last executing test programs: 5.551453918s ago: executing program 2 (id=5264): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000011000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001", @ANYRES64=r0], 0xc4}}, 0x20050890) socket$nl_generic(0x10, 0x3, 0x10) 5.393599391s ago: executing program 2 (id=5266): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000000)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0xffffdd86}}, {0xd}}]}, @qdisc_kind_options=@q_plug={{0x9}, {0x4}}]}, 0x60}}, 0x0) 5.040222324s ago: executing program 2 (id=5270): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRESOCT=0x0, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280080001000400000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x240440c8) 4.954469538s ago: executing program 2 (id=5274): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@bridge_delneigh={0x24, 0x1d, 0x1, 0x70bd2b, 0x25dfdbff, {0x1c, 0x0, 0x0, 0x0, 0x40, 0x20, 0xa}, [@NDA_DST_IPV4={0x8, 0x1, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x24, 0x401, 0x0, 0x80, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x9810) (async, rerun: 32) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000007c0)=0x2, 0x4) (rerun: 32) 4.806544983s ago: executing program 2 (id=5279): socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x2000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2718, 0x0, &(0x7f00000001c0)) sendmsg$kcm(r1, &(0x7f0000000a80)={&(0x7f00000004c0)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000540)="9a2766a318d3b2000d71e9975c158f06c90021c364c9ffb20ed1e19354c1d7883def159d420c84d296d87018031ac3b5c26d0daf0a25998262da3135e1323525e6f775790171229198fa49d1c155016b5f15917a81f1f1335d60ae58206b2658d7ee5d25c6a031a9a9fb760d0ee3a66cdc", 0x71}, {&(0x7f0000000600)="b500d33f811c5f87fdbb6b3e4b9235a2720098299bdfbde02dbc04b16b45f7a86ec0cc89f300c964c07e4b5225a3c05dd24c0a23ae8b7f78eb4e4187e09aad87d03c591c2dacc70bd000b7d2", 0x4c}, {&(0x7f0000000680)="f5", 0x1}, {&(0x7f00000006c0)="a715fa6f1ab82bfaed91f657e6bece1a71321f330d12ce7f0d8b3391b4dc02f8d0c97e96a41fbbb046c8dc28ff3fbde3465c449e66952c983f532413aa323620c62e959a5901943a9e5ff12ea0fae161e71cd0d7984911a61ab01899c054ae052b12ee486ce2c63851ae845854a5552cd350559d387179c967d1c213a7be08ae1a4949e98e719491c8a59cb6c901ef795d3b3a592a24d8df4dbbc7c1e423", 0x9e}, {0x0}, {&(0x7f0000000880)="60ee34e7d617dce7ac2920e3e0502b7b1eb4588c0641a70ed85a9ae9c32efc8f5b9583ee70c83cb9b3178178c53863e949f99ec7e1285055a64b5ef1a62de333bb601cdb1e750557649b79bbc86b1a48886b98ef82e68d75e705327db1ba867f17e14f349e16c92a9810a6cbd5221ef5", 0x70}, {&(0x7f0000000900)}], 0x7, &(0x7f00000009c0)=[{0xc0, 0x11, 0xfff, "b471aa641aa3541ec6446f268e3a8ec3e6f2dee9c58a11f2e99a0cbd5395c68d9cbc954a710081bf2b51262f55a5d58bd0bd2e4f030c695f3d8c9554767613deb64e7b6d3e9f59491f1730b3db4142c6b7d3d0017c0a18fcbcd53f86724b62ce06884d97995e84afbb7a8569b285f9351e209dfb6fc9be9b6a324964540bd0dca5667e2a17f0d19a0a838ae08aba058d86733bfa2a8619e34ae71176ea847cb2eff6ebf86f4708babb81"}], 0xc0}, 0x1) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x11, &(0x7f0000000200)={&(0x7f0000000000)={0x38, 0x1403, 0xc23, 0x70bd2e, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x10, 0x3, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e23, @local}, {0x2, 0x4e23, @loopback}, 0x486, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa, 0x2, 0x20e7}) ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000280)={'bond0\x00', {0x2, 0x0, @local}}) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="1400000016000b63d25a80648c2566e506bce1e800294babfba15711165402766999a96cd6e87ed97285a92e15264fa882afe0c31be8eca4ea2a536b20ff15193bb574f9baef8e6e4fe50199e16ca5f9c3a094135eac97a8fb78f2eee1f9942b33e63735d3b025aa19a00ec0eb9623234589d9138f9a28346ee0a03ea4ecc0f1fe410620a18cd94edbd4b34aab417f647afb668a59cc2410b9bd37c21ad98913be9d000000", 0xa5}], 0x1}, 0x840) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x1a}, 0x0, 0x1, 0x0, 0x2, 0x6, 0x3fbc}, 0x20) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r3) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r7, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xff}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20082000) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, r9, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x6, 0x2, 0x4246}, @TIPC_NLA_NET_NODEID={0x0, 0x3, 0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r10, &(0x7f0000000040), 0x2, 0x0) 2.907209316s ago: executing program 3 (id=5307): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000780)={'gretap0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x700, 0x10, 0x0, 0x3, {{0x21, 0x4, 0x0, 0x3f, 0x84, 0x67, 0x0, 0x2, 0x4, 0x0, @rand_addr=0x64010100, @multicast2, {[@timestamp={0x44, 0xc, 0x2d, 0x0, 0xc, [0x2, 0x101]}, @generic={0x86, 0x8, "6045d46dce10"}, @timestamp_prespec={0x44, 0x14, 0x32, 0x3, 0x0, [{@rand_addr=0x64010100, 0x7}, {@loopback, 0x5}]}, @generic={0x83, 0xd, "ce07801f36fbb9622234ab"}, @timestamp_prespec={0x44, 0x14, 0x19, 0x3, 0x4, [{@private=0xa010100, 0x7}, {@remote, 0x4}]}, @generic={0x83, 0x11, "7b74502e2a36359d898ead4f25b173"}, @ssrr={0x89, 0x13, 0x52, [@dev={0xac, 0x14, 0x14, 0x44}, @remote, @dev={0xac, 0x14, 0x14, 0x3a}, @broadcast]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000840)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@gettclass={0x24, 0x2a, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x10, 0xffe0}, {0x10, 0x6}, {0x5, 0xffff}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x24000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r4 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote}, &(0x7f0000000140)=0x12, 0x800) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f0000000400)={{r2, &(0x7f0000000180)='gtp\x00', 0x14807, &(0x7f0000000300)={@_ha_fsid={[0x8, 0x4]}, {0x800, 0x9, 0xc, 0x1}}, 0x1, &(0x7f0000000340), &(0x7f0000000380)=0x7ff}, {[0x0, 0xf, 0x1, 0x2]}, 0x3, 0x13, &(0x7f00000003c0)=""/19}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000480)={0x1d, r7, 0x0, {0x2, 0xf0, 0x4}, 0x1}, 0x18) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0xbdba17846774e43b, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x74, r7, {0x19, 0xfff2}, {0xf, 0xffff}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1020, 0x39, 0x5000, 0x7, 0x0, 0x0, 0xffffffff}, 0x1c) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x15d, &(0x7f0000000200)=ANY=[@ANYRESDEC=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r9, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x992c, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r2, @ANYBLOB="000000000000000018100000", @ANYRES32=r3, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r10, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000034d, &(0x7f0000001d00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda65f052100000020001280080001006774700014000280080003000300000008000100", @ANYRES32, @ANYBLOB="d8e16905833fcb7ddc55979a53a27f76ac4e59ff4587853431819f1fdd7a3cd6400d58c26adeb14b78f2d2b28d3ba47e85ecfb3ed3bc57617fd00935ab492ca03f5a3a37f7adafa71580a13886f7445ef1e33ef4540000"], 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x2000c040) 2.567893208s ago: executing program 4 (id=5310): r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000000)="380000003f000501010000000000000001020000000000000f0001006f76732d73797374656d00000800020000000000080009002a000000", 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000080000000000001000000097000100ffffffff95"], &(0x7f00000000c0)='syzkaller\x00', 0x7}, 0x94) write(r0, &(0x7f0000000100)="6000000041000901020000000000000001010000000000002c000100100004000000000000000000000000000600060008000000100007000101010102020202000040001c000200180003001400100008000200010101010500040040000000", 0x60) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000300000000000000000000008500000011000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)="196a348fbba6e75ce3e37fd3d3fc", 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write(r0, &(0x7f0000000200), 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) ioctl$NILFS_IOCTL_GET_BDESCS(r0, 0xc0186e87, &(0x7f0000000180)={&(0x7f0000000040)=[{0x800000000, 0x9, 0xfffffffffffffa7d, 0x6, 0xd}, {0xa, 0x8000000000, 0xfffffffffffffffd, 0xffffffffffffffff, 0x84}, {0x1, 0x6, 0x7fffffffffffffff, 0x4, 0x5}, {0xffffffffffffffff, 0x8000, 0x6, 0x7, 0x6}], 0x4, 0x28, 0xf, 0x6}) write(r0, &(0x7f0000000400)="44000000410001000300000000000000030100002a0000002c00010010000400000000000000000000000000060006000800000010000700010101010202020200004000", 0x44) 2.32676397s ago: executing program 3 (id=5312): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e24, @empty}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) listen(r1, 0x5) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x60, 0x12, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {}, 0xffffffff}, [@INET_DIAG_REQ_BYTECODE={0x14, 0x1, "0710100002200000ffffffff00000000"}]}, 0x60}}, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) (async) setsockopt$inet_buf(r0, 0x0, 0x10, 0x0, 0x0) 2.190257906s ago: executing program 0 (id=5314): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r2}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x41, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x68}, 0x94) 2.005538919s ago: executing program 0 (id=5315): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000048000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001", @ANYRES64=r0], 0xc4}}, 0x20050890) socket$nl_generic(0x10, 0x3, 0x10) 1.896202154s ago: executing program 3 (id=5316): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="040100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0xc3}, 0x0) 1.813083265s ago: executing program 0 (id=5317): r0 = socket$kcm(0x2, 0xa, 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x37}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'gre0\x00', 0x20}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x1f3, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000001c0)={0x0, 'virt_wifi0\x00', {0x5}}) 1.686610501s ago: executing program 1 (id=5318): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000011c0)=@newtfilter={0x50, 0x2c, 0x100, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x10, 0xfffc}, {0xd, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0x24, 0x2, [@TCA_FW_ACT={0x4}, @TCA_FW_INDEV={0x14, 0x3, 'team_slave_1\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0xc, 0x8}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000040)=@gcm_128={{0x502}, "ffa25858cb7908a1", "efc6be14704a5ef045aedc9d5d061eb4", "8f6a7d78", "3773c40d93880f0b"}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f00000002c0), 0x4) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x9, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x800000, 0x2}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4e5ef4b7a78df6d, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}}, 0x0) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="33330000000100112233445586dd6000000000003b4020010db8000000000000000000000001ff0e"], 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1_to_batadv\x00'}) close(0x4) 1.531425793s ago: executing program 4 (id=5319): sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x24000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x44015) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e0000002001100000000000000000000000100000001000000000000001c000000000000000000000008"], 0x50, 0x11000000}}], 0x1, 0x800) 1.465080871s ago: executing program 3 (id=5320): bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xffffffff}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000003200)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="63812bbd7000fcdbdf25030000000800010000000000280007800c00018008000100", @ANYRES32=r4, @ANYBLOB='\a\x00\x00'], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000400)={0x0, 0x1}, &(0x7f0000000440)=0x8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)={0x24, r6, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040803}, 0x4000010) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="6800000000010109000000000000000002000000240001801400519f16fc848b90760566edd8667895010180050001"], 0x68}}, 0x0) r8 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r8) 1.36208617s ago: executing program 1 (id=5321): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080), 0x16) r1 = socket$inet6(0xa, 0x802, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) shutdown(r1, 0x0) ppoll(&(0x7f00000000c0)=[{r1, 0x3000}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b400000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000003f00000000000000850000002300000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.36182953s ago: executing program 4 (id=5322): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000480)={@fallback, 0xffffffffffffffff, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[], 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000020000b7050000080000001c001c0000000000bf9800000000000056080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 1.325459332s ago: executing program 0 (id=5323): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x8}]}, 0x24}}, 0x0) 1.156219794s ago: executing program 1 (id=5324): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000002a00010002000000000000000000000001000000010001000000010000000000", 0x24) 1.145993818s ago: executing program 0 (id=5325): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x725, 0x0, 0x0, 0x0, 0xd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5}, @IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x44}}, 0x0) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r2 = socket$inet6(0xa, 0x3, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = gettid() sendmmsg$unix(r4, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=[@cred={{0x1c, 0x1, 0x2, {r5, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r3, 0xffffffffffffffff]}}], 0x38, 0x811}}], 0x1, 0x2400c010) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast1, @in6=@empty, 0x4e25, 0x100, 0x5e23, 0x8, 0x2}, {0x1, 0x0, 0x10000, 0x401, 0x63b40c8e, 0x2000000, 0x1, 0xfffffffffffffffd}, {0x10000000001, 0x800000000006, 0x804, 0x8000000000000000}, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1}, {{@in6=@loopback, 0x0, 0x2b}, 0x2, @in=@local, 0x3504, 0x5, 0x0, 0x0, 0xffffffff, 0x6, 0x6}}, 0xe8) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r7 = socket$rds(0x15, 0x5, 0x0) r8 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r8, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="020b070102000000e4a17c455b", 0xd}, {&(0x7f0000000900)="54fb5a", 0x3}], 0x2}, 0x4080) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000080), 0x0}}, @fadd={0x58, 0x114, 0x6, {{}, 0x0, 0x0}}], 0xb0}, 0x0) write(r6, &(0x7f0000000000)="4c00000011000f14001100020000150002000000200000", 0x17) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$BTRFS_IOC_SYNC(r6, 0x9408, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x14}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 1.128007554s ago: executing program 4 (id=5326): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newpolicy={0x17c, 0x13, 0x101, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in=@rand_addr=0x64010102, 0x100, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x8}, {0x0, 0xfffffffffffffffe, 0x0, 0x100}, 0xfffffffe}, [@tmpl={0xc4, 0x5, [{{@in=@remote, 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x3501, 0x1, 0x1, 0x1, 0x5, 0x2, 0x80000001}, {{@in6=@rand_addr=' \x01\x00', 0x4d5, 0x32}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x2, 0x48, 0x1, 0xffff, 0x5}, {{@in=@dev={0xac, 0x14, 0x14, 0x18}, 0x4d4, 0x2b}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x1e}, 0x0, 0x4, 0x1, 0x3, 0x0, 0x2, 0x6}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000065587d01ff020000000000000000000000000001"], 0xfdef) 1.030665457s ago: executing program 1 (id=5327): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000100001060100000000000000000000000000000000000000000000000800030076783000240012800a00010076786c616e0000001400028008000100640000000800030001000000"], 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c000000100001000200000000000000000000000000000000000000000000000800030076783000240012800a00010076786c616e0000001400028008000100640000000800030002000000"], 0x4c}}, 0x0) unshare(0x8040480) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r2, 0x4) socket$inet_udp(0x2, 0x2, 0x0) 327.295348ms ago: executing program 3 (id=5328): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000190000)={0x0, 0x0, &(0x7f0000190040)={&(0x7f0000180000)=ANY=[@ANYBLOB="300e0000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f00000000180002000300000000000000000000000000000000000000e80d08001c0001000000000000000000000000000000000000000000e2060000c80d0200"], 0xe30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00001a0000)={0x0, 0x0, &(0x7f00001a0040)={&(0x7f00001a0080)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00001b0000)={0x0, 0x0, &(0x7f00001b0040)={&(0x7f00001b0080)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000090000)={0x0, 0x0, &(0x7f0000090040)={&(0x7f0000080000)=ANY=[@ANYBLOB="380e0000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f00000000180002000300000000000000000000000000000000000000f00d08001c0001000000000000000000000000000000000000000000e6060000d00d0200"], 0xe38}, 0x1, 0x0, 0x0, 0x1e}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000a0000)={0x0, 0x0, &(0x7f00000a0040)={&(0x7f00000a0080)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000b0000)={0x0, 0x0, &(0x7f00000b0040)={&(0x7f00000b0080)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000010000)={0x0, 0x0, &(0x7f0000010040)={&(0x7f0000000000)=ANY=[@ANYBLOB="400e0000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f00000000180002000300000000000000000000000000000000000000f80d08001c0001000000000000000000000000000000000000000000ea060000d80d0200"], 0xe40}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000020000)={0x0, 0x0, &(0x7f0000020040)={&(0x7f0000020080)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000d0000)={0x0, 0x0, &(0x7f00000d0040)={&(0x7f00000c0000)=ANY=[@ANYBLOB="480e0000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f00000000180002000300000000000000000000000000000000000000000e08001c0001000000000000000000000000000000000000000000ee060000e00d0200"], 0xe48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000e0000)={0x0, 0x0, &(0x7f00000e0040)={&(0x7f00000e0080)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000f0000)={0x0, 0x0, &(0x7f00000f0040)={&(0x7f00000f0080)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000110000)={0x0, 0x0, &(0x7f0000110040)={&(0x7f0000100000)=ANY=[@ANYBLOB="f80e0000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f00000000180002000300000000000000000000000000000000000000b00e08001c000100000000000000000000000000000000000000000046070000900e0200"], 0xef8}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000120000)={0x0, 0x0, &(0x7f0000120040)={&(0x7f0000120080)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000130000)={0x0, 0x0, &(0x7f0000130040)={&(0x7f0000000100)=@getqdisc={0x28, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x3}, {}, {0xd, 0x5}}, [{0x4}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000050000)={0x0, 0x0, &(0x7f0000050040)={&(0x7f0000040000)=ANY=[@ANYBLOB="000f0000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f00000000180002000300000000000000000000000000000000000000b80e08001c00010000000000000000000000000000000000000000004a070000980e0200"], 0xf00}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000060000)={0x0, 0x0, &(0x7f0000060040)={&(0x7f0000000200)=@newqdisc={0x2c0, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10, 0x2}, {0xd, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x290, 0x2, {{0x2, [0xd, 0x0, 0x10, 0xa, 0xb, 0x5, 0x6, 0x9, 0x0, 0xf, 0x3, 0x9, 0x10, 0x10, 0xe, 0xf], 0x1, [0x9, 0x8001, 0x80, 0xd3df, 0x6, 0x2, 0x7, 0xe10, 0xc4f, 0x9, 0x9, 0x7, 0x0, 0x3ff, 0x0, 0x10], [0x4, 0x7f, 0x9, 0x3, 0x1, 0x7, 0x5, 0x0, 0x7, 0x400, 0x7fff, 0x0, 0x3, 0x5, 0x2, 0xfff9]}, [@TCA_MQPRIO_MIN_RATE64={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x1}, {0xc, 0x3, 0x81}]}, @TCA_MQPRIO_MIN_RATE64={0xb8, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x80000000}, {0xc, 0x3, 0x129ccf3}, {0xc, 0x3, 0x139}, {0xc, 0x3, 0x5}, {0xc, 0x3, 0x8}, {0xc, 0x3, 0xffffffffffffffdc}, {0xc, 0x3, 0x2}, {0xc, 0x3, 0x80000001}, {0xc, 0x3, 0x6}, {0xc}, {0xc, 0x3, 0x8}, {0xc, 0x3, 0x1}, {0xc, 0x3, 0x896a}, {0xc, 0x3, 0x10}, {0xc, 0x3, 0x7}]}, @TCA_MQPRIO_MIN_RATE64={0x88, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x59c99d68}, {0xc, 0x3, 0x7}, {0xc, 0x3, 0x81}, {0xc, 0x3, 0xfffffffffffffffe}, {0xc, 0x3, 0x80003ff}, {0xc, 0x3, 0x977}, {0xc, 0x3, 0x6}, {0xc, 0x3, 0x1}, {0xc, 0x3, 0x1}, {0xc, 0x3, 0x6}, {0xc, 0x3, 0x3}]}, @TCA_MQPRIO_MIN_RATE64={0xb8, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x80000000}, {0xc, 0x3, 0x9ff}, {0xc, 0x3, 0xe}, {0xc, 0x3, 0x6}, {0xc, 0x3, 0xa65}, {0xc, 0x3, 0x6}, {0xc, 0x3, 0xa}, {0xc, 0x3, 0x1000}, {0xc, 0x3, 0x401}, {0xc, 0x3, 0x101}, {0xc, 0x3, 0x2}, {0xc, 0x3, 0x3}, {0xc, 0x3, 0x8}, {0xc}, {0xc, 0x3, 0x1}]}, @TCA_MQPRIO_MIN_RATE64={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x9}, {0xc, 0x3, 0x39cd}]}, @TCA_MQPRIO_SHAPER={0x6}]}}}]}, 0x2c0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000070000)={0x0, 0x0, &(0x7f0000070040)={&(0x7f0000070080)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @broadcast}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, r3}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000160000)={0x0, 0x0, &(0x7f0000160040)={&(0x7f0000160080)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f00001d0000)={0x0, 0x0, &(0x7f00001d0040)={&(0x7f00001c0000)=ANY=[@ANYBLOB="100f0000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f00000000180002000300000000000000000000000000000000000000c80e08001c000100000000000000000000000000000000000000000052070000a80e0200"], 0xf10}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00001e0000)={0x0, 0x0, &(0x7f00001e0040)={&(0x7f00001e0080)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}}, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) 327.109603ms ago: executing program 1 (id=5329): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x79, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x9, 0x400, 0x81}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@getqdisc={0x30, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x3, 0x9}, {0x6, 0x10}, {0xf, 0x10}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x10) 235.564233ms ago: executing program 3 (id=5330): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=0x1, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000000100135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x11, 0x2, 0x300) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8d, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xb5, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003400)=ANY=[@ANYBLOB="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", @ANYBLOB="4f28a5790ddf9499377ba7cf1732792cb957e388827f5fe7f78519c66b648892035900d1ec877558687b61d89729c7e9f63e4bcdd0fc07aca435bc6c3167584dddc218"], &(0x7f0000000140)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, 0x0, 0x0, r2}, 0x94) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000d1", @ANYRES16, @ANYBLOB="04"], 0x14}}, 0x28040000) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r3, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0], 0x0, 0x88, &(0x7f00000006c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x65, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) 231.742416ms ago: executing program 4 (id=5331): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r2}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x64, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x68}, 0x94) 146.769523ms ago: executing program 1 (id=5332): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x9, 0xfffff696, 0x2, 0x6008, 0x1, 0xce, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5, 0x9}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001440)={r2, &(0x7f0000000100)="090ecb0e331afd9d2f5448d70f8ab957fad40c50bc1ec1872505cf", &(0x7f0000000440)=""/4096}, 0x20) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) 106.607379ms ago: executing program 0 (id=5333): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="5400000010000104000000fff000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00"], 0x54}}, 0x0) 104.483588ms ago: executing program 2 (id=5334): bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x1, 0x5, &(0x7f00000010c0)=@raw=[@generic={0xbf, 0x6, 0x1}, @generic={0x20}, @generic={0xf, 0x6, 0x0, 0x0, 0xffffff80}, @generic={0xb7}, @generic={0x95}], &(0x7f0000001100)='GPL\x00', 0x2, 0x1000, &(0x7f0000001140)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 4 (id=5335): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2f25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x103) kernel console output (not intermixed with test programs): leftover after parsing attributes in process `syz.0.3783'. [ 409.355041][T18356] syzkaller1: entered promiscuous mode [ 409.355064][T18356] syzkaller1: entered allmulticast mode [ 409.379694][T18356] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3790'. [ 409.815244][T18372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3794'. [ 410.326238][T18398] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20001 [ 410.394832][T18403] openvswitch: netlink: Flow actions attr not present in new flow. [ 410.719858][T18416] netlink: Unknown conntrack attr (type=12550, max=9) [ 410.719896][T18416] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.721006][T18417] netlink: 'syz.0.3808': attribute type 50 has an invalid length. [ 411.393506][T18459] xt_SECMARK: invalid mode: 9 [ 411.476442][T18458] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 411.781686][T18490] syzkaller0: entered promiscuous mode [ 411.781710][T18490] syzkaller0: entered allmulticast mode [ 411.941505][T18500] openvswitch: netlink: Message has 144 unknown bytes. [ 412.343939][T18526] netlink: 'syz.2.3842': attribute type 4 has an invalid length. [ 412.344764][T18526] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 412.651247][T18526] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.756808][T18544] gretap0: entered promiscuous mode [ 412.843320][T18558] netlink: 'syz.1.3852': attribute type 12 has an invalid length. [ 412.882381][T18526] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.996697][T18526] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.066712][T18568] __nla_validate_parse: 17 callbacks suppressed [ 413.066731][T18568] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3856'. [ 413.108746][T18570] netlink: 'syz.4.3855': attribute type 50 has an invalid length. [ 413.143957][T18571] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3856'. [ 413.172524][T18526] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.395915][T18579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3859'. [ 413.410682][ T82] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.417009][T18581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3861'. [ 413.446368][ T6536] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.454918][T18585] netlink: 8356 bytes leftover after parsing attributes in process `syz.4.3859'. [ 413.521198][ T6526] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.523178][ T6536] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.642838][T18589] veth7: entered promiscuous mode [ 413.686910][T18593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3859'. [ 413.699259][T18589] bond3: (slave veth7): Enslaving as an active interface with an up link [ 413.927234][T18615] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 413.931079][T18615] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3868'. [ 413.971351][T18615] x_tables: duplicate underflow at hook 1 [ 413.979357][T18615] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 414.049056][T18583] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3862'. [ 414.049428][T18583] 8021q: VLANs not supported on wg0 [ 414.110336][T18621] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3871'. [ 414.209088][T18630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3872'. [ 414.613559][T18645] bridge6: entered promiscuous mode [ 414.613585][T18641] x_tables: ip_tables: osf match: only valid for protocol 6 [ 414.613597][T18645] bridge6: entered allmulticast mode [ 415.592622][T18698] veth9: entered promiscuous mode [ 415.605117][T18698] bond5: (slave veth9): Enslaving as an active interface with an up link [ 415.758560][T18714] syzkaller0: entered promiscuous mode [ 415.758584][T18714] syzkaller0: entered allmulticast mode [ 415.846313][T18714] tipc: Enabled bearer , priority 3 [ 415.854354][T18725] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 415.854956][T18712] tipc: Resetting bearer [ 415.883271][T18712] tipc: Disabling bearer [ 415.896633][T18725] x_tables: duplicate underflow at hook 1 [ 415.903443][T18725] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 416.074190][T18691] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 416.074210][T18691] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 416.551719][T18766] FAULT_INJECTION: forcing a failure. [ 416.551719][T18766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.551752][T18766] CPU: 1 UID: 0 PID: 18766 Comm: syz.3.3914 Not tainted syzkaller #0 PREEMPT(full) [ 416.551773][T18766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 416.551783][T18766] Call Trace: [ 416.551790][T18766] [ 416.551798][T18766] dump_stack_lvl+0xe8/0x150 [ 416.551828][T18766] should_fail_ex+0x410/0x560 [ 416.551854][T18766] _copy_from_user+0x2d/0xb0 [ 416.551878][T18766] generic_map_update_batch+0x6b1/0xae0 [ 416.551917][T18766] ? __pfx_generic_map_update_batch+0x10/0x10 [ 416.551943][T18766] ? __fget_files+0x2a/0x420 [ 416.551972][T18766] ? __pfx_generic_map_update_batch+0x10/0x10 [ 416.551997][T18766] bpf_map_do_batch+0x391/0x630 [ 416.552025][T18766] __sys_bpf+0xbe5/0xd90 [ 416.552050][T18766] ? __pfx___sys_bpf+0x10/0x10 [ 416.552081][T18766] ? __fget_files+0x2a/0x420 [ 416.552119][T18766] ? ksys_write+0x242/0x270 [ 416.552147][T18766] ? __pfx_ksys_write+0x10/0x10 [ 416.552176][T18766] __x64_sys_bpf+0xba/0xd0 [ 416.552193][T18766] do_syscall_64+0x166/0x520 [ 416.552214][T18766] ? trace_irq_disable+0x3b/0x140 [ 416.552231][T18766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.552249][T18766] ? clear_bhb_loop+0x70/0xc0 [ 416.552269][T18766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.552287][T18766] RIP: 0033:0x7f2cff79e159 [ 416.552304][T18766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.552319][T18766] RSP: 002b:00007f2d005f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 416.552338][T18766] RAX: ffffffffffffffda RBX: 00007f2cffa25fa0 RCX: 00007f2cff79e159 [ 416.552351][T18766] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 000000000000001a [ 416.552362][T18766] RBP: 00007f2d005f0090 R08: 0000000000000000 R09: 0000000000000000 [ 416.552373][T18766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.552385][T18766] R13: 00007f2cffa26038 R14: 00007f2cffa25fa0 R15: 00007ffc1086f6b8 [ 416.552413][T18766] [ 417.063581][T18778] netlink: Invalid conntrack timeout [ 417.063613][T18778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 417.456918][T18802] netlink: 'syz.3.3928': attribute type 10 has an invalid length. [ 417.507477][T18802] ipvlan2: entered promiscuous mode [ 418.179053][T18846] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 418.262188][T18846] __nla_validate_parse: 10 callbacks suppressed [ 418.262209][T18846] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3939'. [ 418.311841][T18850] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3941'. [ 418.315758][T18850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3941'. [ 418.359814][T18846] x_tables: duplicate underflow at hook 1 [ 418.365951][T18846] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 418.408058][T18854] batman_adv: batadv0: Adding interface: dummy0 [ 418.408078][T18854] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.408111][T18854] batman_adv: batadv0: Interface activated: dummy0 [ 418.501513][T18856] FAULT_INJECTION: forcing a failure. [ 418.501513][T18856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.501546][T18856] CPU: 1 UID: 0 PID: 18856 Comm: syz.1.3943 Not tainted syzkaller #0 PREEMPT(full) [ 418.501567][T18856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 418.501578][T18856] Call Trace: [ 418.501586][T18856] [ 418.501594][T18856] dump_stack_lvl+0xe8/0x150 [ 418.501632][T18856] should_fail_ex+0x410/0x560 [ 418.501658][T18856] _copy_from_user+0x2d/0xb0 [ 418.501684][T18856] ___sys_sendmsg+0x1c6/0x360 [ 418.501707][T18856] ? __lock_acquire+0x747/0x2de0 [ 418.501730][T18856] ? __pfx____sys_sendmsg+0x10/0x10 [ 418.501789][T18856] ? __fget_files+0x2a/0x420 [ 418.501813][T18856] ? __fget_files+0x3a2/0x420 [ 418.501847][T18856] __x64_sys_sendmsg+0x1b1/0x290 [ 418.501874][T18856] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 418.501918][T18856] do_syscall_64+0x166/0x520 [ 418.501942][T18856] ? trace_irq_disable+0x3b/0x140 [ 418.501960][T18856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.501980][T18856] ? clear_bhb_loop+0x70/0xc0 [ 418.502003][T18856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.502022][T18856] RIP: 0033:0x7f5d90d9e159 [ 418.502039][T18856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.502055][T18856] RSP: 002b:00007f5d91bd0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.502076][T18856] RAX: ffffffffffffffda RBX: 00007f5d91025fa0 RCX: 00007f5d90d9e159 [ 418.502090][T18856] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 418.502102][T18856] RBP: 00007f5d91bd0090 R08: 0000000000000000 R09: 0000000000000000 [ 418.502113][T18856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.502123][T18856] R13: 00007f5d91026038 R14: 00007f5d91025fa0 R15: 00007ffed17321b8 [ 418.502154][T18856] [ 418.673462][T18814] syzkaller0: entered promiscuous mode [ 418.673487][T18814] syzkaller0: entered allmulticast mode [ 419.102422][T18874] netlink: 'syz.0.3946': attribute type 2 has an invalid length. [ 419.167541][T18885] netlink: 22 bytes leftover after parsing attributes in process `syz.1.3947'. [ 419.276366][T18891] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3952'. [ 419.335988][T18893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3952'. [ 421.842161][T18905] netlink: 988 bytes leftover after parsing attributes in process `syz.1.3956'. [ 421.899867][T18907] ip_tables: iptables: counters copy to user failed while replacing table [ 422.002303][T18916] xt_SECMARK: invalid mode: 9 [ 422.032617][T18921] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 422.063643][T18926] netlink: 'syz.4.3962': attribute type 10 has an invalid length. [ 422.063666][T18926] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3962'. [ 422.090565][T18926] ipvlan2: entered promiscuous mode [ 422.167510][T18932] netlink: 'syz.0.3967': attribute type 50 has an invalid length. [ 422.192926][T18934] ip_tables: iptables: counters copy to user failed while replacing table [ 422.280077][T18939] xt_bpf: check failed: parse error [ 422.598589][T18942] syzkaller0: entered promiscuous mode [ 422.598732][T18942] syzkaller0: entered allmulticast mode [ 423.062495][T18955] ip6t_rt: too many addresses specified [ 423.088884][T18957] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3975'. [ 423.088918][T18957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3975'. [ 423.114922][T18957] vlan2: entered promiscuous mode [ 423.114944][T18957] gretap0: entered promiscuous mode [ 423.213326][T18963] netlink: 'syz.4.3976': attribute type 1 has an invalid length. [ 423.232637][ T6536] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.232712][T18963] netlink: 'syz.4.3976': attribute type 1 has an invalid length. [ 423.367844][ T6536] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.368971][ T82] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.369007][ T82] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.534685][ T5625] block nbd0: Receive control failed (result -32) [ 423.552781][T18979] FAULT_INJECTION: forcing a failure. [ 423.552781][T18979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.552818][T18979] CPU: 1 UID: 0 PID: 18979 Comm: syz.4.3981 Not tainted syzkaller #0 PREEMPT(full) [ 423.552838][T18979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 423.552853][T18979] Call Trace: [ 423.552863][T18979] [ 423.552872][T18979] dump_stack_lvl+0xe8/0x150 [ 423.552902][T18979] should_fail_ex+0x410/0x560 [ 423.552928][T18979] _copy_from_user+0x2d/0xb0 [ 423.552953][T18979] generic_map_update_batch+0x662/0xae0 [ 423.552992][T18979] ? __pfx_generic_map_update_batch+0x10/0x10 [ 423.553019][T18979] ? __fget_files+0x2a/0x420 [ 423.553050][T18979] ? __pfx_generic_map_update_batch+0x10/0x10 [ 423.553076][T18979] bpf_map_do_batch+0x391/0x630 [ 423.553103][T18979] __sys_bpf+0xbe5/0xd90 [ 423.553131][T18979] ? __pfx___sys_bpf+0x10/0x10 [ 423.553162][T18979] ? __fget_files+0x2a/0x420 [ 423.553204][T18979] ? ksys_write+0x242/0x270 [ 423.553232][T18979] ? __pfx_ksys_write+0x10/0x10 [ 423.553271][T18979] __x64_sys_bpf+0xba/0xd0 [ 423.553293][T18979] do_syscall_64+0x166/0x520 [ 423.553317][T18979] ? trace_irq_disable+0x3b/0x140 [ 423.553334][T18979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.553353][T18979] ? clear_bhb_loop+0x70/0xc0 [ 423.553376][T18979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.553399][T18979] RIP: 0033:0x7efd3219e159 [ 423.553417][T18979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.553432][T18979] RSP: 002b:00007efd303f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 423.553453][T18979] RAX: ffffffffffffffda RBX: 00007efd32425fa0 RCX: 00007efd3219e159 [ 423.553464][T18979] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 000000000000001a [ 423.553476][T18979] RBP: 00007efd303f6090 R08: 0000000000000000 R09: 0000000000000000 [ 423.553486][T18979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 423.553495][T18979] R13: 00007efd32426038 R14: 00007efd32425fa0 R15: 00007fffa781fcc8 [ 423.553521][T18979] [ 423.994290][T18996] x_tables: ip_tables: osf match: only valid for protocol 6 [ 424.053843][T19004] netlink: 5376 bytes leftover after parsing attributes in process `syz.2.3988'. [ 424.053868][T19004] openvswitch: netlink: Flow key attr not present in new flow. [ 424.221835][T19015] ip6t_ah: unknown flags 4 [ 424.249237][T19019] tc_dump_action: action bad kind [ 424.667175][T19035] netlink: 'syz.3.3997': attribute type 50 has an invalid length. [ 424.767178][T19043] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.3999'. [ 424.779895][T19043] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.3999'. [ 424.923697][T19047] syzkaller0: entered promiscuous mode [ 424.923722][T19047] syzkaller0: entered allmulticast mode [ 425.190242][T19061] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 425.191823][T19061] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4006'. [ 425.224095][T19065] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4007'. [ 425.224135][T19065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4007'. [ 425.224148][T19065] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4007'. [ 425.283001][T19067] x_tables: duplicate underflow at hook 1 [ 425.284664][T19067] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 425.405728][T19075] netlink: 'syz.1.4009': attribute type 50 has an invalid length. [ 427.221765][T19066] geneve1: entered promiscuous mode [ 427.341368][T19079] netlink: 988 bytes leftover after parsing attributes in process `syz.3.4013'. [ 427.536114][T19092] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4018'. [ 427.583047][T19095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.664932][T19101] netlink: 'syz.2.4019': attribute type 50 has an invalid length. [ 427.754188][T19104] batman_adv: batadv0: Adding interface: dummy0 [ 427.754207][T19104] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.754235][T19104] batman_adv: batadv0: Interface activated: dummy0 [ 427.880252][T19111] netlink: 3568 bytes leftover after parsing attributes in process `syz.3.4025'. [ 428.064183][T19122] syzkaller0: entered promiscuous mode [ 428.064206][T19122] syzkaller0: entered allmulticast mode [ 428.076534][T19125] netlink: 'syz.1.4031': attribute type 4 has an invalid length. [ 428.125877][T19128] netlink: 'syz.1.4031': attribute type 4 has an invalid length. [ 428.228385][T19122] tipc: Enabled bearer , priority 10 [ 428.236781][T19120] tipc: Resetting bearer [ 428.281749][T19120] tipc: Disabling bearer [ 428.429948][T19142] tipc: Enabled bearer , priority 10 [ 428.453108][T19138] tipc: Disabling bearer [ 428.646190][T19154] netlink: 'syz.3.4040': attribute type 2 has an invalid length. [ 428.663193][T19154] : entered promiscuous mode [ 428.725277][T19156] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 428.731658][T19156] batman_adv: batadv0: Adding interface: dummy0 [ 428.731673][T19156] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.731698][T19156] batman_adv: batadv0: Interface activated: dummy0 [ 429.102021][T19185] ip6t_ah: unknown flags 4 [ 429.241775][T19191] __nla_validate_parse: 6 callbacks suppressed [ 429.241795][T19191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4052'. [ 429.284659][T19194] Cannot find del_set index 4 as target [ 429.380858][T19198] netlink: 'syz.3.4053': attribute type 4 has an invalid length. [ 429.464158][T19207] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4055'. [ 429.486829][T19201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4057'. [ 429.526696][T19201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4057'. [ 429.592514][T19214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4059'. [ 429.685182][T19221] gretap0: entered promiscuous mode [ 429.742345][T19224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4061'. [ 429.933866][T19234] netlink: 'syz.2.4064': attribute type 2 has an invalid length. [ 429.933890][T19234] netlink: 11895 bytes leftover after parsing attributes in process `syz.2.4064'. [ 429.963261][T19236] tipc: Started in network mode [ 429.963306][T19236] tipc: Node identity 2a70cb9aad6a, cluster identity 4711 [ 429.963477][T19236] tipc: Enabled bearer , priority 10 [ 429.964917][T19234] netlink: 'syz.2.4064': attribute type 1 has an invalid length. [ 430.023282][T19235] tipc: Disabling bearer [ 430.141637][T19246] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4067'. [ 430.331673][T19261] syzkaller0: entered promiscuous mode [ 430.331697][T19261] syzkaller0: entered allmulticast mode [ 430.336277][T19267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4073'. [ 430.336360][T19267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4073'. [ 430.391155][T19271] xt_bpf: check failed: parse error [ 430.593219][T19277] netlink: 'syz.4.4077': attribute type 16 has an invalid length. [ 432.555243][T19273] batman_adv: batadv0: Adding interface: dummy0 [ 432.555261][T19273] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.555286][T19273] batman_adv: batadv0: Interface activated: dummy0 [ 432.788779][ T30] audit: type=1800 audit(1790907365.099:9): pid=19282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4078" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=1369 res=0 errno=0 [ 433.065819][T19314] ip6t_ah: unknown flags 4 [ 433.391469][T19338] netlink: 'syz.1.4095': attribute type 10 has an invalid length. [ 433.415149][T19338] ipvlan2: entered promiscuous mode [ 433.833210][T19355] netlink: 'syz.4.4100': attribute type 12 has an invalid length. [ 433.930559][T19357] x_tables: ip_tables: osf match: only valid for protocol 6 [ 434.446605][T19372] __nla_validate_parse: 5 callbacks suppressed [ 434.446625][T19372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4101'. [ 434.980621][T19405] ip6t_ah: unknown flags 4 [ 435.127146][T19412] netlink: 'syz.1.4114': attribute type 12 has an invalid length. [ 435.227958][ T30] audit: type=1800 audit(1790907367.529:10): pid=19416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4113" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1410 res=0 errno=0 [ 435.369304][T19428] netlink: 'syz.3.4117': attribute type 61 has an invalid length. [ 435.414403][T19430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4118'. [ 435.460494][T19431] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4117'. [ 435.552000][T19423] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 435.560349][T19433] openvswitch: ovs-s!: Dropping previously announced user features [ 435.650116][T19438] FAULT_INJECTION: forcing a failure. [ 435.650116][T19438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.650148][T19438] CPU: 0 UID: 0 PID: 19438 Comm: syz.1.4122 Not tainted syzkaller #0 PREEMPT(full) [ 435.650169][T19438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 435.650180][T19438] Call Trace: [ 435.650187][T19438] [ 435.650195][T19438] dump_stack_lvl+0xe8/0x150 [ 435.650226][T19438] should_fail_ex+0x410/0x560 [ 435.650252][T19438] _copy_from_user+0x2d/0xb0 [ 435.650277][T19438] generic_map_update_batch+0x662/0xae0 [ 435.650317][T19438] ? __pfx_generic_map_update_batch+0x10/0x10 [ 435.650344][T19438] ? __fget_files+0x2a/0x420 [ 435.650375][T19438] ? __pfx_generic_map_update_batch+0x10/0x10 [ 435.650404][T19438] bpf_map_do_batch+0x391/0x630 [ 435.650432][T19438] __sys_bpf+0xbe5/0xd90 [ 435.650464][T19438] ? __pfx___sys_bpf+0x10/0x10 [ 435.650496][T19438] ? __fget_files+0x2a/0x420 [ 435.650537][T19438] ? ksys_write+0x242/0x270 [ 435.650565][T19438] ? __pfx_ksys_write+0x10/0x10 [ 435.650596][T19438] __x64_sys_bpf+0xba/0xd0 [ 435.650618][T19438] do_syscall_64+0x166/0x520 [ 435.650641][T19438] ? trace_irq_disable+0x3b/0x140 [ 435.650659][T19438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.650678][T19438] ? clear_bhb_loop+0x70/0xc0 [ 435.650702][T19438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.650720][T19438] RIP: 0033:0x7f5d90d9e159 [ 435.650737][T19438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.650752][T19438] RSP: 002b:00007f5d91bd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 435.650772][T19438] RAX: ffffffffffffffda RBX: 00007f5d91025fa0 RCX: 00007f5d90d9e159 [ 435.650786][T19438] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 000000000000001a [ 435.650798][T19438] RBP: 00007f5d91bd0090 R08: 0000000000000000 R09: 0000000000000000 [ 435.650810][T19438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 435.650821][T19438] R13: 00007f5d91026038 R14: 00007f5d91025fa0 R15: 00007ffed17321b8 [ 435.650852][T19438] [ 435.703519][T19439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4120'. [ 435.964809][T19447] netlink: 'syz.1.4126': attribute type 1 has an invalid length. [ 435.964834][T19447] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4126'. [ 435.986519][T19447] netlink: 'syz.1.4126': attribute type 1 has an invalid length. [ 436.003623][T19451] netlink: 'syz.1.4126': attribute type 1 has an invalid length. [ 436.076725][T19447] bond3: option mode: invalid value (7) [ 436.085394][T19447] bond3 (unregistering): Released all slaves [ 436.230347][T19451] bond3: option mode: invalid value (7) [ 436.244269][T19465] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4129'. [ 436.272773][T19451] bond3 (unregistering): Released all slaves [ 436.306079][T19477] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 436.322999][T19477] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4132'. [ 436.360227][T19460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.360251][T19460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.386156][T19460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.386178][T19460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.391376][T19485] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4129'. [ 436.391427][T19485] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4129'. [ 436.394852][T19470] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4133'. [ 436.399892][T19484] x_tables: duplicate underflow at hook 1 [ 436.404747][T19484] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 436.407330][T19460] batman_adv: batadv0: Interface deactivated: dummy0 [ 436.407349][T19460] batman_adv: batadv0: Removing interface: dummy0 [ 436.753539][T19493] syzkaller1: entered promiscuous mode [ 436.753563][T19493] syzkaller1: entered allmulticast mode [ 436.785447][T19493] netlink: 'syz.2.4135': attribute type 2 has an invalid length. [ 436.880653][T19504] netlink: 'syz.2.4135': attribute type 2 has an invalid length. [ 436.880919][T19506] batman_adv: batadv0: Interface deactivated: dummy0 [ 436.880935][T19506] batman_adv: batadv0: Removing interface: dummy0 [ 436.964859][T19509] xt_SECMARK: invalid mode: 9 [ 437.166283][T19518] bridge1: entered allmulticast mode [ 437.418688][T19520] batman_adv: batadv0: Interface deactivated: dummy0 [ 437.460056][T19520] bridge_slave_1: left allmulticast mode [ 437.575676][T19520] geneve1: left promiscuous mode [ 437.584714][T19520] veth7: left promiscuous mode [ 437.595959][T19520] veth9: left promiscuous mode [ 437.597312][T19520] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 437.613230][T19520] ip6gretap2: left allmulticast mode [ 437.617233][T19520] macsec1: left promiscuous mode [ 437.760362][ T6536] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.761222][ T6536] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.761277][ T6536] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.761305][ T6536] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.786288][T19545] FAULT_INJECTION: forcing a failure. [ 437.786288][T19545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 437.786320][T19545] CPU: 1 UID: 0 PID: 19545 Comm: syz.0.4150 Not tainted syzkaller #0 PREEMPT(full) [ 437.786340][T19545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 437.786354][T19545] Call Trace: [ 437.786361][T19545] [ 437.786368][T19545] dump_stack_lvl+0xe8/0x150 [ 437.786399][T19545] should_fail_ex+0x410/0x560 [ 437.786423][T19545] _copy_from_iter+0x1d3/0x1660 [ 437.786445][T19545] ? trace_kmem_cache_alloc+0x29/0xe0 [ 437.786470][T19545] ? __build_skb+0x62/0x440 [ 437.786493][T19545] ? trace_kmalloc+0x2a/0xf0 [ 437.786518][T19545] ? __build_skb+0x62/0x440 [ 437.786538][T19545] ? __build_skb+0x62/0x440 [ 437.786557][T19545] ? __pfx__copy_from_iter+0x10/0x10 [ 437.786580][T19545] ? __build_skb+0x2a2/0x440 [ 437.786602][T19545] ? netlink_sendmsg+0x650/0xb40 [ 437.786619][T19545] ? skb_put+0x112/0x210 [ 437.786640][T19545] netlink_sendmsg+0x6c0/0xb40 [ 437.786665][T19545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.786690][T19545] ? apparmor_socket_sendmsg+0x98/0x360 [ 437.786710][T19545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.786724][T19545] sock_sendmsg_nosec+0x14e/0x190 [ 437.786751][T19545] ____sys_sendmsg+0x54e/0x850 [ 437.786776][T19545] ? __pfx_____sys_sendmsg+0x10/0x10 [ 437.786803][T19545] ? import_iovec+0x73/0xa0 [ 437.786823][T19545] ___sys_sendmsg+0x2a5/0x360 [ 437.786842][T19545] ? __lock_acquire+0x747/0x2de0 [ 437.786864][T19545] ? __pfx____sys_sendmsg+0x10/0x10 [ 437.786917][T19545] ? __fget_files+0x2a/0x420 [ 437.786939][T19545] ? __fget_files+0x3a2/0x420 [ 437.786969][T19545] __x64_sys_sendmsg+0x1b1/0x290 [ 437.786992][T19545] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 437.787028][T19545] do_syscall_64+0x166/0x520 [ 437.787052][T19545] ? trace_irq_disable+0x3b/0x140 [ 437.787068][T19545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.787087][T19545] ? clear_bhb_loop+0x70/0xc0 [ 437.787108][T19545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.787126][T19545] RIP: 0033:0x7f693a79e159 [ 437.787142][T19545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.787156][T19545] RSP: 002b:00007f693b69e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 437.787171][T19545] RAX: ffffffffffffffda RBX: 00007f693aa25fa0 RCX: 00007f693a79e159 [ 437.787181][T19545] RDX: 0000000000000844 RSI: 00002000000005c0 RDI: 0000000000000003 [ 437.787192][T19545] RBP: 00007f693b69e090 R08: 0000000000000000 R09: 0000000000000000 [ 437.787203][T19545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.787213][T19545] R13: 00007f693aa26038 R14: 00007f693aa25fa0 R15: 00007ffd8feb8ff8 [ 437.787242][T19545] [ 438.236332][T19565] netlink: 'syz.1.4159': attribute type 50 has an invalid length. [ 438.310564][T19571] netlink: 'syz.3.4158': attribute type 1 has an invalid length. [ 438.388676][T19571] bond5: entered promiscuous mode [ 438.389523][T19571] bond5: entered allmulticast mode [ 438.389922][T19571] 8021q: adding VLAN 0 to HW filter on device bond5 [ 438.586310][T19585] tipc: Enabled bearer , priority 0 [ 438.606646][T19584] tipc: Disabling bearer [ 438.694017][T19591] ipvlan2: entered promiscuous mode [ 439.178296][T19624] netlink: 'syz.4.4172': attribute type 3 has an invalid length. [ 439.331693][T19627] batman_adv: batadv0: Adding interface: gretap1 [ 439.331711][T19627] batman_adv: batadv0: The MTU of interface gretap1 is too small (1424) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.331738][T19627] batman_adv: batadv0: Interface activated: gretap1 [ 439.443793][T19632] syzkaller0: entered promiscuous mode [ 439.443817][T19632] syzkaller0: entered allmulticast mode [ 439.473871][T19644] FAULT_INJECTION: forcing a failure. [ 439.473871][T19644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.473903][T19644] CPU: 1 UID: 0 PID: 19644 Comm: syz.0.4180 Not tainted syzkaller #0 PREEMPT(full) [ 439.473923][T19644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 439.473934][T19644] Call Trace: [ 439.473941][T19644] [ 439.473949][T19644] dump_stack_lvl+0xe8/0x150 [ 439.473978][T19644] should_fail_ex+0x410/0x560 [ 439.474004][T19644] _copy_from_iter+0x1d3/0x1660 [ 439.474026][T19644] ? __alloc_skb+0x27a/0x7a0 [ 439.474052][T19644] ? __alloc_skb+0x27a/0x7a0 [ 439.474073][T19644] ? __alloc_skb+0x27a/0x7a0 [ 439.474093][T19644] ? __pfx__copy_from_iter+0x10/0x10 [ 439.474112][T19644] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 439.474146][T19644] ? __alloc_skb+0x27a/0x7a0 [ 439.474164][T19644] ? __alloc_skb+0x27a/0x7a0 [ 439.474190][T19644] ? netlink_sendmsg+0x650/0xb40 [ 439.474207][T19644] ? skb_put+0x112/0x210 [ 439.474231][T19644] netlink_sendmsg+0x6c0/0xb40 [ 439.474257][T19644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.474283][T19644] ? apparmor_socket_sendmsg+0x98/0x360 [ 439.474306][T19644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.474323][T19644] sock_sendmsg_nosec+0x14e/0x190 [ 439.474354][T19644] ____sys_sendmsg+0x54e/0x850 [ 439.474382][T19644] ? __pfx_____sys_sendmsg+0x10/0x10 [ 439.474413][T19644] ? import_iovec+0x73/0xa0 [ 439.474439][T19644] ___sys_sendmsg+0x2a5/0x360 [ 439.474460][T19644] ? __lock_acquire+0x747/0x2de0 [ 439.474482][T19644] ? __pfx____sys_sendmsg+0x10/0x10 [ 439.474538][T19644] ? __fget_files+0x2a/0x420 [ 439.474561][T19644] ? __fget_files+0x3a2/0x420 [ 439.474595][T19644] __x64_sys_sendmsg+0x1b1/0x290 [ 439.474620][T19644] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 439.474663][T19644] do_syscall_64+0x166/0x520 [ 439.474687][T19644] ? trace_irq_disable+0x3b/0x140 [ 439.474704][T19644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.474723][T19644] ? clear_bhb_loop+0x70/0xc0 [ 439.474746][T19644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.474765][T19644] RIP: 0033:0x7f693a79e159 [ 439.474782][T19644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.474797][T19644] RSP: 002b:00007f693b69e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 439.474817][T19644] RAX: ffffffffffffffda RBX: 00007f693aa25fa0 RCX: 00007f693a79e159 [ 439.474830][T19644] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 439.474842][T19644] RBP: 00007f693b69e090 R08: 0000000000000000 R09: 0000000000000000 [ 439.474853][T19644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.474864][T19644] R13: 00007f693aa26038 R14: 00007f693aa25fa0 R15: 00007ffd8feb8ff8 [ 439.474894][T19644] [ 439.510663][T19632] tipc: Enabled bearer , priority 0 [ 439.582955][T19631] tipc: Resetting bearer [ 439.736881][T19631] tipc: Disabling bearer [ 439.799690][T19653] openvswitch: ovs-s!: Dropping previously announced user features [ 439.885089][T19658] xt_SECMARK: invalid mode: 9 [ 440.055357][T19671] __nla_validate_parse: 8 callbacks suppressed [ 440.055377][T19671] netlink: 27 bytes leftover after parsing attributes in process `syz.3.4190'. [ 440.095269][T19669] syzkaller1: entered promiscuous mode [ 440.095292][T19669] syzkaller1: entered allmulticast mode [ 440.435309][T19695] netlink: 988 bytes leftover after parsing attributes in process `syz.1.4196'. [ 440.559880][T19703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4202'. [ 440.638129][T19703] veth9: entered promiscuous mode [ 440.656614][T19703] bond3: (slave veth9): Enslaving as an active interface with an up link [ 440.764394][T19712] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 440.786645][T19712] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4207'. [ 440.787363][T19714] FAULT_INJECTION: forcing a failure. [ 440.787363][T19714] name failslab, interval 1, probability 0, space 0, times 0 [ 440.787382][T19714] CPU: 1 UID: 0 PID: 19714 Comm: syz.2.4205 Not tainted syzkaller #0 PREEMPT(full) [ 440.787394][T19714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 440.787400][T19714] Call Trace: [ 440.787405][T19714] [ 440.787410][T19714] dump_stack_lvl+0xe8/0x150 [ 440.787429][T19714] should_fail_ex+0x410/0x560 [ 440.787445][T19714] should_failslab+0xa8/0x100 [ 440.787459][T19714] __kmalloc_cache_noprof+0xa3/0x600 [ 440.787468][T19714] ? __pfx___mutex_lock+0x10/0x10 [ 440.787483][T19714] ? genl_start+0x1c9/0x6d0 [ 440.787495][T19714] ? genl_start+0x1c9/0x6d0 [ 440.787510][T19714] genl_start+0x1c9/0x6d0 [ 440.787526][T19714] __netlink_dump_start+0x442/0x7b0 [ 440.787545][T19714] genl_family_rcv_msg_dumpit+0x213/0x310 [ 440.787566][T19714] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 440.787585][T19714] ? genl_get_cmd+0x82f/0x960 [ 440.787609][T19714] ? __pfx_genl_start+0x10/0x10 [ 440.787627][T19714] ? __pfx_genl_dumpit+0x10/0x10 [ 440.787645][T19714] ? __pfx_genl_done+0x10/0x10 [ 440.787665][T19714] ? __lock_acquire+0x747/0x2de0 [ 440.787691][T19714] genl_rcv_msg+0x5e1/0x7a0 [ 440.787717][T19714] ? __pfx_genl_rcv_msg+0x10/0x10 [ 440.787734][T19714] ? __pfx_ila_xlat_nl_dump_start+0x10/0x10 [ 440.787752][T19714] ? __pfx_ila_xlat_nl_dump+0x10/0x10 [ 440.787768][T19714] ? __pfx_ila_xlat_nl_dump_done+0x10/0x10 [ 440.787801][T19714] netlink_rcv_skb+0x226/0x4a0 [ 440.787830][T19714] ? __pfx_genl_rcv_msg+0x10/0x10 [ 440.787851][T19714] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 440.787892][T19714] ? down_read+0x2be/0x330 [ 440.787921][T19714] genl_rcv+0x28/0x40 [ 440.787941][T19714] netlink_unicast+0x7bd/0x940 [ 440.787977][T19714] netlink_sendmsg+0x813/0xb40 [ 440.788004][T19714] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.788029][T19714] ? apparmor_socket_sendmsg+0x98/0x360 [ 440.788059][T19714] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.788075][T19714] sock_sendmsg_nosec+0x14e/0x190 [ 440.788105][T19714] ____sys_sendmsg+0x54e/0x850 [ 440.788133][T19714] ? __pfx_____sys_sendmsg+0x10/0x10 [ 440.788165][T19714] ? import_iovec+0x73/0xa0 [ 440.788190][T19714] ___sys_sendmsg+0x2a5/0x360 [ 440.788211][T19714] ? __lock_acquire+0x747/0x2de0 [ 440.788233][T19714] ? __pfx____sys_sendmsg+0x10/0x10 [ 440.788290][T19714] ? __fget_files+0x2a/0x420 [ 440.788313][T19714] ? __fget_files+0x3a2/0x420 [ 440.788346][T19714] __x64_sys_sendmsg+0x1b1/0x290 [ 440.788372][T19714] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 440.788416][T19714] do_syscall_64+0x166/0x520 [ 440.788438][T19714] ? trace_irq_disable+0x3b/0x140 [ 440.788455][T19714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.788473][T19714] ? clear_bhb_loop+0x70/0xc0 [ 440.788495][T19714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.788513][T19714] RIP: 0033:0x7fa81379e159 [ 440.788530][T19714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.788544][T19714] RSP: 002b:00007fa8145d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 440.788562][T19714] RAX: ffffffffffffffda RBX: 00007fa813a25fa0 RCX: 00007fa81379e159 [ 440.788575][T19714] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 440.788586][T19714] RBP: 00007fa8145d9090 R08: 0000000000000000 R09: 0000000000000000 [ 440.788597][T19714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.788607][T19714] R13: 00007fa813a26038 R14: 00007fa813a25fa0 R15: 00007ffeabeb8898 [ 440.788638][T19714] [ 440.846926][T19712] x_tables: duplicate underflow at hook 1 [ 440.864099][T19712] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 441.153800][T19718] wlan1 speed is unknown, defaulting to 1000 [ 441.302766][T19732] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 441.304214][T19732] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4214'. [ 441.417906][T19732] x_tables: duplicate underflow at hook 1 [ 441.420447][T19732] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 441.421782][T19735] netlink: 1404 bytes leftover after parsing attributes in process `syz.4.4213'. [ 441.738943][T19757] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4219'. [ 441.758452][T19754] syzkaller0: entered promiscuous mode [ 441.758473][T19754] syzkaller0: entered allmulticast mode [ 441.876246][T19766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4223'. [ 442.015830][T19754] tipc: Enabled bearer , priority 0 [ 442.027902][T19753] tipc: Resetting bearer [ 442.199361][T19753] tipc: Disabling bearer [ 442.801191][T19789] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 442.803568][T19787] tipc: Enabled bearer , priority 0 [ 442.894613][T19786] tipc: Disabling bearer [ 443.298186][T19821] xt_SECMARK: invalid mode: 9 [ 443.611291][T19836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4243'. [ 443.657718][T19844] netlink: 'syz.3.4247': attribute type 12 has an invalid length. [ 443.781203][T19850] syzkaller0: entered promiscuous mode [ 443.781226][T19850] syzkaller0: entered allmulticast mode [ 443.844026][T19845] tipc: Enabling of bearer rejected, failed to enable media [ 443.845620][T19850] tipc: Started in network mode [ 443.845646][T19850] tipc: Node identity 6e5b7c222944, cluster identity 4711 [ 443.845845][T19850] tipc: Enabled bearer , priority 0 [ 443.858725][T19848] tipc: Resetting bearer [ 443.944778][T19848] tipc: Disabling bearer [ 444.175866][T19874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4255'. [ 444.543830][T19896] xt_LOG: prefix is not null-terminated [ 444.791442][T19907] x_tables: ip_tables: osf match: only valid for protocol 6 [ 444.803359][T19912] FAULT_INJECTION: forcing a failure. [ 444.803359][T19912] name failslab, interval 1, probability 0, space 0, times 0 [ 444.803459][T19912] CPU: 0 UID: 0 PID: 19912 Comm: syz.3.4266 Not tainted syzkaller #0 PREEMPT(full) [ 444.803479][T19912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 444.803489][T19912] Call Trace: [ 444.803498][T19912] [ 444.803505][T19912] dump_stack_lvl+0xe8/0x150 [ 444.803536][T19912] should_fail_ex+0x410/0x560 [ 444.803563][T19912] should_failslab+0xa8/0x100 [ 444.803586][T19912] __kmalloc_cache_noprof+0xa3/0x600 [ 444.803605][T19912] ? ila_xlat_nl_dump_start+0xcf/0x180 [ 444.803624][T19912] ? ila_xlat_nl_dump_start+0xcf/0x180 [ 444.803649][T19912] ila_xlat_nl_dump_start+0xcf/0x180 [ 444.803671][T19912] genl_start+0x4c1/0x6d0 [ 444.803700][T19912] __netlink_dump_start+0x442/0x7b0 [ 444.803734][T19912] genl_family_rcv_msg_dumpit+0x213/0x310 [ 444.803760][T19912] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 444.803781][T19912] ? genl_get_cmd+0x82f/0x960 [ 444.803807][T19912] ? __pfx_genl_start+0x10/0x10 [ 444.803826][T19912] ? __pfx_genl_dumpit+0x10/0x10 [ 444.803844][T19912] ? __pfx_genl_done+0x10/0x10 [ 444.803867][T19912] ? __lock_acquire+0x747/0x2de0 [ 444.803895][T19912] genl_rcv_msg+0x5e1/0x7a0 [ 444.803923][T19912] ? __pfx_genl_rcv_msg+0x10/0x10 [ 444.803943][T19912] ? __pfx_ila_xlat_nl_dump_start+0x10/0x10 [ 444.803961][T19912] ? __pfx_ila_xlat_nl_dump+0x10/0x10 [ 444.803978][T19912] ? __pfx_ila_xlat_nl_dump_done+0x10/0x10 [ 444.804011][T19912] netlink_rcv_skb+0x226/0x4a0 [ 444.804039][T19912] ? __pfx_genl_rcv_msg+0x10/0x10 [ 444.804062][T19912] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 444.804104][T19912] ? down_read+0x2be/0x330 [ 444.804137][T19912] genl_rcv+0x28/0x40 [ 444.804156][T19912] netlink_unicast+0x7bd/0x940 [ 444.804192][T19912] netlink_sendmsg+0x813/0xb40 [ 444.804219][T19912] ? __pfx_netlink_sendmsg+0x10/0x10 [ 444.804244][T19912] ? apparmor_socket_sendmsg+0x98/0x360 [ 444.804267][T19912] ? __pfx_netlink_sendmsg+0x10/0x10 [ 444.804289][T19912] sock_sendmsg_nosec+0x14e/0x190 [ 444.804320][T19912] ____sys_sendmsg+0x54e/0x850 [ 444.804349][T19912] ? __pfx_____sys_sendmsg+0x10/0x10 [ 444.804381][T19912] ? import_iovec+0x73/0xa0 [ 444.804407][T19912] ___sys_sendmsg+0x2a5/0x360 [ 444.804428][T19912] ? __lock_acquire+0x747/0x2de0 [ 444.804449][T19912] ? __pfx____sys_sendmsg+0x10/0x10 [ 444.804508][T19912] ? __fget_files+0x2a/0x420 [ 444.804530][T19912] ? __fget_files+0x3a2/0x420 [ 444.804564][T19912] __x64_sys_sendmsg+0x1b1/0x290 [ 444.804589][T19912] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 444.804634][T19912] do_syscall_64+0x166/0x520 [ 444.804657][T19912] ? trace_irq_disable+0x3b/0x140 [ 444.804675][T19912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.804693][T19912] ? clear_bhb_loop+0x70/0xc0 [ 444.804715][T19912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.804733][T19912] RIP: 0033:0x7f2cff79e159 [ 444.804750][T19912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.804765][T19912] RSP: 002b:00007f2d005f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 444.804784][T19912] RAX: ffffffffffffffda RBX: 00007f2cffa25fa0 RCX: 00007f2cff79e159 [ 444.804797][T19912] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 444.804808][T19912] RBP: 00007f2d005f0090 R08: 0000000000000000 R09: 0000000000000000 [ 444.804819][T19912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.804829][T19912] R13: 00007f2cffa26038 R14: 00007f2cffa25fa0 R15: 00007ffc1086f6b8 [ 444.804861][T19912] [ 445.654322][T19937] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 445.678305][T19937] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4274'. [ 445.686888][T19937] x_tables: duplicate underflow at hook 1 [ 445.703529][T19937] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 445.715637][T19940] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4277'. [ 445.715662][T19940] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4277'. [ 445.929787][T19953] tipc: Enabling of bearer rejected, failed to enable media [ 446.098713][T19957] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 446.120069][T19957] bond6: (slave lo): Enslaving as an active interface with an up link [ 446.131981][T19957] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 446.366526][T19971] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4285'. [ 446.552139][T19991] netlink: 3596 bytes leftover after parsing attributes in process `syz.1.4286'. [ 446.641798][T19995] FAULT_INJECTION: forcing a failure. [ 446.641798][T19995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 446.641829][T19995] CPU: 0 UID: 0 PID: 19995 Comm: syz.2.4287 Not tainted syzkaller #0 PREEMPT(full) [ 446.641848][T19995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 446.641858][T19995] Call Trace: [ 446.641865][T19995] [ 446.641872][T19995] dump_stack_lvl+0xe8/0x150 [ 446.641901][T19995] should_fail_ex+0x410/0x560 [ 446.641925][T19995] _copy_from_user+0x2d/0xb0 [ 446.641948][T19995] generic_map_update_batch+0x6b1/0xae0 [ 446.641983][T19995] ? __pfx_generic_map_update_batch+0x10/0x10 [ 446.642007][T19995] ? __fget_files+0x2a/0x420 [ 446.642035][T19995] ? __pfx_generic_map_update_batch+0x10/0x10 [ 446.642057][T19995] bpf_map_do_batch+0x391/0x630 [ 446.642082][T19995] __sys_bpf+0xbe5/0xd90 [ 446.642108][T19995] ? __pfx___sys_bpf+0x10/0x10 [ 446.642137][T19995] ? __fget_files+0x2a/0x420 [ 446.642182][T19995] ? ksys_write+0x242/0x270 [ 446.642208][T19995] ? __pfx_ksys_write+0x10/0x10 [ 446.642236][T19995] __x64_sys_bpf+0xba/0xd0 [ 446.642255][T19995] do_syscall_64+0x166/0x520 [ 446.642278][T19995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.642295][T19995] ? clear_bhb_loop+0x70/0xc0 [ 446.642316][T19995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.642333][T19995] RIP: 0033:0x7fa81379e159 [ 446.642349][T19995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.642364][T19995] RSP: 002b:00007fa8145d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 446.642382][T19995] RAX: ffffffffffffffda RBX: 00007fa813a25fa0 RCX: 00007fa81379e159 [ 446.642394][T19995] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 000000000000001a [ 446.642405][T19995] RBP: 00007fa8145d9090 R08: 0000000000000000 R09: 0000000000000000 [ 446.642415][T19995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 446.642424][T19995] R13: 00007fa813a26038 R14: 00007fa813a25fa0 R15: 00007ffeabeb8898 [ 446.642453][T19995] [ 446.997016][T20005] netlink: 5396 bytes leftover after parsing attributes in process `syz.1.4293'. [ 446.997041][T20005] openvswitch: netlink: Flow key attr not present in new flow. [ 447.144191][T20012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4295'. [ 447.264105][T20012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4295'. [ 447.264131][T20012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4295'. [ 447.264159][T20012] netlink: 'syz.1.4295': attribute type 12 has an invalid length. [ 447.315558][T20012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4295'. [ 447.315595][T20012] netlink: 'syz.1.4295': attribute type 12 has an invalid length. [ 447.321918][ T6531] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.321960][ T6531] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.321991][ T6531] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.322022][ T6531] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.438152][T20024] netlink: 'syz.3.4297': attribute type 1 has an invalid length. [ 447.702165][T20033] tipc: Enabled bearer , priority 10 [ 447.723726][T20032] tipc: Disabling bearer [ 448.245790][ T59] IPVS: starting estimator thread 0... [ 448.352937][T20063] IPVS: using max 33 ests per chain, 79200 per kthread [ 448.574266][T20070] openvswitch: netlink: VXLAN extension message has 5 unknown bytes. [ 448.684215][T20081] veth0_macvtap: left promiscuous mode [ 449.352933][T20119] netlink: 'syz.4.4325': attribute type 12 has an invalid length. [ 449.585384][T20126] ipvlan2: entered promiscuous mode [ 449.585658][T20126] team0: Device ipvlan2 is VLAN challenged and team device has VLAN set up [ 450.149675][T20150] openvswitch: ovs-s!: Dropping previously announced user features [ 450.277847][T20152] netlink: 'syz.3.4338': attribute type 10 has an invalid length. [ 450.316100][T20152] ipvlan2: entered promiscuous mode [ 451.130850][T20184] __nla_validate_parse: 10 callbacks suppressed [ 451.130873][T20184] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4350'. [ 451.286846][T20188] veth11: entered promiscuous mode [ 451.303347][T20188] bond6: (slave veth11): Enslaving as an active interface with an up link [ 451.349976][T20186] syzkaller0: entered promiscuous mode [ 451.350001][T20186] syzkaller0: entered allmulticast mode [ 451.352220][T20195] ip6t_ah: unknown flags 4 [ 451.379429][T20180] netlink: 'syz.3.4349': attribute type 83 has an invalid length. [ 451.383173][T20180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4349'. [ 451.599369][T20209] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4357'. [ 451.599400][T20209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4357'. [ 451.599419][T20209] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4357'. [ 451.785815][T20218] ovs-s!: entered promiscuous mode [ 451.823060][T20222] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 451.824439][T20215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4358'. [ 451.824454][T20215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.824465][T20215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.826427][T20215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.826448][T20215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.862908][T20222] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4363'. [ 451.904717][T20222] x_tables: duplicate underflow at hook 1 [ 451.905879][T20222] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 452.001411][T20228] netlink: 'syz.0.4365': attribute type 10 has an invalid length. [ 452.001431][T20228] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4365'. [ 452.027428][T20228] ipvlan2: entered promiscuous mode [ 452.275914][T20245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4373'. [ 452.472351][T20256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4377'. [ 452.763148][T20278] openvswitch: ovs-s!: Dropping previously announced user features [ 452.764882][T20274] tipc: Enabled bearer , priority 10 [ 452.814803][T20272] tipc: Disabling bearer [ 453.049986][T20293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.050144][T20293] batadv_slave_0: entered allmulticast mode [ 453.092585][T20297] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 453.127394][T20297] x_tables: duplicate underflow at hook 1 [ 453.155264][T20297] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 453.236433][T20299] syzkaller0: entered promiscuous mode [ 453.236455][T20299] syzkaller0: entered allmulticast mode [ 454.080717][T20353] openvswitch: ovs-s!: Dropping previously announced user features [ 454.334387][T20368] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 454.402099][T20368] x_tables: duplicate underflow at hook 1 [ 454.410362][T20368] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 454.873996][T20390] x_tables: ip_tables: osf match: only valid for protocol 6 [ 455.482636][T20425] x_tables: ip_tables: osf match: only valid for protocol 6 [ 455.506714][T20433] openvswitch: ovs-s!: Dropping previously announced user features [ 455.865448][T20453] FAULT_INJECTION: forcing a failure. [ 455.865448][T20453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.865481][T20453] CPU: 0 UID: 0 PID: 20453 Comm: syz.2.4443 Not tainted syzkaller #0 PREEMPT(full) [ 455.865501][T20453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 455.865512][T20453] Call Trace: [ 455.865519][T20453] [ 455.865527][T20453] dump_stack_lvl+0xe8/0x150 [ 455.865557][T20453] should_fail_ex+0x410/0x560 [ 455.865584][T20453] _copy_to_user+0x31/0xb0 [ 455.865609][T20453] bpf_prog_test_run_raw_tp+0x604/0x840 [ 455.865645][T20453] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 455.865674][T20453] ? __fget_files+0x2a/0x420 [ 455.865702][T20453] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 455.865730][T20453] bpf_prog_test_run+0x2c5/0x340 [ 455.865756][T20453] __sys_bpf+0xa22/0xd90 [ 455.865783][T20453] ? __pfx___sys_bpf+0x10/0x10 [ 455.865813][T20453] ? __fget_files+0x2a/0x420 [ 455.865855][T20453] ? ksys_write+0x242/0x270 [ 455.865884][T20453] ? __pfx_ksys_write+0x10/0x10 [ 455.865916][T20453] __x64_sys_bpf+0xba/0xd0 [ 455.865937][T20453] do_syscall_64+0x166/0x520 [ 455.865961][T20453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.865980][T20453] ? clear_bhb_loop+0x70/0xc0 [ 455.866004][T20453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.866022][T20453] RIP: 0033:0x7fa81379e159 [ 455.866040][T20453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.866056][T20453] RSP: 002b:00007fa8145d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 455.866075][T20453] RAX: ffffffffffffffda RBX: 00007fa813a25fa0 RCX: 00007fa81379e159 [ 455.866089][T20453] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 455.866101][T20453] RBP: 00007fa8145d9090 R08: 0000000000000000 R09: 0000000000000000 [ 455.866113][T20453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.866123][T20453] R13: 00007fa813a26038 R14: 00007fa813a25fa0 R15: 00007ffeabeb8898 [ 455.866150][T20453] [ 456.152287][T20459] __nla_validate_parse: 41 callbacks suppressed [ 456.152309][T20459] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4445'. [ 456.203364][T20461] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4447'. [ 456.315043][T20467] ip6t_rpfilter: unknown options [ 456.319072][T20468] ip6t_rpfilter: unknown options [ 456.325184][T20467] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.4448'. [ 456.325298][T20467] 0XD: renamed from gretap0 (while UP) [ 456.375826][T20467] 0XD: entered allmulticast mode [ 456.430134][T20472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4451'. [ 456.509001][T20483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4452'. [ 456.524342][T20483] netlink: 'syz.1.4452': attribute type 62 has an invalid length. [ 457.165346][T20507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4461'. [ 522.181908][T20561] tipc: Enabled bearer , priority 10 [ 522.199284][T20559] tipc: Disabling bearer [ 522.276349][T20565] netlink: 988 bytes leftover after parsing attributes in process `syz.3.4481'. [ 522.358124][T20567] netlink: Conntrack attr has 12 unknown bytes [ 522.358163][T20567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.441270][T20570] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 522.459030][T20572] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 522.461020][T20570] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4482'. [ 522.463211][T20572] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4483'. [ 522.480505][T20570] x_tables: duplicate underflow at hook 1 [ 522.486019][T20570] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 522.491858][T20572] x_tables: duplicate underflow at hook 1 [ 522.495154][T20572] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 522.597013][T20578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4484'. [ 522.639971][T20578] xt_IDLETIMER: label is empty or not nul-terminated [ 522.665848][T20581] syzkaller0: entered promiscuous mode [ 522.665872][T20581] syzkaller0: entered allmulticast mode [ 523.096968][T20611] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4499'. [ 523.145269][T20614] xt_SECMARK: invalid mode: 9 [ 523.211724][T20618] syzkaller0: entered promiscuous mode [ 523.211747][T20618] syzkaller0: entered allmulticast mode [ 523.513502][T20625] tipc: Enabled bearer , priority 10 [ 523.518501][T20617] tipc: Resetting bearer [ 523.594990][T20635] ip_tables: iptables: counters copy to user failed while replacing table [ 523.613197][T20617] tipc: Disabling bearer [ 523.783777][T20644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4511'. [ 523.928881][T20658] x_tables: ip_tables: osf match: only valid for protocol 6 [ 523.943957][T20661] tipc: Enabled bearer , priority 10 [ 524.014203][T20644] bond10: option lacp_active: invalid value (5) [ 524.027100][T20644] bond10 (unregistering): Released all slaves [ 524.220582][T20640] tipc: Disabling bearer [ 524.419517][T20679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4518'. [ 524.792798][T20697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4525'. [ 524.810315][T20697] netlink: 'syz.0.4525': attribute type 1 has an invalid length. [ 524.844778][T20702] xt_SECMARK: invalid mode: 9 [ 524.879153][T20697] 8021q: adding VLAN 0 to HW filter on device bond6 [ 524.971981][T20708] netlink: 'syz.4.4527': attribute type 12 has an invalid length. [ 525.009356][T20711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4525'. [ 525.028844][T20705] bond6: (slave veth13): Enslaving as an active interface with a down link [ 525.046977][T20714] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4530'. [ 525.116813][T20697] 0XD: left allmulticast mode [ 525.190218][T20697] batadv_slave_0: left allmulticast mode [ 525.191283][T20697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.204262][T20697] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 525.286335][T20705] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 525.294591][T20705] bond6: (slave batadv1): making interface the new active one [ 525.295864][T20705] batadv1: entered promiscuous mode [ 525.303119][T20705] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 525.322862][T20725] x_tables: ip_tables: osf match: only valid for protocol 6 [ 525.470444][T20732] ip6t_ah: unknown flags 4 [ 525.752197][T20750] syzkaller0: create flow: hash 3834482264 index 1 [ 526.361125][T20770] geneve2: entered promiscuous mode [ 526.454667][T20743] syzkaller0: delete flow: hash 3834482264 index 1 [ 527.054432][T20790] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 527.078518][ T6521] IPVS: starting estimator thread 0... [ 527.170605][T20792] IPVS: using max 29 ests per chain, 69600 per kthread [ 528.749078][T20797] netlink: 'syz.0.4555': attribute type 1 has an invalid length. [ 528.784563][T20797] 8021q: adding VLAN 0 to HW filter on device bond7 [ 528.825143][T20797] bond7: (slave syz_tun): Enslaving as a backup interface with an up link [ 529.090323][T20804] wlan1 speed is unknown, defaulting to 1000 [ 529.121812][T20815] pim6reg: entered allmulticast mode [ 529.133834][T20806] pim6reg: left allmulticast mode [ 529.403888][T20825] __nla_validate_parse: 2 callbacks suppressed [ 529.403908][T20825] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4564'. [ 529.785399][T20836] syzkaller0: entered promiscuous mode [ 529.785422][T20836] syzkaller0: entered allmulticast mode [ 529.865458][T20852] ip6t_ah: unknown flags 4 [ 530.016277][T20863] netlink: 16386 bytes leftover after parsing attributes in process `syz.4.4577'. [ 530.018620][T20863] netlink: 16386 bytes leftover after parsing attributes in process `syz.4.4577'. [ 530.496690][T20894] netlink: 'syz.2.4586': attribute type 12 has an invalid length. [ 530.770408][T20896] netlink: 988 bytes leftover after parsing attributes in process `syz.0.4587'. [ 530.796725][T20898] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4588'. [ 530.796756][T20898] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4588'. [ 530.796770][T20898] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4588'. [ 531.202249][T20906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4589'. [ 531.206808][T20905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4591'. [ 531.574627][T20917] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4596'. [ 532.669080][T20965] FAULT_INJECTION: forcing a failure. [ 532.669080][T20965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 532.669113][T20965] CPU: 0 UID: 0 PID: 20965 Comm: syz.0.4612 Not tainted syzkaller #0 PREEMPT(full) [ 532.669132][T20965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 532.669142][T20965] Call Trace: [ 532.669149][T20965] [ 532.669158][T20965] dump_stack_lvl+0xe8/0x150 [ 532.669188][T20965] should_fail_ex+0x410/0x560 [ 532.669213][T20965] _copy_from_user+0x2d/0xb0 [ 532.669238][T20965] generic_map_update_batch+0x6b1/0xae0 [ 532.669278][T20965] ? __pfx_generic_map_update_batch+0x10/0x10 [ 532.669305][T20965] ? __fget_files+0x2a/0x420 [ 532.669337][T20965] ? __pfx_generic_map_update_batch+0x10/0x10 [ 532.669362][T20965] bpf_map_do_batch+0x391/0x630 [ 532.669397][T20965] __sys_bpf+0xbe5/0xd90 [ 532.669425][T20965] ? __pfx___sys_bpf+0x10/0x10 [ 532.669456][T20965] ? __fget_files+0x2a/0x420 [ 532.669497][T20965] ? ksys_write+0x242/0x270 [ 532.669526][T20965] ? __pfx_ksys_write+0x10/0x10 [ 532.669557][T20965] __x64_sys_bpf+0xba/0xd0 [ 532.669579][T20965] do_syscall_64+0x166/0x520 [ 532.669603][T20965] ? trace_irq_disable+0x3b/0x140 [ 532.669621][T20965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.669640][T20965] ? clear_bhb_loop+0x70/0xc0 [ 532.669663][T20965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.669682][T20965] RIP: 0033:0x7f693a79e159 [ 532.669700][T20965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.669715][T20965] RSP: 002b:00007f693b69e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 532.669736][T20965] RAX: ffffffffffffffda RBX: 00007f693aa25fa0 RCX: 00007f693a79e159 [ 532.669749][T20965] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 000000000000001a [ 532.669760][T20965] RBP: 00007f693b69e090 R08: 0000000000000000 R09: 0000000000000000 [ 532.669772][T20965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 532.669783][T20965] R13: 00007f693aa26038 R14: 00007f693aa25fa0 R15: 00007ffd8feb8ff8 [ 532.669810][T20965] [ 532.670103][T20963] xt_bpf: check failed: parse error [ 532.978895][T20973] pimreg9: entered allmulticast mode [ 532.988205][T10997] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 533.187416][T20987] tipc: Enabled bearer , priority 0 [ 533.202598][T20982] tipc: Disabling bearer [ 533.309507][T10997] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 533.343584][T20998] dvmrp8: entered allmulticast mode [ 533.354546][T20999] netlink: 'syz.4.4624': attribute type 2 has an invalid length. [ 533.650039][T21021] block nbd1: shutting down sockets [ 533.743624][ T59] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 533.797403][T21029] netlink: 'syz.0.4638': attribute type 1 has an invalid length. [ 534.021634][T21029] 8021q: adding VLAN 0 to HW filter on device bond8 [ 534.042080][T21033] macvlan2: entered promiscuous mode [ 534.042102][T21033] macvlan2: entered allmulticast mode [ 534.042425][T21033] bond8: entered allmulticast mode [ 534.042465][T21033] bond8: entered promiscuous mode [ 534.043310][T21033] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 534.079794][T21033] team0: Port device macvlan2 added [ 534.105659][T21030] bond8: (slave ip6gretap2): making interface the new active one [ 534.105682][T21030] ip6gretap2: entered promiscuous mode [ 534.105809][T21030] ip6gretap2: entered allmulticast mode [ 534.132758][T21030] bond8: (slave ip6gretap2): Enslaving as an active interface with an up link [ 534.504285][T21076] __nla_validate_parse: 14 callbacks suppressed [ 534.506154][T21076] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4654'. [ 534.506213][T21076] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4654'. [ 534.594207][T21076] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4654'. [ 534.594265][T21076] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4654'. [ 534.598351][T21082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4655'. [ 534.755704][T21082] veth13: entered promiscuous mode [ 534.777501][T21082] bond5: (slave veth13): Enslaving as an active interface with an up link [ 534.779556][ T6521] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 534.779776][ T6521] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 534.821551][T21076] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4654'. [ 534.821608][T21076] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4654'. [ 535.457444][T21128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4671'. [ 535.457532][T21128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4671'. [ 535.501293][T21130] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 535.514571][T21130] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4669'. [ 535.571295][T21130] x_tables: duplicate underflow at hook 1 [ 535.574009][T21130] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 535.634271][T21140] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 535.665889][T21140] x_tables: duplicate underflow at hook 1 [ 535.675056][T21140] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 535.732563][ T44] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 536.504084][T21158] veth25: entered promiscuous mode [ 536.505381][T21165] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 536.518739][T21158] bond12: (slave veth25): Enslaving as an active interface with an up link [ 536.812207][ T1116] batadv1: left promiscuous mode [ 537.041605][T21190] tc_dump_action: action bad kind [ 537.557127][T21211] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 537.614528][T21211] x_tables: duplicate underflow at hook 1 [ 537.616406][T21211] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 537.723176][T21219] tipc: Enabled bearer , priority 10 [ 537.745568][T21217] tipc: Disabling bearer [ 538.166334][T21237] veth27: entered promiscuous mode [ 538.183330][T21237] bond13: (slave veth27): Enslaving as an active interface with an up link [ 538.220301][T21251] batadv_slave_1: entered promiscuous mode [ 538.962959][T21289] tun0: tun_chr_ioctl cmd 1074025675 [ 538.962981][T21289] tun0: persist enabled [ 539.007914][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 539.026720][T21289] tun0: tun_chr_ioctl cmd 1074025675 [ 539.026744][T21289] tun0: persist enabled [ 539.192151][T21303] netlink: 'syz.2.4726': attribute type 10 has an invalid length. [ 539.265945][T21308] netlink: 'syz.3.4734': attribute type 7 has an invalid length. [ 539.706169][T21325] __nla_validate_parse: 16 callbacks suppressed [ 539.706192][T21325] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4741'. [ 539.843573][T21333] netlink: 'syz.0.4742': attribute type 5 has an invalid length. [ 539.959026][T21348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4747'. [ 539.971857][T21348] netlink: 'syz.2.4747': attribute type 1 has an invalid length. [ 539.994359][T21351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4748'. [ 540.123926][T21348] 8021q: adding VLAN 0 to HW filter on device bond14 [ 540.200121][T21349] bond14: (slave veth29): Enslaving as an active interface with a down link [ 540.261883][T21355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.263463][T21355] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.285531][T21355] batman_adv: batadv0: Interface activated: dummy0 [ 540.299676][T21355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.382980][T21355] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 540.383007][T21355] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 540.386527][T21355] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 540.438799][T21356] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 540.450342][T21356] bond14: (slave batadv1): making interface the new active one [ 540.451490][T21356] batadv1: entered promiscuous mode [ 540.453938][T21356] bond14: (slave batadv1): Enslaving as an active interface with an up link [ 540.592948][T21371] netlink: 988 bytes leftover after parsing attributes in process `syz.1.4751'. [ 540.702189][T21385] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 540.751626][T21385] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4754'. [ 540.781859][T21391] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4756'. [ 540.805717][T21385] x_tables: duplicate underflow at hook 1 [ 540.806920][T21385] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 541.211985][T21415] netlink: 'syz.4.4767': attribute type 1 has an invalid length. [ 541.234085][T21410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4764'. [ 541.416592][T21426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4769'. [ 541.427478][T21427] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4770'. [ 541.527320][T21429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4771'. [ 542.012309][T21459] tipc: Enabled bearer , priority 10 [ 542.017235][T21456] tipc: Disabling bearer [ 542.168090][T21461] 0XD: entered promiscuous mode [ 542.247760][T21467] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 542.311373][T21467] x_tables: duplicate underflow at hook 1 [ 542.314089][T21467] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 542.949744][ T6526] bond5 (unregistering): (slave gretap1): Releasing active interface [ 543.038783][ T6526] bond13 (unregistering): (slave gretap2): Releasing backup interface [ 543.097561][ T6526] bond9 (unregistering): (slave bridge0): Releasing backup interface [ 543.100841][ T6526] bridge0 (unregistering): left promiscuous mode [ 543.100859][ T6526] bridge0 (unregistering): left allmulticast mode [ 543.133734][ T6526] bond0 (unregistering): Released all slaves [ 543.144047][ T6526] bond1 (unregistering): Released all slaves [ 543.158121][ T6526] bond2 (unregistering): Released all slaves [ 543.166046][ T6526] bond3 (unregistering): Released all slaves [ 543.196548][ T6526] bond4 (unregistering): Released all slaves [ 543.208772][ T6526] bond5 (unregistering): Released all slaves [ 543.216702][ T6526] bond6 (unregistering): Released all slaves [ 543.232042][ T6526] bond7 (unregistering): Released all slaves [ 543.246192][ T6526] bond8 (unregistering): (slave veth11): Releasing backup interface [ 543.265614][ T6526] bond8 (unregistering): Released all slaves [ 543.289427][ T6526] bond9 (unregistering): Released all slaves [ 543.299657][ T6526] bond10 (unregistering): Released all slaves [ 543.312378][ T6526] bond11 (unregistering): Released all slaves [ 543.340889][ T6526] bond12 (unregistering): (slave veth15): Releasing backup interface [ 543.342246][ T6526] bond12 (unregistering): Released all slaves [ 543.351981][ T6526] bond13 (unregistering): Released all slaves [ 543.372304][ T6526] bond14 (unregistering): (slave veth17): Releasing backup interface [ 543.373571][ T6526] bond14 (unregistering): Released all slaves [ 543.395295][ T6526] bond15 (unregistering): (slave veth19): Releasing backup interface [ 543.396568][ T6526] bond15 (unregistering): Released all slaves [ 543.415467][ T6526] bond16 (unregistering): (slave wireguard0): Releasing backup interface [ 543.415486][ T6526] wireguard0: left promiscuous mode [ 543.416671][ T6526] bond16 (unregistering): Released all slaves [ 543.446630][ T6526] bond17 (unregistering): Released all slaves [ 543.457223][ T6526] bond18 (unregistering): Released all slaves [ 543.468750][ T6526] bond19 (unregistering): Released all slaves [ 543.485297][ T6526] bond20 (unregistering): (slave veth25): Releasing backup interface [ 543.486621][ T6526] bond20 (unregistering): Released all slaves [ 543.512002][ T6526] bond21 (unregistering): (slave veth27): Releasing backup interface [ 543.513326][ T6526] bond21 (unregistering): Released all slaves [ 543.525903][ T6526] bond22 (unregistering): Released all slaves [ 543.541404][ T6526] bond23 (unregistering): Released all slaves [ 543.696932][T21496] tipc: Enabling of bearer rejected, failed to enable media [ 543.752303][ T6526] ovs-s!: left promiscuous mode [ 543.852256][ T6526] : left promiscuous mode [ 543.951164][ T6526] tipc: Left network mode [ 543.984619][ T6526] IPVS: stopping backup sync thread 8988 ... [ 544.352351][T21539] syzkaller1: entered promiscuous mode [ 544.352376][T21539] syzkaller1: entered allmulticast mode [ 544.370098][T21541] netlink: 'syz.2.4807': attribute type 12 has an invalid length. [ 544.821989][T21555] __nla_validate_parse: 8 callbacks suppressed [ 544.822009][T21555] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4812'. [ 544.866360][T21552] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4811'. [ 544.879042][T21552] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4811'. [ 544.884545][T21553] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4809'. [ 544.895878][T21562] netlink: 'syz.0.4814': attribute type 83 has an invalid length. [ 544.943242][T21565] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4809'. [ 545.058621][ T6526] hsr_slave_0: left promiscuous mode [ 545.066968][ T6526] hsr_slave_1: left promiscuous mode [ 545.125608][ T6526] veth1_macvtap: left promiscuous mode [ 545.125648][ T6526] veth0_macvtap: left promiscuous mode [ 545.125914][ T6526] veth1_vlan: left promiscuous mode [ 545.125979][ T6526] veth0_vlan: left promiscuous mode [ 545.210577][T21575] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 545.216941][T21575] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4819'. [ 545.319799][T21582] x_tables: duplicate underflow at hook 1 [ 545.326452][T21582] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 545.729295][T21593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4823'. [ 546.222150][T21607] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4828'. [ 546.498611][T21623] netlink: 'syz.4.4833': attribute type 12 has an invalid length. [ 546.595312][ T6526] IPVS: stop unused estimator thread 0... [ 546.781614][T21633] ip6gretap2: entered allmulticast mode [ 547.141404][T21648] syzkaller0: entered promiscuous mode [ 547.141428][T21648] syzkaller0: entered allmulticast mode [ 547.218711][T21648] tipc: Enabled bearer , priority 10 [ 547.220531][T21647] tipc: Resetting bearer [ 547.301048][T21647] tipc: Disabling bearer [ 547.373546][T21607] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 547.373616][T21608] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 547.374660][T21656] netlink: 27 bytes leftover after parsing attributes in process `syz.3.4843'. [ 547.375904][T21608] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4828'. [ 547.488597][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 548.318784][T21712] xt_bpf: check failed: parse error [ 548.375992][T21713] pim6reg1: entered promiscuous mode [ 548.376015][T21713] pim6reg1: entered allmulticast mode [ 548.680425][ T30] audit: type=1107 audit(1790907480.989:11): pid=21725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='f 7' [ 549.235022][T21760] FAULT_INJECTION: forcing a failure. [ 549.235022][T21760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 549.235054][T21760] CPU: 0 UID: 0 PID: 21760 Comm: syz.2.4879 Not tainted syzkaller #0 PREEMPT(full) [ 549.235074][T21760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 549.235085][T21760] Call Trace: [ 549.235093][T21760] [ 549.235101][T21760] dump_stack_lvl+0xe8/0x150 [ 549.235131][T21760] should_fail_ex+0x410/0x560 [ 549.235157][T21760] _copy_from_user+0x2d/0xb0 [ 549.235183][T21760] generic_map_update_batch+0x662/0xae0 [ 549.235220][T21760] ? __pfx_generic_map_update_batch+0x10/0x10 [ 549.235246][T21760] ? __fget_files+0x2a/0x420 [ 549.235276][T21760] ? __pfx_generic_map_update_batch+0x10/0x10 [ 549.235302][T21760] bpf_map_do_batch+0x391/0x630 [ 549.235331][T21760] __sys_bpf+0xbe5/0xd90 [ 549.235357][T21760] ? __pfx___sys_bpf+0x10/0x10 [ 549.235388][T21760] ? __fget_files+0x2a/0x420 [ 549.235428][T21760] ? ksys_write+0x242/0x270 [ 549.235455][T21760] ? __pfx_ksys_write+0x10/0x10 [ 549.235485][T21760] __x64_sys_bpf+0xba/0xd0 [ 549.235507][T21760] do_syscall_64+0x166/0x520 [ 549.235529][T21760] ? trace_irq_disable+0x3b/0x140 [ 549.235545][T21760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.235564][T21760] ? clear_bhb_loop+0x70/0xc0 [ 549.235586][T21760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.235605][T21760] RIP: 0033:0x7fa81379e159 [ 549.235622][T21760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.235638][T21760] RSP: 002b:00007fa8145d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 549.235658][T21760] RAX: ffffffffffffffda RBX: 00007fa813a25fa0 RCX: 00007fa81379e159 [ 549.235672][T21760] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 000000000000001a [ 549.235684][T21760] RBP: 00007fa8145d9090 R08: 0000000000000000 R09: 0000000000000000 [ 549.235696][T21760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 549.235708][T21760] R13: 00007fa813a26038 R14: 00007fa813a25fa0 R15: 00007ffeabeb8898 [ 549.235738][T21760] [ 549.574592][T21774] netlink: 'syz.2.4885': attribute type 12 has an invalid length. [ 549.813946][T21782] ip6t_ah: unknown flags 4 [ 550.027336][T21791] syzkaller0: entered promiscuous mode [ 550.027359][T21791] syzkaller0: entered allmulticast mode [ 550.076300][T21791] tipc: Enabled bearer , priority 10 [ 550.086338][T21790] tipc: Resetting bearer [ 550.101506][T21799] __nla_validate_parse: 14 callbacks suppressed [ 550.101526][T21799] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4895'. [ 550.133627][T21790] tipc: Disabling bearer [ 550.145691][T21794] tipc: Enabled bearer , priority 0 [ 550.253794][T21793] tipc: Disabling bearer [ 550.423993][T21812] FAULT_INJECTION: forcing a failure. [ 550.423993][T21812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.424025][T21812] CPU: 0 UID: 0 PID: 21812 Comm: syz.0.4899 Not tainted syzkaller #0 PREEMPT(full) [ 550.424047][T21812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 550.424059][T21812] Call Trace: [ 550.424067][T21812] [ 550.424077][T21812] dump_stack_lvl+0xe8/0x150 [ 550.424108][T21812] should_fail_ex+0x410/0x560 [ 550.424136][T21812] _copy_from_user+0x2d/0xb0 [ 550.424162][T21812] generic_map_update_batch+0x6b1/0xae0 [ 550.424202][T21812] ? __pfx_generic_map_update_batch+0x10/0x10 [ 550.424230][T21812] ? __fget_files+0x2a/0x420 [ 550.424262][T21812] ? __pfx_generic_map_update_batch+0x10/0x10 [ 550.424288][T21812] bpf_map_do_batch+0x391/0x630 [ 550.424317][T21812] __sys_bpf+0xbe5/0xd90 [ 550.424347][T21812] ? __pfx___sys_bpf+0x10/0x10 [ 550.424379][T21812] ? __fget_files+0x2a/0x420 [ 550.424421][T21812] ? ksys_write+0x242/0x270 [ 550.424451][T21812] ? __pfx_ksys_write+0x10/0x10 [ 550.424481][T21812] __x64_sys_bpf+0xba/0xd0 [ 550.424502][T21812] do_syscall_64+0x166/0x520 [ 550.424524][T21812] ? trace_irq_disable+0x3b/0x140 [ 550.424540][T21812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.424560][T21812] ? clear_bhb_loop+0x70/0xc0 [ 550.424582][T21812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.424602][T21812] RIP: 0033:0x7f693a79e159 [ 550.424620][T21812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.424636][T21812] RSP: 002b:00007f693b69e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 550.424657][T21812] RAX: ffffffffffffffda RBX: 00007f693aa25fa0 RCX: 00007f693a79e159 [ 550.424672][T21812] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 000000000000001a [ 550.424691][T21812] RBP: 00007f693b69e090 R08: 0000000000000000 R09: 0000000000000000 [ 550.424702][T21812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 550.424714][T21812] R13: 00007f693aa26038 R14: 00007f693aa25fa0 R15: 00007ffd8feb8ff8 [ 550.424744][T21812] [ 550.723231][T21821] netlink: 988 bytes leftover after parsing attributes in process `syz.0.4904'. [ 550.893055][T21827] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4906'. [ 550.939359][T21830] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4909'. [ 551.178491][T21849] ip6t_ah: unknown flags 4 [ 551.353761][T21861] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 551.373715][T21861] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4920'. [ 551.393017][T21861] x_tables: duplicate underflow at hook 1 [ 551.394152][T21861] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 551.602318][ T1116] batadv1: left promiscuous mode [ 551.733961][T21543] udevd[21543]: setting owner of /dev/rfcomm2 to uid=0, gid=18 failed: No such file or directory [ 551.748010][T21876] syzkaller0: entered promiscuous mode [ 551.748031][T21876] syzkaller0: entered allmulticast mode [ 551.812733][T21876] tipc: Enabled bearer , priority 10 [ 551.816072][T21874] tipc: Resetting bearer [ 551.851673][T21874] tipc: Disabling bearer [ 551.886949][T21878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4925'. [ 551.887507][T21878] netlink: 'syz.4.4925': attribute type 2 has an invalid length. [ 551.887525][T21878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4925'. [ 552.060227][T21880] netlink: Failed to add %pK helper -22 [ 552.060292][T21880] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 552.135004][T21887] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 552.192718][T21894] FAULT_INJECTION: forcing a failure. [ 552.192718][T21894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.192752][T21894] CPU: 0 UID: 0 PID: 21894 Comm: syz.3.4928 Not tainted syzkaller #0 PREEMPT(full) [ 552.192772][T21894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 552.192783][T21894] Call Trace: [ 552.192791][T21894] [ 552.192800][T21894] dump_stack_lvl+0xe8/0x150 [ 552.192829][T21894] should_fail_ex+0x410/0x560 [ 552.192854][T21894] _copy_from_user+0x2d/0xb0 [ 552.192878][T21894] generic_map_update_batch+0x662/0xae0 [ 552.192916][T21894] ? __pfx_generic_map_update_batch+0x10/0x10 [ 552.192942][T21894] ? __fget_files+0x2a/0x420 [ 552.192970][T21894] ? __pfx_generic_map_update_batch+0x10/0x10 [ 552.192996][T21894] bpf_map_do_batch+0x391/0x630 [ 552.193023][T21894] __sys_bpf+0xbe5/0xd90 [ 552.193051][T21894] ? __pfx___sys_bpf+0x10/0x10 [ 552.193080][T21894] ? __fget_files+0x2a/0x420 [ 552.193121][T21894] ? ksys_write+0x242/0x270 [ 552.193149][T21894] ? __pfx_ksys_write+0x10/0x10 [ 552.193184][T21894] __x64_sys_bpf+0xba/0xd0 [ 552.193206][T21894] do_syscall_64+0x166/0x520 [ 552.193231][T21894] ? trace_irq_disable+0x3b/0x140 [ 552.193249][T21894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.193268][T21894] ? clear_bhb_loop+0x70/0xc0 [ 552.193292][T21894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.193310][T21894] RIP: 0033:0x7f2cff79e159 [ 552.193329][T21894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.193345][T21894] RSP: 002b:00007f2d005f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 552.193365][T21894] RAX: ffffffffffffffda RBX: 00007f2cffa25fa0 RCX: 00007f2cff79e159 [ 552.193378][T21894] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 000000000000001a [ 552.193390][T21894] RBP: 00007f2d005f0090 R08: 0000000000000000 R09: 0000000000000000 [ 552.193401][T21894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 552.193413][T21894] R13: 00007f2cffa26038 R14: 00007f2cffa25fa0 R15: 00007ffc1086f6b8 [ 552.193444][T21894] [ 552.268828][T21896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4931'. [ 552.268849][T21896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4931'. [ 552.661538][T21908] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4934'. [ 552.937170][T21922] netlink: 'syz.1.4934': attribute type 1 has an invalid length. [ 553.694658][T21969] xt_SECMARK: invalid mode: 9 [ 553.761926][T21966] netlink: 'syz.1.4951': attribute type 3 has an invalid length. [ 553.938833][T21985] netlink: 'syz.2.4959': attribute type 1 has an invalid length. [ 557.325748][T21994] bond15: (slave geneve2): making interface the new active one [ 557.326473][T21994] bond15: (slave geneve2): Enslaving as an active interface with an up link [ 557.459184][ T6536] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 557.459469][ T6536] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 557.459503][ T6536] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 557.459535][ T6536] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 557.510054][T22035] __nla_validate_parse: 4 callbacks suppressed [ 557.510073][T22035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4963'. [ 557.635617][T22032] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 557.735501][T22044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4969'. [ 557.766034][ T30] audit: type=1804 audit(1790907490.069:12): pid=22047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4968" name="/newroot/375/memory.events" dev="tmpfs" ino=1920 res=1 errno=0 [ 557.766245][ T30] audit: type=1800 audit(1790907490.069:13): pid=22047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4968" name="memory.events" dev="tmpfs" ino=1920 res=0 errno=0 [ 557.801002][T22042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4966'. [ 557.825685][ T30] audit: type=1804 audit(1790907490.069:14): pid=22047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.4968" name="/newroot/375/memory.events" dev="tmpfs" ino=1920 res=1 errno=0 [ 557.907460][T22052] netlink: zone id is out of range [ 557.907476][T22052] netlink: zone id is out of range [ 557.907486][T22052] netlink: zone id is out of range [ 557.907494][T22052] netlink: zone id is out of range [ 557.907503][T22052] netlink: zone id is out of range [ 557.907511][T22052] netlink: zone id is out of range [ 557.907522][T22052] netlink: zone id is out of range [ 557.907531][T22052] netlink: zone id is out of range [ 557.907538][T22052] netlink: zone id is out of range [ 558.202131][T22042] veth7: left promiscuous mode [ 558.205755][T22042] bridge1: left allmulticast mode [ 558.223334][T22042] bond5: left promiscuous mode [ 558.223350][T22042] bond5: left allmulticast mode [ 558.239190][ T6526] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.249176][ T6536] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.249218][ T6536] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.249250][ T6536] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.376563][T22068] netlink: 'syz.4.4973': attribute type 10 has an invalid length. [ 558.376585][T22068] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4973'. [ 558.402961][T22068] ipvlan3: entered promiscuous mode [ 558.405579][T22066] SET target dimension over the limit! [ 558.663880][T22082] FAULT_INJECTION: forcing a failure. [ 558.663880][T22082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 558.663912][T22082] CPU: 1 UID: 0 PID: 22082 Comm: syz.3.4978 Not tainted syzkaller #0 PREEMPT(full) [ 558.663934][T22082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 558.663946][T22082] Call Trace: [ 558.663954][T22082] [ 558.663963][T22082] dump_stack_lvl+0xe8/0x150 [ 558.663994][T22082] should_fail_ex+0x410/0x560 [ 558.664021][T22082] _copy_from_user+0x2d/0xb0 [ 558.664046][T22082] generic_map_update_batch+0x6b1/0xae0 [ 558.664089][T22082] ? __pfx_generic_map_update_batch+0x10/0x10 [ 558.664117][T22082] ? __fget_files+0x2a/0x420 [ 558.664148][T22082] ? __pfx_generic_map_update_batch+0x10/0x10 [ 558.664175][T22082] bpf_map_do_batch+0x391/0x630 [ 558.664203][T22082] __sys_bpf+0xbe5/0xd90 [ 558.664233][T22082] ? __pfx___sys_bpf+0x10/0x10 [ 558.664264][T22082] ? __fget_files+0x2a/0x420 [ 558.664307][T22082] ? ksys_write+0x242/0x270 [ 558.664337][T22082] ? __pfx_ksys_write+0x10/0x10 [ 558.664370][T22082] __x64_sys_bpf+0xba/0xd0 [ 558.664392][T22082] do_syscall_64+0x166/0x520 [ 558.664418][T22082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.664438][T22082] ? clear_bhb_loop+0x70/0xc0 [ 558.664462][T22082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.664481][T22082] RIP: 0033:0x7f2cff79e159 [ 558.664499][T22082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.664516][T22082] RSP: 002b:00007f2d005f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 558.664537][T22082] RAX: ffffffffffffffda RBX: 00007f2cffa25fa0 RCX: 00007f2cff79e159 [ 558.664551][T22082] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 000000000000001a [ 558.664563][T22082] RBP: 00007f2d005f0090 R08: 0000000000000000 R09: 0000000000000000 [ 558.664575][T22082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 558.664587][T22082] R13: 00007f2cffa26038 R14: 00007f2cffa25fa0 R15: 00007ffc1086f6b8 [ 558.664619][T22082] [ 558.949520][T22097] xt_SECMARK: invalid mode: 9 [ 558.968816][T22101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4982'. [ 559.292406][T22115] netlink: 988 bytes leftover after parsing attributes in process `syz.3.4986'. [ 559.725966][T22145] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4995'. [ 559.804380][T22145] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4995'. [ 559.894921][T22155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4998'. [ 559.985528][T22162] netlink: 'syz.4.4999': attribute type 10 has an invalid length. [ 559.985551][T22162] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4999'. [ 560.020011][T22162] ipvlan3: entered promiscuous mode [ 560.066686][T22153] wlan1 speed is unknown, defaulting to 1000 [ 560.520303][T22185] tipc: Failed to remove unknown binding: 66,0,0/0:1046143834/1046143836 [ 560.520334][T22185] tipc: Failed to remove unknown binding: 66,0,0/0:1046143834/1046143835 [ 560.556591][T22185] tipc: Failed to remove unknown binding: 66,0,0/0:1046143834/1046143836 [ 560.556620][T22185] tipc: Failed to remove unknown binding: 66,0,0/0:1046143834/1046143835 [ 560.804688][T22198] veth33: entered promiscuous mode [ 560.816535][T22198] bond16: (slave veth33): Enslaving as an active interface with an up link [ 561.136937][T22217] wlan1 speed is unknown, defaulting to 1000 [ 561.153354][T22222] batman_adv: batadv0: Adding interface: macvlan2 [ 561.153370][T22222] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.153398][T22222] batman_adv: batadv0: Interface activated: macvlan2 [ 561.509784][T22239] netlink: 'syz.0.5024': attribute type 10 has an invalid length. [ 561.662457][T22239] ipvlan2: entered promiscuous mode [ 561.923703][ T30] audit: type=1804 audit(1790907494.229:15): pid=22255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5029" name="/newroot/365/memory.events" dev="tmpfs" ino=1866 res=1 errno=0 [ 562.308966][T22275] netlink: 'syz.2.5036': attribute type 2 has an invalid length. [ 562.413894][T22283] x_tables: duplicate underflow at hook 1 [ 562.714507][T22298] __nla_validate_parse: 10 callbacks suppressed [ 562.714528][T22298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5045'. [ 562.818976][T22304] tipc: Enabled bearer , priority 10 [ 562.836885][T22303] tipc: Disabling bearer [ 562.931038][T22308] FAULT_INJECTION: forcing a failure. [ 562.931038][T22308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 562.931068][T22308] CPU: 0 UID: 0 PID: 22308 Comm: syz.0.5047 Not tainted syzkaller #0 PREEMPT(full) [ 562.931092][T22308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 562.931105][T22308] Call Trace: [ 562.931113][T22308] [ 562.931121][T22308] dump_stack_lvl+0xe8/0x150 [ 562.931160][T22308] should_fail_ex+0x410/0x560 [ 562.931187][T22308] _copy_to_user+0x31/0xb0 [ 562.931214][T22308] simple_read_from_buffer+0xe1/0x170 [ 562.931246][T22308] proc_fail_nth_read+0x1bb/0x230 [ 562.931272][T22308] ? common_file_perm+0x20e/0x2b0 [ 562.931299][T22308] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 562.931330][T22308] ? rw_verify_area+0x24a/0x4c0 [ 562.931359][T22308] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 562.931393][T22308] vfs_read+0x213/0xa80 [ 562.931425][T22308] ? __pfx___mutex_lock+0x10/0x10 [ 562.931453][T22308] ? __pfx_vfs_read+0x10/0x10 [ 562.931488][T22308] ? __fget_files+0x2a/0x420 [ 562.931517][T22308] ? __fget_files+0x3a2/0x420 [ 562.931540][T22308] ? __fget_files+0x2a/0x420 [ 562.931579][T22308] ksys_read+0x150/0x270 [ 562.931608][T22308] ? __pfx_ksys_read+0x10/0x10 [ 562.931647][T22308] do_syscall_64+0x166/0x520 [ 562.931672][T22308] ? trace_irq_disable+0x3b/0x140 [ 562.931691][T22308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.931711][T22308] ? clear_bhb_loop+0x70/0xc0 [ 562.931735][T22308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.931755][T22308] RIP: 0033:0x7f693a75e98e [ 562.931773][T22308] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 562.931789][T22308] RSP: 002b:00007f693b69dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 562.931811][T22308] RAX: ffffffffffffffda RBX: 00007f693b69e6c0 RCX: 00007f693a75e98e [ 562.931831][T22308] RDX: 000000000000000f RSI: 00007f693b69e0a0 RDI: 0000000000000004 [ 562.931844][T22308] RBP: 00007f693b69e090 R08: 0000000000000000 R09: 0000000000000000 [ 562.931856][T22308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.931867][T22308] R13: 00007f693aa26038 R14: 00007f693aa25fa0 R15: 00007ffd8feb8ff8 [ 562.931910][T22308] [ 563.220942][T22320] netlink: 'syz.2.5052': attribute type 10 has an invalid length. [ 563.220962][T22320] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5052'. [ 563.248320][T22320] ipvlan2: entered promiscuous mode [ 563.515947][T22334] xt_SECMARK: invalid mode: 9 [ 563.639287][T22342] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5062'. [ 563.639316][T22342] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5062'. [ 563.639329][T22342] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5062'. [ 564.124288][T22363] net_ratelimit: 499 callbacks suppressed [ 564.124309][T22363] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 564.152689][T22363] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5069'. [ 564.171808][T22363] x_tables: duplicate underflow at hook 1 [ 564.172878][T22363] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 564.244270][T22372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5073'. [ 564.244357][T22372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5073'. [ 564.382605][T22379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5074'. [ 564.444307][T22379] bond8: option lacp_active: invalid value (5) [ 564.451099][T22379] bond8 (unregistering): Released all slaves [ 564.936210][T22412] ip_tables: iptables: counters copy to user failed while replacing table [ 565.014735][T22419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5091'. [ 565.052740][T22420] netlink: 'syz.1.5088': attribute type 16 has an invalid length. [ 565.052763][T22420] netlink: 'syz.1.5088': attribute type 17 has an invalid length. [ 565.214491][T22420] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 565.340428][T22431] netlink: 'syz.0.5095': attribute type 12 has an invalid length. [ 565.537555][T22444] syzkaller0: entered promiscuous mode [ 565.538328][T22444] syzkaller0: entered allmulticast mode [ 565.695630][T22444] tipc: Enabled bearer , priority 0 [ 565.706305][T22438] tipc: Resetting bearer [ 565.752566][T22438] tipc: Disabling bearer [ 566.068757][T22475] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 567.760937][T22557] IPVS: set_ctl: invalid protocol: 47 100.1.1.1:20001 [ 567.829514][T22559] FAULT_INJECTION: forcing a failure. [ 567.829514][T22559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 567.829546][T22559] CPU: 1 UID: 0 PID: 22559 Comm: syz.2.5133 Not tainted syzkaller #0 PREEMPT(full) [ 567.829564][T22559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 567.829576][T22559] Call Trace: [ 567.829584][T22559] [ 567.829592][T22559] dump_stack_lvl+0xe8/0x150 [ 567.829626][T22559] should_fail_ex+0x410/0x560 [ 567.829649][T22559] _copy_from_user+0x2d/0xb0 [ 567.829673][T22559] generic_map_update_batch+0x662/0xae0 [ 567.829709][T22559] ? __pfx_generic_map_update_batch+0x10/0x10 [ 567.829734][T22559] ? __fget_files+0x2a/0x420 [ 567.829764][T22559] ? __pfx_generic_map_update_batch+0x10/0x10 [ 567.829790][T22559] bpf_map_do_batch+0x391/0x630 [ 567.829813][T22559] __sys_bpf+0xbe5/0xd90 [ 567.829840][T22559] ? __pfx___sys_bpf+0x10/0x10 [ 567.829871][T22559] ? __fget_files+0x2a/0x420 [ 567.829911][T22559] ? ksys_write+0x242/0x270 [ 567.829940][T22559] ? __pfx_ksys_write+0x10/0x10 [ 567.829972][T22559] __x64_sys_bpf+0xba/0xd0 [ 567.829995][T22559] do_syscall_64+0x166/0x520 [ 567.830019][T22559] ? trace_irq_disable+0x3b/0x140 [ 567.830037][T22559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.830057][T22559] ? clear_bhb_loop+0x70/0xc0 [ 567.830080][T22559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.830099][T22559] RIP: 0033:0x7fa81379e159 [ 567.830117][T22559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.830133][T22559] RSP: 002b:00007fa8145d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 567.830154][T22559] RAX: ffffffffffffffda RBX: 00007fa813a25fa0 RCX: 00007fa81379e159 [ 567.830168][T22559] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 000000000000001a [ 567.830181][T22559] RBP: 00007fa8145d9090 R08: 0000000000000000 R09: 0000000000000000 [ 567.830194][T22559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 567.830205][T22559] R13: 00007fa813a26038 R14: 00007fa813a25fa0 R15: 00007ffeabeb8898 [ 567.830243][T22559] [ 568.114676][T22562] xt_SECMARK: invalid mode: 9 [ 568.133132][ T6526] tipc: Resetting bearer [ 568.466856][T22580] __nla_validate_parse: 7 callbacks suppressed [ 568.466878][T22580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5142'. [ 568.512318][ T6526] bond7 (unregistering): (slave gretap1): Releasing backup interface [ 568.586201][ T6526] tipc: Disabling bearer [ 568.604506][ T6526] bond2 (unregistering): (slave bridge0): Releasing backup interface [ 568.637985][ T6526] bond4 (unregistering): (slave bridge1): Releasing backup interface [ 568.638014][ T6526] bridge1 (unregistering): left promiscuous mode [ 568.713786][ T6526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 568.724096][ T6526] bond0 (unregistering): Released all slaves [ 568.732589][ T6526] bond1 (unregistering): Released all slaves [ 568.753227][ T6526] bond2 (unregistering): Released all slaves [ 568.764775][ T6522] smbdirect: ib_dev[syz1] removed [ 568.799592][ T6526] bond3 (unregistering): (slave veth5): Releasing backup interface [ 568.805502][ T6526] bond3 (unregistering): Released all slaves [ 568.885005][ T6526] bond4 (unregistering): Released all slaves [ 568.915130][ T6526] bond5 (unregistering): Released all slaves [ 568.930178][ T6526] bond6 (unregistering): Released all slaves [ 568.946930][ T6526] bond7 (unregistering): (slave bond8): Releasing backup interface [ 568.960399][ T6526] bond7 (unregistering): Released all slaves [ 568.990018][ T6526] bond8 (unregistering): Released all slaves [ 569.353307][T10999] infiniband syz1: ib_query_port failed (-19) [ 569.439243][ T6526] ovs-s!: left promiscuous mode [ 569.612213][T22590] netlink: 'syz.3.5146': attribute type 12 has an invalid length. [ 570.379865][T22610] netlink: 'syz.4.5152': attribute type 1 has an invalid length. [ 571.106183][T22597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5148'. [ 571.106280][T22597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5148'. [ 571.127130][ T1116] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.127164][ T1116] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.127204][ T1116] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.127225][ T1116] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.127259][ T1116] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.127281][ T1116] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.127316][ T1116] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.127346][ T1116] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.127437][ T6526] tipc: Left network mode [ 571.165058][T22617] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5153'. [ 571.165086][T22617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5153'. [ 571.165100][T22617] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5153'. [ 571.242564][T22610] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 571.386298][T22624] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5157'. [ 571.407391][T22625] netlink: 'syz.2.5155': attribute type 1 has an invalid length. [ 571.407413][T22625] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5155'. [ 571.407428][T22625] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5155'. [ 571.493329][T22628] netlink: 524 bytes leftover after parsing attributes in process `syz.3.5158'. [ 571.597978][T22632] netlink: 'syz.0.5159': attribute type 10 has an invalid length. [ 571.702876][T22632] team0: Device wg2 is of different type [ 571.771825][T22635] syzkaller0: entered promiscuous mode [ 571.771849][T22635] syzkaller0: entered allmulticast mode [ 571.825949][T22635] tipc: Enabled bearer , priority 0 [ 571.836597][T22633] tipc: Resetting bearer [ 571.866262][T22650] ip6t_ah: unknown flags 4 [ 571.922038][T22633] tipc: Disabling bearer [ 572.153012][T22655] tipc: Enabled bearer , priority 0 [ 572.172198][T22654] tipc: Disabling bearer [ 572.250173][ T6526] batman_adv: batadv0: Removing interface: macvtap1 [ 572.341787][ T6529] smbdirect: ib_dev[syz0] removed [ 572.621204][ T6526] batman_adv: batadv0: Removing interface: macvlan2 [ 572.779664][ T6526] hsr_slave_0: left promiscuous mode [ 572.781345][ T6526] hsr_slave_1: left promiscuous mode [ 572.782047][ T6526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.840649][T22693] netlink: 'syz.0.5175': attribute type 10 has an invalid length. [ 573.203945][ T6526] team0 (unregistering): Port device team_slave_1 removed [ 573.242878][ T6526] team0 (unregistering): Port device team_slave_0 removed [ 573.434591][T22693] syz_tun: entered promiscuous mode [ 573.460364][T22693] bond7: (slave syz_tun): Removing an active aggregator [ 573.480080][T22693] bond7: (slave syz_tun): Releasing backup interface [ 573.499001][T22693] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 573.552423][T22717] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 573.556656][T22717] __nla_validate_parse: 11 callbacks suppressed [ 573.556673][T22717] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5180'. [ 573.684671][T22717] x_tables: duplicate underflow at hook 1 [ 573.687531][T22717] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 573.722940][T22719] batman_adv: batadv0: Adding interface: veth0 [ 573.722964][T22719] batman_adv: batadv0: Interface activated: veth0 [ 573.725169][T22719] netdevsim0: mtu less than device minimum [ 573.725458][T22719] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.725476][T22719] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.745991][T22719] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.746013][T22719] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.752304][T22719] batman_adv: batadv0: Interface deactivated: gretap1 [ 573.752324][T22719] batman_adv: batadv0: Removing interface: gretap1 [ 573.757416][T22719] batman_adv: batadv0: Interface deactivated: veth0 [ 573.757436][T22719] batman_adv: batadv0: Removing interface: veth0 [ 573.967827][T22726] FAULT_INJECTION: forcing a failure. [ 573.967827][T22726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 573.967859][T22726] CPU: 1 UID: 0 PID: 22726 Comm: syz.1.5185 Not tainted syzkaller #0 PREEMPT(full) [ 573.967881][T22726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 573.967892][T22726] Call Trace: [ 573.967901][T22726] [ 573.967909][T22726] dump_stack_lvl+0xe8/0x150 [ 573.967941][T22726] should_fail_ex+0x410/0x560 [ 573.967968][T22726] _copy_from_user+0x2d/0xb0 [ 573.967994][T22726] generic_map_update_batch+0x6b1/0xae0 [ 573.968033][T22726] ? __pfx_generic_map_update_batch+0x10/0x10 [ 573.968060][T22726] ? __fget_files+0x2a/0x420 [ 573.968090][T22726] ? __pfx_generic_map_update_batch+0x10/0x10 [ 573.968116][T22726] bpf_map_do_batch+0x391/0x630 [ 573.968144][T22726] __sys_bpf+0xbe5/0xd90 [ 573.968171][T22726] ? __pfx___sys_bpf+0x10/0x10 [ 573.968211][T22726] ? __fget_files+0x2a/0x420 [ 573.968252][T22726] ? ksys_write+0x242/0x270 [ 573.968281][T22726] ? __pfx_ksys_write+0x10/0x10 [ 573.968313][T22726] __x64_sys_bpf+0xba/0xd0 [ 573.968335][T22726] do_syscall_64+0x166/0x520 [ 573.968360][T22726] ? trace_irq_disable+0x3b/0x140 [ 573.968377][T22726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.968397][T22726] ? clear_bhb_loop+0x70/0xc0 [ 573.968420][T22726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.968440][T22726] RIP: 0033:0x7f5d90d9e159 [ 573.968458][T22726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 573.968473][T22726] RSP: 002b:00007f5d91bd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 573.968494][T22726] RAX: ffffffffffffffda RBX: 00007f5d91025fa0 RCX: 00007f5d90d9e159 [ 573.968508][T22726] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 000000000000001a [ 573.968520][T22726] RBP: 00007f5d91bd0090 R08: 0000000000000000 R09: 0000000000000000 [ 573.968532][T22726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 573.968544][T22726] R13: 00007f5d91026038 R14: 00007f5d91025fa0 R15: 00007ffed17321b8 [ 573.968574][T22726] [ 575.235170][T22745] kthread_run failed with err -4 [ 575.381863][T22772] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5194'. [ 575.381894][T22772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5194'. [ 575.381908][T22772] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5194'. [ 575.386849][T22771] netlink: 'syz.1.5192': attribute type 4 has an invalid length. [ 575.476843][T22774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5196'. [ 575.645899][T22784] veth11: entered promiscuous mode [ 575.675927][T22784] bond8: (slave veth11): Enslaving as an active interface with an up link [ 575.895526][T22802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5202'. [ 575.895558][T22802] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5202'. [ 575.895801][T22802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5202'. [ 575.895815][T22802] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5202'. [ 576.859567][T22823] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 576.861433][T22823] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5207'. [ 576.983394][T22825] x_tables: duplicate underflow at hook 1 [ 576.985002][T22825] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 579.515588][T22848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5216'. [ 579.515609][T22848] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5216'. [ 579.515815][T22848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5216'. [ 579.515828][T22848] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5216'. [ 579.600295][T22851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5218'. [ 579.713736][T22851] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5218'. [ 579.738474][T22855] veth15: entered promiscuous mode [ 579.755960][T22855] bond9: (slave veth15): Enslaving as an active interface with an up link [ 579.760752][T22851] 8021q: adding VLAN 0 to HW filter on device bond9 [ 580.054457][T22884] FAULT_INJECTION: forcing a failure. [ 580.054457][T22884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 580.054489][T22884] CPU: 1 UID: 0 PID: 22884 Comm: syz.2.5228 Not tainted syzkaller #0 PREEMPT(full) [ 580.054510][T22884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 580.054522][T22884] Call Trace: [ 580.054531][T22884] [ 580.054540][T22884] dump_stack_lvl+0xe8/0x150 [ 580.054570][T22884] should_fail_ex+0x410/0x560 [ 580.054597][T22884] _copy_from_user+0x2d/0xb0 [ 580.054622][T22884] generic_map_update_batch+0x662/0xae0 [ 580.054662][T22884] ? __pfx_generic_map_update_batch+0x10/0x10 [ 580.054690][T22884] ? __fget_files+0x2a/0x420 [ 580.054722][T22884] ? __pfx_generic_map_update_batch+0x10/0x10 [ 580.054747][T22884] bpf_map_do_batch+0x391/0x630 [ 580.054783][T22884] __sys_bpf+0xbe5/0xd90 [ 580.054809][T22884] ? __pfx___sys_bpf+0x10/0x10 [ 580.054840][T22884] ? __fget_files+0x2a/0x420 [ 580.054882][T22884] ? ksys_write+0x242/0x270 [ 580.054911][T22884] ? __pfx_ksys_write+0x10/0x10 [ 580.054943][T22884] __x64_sys_bpf+0xba/0xd0 [ 580.054965][T22884] do_syscall_64+0x166/0x520 [ 580.054991][T22884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.055011][T22884] ? clear_bhb_loop+0x70/0xc0 [ 580.055034][T22884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.055054][T22884] RIP: 0033:0x7fa81379e159 [ 580.055072][T22884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.055088][T22884] RSP: 002b:00007fa8145d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 580.055109][T22884] RAX: ffffffffffffffda RBX: 00007fa813a25fa0 RCX: 00007fa81379e159 [ 580.055123][T22884] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 000000000000001a [ 580.055135][T22884] RBP: 00007fa8145d9090 R08: 0000000000000000 R09: 0000000000000000 [ 580.055147][T22884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 580.055159][T22884] R13: 00007fa813a26038 R14: 00007fa813a25fa0 R15: 00007ffeabeb8898 [ 580.055190][T22884] [ 580.185117][T22889] netlink: 'syz.1.5230': attribute type 1 has an invalid length. [ 580.275263][T22889] 8021q: adding VLAN 0 to HW filter on device bond6 [ 580.301290][T22892] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 580.381916][T22889] syzkaller1: entered promiscuous mode [ 580.381938][T22889] syzkaller1: entered allmulticast mode [ 580.594330][T22908] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 580.622329][T22908] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5238'. [ 580.652509][T22908] x_tables: duplicate underflow at hook 1 [ 580.655182][T22908] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 580.838172][T22916] netlink: 27 bytes leftover after parsing attributes in process `syz.4.5240'. [ 581.013744][T22939] netlink: 'syz.1.5244': attribute type 10 has an invalid length. [ 581.013833][T22939] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5244'. [ 581.014025][T22937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5245'. [ 581.070533][T22939] ipvlan2: entered promiscuous mode [ 581.178757][T22942] openvswitch: netlink: Message has 4 unknown bytes. [ 581.429813][T22941] veth17: entered promiscuous mode [ 581.449922][T22941] bond10: (slave veth17): Enslaving as an active interface with an up link [ 581.465679][T22943] 8021q: adding VLAN 0 to HW filter on device bond10 [ 581.645314][T22953] ip6gre1: entered allmulticast mode [ 582.100980][T22979] team0: Device wg1 is of different type [ 582.164838][T22979] netlink: 'syz.4.5256': attribute type 1 has an invalid length. [ 582.327156][T22980] bond9: option arp_validate: invalid value (1048579) [ 582.340166][T22980] bond9 (unregistering): Released all slaves [ 582.513283][T22985] bond9: option arp_validate: invalid value (1048579) [ 582.532227][T22985] bond9 (unregistering): Released all slaves [ 582.636206][T22993] bond9: option arp_validate: invalid value (1048579) [ 582.639316][T22993] bond9 (unregistering): Released all slaves [ 582.786659][T22979] bond9: option arp_validate: invalid value (1048579) [ 582.792705][T22979] bond9 (unregistering): Released all slaves [ 582.815924][T23023] netlink: 'syz.0.5267': attribute type 4 has an invalid length. [ 582.880305][T22996] bridge4: entered promiscuous mode [ 582.984615][T23023] .`: renamed from bond0 (while UP) [ 583.180745][T23039] xt_SECMARK: invalid mode: 9 [ 583.447924][T23047] x_tables: ip_tables: osf match: only valid for protocol 6 [ 583.499788][T23060] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 583.548644][T23060] x_tables: duplicate underflow at hook 1 [ 583.549776][T23060] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 583.610308][T23058] netlink: 'syz.2.5279': attribute type 2 has an invalid length. [ 583.671766][T23072] ip6t_ah: unknown flags 4 [ 583.760064][T23079] netlink: 'syz.3.5285': attribute type 1 has an invalid length. [ 584.191473][T23093] macvtap0: entered promiscuous mode [ 584.436973][T23055] infiniband syz0: set active [ 584.436998][T23055] infiniband syz0: added bond_slave_1 [ 584.459251][T23055] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 584.464027][T23106] openvswitch: netlink: IP tunnel dst address not specified [ 584.465043][T23055] infiniband syz0: Couldn't open port 1 [ 584.465351][T23055] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 584.465402][T23055] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 584.465436][T23055] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 584.636465][T23055] RDS/IB: syz0: added [ 584.646605][T23055] smc: adding ib device syz0 with port count 1 [ 584.646806][T23055] smc: ib device syz0 port 1 has no pnetid [ 584.655463][T23112] netlink: 'syz.3.5296': attribute type 10 has an invalid length. [ 584.655483][T23112] __nla_validate_parse: 14 callbacks suppressed [ 584.655495][T23112] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5296'. [ 584.682610][T23112] ipvlan2: entered promiscuous mode [ 584.803205][T23119] xt_SECMARK: invalid mode: 9 [ 584.970622][T23121] netlink: 'syz.1.5300': attribute type 152 has an invalid length. [ 585.008941][T23126] netlink: 'syz.4.5304': attribute type 4 has an invalid length. [ 585.106497][T23126] netlink: 'syz.4.5304': attribute type 4 has an invalid length. [ 585.250134][T23121] nbd1: detected capacity change from 0 to 131072 [ 585.384854][T23140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5307'. [ 585.607445][T23146] FAULT_INJECTION: forcing a failure. [ 585.607445][T23146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 585.607480][T23146] CPU: 1 UID: 0 PID: 23146 Comm: syz.0.5309 Not tainted syzkaller #0 PREEMPT(full) [ 585.607526][T23146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 585.607550][T23146] Call Trace: [ 585.607568][T23146] [ 585.607580][T23146] dump_stack_lvl+0xe8/0x150 [ 585.607609][T23146] should_fail_ex+0x410/0x560 [ 585.607635][T23146] _copy_from_user+0x2d/0xb0 [ 585.607661][T23146] generic_map_update_batch+0x6b1/0xae0 [ 585.607702][T23146] ? __pfx_generic_map_update_batch+0x10/0x10 [ 585.607729][T23146] ? __fget_files+0x2a/0x420 [ 585.607761][T23146] ? __pfx_generic_map_update_batch+0x10/0x10 [ 585.607787][T23146] bpf_map_do_batch+0x391/0x630 [ 585.607815][T23146] __sys_bpf+0xbe5/0xd90 [ 585.607844][T23146] ? __pfx___sys_bpf+0x10/0x10 [ 585.607875][T23146] ? __fget_files+0x2a/0x420 [ 585.607924][T23146] ? ksys_write+0x242/0x270 [ 585.607953][T23146] ? __pfx_ksys_write+0x10/0x10 [ 585.607985][T23146] __x64_sys_bpf+0xba/0xd0 [ 585.608007][T23146] do_syscall_64+0x166/0x520 [ 585.608032][T23146] ? trace_irq_disable+0x3b/0x140 [ 585.608050][T23146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.608070][T23146] ? clear_bhb_loop+0x70/0xc0 [ 585.608094][T23146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.608113][T23146] RIP: 0033:0x7f693a79e159 [ 585.608131][T23146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.608147][T23146] RSP: 002b:00007f693b69e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 585.608167][T23146] RAX: ffffffffffffffda RBX: 00007f693aa25fa0 RCX: 00007f693a79e159 [ 585.608181][T23146] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 000000000000001a [ 585.608194][T23146] RBP: 00007f693b69e090 R08: 0000000000000000 R09: 0000000000000000 [ 585.608206][T23146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 585.608217][T23146] R13: 00007f693aa26038 R14: 00007f693aa25fa0 R15: 00007ffd8feb8ff8 [ 585.608249][T23146] [ 585.723021][ T5625] block nbd1: Receive control failed (result -104) [ 585.725994][ T4935] block nbd1: Receive control failed (result -32) [ 585.938477][T23152] netlink: 27 bytes leftover after parsing attributes in process `syz.1.5313'. [ 586.247764][T23172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5316'. [ 586.411953][T23179] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5316'. [ 586.514962][T23174] veth13: entered promiscuous mode [ 586.517869][T23174] bond9: (slave veth13): Enslaving as an active interface with an up link [ 586.546159][T23179] 8021q: adding VLAN 0 to HW filter on device bond9 [ 586.861239][T23192] block nbd0: reconnected socket [ 586.861259][T23192] nbd: socks must be embedded in a SOCK_ITEM attr [ 586.869664][T23192] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5320'. [ 587.283456][T23209] Bluetooth: hci0: unsupported parameter 5135 [ 587.283479][T23209] Bluetooth: hci0: unsupported parameter 8192 [ 587.283499][T23209] Bluetooth: hci0: unsupported parameter 5135 [ 587.283510][T23209] Bluetooth: hci0: unsupported parameter 8192 [ 587.609331][ T4935] block nbd0: Receive control failed (result -32) [ 588.067819][T23232] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5332'. [ 588.113227][T23232] [ 588.115600][T23232] ====================================================== [ 588.122622][T23232] WARNING: possible circular locking dependency detected [ 588.123050][T23234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5333'. [ 588.138489][T23232] syzkaller #0 Not tainted [ 588.142895][T23232] ------------------------------------------------------ [ 588.149896][T23232] syz.1.5332/23232 is trying to acquire lock: [ 588.155947][T23232] ffff88801c2d4a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4c7/0x5a0 [ 588.166381][T23232] [ 588.166381][T23232] but task is already holding lock: [ 588.173732][T23232] ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0 [ 588.183122][T23232] [ 588.183122][T23232] which lock already depends on the new lock. [ 588.183122][T23232] [ 588.193521][T23232] [ 588.193521][T23232] the existing dependency chain (in reverse order) is: [ 588.202521][T23232] [ 588.202521][T23232] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 588.210509][T23232] down_write+0x96/0x200 [ 588.215276][T23232] kernfs_add_one+0x41/0x6f0 [ 588.220381][T23232] kernfs_create_dir_ns+0x1a1/0x230 [ 588.226094][T23232] internal_create_group+0x440/0x1180 [ 588.231985][T23232] cpuhp_invoke_callback+0x434/0x810 [ 588.237789][T23232] cpuhp_issue_call+0x3f0/0x750 [ 588.243166][T23232] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 588.249758][T23232] __cpuhp_setup_state+0x3f/0x60 [ 588.255215][T23232] do_one_initcall+0x250/0x870 [ 588.260498][T23232] do_initcall_level+0x10a/0x1a0 [ 588.265970][T23232] do_initcalls+0x59/0xa0 [ 588.270816][T23232] kernel_init_freeable+0x29d/0x3e0 [ 588.276527][T23232] kernel_init+0x22/0x1d0 [ 588.281369][T23232] ret_from_fork+0x514/0xb70 [ 588.286479][T23232] ret_from_fork_asm+0x1a/0x30 [ 588.291759][T23232] [ 588.291759][T23232] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 588.299567][T23232] [ 588.299567][T23232] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 588.307291][T23232] cpus_read_lock+0x42/0x160 [ 588.312399][T23232] static_key_slow_inc+0x12/0x30 [ 588.317851][T23232] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 588.324084][T23232] nbd_genl_foreach_sock+0x265/0x450 [ 588.329875][T23232] nbd_genl_reconfigure+0xbbb/0x1040 [ 588.335667][T23232] genl_family_rcv_msg_doit+0x233/0x340 [ 588.341727][T23232] genl_rcv_msg+0x614/0x7a0 [ 588.346746][T23232] netlink_rcv_skb+0x226/0x4a0 [ 588.352024][T23232] genl_rcv+0x28/0x40 [ 588.356513][T23232] netlink_unicast+0x7bd/0x940 [ 588.361791][T23232] netlink_sendmsg+0x813/0xb40 [ 588.367066][T23232] sock_sendmsg_nosec+0x14e/0x190 [ 588.372608][T23232] ____sys_sendmsg+0x54e/0x850 [ 588.377982][T23232] ___sys_sendmsg+0x2a5/0x360 [ 588.383169][T23232] __x64_sys_sendmsg+0x1b1/0x290 [ 588.388621][T23232] do_syscall_64+0x166/0x520 [ 588.393728][T23232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.400135][T23232] [ 588.400135][T23232] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 588.407776][T23232] __mutex_lock+0x19d/0x1550 [ 588.412883][T23232] nbd_queue_rq+0x373/0xff0 [ 588.417894][T23232] blk_mq_dispatch_rq_list+0x499/0x1990 [ 588.423949][T23232] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 588.430794][T23232] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 588.437293][T23232] blk_mq_run_work_fn+0x16c/0x300 [ 588.442838][T23232] process_scheduled_works+0xc3d/0x1630 [ 588.448897][T23232] worker_thread+0xa47/0xfb0 [ 588.454006][T23232] kthread+0x38b/0x480 [ 588.458584][T23232] ret_from_fork+0x514/0xb70 [ 588.463693][T23232] ret_from_fork_asm+0x1a/0x30 [ 588.468971][T23232] [ 588.468971][T23232] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 588.476179][T23232] __mutex_lock+0x19d/0x1550 [ 588.481283][T23232] nbd_queue_rq+0xc1/0xff0 [ 588.486209][T23232] blk_mq_dispatch_rq_list+0x499/0x1990 [ 588.492274][T23232] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 588.499121][T23232] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 588.505622][T23232] blk_mq_run_work_fn+0x16c/0x300 [ 588.511164][T23232] process_scheduled_works+0xc3d/0x1630 [ 588.517221][T23232] worker_thread+0xa47/0xfb0 [ 588.522331][T23232] kthread+0x38b/0x480 [ 588.526915][T23232] ret_from_fork+0x514/0xb70 [ 588.532019][T23232] ret_from_fork_asm+0x1a/0x30 [ 588.537303][T23232] [ 588.537303][T23232] -> #4 (set->srcu){.+.+}-{0:0}: [ 588.544417][T23232] __synchronize_srcu+0xc9/0x2f0 [ 588.549865][T23232] elevator_switch+0x1e8/0x7b0 [ 588.555146][T23232] elevator_change+0x2fa/0x480 [ 588.560417][T23232] elevator_set_default+0x375/0x440 [ 588.566125][T23232] blk_register_queue+0x3f3/0x4e0 [ 588.571663][T23232] __add_disk+0x6b8/0xdb0 [ 588.576509][T23232] add_disk_fwnode+0x100/0x3a0 [ 588.581794][T23232] nbd_dev_add+0x733/0xb60 [ 588.586725][T23232] nbd_init+0x168/0x1f0 [ 588.591390][T23232] do_one_initcall+0x250/0x870 [ 588.596666][T23232] do_initcall_level+0x10a/0x1a0 [ 588.602124][T23232] do_initcalls+0x59/0xa0 [ 588.606970][T23232] kernel_init_freeable+0x29d/0x3e0 [ 588.612678][T23232] kernel_init+0x22/0x1d0 [ 588.617522][T23232] ret_from_fork+0x514/0xb70 [ 588.622626][T23232] ret_from_fork_asm+0x1a/0x30 [ 588.627905][T23232] [ 588.627905][T23232] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 588.635710][T23232] __mutex_lock+0x19d/0x1550 [ 588.640818][T23232] elevator_change+0x1af/0x480 [ 588.646094][T23232] elevator_set_none+0xb5/0x140 [ 588.651453][T23232] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 588.657776][T23232] nbd_start_device+0x189/0xb30 [ 588.663140][T23232] nbd_genl_connect+0x167d/0x1cd0 [ 588.668671][T23232] genl_family_rcv_msg_doit+0x233/0x340 [ 588.674736][T23232] genl_rcv_msg+0x614/0x7a0 [ 588.679750][T23232] netlink_rcv_skb+0x226/0x4a0 [ 588.685027][T23232] genl_rcv+0x28/0x40 [ 588.689532][T23232] netlink_unicast+0x7bd/0x940 [ 588.694812][T23232] netlink_sendmsg+0x813/0xb40 [ 588.700086][T23232] sock_sendmsg_nosec+0x14e/0x190 [ 588.705631][T23232] ____sys_sendmsg+0x54e/0x850 [ 588.710911][T23232] ___sys_sendmsg+0x2a5/0x360 [ 588.716105][T23232] __x64_sys_sendmsg+0x1b1/0x290 [ 588.721561][T23232] do_syscall_64+0x166/0x520 [ 588.726668][T23232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.733073][T23232] [ 588.733073][T23232] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 588.741670][T23232] blk_alloc_queue+0x544/0x690 [ 588.746948][T23232] __blk_mq_alloc_disk+0x194/0x390 [ 588.752571][T23232] nbd_dev_add+0x494/0xb60 [ 588.757496][T23232] nbd_init+0x168/0x1f0 [ 588.762162][T23232] do_one_initcall+0x250/0x870 [ 588.767445][T23232] do_initcall_level+0x10a/0x1a0 [ 588.772898][T23232] do_initcalls+0x59/0xa0 [ 588.777740][T23232] kernel_init_freeable+0x29d/0x3e0 [ 588.783454][T23232] kernel_init+0x22/0x1d0 [ 588.788299][T23232] ret_from_fork+0x514/0xb70 [ 588.793421][T23232] ret_from_fork_asm+0x1a/0x30 [ 588.798702][T23232] [ 588.798702][T23232] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 588.805903][T23232] fs_reclaim_acquire+0x71/0x100 [ 588.811358][T23232] kmem_cache_alloc_noprof+0x5f/0x600 [ 588.817244][T23232] __kernfs_iattrs+0xdd/0x380 [ 588.822438][T23232] kernfs_iop_setattr+0xe6/0x3f0 [ 588.827897][T23232] notify_change+0xbba/0xea0 [ 588.832997][T23232] do_truncate+0x1c2/0x250 [ 588.837934][T23232] path_openat+0x15b5/0x1d60 [ 588.843033][T23232] do_file_open+0x23e/0x4a0 [ 588.848050][T23232] do_sys_openat2+0x115/0x200 [ 588.853251][T23232] __x64_sys_openat+0x138/0x170 [ 588.858616][T23232] do_syscall_64+0x166/0x520 [ 588.863723][T23232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.870130][T23232] [ 588.870130][T23232] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 588.878635][T23232] __lock_acquire+0x164c/0x2de0 [ 588.884007][T23232] lock_acquire+0x115/0x350 [ 588.889027][T23232] down_write+0x96/0x200 [ 588.893784][T23232] kernfs_link_sibling+0x4c7/0x5a0 [ 588.899404][T23232] kernfs_add_one+0x2db/0x6f0 [ 588.904589][T23232] kernfs_create_dir_ns+0x1a1/0x230 [ 588.910336][T23232] sysfs_create_dir_ns+0x12f/0x2a0 [ 588.915971][T23232] kobject_add_internal+0x622/0xcd0 [ 588.921676][T23232] kobject_add+0x163/0x240 [ 588.926610][T23232] device_add+0x3fa/0xb80 [ 588.931453][T23232] __add_disk+0x517/0xdb0 [ 588.936296][T23232] add_disk_fwnode+0x100/0x3a0 [ 588.941573][T23232] nbd_dev_add+0x733/0xb60 [ 588.946503][T23232] nbd_genl_connect+0x96c/0x1cd0 [ 588.951950][T23232] genl_family_rcv_msg_doit+0x233/0x340 [ 588.958010][T23232] genl_rcv_msg+0x614/0x7a0 [ 588.963025][T23232] netlink_rcv_skb+0x226/0x4a0 [ 588.968306][T23232] genl_rcv+0x28/0x40 [ 588.972807][T23232] netlink_unicast+0x7bd/0x940 [ 588.978082][T23232] netlink_sendmsg+0x813/0xb40 [ 588.983359][T23232] sock_sendmsg_nosec+0x14e/0x190 [ 588.988900][T23232] ____sys_sendmsg+0x54e/0x850 [ 588.994173][T23232] ___sys_sendmsg+0x2a5/0x360 [ 588.999360][T23232] __x64_sys_sendmsg+0x1b1/0x290 [ 589.004814][T23232] do_syscall_64+0x166/0x520 [ 589.009918][T23232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.016319][T23232] [ 589.016319][T23232] other info that might help us debug this: [ 589.016319][T23232] [ 589.026532][T23232] Chain exists of: [ 589.026532][T23232] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 589.026532][T23232] [ 589.040951][T23232] Possible unsafe locking scenario: [ 589.040951][T23232] [ 589.048400][T23232] CPU0 CPU1 [ 589.053748][T23232] ---- ---- [ 589.059104][T23232] lock(&root->kernfs_rwsem); [ 589.063869][T23232] lock(cpuhp_state_mutex); [ 589.070971][T23232] lock(&root->kernfs_rwsem); [ 589.078241][T23232] lock(&root->kernfs_iattr_rwsem); [ 589.083516][T23232] [ 589.083516][T23232] *** DEADLOCK *** [ 589.083516][T23232] [ 589.091645][T23232] locks held by syz.1.5332/23232: 4, last CPU#0: [ 589.097963][T23232] #0: ffffffff902b8e28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 589.106138][T23232] #1: ffffffff902b8c60 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 589.115096][T23232] #2: ffff8880564ce9c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xea/0x3a0 [ 589.125444][T23232] #3: ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0 [ 589.135265][T23232] [ 589.135265][T23232] stack backtrace: [ 589.141139][T23232] CPU: 0 UID: 0 PID: 23232 Comm: syz.1.5332 Not tainted syzkaller #0 PREEMPT(full) [ 589.150495][T23232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 589.160545][T23232] Call Trace: [ 589.163817][T23232] [ 589.166738][T23232] dump_stack_lvl+0xe8/0x150 [ 589.171326][T23232] print_circular_bug+0x2e2/0x300 [ 589.176347][T23232] check_noncircular+0x12f/0x150 [ 589.181282][T23232] __lock_acquire+0x164c/0x2de0 [ 589.186127][T23232] ? __lock_acquire+0x747/0x2de0 [ 589.191059][T23232] lock_acquire+0x115/0x350 [ 589.195553][T23232] ? kernfs_link_sibling+0x4c7/0x5a0 [ 589.200838][T23232] down_write+0x96/0x200 [ 589.205094][T23232] ? kernfs_link_sibling+0x4c7/0x5a0 [ 589.210371][T23232] ? __pfx_down_write+0x10/0x10 [ 589.215219][T23232] ? kernfs_root+0x1c/0x230 [ 589.219726][T23232] ? kernfs_root+0x1c/0x230 [ 589.224229][T23232] ? kernfs_root+0x1c/0x230 [ 589.228730][T23232] ? kernfs_root+0x1ea/0x230 [ 589.233318][T23232] kernfs_link_sibling+0x4c7/0x5a0 [ 589.238433][T23232] kernfs_add_one+0x2db/0x6f0 [ 589.243106][T23232] kernfs_create_dir_ns+0x1a1/0x230 [ 589.248296][T23232] sysfs_create_dir_ns+0x12f/0x2a0 [ 589.253407][T23232] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 589.259046][T23232] ? do_raw_spin_unlock+0xf5/0x200 [ 589.265664][T23232] kobject_add_internal+0x622/0xcd0 [ 589.270871][T23232] kobject_add+0x163/0x240 [ 589.275292][T23232] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 589.281271][T23232] ? __pfx_kobject_add+0x10/0x10 [ 589.286212][T23232] ? get_device_parent+0x366/0x3a0 [ 589.291320][T23232] device_add+0x3fa/0xb80 [ 589.295645][T23232] __add_disk+0x517/0xdb0 [ 589.299979][T23232] add_disk_fwnode+0x100/0x3a0 [ 589.304742][T23232] nbd_dev_add+0x733/0xb60 [ 589.309154][T23232] ? __pfx_nbd_dev_add+0x10/0x10 [ 589.314086][T23232] ? __pfx_nbd_genl_foreach_sock+0x10/0x10 [ 589.319881][T23232] ? bpf_lsm_capable+0x9/0x20 [ 589.324553][T23232] ? security_capable+0x7e/0x2c0 [ 589.329491][T23232] ? radix_tree_lookup+0x25c/0x290 [ 589.334608][T23232] nbd_genl_connect+0x96c/0x1cd0 [ 589.339546][T23232] ? __pfx_nbd_genl_connect+0x10/0x10 [ 589.344919][T23232] ? rcu_is_watching+0x16/0xb0 [ 589.349680][T23232] ? trace_kmalloc+0x2a/0xf0 [ 589.354264][T23232] ? __kmalloc_noprof+0x38c/0x720 [ 589.359286][T23232] ? __nla_parse+0x40/0x60 [ 589.363702][T23232] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 589.370036][T23232] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 589.376386][T23232] genl_family_rcv_msg_doit+0x233/0x340 [ 589.381931][T23232] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 589.387998][T23232] ? __lock_acquire+0x747/0x2de0 [ 589.392935][T23232] genl_rcv_msg+0x614/0x7a0 [ 589.397431][T23232] ? __pfx_genl_rcv_msg+0x10/0x10 [ 589.402442][T23232] ? __pfx_nbd_genl_connect+0x10/0x10 [ 589.407804][T23232] netlink_rcv_skb+0x226/0x4a0 [ 589.412574][T23232] ? __pfx_genl_rcv_msg+0x10/0x10 [ 589.417602][T23232] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 589.422905][T23232] ? down_read+0x2be/0x330 [ 589.427331][T23232] genl_rcv+0x28/0x40 [ 589.431313][T23232] netlink_unicast+0x7bd/0x940 [ 589.436078][T23232] netlink_sendmsg+0x813/0xb40 [ 589.440838][T23232] ? __pfx_netlink_sendmsg+0x10/0x10 [ 589.446118][T23232] ? apparmor_socket_sendmsg+0x98/0x360 [ 589.451659][T23232] ? __pfx_netlink_sendmsg+0x10/0x10 [ 589.456935][T23232] sock_sendmsg_nosec+0x14e/0x190 [ 589.461958][T23232] ____sys_sendmsg+0x54e/0x850 [ 589.466714][T23232] ? __pfx_____sys_sendmsg+0x10/0x10 [ 589.471998][T23232] ? import_iovec+0x73/0xa0 [ 589.476495][T23232] ___sys_sendmsg+0x2a5/0x360 [ 589.481164][T23232] ? __lock_acquire+0x747/0x2de0 [ 589.486092][T23232] ? __pfx____sys_sendmsg+0x10/0x10 [ 589.491286][T23232] ? futex_wait+0x2a2/0x390 [ 589.495798][T23232] ? __fget_files+0x2a/0x420 [ 589.500383][T23232] ? __fget_files+0x3a2/0x420 [ 589.505056][T23232] __x64_sys_sendmsg+0x1b1/0x290 [ 589.509992][T23232] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 589.515453][T23232] do_syscall_64+0x166/0x520 [ 589.520036][T23232] ? trace_irq_disable+0x3b/0x140 [ 589.525046][T23232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.531101][T23232] ? clear_bhb_loop+0x70/0xc0 [ 589.535768][T23232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.541661][T23232] RIP: 0033:0x7f5d90d9e159 [ 589.546073][T23232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.565672][T23232] RSP: 002b:00007f5d91bd0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 589.574082][T23232] RAX: ffffffffffffffda RBX: 00007f5d91025fa0 RCX: 00007f5d90d9e159 [ 589.582045][T23232] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 589.590009][T23232] RBP: 00007f5d90e3506b R08: 0000000000000000 R09: 0000000000000000 [ 589.597972][T23232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 589.605941][T23232] R13: 00007f5d91026038 R14: 00007f5d91025fa0 R15: 00007ffed17321b8 [ 589.613912][T23232] [ 589.741465][T23244] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5332'. [ 589.741492][T23244] nbd: device at index 64 is going down