 [ 2217.041182][T22017] netlink_sendmsg+0x813/0xb40 [ 2217.041225][T22017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2217.041260][T22017] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2217.041284][T22017] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2217.041314][T22017] ____sys_sendmsg+0x972/0x9f0 [ 2217.041360][T22017] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2217.041405][T22017] ? import_iovec+0x73/0xa0 [ 2217.041438][T22017] ___sys_sendmsg+0x2a5/0x360 [ 2217.041489][T22017] ? __pfx____sys_sendmsg+0x10/0x10 [ 2217.041565][T22017] ? __fget_files+0x2a/0x420 [ 2217.041586][T22017] ? __fget_files+0x3a0/0x420 [ 2217.041620][T22017] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2217.041658][T22017] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2217.041704][T22017] ? __pfx_ksys_write+0x10/0x10 [ 2217.041744][T22017] do_syscall_64+0x14d/0xf80 [ 2217.041769][T22017] ? trace_irq_disable+0x3b/0x150 [ 2217.041790][T22017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2217.041814][T22017] ? clear_bhb_loop+0x40/0x90 [ 2217.041843][T22017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2217.041866][T22017] RIP: 0033:0x7fa92ab9c819 [ 2217.041888][T22017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2217.041909][T22017] RSP: 002b:00007fa92ba2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2217.041935][T22017] RAX: ffffffffffffffda RBX: 00007fa92ae15fa0 RCX: 00007fa92ab9c819 [ 2217.041953][T22017] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2217.041968][T22017] RBP: 00007fa92ba2f090 R08: 0000000000000000 R09: 0000000000000000 [ 2217.041982][T22017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2217.041996][T22017] R13: 00007fa92ae16038 R14: 00007fa92ae15fa0 R15: 00007ffff6a72898 [ 2217.042034][T22017] [ 2217.482572][T22025] lo speed is unknown, defaulting to 1000 [ 2217.612232][T22028] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 2217.636902][T22028] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 2217.688211][T22028] tipc: Resetting bearer [ 2217.864652][T22040] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.14283'. [ 2217.910320][T22040] openvswitch: netlink: Message has 16 unknown bytes. [ 2217.947790][T22040] netlink: 76 bytes leftover after parsing attributes in process `syz.2.14283'. [ 2217.959724][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2217.994298][T22047] vlan4: entered promiscuous mode [ 2218.005860][T22047] bridge0: entered promiscuous mode [ 2218.035890][T31010] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2218.049800][T31010] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2218.058127][T22042] netlink: 'syz.0.14284': attribute type 13 has an invalid length. [ 2218.085440][T31010] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2218.239445][T22042] tipc: Resetting bearer [ 2218.361463][T31010] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2218.437095][T22025] syzkaller0 speed is unknown, defaulting to 1000 [ 2218.482656][T22061] netlink: 17 bytes leftover after parsing attributes in process `syz.4.14288'. [ 2218.762816][T22072] syzkaller1: entered promiscuous mode [ 2218.768381][T22072] syzkaller1: entered allmulticast mode [ 2218.822489][T22076] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14293'. [ 2218.879552][T22076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14293'. [ 2218.966351][T22025] lo speed is unknown, defaulting to 1000 [ 2218.999760][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2219.204740][T22085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14295'. [ 2219.244742][T22086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14295'. [ 2219.263125][T22086] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14295'. [ 2219.897210][T22095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14299'. [ 2220.049542][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2220.623181][T22114] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2220.789872][T22122] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14307'. [ 2221.079521][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2221.218797][T22138] €Â: renamed from dummy0 [ 2221.831494][ T1304] lec:lec_start_xmit: lec0:No lecd attached [ 2222.119581][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2223.159645][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2224.199642][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2225.239535][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2226.279517][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2226.919349][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5090 ms [ 2226.927857][ C0] lec:lec_tx_timeout: lec0 [ 2227.319654][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2228.103883][T22185] FAULT_INJECTION: forcing a failure. [ 2228.103883][T22185] name failslab, interval 1, probability 0, space 0, times 0 [ 2228.117790][T22185] CPU: 1 UID: 0 PID: 22185 Comm: syz.3.14320 Not tainted syzkaller #0 PREEMPT(full) [ 2228.117823][T22185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2228.117839][T22185] Call Trace: [ 2228.117850][T22185] [ 2228.117861][T22185] dump_stack_lvl+0xe8/0x150 [ 2228.117899][T22185] should_fail_ex+0x412/0x560 [ 2228.117943][T22185] should_failslab+0xa8/0x100 [ 2228.117975][T22185] __kmalloc_cache_noprof+0x88/0x660 [ 2228.118001][T22185] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2228.118070][T22185] ? __xdp_reg_mem_model+0x1e3/0x5d0 [ 2228.118120][T22185] __xdp_reg_mem_model+0x1e3/0x5d0 [ 2228.118168][T22185] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 2228.118206][T22185] ? page_pool_create_percpu+0x7f9/0xb80 [ 2228.118237][T22185] xdp_reg_mem_model+0x22/0x40 [ 2228.118271][T22185] bpf_test_run_xdp_live+0x295/0x1cf0 [ 2228.118302][T22185] ? arch_stack_walk+0xfb/0x150 [ 2228.118355][T22185] ? __pfx_stack_trace_save+0x10/0x10 [ 2228.118383][T22185] ? stack_depot_save_flags+0x33/0x810 [ 2228.118432][T22185] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 2228.118462][T22185] ? bpf_test_init+0x9f/0x150 [ 2228.118503][T22185] ? bpf_prog_test_run_xdp+0x529/0x1160 [ 2228.118534][T22185] ? bpf_prog_test_run+0x2c7/0x340 [ 2228.118576][T22185] ? __sys_bpf+0x643/0x950 [ 2228.118595][T22185] ? __x64_sys_bpf+0x7c/0x90 [ 2228.118698][T22185] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 2228.118750][T22185] ? _copy_from_user+0x94/0xb0 [ 2228.118779][T22185] ? bpf_test_init+0x113/0x150 [ 2228.118806][T22185] ? xdp_convert_md_to_buff+0x5b/0x330 [ 2228.118841][T22185] bpf_prog_test_run_xdp+0x81c/0x1160 [ 2228.118892][T22185] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 2228.118930][T22185] ? __fget_files+0x2a/0x420 [ 2228.118958][T22185] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 2228.118990][T22185] bpf_prog_test_run+0x2c7/0x340 [ 2228.119019][T22185] __sys_bpf+0x643/0x950 [ 2228.119045][T22185] ? __pfx___sys_bpf+0x10/0x10 [ 2228.119110][T22185] ? ksys_write+0x242/0x270 [ 2228.119141][T22185] ? __pfx_ksys_write+0x10/0x10 [ 2228.119173][T22185] __x64_sys_bpf+0x7c/0x90 [ 2228.119205][T22185] do_syscall_64+0x14d/0xf80 [ 2228.119229][T22185] ? trace_irq_disable+0x3b/0x150 [ 2228.119247][T22185] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2228.119271][T22185] ? clear_bhb_loop+0x40/0x90 [ 2228.119298][T22185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2228.119320][T22185] RIP: 0033:0x7f6751f9c819 [ 2228.119342][T22185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2228.119361][T22185] RSP: 002b:00007f6752dee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2228.119388][T22185] RAX: ffffffffffffffda RBX: 00007f6752215fa0 RCX: 00007f6751f9c819 [ 2228.119405][T22185] RDX: 0000000000000050 RSI: 0000200000000200 RDI: 000000000000000a [ 2228.119421][T22185] RBP: 00007f6752dee090 R08: 0000000000000000 R09: 0000000000000000 [ 2228.119435][T22185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2228.119449][T22185] R13: 00007f6752216038 R14: 00007f6752215fa0 R15: 00007fff9ac7eb48 [ 2228.119486][T22185] [ 2228.434213][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2228.643383][T22205] ip6_vti0: Caught tx_queue_len zero misconfig [ 2228.849141][T22215] __nla_validate_parse: 1 callbacks suppressed [ 2228.849164][T22215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14328'. [ 2228.867487][T22215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14328'. [ 2228.882562][T22215] netlink: 'syz.0.14328': attribute type 18 has an invalid length. [ 2228.895565][T18514] lec:lec_start_xmit: lec0:No lecd attached [ 2228.938195][T22216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14328'. [ 2228.958513][T22224] netlink: 44 bytes leftover after parsing attributes in process `syz.4.14329'. [ 2228.970737][T22221] x_tables: duplicate underflow at hook 3 [ 2229.139050][T22227] xt_hashlimit: max too large, truncated to 1048576 [ 2229.148589][T22232] ip6tnl11: entered promiscuous mode [ 2229.223282][T22240] netlink: 'syz.1.14334': attribute type 1 has an invalid length. [ 2229.272166][T22240] 8021q: adding VLAN 0 to HW filter on device bond62 [ 2229.372126][T22243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14337'. [ 2229.387209][T22244] bond62: (slave veth19): Enslaving as an active interface with a down link [ 2229.412312][T22250] netlink: 'syz.3.14339': attribute type 1 has an invalid length. [ 2229.461632][T22250] bond53: entered promiscuous mode [ 2229.467452][T22250] 8021q: adding VLAN 0 to HW filter on device bond53 [ 2229.474939][T22254] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14340'. [ 2229.489511][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2229.503573][T22243] netlink: 'syz.4.14337': attribute type 2 has an invalid length. [ 2229.530384][T22233] netlink: 'syz.1.14334': attribute type 1 has an invalid length. [ 2229.540260][T22233] netlink: 228 bytes leftover after parsing attributes in process `syz.1.14334'. [ 2229.550396][T22233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14334'. [ 2229.563095][T22243] : entered promiscuous mode [ 2229.579491][T22252] netlink: 'syz.4.14337': attribute type 2 has an invalid length. [ 2229.600428][T22252] : left promiscuous mode [ 2229.684703][T22260] netlink: zone id is out of range [ 2229.709371][T22260] netlink: zone id is out of range [ 2229.714564][T22260] netlink: zone id is out of range [ 2229.739408][T22260] netlink: zone id is out of range [ 2229.750363][T22260] netlink: zone id is out of range [ 2229.755549][T22260] netlink: zone id is out of range [ 2229.776168][T22265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14345'. [ 2229.784246][T22260] netlink: zone id is out of range [ 2229.948485][T22276] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14346'. [ 2230.019025][T22280] xt_hashlimit: max too large, truncated to 1048576 [ 2230.108418][T22273] bridge35: the hash_elasticity option has been deprecated and is always 16 [ 2230.125237][T22273] bridge35: entered allmulticast mode [ 2230.141517][T22276] bridge36: the hash_elasticity option has been deprecated and is always 16 [ 2230.151047][T22276] bridge36: entered allmulticast mode [ 2230.216734][T22285] netlink: 'syz.2.14349': attribute type 29 has an invalid length. [ 2230.277008][T22287] netlink: 'syz.3.14350': attribute type 1 has an invalid length. [ 2230.337507][T22297] netlink: 'syz.1.14353': attribute type 1 has an invalid length. [ 2230.346144][T22297] netlink: 'syz.1.14353': attribute type 2 has an invalid length. [ 2230.487229][T22287] bond54: (slave bridge29): making interface the new active one [ 2230.526273][T22287] bond54: (slave bridge29): Enslaving as an active interface with an up link [ 2230.566301][T22299] bond54: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2230.752407][T22314] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 2230.761441][T22314] tipc: Resetting bearer [ 2230.808336][T22314] tipc: Enabling of bearer rejected, already enabled [ 2230.922544][T22320] xt_hashlimit: max too large, truncated to 1048576 [ 2231.011991][T22322] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 2231.206545][T22334] ipip0: entered promiscuous mode [ 2231.414610][T22349] xt_hashlimit: max too large, truncated to 1048576 [ 2231.711749][T22363] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig [ 2232.076725][T22384] xt_hashlimit: max too large, truncated to 1048576 [ 2232.133516][T22391] FAULT_INJECTION: forcing a failure. [ 2232.133516][T22391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2232.159924][T22378] lo speed is unknown, defaulting to 1000 [ 2232.170086][T22391] CPU: 0 UID: 0 PID: 22391 Comm: syz.3.14387 Not tainted syzkaller #0 PREEMPT(full) [ 2232.170116][T22391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2232.170131][T22391] Call Trace: [ 2232.170141][T22391] [ 2232.170151][T22391] dump_stack_lvl+0xe8/0x150 [ 2232.170190][T22391] should_fail_ex+0x412/0x560 [ 2232.170231][T22391] _copy_to_user+0x31/0xb0 [ 2232.170261][T22391] bpf_test_finish+0x53c/0x6b0 [ 2232.170301][T22391] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 2232.170336][T22391] ? __pfx_bpf_test_finish+0x10/0x10 [ 2232.170372][T22391] ? _copy_from_user+0x94/0xb0 [ 2232.170401][T22391] ? bpf_test_init+0x113/0x150 [ 2232.170433][T22391] bpf_prog_test_run_xdp+0x8fa/0x1160 [ 2232.170485][T22391] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 2232.170522][T22391] ? __fget_files+0x2a/0x420 [ 2232.170551][T22391] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 2232.170583][T22391] bpf_prog_test_run+0x2c7/0x340 [ 2232.170611][T22391] __sys_bpf+0x643/0x950 [ 2232.170637][T22391] ? __pfx___sys_bpf+0x10/0x10 [ 2232.170679][T22391] ? ksys_write+0x242/0x270 [ 2232.170722][T22391] ? __pfx_ksys_write+0x10/0x10 [ 2232.170759][T22391] __x64_sys_bpf+0x7c/0x90 [ 2232.170794][T22391] do_syscall_64+0x14d/0xf80 [ 2232.170820][T22391] ? trace_irq_disable+0x3b/0x150 [ 2232.170840][T22391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2232.170874][T22391] ? clear_bhb_loop+0x40/0x90 [ 2232.170910][T22391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2232.170937][T22391] RIP: 0033:0x7f6751f9c819 [ 2232.170960][T22391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2232.170980][T22391] RSP: 002b:00007f6752dee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2232.171005][T22391] RAX: ffffffffffffffda RBX: 00007f6752215fa0 RCX: 00007f6751f9c819 [ 2232.171030][T22391] RDX: 0000000000000050 RSI: 0000200000000200 RDI: 000000000000000a [ 2232.171044][T22391] RBP: 00007f6752dee090 R08: 0000000000000000 R09: 0000000000000000 [ 2232.171059][T22391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2232.171072][T22391] R13: 00007f6752216038 R14: 00007f6752215fa0 R15: 00007fff9ac7eb48 [ 2232.171111][T22391] [ 2232.600034][ C1] net_ratelimit: 242 callbacks suppressed [ 2232.600057][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2232.632301][T22378] syzkaller0 speed is unknown, defaulting to 1000 [ 2233.096836][T22402] sctp: [Deprecated]: syz.0.14390 (pid 22402) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2233.096836][T22402] Use struct sctp_sack_info instead [ 2233.548092][T22378] lo speed is unknown, defaulting to 1000 [ 2233.639563][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2233.909361][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 2233.917646][ C0] lec:lec_tx_timeout: lec0 [ 2234.201312][T22440] __nla_validate_parse: 19 callbacks suppressed [ 2234.201335][T22440] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14397'. [ 2234.229650][T22443] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14398'. [ 2234.264523][T22443] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2234.402692][T22449] FAULT_INJECTION: forcing a failure. [ 2234.402692][T22449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2234.441040][T22449] CPU: 1 UID: 0 PID: 22449 Comm: syz.2.14399 Not tainted syzkaller #0 PREEMPT(full) [ 2234.441075][T22449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2234.441091][T22449] Call Trace: [ 2234.441102][T22449] [ 2234.441114][T22449] dump_stack_lvl+0xe8/0x150 [ 2234.441156][T22449] should_fail_ex+0x412/0x560 [ 2234.441205][T22449] _copy_to_user+0x31/0xb0 [ 2234.441241][T22449] simple_read_from_buffer+0xe1/0x170 [ 2234.441288][T22449] proc_fail_nth_read+0x1bb/0x230 [ 2234.441331][T22449] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2234.441376][T22449] ? rw_verify_area+0x2a6/0x4d0 [ 2234.441403][T22449] ? __fget_files+0x2a/0x420 [ 2234.441425][T22449] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2234.441467][T22449] vfs_read+0x20c/0xa70 [ 2234.441495][T22449] ? fdget_pos+0x246/0x320 [ 2234.441526][T22449] ? __pfx___mutex_lock+0x10/0x10 [ 2234.441556][T22449] ? __pfx_vfs_read+0x10/0x10 [ 2234.441588][T22449] ? __fget_files+0x2a/0x420 [ 2234.441618][T22449] ? __fget_files+0x3a0/0x420 [ 2234.441641][T22449] ? __fget_files+0x2a/0x420 [ 2234.441679][T22449] ksys_read+0x150/0x270 [ 2234.441712][T22449] ? __pfx_ksys_read+0x10/0x10 [ 2234.441759][T22449] do_syscall_64+0x14d/0xf80 [ 2234.441787][T22449] ? trace_irq_disable+0x3b/0x150 [ 2234.441809][T22449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2234.441835][T22449] ? clear_bhb_loop+0x40/0x90 [ 2234.441868][T22449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2234.441893][T22449] RIP: 0033:0x7fde8395d04e [ 2234.441917][T22449] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2234.441938][T22449] RSP: 002b:00007fde8485afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2234.441968][T22449] RAX: ffffffffffffffda RBX: 00007fde8485b6c0 RCX: 00007fde8395d04e [ 2234.441988][T22449] RDX: 000000000000000f RSI: 00007fde8485b0a0 RDI: 0000000000000005 [ 2234.442004][T22449] RBP: 00007fde8485b090 R08: 0000000000000000 R09: 0000000000000000 [ 2234.442021][T22449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2234.442045][T22449] R13: 00007fde83c16038 R14: 00007fde83c15fa0 R15: 00007ffe7b2201a8 [ 2234.442089][T22449] [ 2234.680125][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2235.719556][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2236.760006][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2237.799903][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2238.840209][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2239.879753][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2240.260645][T22480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14400'. [ 2240.426489][T22491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14406'. [ 2240.486442][T22490] sctp: [Deprecated]: syz.3.14405 (pid 22490) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2240.486442][T22490] Use struct sctp_sack_info instead [ 2240.532078][T22490] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 2240.556600][T22490] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 2240.584004][T22490] tipc: Resetting bearer [ 2240.592705][ T404] block nbd10: Receive control failed (result -1) [ 2240.823640][T22504] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14410'. [ 2240.859652][T22504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14410'. [ 2240.890504][T22509] validate_nla: 2 callbacks suppressed [ 2240.890527][T22509] netlink: 'syz.1.14411': attribute type 13 has an invalid length. [ 2240.920424][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2241.387545][T22522] geneve8: entered promiscuous mode [ 2241.438131][T22528] netlink: 52 bytes leftover after parsing attributes in process `syz.4.14416'. [ 2241.441216][T22522] geneve8: entered allmulticast mode [ 2241.491440][T22532] sctp: [Deprecated]: syz.3.14418 (pid 22532) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2241.491440][T22532] Use struct sctp_sack_info instead [ 2241.886634][T22555] netlink: 64 bytes leftover after parsing attributes in process `syz.2.14427'. [ 2241.959638][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2242.301064][T22573] sctp: [Deprecated]: syz.0.14430 (pid 22573) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2242.301064][T22573] Use struct sctp_sack_info instead [ 2242.359187][T22564] veth25: entered allmulticast mode [ 2242.653064][T22586] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14436'. [ 2242.807464][T22596] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14438'. [ 2242.817268][T22596] netlink: 'syz.0.14438': attribute type 1 has an invalid length. [ 2242.825510][T22596] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14438'. [ 2242.838210][T22595] FAULT_INJECTION: forcing a failure. [ 2242.838210][T22595] name failslab, interval 1, probability 0, space 0, times 0 [ 2242.855614][T22592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14438'. [ 2242.866047][T22592] netlink: 'syz.0.14438': attribute type 1 has an invalid length. [ 2242.884926][T22595] CPU: 0 UID: 0 PID: 22595 Comm: syz.2.14440 Not tainted syzkaller #0 PREEMPT(full) [ 2242.884956][T22595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2242.884972][T22595] Call Trace: [ 2242.884982][T22595] [ 2242.884993][T22595] dump_stack_lvl+0xe8/0x150 [ 2242.885033][T22595] should_fail_ex+0x412/0x560 [ 2242.885075][T22595] should_failslab+0xa8/0x100 [ 2242.885109][T22595] __kmalloc_noprof+0xe8/0x760 [ 2242.885137][T22595] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 2242.885171][T22595] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 2242.885208][T22595] genl_family_rcv_msg_doit+0xd9/0x330 [ 2242.885241][T22595] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2242.885277][T22595] ? apparmor_capable+0x126/0x170 [ 2242.885309][T22595] ? bpf_lsm_capable+0x9/0x20 [ 2242.885341][T22595] ? security_capable+0x7e/0x2c0 [ 2242.885384][T22595] genl_rcv_msg+0x61c/0x7a0 [ 2242.885417][T22595] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2242.885440][T22595] ? __pfx_ip_vs_genl_set_daemon+0x10/0x10 [ 2242.885483][T22595] netlink_rcv_skb+0x232/0x4b0 [ 2242.885517][T22595] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2242.885543][T22595] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2242.885604][T22595] ? down_read+0x272/0x2e0 [ 2242.885632][T22595] ? genl_rcv+0xd/0x40 [ 2242.885657][T22595] genl_rcv+0x28/0x40 [ 2242.885678][T22595] netlink_unicast+0x75c/0x8e0 [ 2242.885721][T22595] netlink_sendmsg+0x813/0xb40 [ 2242.885765][T22595] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2242.885802][T22595] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2242.885827][T22595] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2242.885859][T22595] ____sys_sendmsg+0x972/0x9f0 [ 2242.885909][T22595] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2242.885956][T22595] ? import_iovec+0x73/0xa0 [ 2242.885989][T22595] ___sys_sendmsg+0x2a5/0x360 [ 2242.886032][T22595] ? __pfx____sys_sendmsg+0x10/0x10 [ 2242.886112][T22595] ? __fget_files+0x2a/0x420 [ 2242.886133][T22595] ? __fget_files+0x3a0/0x420 [ 2242.886169][T22595] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2242.886207][T22595] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2242.886255][T22595] ? __pfx_ksys_write+0x10/0x10 [ 2242.886297][T22595] do_syscall_64+0x14d/0xf80 [ 2242.886323][T22595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2242.886347][T22595] ? clear_bhb_loop+0x40/0x90 [ 2242.886377][T22595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2242.886400][T22595] RIP: 0033:0x7fde8399c819 [ 2242.886422][T22595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2242.886442][T22595] RSP: 002b:00007fde8485b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2242.886469][T22595] RAX: ffffffffffffffda RBX: 00007fde83c15fa0 RCX: 00007fde8399c819 [ 2242.886486][T22595] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000003 [ 2242.886500][T22595] RBP: 00007fde8485b090 R08: 0000000000000000 R09: 0000000000000000 [ 2242.886515][T22595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2242.886529][T22595] R13: 00007fde83c16038 R14: 00007fde83c15fa0 R15: 00007ffe7b2201a8 [ 2242.886575][T22595] [ 2243.042656][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2243.202093][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2243.240005][T22603] FAULT_INJECTION: forcing a failure. [ 2243.240005][T22603] name failslab, interval 1, probability 0, space 0, times 0 [ 2243.253810][T22603] CPU: 0 UID: 0 PID: 22603 Comm: syz.1.14441 Not tainted syzkaller #0 PREEMPT(full) [ 2243.253842][T22603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2243.253857][T22603] Call Trace: [ 2243.253866][T22603] [ 2243.253876][T22603] dump_stack_lvl+0xe8/0x150 [ 2243.253915][T22603] should_fail_ex+0x412/0x560 [ 2243.253957][T22603] should_failslab+0xa8/0x100 [ 2243.253990][T22603] __kmalloc_noprof+0xe8/0x760 [ 2243.254018][T22603] ? tomoyo_encode+0x28b/0x550 [ 2243.254148][T22603] tomoyo_encode+0x28b/0x550 [ 2243.254181][T22603] tomoyo_realpath_from_path+0x58d/0x5d0 [ 2243.254220][T22603] ? tomoyo_path_number_perm+0x219/0x630 [ 2243.254254][T22603] tomoyo_path_number_perm+0x246/0x630 [ 2243.254291][T22603] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2243.254328][T22603] ? __lock_acquire+0x6b5/0x2cf0 [ 2243.254374][T22603] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 2243.254428][T22603] ? __fget_files+0x2a/0x420 [ 2243.254454][T22603] ? __fget_files+0x2a/0x420 [ 2243.254473][T22603] ? __fget_files+0x3a0/0x420 [ 2243.254494][T22603] ? __fget_files+0x2a/0x420 [ 2243.254521][T22603] security_file_ioctl+0xc3/0x2a0 [ 2243.254556][T22603] __se_sys_ioctl+0x47/0x170 [ 2243.254589][T22603] do_syscall_64+0x14d/0xf80 [ 2243.254613][T22603] ? trace_irq_disable+0x3b/0x150 [ 2243.254634][T22603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2243.254658][T22603] ? clear_bhb_loop+0x40/0x90 [ 2243.254687][T22603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2243.254710][T22603] RIP: 0033:0x7f294bf9c819 [ 2243.254732][T22603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2243.254752][T22603] RSP: 002b:00007f294cdff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2243.254779][T22603] RAX: ffffffffffffffda RBX: 00007f294c215fa0 RCX: 00007f294bf9c819 [ 2243.254796][T22603] RDX: 0000200000000540 RSI: 0000000000008923 RDI: 0000000000000004 [ 2243.254811][T22603] RBP: 00007f294cdff090 R08: 0000000000000000 R09: 0000000000000000 [ 2243.254825][T22603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2243.254839][T22603] R13: 00007f294c216038 R14: 00007f294c215fa0 R15: 00007fff173ad5e8 [ 2243.254876][T22603] [ 2243.255056][T22603] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2244.119553][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2244.127165][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2244.204183][T22622] sctp: [Deprecated]: syz.2.14448 (pid 22622) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2244.204183][T22622] Use struct sctp_sack_info instead [ 2244.231667][T22622] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 2244.259351][T22622] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 2244.277818][T22622] tipc: Resetting bearer [ 2244.437497][T22634] FAULT_INJECTION: forcing a failure. [ 2244.437497][T22634] name failslab, interval 1, probability 0, space 0, times 0 [ 2244.455582][T22632] lo speed is unknown, defaulting to 1000 [ 2244.489619][T22634] CPU: 1 UID: 0 PID: 22634 Comm: syz.4.14454 Not tainted syzkaller #0 PREEMPT(full) [ 2244.489653][T22634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2244.489668][T22634] Call Trace: [ 2244.489678][T22634] [ 2244.489688][T22634] dump_stack_lvl+0xe8/0x150 [ 2244.489727][T22634] should_fail_ex+0x412/0x560 [ 2244.489769][T22634] should_failslab+0xa8/0x100 [ 2244.489800][T22634] ? skb_clone+0x212/0x3a0 [ 2244.489834][T22634] kmem_cache_alloc_noprof+0x87/0x650 [ 2244.489862][T22634] ? __netlink_lookup+0xc6/0x8b0 [ 2244.489902][T22634] skb_clone+0x212/0x3a0 [ 2244.489941][T22634] __netlink_deliver_tap+0x404/0x850 [ 2244.489988][T22634] ? netlink_deliver_tap+0x2e/0x1b0 [ 2244.490021][T22634] netlink_deliver_tap+0x19c/0x1b0 [ 2244.490054][T22634] netlink_unicast+0x730/0x8e0 [ 2244.490104][T22634] netlink_sendmsg+0x813/0xb40 [ 2244.490147][T22634] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2244.490183][T22634] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2244.490208][T22634] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2244.490240][T22634] ____sys_sendmsg+0x972/0x9f0 [ 2244.490285][T22634] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2244.490332][T22634] ? import_iovec+0x73/0xa0 [ 2244.490364][T22634] ___sys_sendmsg+0x2a5/0x360 [ 2244.490405][T22634] ? __pfx____sys_sendmsg+0x10/0x10 [ 2244.490483][T22634] ? __fget_files+0x2a/0x420 [ 2244.490503][T22634] ? __fget_files+0x3a0/0x420 [ 2244.490538][T22634] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2244.490578][T22634] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2244.490624][T22634] ? __pfx_ksys_write+0x10/0x10 [ 2244.490665][T22634] do_syscall_64+0x14d/0xf80 [ 2244.490691][T22634] ? trace_irq_disable+0x3b/0x150 [ 2244.490711][T22634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2244.490735][T22634] ? clear_bhb_loop+0x40/0x90 [ 2244.490763][T22634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2244.490787][T22634] RIP: 0033:0x7fa92ab9c819 [ 2244.490808][T22634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2244.490828][T22634] RSP: 002b:00007fa92ba2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2244.490854][T22634] RAX: ffffffffffffffda RBX: 00007fa92ae15fa0 RCX: 00007fa92ab9c819 [ 2244.490871][T22634] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000003 [ 2244.490885][T22634] RBP: 00007fa92ba2f090 R08: 0000000000000000 R09: 0000000000000000 [ 2244.490905][T22634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2244.490919][T22634] R13: 00007fa92ae16038 R14: 00007fa92ae15fa0 R15: 00007ffff6a72898 [ 2244.490957][T22634] [ 2244.915950][T22644] FAULT_INJECTION: forcing a failure. [ 2244.915950][T22644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2244.959505][T22644] CPU: 1 UID: 0 PID: 22644 Comm: syz.2.14456 Not tainted syzkaller #0 PREEMPT(full) [ 2244.959539][T22644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2244.959556][T22644] Call Trace: [ 2244.959567][T22644] [ 2244.959578][T22644] dump_stack_lvl+0xe8/0x150 [ 2244.959619][T22644] should_fail_ex+0x412/0x560 [ 2244.959667][T22644] _copy_from_user+0x2d/0xb0 [ 2244.959699][T22644] sock_do_ioctl+0x195/0x320 [ 2244.959732][T22644] ? __pfx_sock_do_ioctl+0x10/0x10 [ 2244.959757][T22644] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 2244.959810][T22644] sock_ioctl+0x5c6/0x7f0 [ 2244.959841][T22644] ? __pfx_sock_ioctl+0x10/0x10 [ 2244.959869][T22644] ? __fget_files+0x2a/0x420 [ 2244.959893][T22644] ? __fget_files+0x3a0/0x420 [ 2244.959915][T22644] ? __fget_files+0x2a/0x420 [ 2244.959943][T22644] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2244.959978][T22644] ? __pfx_sock_ioctl+0x10/0x10 [ 2244.960005][T22644] __se_sys_ioctl+0xfc/0x170 [ 2244.960041][T22644] do_syscall_64+0x14d/0xf80 [ 2244.960070][T22644] ? trace_irq_disable+0x3b/0x150 [ 2244.960093][T22644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2244.960118][T22644] ? clear_bhb_loop+0x40/0x90 [ 2244.960150][T22644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2244.960175][T22644] RIP: 0033:0x7fde8399c819 [ 2244.960199][T22644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2244.960222][T22644] RSP: 002b:00007fde8485b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2244.960252][T22644] RAX: ffffffffffffffda RBX: 00007fde83c15fa0 RCX: 00007fde8399c819 [ 2244.960271][T22644] RDX: 0000200000000540 RSI: 0000000000008923 RDI: 0000000000000004 [ 2244.960288][T22644] RBP: 00007fde8485b090 R08: 0000000000000000 R09: 0000000000000000 [ 2244.960305][T22644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2244.960320][T22644] R13: 00007fde83c16038 R14: 00007fde83c15fa0 R15: 00007ffe7b2201a8 [ 2244.960363][T22644] [ 2245.167826][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2245.175383][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2245.692522][T22632] syzkaller0 speed is unknown, defaulting to 1000 [ 2246.148169][T22671] sctp: [Deprecated]: syz.4.14465 (pid 22671) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2246.148169][T22671] Use struct sctp_sack_info instead [ 2246.196780][T22632] lo speed is unknown, defaulting to 1000 [ 2246.202993][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2246.203465][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2246.223780][T22678] __nla_validate_parse: 6 callbacks suppressed [ 2246.223814][T22678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14467'. [ 2246.249657][T22678] nbd: socks must be embedded in a SOCK_ITEM attr [ 2246.276981][T22678] netlink: 192 bytes leftover after parsing attributes in process `syz.2.14467'. [ 2246.356227][T22678] netlink: 3 bytes leftover after parsing attributes in process `syz.2.14467'. [ 2246.521537][T22686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14471'. [ 2246.558482][T22688] mac80211_hwsim hwsim4 wlan1: Master is either lo or non-ether device [ 2246.562383][T22690] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14473'. [ 2246.859691][T22703] syzkaller1: entered promiscuous mode [ 2246.875631][T22703] syzkaller1: entered allmulticast mode [ 2247.240292][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2247.247962][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2247.327397][T22717] sctp: [Deprecated]: syz.0.14480 (pid 22717) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2247.327397][T22717] Use struct sctp_sack_info instead [ 2247.985480][T22730] sctp: [Deprecated]: syz.0.14483 (pid 22730) Use of int in max_burst socket option deprecated. [ 2247.985480][T22730] Use struct sctp_assoc_value instead [ 2248.270114][T22741] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 2248.277916][T22741] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 2248.287871][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2248.288327][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2248.310660][T22741] tipc: Resetting bearer [ 2248.317769][T22743] FAULT_INJECTION: forcing a failure. [ 2248.317769][T22743] name failslab, interval 1, probability 0, space 0, times 0 [ 2248.358422][T22743] CPU: 0 UID: 0 PID: 22743 Comm: syz.2.14487 Not tainted syzkaller #0 PREEMPT(full) [ 2248.358454][T22743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2248.358469][T22743] Call Trace: [ 2248.358478][T22743] [ 2248.358488][T22743] dump_stack_lvl+0xe8/0x150 [ 2248.358528][T22743] should_fail_ex+0x412/0x560 [ 2248.358570][T22743] should_failslab+0xa8/0x100 [ 2248.358603][T22743] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 2248.358630][T22743] ? __kasan_kmalloc+0x93/0xb0 [ 2248.358657][T22743] ? __request_module+0x2ec/0x660 [ 2248.358688][T22743] ? __kmalloc_cache_noprof+0x31c/0x660 [ 2248.358720][T22743] kstrdup+0x42/0x100 [ 2248.358753][T22743] __request_module+0x2ec/0x660 [ 2248.358788][T22743] ? __pfx___request_module+0x10/0x10 [ 2248.358816][T22743] ? kasan_quarantine_put+0xbb/0x1f0 [ 2248.358859][T22743] ? security_capable+0x7e/0x2c0 [ 2248.358897][T22743] ? dev_load+0x21/0x1f0 [ 2248.358924][T22743] dev_load+0x190/0x1f0 [ 2248.358953][T22743] dev_ioctl+0x59f/0x1150 [ 2248.358985][T22743] sock_do_ioctl+0x23e/0x320 [ 2248.359011][T22743] ? __pfx_sock_do_ioctl+0x10/0x10 [ 2248.359032][T22743] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 2248.359076][T22743] sock_ioctl+0x5c6/0x7f0 [ 2248.359102][T22743] ? __pfx_sock_ioctl+0x10/0x10 [ 2248.359126][T22743] ? __fget_files+0x2a/0x420 [ 2248.359145][T22743] ? __fget_files+0x3a0/0x420 [ 2248.359164][T22743] ? __fget_files+0x2a/0x420 [ 2248.359188][T22743] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2248.359223][T22743] ? __pfx_sock_ioctl+0x10/0x10 [ 2248.359246][T22743] __se_sys_ioctl+0xfc/0x170 [ 2248.359285][T22743] do_syscall_64+0x14d/0xf80 [ 2248.359310][T22743] ? trace_irq_disable+0x3b/0x150 [ 2248.359330][T22743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2248.359353][T22743] ? clear_bhb_loop+0x40/0x90 [ 2248.359380][T22743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2248.359403][T22743] RIP: 0033:0x7fde8399c819 [ 2248.359424][T22743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2248.359443][T22743] RSP: 002b:00007fde8485b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2248.359469][T22743] RAX: ffffffffffffffda RBX: 00007fde83c15fa0 RCX: 00007fde8399c819 [ 2248.359487][T22743] RDX: 0000200000000540 RSI: 0000000000008923 RDI: 0000000000000004 [ 2248.359501][T22743] RBP: 00007fde8485b090 R08: 0000000000000000 R09: 0000000000000000 [ 2248.359515][T22743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2248.359529][T22743] R13: 00007fde83c16038 R14: 00007fde83c15fa0 R15: 00007ffe7b2201a8 [ 2248.359567][T22743] [ 2248.766752][T22750] 8021q: VLANs not supported on wg1 [ 2248.865933][T22755] sctp: [Deprecated]: syz.2.14492 (pid 22755) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2248.865933][T22755] Use struct sctp_sack_info instead [ 2248.945334][T22759] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14490'. [ 2249.035108][T22763] netlink: 164 bytes leftover after parsing attributes in process `syz.3.14493'. [ 2249.067783][T22763] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14493'. [ 2249.233701][T22771] xt_hashlimit: max too large, truncated to 1048576 [ 2249.274903][T22778] vlan3: entered promiscuous mode [ 2249.320150][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2249.328144][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2249.664079][T22792] veth0_to_batadv: entered promiscuous mode [ 2249.683201][T22792] veth0_to_batadv: entered allmulticast mode [ 2249.693540][T22788] sctp: [Deprecated]: syz.0.14505 (pid 22788) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2249.693540][T22788] Use struct sctp_sack_info instead [ 2249.743967][T22788] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 2249.751654][T22788] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 2249.761021][T22788] tipc: Resetting bearer [ 2249.809612][T22803] netlink: zone id is out of range [ 2249.815040][T22803] netlink: zone id is out of range [ 2249.821141][T22803] netlink: zone id is out of range [ 2249.826681][T22803] netlink: zone id is out of range [ 2249.832000][T22803] netlink: zone id is out of range [ 2249.837382][T22803] netlink: zone id is out of range [ 2249.860324][T22796] bond55 (unregistering): Released all slaves [ 2250.054386][T22811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14512'. [ 2250.094233][T22807] lo speed is unknown, defaulting to 1000 [ 2250.238933][T22817] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2250.386745][T22817] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2250.536145][T22807] syzkaller0 speed is unknown, defaulting to 1000 [ 2250.544348][T22833] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14516'. [ 2250.622223][T22817] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2250.810464][T22817] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2250.972388][T22830] syzkaller1: entered promiscuous mode [ 2250.989471][T22830] syzkaller1: entered allmulticast mode [ 2251.147670][T31009] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2251.234908][T31009] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2251.245443][T22849] FAULT_INJECTION: forcing a failure. [ 2251.245443][T22849] name failslab, interval 1, probability 0, space 0, times 0 [ 2251.261272][T22852] netlink: 'syz.2.14521': attribute type 1 has an invalid length. [ 2251.276851][T22852] netlink: 'syz.2.14521': attribute type 2 has an invalid length. [ 2251.299359][T22849] CPU: 0 UID: 0 PID: 22849 Comm: syz.1.14520 Not tainted syzkaller #0 PREEMPT(full) [ 2251.299392][T22849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2251.299407][T22849] Call Trace: [ 2251.299416][T22849] [ 2251.299425][T22849] dump_stack_lvl+0xe8/0x150 [ 2251.299464][T22849] should_fail_ex+0x412/0x560 [ 2251.299506][T22849] should_failslab+0xa8/0x100 [ 2251.299539][T22849] __kmalloc_cache_noprof+0x88/0x660 [ 2251.299573][T22849] ? lockdep_hardirqs_on+0x7a/0x110 [ 2251.299598][T22849] ? __request_module+0x2d0/0x660 [ 2251.299635][T22849] __request_module+0x2d0/0x660 [ 2251.299667][T22849] ? __pfx___request_module+0x10/0x10 [ 2251.299696][T22849] ? kasan_quarantine_put+0xbb/0x1f0 [ 2251.299724][T22849] ? __pfx___request_module+0x10/0x10 [ 2251.299759][T22849] ? apparmor_capable+0x126/0x170 [ 2251.299798][T22849] ? dev_load+0x21/0x1f0 [ 2251.299827][T22849] dev_ioctl+0x59f/0x1150 [ 2251.299860][T22849] sock_do_ioctl+0x23e/0x320 [ 2251.299888][T22849] ? __pfx_sock_do_ioctl+0x10/0x10 [ 2251.299910][T22849] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 2251.299957][T22849] sock_ioctl+0x5c6/0x7f0 [ 2251.299984][T22849] ? __pfx_sock_ioctl+0x10/0x10 [ 2251.300008][T22849] ? __fget_files+0x2a/0x420 [ 2251.300028][T22849] ? __fget_files+0x3a0/0x420 [ 2251.300047][T22849] ? __fget_files+0x2a/0x420 [ 2251.300073][T22849] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2251.300103][T22849] ? __pfx_sock_ioctl+0x10/0x10 [ 2251.300127][T22849] __se_sys_ioctl+0xfc/0x170 [ 2251.300159][T22849] do_syscall_64+0x14d/0xf80 [ 2251.300184][T22849] ? trace_irq_disable+0x3b/0x150 [ 2251.300204][T22849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2251.300226][T22849] ? clear_bhb_loop+0x40/0x90 [ 2251.300255][T22849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2251.300277][T22849] RIP: 0033:0x7f294bf9c819 [ 2251.300299][T22849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2251.300317][T22849] RSP: 002b:00007f294cdff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2251.300343][T22849] RAX: ffffffffffffffda RBX: 00007f294c215fa0 RCX: 00007f294bf9c819 [ 2251.300360][T22849] RDX: 0000200000000540 RSI: 0000000000008923 RDI: 0000000000000004 [ 2251.300375][T22849] RBP: 00007f294cdff090 R08: 0000000000000000 R09: 0000000000000000 [ 2251.300389][T22849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2251.300403][T22849] R13: 00007f294c216038 R14: 00007f294c215fa0 R15: 00007fff173ad5e8 [ 2251.300470][T22849] [ 2251.613152][T31003] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2251.703686][T31003] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2251.762596][T22807] lo speed is unknown, defaulting to 1000 [ 2251.821586][T22861] __nla_validate_parse: 1 callbacks suppressed [ 2251.821608][T22861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14524'. [ 2251.928955][T22865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14525'. [ 2253.479917][ C1] net_ratelimit: 95 callbacks suppressed [ 2253.479935][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2253.493150][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2254.519556][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2254.527024][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2255.559960][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2255.567232][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2256.599578][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2256.606971][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2257.611377][T22888] bond49: option arp_all_targets: invalid value (129) [ 2257.640243][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2257.647796][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2257.655629][T22897] netlink: 48 bytes leftover after parsing attributes in process `syz.3.14529'. [ 2257.671690][T22888] bond49 (unregistering): Released all slaves [ 2257.685623][T22898] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14527'. [ 2257.882657][T22911] xt_hashlimit: max too large, truncated to 1048576 [ 2258.051997][T22922] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14539'. [ 2258.076750][T22924] [ 2258.079416][T22924] ====================================================== [ 2258.086888][T22924] WARNING: possible circular locking dependency detected [ 2258.094048][T22924] syzkaller #0 Not tainted [ 2258.099258][T22924] ------------------------------------------------------ [ 2258.107108][T22924] syz.1.14540/22924 is trying to acquire lock: [ 2258.114434][T22924] ffffffff8e883760 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x152/0x650 [ 2258.123651][T22924] [ 2258.123651][T22924] but task is already holding lock: [ 2258.131933][T22924] ffff88809cbe2800 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 2258.142161][T22924] [ 2258.142161][T22924] which lock already depends on the new lock. [ 2258.142161][T22924] [ 2258.153224][T22924] [ 2258.153224][T22924] the existing dependency chain (in reverse order) is: [ 2258.166152][T22924] [ 2258.166152][T22924] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 2258.175626][T22924] __might_fault+0xcb/0x130 [ 2258.180958][T22924] _copy_from_user+0x28/0xb0 [ 2258.186599][T22924] csum_and_copy_from_iter_full+0x1e7/0x1f00 [ 2258.193359][T22924] ip_generic_getfrag+0x149/0x2d0 [ 2258.198972][T22924] __ip6_append_data+0x39e4/0x3f70 [ 2258.205500][T22924] ip6_append_data+0x10f/0x280 [ 2258.211232][T22924] rawv6_sendmsg+0x12d3/0x18e0 [ 2258.216913][T22924] ____sys_sendmsg+0x80a/0x9f0 [ 2258.222244][T22924] ___sys_sendmsg+0x2a5/0x360 [ 2258.227480][T22924] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2258.233774][T22924] do_syscall_64+0x14d/0xf80 [ 2258.238947][T22924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2258.245507][T22924] [ 2258.245507][T22924] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 2258.253550][T22924] lock_sock_nested+0x41/0x100 [ 2258.258867][T22924] inet_shutdown+0x6a/0x390 [ 2258.264130][T22924] nbd_mark_nsock_dead+0x2e9/0x560 [ 2258.270073][T22924] recv_work+0x1c7f/0x1d90 [ 2258.275062][T22924] process_scheduled_works+0xb6e/0x18c0 [ 2258.281362][T22924] worker_thread+0xa53/0xfc0 [ 2258.286705][T22924] kthread+0x388/0x470 [ 2258.291471][T22924] ret_from_fork+0x51e/0xb90 [ 2258.296780][T22924] ret_from_fork_asm+0x1a/0x30 [ 2258.302117][T22924] [ 2258.302117][T22924] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 2258.309816][T22924] __mutex_lock+0x19f/0x1300 [ 2258.314976][T22924] nbd_queue_rq+0x37b/0x1100 [ 2258.320423][T22924] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 2258.326820][T22924] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 2258.334135][T22924] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 2258.340802][T22924] blk_mq_run_hw_queue+0x348/0x4f0 [ 2258.347042][T22924] blk_mq_dispatch_list+0xd16/0xe10 [ 2258.352821][T22924] blk_mq_flush_plug_list+0x48d/0x570 [ 2258.358854][T22924] __blk_flush_plug+0x3ed/0x4d0 [ 2258.364400][T22924] __submit_bio+0x28d/0x580 [ 2258.369588][T22924] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 2258.375885][T22924] block_read_full_folio+0x599/0x830 [ 2258.381732][T22924] filemap_read_folio+0x137/0x3b0 [ 2258.387538][T22924] do_read_cache_folio+0x358/0x590 [ 2258.393258][T22924] read_part_sector+0xb6/0x2b0 [ 2258.398658][T22924] adfspart_check_ICS+0xa5/0xa40 [ 2258.404333][T22924] bdev_disk_changed+0x7ba/0x1550 [ 2258.410007][T22924] blkdev_get_whole+0x380/0x510 [ 2258.415482][T22924] bdev_open+0x31e/0xd30 [ 2258.420364][T22924] blkdev_open+0x470/0x610 [ 2258.425445][T22924] do_dentry_open+0x785/0x14e0 [ 2258.430877][T22924] vfs_open+0x3b/0x340 [ 2258.435541][T22924] path_openat+0x2e08/0x3860 [ 2258.440686][T22924] do_file_open+0x23e/0x4a0 [ 2258.445833][T22924] do_sys_openat2+0x113/0x200 [ 2258.451094][T22924] __x64_sys_openat+0x138/0x170 [ 2258.456593][T22924] do_syscall_64+0x14d/0xf80 [ 2258.461768][T22924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2258.468216][T22924] [ 2258.468216][T22924] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 2258.475653][T22924] __mutex_lock+0x19f/0x1300 [ 2258.481042][T22924] nbd_queue_rq+0xc6/0x1100 [ 2258.486363][T22924] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 2258.493055][T22924] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 2258.500063][T22924] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 2258.506797][T22924] blk_mq_run_hw_queue+0x348/0x4f0 [ 2258.512813][T22924] blk_mq_dispatch_list+0xd16/0xe10 [ 2258.519007][T22924] blk_mq_flush_plug_list+0x48d/0x570 [ 2258.525292][T22924] __blk_flush_plug+0x3ed/0x4d0 [ 2258.530880][T22924] __submit_bio+0x28d/0x580 [ 2258.536065][T22924] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 2258.542279][T22924] block_read_full_folio+0x599/0x830 [ 2258.548411][T22924] filemap_read_folio+0x137/0x3b0 [ 2258.554165][T22924] do_read_cache_folio+0x358/0x590 [ 2258.560101][T22924] read_part_sector+0xb6/0x2b0 [ 2258.565504][T22924] adfspart_check_ICS+0xa5/0xa40 [ 2258.571003][T22924] bdev_disk_changed+0x7ba/0x1550 [ 2258.576620][T22924] blkdev_get_whole+0x380/0x510 [ 2258.582121][T22924] bdev_open+0x31e/0xd30 [ 2258.587303][T22924] blkdev_open+0x470/0x610 [ 2258.592481][T22924] do_dentry_open+0x785/0x14e0 [ 2258.598698][T22924] vfs_open+0x3b/0x340 [ 2258.603363][T22924] path_openat+0x2e08/0x3860 [ 2258.608697][T22924] do_file_open+0x23e/0x4a0 [ 2258.613763][T22924] do_sys_openat2+0x113/0x200 [ 2258.619002][T22924] __x64_sys_openat+0x138/0x170 [ 2258.624418][T22924] do_syscall_64+0x14d/0xf80 [ 2258.629558][T22924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2258.636009][T22924] [ 2258.636009][T22924] -> #3 (set->srcu){.+.+}-{0:0}: [ 2258.643263][T22924] __synchronize_srcu+0xca/0x300 [ 2258.648843][T22924] elevator_switch+0x1e8/0x7a0 [ 2258.654189][T22924] elevator_change+0x2cc/0x450 [ 2258.659591][T22924] elevator_set_default+0x36c/0x430 [ 2258.665621][T22924] blk_register_queue+0x366/0x430 [ 2258.671222][T22924] __add_disk+0x677/0xd50 [ 2258.676124][T22924] add_disk_fwnode+0xfb/0x480 [ 2258.680329][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2258.681442][T22924] nbd_dev_add+0x72c/0xb50 [ 2258.689558][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2258.693523][T22924] nbd_init+0x168/0x1f0 [ 2258.705290][T22924] do_one_initcall+0x250/0x8d0 [ 2258.710623][T22924] do_initcall_level+0x104/0x190 [ 2258.716150][T22924] do_initcalls+0x59/0xa0 [ 2258.721044][T22924] kernel_init_freeable+0x2a6/0x3e0 [ 2258.726830][T22924] kernel_init+0x1d/0x1d0 [ 2258.731733][T22924] ret_from_fork+0x51e/0xb90 [ 2258.736979][T22924] ret_from_fork_asm+0x1a/0x30 [ 2258.742484][T22924] [ 2258.742484][T22924] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 2258.750342][T22924] __mutex_lock+0x19f/0x1300 [ 2258.755485][T22924] elevator_change+0x1b3/0x450 [ 2258.760891][T22924] elevator_set_none+0xb5/0x140 [ 2258.766473][T22924] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 2258.773529][T22924] nbd_start_device+0x17f/0xb10 [ 2258.779020][T22924] nbd_genl_connect+0x165b/0x1cf0 [ 2258.784611][T22924] genl_family_rcv_msg_doit+0x22a/0x330 [ 2258.790730][T22924] genl_rcv_msg+0x61c/0x7a0 [ 2258.795873][T22924] netlink_rcv_skb+0x232/0x4b0 [ 2258.801272][T22924] genl_rcv+0x28/0x40 [ 2258.805813][T22924] netlink_unicast+0x75c/0x8e0 [ 2258.811308][T22924] netlink_sendmsg+0x813/0xb40 [ 2258.816716][T22924] ____sys_sendmsg+0x972/0x9f0 [ 2258.822113][T22924] ___sys_sendmsg+0x2a5/0x360 [ 2258.827556][T22924] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2258.833137][T22924] do_syscall_64+0x14d/0xf80 [ 2258.838453][T22924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2258.845154][T22924] [ 2258.845154][T22924] -> #1 (&q->q_usage_counter(io)#58){++++}-{0:0}: [ 2258.853891][T22924] blk_alloc_queue+0x546/0x680 [ 2258.859549][T22924] __blk_mq_alloc_disk+0x197/0x390 [ 2258.865559][T22924] nbd_dev_add+0x499/0xb50 [ 2258.870718][T22924] nbd_init+0x168/0x1f0 [ 2258.875430][T22924] do_one_initcall+0x250/0x8d0 [ 2258.880757][T22924] do_initcall_level+0x104/0x190 [ 2258.886280][T22924] do_initcalls+0x59/0xa0 [ 2258.891164][T22924] kernel_init_freeable+0x2a6/0x3e0 [ 2258.896917][T22924] kernel_init+0x1d/0x1d0 [ 2258.901901][T22924] ret_from_fork+0x51e/0xb90 [ 2258.907136][T22924] ret_from_fork_asm+0x1a/0x30 [ 2258.912459][T22924] [ 2258.912459][T22924] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 2258.919876][T22924] __lock_acquire+0x15a5/0x2cf0 [ 2258.925285][T22924] lock_acquire+0xf0/0x2e0 [ 2258.930250][T22924] fs_reclaim_acquire+0x71/0x100 [ 2258.935745][T22924] prepare_alloc_pages+0x152/0x650 [ 2258.941407][T22924] __alloc_frozen_pages_noprof+0x12f/0x380 [ 2258.947806][T22924] alloc_pages_mpol+0x232/0x4a0 [ 2258.953565][T22924] alloc_pages_noprof+0xa8/0x1a0 [ 2258.959167][T22924] __pud_alloc+0x3a/0x460 [ 2258.964794][T22924] handle_mm_fault+0x2040/0x3310 [ 2258.970293][T22924] do_user_addr_fault+0x75b/0x1340 [ 2258.976191][T22924] exc_page_fault+0x6a/0xc0 [ 2258.981340][T22924] asm_exc_page_fault+0x26/0x30 [ 2258.986835][T22924] rep_movs_alternative+0x33/0x90 [ 2258.992504][T22924] _copy_to_user+0x8a/0xb0 [ 2258.997482][T22924] x25_ioctl+0x243/0xfd0 [ 2259.002358][T22924] sock_do_ioctl+0x101/0x320 [ 2259.007502][T22924] sock_ioctl+0x5c6/0x7f0 [ 2259.012425][T22924] __se_sys_ioctl+0xfc/0x170 [ 2259.017579][T22924] do_syscall_64+0x14d/0xf80 [ 2259.022977][T22924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2259.029424][T22924] [ 2259.029424][T22924] other info that might help us debug this: [ 2259.029424][T22924] [ 2259.039689][T22924] Chain exists of: [ 2259.039689][T22924] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 2259.039689][T22924] [ 2259.052428][T22924] Possible unsafe locking scenario: [ 2259.052428][T22924] [ 2259.060004][T22924] CPU0 CPU1 [ 2259.065482][T22924] ---- ---- [ 2259.070873][T22924] rlock(&mm->mmap_lock); [ 2259.075503][T22924] lock(sk_lock-AF_INET6); [ 2259.083463][T22924] lock(&mm->mmap_lock); [ 2259.090713][T22924] lock(fs_reclaim); [ 2259.094816][T22924] [ 2259.094816][T22924] *** DEADLOCK *** [ 2259.094816][T22924] [ 2259.103094][T22924] 2 locks held by syz.1.14540/22924: [ 2259.108485][T22924] #0: ffff8880867a8260 (sk_lock-AF_X25){+.+.}-{0:0}, at: x25_ioctl+0x22d/0xfd0 [ 2259.117598][T22924] #1: ffff88809cbe2800 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 2259.128165][T22924] [ 2259.128165][T22924] stack backtrace: [ 2259.134084][T22924] CPU: 0 UID: 0 PID: 22924 Comm: syz.1.14540 Not tainted syzkaller #0 PREEMPT(full) [ 2259.134109][T22924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2259.134122][T22924] Call Trace: [ 2259.134132][T22924] [ 2259.134142][T22924] dump_stack_lvl+0xe8/0x150 [ 2259.134173][T22924] print_circular_bug+0x2e1/0x300 [ 2259.134206][T22924] check_noncircular+0x12e/0x150 [ 2259.134239][T22924] __lock_acquire+0x15a5/0x2cf0 [ 2259.134272][T22924] ? ima_match_policy+0x112/0x21e0 [ 2259.134303][T22924] lock_acquire+0xf0/0x2e0 [ 2259.134326][T22924] ? prepare_alloc_pages+0x152/0x650 [ 2259.134356][T22924] fs_reclaim_acquire+0x71/0x100 [ 2259.134378][T22924] ? prepare_alloc_pages+0x152/0x650 [ 2259.134401][T22924] prepare_alloc_pages+0x152/0x650 [ 2259.134428][T22924] __alloc_frozen_pages_noprof+0x12f/0x380 [ 2259.134456][T22924] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2259.134482][T22924] ? __pfx_policy_nodemask+0x10/0x10 [ 2259.134508][T22924] ? __lock_acquire+0x6b5/0x2cf0 [ 2259.134535][T22924] alloc_pages_mpol+0x232/0x4a0 [ 2259.134562][T22924] alloc_pages_noprof+0xa8/0x1a0 [ 2259.134588][T22924] __pud_alloc+0x3a/0x460 [ 2259.134608][T22924] handle_mm_fault+0x2040/0x3310 [ 2259.134629][T22924] ? mt_find+0x186/0x630 [ 2259.134651][T22924] ? __pfx_mt_find+0x10/0x10 [ 2259.134673][T22924] ? handle_mm_fault+0xee/0x3310 [ 2259.134694][T22924] ? __pfx_handle_mm_fault+0x10/0x10 [ 2259.134721][T22924] ? lock_mm_and_find_vma+0xa7/0x340 [ 2259.134744][T22924] do_user_addr_fault+0x75b/0x1340 [ 2259.134778][T22924] exc_page_fault+0x6a/0xc0 [ 2259.134799][T22924] asm_exc_page_fault+0x26/0x30 [ 2259.134818][T22924] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 2259.134853][T22924] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 2259.134870][T22924] RSP: 0018:ffffc9001bb5fa48 EFLAGS: 00050212 [ 2259.134889][T22924] RAX: 0000000000000000 RBX: 0000000000000032 RCX: 0000000000000032 [ 2259.134902][T22924] RDX: 0000000000000000 RSI: ffff8880867a87b4 RDI: 00002000000000c0 [ 2259.134916][T22924] RBP: ffffc9001bb5fcb0 R08: ffff8880867a87e5 R09: 1ffff11010cf50fc [ 2259.134930][T22924] R10: dffffc0000000000 R11: ffffed1010cf50fd R12: 00002000000000f2 [ 2259.134945][T22924] R13: 00007ffffffff000 R14: ffff8880867a87b4 R15: 00002000000000c0 [ 2259.134968][T22924] _copy_to_user+0x8a/0xb0 [ 2259.134993][T22924] x25_ioctl+0x243/0xfd0 [ 2259.135016][T22924] ? __pfx_x25_ioctl+0x10/0x10 [ 2259.135041][T22924] ? kasan_quarantine_put+0xbb/0x1f0 [ 2259.135067][T22924] ? tomoyo_path_number_perm+0x219/0x630 [ 2259.135094][T22924] ? tomoyo_path_number_perm+0x219/0x630 [ 2259.135123][T22924] ? do_vfs_ioctl+0x1166/0x1530 [ 2259.135148][T22924] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2259.135174][T22924] sock_do_ioctl+0x101/0x320 [ 2259.135196][T22924] ? __pfx_sock_do_ioctl+0x10/0x10 [ 2259.135215][T22924] ? do_futex+0x333/0x420 [ 2259.135247][T22924] sock_ioctl+0x5c6/0x7f0 [ 2259.135267][T22924] ? __pfx_sock_ioctl+0x10/0x10 [ 2259.135286][T22924] ? __fget_files+0x2a/0x420 [ 2259.135302][T22924] ? __fget_files+0x3a0/0x420 [ 2259.135318][T22924] ? __fget_files+0x2a/0x420 [ 2259.135336][T22924] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2259.135363][T22924] ? __pfx_sock_ioctl+0x10/0x10 [ 2259.135381][T22924] __se_sys_ioctl+0xfc/0x170 [ 2259.135405][T22924] do_syscall_64+0x14d/0xf80 [ 2259.135426][T22924] ? trace_irq_disable+0x3b/0x150 [ 2259.135442][T22924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2259.135461][T22924] ? clear_bhb_loop+0x40/0x90 [ 2259.135483][T22924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2259.135502][T22924] RIP: 0033:0x7f294bf9c819 [ 2259.135519][T22924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2259.135536][T22924] RSP: 002b:00007f294cdff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2259.135555][T22924] RAX: ffffffffffffffda RBX: 00007f294c215fa0 RCX: 00007f294bf9c819 [ 2259.135570][T22924] RDX: 00002000000000c0 RSI: 00000000000089ea RDI: 0000000000000005 [ 2259.135582][T22924] RBP: 00007f294c032c91 R08: 0000000000000000 R09: 0000000000000000 [ 2259.135594][T22924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2259.135606][T22924] R13: 00007f294c216038 R14: 00007f294c215fa0 R15: 00007fff173ad5e8 [ 2259.135630][T22924] [ 2259.594905][T22919] FAULT_INJECTION: forcing a failure. [ 2259.594905][T22919] name failslab, interval 1, probability 0, space 0, times 0 [ 2259.653229][T22924] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14540'. [ 2259.660224][T22919] CPU: 0 UID: 0 PID: 22919 Comm: syz.3.14538 Not tainted syzkaller #0 PREEMPT(full) [ 2259.660310][T22919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2259.660345][T22919] Call Trace: [ 2259.660375][T22919] [ 2259.660398][T22919] dump_stack_lvl+0xe8/0x150 [ 2259.660493][T22919] should_fail_ex+0x412/0x560 [ 2259.660602][T22919] should_failslab+0xa8/0x100 [ 2259.660710][T22919] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 2259.660782][T22919] ? __kasan_kmalloc+0x93/0xb0 [ 2259.660857][T22919] ? __request_module+0x2ec/0x660 [ 2259.660978][T22919] ? __kmalloc_cache_noprof+0x31c/0x660 [ 2259.661052][T22919] kstrdup+0x42/0x100 [ 2259.661145][T22919] __request_module+0x2ec/0x660 [ 2259.661221][T22919] ? __pfx___request_module+0x10/0x10 [ 2259.661290][T22919] ? kasan_quarantine_put+0xbb/0x1f0 [ 2259.661361][T22919] ? __pfx___request_module+0x10/0x10 [ 2259.661446][T22919] ? apparmor_capable+0x126/0x170 [ 2259.661532][T22919] ? dev_load+0x21/0x1f0 [ 2259.661607][T22919] dev_ioctl+0x59f/0x1150 [ 2259.661684][T22919] sock_do_ioctl+0x23e/0x320 [ 2259.661758][T22919] ? __pfx_sock_do_ioctl+0x10/0x10 [ 2259.661830][T22919] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 2259.661926][T22919] sock_ioctl+0x5c6/0x7f0 [ 2259.661998][T22919] ? __pfx_sock_ioctl+0x10/0x10 [ 2259.662067][T22919] ? __fget_files+0x2a/0x420 [ 2259.662119][T22919] ? __fget_files+0x3a0/0x420 [ 2259.662164][T22919] ? __fget_files+0x2a/0x420 [ 2259.662252][T22919] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2259.662314][T22919] ? __pfx_sock_ioctl+0x10/0x10 [ 2259.662377][T22919] __se_sys_ioctl+0xfc/0x170 [ 2259.662453][T22919] do_syscall_64+0x14d/0xf80 [ 2259.662523][T22919] ? trace_irq_disable+0x3b/0x150 [ 2259.662576][T22919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2259.662632][T22919] ? clear_bhb_loop+0x40/0x90 [ 2259.662708][T22919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2259.662752][T22919] RIP: 0033:0x7f6751f9c819 [ 2259.662771][T22919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2259.662797][T22919] RSP: 002b:00007f6752dee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2259.662823][T22919] RAX: ffffffffffffffda RBX: 00007f6752215fa0 RCX: 00007f6751f9c819 [ 2259.662839][T22919] RDX: 0000200000000540 RSI: 0000000000008923 RDI: 0000000000000004 [ 2259.662853][T22919] RBP: 00007f6752dee090 R08: 0000000000000000 R09: 0000000000000000 [ 2259.662866][T22919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2259.662892][T22919] R13: 00007f6752216038 R14: 00007f6752215fa0 R15: 00007fff9ac7eb48 [ 2259.662996][T22919] [ 2259.721704][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2259.721984][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2260.759505][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2260.766879][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2261.799817][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2261.807046][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2262.839577][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2262.846991][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2263.879747][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2263.887068][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2264.919494][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2264.927042][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2265.959887][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2265.968439][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2266.999481][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2267.007652][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2268.039809][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 2268.047108][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available