last executing test programs: 4.152830965s ago: executing program 1 (id=2355): close(0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x2000, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4}, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/8, 0x8}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x10020) r5 = socket$netlink(0x10, 0x3, 0xb) sendmmsg(r5, &(0x7f0000000800), 0x2, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = socket(0x2b, 0x80801, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) bind$alg(0xffffffffffffffff, 0x0, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r7], 0xfffffdef}, 0x1, 0x0, 0x0, 0x24000808}, 0x8810) recvfrom(r6, &(0x7f0000000080)=""/74, 0x4a, 0x4112, 0x0, 0x0) 3.164537494s ago: executing program 1 (id=2368): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000077c0)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xb, 0x10}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x43, 0x0, 0x0) 3.142281582s ago: executing program 3 (id=2369): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@ipv4_newnexthop={0x64, 0x68, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x0, 0x4, 0x0, 0x9}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0x7}}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_GATEWAY={0x14, 0x6, @ip4=@broadcast}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_GATEWAY={0x14, 0x6, @ip4=@broadcast}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x3}]}, 0x64}}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x8}, [@exit]}, &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, &(0x7f0000000140), 0x40f00, 0x7, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x3, 0x94, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x3, 0x3, 0x0, 0x1}, {0x0, 0x4, 0x5, 0x1}, {0x4, 0x2, 0x4, 0x1}], 0x10, 0xfffffff7}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) socket$inet6(0xa, 0x3, 0x5) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r2, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 3.107027196s ago: executing program 1 (id=2370): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)="170000000200020000ffbe8c5ee17688a2003c00010100000077fc5ad90200fb6a880000d6c9db0000db15d088bd8b7000000000d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009ceeff5acba400001fb700674f00c8e365d00b5033bf79ac2dfc061f15003901dee2", 0x77) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 64) r2 = epoll_create(0x7) (rerun: 64) epoll_pwait(r2, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0xc, &(0x7f0000000140)={[0x10001]}, 0x8) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) (async, rerun: 64) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) (async, rerun: 64) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x80, 0x0) sendto$packet(r4, &(0x7f0000001600)="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", 0x1000, 0x10, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r6) (async, rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001580)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_FLOWINFO={0x8, 0xc, 0x3}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x4}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0xc9}]}}}]}, 0x4c}}, 0x884) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r7, @ANYBLOB="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"], 0x1c8}, 0x1, 0x0, 0x0, 0x8c1}, 0x24004844) 3.08085943s ago: executing program 2 (id=2371): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="5800000002060101000060c7cfe900000a00000005000400020000000900025873797a32000000001400078008001340ffffffff080012400000e54a050005000200000005000100060000000c000300686173683a6970"], 0x58}}, 0x80) 2.89193825s ago: executing program 2 (id=2372): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e25, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f0000007a00)=[{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000000a40)="f2", 0x1}], 0x1, &(0x7f0000003bc0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x4, 0x3, 0x9, r3}}], 0x20, 0x4801}], 0x1, 0x0) (fail_nth: 2) 2.772214278s ago: executing program 3 (id=2374): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x2c, r6, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r6, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x101}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) 2.443046749s ago: executing program 2 (id=2376): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x60}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x204}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x4850) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r3) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0xa6ff, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x40}, 0x13, 0x0, 0x0, 0x880}, 0x20040840) getsockopt$inet6_mreq(r5, 0x29, 0x1c, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r4, 0x1, 0x70b529, 0x25dfdbfe, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005}, 0x0) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) r7 = socket(0x1e, 0x4, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000010000000000000002000000850000001300000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f4e60000850000007b00000095000000000000008606184a"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffffff8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000000)="0000010051227b17774892c91ad1", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x2d) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70300000a000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r11 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r11, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r11, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) close(0x3) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0x4, 0x9, 0x9, 0x1202, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d0000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.834675749s ago: executing program 4 (id=2379): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000ffff27bd7000fbdbdf2500600000", @ANYRES32=0x0, @ANYBLOB="37ec000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.456708749s ago: executing program 1 (id=2380): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaabaaaaaa00000000000000069078640100feac1414aa00034e"], 0x0) unshare(0x2c020400) r1 = socket$packet(0x11, 0x3, 0x300) socket$key(0xf, 0x3, 0x2) setsockopt$packet_int(r1, 0x107, 0xa, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000004600070128b570000000008f017c0000080004804e2d"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000300010000000500030000000000050005000100000005000200ff00230b050003001000000005000200b900000005000300400000000500050009"], 0x6c}, 0x1, 0x0, 0x0, 0x20009085}, 0x2604c0c4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x4) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5810002045630d26508e22aae57c040cf6d0abe5ea9d68cdbf868f44342574a26fcd5dc43f06", @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf251900000014000180080003000300000008000300010000000c00018008000300020000002400018008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300000000000800030001000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x40008) 1.420149833s ago: executing program 0 (id=2381): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaabaaaaaa00000000000000069078640100feac1414aa00034e"], 0x0) unshare(0x2c020400) r1 = socket$packet(0x11, 0x3, 0x300) socket$key(0xf, 0x3, 0x2) setsockopt$packet_int(r1, 0x107, 0xa, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000004600070128b570000000008f017c0000080004804e2d"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000300010000000500030000000000050005000100000005000200ff00230b050003001000000005000200b900000005000300400000000500050009"], 0x6c}, 0x1, 0x0, 0x0, 0x20009085}, 0x2604c0c4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x4) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5810002045630d26508e22aae57c040cf6d0abe5ea9d68cdbf868f44342574a26fcd5dc43f06", @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf251900000014000180080003000300000008000300010000000c00018008000300020000002400018008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300000000000800030001000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x40008) 1.394920471s ago: executing program 2 (id=2382): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x41}, 0x800, 0x0, 0x3, 0x9, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @empty}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r2], 0x108}}], 0x1, 0xc040) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000200)='9', 0x1, 0x20008080, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000000240)={0x0, 0xffffff3a, &(0x7f0000000100)={&(0x7f0000003180)=ANY=[], 0x588}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) recvfrom(r1, &(0x7f0000000000)=""/44, 0x2c, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f00000000c0)=0xb40, 0x4) 1.328481872s ago: executing program 4 (id=2383): socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) pipe(&(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000026000000080000000b"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) close(0x4) syz_init_net_socket$ax25(0x3, 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 1.32738505s ago: executing program 1 (id=2384): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000481c) sendmsg$sock(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)='oeN', 0xc778}], 0x1, &(0x7f0000000400)=[@timestamping={{0x18, 0x1, 0x25, 0x2}}], 0x18}, 0x4000081) 1.315880649s ago: executing program 0 (id=2385): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002540)="955232d6c924037daed352087a08237337131faef13945bfaaa58d01e5f858e96271cde18577054eb145e62abd8150646072c75137606c9eca87c894182ee54fa975990ac5f7b8f2ced1bc37588f08efcfba84054e1bf5de3ae4fe95d64222f92b12be73478c249144accca8d10df2f204b2905167cb97972c40265e6b4af404adc8f6cf85253346cfeb6eb585e3f0692ab9d35d7850e3d62a948b5c9b", 0x9d}, {&(0x7f00000001c0)="96607e121729ff5ba084661b14fc7202e7b54c2be7983a4e4e11a8906105f36f652d7135bda20b939abb9b959973ca1f755aa9e545c8fb8876d07fa49e24824ff9719993882242846b", 0x49}, {&(0x7f0000000500)="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", 0x108}, {&(0x7f00000007c0)="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", 0xffffff50}], 0x4}}], 0x1, 0x4044805) r4 = socket$alg(0x26, 0x5, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r7, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) bind$alg(r4, &(0x7f0000001600)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-arm64-neon\x00'}, 0xfffffffffffffd7b) setsockopt$ALG_SET_KEY(r4, 0x117, 0x7, &(0x7f00000000c0)="feffffff", 0x4) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x8000000000025a5, 0x0) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001700)={&(0x7f0000001780)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0002ff7f0000fcdbdf250000000014000c002001000000000000000000000000000008000700", @ANYRES32=r0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r1, @ANYBLOB="0200010000000800fcb4c8affedc66fee60cc881c00c8d20b9ddb2fa84e039c8a73a0345c6deb5fa7fbd881fd7a52abd2d4a0f4615f20ae7cf40de4fcf05c6c5465ab857172408e506b8d7ac1850381f02450b0374fe91924fff3950fe8b3504595b8f16c4238faf3b6b20d9b0f155504b131c6dd32f63d47faad6ffddac9ad1aba634f0bfe8fb3d6be0d28cc91fc372f0234118dbbf71ee01bf8b2548df37371e1ee57accc6c8de00"/181, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800040064010101"], 0x60}, 0x1, 0x0, 0x0, 0x80c0}, 0x20040000) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000640)) shutdown(r8, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x9}, &(0x7f0000000200)=0x8) r10 = socket$nl_crypto(0x10, 0x3, 0x15) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000240)='\x00', 0x0, 0x10}, 0x18) sendmsg$netlink(r10, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1010000007c0004060000000000bf852c8986626691b01b5f44e4ce28712829"], 0xe0}], 0x1}, 0x40040) shutdown(r2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmsg$nl_route_sched_retired(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000025c0)=@newtfilter={0x24, 0x2c, 0x10, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xfff2, 0x10}, {0xa, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004010}, 0x4010) 1.230534481s ago: executing program 4 (id=2386): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x34, 0x3e, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="725eb862"]}, @typed={0x8, 0x7, 0x0, 0x0, @pid}]}, 0x34}, 0x1, 0x0, 0x1000000000000, 0xc020}, 0x4040) 1.180457263s ago: executing program 2 (id=2387): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000005c0), 0x10, 0x4}, 0x94) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$XFS_IOC_FSGETXATTRA(r0, 0x801c582d, &(0x7f00000001c0)) connect$inet6(r1, &(0x7f0000000080)={0xa, 0xfffe, 0x3000002, @mcast2, 0x6}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xc0000000, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x218, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 1.164501183s ago: executing program 3 (id=2388): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x10}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24020000}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x6, 0x6, @remote}, 0x14) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)='\a', 0x1}], 0x1) 1.153941937s ago: executing program 4 (id=2389): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x4, 0x8, 0x7, @vifc_lcl_addr=@multicast1, @rand_addr=0x64010102}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x6, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) close(r4) write(r2, 0x0, 0x0) mmap(&(0x7f0000b8e000/0x4000)=nil, 0x4000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x1000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r5, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r7, 0x104, 0x3, 0x0, &(0x7f0000000140)) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x4, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 1.036350113s ago: executing program 3 (id=2390): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x400c000) 1.028300423s ago: executing program 3 (id=2391): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a32"], 0x94}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0x34, 0x62, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x172, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg$unix(r2, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/32, 0x20}], 0x1}, 0x7}], 0x1, 0x40010120, 0x0) close(r3) r4 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20023) r5 = socket$kcm(0x2a, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000a40)=0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500e2ff00000000bb7ccc2db638ecdcb975607aaad7c13b0bb7fbbb6c999f0c1bb32e5d8dcac681616269f821aa5dc0d11472093bb4b01d06e10b6518a98774a0d09061f06e4d74207f837997c36ab39ecd0c36b7a61721a36eae01eb224c045a38e701a4d196a4c9e14977c4d8d6396d84198d0a7fc83e02c9cc8882112e8ed59e1c0e1f3a00b0c8478dadbd2cc98fbc7153efbacc41497c78726b161ce3c2610bb71a2b0774abd84b26932d1bfac295d893f94ae878f90d909dccd4fe770435a013d09f88"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x700}, 0x2, 0x0, 0x0, 0x5d}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069002600000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x96, &(0x7f000000cf3d)=""/150, 0x0, 0x25, '\x00', 0x0, @sk_reuseport=0x28}, 0x94) 950.251538ms ago: executing program 4 (id=2392): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x60}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x204}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x4850) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r3) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0xa6ff, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001200050104000000ffdbdf2528001a00ac1414aa0000000000000000000600000a0101000000000000000000000000000200061005001900ff000000f0cc89ed2cb52b716aed93d28a4908952b5e28d839b43a2f616e26264f0a745bb8419e81a08268918d32b7aa7f05b4d068c26dc435f82a3f36cd8c4c03fae50b0bfc68cb2759744dc88831c0991d15297584487c9ff77671336b8d338289b23b370a550675ad73a650525b4d79842a868fa101317c918e17917ff5b063af79f105b711dbf1e197295c0b30854778642c04bf71db5665ff6a3644abe990bd53e0842ec8f1b1da943c0d50cd15656810d751dafcb44f93a1e18c6e3fd191065eb593af"], 0x40}, 0x13, 0x0, 0x0, 0x880}, 0x20040840) getsockopt$inet6_mreq(r5, 0x29, 0x1c, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r4, 0x1, 0x70b529, 0x25dfdbfe, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005}, 0x0) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) r7 = socket(0x1e, 0x4, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000010000000000000002000000850000001300000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f4e60000850000007b00000095000000000000008606184a"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffffff8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000000)="0000010051227b17774892c91ad1", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x2d) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70300000a000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r11 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r11, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r11, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) close(0x3) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0x4, 0x9, 0x9, 0x1202, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d0000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 938.982892ms ago: executing program 0 (id=2393): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x48000) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) (async) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) (async) clock_gettime(0x0, 0x0) (async, rerun: 64) r3 = socket$inet6(0xa, 0x1, 0x8010800000000084) (async, rerun: 64) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr(camellia))\x00'}, 0x58) (async) close(0x3) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000002e40)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000007d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008080000b704000000000000850000003300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec00c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) sendmmsg$inet6(r3, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x201, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) (async) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x40800) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001400b59500000000000002000a782200", @ANYRES32, @ANYBLOB="1400020000000000000000000000ffff000000bfa1c36161eb84fd1bd792b417b20400"], 0x2c}}, 0x0) 784.527779ms ago: executing program 0 (id=2394): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe880000000000000000000000000001ff1dafb7179abcb984136bbf8e66e4b57f12535385ef01000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000000010000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff000000000000000000000000000000000000000002"], 0xf8}}, 0x0) 778.13179ms ago: executing program 0 (id=2395): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaabaaaaaa00000000000000069078640100feac1414aa00034e"], 0x0) unshare(0x2c020400) r1 = socket$packet(0x11, 0x3, 0x300) socket$key(0xf, 0x3, 0x2) setsockopt$packet_int(r1, 0x107, 0xa, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000004600070128b570000000008f017c0000080004804e2d"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000300010000000500030000000000050005000100000005000200ff00230b050003001000000005000200b900000005000300400000000500050009"], 0x6c}, 0x1, 0x0, 0x0, 0x20009085}, 0x2604c0c4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x4) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5810002045630d26508e22aae57c040cf6d0abe5ea9d68cdbf868f44342574a26fcd5dc43f06", @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf251900000014000180080003000300000008000300010000000c00018008000300020000002400018008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300000000000800030001000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x40008) 417.204719ms ago: executing program 1 (id=2396): socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) pipe(&(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000026000000080000000b"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) close(0x4) syz_init_net_socket$ax25(0x3, 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 293.000252ms ago: executing program 2 (id=2397): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) socket$inet6(0xa, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x14, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r9, 0x2000012, 0xe, 0xf0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) close(r7) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xa0000, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0x10, 0xb}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240000a0}, 0x4028040) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 33.384269ms ago: executing program 0 (id=2398): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_gfeatures={0x19}}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x492e3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x4000800) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000140)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000808) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$unix(0x1, 0x2, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x44, r8, 0x1, 0x70bd28, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7ff, 0x56}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r4, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xb, 0x74}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x40}}, 0x4) 26.838529ms ago: executing program 3 (id=2399): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r2, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e000300000003000000050007"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x2) 0s ago: executing program 4 (id=2400): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) sendmsg$nl_route(r1, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 198.112035][T10617] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 198.112073][T10617] ? bpf_lsm_capable+0x9/0x20 [ 198.112098][T10617] ? security_capable+0x7e/0x2c0 [ 198.112129][T10617] genl_rcv_msg+0x61c/0x7a0 [ 198.112161][T10617] ? __pfx_genl_rcv_msg+0x10/0x10 [ 198.112184][T10617] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 198.112208][T10617] ? __lock_acquire+0x6b5/0x2cf0 [ 198.112243][T10617] netlink_rcv_skb+0x232/0x4b0 [ 198.112263][T10617] ? __pfx_genl_rcv_msg+0x10/0x10 [ 198.112289][T10617] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 198.112323][T10617] ? down_read+0x272/0x2e0 [ 198.112345][T10617] ? genl_rcv+0xd/0x40 [ 198.112369][T10617] genl_rcv+0x28/0x40 [ 198.112391][T10617] netlink_unicast+0x80f/0x9b0 [ 198.112428][T10617] ? __pfx_netlink_unicast+0x10/0x10 [ 198.112461][T10617] ? netlink_sendmsg+0x650/0xb40 [ 198.112478][T10617] ? skb_put+0x11b/0x210 [ 198.112501][T10617] netlink_sendmsg+0x813/0xb40 [ 198.112531][T10617] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.112555][T10617] ? aa_sock_msg_perm+0xf1/0x1b0 [ 198.112583][T10617] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 198.112609][T10617] ____sys_sendmsg+0x972/0x9f0 [ 198.112642][T10617] ? __pfx_____sys_sendmsg+0x10/0x10 [ 198.112675][T10617] ? import_iovec+0x73/0xa0 [ 198.112700][T10617] ___sys_sendmsg+0x2a5/0x360 [ 198.112729][T10617] ? __pfx____sys_sendmsg+0x10/0x10 [ 198.112789][T10617] ? __fget_files+0x2a/0x420 [ 198.112813][T10617] ? __fget_files+0x3a0/0x420 [ 198.112849][T10617] __x64_sys_sendmsg+0x1bd/0x2a0 [ 198.112875][T10617] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 198.112907][T10617] ? __pfx_ksys_write+0x10/0x10 [ 198.112940][T10617] do_syscall_64+0x14d/0xf80 [ 198.112960][T10617] ? trace_irq_disable+0x3b/0x150 [ 198.112993][T10617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.113013][T10617] ? clear_bhb_loop+0x40/0x90 [ 198.113036][T10617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.113054][T10617] RIP: 0033:0x7f2874b9c799 [ 198.113073][T10617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.113089][T10617] RSP: 002b:00007f2875a13028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.113109][T10617] RAX: ffffffffffffffda RBX: 00007f2874e15fa0 RCX: 00007f2874b9c799 [ 198.113123][T10617] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 198.113134][T10617] RBP: 00007f2875a13090 R08: 0000000000000000 R09: 0000000000000000 [ 198.113145][T10617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 198.113156][T10617] R13: 00007f2874e16038 R14: 00007f2874e15fa0 R15: 00007ffe43fe5288 [ 198.113186][T10617] [ 198.871016][T10642] __nla_validate_parse: 2 callbacks suppressed [ 198.871034][T10642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1496'. [ 198.908405][T10642] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 199.007384][T10642] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.027984][T10642] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.165244][T10642] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.176311][T10642] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.233755][T10652] syzkaller1: entered promiscuous mode [ 199.240979][T10652] syzkaller1: entered allmulticast mode [ 199.278697][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 199.335010][T10642] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.345543][T10642] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.390172][T10655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1499'. [ 199.605706][T10663] FAULT_INJECTION: forcing a failure. [ 199.605706][T10663] name failslab, interval 1, probability 0, space 0, times 0 [ 199.618739][T10663] CPU: 1 UID: 0 PID: 10663 Comm: syz.0.1500 Not tainted syzkaller #0 PREEMPT(full) [ 199.618765][T10663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 199.618776][T10663] Call Trace: [ 199.618784][T10663] [ 199.618791][T10663] dump_stack_lvl+0xe8/0x150 [ 199.618823][T10663] should_fail_ex+0x412/0x560 [ 199.618856][T10663] should_failslab+0xa8/0x100 [ 199.618880][T10663] ? radix_tree_node_alloc+0x7e/0x3a0 [ 199.618926][T10663] kmem_cache_alloc_noprof+0x87/0x650 [ 199.618945][T10663] ? kasan_save_free_info+0x46/0x50 [ 199.618971][T10663] ? __kasan_slab_free+0x5c/0x80 [ 199.618991][T10663] ? btf_new_fd+0x7e5/0xd10 [ 199.619011][T10663] ? __x64_sys_bpf+0x7c/0x90 [ 199.619041][T10663] radix_tree_node_alloc+0x7e/0x3a0 [ 199.619067][T10663] idr_get_free+0x2b3/0xa70 [ 199.619099][T10663] idr_alloc_u32+0x18d/0x320 [ 199.619128][T10663] ? __pfx_idr_alloc_u32+0x10/0x10 [ 199.619150][T10663] ? do_raw_spin_lock+0x12b/0x2f0 [ 199.619176][T10663] idr_alloc_cyclic+0x9b/0x1b0 [ 199.619201][T10663] btf_new_fd+0x864/0xd10 [ 199.619231][T10663] ? __pfx_btf_new_fd+0x10/0x10 [ 199.619251][T10663] ? bpf_token_put+0x143/0x160 [ 199.619274][T10663] ? bpf_btf_load+0x126/0x190 [ 199.619295][T10663] __sys_bpf+0x4e5/0x950 [ 199.619326][T10663] ? __pfx___sys_bpf+0x10/0x10 [ 199.619375][T10663] ? ksys_write+0x242/0x270 [ 199.619398][T10663] ? __pfx_ksys_write+0x10/0x10 [ 199.619426][T10663] __x64_sys_bpf+0x7c/0x90 [ 199.619453][T10663] do_syscall_64+0x14d/0xf80 [ 199.619474][T10663] ? trace_irq_disable+0x3b/0x150 [ 199.619499][T10663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.619519][T10663] ? clear_bhb_loop+0x40/0x90 [ 199.619542][T10663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.619561][T10663] RIP: 0033:0x7f221579c799 [ 199.619580][T10663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.619596][T10663] RSP: 002b:00007f2216618028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 199.619616][T10663] RAX: ffffffffffffffda RBX: 00007f2215a15fa0 RCX: 00007f221579c799 [ 199.619630][T10663] RDX: 0000000000000028 RSI: 0000200000000300 RDI: 0000000000000012 [ 199.619642][T10663] RBP: 00007f2216618090 R08: 0000000000000000 R09: 0000000000000000 [ 199.619653][T10663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 199.619664][T10663] R13: 00007f2215a16038 R14: 00007f2215a15fa0 R15: 00007ffc1bd5ed18 [ 199.619696][T10663] [ 200.171195][ T1306] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.180253][ T1306] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.198579][ T1306] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.232885][ T1306] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.276548][ T1306] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.318700][ T1306] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.343126][T10684] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1509'. [ 200.360094][T10684] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1509'. [ 200.360314][T10686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1511'. [ 200.411629][T10686] hsr0: entered promiscuous mode [ 200.414845][T10684] netlink: 'syz.4.1509': attribute type 1 has an invalid length. [ 200.417025][T10686] macvlan2: entered allmulticast mode [ 200.445935][T10684] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1509'. [ 200.446222][T10686] hsr0: entered allmulticast mode [ 200.460186][T10684] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1509'. [ 200.468599][T10686] hsr_slave_0: entered allmulticast mode [ 200.471830][T10684] netlink: 658 bytes leftover after parsing attributes in process `syz.4.1509'. [ 200.506043][T10688] netlink: 'syz.3.1512': attribute type 12 has an invalid length. [ 200.516263][ T63] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.525960][ T63] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.615275][T10684] x_tables: duplicate underflow at hook 1 [ 200.695409][T10695] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 200.848441][T10708] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1517'. [ 200.862330][T10708] xt_hashlimit: size too large, truncated to 1048576 [ 200.877748][T10708] xt_hashlimit: overflow, try lower: 0/0 [ 200.895351][T10705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.322061][T10732] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1525'. [ 201.904773][T10763] FAULT_INJECTION: forcing a failure. [ 201.904773][T10763] name failslab, interval 1, probability 0, space 0, times 0 [ 201.949435][T10763] CPU: 0 UID: 0 PID: 10763 Comm: syz.1.1541 Not tainted syzkaller #0 PREEMPT(full) [ 201.949461][T10763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 201.949473][T10763] Call Trace: [ 201.949481][T10763] [ 201.949489][T10763] dump_stack_lvl+0xe8/0x150 [ 201.949556][T10763] should_fail_ex+0x412/0x560 [ 201.949586][T10763] should_failslab+0xa8/0x100 [ 201.949608][T10763] ? skb_clone+0x212/0x3a0 [ 201.949637][T10763] kmem_cache_alloc_noprof+0x87/0x650 [ 201.949657][T10763] ? __netlink_lookup+0xc6/0x8b0 [ 201.949684][T10763] skb_clone+0x212/0x3a0 [ 201.949710][T10763] __netlink_deliver_tap+0x404/0x850 [ 201.949734][T10763] ? netlink_deliver_tap+0x2e/0x1b0 [ 201.949756][T10763] netlink_deliver_tap+0x19c/0x1b0 [ 201.949776][T10763] netlink_unicast+0x7e3/0x9b0 [ 201.949809][T10763] ? __pfx_netlink_unicast+0x10/0x10 [ 201.949836][T10763] ? netlink_sendmsg+0x650/0xb40 [ 201.949853][T10763] ? skb_put+0x11b/0x210 [ 201.949877][T10763] netlink_sendmsg+0x813/0xb40 [ 201.949905][T10763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.949928][T10763] ? aa_sock_msg_perm+0xf1/0x1b0 [ 201.949956][T10763] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 201.949981][T10763] ____sys_sendmsg+0x972/0x9f0 [ 201.950011][T10763] ? __pfx_____sys_sendmsg+0x10/0x10 [ 201.950039][T10763] ? import_iovec+0x73/0xa0 [ 201.950063][T10763] ___sys_sendmsg+0x2a5/0x360 [ 201.950088][T10763] ? __pfx____sys_sendmsg+0x10/0x10 [ 201.950145][T10763] ? __fget_files+0x2a/0x420 [ 201.950170][T10763] ? __fget_files+0x3a0/0x420 [ 201.950200][T10763] __x64_sys_sendmsg+0x1bd/0x2a0 [ 201.950224][T10763] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 201.950253][T10763] ? __pfx_ksys_write+0x10/0x10 [ 201.950289][T10763] do_syscall_64+0x14d/0xf80 [ 201.950311][T10763] ? trace_irq_disable+0x3b/0x150 [ 201.950335][T10763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.950354][T10763] ? clear_bhb_loop+0x40/0x90 [ 201.950377][T10763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.950395][T10763] RIP: 0033:0x7f6663f9c799 [ 201.950415][T10763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.950431][T10763] RSP: 002b:00007f6664e4d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.950452][T10763] RAX: ffffffffffffffda RBX: 00007f6664215fa0 RCX: 00007f6663f9c799 [ 201.950465][T10763] RDX: 000000002000c810 RSI: 0000200000000040 RDI: 0000000000000006 [ 201.950478][T10763] RBP: 00007f6664e4d090 R08: 0000000000000000 R09: 0000000000000000 [ 201.950489][T10763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.950500][T10763] R13: 00007f6664216038 R14: 00007f6664215fa0 R15: 00007ffc7ef6f478 [ 201.950531][T10763] [ 201.951758][T10763] netem: change failed [ 202.278864][T10777] tipc: Enabling of bearer rejected, already enabled [ 202.308573][T10780] netlink: 'syz.2.1545': attribute type 12 has an invalid length. [ 202.319832][T10771] tipc: Enabled bearer , priority 0 [ 202.365641][T10771] syzkaller0: MTU too low for tipc bearer [ 202.371618][T10771] tipc: Disabling bearer [ 202.889035][T10816] xt_hashlimit: size too large, truncated to 1048576 [ 203.182021][T10829] FAULT_INJECTION: forcing a failure. [ 203.182021][T10829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.258310][T10829] CPU: 0 UID: 0 PID: 10829 Comm: syz.1.1561 Not tainted syzkaller #0 PREEMPT(full) [ 203.258337][T10829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 203.258348][T10829] Call Trace: [ 203.258356][T10829] [ 203.258364][T10829] dump_stack_lvl+0xe8/0x150 [ 203.258396][T10829] should_fail_ex+0x412/0x560 [ 203.258427][T10829] _copy_from_user+0x2d/0xb0 [ 203.258449][T10829] ___sys_sendmsg+0x1c6/0x360 [ 203.258478][T10829] ? __pfx____sys_sendmsg+0x10/0x10 [ 203.258536][T10829] ? __fget_files+0x2a/0x420 [ 203.258562][T10829] ? __fget_files+0x3a0/0x420 [ 203.258619][T10829] __x64_sys_sendmsg+0x1bd/0x2a0 [ 203.258646][T10829] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 203.258678][T10829] ? __pfx_ksys_write+0x10/0x10 [ 203.258710][T10829] do_syscall_64+0x14d/0xf80 [ 203.258731][T10829] ? trace_irq_disable+0x3b/0x150 [ 203.258757][T10829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.258776][T10829] ? clear_bhb_loop+0x40/0x90 [ 203.258799][T10829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.258817][T10829] RIP: 0033:0x7f6663f9c799 [ 203.258838][T10829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.258854][T10829] RSP: 002b:00007f6664e4d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.258874][T10829] RAX: ffffffffffffffda RBX: 00007f6664215fa0 RCX: 00007f6663f9c799 [ 203.258888][T10829] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000012 [ 203.258899][T10829] RBP: 00007f6664e4d090 R08: 0000000000000000 R09: 0000000000000000 [ 203.258911][T10829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.258922][T10829] R13: 00007f6664216038 R14: 00007f6664215fa0 R15: 00007ffc7ef6f478 [ 203.258952][T10829] [ 203.580386][T10845] FAULT_INJECTION: forcing a failure. [ 203.580386][T10845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.600300][T10845] CPU: 1 UID: 0 PID: 10845 Comm: syz.1.1568 Not tainted syzkaller #0 PREEMPT(full) [ 203.600324][T10845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 203.600334][T10845] Call Trace: [ 203.600341][T10845] [ 203.600349][T10845] dump_stack_lvl+0xe8/0x150 [ 203.600378][T10845] should_fail_ex+0x412/0x560 [ 203.600407][T10845] _copy_from_user+0x2d/0xb0 [ 203.600428][T10845] ethtool_set_features+0x10b/0x300 [ 203.600458][T10845] ? __pfx_ethtool_set_features+0x10/0x10 [ 203.600485][T10845] ? lockdep_hardirqs_on+0x7a/0x110 [ 203.600505][T10845] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 203.600528][T10845] dev_ethtool+0xfa5/0x1ae0 [ 203.600561][T10845] ? __pfx_dev_ethtool+0x10/0x10 [ 203.600597][T10845] ? dev_load+0x21/0x1f0 [ 203.600617][T10845] dev_ioctl+0x392/0x1150 [ 203.600639][T10845] sock_do_ioctl+0x23e/0x320 [ 203.600668][T10845] ? __pfx_sock_do_ioctl+0x10/0x10 [ 203.600692][T10845] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 203.600730][T10845] sock_ioctl+0x5c6/0x7f0 [ 203.600756][T10845] ? __pfx_sock_ioctl+0x10/0x10 [ 203.600781][T10845] ? __fget_files+0x2a/0x420 [ 203.600805][T10845] ? __fget_files+0x3a0/0x420 [ 203.600828][T10845] ? __fget_files+0x2a/0x420 [ 203.600857][T10845] ? bpf_lsm_file_ioctl+0x9/0x20 [ 203.600880][T10845] ? __pfx_sock_ioctl+0x10/0x10 [ 203.600904][T10845] __se_sys_ioctl+0xfc/0x170 [ 203.600928][T10845] do_syscall_64+0x14d/0xf80 [ 203.600950][T10845] ? trace_irq_disable+0x3b/0x150 [ 203.600975][T10845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.600995][T10845] ? clear_bhb_loop+0x40/0x90 [ 203.601017][T10845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.601044][T10845] RIP: 0033:0x7f6663f9c799 [ 203.601061][T10845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.601076][T10845] RSP: 002b:00007f6664e4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.601096][T10845] RAX: ffffffffffffffda RBX: 00007f6664215fa0 RCX: 00007f6663f9c799 [ 203.601109][T10845] RDX: 0000200000000540 RSI: 0000000000008946 RDI: 0000000000000006 [ 203.601120][T10845] RBP: 00007f6664e4d090 R08: 0000000000000000 R09: 0000000000000000 [ 203.601132][T10845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.601143][T10845] R13: 00007f6664216038 R14: 00007f6664215fa0 R15: 00007ffc7ef6f478 [ 203.601173][T10845] [ 203.954075][T10858] __nla_validate_parse: 12 callbacks suppressed [ 203.954094][T10858] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1573'. [ 203.993260][T10860] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1575'. [ 204.002862][T10860] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1575'. [ 204.432986][T10882] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1581'. [ 204.522860][T10890] netlink: 'syz.2.1586': attribute type 12 has an invalid length. [ 204.610431][T10898] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1589'. [ 204.727196][T10901] FAULT_INJECTION: forcing a failure. [ 204.727196][T10901] name failslab, interval 1, probability 0, space 0, times 0 [ 204.740253][T10901] CPU: 0 UID: 0 PID: 10901 Comm: syz.1.1590 Not tainted syzkaller #0 PREEMPT(full) [ 204.740279][T10901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 204.740298][T10901] Call Trace: [ 204.740306][T10901] [ 204.740315][T10901] dump_stack_lvl+0xe8/0x150 [ 204.740347][T10901] should_fail_ex+0x412/0x560 [ 204.740377][T10901] should_failslab+0xa8/0x100 [ 204.740403][T10901] __kmalloc_node_noprof+0xf0/0x7c0 [ 204.740426][T10901] ? alloc_slab_obj_exts+0xbf/0x240 [ 204.740451][T10901] alloc_slab_obj_exts+0xbf/0x240 [ 204.740473][T10901] __memcg_slab_post_alloc_hook+0x53c/0xa80 [ 204.740507][T10901] ? dst_alloc+0x105/0x170 [ 204.740532][T10901] kmem_cache_alloc_noprof+0x347/0x650 [ 204.740551][T10901] ? dst_alloc+0x105/0x170 [ 204.740574][T10901] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 204.740595][T10901] ? __pfx_ip6_dst_gc+0x10/0x10 [ 204.740619][T10901] dst_alloc+0x105/0x170 [ 204.740648][T10901] ip6_pol_route+0xafb/0x13d0 [ 204.740674][T10901] ? ip6_pol_route+0x160/0x13d0 [ 204.740703][T10901] ? __pfx_ip6_pol_route+0x10/0x10 [ 204.740732][T10901] ? __lock_acquire+0x6b5/0x2cf0 [ 204.740760][T10901] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 204.740786][T10901] fib6_rule_lookup+0x222/0x730 [ 204.740812][T10901] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 204.740839][T10901] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 204.740863][T10901] ? __pfx_ip6_addr_string+0x10/0x10 [ 204.740892][T10901] ? dev_get_by_index_rcu+0xf4/0x110 [ 204.740924][T10901] ip6_route_output_flags+0x364/0x5d0 [ 204.740949][T10901] ? ip6_route_output_flags+0x2e/0x5d0 [ 204.740977][T10901] ip6_dst_lookup_tail+0x1c3/0x15a0 [ 204.741002][T10901] ? format_decode+0x5a3/0xe10 [ 204.741033][T10901] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 204.741050][T10901] ? sk_dst_check+0x25/0x480 [ 204.741074][T10901] ? sk_dst_check+0x25/0x480 [ 204.741095][T10901] ? sk_dst_check+0x25/0x480 [ 204.741112][T10901] ? sk_dst_check+0x30e/0x480 [ 204.741133][T10901] ip6_sk_dst_lookup_flow+0x72b/0x9c0 [ 204.741153][T10901] ? udpv6_sendmsg+0x1864/0x25c0 [ 204.741184][T10901] udpv6_sendmsg+0x1a69/0x25c0 [ 204.741226][T10901] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 204.741251][T10901] ? udp_lib_get_port+0x168d/0x1b70 [ 204.741316][T10901] ? inet_send_prepare+0x1b9/0x270 [ 204.741339][T10901] ? inet_send_prepare+0x1b9/0x270 [ 204.741363][T10901] ? inet_send_prepare+0x1b9/0x270 [ 204.741381][T10901] ? __local_bh_enable_ip+0xd0/0x130 [ 204.741403][T10901] ? inet_send_prepare+0x1b9/0x270 [ 204.741428][T10901] ? inet6_sendmsg+0xe4/0x120 [ 204.741454][T10901] ____sys_sendmsg+0x5c7/0x9f0 [ 204.741484][T10901] ? __pfx_____sys_sendmsg+0x10/0x10 [ 204.741518][T10901] ? import_iovec+0x73/0xa0 [ 204.741542][T10901] ___sys_sendmsg+0x2a5/0x360 [ 204.741570][T10901] ? __pfx____sys_sendmsg+0x10/0x10 [ 204.741597][T10901] ? kstrtouint+0x6e/0xe0 [ 204.741650][T10901] ? __fget_files+0x2a/0x420 [ 204.741676][T10901] ? __fget_files+0x3a0/0x420 [ 204.741723][T10901] __sys_sendmmsg+0x27c/0x4e0 [ 204.741752][T10901] ? __pfx___sys_sendmmsg+0x10/0x10 [ 204.741774][T10901] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 204.741822][T10901] ? ksys_write+0x242/0x270 [ 204.741845][T10901] ? __pfx_ksys_write+0x10/0x10 [ 204.741873][T10901] __x64_sys_sendmmsg+0xa0/0xc0 [ 204.741899][T10901] do_syscall_64+0x14d/0xf80 [ 204.741921][T10901] ? trace_irq_disable+0x3b/0x150 [ 204.741946][T10901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.741972][T10901] ? clear_bhb_loop+0x40/0x90 [ 204.741995][T10901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.742013][T10901] RIP: 0033:0x7f6663f9c799 [ 204.742031][T10901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.742046][T10901] RSP: 002b:00007f6664e4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 204.742065][T10901] RAX: ffffffffffffffda RBX: 00007f6664215fa0 RCX: 00007f6663f9c799 [ 204.742079][T10901] RDX: 0000000000000001 RSI: 0000200000000640 RDI: 0000000000000006 [ 204.742091][T10901] RBP: 00007f6664e4d090 R08: 0000000000000000 R09: 0000000000000000 [ 204.742102][T10901] R10: 0000000004004800 R11: 0000000000000246 R12: 0000000000000001 [ 204.742113][T10901] R13: 00007f6664216038 R14: 00007f6664215fa0 R15: 00007ffc7ef6f478 [ 204.742144][T10901] [ 205.030308][ T63] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 205.236310][T10905] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1592'. [ 205.254581][T10907] FAULT_INJECTION: forcing a failure. [ 205.254581][T10907] name failslab, interval 1, probability 0, space 0, times 0 [ 205.267750][T10907] CPU: 1 UID: 0 PID: 10907 Comm: syz.2.1594 Not tainted syzkaller #0 PREEMPT(full) [ 205.267775][T10907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 205.267787][T10907] Call Trace: [ 205.267795][T10907] [ 205.267802][T10907] dump_stack_lvl+0xe8/0x150 [ 205.267833][T10907] should_fail_ex+0x412/0x560 [ 205.267864][T10907] should_failslab+0xa8/0x100 [ 205.267895][T10907] ? skb_clone+0x212/0x3a0 [ 205.267917][T10907] kmem_cache_alloc_noprof+0x87/0x650 [ 205.267937][T10907] ? __netlink_lookup+0xc6/0x8b0 [ 205.267965][T10907] skb_clone+0x212/0x3a0 [ 205.267991][T10907] __netlink_deliver_tap+0x404/0x850 [ 205.268021][T10907] ? netlink_deliver_tap+0x2e/0x1b0 [ 205.268042][T10907] netlink_deliver_tap+0x19c/0x1b0 [ 205.268064][T10907] netlink_unicast+0x7e3/0x9b0 [ 205.268097][T10907] ? __pfx_netlink_unicast+0x10/0x10 [ 205.268125][T10907] ? netlink_sendmsg+0x650/0xb40 [ 205.268143][T10907] ? skb_put+0x11b/0x210 [ 205.268166][T10907] netlink_sendmsg+0x813/0xb40 [ 205.268193][T10907] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.268215][T10907] ? aa_sock_msg_perm+0xf1/0x1b0 [ 205.268242][T10907] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 205.268266][T10907] ____sys_sendmsg+0x972/0x9f0 [ 205.268297][T10907] ? __pfx_____sys_sendmsg+0x10/0x10 [ 205.268328][T10907] ? import_iovec+0x73/0xa0 [ 205.268352][T10907] ___sys_sendmsg+0x2a5/0x360 [ 205.268379][T10907] ? __pfx____sys_sendmsg+0x10/0x10 [ 205.268432][T10907] ? __fget_files+0x2a/0x420 [ 205.268458][T10907] ? __fget_files+0x3a0/0x420 [ 205.268495][T10907] __x64_sys_sendmsg+0x1bd/0x2a0 [ 205.268520][T10907] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 205.268550][T10907] ? __pfx_ksys_write+0x10/0x10 [ 205.268582][T10907] do_syscall_64+0x14d/0xf80 [ 205.268603][T10907] ? trace_irq_disable+0x3b/0x150 [ 205.268628][T10907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.268647][T10907] ? clear_bhb_loop+0x40/0x90 [ 205.268670][T10907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.268688][T10907] RIP: 0033:0x7f808139c799 [ 205.268706][T10907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.268721][T10907] RSP: 002b:00007f808216e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.268741][T10907] RAX: ffffffffffffffda RBX: 00007f8081615fa0 RCX: 00007f808139c799 [ 205.268754][T10907] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 205.268765][T10907] RBP: 00007f808216e090 R08: 0000000000000000 R09: 0000000000000000 [ 205.268776][T10907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.268787][T10907] R13: 00007f8081616038 R14: 00007f8081615fa0 R15: 00007ffccab68e88 [ 205.268815][T10907] [ 205.563351][T10909] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1593'. [ 205.599173][T10909] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1593'. [ 205.911876][T10932] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1600'. [ 206.027890][T10915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1595'. [ 206.122229][T10940] FAULT_INJECTION: forcing a failure. [ 206.122229][T10940] name failslab, interval 1, probability 0, space 0, times 0 [ 206.174651][T10940] CPU: 1 UID: 0 PID: 10940 Comm: syz.1.1602 Not tainted syzkaller #0 PREEMPT(full) [ 206.174679][T10940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 206.174691][T10940] Call Trace: [ 206.174698][T10940] [ 206.174706][T10940] dump_stack_lvl+0xe8/0x150 [ 206.174739][T10940] should_fail_ex+0x412/0x560 [ 206.174770][T10940] should_failslab+0xa8/0x100 [ 206.174793][T10940] ? alloc_empty_file+0x55/0x1d0 [ 206.174820][T10940] kmem_cache_alloc_noprof+0x87/0x650 [ 206.174848][T10940] alloc_empty_file+0x55/0x1d0 [ 206.174875][T10940] alloc_file_pseudo+0x155/0x240 [ 206.174899][T10940] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 206.174921][T10940] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 206.174945][T10940] ? evm_inode_alloc_security+0x40/0xb0 [ 206.174968][T10940] ? security_inode_alloc+0xd5/0x310 [ 206.175006][T10940] sock_alloc_file+0xb8/0x2e0 [ 206.175037][T10940] do_accept+0x3a0/0x760 [ 206.175062][T10940] ? __pfx_do_accept+0x10/0x10 [ 206.175102][T10940] __sys_accept4+0x139/0x230 [ 206.175125][T10940] ? __pfx___sys_accept4+0x10/0x10 [ 206.175144][T10940] ? __pfx_ksys_write+0x10/0x10 [ 206.175172][T10940] __x64_sys_accept+0x7d/0x90 [ 206.175194][T10940] do_syscall_64+0x14d/0xf80 [ 206.175215][T10940] ? trace_irq_disable+0x3b/0x150 [ 206.175242][T10940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.175261][T10940] ? clear_bhb_loop+0x40/0x90 [ 206.175285][T10940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.175303][T10940] RIP: 0033:0x7f6663f9c799 [ 206.175321][T10940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.175337][T10940] RSP: 002b:00007f6664e4d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 206.175357][T10940] RAX: ffffffffffffffda RBX: 00007f6664215fa0 RCX: 00007f6663f9c799 [ 206.175371][T10940] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 206.175382][T10940] RBP: 00007f6664e4d090 R08: 0000000000000000 R09: 0000000000000000 [ 206.175394][T10940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.175405][T10940] R13: 00007f6664216038 R14: 00007f6664215fa0 R15: 00007ffc7ef6f478 [ 206.175433][T10940] [ 206.587489][T10953] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 206.594779][T10953] IPv6: NLM_F_CREATE should be set when creating new route [ 207.056600][T10982] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 207.275475][T10991] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 207.444418][T11003] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 207.555057][T11008] FAULT_INJECTION: forcing a failure. [ 207.555057][T11008] name failslab, interval 1, probability 0, space 0, times 0 [ 207.590635][T11008] CPU: 1 UID: 0 PID: 11008 Comm: syz.2.1626 Not tainted syzkaller #0 PREEMPT(full) [ 207.590662][T11008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 207.590673][T11008] Call Trace: [ 207.590681][T11008] [ 207.590690][T11008] dump_stack_lvl+0xe8/0x150 [ 207.590729][T11008] should_fail_ex+0x412/0x560 [ 207.590762][T11008] should_failslab+0xa8/0x100 [ 207.590788][T11008] __kmalloc_cache_noprof+0x88/0x660 [ 207.590811][T11008] ? sctp_add_bind_addr+0x8c/0x370 [ 207.590842][T11008] sctp_add_bind_addr+0x8c/0x370 [ 207.590872][T11008] sctp_copy_local_addr_list+0x314/0x4f0 [ 207.590901][T11008] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 207.590927][T11008] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 207.590955][T11008] ? sctp_v6_is_any+0x64/0x80 [ 207.590982][T11008] ? sctp_copy_one_addr+0x93/0x360 [ 207.591011][T11008] sctp_bind_addr_copy+0xb3/0x3c0 [ 207.591037][T11008] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 207.591064][T11008] sctp_connect_new_asoc+0x2ff/0x6b0 [ 207.591086][T11008] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 207.591108][T11008] ? __ipv6_addr_type+0x124/0x2f0 [ 207.591131][T11008] ? sctp_inet6_send_verify+0x6e/0x300 [ 207.591154][T11008] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 207.591177][T11008] __sctp_connect+0x5cb/0xdc0 [ 207.591206][T11008] ? __pfx___sctp_connect+0x10/0x10 [ 207.591223][T11008] ? sctp_inet_connect+0xa0/0x210 [ 207.591251][T11008] ? __local_bh_enable_ip+0xd0/0x130 [ 207.591282][T11008] sctp_inet_connect+0x12e/0x210 [ 207.591311][T11008] __sys_connect+0x312/0x450 [ 207.591336][T11008] ? __pfx___sys_connect+0x10/0x10 [ 207.591369][T11008] ? __pfx_ksys_write+0x10/0x10 [ 207.591398][T11008] __x64_sys_connect+0x7a/0x90 [ 207.591419][T11008] do_syscall_64+0x14d/0xf80 [ 207.591440][T11008] ? trace_irq_disable+0x3b/0x150 [ 207.591467][T11008] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.591486][T11008] ? clear_bhb_loop+0x40/0x90 [ 207.591510][T11008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.591529][T11008] RIP: 0033:0x7f808139c799 [ 207.591547][T11008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.591563][T11008] RSP: 002b:00007f808216e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 207.591583][T11008] RAX: ffffffffffffffda RBX: 00007f8081615fa0 RCX: 00007f808139c799 [ 207.591597][T11008] RDX: 000000000000001c RSI: 00002000000000c0 RDI: 0000000000000003 [ 207.591609][T11008] RBP: 00007f808216e090 R08: 0000000000000000 R09: 0000000000000000 [ 207.591620][T11008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 207.591633][T11008] R13: 00007f8081616038 R14: 00007f8081615fa0 R15: 00007ffccab68e88 [ 207.591664][T11008] [ 207.600047][T11010] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 207.769781][ T5836] Bluetooth: hci4: link tx timeout [ 207.888543][ T5836] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 207.906748][T11018] netlink: 'syz.2.1630': attribute type 3 has an invalid length. [ 208.847888][T11075] syzkaller1: entered promiscuous mode [ 208.856473][T11075] syzkaller1: entered allmulticast mode [ 209.094999][T11081] __nla_validate_parse: 10 callbacks suppressed [ 209.095017][T11081] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1649'. [ 209.112579][T11081] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1649'. [ 209.129884][T11083] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1651'. [ 209.149160][ T149] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.158042][ T149] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.168697][T11083] FAULT_INJECTION: forcing a failure. [ 209.168697][T11083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.176340][ T149] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.197790][T11083] CPU: 1 UID: 0 PID: 11083 Comm: syz.1.1651 Not tainted syzkaller #0 PREEMPT(full) [ 209.197814][T11083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 209.197826][T11083] Call Trace: [ 209.197833][T11083] [ 209.197842][T11083] dump_stack_lvl+0xe8/0x150 [ 209.197874][T11083] should_fail_ex+0x412/0x560 [ 209.197905][T11083] _copy_from_user+0x2d/0xb0 [ 209.197928][T11083] ___sys_sendmsg+0x1c6/0x360 [ 209.197958][T11083] ? __pfx____sys_sendmsg+0x10/0x10 [ 209.198001][T11083] ? lockdep_hardirqs_on+0x7a/0x110 [ 209.198049][T11083] __sys_sendmmsg+0x27c/0x4e0 [ 209.198079][T11083] ? __pfx___sys_sendmmsg+0x10/0x10 [ 209.198100][T11083] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 209.198167][T11083] ? ksys_write+0x242/0x270 [ 209.198192][T11083] ? __pfx_ksys_write+0x10/0x10 [ 209.198219][T11083] __x64_sys_sendmmsg+0xa0/0xc0 [ 209.198245][T11083] do_syscall_64+0x14d/0xf80 [ 209.198265][T11083] ? trace_irq_disable+0x3b/0x150 [ 209.198292][T11083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.198311][T11083] ? clear_bhb_loop+0x40/0x90 [ 209.198333][T11083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.198352][T11083] RIP: 0033:0x7f6663f9c799 [ 209.198370][T11083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.198387][T11083] RSP: 002b:00007f6664e4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 209.198407][T11083] RAX: ffffffffffffffda RBX: 00007f6664215fa0 RCX: 00007f6663f9c799 [ 209.198422][T11083] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 209.198434][T11083] RBP: 00007f6664e4d090 R08: 0000000000000000 R09: 0000000000000000 [ 209.198451][T11083] R10: 0000000000000a1a R11: 0000000000000246 R12: 0000000000000002 [ 209.198462][T11083] R13: 00007f6664216038 R14: 00007f6664215fa0 R15: 00007ffc7ef6f478 [ 209.198493][T11083] [ 209.216098][ T149] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.410563][T11093] netlink: 'syz.2.1655': attribute type 10 has an invalid length. [ 209.418506][T11093] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1655'. [ 209.437450][T11093] bond0: entered promiscuous mode [ 209.449231][T11093] bond_slave_0: entered promiscuous mode [ 209.461759][T11093] bond_slave_1: entered promiscuous mode [ 209.475917][T11093] bridge0: port 3(bond0) entered blocking state [ 209.499594][T11093] bridge0: port 3(bond0) entered disabled state [ 209.506340][T11093] bond0: entered allmulticast mode [ 209.515723][T11093] bond_slave_0: entered allmulticast mode [ 209.523354][T11093] bond_slave_1: entered allmulticast mode [ 209.532249][T11093] bond0: left allmulticast mode [ 209.537210][T11093] bond_slave_0: left allmulticast mode [ 209.543669][T11093] bond_slave_1: left allmulticast mode [ 209.550030][T11099] FAULT_INJECTION: forcing a failure. [ 209.550030][T11099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.564043][T11099] CPU: 1 UID: 0 PID: 11099 Comm: syz.0.1657 Not tainted syzkaller #0 PREEMPT(full) [ 209.564068][T11099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 209.564079][T11099] Call Trace: [ 209.564087][T11099] [ 209.564096][T11099] dump_stack_lvl+0xe8/0x150 [ 209.564127][T11099] should_fail_ex+0x412/0x560 [ 209.564158][T11099] _copy_to_user+0x31/0xb0 [ 209.564182][T11099] simple_read_from_buffer+0xe1/0x170 [ 209.564213][T11099] proc_fail_nth_read+0x1bb/0x230 [ 209.564243][T11099] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 209.564273][T11099] ? rw_verify_area+0x2a6/0x4d0 [ 209.564294][T11099] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 209.564321][T11099] vfs_read+0x20c/0xa70 [ 209.564340][T11099] ? fdget_pos+0x246/0x320 [ 209.564361][T11099] ? __pfx___mutex_lock+0x10/0x10 [ 209.564384][T11099] ? __pfx_vfs_read+0x10/0x10 [ 209.564406][T11099] ? __fget_files+0x2a/0x420 [ 209.564438][T11099] ? __fget_files+0x3a0/0x420 [ 209.564463][T11099] ? __fget_files+0x2a/0x420 [ 209.564498][T11099] ksys_read+0x150/0x270 [ 209.564519][T11099] ? __pfx_ksys_read+0x10/0x10 [ 209.564549][T11099] do_syscall_64+0x14d/0xf80 [ 209.564568][T11099] ? trace_irq_disable+0x3b/0x150 [ 209.564593][T11099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.564617][T11099] ? clear_bhb_loop+0x40/0x90 [ 209.564640][T11099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.564656][T11099] RIP: 0033:0x7f221575cfce [ 209.564672][T11099] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 209.564688][T11099] RSP: 002b:00007f2216617fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 209.564705][T11099] RAX: ffffffffffffffda RBX: 00007f22166186c0 RCX: 00007f221575cfce [ 209.564719][T11099] RDX: 000000000000000f RSI: 00007f22166180a0 RDI: 0000000000000004 [ 209.564729][T11099] RBP: 00007f2216618090 R08: 0000000000000000 R09: 0000000000000000 [ 209.564741][T11099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 209.564752][T11099] R13: 00007f2215a16038 R14: 00007f2215a15fa0 R15: 00007ffc1bd5ed18 [ 209.564782][T11099] [ 209.871591][T11107] netlink: 'syz.4.1661': attribute type 12 has an invalid length. [ 209.911824][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 210.093901][T11114] netlink: 'syz.0.1662': attribute type 12 has an invalid length. [ 210.174127][T11118] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1663'. [ 210.369864][T11127] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1667'. [ 210.530069][T11133] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1670'. [ 210.640121][T11117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1664'. [ 210.770854][T11148] tun0: tun_chr_ioctl cmd 1074812117 [ 210.790522][ T63] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 210.957310][T11158] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1678'. [ 211.350297][T11133] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 211.357753][T11133] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 211.358052][T11182] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1686'. [ 211.385565][T11133] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 211.391768][T11133] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 211.406190][T11133] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 211.420562][T11133] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 211.447372][T11133] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 211.453947][T11133] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 211.478591][T11133] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 211.488384][T11186] FAULT_INJECTION: forcing a failure. [ 211.488384][T11186] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 211.489204][T11133] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 211.502958][T11186] CPU: 1 UID: 0 PID: 11186 Comm: syz.0.1687 Not tainted syzkaller #0 PREEMPT(full) [ 211.502985][T11186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 211.502997][T11186] Call Trace: [ 211.503004][T11186] [ 211.503012][T11186] dump_stack_lvl+0xe8/0x150 [ 211.503043][T11186] should_fail_ex+0x412/0x560 [ 211.503073][T11186] prepare_alloc_pages+0x22a/0x650 [ 211.503104][T11186] __alloc_frozen_pages_noprof+0x12f/0x380 [ 211.503129][T11186] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 211.503157][T11186] ? __pfx_policy_nodemask+0x10/0x10 [ 211.503184][T11186] ? __lock_acquire+0x6b5/0x2cf0 [ 211.503212][T11186] alloc_pages_mpol+0x232/0x4a0 [ 211.503240][T11186] vma_alloc_folio_noprof+0xea/0x210 [ 211.503266][T11186] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 211.503306][T11186] do_pte_missing+0x1656/0x3490 [ 211.503350][T11186] handle_mm_fault+0x1bec/0x3310 [ 211.503391][T11186] ? handle_mm_fault+0xee/0x3310 [ 211.503424][T11186] ? __pfx_handle_mm_fault+0x10/0x10 [ 211.503452][T11186] ? follow_page_pte+0x841/0x1450 [ 211.503488][T11186] ? __pfx_follow_page_pte+0x10/0x10 [ 211.503526][T11186] __get_user_pages+0x165b/0x29d0 [ 211.503581][T11186] __gup_longterm_locked+0xdcf/0x1630 [ 211.503619][T11186] ? sanity_check_pinned_pages+0x1212/0x12d0 [ 211.503656][T11186] gup_fast_fallback+0x1d82/0x22e0 [ 211.503712][T11186] ? __pfx_gup_fast_fallback+0x10/0x10 [ 211.503740][T11186] ? is_valid_gup_args+0x11f/0x200 [ 211.503768][T11186] ? pin_user_pages_fast+0x4d/0xb0 [ 211.503798][T11186] rds_info_getsockopt+0x20e/0x4a0 [ 211.503827][T11186] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 211.503852][T11186] ? __might_fault+0xaf/0x130 [ 211.503873][T11186] ? rds_getsockopt+0x2e6/0x500 [ 211.503891][T11186] ? __pfx_rds_getsockopt+0x10/0x10 [ 211.503911][T11186] do_sock_getsockopt+0x2d3/0x3f0 [ 211.503936][T11186] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 211.503959][T11186] ? __fget_files+0x3a0/0x420 [ 211.503984][T11186] ? __fget_files+0x2a/0x420 [ 211.504018][T11186] __x64_sys_getsockopt+0x1a4/0x240 [ 211.504048][T11186] do_syscall_64+0x14d/0xf80 [ 211.504069][T11186] ? trace_irq_disable+0x3b/0x150 [ 211.504094][T11186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.504113][T11186] ? clear_bhb_loop+0x40/0x90 [ 211.504135][T11186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.504153][T11186] RIP: 0033:0x7f221579c799 [ 211.504172][T11186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.504189][T11186] RSP: 002b:00007f2216618028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 211.504208][T11186] RAX: ffffffffffffffda RBX: 00007f2215a15fa0 RCX: 00007f221579c799 [ 211.504221][T11186] RDX: 0000000000002715 RSI: 0000200000000114 RDI: 0000000000000004 [ 211.504233][T11186] RBP: 00007f2216618090 R08: 0000200000000400 R09: 0000000000000000 [ 211.504244][T11186] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000002 [ 211.504255][T11186] R13: 00007f2215a16038 R14: 00007f2215a15fa0 R15: 00007ffc1bd5ed18 [ 211.504285][T11186] [ 211.733774][T11195] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 212.082163][T11201] 8021q: adding VLAN 0 to HW filter on device bond6 [ 212.121982][T11211] netlink: 'syz.4.1697': attribute type 2 has an invalid length. [ 212.138864][T11211] l24): entered promiscuous mode [ 212.796756][T11252] netlink: 'syz.2.1711': attribute type 30 has an invalid length. [ 213.041544][T11270] xt_hashlimit: size too large, truncated to 1048576 [ 213.051576][T11270] xt_hashlimit: overflow, try lower: 0/0 [ 213.074229][T11269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.213347][T11280] netlink: 'syz.3.1721': attribute type 12 has an invalid length. [ 213.336632][T11285] xt_hashlimit: size too large, truncated to 1048576 [ 213.390983][T11285] xt_hashlimit: overflow, try lower: 0/0 [ 213.403051][T11286] syz_tun: entered allmulticast mode [ 213.431235][T11284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.476988][T11284] syz_tun: left allmulticast mode [ 213.672105][T11299] FAULT_INJECTION: forcing a failure. [ 213.672105][T11299] name failslab, interval 1, probability 0, space 0, times 0 [ 213.696807][T11299] CPU: 1 UID: 0 PID: 11299 Comm: syz.1.1729 Not tainted syzkaller #0 PREEMPT(full) [ 213.696833][T11299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 213.696844][T11299] Call Trace: [ 213.696852][T11299] [ 213.696860][T11299] dump_stack_lvl+0xe8/0x150 [ 213.696888][T11299] should_fail_ex+0x412/0x560 [ 213.696923][T11299] should_failslab+0xa8/0x100 [ 213.696947][T11299] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 213.696968][T11299] ? __alloc_skb+0x186/0x7d0 [ 213.696987][T11299] ? __alloc_skb+0x1d0/0x7d0 [ 213.697002][T11299] ? __local_bh_enable_ip+0xd0/0x130 [ 213.697030][T11299] __alloc_skb+0x1d0/0x7d0 [ 213.697054][T11299] netlink_sendmsg+0x5d4/0xb40 [ 213.697081][T11299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.697103][T11299] ? aa_sock_msg_perm+0xf1/0x1b0 [ 213.697129][T11299] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 213.697154][T11299] ____sys_sendmsg+0x972/0x9f0 [ 213.697184][T11299] ? __pfx_____sys_sendmsg+0x10/0x10 [ 213.697214][T11299] ? import_iovec+0x73/0xa0 [ 213.697236][T11299] ___sys_sendmsg+0x2a5/0x360 [ 213.697260][T11299] ? __pfx____sys_sendmsg+0x10/0x10 [ 213.697315][T11299] ? __fget_files+0x2a/0x420 [ 213.697341][T11299] ? __fget_files+0x3a0/0x420 [ 213.697377][T11299] __x64_sys_sendmsg+0x1bd/0x2a0 [ 213.697402][T11299] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 213.697432][T11299] ? __pfx_ksys_write+0x10/0x10 [ 213.697464][T11299] do_syscall_64+0x14d/0xf80 [ 213.697483][T11299] ? trace_irq_disable+0x3b/0x150 [ 213.697507][T11299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.697534][T11299] ? clear_bhb_loop+0x40/0x90 [ 213.697556][T11299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.697574][T11299] RIP: 0033:0x7f6663f9c799 [ 213.697591][T11299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.697607][T11299] RSP: 002b:00007f6664e4d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.697625][T11299] RAX: ffffffffffffffda RBX: 00007f6664215fa0 RCX: 00007f6663f9c799 [ 213.697640][T11299] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000012 [ 213.697652][T11299] RBP: 00007f6664e4d090 R08: 0000000000000000 R09: 0000000000000000 [ 213.697663][T11299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.697674][T11299] R13: 00007f6664216038 R14: 00007f6664215fa0 R15: 00007ffc7ef6f478 [ 213.697704][T11299] [ 214.049775][T11307] xt_hashlimit: size too large, truncated to 1048576 [ 214.056503][T11307] xt_hashlimit: overflow, try lower: 0/0 [ 214.146026][T11306] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.153299][T11306] IPv6: NLM_F_CREATE should be set when creating new route [ 214.213087][T11306] __nla_validate_parse: 12 callbacks suppressed [ 214.213110][T11306] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1734'. [ 214.235319][T11306] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.295811][T11303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1731'. [ 214.398517][T11327] xt_hashlimit: size too large, truncated to 1048576 [ 214.463700][T11333] netem: change failed [ 214.753465][T11350] xt_hashlimit: size too large, truncated to 1048576 [ 215.004935][T11372] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1755'. [ 215.027428][T11372] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1755'. [ 215.097195][T11377] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 215.111791][T11377] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1756'. [ 215.149823][T11380] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 215.158600][T11380] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1757'. [ 215.158725][T11377] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 215.168288][T11380] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 215.261797][T11386] netlink: 'syz.1.1758': attribute type 1 has an invalid length. [ 215.331016][T11382] netlink: 'syz.1.1758': attribute type 32 has an invalid length. [ 215.338866][T11382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1758'. [ 215.392227][T11392] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1761'. [ 215.405262][T11392] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1761'. [ 215.418450][T11392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1761'. [ 215.435901][T11382] bond7: option coupled_control: invalid value (22) [ 215.447071][T11382] bond7 (unregistering): Released all slaves [ 215.885708][T11412] netlink: 'syz.3.1771': attribute type 12 has an invalid length. [ 215.917676][T11408] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 215.926731][T11408] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 216.155011][T11428] netem: change failed [ 216.167942][T11430] netlink: 'syz.1.1777': attribute type 3 has an invalid length. [ 216.323991][T11436] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 216.431967][T11450] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 216.441815][T11450] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 216.550130][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 216.581767][T11461] netlink: 'syz.3.1789': attribute type 12 has an invalid length. [ 216.953936][T11488] FAULT_INJECTION: forcing a failure. [ 216.953936][T11488] name failslab, interval 1, probability 0, space 0, times 0 [ 216.980282][T11488] CPU: 0 UID: 0 PID: 11488 Comm: syz.4.1798 Not tainted syzkaller #0 PREEMPT(full) [ 216.980320][T11488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 216.980331][T11488] Call Trace: [ 216.980339][T11488] [ 216.980348][T11488] dump_stack_lvl+0xe8/0x150 [ 216.980380][T11488] should_fail_ex+0x412/0x560 [ 216.980413][T11488] should_failslab+0xa8/0x100 [ 216.980437][T11488] ? skb_clone+0x212/0x3a0 [ 216.980461][T11488] kmem_cache_alloc_noprof+0x87/0x650 [ 216.980482][T11488] ? __netlink_lookup+0xc6/0x8b0 [ 216.980510][T11488] skb_clone+0x212/0x3a0 [ 216.980538][T11488] __netlink_deliver_tap+0x404/0x850 [ 216.980570][T11488] ? netlink_deliver_tap+0x2e/0x1b0 [ 216.980591][T11488] netlink_deliver_tap+0x19c/0x1b0 [ 216.980612][T11488] netlink_unicast+0x7e3/0x9b0 [ 216.980648][T11488] ? __pfx_netlink_unicast+0x10/0x10 [ 216.980678][T11488] ? netlink_sendmsg+0x650/0xb40 [ 216.980696][T11488] ? skb_put+0x11b/0x210 [ 216.980720][T11488] netlink_sendmsg+0x813/0xb40 [ 216.980750][T11488] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.980773][T11488] ? aa_sock_msg_perm+0xf1/0x1b0 [ 216.980801][T11488] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 216.980827][T11488] ____sys_sendmsg+0x972/0x9f0 [ 216.980860][T11488] ? __pfx_____sys_sendmsg+0x10/0x10 [ 216.980892][T11488] ? import_iovec+0x73/0xa0 [ 216.980917][T11488] ___sys_sendmsg+0x2a5/0x360 [ 216.980946][T11488] ? __pfx____sys_sendmsg+0x10/0x10 [ 216.981005][T11488] ? __fget_files+0x2a/0x420 [ 216.981032][T11488] ? __fget_files+0x3a0/0x420 [ 216.981069][T11488] __x64_sys_sendmsg+0x1bd/0x2a0 [ 216.981096][T11488] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 216.981127][T11488] ? __pfx_ksys_write+0x10/0x10 [ 216.981159][T11488] do_syscall_64+0x14d/0xf80 [ 216.981180][T11488] ? trace_irq_disable+0x3b/0x150 [ 216.981205][T11488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.981225][T11488] ? clear_bhb_loop+0x40/0x90 [ 216.981247][T11488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.981265][T11488] RIP: 0033:0x7f2874b9c799 [ 216.981283][T11488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.981305][T11488] RSP: 002b:00007f2875a13028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.981324][T11488] RAX: ffffffffffffffda RBX: 00007f2874e15fa0 RCX: 00007f2874b9c799 [ 216.981337][T11488] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 216.981348][T11488] RBP: 00007f2875a13090 R08: 0000000000000000 R09: 0000000000000000 [ 216.981360][T11488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.981370][T11488] R13: 00007f2874e16038 R14: 00007f2874e15fa0 R15: 00007ffe43fe5288 [ 216.981402][T11488] [ 217.752392][T11527] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.759576][T11527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.995529][T11550] bond3 (unregistering): Released all slaves [ 218.102746][T11556] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 218.108737][T11556] syzkaller1: linktype set to 825 [ 218.263702][T11565] netlink: 'syz.0.1824': attribute type 10 has an invalid length. [ 218.284120][T11565] team0: Port device dummy0 added [ 218.330811][T11570] bridge2: entered promiscuous mode [ 218.337549][T11570] bridge2: left promiscuous mode [ 218.700696][T11584] syzkaller0: MTU too low for tipc bearer [ 218.706541][T11584] tipc: Enabling of bearer rejected, failed to enable media [ 219.388621][T11631] __nla_validate_parse: 22 callbacks suppressed [ 219.388640][T11631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1847'. [ 219.515495][T11639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1850'. [ 219.535925][T11639] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 219.708094][T11648] FAULT_INJECTION: forcing a failure. [ 219.708094][T11648] name failslab, interval 1, probability 0, space 0, times 0 [ 219.727519][T11648] CPU: 1 UID: 0 PID: 11648 Comm: syz.4.1854 Not tainted syzkaller #0 PREEMPT(full) [ 219.727555][T11648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 219.727566][T11648] Call Trace: [ 219.727574][T11648] [ 219.727582][T11648] dump_stack_lvl+0xe8/0x150 [ 219.727612][T11648] should_fail_ex+0x412/0x560 [ 219.727645][T11648] should_failslab+0xa8/0x100 [ 219.727671][T11648] __kmalloc_cache_noprof+0x88/0x660 [ 219.727694][T11648] ? __hw_addr_add_ex+0x1dc/0x650 [ 219.727725][T11648] __hw_addr_add_ex+0x1dc/0x650 [ 219.727749][T11648] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 219.727778][T11648] dev_addr_init+0x15e/0x240 [ 219.727806][T11648] ? __pfx_dev_addr_init+0x10/0x10 [ 219.727832][T11648] ? alloc_netdev_mqs+0xa6/0x11b0 [ 219.727866][T11648] alloc_netdev_mqs+0x2b1/0x11b0 [ 219.727889][T11648] ? __pfx_macvlan_setup+0x10/0x10 [ 219.727918][T11648] rtnl_create_link+0x31f/0xd70 [ 219.727950][T11648] rtnl_newlink_create+0x277/0xb70 [ 219.727978][T11648] ? __mutex_lock+0x5ac/0x1300 [ 219.728006][T11648] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 219.728032][T11648] ? __pfx___mutex_lock+0x10/0x10 [ 219.728063][T11648] ? ns_capable+0x89/0xe0 [ 219.728091][T11648] rtnl_newlink+0x1666/0x1be0 [ 219.728124][T11648] ? __pfx_rtnl_newlink+0x10/0x10 [ 219.728142][T11648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.728198][T11648] ? kasan_quarantine_put+0xbb/0x1f0 [ 219.728218][T11648] ? lockdep_hardirqs_on+0x7a/0x110 [ 219.728243][T11648] ? kmem_cache_free+0x187/0x630 [ 219.728263][T11648] ? nlmon_xmit+0xb0/0x100 [ 219.728297][T11648] ? __lock_acquire+0x6b5/0x2cf0 [ 219.728325][T11648] ? __local_bh_enable_ip+0xd0/0x130 [ 219.728348][T11648] ? lockdep_hardirqs_on+0x7a/0x110 [ 219.728367][T11648] ? __dev_queue_xmit+0x28b/0x3870 [ 219.728391][T11648] ? __local_bh_enable_ip+0xd0/0x130 [ 219.728413][T11648] ? __dev_queue_xmit+0x28b/0x3870 [ 219.728462][T11648] ? __pfx_rtnl_newlink+0x10/0x10 [ 219.728482][T11648] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 219.728505][T11648] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 219.728524][T11648] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 219.728548][T11648] ? ref_tracker_free+0x693/0x840 [ 219.728574][T11648] ? __copy_skb_header+0xa3/0x4a0 [ 219.728600][T11648] ? __pfx_ref_tracker_free+0x10/0x10 [ 219.728638][T11648] netlink_rcv_skb+0x232/0x4b0 [ 219.728660][T11648] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 219.728682][T11648] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 219.728713][T11648] ? netlink_deliver_tap+0x2e/0x1b0 [ 219.728741][T11648] netlink_unicast+0x80f/0x9b0 [ 219.728778][T11648] ? __pfx_netlink_unicast+0x10/0x10 [ 219.728807][T11648] ? netlink_sendmsg+0x650/0xb40 [ 219.728825][T11648] ? skb_put+0x11b/0x210 [ 219.728850][T11648] netlink_sendmsg+0x813/0xb40 [ 219.728880][T11648] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.728903][T11648] ? aa_sock_msg_perm+0xf1/0x1b0 [ 219.728932][T11648] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 219.728957][T11648] ____sys_sendmsg+0x972/0x9f0 [ 219.728990][T11648] ? __pfx_____sys_sendmsg+0x10/0x10 [ 219.729023][T11648] ? import_iovec+0x73/0xa0 [ 219.729047][T11648] ___sys_sendmsg+0x2a5/0x360 [ 219.729076][T11648] ? __pfx____sys_sendmsg+0x10/0x10 [ 219.729134][T11648] ? __fget_files+0x2a/0x420 [ 219.729159][T11648] ? __fget_files+0x3a0/0x420 [ 219.729192][T11648] __x64_sys_sendmsg+0x1bd/0x2a0 [ 219.729216][T11648] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 219.729247][T11648] ? __pfx_ksys_write+0x10/0x10 [ 219.729278][T11648] do_syscall_64+0x14d/0xf80 [ 219.729299][T11648] ? trace_irq_disable+0x3b/0x150 [ 219.729325][T11648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.729344][T11648] ? clear_bhb_loop+0x40/0x90 [ 219.729368][T11648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.729387][T11648] RIP: 0033:0x7f2874b9c799 [ 219.729404][T11648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.729421][T11648] RSP: 002b:00007f2875a13028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.729441][T11648] RAX: ffffffffffffffda RBX: 00007f2874e15fa0 RCX: 00007f2874b9c799 [ 219.729455][T11648] RDX: 0000000000040040 RSI: 0000200000000200 RDI: 0000000000000004 [ 219.729467][T11648] RBP: 00007f2875a13090 R08: 0000000000000000 R09: 0000000000000000 [ 219.729478][T11648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 219.729490][T11648] R13: 00007f2874e16038 R14: 00007f2874e15fa0 R15: 00007ffe43fe5288 [ 219.729522][T11648] [ 220.344939][T11662] netlink: 'syz.4.1859': attribute type 12 has an invalid length. [ 220.410851][T11664] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1860'. [ 220.581975][T11676] netlink: 'syz.4.1864': attribute type 1 has an invalid length. [ 220.618940][T11676] bond4: entered promiscuous mode [ 220.651131][T11676] 8021q: adding VLAN 0 to HW filter on device bond4 [ 220.658559][T11681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1864'. [ 220.722401][T11685] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1867'. [ 220.782022][T11689] xt_hashlimit: size too large, truncated to 1048576 [ 220.883780][T11695] syzkaller1: entered promiscuous mode [ 220.900123][T11695] syzkaller1: entered allmulticast mode [ 221.043417][T11699] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1873'. [ 221.173930][T11709] FAULT_INJECTION: forcing a failure. [ 221.173930][T11709] name failslab, interval 1, probability 0, space 0, times 0 [ 221.197610][T11709] CPU: 1 UID: 0 PID: 11709 Comm: syz.3.1876 Not tainted syzkaller #0 PREEMPT(full) [ 221.197635][T11709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 221.197647][T11709] Call Trace: [ 221.197655][T11709] [ 221.197663][T11709] dump_stack_lvl+0xe8/0x150 [ 221.197696][T11709] should_fail_ex+0x412/0x560 [ 221.197730][T11709] should_failslab+0xa8/0x100 [ 221.197756][T11709] __kmalloc_cache_noprof+0x88/0x660 [ 221.197779][T11709] ? sctp_add_bind_addr+0x8c/0x370 [ 221.197811][T11709] sctp_add_bind_addr+0x8c/0x370 [ 221.197840][T11709] sctp_copy_local_addr_list+0x314/0x4f0 [ 221.197870][T11709] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 221.197896][T11709] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 221.197927][T11709] ? sctp_v4_is_any+0x35/0x60 [ 221.197951][T11709] ? sctp_copy_one_addr+0x93/0x360 [ 221.197980][T11709] sctp_bind_addr_copy+0xb3/0x3c0 [ 221.198007][T11709] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 221.198034][T11709] sctp_connect_new_asoc+0x2ff/0x6b0 [ 221.198057][T11709] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 221.198090][T11709] ? __local_bh_enable_ip+0xd0/0x130 [ 221.198114][T11709] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 221.198138][T11709] ? security_sctp_bind_connect+0x7e/0x2c0 [ 221.198165][T11709] sctp_sendmsg+0x1528/0x2c10 [ 221.198210][T11709] ? __pfx_sctp_sendmsg+0x10/0x10 [ 221.198242][T11709] ? aa_sk_perm+0x6d5/0x900 [ 221.198277][T11709] ? __pfx_aa_sk_perm+0x10/0x10 [ 221.198307][T11709] ? sock_rps_record_flow+0x19/0x350 [ 221.198332][T11709] ? inet_sendmsg+0x2f4/0x370 [ 221.198358][T11709] ____sys_sendmsg+0x80a/0x9f0 [ 221.198392][T11709] ? __pfx_____sys_sendmsg+0x10/0x10 [ 221.198425][T11709] ? import_iovec+0x73/0xa0 [ 221.198450][T11709] ___sys_sendmsg+0x2a5/0x360 [ 221.198480][T11709] ? __pfx____sys_sendmsg+0x10/0x10 [ 221.198507][T11709] ? kstrtouint+0x6e/0xe0 [ 221.198559][T11709] ? __fget_files+0x2a/0x420 [ 221.198586][T11709] ? __fget_files+0x3a0/0x420 [ 221.198621][T11709] __sys_sendmmsg+0x27c/0x4e0 [ 221.198652][T11709] ? __pfx___sys_sendmmsg+0x10/0x10 [ 221.198673][T11709] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 221.198719][T11709] ? ksys_write+0x242/0x270 [ 221.198743][T11709] ? __pfx_ksys_write+0x10/0x10 [ 221.198772][T11709] __x64_sys_sendmmsg+0xa0/0xc0 [ 221.198797][T11709] do_syscall_64+0x14d/0xf80 [ 221.198818][T11709] ? trace_irq_disable+0x3b/0x150 [ 221.198844][T11709] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.198864][T11709] ? clear_bhb_loop+0x40/0x90 [ 221.198888][T11709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.198906][T11709] RIP: 0033:0x7fe3db39c799 [ 221.198925][T11709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.198941][T11709] RSP: 002b:00007fe3dc27c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 221.198962][T11709] RAX: ffffffffffffffda RBX: 00007fe3db615fa0 RCX: 00007fe3db39c799 [ 221.198976][T11709] RDX: 0000000000000002 RSI: 00002000000004c0 RDI: 0000000000000007 [ 221.198987][T11709] RBP: 00007fe3dc27c090 R08: 0000000000000000 R09: 0000000000000000 [ 221.198998][T11709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 221.199009][T11709] R13: 00007fe3db616038 R14: 00007fe3db615fa0 R15: 00007ffc7107e118 [ 221.199039][T11709] [ 221.534827][T11709] sctp: [Deprecated]: syz.3.1876 (pid 11709) Use of int in max_burst socket option deprecated. [ 221.534827][T11709] Use struct sctp_assoc_value instead [ 221.560760][T11716] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1877'. [ 221.573570][T11716] FAULT_INJECTION: forcing a failure. [ 221.573570][T11716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.591282][T11716] CPU: 1 UID: 0 PID: 11716 Comm: syz.1.1877 Not tainted syzkaller #0 PREEMPT(full) [ 221.591307][T11716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 221.591319][T11716] Call Trace: [ 221.591327][T11716] [ 221.591342][T11716] dump_stack_lvl+0xe8/0x150 [ 221.591373][T11716] should_fail_ex+0x412/0x560 [ 221.591405][T11716] _copy_from_user+0x2d/0xb0 [ 221.591427][T11716] ___sys_sendmsg+0x1c6/0x360 [ 221.591450][T11716] ? __pfx___schedule+0x10/0x10 [ 221.591474][T11716] ? __pfx____sys_sendmsg+0x10/0x10 [ 221.591546][T11716] __sys_sendmmsg+0x27c/0x4e0 [ 221.591575][T11716] ? __pfx___sys_sendmmsg+0x10/0x10 [ 221.591597][T11716] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 221.591643][T11716] ? ksys_write+0x242/0x270 [ 221.591670][T11716] ? __pfx_ksys_write+0x10/0x10 [ 221.591697][T11716] __x64_sys_sendmmsg+0xa0/0xc0 [ 221.591724][T11716] do_syscall_64+0x14d/0xf80 [ 221.591744][T11716] ? trace_irq_disable+0x3b/0x150 [ 221.591770][T11716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.591789][T11716] ? clear_bhb_loop+0x40/0x90 [ 221.591812][T11716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.591829][T11716] RIP: 0033:0x7f6663f9c799 [ 221.591845][T11716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.591860][T11716] RSP: 002b:00007f6664e4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 221.591879][T11716] RAX: ffffffffffffffda RBX: 00007f6664215fa0 RCX: 00007f6663f9c799 [ 221.591892][T11716] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 221.591904][T11716] RBP: 00007f6664e4d090 R08: 0000000000000000 R09: 0000000000000000 [ 221.591916][T11716] R10: 0000000000000a1a R11: 0000000000000246 R12: 0000000000000002 [ 221.591927][T11716] R13: 00007f6664216038 R14: 00007f6664215fa0 R15: 00007ffc7ef6f478 [ 221.591958][T11716] [ 221.786179][ T149] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 221.981494][T11722] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1879'. [ 222.072015][T11728] netlink: 'syz.4.1882': attribute type 1 has an invalid length. [ 222.097363][T11731] xt_hashlimit: size too large, truncated to 1048576 [ 222.211927][T11743] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1882'. [ 223.098159][T11773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.370030][T11785] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1901'. [ 223.861183][T11796] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 223.880317][T11796] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 224.011019][T11805] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 224.092960][T11800] bond0: (slave bridge0): Releasing backup interface [ 224.105651][T11800] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.113361][T11800] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.151710][T11800] team0: Port device dummy0 removed [ 224.166194][T11800] bridge_slave_0: left allmulticast mode [ 224.172287][T11800] bridge_slave_0: left promiscuous mode [ 224.178062][T11800] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.187957][T11800] bridge_slave_1: left allmulticast mode [ 224.200986][T11800] bridge_slave_1: left promiscuous mode [ 224.206857][T11800] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.222506][T11800] bond0: (slave bond_slave_0): Releasing backup interface [ 224.233127][T11800] bond0: (slave bond_slave_1): Releasing backup interface [ 224.245021][T11800] team0: Port device team_slave_0 removed [ 224.260707][T11800] team0: Port device team_slave_1 removed [ 224.266980][T11800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.275473][T11800] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.284372][T11800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.292134][T11800] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.302003][T11800] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 224.476220][T11829] xt_hashlimit: size too large, truncated to 1048576 [ 224.747310][T11847] netlink: 'syz.4.1922': attribute type 2 has an invalid length. [ 224.757563][T11847] __nla_validate_parse: 4 callbacks suppressed [ 224.757579][T11847] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1922'. [ 224.808672][T11850] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 224.822336][T11850] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 225.064446][T11866] netlink: 'syz.3.1928': attribute type 1 has an invalid length. [ 225.131733][T11866] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 225.146350][T11866] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 225.165160][T11873] xt_hashlimit: size too large, truncated to 1048576 [ 225.171920][T11866] bond4: (slave ip6gre1): making interface the new active one [ 225.172666][T11866] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 225.290119][T11876] netlink: 'syz.2.1934': attribute type 11 has an invalid length. [ 225.419878][T11883] syzkaller1: entered promiscuous mode [ 225.446408][T11883] syzkaller1: entered allmulticast mode [ 225.533574][T11890] netlink: 'syz.0.1937': attribute type 29 has an invalid length. [ 225.887330][T11908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1944'. [ 225.888915][T11909] netlink: 'syz.0.1945': attribute type 3 has an invalid length. [ 226.032750][T11920] netlink: 'syz.1.1949': attribute type 10 has an invalid length. [ 226.041480][T11920] bond0: (slave wlan1): Opening slave failed [ 226.147498][T11931] vlan2: entered promiscuous mode [ 226.153471][T11931] vlan2: entered allmulticast mode [ 226.346158][T11944] xt_hashlimit: size too large, truncated to 1048576 [ 226.383259][T11949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1957'. [ 226.429204][T11949] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1957'. [ 226.681139][T11963] netlink: 'syz.3.1961': attribute type 10 has an invalid length. [ 226.702916][T11963] bond0: (slave wlan1): Opening slave failed [ 226.715658][T11956] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1957'. [ 226.752830][T11971] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1962'. [ 227.087685][T11991] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1969'. [ 227.100207][T11991] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1969'. [ 227.114459][T11991] FAULT_INJECTION: forcing a failure. [ 227.114459][T11991] name failslab, interval 1, probability 0, space 0, times 0 [ 227.128133][T11991] CPU: 1 UID: 0 PID: 11991 Comm: syz.2.1969 Not tainted syzkaller #0 PREEMPT(full) [ 227.128155][T11991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 227.128165][T11991] Call Trace: [ 227.128173][T11991] [ 227.128180][T11991] dump_stack_lvl+0xe8/0x150 [ 227.128210][T11991] should_fail_ex+0x412/0x560 [ 227.128240][T11991] should_failslab+0xa8/0x100 [ 227.128265][T11991] __kvmalloc_node_noprof+0x178/0x8a0 [ 227.128288][T11991] ? alloc_netdev_mqs+0xa6/0x11b0 [ 227.128321][T11991] alloc_netdev_mqs+0xa6/0x11b0 [ 227.128344][T11991] ? __pfx_hsr_dev_setup+0x10/0x10 [ 227.128374][T11991] rtnl_create_link+0x31f/0xd70 [ 227.128405][T11991] rtnl_newlink_create+0x277/0xb70 [ 227.128426][T11991] ? __pfx___nla_validate_parse+0x10/0x10 [ 227.128454][T11991] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 227.128477][T11991] ? __pfx___mutex_lock+0x10/0x10 [ 227.128497][T11991] ? ns_capable+0x89/0xe0 [ 227.128513][T11991] rtnl_newlink+0x1666/0x1be0 [ 227.128532][T11991] ? __pfx_rtnl_newlink+0x10/0x10 [ 227.128542][T11991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.128572][T11991] ? kasan_quarantine_put+0xbb/0x1f0 [ 227.128583][T11991] ? lockdep_hardirqs_on+0x7a/0x110 [ 227.128598][T11991] ? kmem_cache_free+0x187/0x630 [ 227.128610][T11991] ? nlmon_xmit+0xb0/0x100 [ 227.128629][T11991] ? __lock_acquire+0x6b5/0x2cf0 [ 227.128646][T11991] ? __local_bh_enable_ip+0xd0/0x130 [ 227.128660][T11991] ? lockdep_hardirqs_on+0x7a/0x110 [ 227.128672][T11991] ? __dev_queue_xmit+0x28b/0x3870 [ 227.128685][T11991] ? __local_bh_enable_ip+0xd0/0x130 [ 227.128697][T11991] ? __dev_queue_xmit+0x28b/0x3870 [ 227.128724][T11991] ? __pfx_rtnl_newlink+0x10/0x10 [ 227.128735][T11991] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 227.128748][T11991] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 227.128759][T11991] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 227.128768][T11991] ? ref_tracker_free+0x693/0x840 [ 227.128783][T11991] ? __copy_skb_header+0xa3/0x4a0 [ 227.128798][T11991] ? __pfx_ref_tracker_free+0x10/0x10 [ 227.128819][T11991] netlink_rcv_skb+0x232/0x4b0 [ 227.128831][T11991] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 227.128843][T11991] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 227.128860][T11991] ? netlink_deliver_tap+0x2e/0x1b0 [ 227.128874][T11991] netlink_unicast+0x80f/0x9b0 [ 227.128894][T11991] ? __pfx_netlink_unicast+0x10/0x10 [ 227.128911][T11991] ? netlink_sendmsg+0x650/0xb40 [ 227.128921][T11991] ? skb_put+0x11b/0x210 [ 227.128942][T11991] netlink_sendmsg+0x813/0xb40 [ 227.128958][T11991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.128970][T11991] ? aa_sock_msg_perm+0xf1/0x1b0 [ 227.128988][T11991] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 227.129002][T11991] ____sys_sendmsg+0x972/0x9f0 [ 227.129020][T11991] ? __pfx_____sys_sendmsg+0x10/0x10 [ 227.129038][T11991] ? import_iovec+0x73/0xa0 [ 227.129051][T11991] ___sys_sendmsg+0x2a5/0x360 [ 227.129067][T11991] ? __pfx____sys_sendmsg+0x10/0x10 [ 227.129107][T11991] ? __fget_files+0x2a/0x420 [ 227.129132][T11991] ? __fget_files+0x3a0/0x420 [ 227.129165][T11991] __x64_sys_sendmsg+0x1bd/0x2a0 [ 227.129189][T11991] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 227.129222][T11991] ? __pfx_ksys_write+0x10/0x10 [ 227.129253][T11991] do_syscall_64+0x14d/0xf80 [ 227.129272][T11991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.129290][T11991] ? clear_bhb_loop+0x40/0x90 [ 227.129313][T11991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.129330][T11991] RIP: 0033:0x7f808139c799 [ 227.129348][T11991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.129364][T11991] RSP: 002b:00007f808216e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.129383][T11991] RAX: ffffffffffffffda RBX: 00007f8081615fa0 RCX: 00007f808139c799 [ 227.129397][T11991] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 227.129408][T11991] RBP: 00007f808216e090 R08: 0000000000000000 R09: 0000000000000000 [ 227.129420][T11991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.129430][T11991] R13: 00007f8081616038 R14: 00007f8081615fa0 R15: 00007ffccab68e88 [ 227.129461][T11991] [ 227.532201][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 227.757168][T12009] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 228.066467][T12034] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1983'. [ 228.080461][T12034] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1983'. [ 228.322586][T12054] netlink: 'syz.3.1988': attribute type 1 has an invalid length. [ 228.345916][T12057] xt_hashlimit: size too large, truncated to 1048576 [ 228.389953][T12061] netlink: 'syz.3.1988': attribute type 32 has an invalid length. [ 228.436687][T12061] bond5: option coupled_control: invalid value (22) [ 228.447982][T12061] bond5 (unregistering): Released all slaves [ 229.271389][T12104] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 229.283157][T12104] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 230.037414][T12127] netlink: 'syz.0.2013': attribute type 10 has an invalid length. [ 230.046941][T12127] bond0: (slave wlan1): Opening slave failed [ 230.238703][T12142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.326399][T12146] tipc: Cannot configure node identity twice [ 230.526585][T12164] __nla_validate_parse: 4 callbacks suppressed [ 230.526603][T12164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2023'. [ 230.542468][T12164] bridge_slave_1: left allmulticast mode [ 230.548130][T12164] bridge_slave_1: left promiscuous mode [ 230.574255][T12164] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.605446][T12164] bridge_slave_0: left allmulticast mode [ 230.617516][T12164] bridge_slave_0: left promiscuous mode [ 230.629603][T12164] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.704863][ T30] audit: type=1800 audit(1774321647.509:4): pid=12142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2017" name="memory.events" dev="tmpfs" ino=2071 res=0 errno=0 [ 230.777818][T12178] netlink: 'syz.0.2027': attribute type 12 has an invalid length. [ 230.885785][T12181] netlink: 'syz.0.2028': attribute type 1 has an invalid length. [ 231.002521][T12185] netlink: 'syz.0.2030': attribute type 10 has an invalid length. [ 231.013406][T12185] bond0: (slave wlan1): Opening slave failed [ 231.671610][T12213] netlink: 'syz.1.2038': attribute type 12 has an invalid length. [ 231.840034][T12224] netlink: 'syz.1.2040': attribute type 1 has an invalid length. [ 232.092023][T12231] netlink: 'syz.2.2042': attribute type 10 has an invalid length. [ 232.140279][T12231] wlan1: mtu greater than device maximum [ 232.149441][T12231] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 232.171595][T12231] syzkaller0: left promiscuous mode [ 232.176835][T12231] syzkaller0: left allmulticast mode [ 232.289336][T12236] netlink: 'syz.2.2044': attribute type 2 has an invalid length. [ 232.307462][T12236] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2044'. [ 232.350748][T12239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2044'. [ 232.355219][T12240] netlink: 'syz.1.2046': attribute type 1 has an invalid length. [ 232.496357][T12250] netlink: 'syz.1.2046': attribute type 32 has an invalid length. [ 232.518784][T12252] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.2047'. [ 232.530011][T12252] netlink: 280 bytes leftover after parsing attributes in process `syz.3.2047'. [ 232.606056][T12250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2046'. [ 232.657855][T12261] FAULT_INJECTION: forcing a failure. [ 232.657855][T12261] name failslab, interval 1, probability 0, space 0, times 0 [ 232.671887][T12250] bond8: option coupled_control: invalid value (22) [ 232.682595][T12261] CPU: 0 UID: 0 PID: 12261 Comm: syz.2.2051 Not tainted syzkaller #0 PREEMPT(full) [ 232.682619][T12261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 232.682630][T12261] Call Trace: [ 232.682637][T12261] [ 232.682644][T12261] dump_stack_lvl+0xe8/0x150 [ 232.682674][T12261] should_fail_ex+0x412/0x560 [ 232.682705][T12261] should_failslab+0xa8/0x100 [ 232.682730][T12261] __kmalloc_cache_noprof+0x88/0x660 [ 232.682754][T12261] ? sctp_add_bind_addr+0x8c/0x370 [ 232.682784][T12261] sctp_add_bind_addr+0x8c/0x370 [ 232.682813][T12261] sctp_copy_local_addr_list+0x314/0x4f0 [ 232.682841][T12261] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 232.682866][T12261] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 232.682895][T12261] ? sctp_v4_is_any+0x35/0x60 [ 232.682920][T12261] ? sctp_copy_one_addr+0x93/0x360 [ 232.682947][T12261] sctp_bind_addr_copy+0xb3/0x3c0 [ 232.682981][T12261] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 232.683006][T12261] sctp_connect_new_asoc+0x2ff/0x6b0 [ 232.683028][T12261] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 232.683048][T12261] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 232.683067][T12261] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 232.683084][T12261] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 232.683103][T12261] ? sctp_endpoint_lookup_assoc+0x22f/0x260 [ 232.683125][T12261] __sctp_connect+0x5cb/0xdc0 [ 232.683154][T12261] ? __pfx___sctp_connect+0x10/0x10 [ 232.683172][T12261] ? security_sctp_bind_connect+0x7e/0x2c0 [ 232.683199][T12261] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 232.683226][T12261] sctp_getsockopt_connectx3+0x227/0x360 [ 232.683254][T12261] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 232.683284][T12261] ? sctp_getsockopt+0x12f/0xb90 [ 232.683313][T12261] ? __local_bh_enable_ip+0xd0/0x130 [ 232.683343][T12261] sctp_getsockopt+0x984/0xb90 [ 232.683369][T12261] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 232.683400][T12261] do_sock_getsockopt+0x2d3/0x3f0 [ 232.683426][T12261] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 232.683449][T12261] ? __fget_files+0x3a0/0x420 [ 232.683475][T12261] ? __fget_files+0x2a/0x420 [ 232.683507][T12261] __x64_sys_getsockopt+0x1a4/0x240 [ 232.683537][T12261] do_syscall_64+0x14d/0xf80 [ 232.683558][T12261] ? trace_irq_disable+0x3b/0x150 [ 232.683583][T12261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.683603][T12261] ? clear_bhb_loop+0x40/0x90 [ 232.683625][T12261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.683644][T12261] RIP: 0033:0x7f808139c799 [ 232.683661][T12261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.683677][T12261] RSP: 002b:00007f808216e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 232.683697][T12261] RAX: ffffffffffffffda RBX: 00007f8081615fa0 RCX: 00007f808139c799 [ 232.683710][T12261] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 232.683721][T12261] RBP: 00007f808216e090 R08: 0000200000000100 R09: 0000000000000000 [ 232.683733][T12261] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 232.683743][T12261] R13: 00007f8081616038 R14: 00007f8081615fa0 R15: 00007ffccab68e88 [ 232.683773][T12261] [ 232.685313][T12250] bond8 (unregistering): Released all slaves [ 232.781376][T12270] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2052'. [ 232.845863][T12271] xt_hashlimit: size too large, truncated to 1048576 [ 233.048882][T12271] xt_hashlimit: overflow, try lower: 0/0 [ 233.078420][T12260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.193780][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 233.341225][T12289] bond0: (slave wlan1): Opening slave failed [ 233.531119][T12301] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 233.710041][T12305] tipc: Enabled bearer , priority 0 [ 233.743850][T12305] syzkaller0: MTU too low for tipc bearer [ 233.763152][T12305] tipc: Disabling bearer [ 233.845191][T12318] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2066'. [ 233.859983][T12318] xt_hashlimit: size too large, truncated to 1048576 [ 233.866873][T12318] xt_hashlimit: overflow, try lower: 0/0 [ 233.888414][T12318] syz_tun: entered allmulticast mode [ 233.900829][T12315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.913675][T12315] syz_tun: left allmulticast mode [ 234.264137][T12335] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 234.271477][T12335] IPv6: NLM_F_CREATE should be set when creating new route [ 234.278707][T12335] IPv6: NLM_F_CREATE should be set when creating new route [ 234.308815][T12335] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 234.318711][T12343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2072'. [ 234.645465][T12360] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.2079'. [ 235.948539][T12398] __nla_validate_parse: 1 callbacks suppressed [ 235.948558][T12398] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2093'. [ 235.970702][T12398] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2093'. [ 236.020017][T12402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2092'. [ 236.286949][T12418] validate_nla: 8 callbacks suppressed [ 236.286968][T12418] netlink: 'syz.3.2098': attribute type 1 has an invalid length. [ 236.336681][T12420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2100'. [ 237.159432][T12431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2103'. [ 237.233691][T12435] FAULT_INJECTION: forcing a failure. [ 237.233691][T12435] name failslab, interval 1, probability 0, space 0, times 0 [ 237.301548][T12435] CPU: 0 UID: 0 PID: 12435 Comm: syz.3.2104 Not tainted syzkaller #0 PREEMPT(full) [ 237.301586][T12435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 237.301598][T12435] Call Trace: [ 237.301605][T12435] [ 237.301613][T12435] dump_stack_lvl+0xe8/0x150 [ 237.301647][T12435] should_fail_ex+0x412/0x560 [ 237.301679][T12435] should_failslab+0xa8/0x100 [ 237.301704][T12435] __kmalloc_cache_noprof+0x88/0x660 [ 237.301727][T12435] ? sctp_add_bind_addr+0x8c/0x370 [ 237.301757][T12435] sctp_add_bind_addr+0x8c/0x370 [ 237.301786][T12435] sctp_copy_local_addr_list+0x314/0x4f0 [ 237.301816][T12435] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 237.301840][T12435] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 237.301868][T12435] ? sctp_v6_is_any+0x64/0x80 [ 237.301895][T12435] ? sctp_copy_one_addr+0x93/0x360 [ 237.301922][T12435] sctp_bind_addr_copy+0xb3/0x3c0 [ 237.301946][T12435] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 237.301971][T12435] sctp_connect_new_asoc+0x2ff/0x6b0 [ 237.301994][T12435] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 237.302017][T12435] ? __ipv6_addr_type+0x124/0x2f0 [ 237.302038][T12435] ? sctp_inet6_send_verify+0x6e/0x300 [ 237.302062][T12435] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 237.302083][T12435] __sctp_connect+0x5cb/0xdc0 [ 237.302114][T12435] ? __pfx___sctp_connect+0x10/0x10 [ 237.302131][T12435] ? sctp_inet_connect+0xa0/0x210 [ 237.302160][T12435] ? __local_bh_enable_ip+0xd0/0x130 [ 237.302191][T12435] sctp_inet_connect+0x12e/0x210 [ 237.302222][T12435] __sys_connect+0x312/0x450 [ 237.302247][T12435] ? __pfx___sys_connect+0x10/0x10 [ 237.302280][T12435] ? __pfx_ksys_write+0x10/0x10 [ 237.302309][T12435] __x64_sys_connect+0x7a/0x90 [ 237.302331][T12435] do_syscall_64+0x14d/0xf80 [ 237.302353][T12435] ? trace_irq_disable+0x3b/0x150 [ 237.302380][T12435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.302399][T12435] ? clear_bhb_loop+0x40/0x90 [ 237.302423][T12435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.302442][T12435] RIP: 0033:0x7fe3db39c799 [ 237.302460][T12435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.302476][T12435] RSP: 002b:00007fe3dc27c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 237.302495][T12435] RAX: ffffffffffffffda RBX: 00007fe3db615fa0 RCX: 00007fe3db39c799 [ 237.302509][T12435] RDX: 000000000000001c RSI: 00002000000000c0 RDI: 0000000000000003 [ 237.302521][T12435] RBP: 00007fe3dc27c090 R08: 0000000000000000 R09: 0000000000000000 [ 237.302533][T12435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 237.302543][T12435] R13: 00007fe3db616038 R14: 00007fe3db615fa0 R15: 00007ffc7107e118 [ 237.302582][T12435] [ 237.825570][T12462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2113'. [ 237.848071][T12464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2111'. [ 237.871509][T12443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2110'. [ 237.960356][T12463] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 237.993993][T12463] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2112'. [ 238.038162][T12463] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 238.095851][T12475] netlink: 'syz.4.2115': attribute type 12 has an invalid length. [ 238.193815][T12479] netlink: 'syz.3.2116': attribute type 12 has an invalid length. [ 238.202573][T12478] netlink: 'syz.0.2117': attribute type 10 has an invalid length. [ 238.218616][T12478] bond0: (slave wlan1): Opening slave failed [ 238.548172][T12501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2125'. [ 238.653953][T12508] x_tables: unsorted entry at hook 2 [ 238.959848][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 239.006406][T12532] FAULT_INJECTION: forcing a failure. [ 239.006406][T12532] name failslab, interval 1, probability 0, space 0, times 0 [ 239.024806][T12532] CPU: 0 UID: 0 PID: 12532 Comm: syz.0.2134 Not tainted syzkaller #0 PREEMPT(full) [ 239.024831][T12532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 239.024842][T12532] Call Trace: [ 239.024850][T12532] [ 239.024858][T12532] dump_stack_lvl+0xe8/0x150 [ 239.024889][T12532] should_fail_ex+0x412/0x560 [ 239.024921][T12532] should_failslab+0xa8/0x100 [ 239.024945][T12532] ? __kernfs_new_node+0xe9/0x8e0 [ 239.024973][T12532] kmem_cache_alloc_noprof+0x87/0x650 [ 239.025001][T12532] __kernfs_new_node+0xe9/0x8e0 [ 239.025034][T12532] ? __pfx___kernfs_new_node+0x10/0x10 [ 239.025061][T12532] ? kernfs_root+0x1c/0x230 [ 239.025094][T12532] ? kernfs_root+0x1c/0x230 [ 239.025117][T12532] ? kernfs_root+0x1c/0x230 [ 239.025141][T12532] ? kernfs_root+0x1c/0x230 [ 239.025172][T12532] kernfs_new_node+0x102/0x210 [ 239.025204][T12532] __kernfs_create_file+0x4b/0x2e0 [ 239.025229][T12532] sysfs_add_file_mode_ns+0x238/0x300 [ 239.025260][T12532] internal_create_group+0x673/0x1180 [ 239.025303][T12532] ? __pfx_internal_create_group+0x10/0x10 [ 239.025327][T12532] ? kernfs_add_one+0x477/0x5c0 [ 239.025358][T12532] ? up_write+0x1ab/0x410 [ 239.025380][T12532] sysfs_create_groups+0x59/0x120 [ 239.025410][T12532] device_add_attrs+0x1bf/0x5b0 [ 239.025431][T12532] ? kernfs_put+0x40e/0x470 [ 239.025460][T12532] ? __pfx_device_add_attrs+0x10/0x10 [ 239.025481][T12532] ? kobject_put+0x516/0x560 [ 239.025511][T12532] ? device_add_class_symlinks+0x21f/0x240 [ 239.025537][T12532] device_add+0x496/0xb70 [ 239.025557][T12532] ? device_initialize+0x24b/0x440 [ 239.025581][T12532] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 239.025609][T12532] wakeup_source_register+0x18a/0x380 [ 239.025643][T12532] ep_insert+0xf34/0x1a40 [ 239.025684][T12532] ? __pfx_ep_insert+0x10/0x10 [ 239.025722][T12532] ? bpf_lsm_capable+0x9/0x20 [ 239.025756][T12532] do_epoll_ctl+0x7f4/0xe80 [ 239.025791][T12532] __x64_sys_epoll_ctl+0x165/0x1b0 [ 239.025822][T12532] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 239.025860][T12532] do_syscall_64+0x14d/0xf80 [ 239.025880][T12532] ? trace_irq_disable+0x3b/0x150 [ 239.025906][T12532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.025925][T12532] ? clear_bhb_loop+0x40/0x90 [ 239.025948][T12532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.025966][T12532] RIP: 0033:0x7f221579c799 [ 239.025984][T12532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.026000][T12532] RSP: 002b:00007f2216618028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 239.026019][T12532] RAX: ffffffffffffffda RBX: 00007f2215a15fa0 RCX: 00007f221579c799 [ 239.026033][T12532] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 239.026044][T12532] RBP: 00007f2216618090 R08: 0000000000000000 R09: 0000000000000000 [ 239.026055][T12532] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000002 [ 239.026066][T12532] R13: 00007f2215a16038 R14: 00007f2215a15fa0 R15: 00007ffc1bd5ed18 [ 239.026098][T12532] [ 239.803517][T12565] veth0: entered promiscuous mode [ 239.810761][T12565] gretap0: entered promiscuous mode [ 239.817126][T12565] debugfs: 'hsr1' already exists in 'hsr' [ 239.825823][T12565] Cannot create hsr debugfs directory [ 239.856537][T12567] ip6gretap0: entered allmulticast mode [ 240.216831][T12595] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 240.322122][T12603] netlink: 'syz.2.2159': attribute type 3 has an invalid length. [ 240.342216][T12602] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 240.349323][T12603] netlink: 'syz.2.2159': attribute type 1 has an invalid length. [ 240.778695][T12632] macvlan3: entered allmulticast mode [ 241.132707][T12657] netlink: 'syz.1.2180': attribute type 2 has an invalid length. [ 241.523251][T12688] FAULT_INJECTION: forcing a failure. [ 241.523251][T12688] name failslab, interval 1, probability 0, space 0, times 0 [ 241.536331][T12688] CPU: 0 UID: 0 PID: 12688 Comm: syz.4.2188 Not tainted syzkaller #0 PREEMPT(full) [ 241.536357][T12688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 241.536380][T12688] Call Trace: [ 241.536387][T12688] [ 241.536396][T12688] dump_stack_lvl+0xe8/0x150 [ 241.536429][T12688] should_fail_ex+0x412/0x560 [ 241.536460][T12688] should_failslab+0xa8/0x100 [ 241.536484][T12688] ? sctp_get_port_local+0x6f2/0x1730 [ 241.536503][T12688] kmem_cache_alloc_noprof+0x87/0x650 [ 241.536531][T12688] sctp_get_port_local+0x6f2/0x1730 [ 241.536561][T12688] ? __pfx_sctp_get_port_local+0x10/0x10 [ 241.536584][T12688] ? sctp_bind_addr_match+0x28b/0x2b0 [ 241.536615][T12688] sctp_do_bind+0x4f1/0x9d0 [ 241.536646][T12688] sctp_connect_new_asoc+0x270/0x6b0 [ 241.536666][T12688] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 241.536690][T12688] ? __local_bh_enable_ip+0xd0/0x130 [ 241.536713][T12688] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 241.536735][T12688] ? security_sctp_bind_connect+0x7e/0x2c0 [ 241.536760][T12688] sctp_sendmsg+0x1528/0x2c10 [ 241.536802][T12688] ? __pfx_sctp_sendmsg+0x10/0x10 [ 241.536863][T12688] ? aa_sk_perm+0x6d5/0x900 [ 241.536898][T12688] ? __pfx_aa_sk_perm+0x10/0x10 [ 241.536927][T12688] ? sock_rps_record_flow+0x19/0x350 [ 241.536956][T12688] ? inet_sendmsg+0x2f4/0x370 [ 241.536980][T12688] ____sys_sendmsg+0x80a/0x9f0 [ 241.537010][T12688] ? __pfx_____sys_sendmsg+0x10/0x10 [ 241.537038][T12688] ? import_iovec+0x73/0xa0 [ 241.537062][T12688] ___sys_sendmsg+0x2a5/0x360 [ 241.537089][T12688] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.537117][T12688] ? kstrtouint+0x6e/0xe0 [ 241.537165][T12688] ? __fget_files+0x2a/0x420 [ 241.537191][T12688] ? __fget_files+0x3a0/0x420 [ 241.537226][T12688] __sys_sendmmsg+0x27c/0x4e0 [ 241.537253][T12688] ? __pfx___sys_sendmmsg+0x10/0x10 [ 241.537274][T12688] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 241.537320][T12688] ? ksys_write+0x242/0x270 [ 241.537340][T12688] ? __pfx_ksys_write+0x10/0x10 [ 241.537364][T12688] __x64_sys_sendmmsg+0xa0/0xc0 [ 241.537390][T12688] do_syscall_64+0x14d/0xf80 [ 241.537411][T12688] ? trace_irq_disable+0x3b/0x150 [ 241.537437][T12688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.537455][T12688] ? clear_bhb_loop+0x40/0x90 [ 241.537478][T12688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.537496][T12688] RIP: 0033:0x7f2874b9c799 [ 241.537514][T12688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.537531][T12688] RSP: 002b:00007f2875a13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 241.537550][T12688] RAX: ffffffffffffffda RBX: 00007f2874e15fa0 RCX: 00007f2874b9c799 [ 241.537564][T12688] RDX: 0000000000000002 RSI: 0000200000003cc0 RDI: 0000000000000003 [ 241.537575][T12688] RBP: 00007f2875a13090 R08: 0000000000000000 R09: 0000000000000000 [ 241.537587][T12688] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.537599][T12688] R13: 00007f2874e16038 R14: 00007f2874e15fa0 R15: 00007ffe43fe5288 [ 241.537626][T12688] [ 241.558457][T12681] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 241.654897][T12690] __nla_validate_parse: 11 callbacks suppressed [ 241.654917][T12690] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2186'. [ 241.657045][T12681] IPv6: NLM_F_CREATE should be set when creating new route [ 241.878872][T12690] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 241.989187][T12698] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2191'. [ 242.031295][T12698] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2191'. [ 242.145104][T12713] netlink: 'syz.1.2195': attribute type 1 has an invalid length. [ 242.155235][T12713] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2195'. [ 242.155825][T12717] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2197'. [ 242.356583][T12729] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2201'. [ 242.558925][T12729] 8021q: adding VLAN 0 to HW filter on device bond3 [ 242.851219][T12722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2198'. [ 243.071280][T12759] gtp0: entered promiscuous mode [ 243.086522][T12759] gtp0: entered allmulticast mode [ 243.470438][T12782] netlink: 292 bytes leftover after parsing attributes in process `syz.3.2218'. [ 243.661507][T12790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2222'. [ 243.989786][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 244.012531][T12805] netlink: 'syz.0.2228': attribute type 1 has an invalid length. [ 244.300665][T12810] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 244.302386][T12814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2229'. [ 244.310089][T12810] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 244.649832][T12829] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 244.828576][T12836] netlink: 'syz.1.2242': attribute type 1 has an invalid length. [ 244.978387][T12852] netlink: 'syz.1.2246': attribute type 1 has an invalid length. [ 245.628389][T12892] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 245.635681][T12892] IPv6: NLM_F_CREATE should be set when creating new route [ 245.651063][T12892] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 245.815743][T12890] openvswitch: netlink: IPv4 tun info is not correct [ 246.735952][T12936] __nla_validate_parse: 10 callbacks suppressed [ 246.735966][T12936] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2271'. [ 246.756586][T12936] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2271'. [ 247.852601][T12967] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2283'. [ 247.894777][T12967] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2283'. [ 247.898353][T12971] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2284'. [ 247.935515][T12971] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2284'. [ 247.946673][T12972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2284'. [ 247.957367][T12972] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2284'. [ 248.503806][T12999] bond8: option lacp_rate: invalid value (128) [ 248.520893][T12999] bond8 (unregistering): Released all slaves [ 248.846534][T13015] FAULT_INJECTION: forcing a failure. [ 248.846534][T13015] name failslab, interval 1, probability 0, space 0, times 0 [ 248.860346][T13015] CPU: 0 UID: 0 PID: 13015 Comm: syz.2.2296 Not tainted syzkaller #0 PREEMPT(full) [ 248.860370][T13015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 248.860381][T13015] Call Trace: [ 248.860388][T13015] [ 248.860396][T13015] dump_stack_lvl+0xe8/0x150 [ 248.860429][T13015] should_fail_ex+0x412/0x560 [ 248.860461][T13015] should_failslab+0xa8/0x100 [ 248.860486][T13015] __kmalloc_cache_noprof+0x88/0x660 [ 248.860509][T13015] ? sctp_add_bind_addr+0x8c/0x370 [ 248.860537][T13015] sctp_add_bind_addr+0x8c/0x370 [ 248.860561][T13015] sctp_copy_local_addr_list+0x314/0x4f0 [ 248.860589][T13015] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 248.860614][T13015] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 248.860644][T13015] ? sctp_v4_is_any+0x35/0x60 [ 248.860669][T13015] ? sctp_copy_one_addr+0x93/0x360 [ 248.860696][T13015] sctp_bind_addr_copy+0xb3/0x3c0 [ 248.860722][T13015] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 248.860748][T13015] sctp_connect_new_asoc+0x2ff/0x6b0 [ 248.860770][T13015] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 248.860788][T13015] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 248.860807][T13015] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 248.860825][T13015] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 248.860845][T13015] ? sctp_endpoint_lookup_assoc+0x22f/0x260 [ 248.860867][T13015] __sctp_connect+0x5cb/0xdc0 [ 248.860898][T13015] ? __pfx___sctp_connect+0x10/0x10 [ 248.860916][T13015] ? security_sctp_bind_connect+0x7e/0x2c0 [ 248.860942][T13015] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 248.860969][T13015] sctp_getsockopt_connectx3+0x227/0x360 [ 248.860998][T13015] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 248.861027][T13015] ? sctp_getsockopt+0x12f/0xb90 [ 248.861057][T13015] ? __local_bh_enable_ip+0xd0/0x130 [ 248.861087][T13015] sctp_getsockopt+0x984/0xb90 [ 248.861113][T13015] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 248.861144][T13015] do_sock_getsockopt+0x2d3/0x3f0 [ 248.861170][T13015] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 248.861201][T13015] ? __fget_files+0x3a0/0x420 [ 248.861227][T13015] ? __fget_files+0x2a/0x420 [ 248.861260][T13015] __x64_sys_getsockopt+0x1a4/0x240 [ 248.861292][T13015] do_syscall_64+0x14d/0xf80 [ 248.861313][T13015] ? trace_irq_disable+0x3b/0x150 [ 248.861339][T13015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.861358][T13015] ? clear_bhb_loop+0x40/0x90 [ 248.861382][T13015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.861400][T13015] RIP: 0033:0x7f808139c799 [ 248.861417][T13015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.861432][T13015] RSP: 002b:00007f808216e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 248.861452][T13015] RAX: ffffffffffffffda RBX: 00007f8081615fa0 RCX: 00007f808139c799 [ 248.861465][T13015] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 248.861475][T13015] RBP: 00007f808216e090 R08: 0000200000000100 R09: 0000000000000000 [ 248.861487][T13015] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 248.861499][T13015] R13: 00007f8081616038 R14: 00007f8081615fa0 R15: 00007ffccab68e88 [ 248.861530][T13015] [ 249.200117][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 249.281683][T13019] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2298'. [ 249.304332][T13019] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2298'. [ 249.350827][T13022] FAULT_INJECTION: forcing a failure. [ 249.350827][T13022] name failslab, interval 1, probability 0, space 0, times 0 [ 249.409563][T13022] CPU: 0 UID: 0 PID: 13022 Comm: syz.2.2299 Not tainted syzkaller #0 PREEMPT(full) [ 249.409588][T13022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 249.409599][T13022] Call Trace: [ 249.409606][T13022] [ 249.409615][T13022] dump_stack_lvl+0xe8/0x150 [ 249.409648][T13022] should_fail_ex+0x412/0x560 [ 249.409679][T13022] should_failslab+0xa8/0x100 [ 249.409705][T13022] __kmalloc_cache_noprof+0x88/0x660 [ 249.409728][T13022] ? __hw_addr_add_ex+0x1dc/0x650 [ 249.409757][T13022] __hw_addr_add_ex+0x1dc/0x650 [ 249.409782][T13022] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 249.409811][T13022] dev_addr_init+0x15e/0x240 [ 249.409838][T13022] ? __pfx_dev_addr_init+0x10/0x10 [ 249.409864][T13022] ? alloc_netdev_mqs+0xa6/0x11b0 [ 249.409898][T13022] alloc_netdev_mqs+0x2b1/0x11b0 [ 249.409923][T13022] ? __pfx_ip6gre_tap_setup+0x10/0x10 [ 249.409954][T13022] rtnl_create_link+0x31f/0xd70 [ 249.409987][T13022] rtnl_newlink_create+0x277/0xb70 [ 249.410009][T13022] ? __pfx___nla_validate_parse+0x10/0x10 [ 249.410039][T13022] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 249.410064][T13022] ? __pfx___mutex_lock+0x10/0x10 [ 249.410097][T13022] ? ns_capable+0x89/0xe0 [ 249.410124][T13022] rtnl_newlink+0x1666/0x1be0 [ 249.410160][T13022] ? __pfx_rtnl_newlink+0x10/0x10 [ 249.410176][T13022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.410231][T13022] ? kasan_quarantine_put+0xbb/0x1f0 [ 249.410251][T13022] ? lockdep_hardirqs_on+0x7a/0x110 [ 249.410284][T13022] ? kmem_cache_free+0x187/0x630 [ 249.410304][T13022] ? nlmon_xmit+0xb0/0x100 [ 249.410339][T13022] ? __lock_acquire+0x6b5/0x2cf0 [ 249.410369][T13022] ? __local_bh_enable_ip+0xd0/0x130 [ 249.410392][T13022] ? lockdep_hardirqs_on+0x7a/0x110 [ 249.410412][T13022] ? __dev_queue_xmit+0x28b/0x3870 [ 249.410434][T13022] ? __local_bh_enable_ip+0xd0/0x130 [ 249.410455][T13022] ? __dev_queue_xmit+0x28b/0x3870 [ 249.410505][T13022] ? __pfx_rtnl_newlink+0x10/0x10 [ 249.410523][T13022] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 249.410547][T13022] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 249.410565][T13022] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 249.410582][T13022] ? ref_tracker_free+0x693/0x840 [ 249.410608][T13022] ? __copy_skb_header+0xa3/0x4a0 [ 249.410632][T13022] ? __pfx_ref_tracker_free+0x10/0x10 [ 249.410671][T13022] netlink_rcv_skb+0x232/0x4b0 [ 249.410692][T13022] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 249.410714][T13022] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 249.410744][T13022] ? netlink_deliver_tap+0x2e/0x1b0 [ 249.410771][T13022] netlink_unicast+0x80f/0x9b0 [ 249.410807][T13022] ? __pfx_netlink_unicast+0x10/0x10 [ 249.410836][T13022] ? netlink_sendmsg+0x650/0xb40 [ 249.410854][T13022] ? skb_put+0x11b/0x210 [ 249.410878][T13022] netlink_sendmsg+0x813/0xb40 [ 249.410907][T13022] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.410931][T13022] ? aa_sock_msg_perm+0xf1/0x1b0 [ 249.410960][T13022] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 249.410984][T13022] ____sys_sendmsg+0x972/0x9f0 [ 249.411016][T13022] ? __pfx_____sys_sendmsg+0x10/0x10 [ 249.411048][T13022] ? import_iovec+0x73/0xa0 [ 249.411072][T13022] ___sys_sendmsg+0x2a5/0x360 [ 249.411101][T13022] ? __pfx____sys_sendmsg+0x10/0x10 [ 249.411160][T13022] ? __fget_files+0x2a/0x420 [ 249.411186][T13022] ? __fget_files+0x3a0/0x420 [ 249.411223][T13022] __x64_sys_sendmsg+0x1bd/0x2a0 [ 249.411249][T13022] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 249.411287][T13022] ? __pfx_ksys_write+0x10/0x10 [ 249.411319][T13022] do_syscall_64+0x14d/0xf80 [ 249.411339][T13022] ? trace_irq_disable+0x3b/0x150 [ 249.411365][T13022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.411384][T13022] ? clear_bhb_loop+0x40/0x90 [ 249.411407][T13022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.411425][T13022] RIP: 0033:0x7f808139c799 [ 249.411443][T13022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.411459][T13022] RSP: 002b:00007f808216e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.411479][T13022] RAX: ffffffffffffffda RBX: 00007f8081615fa0 RCX: 00007f808139c799 [ 249.411492][T13022] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000003 [ 249.411504][T13022] RBP: 00007f808216e090 R08: 0000000000000000 R09: 0000000000000000 [ 249.411515][T13022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 249.411526][T13022] R13: 00007f8081616038 R14: 00007f8081615fa0 R15: 00007ffccab68e88 [ 249.411553][T13022] [ 250.061697][T13038] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20004 [ 250.321959][T13047] xt_hashlimit: size too large, truncated to 1048576 [ 250.328734][T13047] xt_hashlimit: overflow, try lower: 0/0 [ 250.336154][T13047] syz_tun: entered allmulticast mode [ 250.354701][T13046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.405095][T13046] syz_tun: left allmulticast mode [ 250.640998][T13062] FAULT_INJECTION: forcing a failure. [ 250.640998][T13062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.692448][T13062] CPU: 0 UID: 0 PID: 13062 Comm: syz.4.2309 Not tainted syzkaller #0 PREEMPT(full) [ 250.692475][T13062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 250.692487][T13062] Call Trace: [ 250.692495][T13062] [ 250.692503][T13062] dump_stack_lvl+0xe8/0x150 [ 250.692534][T13062] should_fail_ex+0x412/0x560 [ 250.692566][T13062] _copy_from_user+0x2d/0xb0 [ 250.692588][T13062] __copy_msghdr+0x3c5/0x5b0 [ 250.692616][T13062] ___sys_sendmsg+0x213/0x360 [ 250.692644][T13062] ? __pfx____sys_sendmsg+0x10/0x10 [ 250.692700][T13062] ? __fget_files+0x2a/0x420 [ 250.692726][T13062] ? __fget_files+0x3a0/0x420 [ 250.692763][T13062] __x64_sys_sendmsg+0x1bd/0x2a0 [ 250.692788][T13062] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 250.692820][T13062] ? __pfx_ksys_write+0x10/0x10 [ 250.692852][T13062] do_syscall_64+0x14d/0xf80 [ 250.692873][T13062] ? trace_irq_disable+0x3b/0x150 [ 250.692899][T13062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.692918][T13062] ? clear_bhb_loop+0x40/0x90 [ 250.692939][T13062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.692958][T13062] RIP: 0033:0x7f2874b9c799 [ 250.692976][T13062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.692991][T13062] RSP: 002b:00007f2875a13028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.693011][T13062] RAX: ffffffffffffffda RBX: 00007f2874e15fa0 RCX: 00007f2874b9c799 [ 250.693024][T13062] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 250.693036][T13062] RBP: 00007f2875a13090 R08: 0000000000000000 R09: 0000000000000000 [ 250.693048][T13062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.693059][T13062] R13: 00007f2874e16038 R14: 00007f2874e15fa0 R15: 00007ffe43fe5288 [ 250.693089][T13062] [ 251.257021][ T13] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.270054][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.394683][T13082] FAULT_INJECTION: forcing a failure. [ 251.394683][T13082] name failslab, interval 1, probability 0, space 0, times 0 [ 251.440793][T13082] CPU: 1 UID: 0 PID: 13082 Comm: syz.0.2318 Not tainted syzkaller #0 PREEMPT(full) [ 251.440822][T13082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 251.440834][T13082] Call Trace: [ 251.440842][T13082] [ 251.440850][T13082] dump_stack_lvl+0xe8/0x150 [ 251.440882][T13082] should_fail_ex+0x412/0x560 [ 251.440914][T13082] should_failslab+0xa8/0x100 [ 251.440940][T13082] __kmalloc_cache_noprof+0x88/0x660 [ 251.440961][T13082] ? __asan_memset+0x22/0x50 [ 251.440979][T13082] ? alloc_netdev_mqs+0xb97/0x11b0 [ 251.441005][T13082] ? __xdp_rxq_info_reg+0x171/0x280 [ 251.441031][T13082] alloc_netdev_mqs+0xb97/0x11b0 [ 251.441064][T13082] rtnl_create_link+0x31f/0xd70 [ 251.441096][T13082] rtnl_newlink_create+0x277/0xb70 [ 251.441118][T13082] ? __pfx___nla_validate_parse+0x10/0x10 [ 251.441145][T13082] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 251.441170][T13082] ? __pfx___mutex_lock+0x10/0x10 [ 251.441201][T13082] ? full_name_hash+0x89/0xe0 [ 251.441224][T13082] ? __dev_get_by_name+0x36/0x140 [ 251.441253][T13082] rtnl_newlink+0x1666/0x1be0 [ 251.441288][T13082] ? __pfx_rtnl_newlink+0x10/0x10 [ 251.441305][T13082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.441359][T13082] ? kasan_quarantine_put+0xbb/0x1f0 [ 251.441379][T13082] ? lockdep_hardirqs_on+0x7a/0x110 [ 251.441403][T13082] ? kmem_cache_free+0x187/0x630 [ 251.441422][T13082] ? nlmon_xmit+0xb0/0x100 [ 251.441465][T13082] ? __lock_acquire+0x6b5/0x2cf0 [ 251.441493][T13082] ? __local_bh_enable_ip+0xd0/0x130 [ 251.441518][T13082] ? lockdep_hardirqs_on+0x7a/0x110 [ 251.441539][T13082] ? __dev_queue_xmit+0x28b/0x3870 [ 251.441562][T13082] ? __local_bh_enable_ip+0xd0/0x130 [ 251.441582][T13082] ? __dev_queue_xmit+0x28b/0x3870 [ 251.441631][T13082] ? __pfx_rtnl_newlink+0x10/0x10 [ 251.441651][T13082] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 251.441675][T13082] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 251.441695][T13082] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 251.441712][T13082] ? ref_tracker_free+0x693/0x840 [ 251.441739][T13082] ? __copy_skb_header+0xa3/0x4a0 [ 251.441764][T13082] ? __pfx_ref_tracker_free+0x10/0x10 [ 251.441802][T13082] netlink_rcv_skb+0x232/0x4b0 [ 251.441823][T13082] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 251.441844][T13082] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 251.441870][T13082] ? netlink_deliver_tap+0x2e/0x1b0 [ 251.441895][T13082] netlink_unicast+0x80f/0x9b0 [ 251.441926][T13082] ? __pfx_netlink_unicast+0x10/0x10 [ 251.441953][T13082] ? netlink_sendmsg+0x650/0xb40 [ 251.441968][T13082] ? skb_put+0x11b/0x210 [ 251.441992][T13082] netlink_sendmsg+0x813/0xb40 [ 251.442021][T13082] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.442044][T13082] ? aa_sock_msg_perm+0xf1/0x1b0 [ 251.442071][T13082] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 251.442096][T13082] ____sys_sendmsg+0x972/0x9f0 [ 251.442127][T13082] ? __pfx_____sys_sendmsg+0x10/0x10 [ 251.442158][T13082] ? import_iovec+0x73/0xa0 [ 251.442181][T13082] ___sys_sendmsg+0x2a5/0x360 [ 251.442208][T13082] ? __pfx____sys_sendmsg+0x10/0x10 [ 251.442263][T13082] ? __fget_files+0x2a/0x420 [ 251.442289][T13082] ? __fget_files+0x3a0/0x420 [ 251.442332][T13082] __x64_sys_sendmsg+0x1bd/0x2a0 [ 251.442360][T13082] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 251.442393][T13082] ? __pfx_ksys_write+0x10/0x10 [ 251.442426][T13082] do_syscall_64+0x14d/0xf80 [ 251.442454][T13082] ? trace_irq_disable+0x3b/0x150 [ 251.442480][T13082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.442499][T13082] ? clear_bhb_loop+0x40/0x90 [ 251.442520][T13082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.442537][T13082] RIP: 0033:0x7f221579c799 [ 251.442555][T13082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.442570][T13082] RSP: 002b:00007f2216618028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.442591][T13082] RAX: ffffffffffffffda RBX: 00007f2215a15fa0 RCX: 00007f221579c799 [ 251.442604][T13082] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 251.442616][T13082] RBP: 00007f2216618090 R08: 0000000000000000 R09: 0000000000000000 [ 251.442627][T13082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 251.442636][T13082] R13: 00007f2215a16038 R14: 00007f2215a15fa0 R15: 00007ffc1bd5ed18 [ 251.442666][T13082] [ 251.882210][T13088] __nla_validate_parse: 5 callbacks suppressed [ 251.882229][T13088] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2320'. [ 251.920670][T13088] xt_hashlimit: size too large, truncated to 1048576 [ 251.927383][T13088] xt_hashlimit: overflow, try lower: 0/0 [ 251.949310][T13090] netlink: 'syz.1.2323': attribute type 5 has an invalid length. [ 251.966639][T13087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.116102][T13101] FAULT_INJECTION: forcing a failure. [ 252.116102][T13101] name failslab, interval 1, probability 0, space 0, times 0 [ 252.144851][T13097] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 252.159981][T13097] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2325'. [ 252.166425][T13101] CPU: 1 UID: 0 PID: 13101 Comm: syz.3.2327 Not tainted syzkaller #0 PREEMPT(full) [ 252.166449][T13101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 252.166460][T13101] Call Trace: [ 252.166468][T13101] [ 252.166477][T13101] dump_stack_lvl+0xe8/0x150 [ 252.166509][T13101] should_fail_ex+0x412/0x560 [ 252.166540][T13101] should_failslab+0xa8/0x100 [ 252.166566][T13101] __kmalloc_cache_noprof+0x88/0x660 [ 252.166589][T13101] ? sctp_add_bind_addr+0x8c/0x370 [ 252.166619][T13101] sctp_add_bind_addr+0x8c/0x370 [ 252.166648][T13101] sctp_copy_local_addr_list+0x314/0x4f0 [ 252.166676][T13101] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 252.166702][T13101] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 252.166729][T13101] ? sctp_v6_is_any+0x64/0x80 [ 252.166755][T13101] ? sctp_copy_one_addr+0x93/0x360 [ 252.166782][T13101] sctp_bind_addr_copy+0xb3/0x3c0 [ 252.166808][T13101] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 252.166833][T13101] sctp_connect_new_asoc+0x2ff/0x6b0 [ 252.166855][T13101] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 252.166877][T13101] ? __ipv6_addr_type+0x124/0x2f0 [ 252.166899][T13101] ? sctp_inet6_send_verify+0x6e/0x300 [ 252.166922][T13101] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 252.166943][T13101] __sctp_connect+0x5cb/0xdc0 [ 252.166972][T13101] ? __pfx___sctp_connect+0x10/0x10 [ 252.166988][T13101] ? sctp_inet_connect+0xa0/0x210 [ 252.167016][T13101] ? __local_bh_enable_ip+0xd0/0x130 [ 252.167046][T13101] sctp_inet_connect+0x12e/0x210 [ 252.167074][T13101] __sys_connect+0x312/0x450 [ 252.167098][T13101] ? __pfx___sys_connect+0x10/0x10 [ 252.167130][T13101] ? __pfx_ksys_write+0x10/0x10 [ 252.167158][T13101] __x64_sys_connect+0x7a/0x90 [ 252.167179][T13101] do_syscall_64+0x14d/0xf80 [ 252.167199][T13101] ? trace_irq_disable+0x3b/0x150 [ 252.167225][T13101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.167243][T13101] ? clear_bhb_loop+0x40/0x90 [ 252.167266][T13101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.167284][T13101] RIP: 0033:0x7fe3db39c799 [ 252.167302][T13101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.167318][T13101] RSP: 002b:00007fe3dc27c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 252.167338][T13101] RAX: ffffffffffffffda RBX: 00007fe3db615fa0 RCX: 00007fe3db39c799 [ 252.167358][T13101] RDX: 000000000000001c RSI: 00002000000000c0 RDI: 0000000000000003 [ 252.167370][T13101] RBP: 00007fe3dc27c090 R08: 0000000000000000 R09: 0000000000000000 [ 252.167382][T13101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 252.167393][T13101] R13: 00007fe3db616038 R14: 00007fe3db615fa0 R15: 00007ffc7107e118 [ 252.167423][T13101] [ 252.500822][T13097] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 252.521900][T13117] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2333'. [ 252.531046][T13117] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2333'. [ 252.634732][T13126] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2335'. [ 252.662530][T13126] xt_hashlimit: size too large, truncated to 1048576 [ 252.670743][T13126] xt_hashlimit: overflow, try lower: 0/0 [ 252.683339][T13125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.828139][T13141] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2342'. [ 252.845597][T13141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2342'. [ 253.050661][T13150] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 253.068665][T13150] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2345'. [ 253.094926][T13150] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 253.235640][T13166] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2350'. [ 253.249803][T13166] xt_hashlimit: size too large, truncated to 1048576 [ 253.262232][T13166] xt_hashlimit: overflow, try lower: 0/0 [ 253.270892][T13166] syz_tun: entered allmulticast mode [ 253.289758][T13165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.308657][T13165] syz_tun: left allmulticast mode [ 253.623697][T13193] netlink: 'syz.2.2359': attribute type 1 has an invalid length. [ 253.634569][T13193] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2359'. [ 253.643854][T13193] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.742441][T13200] FAULT_INJECTION: forcing a failure. [ 253.742441][T13200] name failslab, interval 1, probability 0, space 0, times 0 [ 253.755706][T13200] CPU: 0 UID: 0 PID: 13200 Comm: syz.2.2362 Not tainted syzkaller #0 PREEMPT(full) [ 253.755722][T13200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 253.755729][T13200] Call Trace: [ 253.755734][T13200] [ 253.755740][T13200] dump_stack_lvl+0xe8/0x150 [ 253.755762][T13200] should_fail_ex+0x412/0x560 [ 253.755781][T13200] should_failslab+0xa8/0x100 [ 253.755794][T13200] ? __kernfs_new_node+0xe9/0x8e0 [ 253.755811][T13200] kmem_cache_alloc_noprof+0x87/0x650 [ 253.755827][T13200] __kernfs_new_node+0xe9/0x8e0 [ 253.755845][T13200] ? __pfx___kernfs_new_node+0x10/0x10 [ 253.755861][T13200] ? kernfs_root+0x1c/0x230 [ 253.755879][T13200] ? kernfs_root+0x1c/0x230 [ 253.755893][T13200] ? kernfs_root+0x1c/0x230 [ 253.755907][T13200] ? kernfs_root+0x1c/0x230 [ 253.755924][T13200] kernfs_new_node+0x102/0x210 [ 253.755943][T13200] __kernfs_create_file+0x4b/0x2e0 [ 253.755956][T13200] sysfs_add_file_mode_ns+0x238/0x300 [ 253.755973][T13200] internal_create_group+0x673/0x1180 [ 253.755997][T13200] ? __pfx_internal_create_group+0x10/0x10 [ 253.756011][T13200] ? kernfs_add_one+0x477/0x5c0 [ 253.756028][T13200] ? up_write+0x1ab/0x410 [ 253.756041][T13200] sysfs_create_groups+0x59/0x120 [ 253.756058][T13200] device_add_attrs+0x1bf/0x5b0 [ 253.756071][T13200] ? kernfs_put+0x40e/0x470 [ 253.756086][T13200] ? __pfx_device_add_attrs+0x10/0x10 [ 253.756098][T13200] ? kobject_put+0x516/0x560 [ 253.756115][T13200] ? device_add_class_symlinks+0x21f/0x240 [ 253.756129][T13200] device_add+0x496/0xb70 [ 253.756143][T13200] ? device_initialize+0x24b/0x440 [ 253.756166][T13200] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 253.756193][T13200] wakeup_source_register+0x18a/0x380 [ 253.756217][T13200] ep_insert+0xf34/0x1a40 [ 253.756267][T13200] ? __pfx_ep_insert+0x10/0x10 [ 253.756306][T13200] ? bpf_lsm_capable+0x9/0x20 [ 253.756337][T13200] do_epoll_ctl+0x7f4/0xe80 [ 253.756358][T13200] __x64_sys_epoll_ctl+0x165/0x1b0 [ 253.756376][T13200] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 253.756398][T13200] do_syscall_64+0x14d/0xf80 [ 253.756411][T13200] ? trace_irq_disable+0x3b/0x150 [ 253.756426][T13200] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.756437][T13200] ? clear_bhb_loop+0x40/0x90 [ 253.756450][T13200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.756461][T13200] RIP: 0033:0x7f808139c799 [ 253.756473][T13200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.756482][T13200] RSP: 002b:00007f808216e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 253.756494][T13200] RAX: ffffffffffffffda RBX: 00007f8081615fa0 RCX: 00007f808139c799 [ 253.756501][T13200] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 253.756508][T13200] RBP: 00007f808216e090 R08: 0000000000000000 R09: 0000000000000000 [ 253.756518][T13200] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000002 [ 253.756530][T13200] R13: 00007f8081616038 R14: 00007f8081615fa0 R15: 00007ffccab68e88 [ 253.756559][T13200] [ 254.352128][T13214] sctp: [Deprecated]: syz.2.2366 (pid 13214) Use of int in max_burst socket option deprecated. [ 254.352128][T13214] Use struct sctp_assoc_value instead [ 254.407902][T13214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.801778][T13241] FAULT_INJECTION: forcing a failure. [ 254.801778][T13241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.851775][T13241] CPU: 0 UID: 0 PID: 13241 Comm: syz.2.2372 Not tainted syzkaller #0 PREEMPT(full) [ 254.851805][T13241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 254.851817][T13241] Call Trace: [ 254.851825][T13241] [ 254.851834][T13241] dump_stack_lvl+0xe8/0x150 [ 254.851870][T13241] should_fail_ex+0x412/0x560 [ 254.851902][T13241] _copy_from_user+0x2d/0xb0 [ 254.851924][T13241] ____sys_sendmsg+0x308/0x9f0 [ 254.851945][T13241] ? irqentry_exit+0x59e/0x620 [ 254.851974][T13241] ? __pfx_____sys_sendmsg+0x10/0x10 [ 254.852006][T13241] ? import_iovec+0x73/0xa0 [ 254.852029][T13241] ___sys_sendmsg+0x2a5/0x360 [ 254.852058][T13241] ? __pfx____sys_sendmsg+0x10/0x10 [ 254.852085][T13241] ? kstrtouint+0x6e/0xe0 [ 254.852135][T13241] ? __fget_files+0x2a/0x420 [ 254.852160][T13241] ? __fget_files+0x3a0/0x420 [ 254.852196][T13241] __sys_sendmmsg+0x27c/0x4e0 [ 254.852225][T13241] ? __pfx___sys_sendmmsg+0x10/0x10 [ 254.852245][T13241] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 254.852297][T13241] ? rcu_is_watching+0x15/0xb0 [ 254.852330][T13241] __x64_sys_sendmmsg+0xa0/0xc0 [ 254.852355][T13241] do_syscall_64+0x14d/0xf80 [ 254.852376][T13241] ? trace_irq_disable+0x3b/0x150 [ 254.852402][T13241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.852420][T13241] ? clear_bhb_loop+0x40/0x90 [ 254.852443][T13241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.852461][T13241] RIP: 0033:0x7f808139c799 [ 254.852479][T13241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.852496][T13241] RSP: 002b:00007f808216e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 254.852516][T13241] RAX: ffffffffffffffda RBX: 00007f8081615fa0 RCX: 00007f808139c799 [ 254.852530][T13241] RDX: 0000000000000001 RSI: 0000200000007a00 RDI: 0000000000000003 [ 254.852542][T13241] RBP: 00007f808216e090 R08: 0000000000000000 R09: 0000000000000000 [ 254.852553][T13241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.852565][T13241] R13: 00007f8081616038 R14: 00007f8081615fa0 R15: 00007ffccab68e88 [ 254.852595][T13241] [ 255.069538][ T63] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 255.404391][T13247] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 255.414126][T13247] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 256.126330][T13261] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 257.216672][T13314] __nla_validate_parse: 4 callbacks suppressed [ 257.216692][T13314] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2396'. [ 257.246041][T13314] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2396'. [ 257.539207][T13317] syzkaller0: MTU too low for tipc bearer [ 257.545004][T13317] tipc: Enabling of bearer rejected, failed to enable media [ 257.602663][T13321] [ 257.605017][T13321] ============================================ [ 257.611157][T13321] WARNING: possible recursive locking detected [ 257.617310][T13321] syzkaller #0 Not tainted [ 257.621711][T13321] -------------------------------------------- [ 257.627840][T13321] syz.0.2398/13321 is trying to acquire lock: [ 257.633885][T13321] ffff888079344d40 (&dev_instance_lock_key#24){+.+.}-{4:4}, at: __netdev_update_features+0xd16/0x1e10 [ 257.644856][T13321] [ 257.644856][T13321] but task is already holding lock: [ 257.652202][T13321] ffff888079344d40 (&dev_instance_lock_key#24){+.+.}-{4:4}, at: dev_ethtool+0x754/0x1ae0 [ 257.662036][T13321] and the lock comparison function returns 0: [ 257.668085][T13321] [ 257.668085][T13321] other info that might help us debug this: [ 257.676124][T13321] Possible unsafe locking scenario: [ 257.676124][T13321] [ 257.683557][T13321] CPU0 [ 257.686820][T13321] ---- [ 257.690079][T13321] lock(&dev_instance_lock_key#24); [ 257.695360][T13321] lock(&dev_instance_lock_key#24); [ 257.700640][T13321] [ 257.700640][T13321] *** DEADLOCK *** [ 257.700640][T13321] [ 257.708767][T13321] May be due to missing lock nesting notation [ 257.708767][T13321] [ 257.717067][T13321] 2 locks held by syz.0.2398/13321: [ 257.722254][T13321] #0: ffffffff8fbc7fc8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1e1/0x1ae0 [ 257.731219][T13321] #1: ffff888079344d40 (&dev_instance_lock_key#24){+.+.}-{4:4}, at: dev_ethtool+0x754/0x1ae0 [ 257.741490][T13321] [ 257.741490][T13321] stack backtrace: [ 257.747364][T13321] CPU: 0 UID: 0 PID: 13321 Comm: syz.0.2398 Not tainted syzkaller #0 PREEMPT(full) [ 257.747383][T13321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 257.747400][T13321] Call Trace: [ 257.747409][T13321] [ 257.747417][T13321] dump_stack_lvl+0xe8/0x150 [ 257.747442][T13321] print_deadlock_bug+0x279/0x290 [ 257.747466][T13321] __lock_acquire+0x253f/0x2cf0 [ 257.747488][T13321] ? is_bpf_text_address+0x292/0x2b0 [ 257.747505][T13321] ? is_bpf_text_address+0x26/0x2b0 [ 257.747521][T13321] ? kernel_text_address+0xa5/0xe0 [ 257.747538][T13321] ? __kernel_text_address+0xd/0x30 [ 257.747556][T13321] lock_acquire+0xf0/0x2e0 [ 257.747574][T13321] ? __netdev_update_features+0xd16/0x1e10 [ 257.747598][T13321] __mutex_lock+0x19f/0x1300 [ 257.747617][T13321] ? __netdev_update_features+0xd16/0x1e10 [ 257.747638][T13321] ? stack_depot_save_flags+0x33/0x810 [ 257.747660][T13321] ? dev_ioctl+0x392/0x1150 [ 257.747674][T13321] ? sock_do_ioctl+0x1f0/0x320 [ 257.747694][T13321] ? sock_ioctl+0x5c6/0x7f0 [ 257.747715][T13321] ? __netdev_update_features+0xd16/0x1e10 [ 257.747734][T13321] ? kasan_save_track+0x3e/0x80 [ 257.747750][T13321] ? kasan_save_free_info+0x46/0x50 [ 257.747770][T13321] ? __kasan_slab_free+0x5c/0x80 [ 257.747785][T13321] ? kmem_cache_free+0x187/0x630 [ 257.747802][T13321] ? __pfx___mutex_lock+0x10/0x10 [ 257.747819][T13321] ? bond_fix_features+0x19b/0x1e0 [ 257.747842][T13321] ? __pfx_bond_fix_features+0x10/0x10 [ 257.747866][T13321] __netdev_update_features+0xd16/0x1e10 [ 257.747892][T13321] ? __pfx___netdev_update_features+0x10/0x10 [ 257.747911][T13321] ? cfg80211_netdev_notifier_call+0xd62/0x1470 [ 257.747937][T13321] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 257.747959][T13321] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 257.747974][T13321] ? __wake_up_common_lock+0x190/0x1f0 [ 257.747992][T13321] ? consume_skb+0x89/0xb0 [ 257.748008][T13321] ? netlink_broadcast_filtered+0xf72/0x1020 [ 257.748036][T13321] netdev_compute_master_upper_features+0x8eb/0xac0 [ 257.748062][T13321] ? __pfx_netdev_compute_master_upper_features+0x10/0x10 [ 257.748088][T13321] bond_netdev_event+0x71f/0xfa0 [ 257.748106][T13321] ? __pfx_bond_netdev_event+0x10/0x10 [ 257.748121][T13321] ? inetdev_event+0x483/0x1610 [ 257.748139][T13321] ? igmp_netdev_event+0x7c/0x750 [ 257.748154][T13321] ? ipmr_device_event+0x1d0/0x200 [ 257.748171][T13321] notifier_call_chain+0x1be/0x400 [ 257.748197][T13321] netdev_features_change+0x8d/0xd0 [ 257.748220][T13321] ? __pfx_netdev_features_change+0x10/0x10 [ 257.748243][T13321] ? lockdep_hardirqs_on+0x7a/0x110 [ 257.748259][T13321] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 257.748276][T13321] dev_ethtool+0x162c/0x1ae0 [ 257.748298][T13321] ? __pfx_dev_ethtool+0x10/0x10 [ 257.748321][T13321] ? dev_load+0x21/0x1f0 [ 257.748335][T13321] dev_ioctl+0x392/0x1150 [ 257.748350][T13321] sock_do_ioctl+0x23e/0x320 [ 257.748372][T13321] ? __pfx_sock_do_ioctl+0x10/0x10 [ 257.748398][T13321] ? do_futex+0x333/0x420 [ 257.748423][T13321] sock_ioctl+0x5c6/0x7f0 [ 257.748445][T13321] ? __pfx_sock_ioctl+0x10/0x10 [ 257.748466][T13321] ? __fget_files+0x2a/0x420 [ 257.748488][T13321] ? __fget_files+0x3a0/0x420 [ 257.748508][T13321] ? __fget_files+0x2a/0x420 [ 257.748531][T13321] ? bpf_lsm_file_ioctl+0x9/0x20 [ 257.748550][T13321] ? __pfx_sock_ioctl+0x10/0x10 [ 257.748569][T13321] __se_sys_ioctl+0xfc/0x170 [ 257.748587][T13321] do_syscall_64+0x14d/0xf80 [ 257.748604][T13321] ? trace_irq_disable+0x3b/0x150 [ 257.748626][T13321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.748641][T13321] ? clear_bhb_loop+0x40/0x90 [ 257.748658][T13321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.748673][T13321] RIP: 0033:0x7f221579c799 [ 257.748689][T13321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.748704][T13321] RSP: 002b:00007f2216618028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.748721][T13321] RAX: ffffffffffffffda RBX: 00007f2215a15fa0 RCX: 00007f221579c799 [ 257.748734][T13321] RDX: 0000200000000000 RSI: 0000000000008946 RDI: 0000000000000004 [ 257.748744][T13321] RBP: 00007f2215832c99 R08: 0000000000000000 R09: 0000000000000000 [ 257.748754][T13321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.748764][T13321] R13: 00007f2215a16038 R14: 00007f2215a15fa0 R15: 00007ffc1bd5ed18 [ 257.748782][T13321] [ 260.709598][ T149] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 266.471146][ T149] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration