last executing test programs: 2.136225879s ago: executing program 1 (id=8079): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8001}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtclass={0x38, 0x28, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x8001}, {0x0, 0x8001}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x3e8}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newtfilter={0x12c, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x7, 0xc}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x100, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffff}}, @TCA_U32_SEL={0xf4, 0x5, {0x7, 0x1, 0xe, 0x6, 0xffd, 0x7374, 0x100, 0x0, [{0x76c1d656, 0x1, 0x8}, {0x2, 0x1, 0x0, 0x7}, {0x80000000, 0x1ff, 0x3, 0x6}, {0x3, 0x8, 0x0, 0x5}, {0x6, 0xb632, 0x9, 0x7fffffff}, {0x4, 0x7, 0x1, 0x6}, {0x9f33, 0x280000, 0x10, 0x9}, {0xebe4, 0x8, 0x7, 0xfffffff9}, {0x80000001, 0x7fffffff, 0x7, 0x9}, {0x66, 0xfffffffe, 0x7, 0x40}, {0x64, 0x300, 0x10000, 0xe}, {0xb93, 0x81, 0x8, 0xaf2}, {0x5, 0x0, 0x0, 0x3}, {0xfffffffe, 0x28, 0x6, 0x1}]}}]}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20041090}, 0xc080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x12, &(0x7f0000000580)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000208510000003000000180000000000000000000000000000019500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8fdffffb702000008000000b50afdffffffeffe850000000600000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) 1.900648471s ago: executing program 1 (id=8085): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000600)=0x0) bind$nfc_llcp(r2, &(0x7f0000000640)={0x27, r4, 0xfffffffe, 0x4, 0x0, 0x4, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) readv(r2, &(0x7f00000006c0)=[{&(0x7f0000000700)=""/167, 0xa7}], 0x1) close(r3) sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x2c, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r7, {0x9}, {0xb}, {0x10, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x2c}}, 0x40) r8 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r8, &(0x7f00000004c0), 0x4924b68, 0x0) r9 = socket(0x10, 0x3, 0x0) sendto$inet6(r9, &(0x7f00000004c0)="7800000018002507b9409b02ffff48000203be04020406050a02040c5c000900580006080a0000000d0085a168d0bf46d32345653600648d040012000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x52) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400a00ed55a6daa110e80448a9000001000010000000000000000060a010400000000000000000a0000050900010073797a3100000000300004802c0001800a000100696e6e65720000001c0002800800044000000017080003400000000008000140000000000900020073797a3200000000140000001100010000000000000000000700000a"], 0x84}, 0x1, 0x0, 0x0, 0x80040}, 0x24000000) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0x0, 0xa}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xfffffd3d, 0x1, 0x0, 0x0, {{0xe6a7}}}]}]}, @TCA_FLOW_ADDEND={0x0, 0x5, 0x10}, @TCA_FLOW_PERTURB={0x0, 0xc, 0x6}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) 1.816683045s ago: executing program 2 (id=8087): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) r2 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x80000) ioctl$sock_SIOCADDRT(r2, 0x890b, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 1.680516861s ago: executing program 0 (id=8090): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@struct={0x2, 0x1, 0x0, 0x3, 0x0, 0x0, [{}]}]}, {0x0, [0x0]}}, 0x0, 0x33, 0x0, 0x1, 0x0, 0x0, @void, @value=0xffffff3f}, 0x28) 1.533387244s ago: executing program 0 (id=8092): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r1) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000a40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, r3, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4005084) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r4, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000480)='./cgroup/cgroup.procs\x00', &(0x7f00000004c0)=[0x0], 0x0, 0x0, 0x1}}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0x8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r5, 0x83, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/194, 0xc2}}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r7) getsockname$packet(0xffffffffffffffff, &(0x7f0000000d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000d40)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r9, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r9}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)=ANY=[@ANYBLOB="58000000100003052abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000006380000300012800b00010069703667726500002000028008000c000004000014000600fc01000000000000000000000000000008000a00", @ANYRES32=r9], 0x58}}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0xa, &(0x7f0000001000)=0x9d, 0x4) recvmmsg(r10, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x41, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000001080)={@tcp6=r10, r4}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0xc) sendmsg$DEVLINK_CMD_PORT_GET(r12, &(0x7f0000000940)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0xac, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4040}, 0x4000) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x50, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x33}}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x50}}, 0x0) r14 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), r13) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x28, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="02002dbd7000fcdbdf2501000000050002000000000014000700fe8000faff000000000000008e01f9000000aa14000900fe88000000000000000000000000000108000800ac14142493855cf28446b7ec59ad53cef41a593ced050f11de"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x2000a840) 1.358014491s ago: executing program 1 (id=8096): r0 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) close(0x3) socket$inet_tcp(0x2, 0x1, 0x6) close(0x3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000440)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="54010000100033060000000000000000fc000000000000000000000000000000fc0100000000000000000000000000e4c6aa3381e03693000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0020000000000000000000ac1e000100"/268], 0x154}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x18, 0x6, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3ffffff, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xa2cc39c635ab99fe, 0x0, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x43}]}, &(0x7f0000000900)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r3) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r7, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40080) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000940)=ANY=[@ANYBLOB="ce93aa4cebeae7119b96c34992c158312966a38a47144d30857cd2e9266eccf4cf22a2a25d305b146433cbc1d2a8527f0e12428532456893a3640dc271da238f7e74722c00c681f3ba230b197946f111bf292ffb911f531ab1963a2cc6dcce368d2a84288bbbf743d21518ec048b20ccf6d053cd6b2098c8a9057223ca8f56b114bdfeefd128b5910b41aecbc76cf4"], 0x9c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xa}, {0x1, 0x1}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) ioctl(r1, 0x8b33, &(0x7f0000000240)) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYRESOCT=r12, @ANYBLOB="7b4953b9203b8dc974655ab94442191cb266d4f76b6dc328051f5fc8aa48", @ANYRES64=r0], &(0x7f0000000340)='syzkaller\x00', 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, &(0x7f0000000400)="7f", 0x0}, 0x50) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r12}, 0x10) 1.349034397s ago: executing program 2 (id=8097): socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0x14, 0x0, &(0x7f0000000240)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x31, 0x0, &(0x7f00000002c0)="49723b3ab53a13274c56e00d5be19f87e669877bbc7b7c0cb48fd1bbea1e688e7c84ccfb034a845b4493c90e1785234592", 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = socket(0x1, 0x803, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x8000) socket$packet(0x11, 0x2, 0x300) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0x14, 0x0, &(0x7f0000000240)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x31, 0x0, &(0x7f00000002c0)="49723b3ab53a13274c56e00d5be19f87e669877bbc7b7c0cb48fd1bbea1e688e7c84ccfb034a845b4493c90e1785234592", 0x0}, 0x50) (async) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) socket(0x1, 0x803, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x8000) (async) 1.164885833s ago: executing program 4 (id=8100): socket$netlink(0x10, 0x3, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000080)=0x10, 0x81800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@delqdisc={0x24, 0x25, 0x5, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {}, {0x3, 0xb}}}, 0x24}}, 0x0) ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f0000000140)="b7a8cc44d77a5d72f08022be49d17f190c3092a5e9a6dc109437097367977bdb38bba31a3fd72653142e09bc48f37039a34c92e8c1fcc9bdb0187fad85186ee581224002cc6bf37abccca3fbadada67f5425e9a17d0ecafb2c237cfaa79cc94a568c64b3b54e83bd1c86492b47552517dc5d46cd3c09807babda9ee715dae7e0a0dc2b12b3b8fd3c29ab3f5d1c13c7438a5949c1eb16d1beccc1db37e8ae255f3760593e0b78410856e859f2b2e0e06d0be8b96cfc44d7b59a568b3c6aca78f7cd1996072cd33c0dda1080ca024895507b00b9a3ea6b3cab056645ae8dae1be804401567017d3aceecd1b3dc4e7aa392ccd1eec3732b566b68f7c2aa") r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xb635773f07ebbeef, 0x810, r2, 0x215eb000) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x2241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x5005}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f0000000780)={0x0, 0xfffffffffffffefc, &(0x7f00000007c0)={&(0x7f0000000800)={0x4c, r4, 0x1, 0x0, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x36}, {0x5, 0x8e, 0x1}}]}, 0x4c}}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) r11 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f0000000580)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000009c0)=@newtfilter={0x2c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x1}, {0xe, 0xffff}, {0x300, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2c}}, 0x0) write$tun(r3, &(0x7f0000000700)=ANY=[@ANYBLOB="03030800030016000c0045"], 0x66) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[@ANYBLOB="fe7064b71be1", @ANYBLOB="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", @ANYRES16=r5], 0x50}, 0x1, 0x0, 0x0, 0xc845}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x4) write(r13, &(0x7f00000003c0)="29000000140005b7ff000000040860eb0101b6ff021596db2d6d6974b5d728aa4b5d02c26ed638eeb7", 0x29) 1.14635219s ago: executing program 3 (id=8101): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x148, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x73c7d38a1b8432c4, 0x2, [@TCA_RED_STAB={0x104, 0x2, "55f4b32d215d09ad34a54ecd392b645312028acf803a4be046ac0250a6ab00acdbbcc0a681ef62574eb95c3668168a2237f2cc488cf760d067868e8021f61308c6db4e4ac2ec40342736d4b782ed114b6e548109d0d25d975663c05ceaa64032471a805702a7a92bca01e7f16cfd7858b64cf7168d9220b64044c8dab5221c7a97fe9b875c33dfe30b850d7b07be151a84a139feeb514347d3e58683a3a7a624b0c79700622bbb5c8f573b27d294ff211faa3ef5d05472c85cd1ed4d7bdfbbe8aea77753e983bf2350c11b80e2e0c058bc01ebfe9e4faec45b78bb3d2551f3fec86fca5bea0668c9c98e75db02191cc525ec2d3f9a4db0895a3ff2b1931fa0da"}, @TCA_RED_PARMS={0x14}]}}]}, 0x148}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="4c0000004800010029bd7000ffdbdf250a008000", @ANYRES32=r2, @ANYBLOB="f9ffffff080002000b000000140001feff000000000000000000ffff00000000140001"], 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[], 0x48}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000d80)=0xb, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000dc0)={'ip6gretap0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000e00)="0b031260feffffff02005400f6a13bb1000000086086dd480300", 0x100a6, 0x0, &(0x7f0000000e40)={0x11, 0x86dd, r4}, 0x50) syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) 1.105282974s ago: executing program 2 (id=8102): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x4c}}, 0x6000010) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) 1.009028556s ago: executing program 0 (id=8103): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x5a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="14f086dd0000000000fffe000000", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 851.959606ms ago: executing program 2 (id=8104): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'pim6reg\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280000001300010029bd7000fcdbdf2500000000", @ANYRES32=r2, @ANYBLOB="040a00000904000005ea210000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x24008844) 794.833786ms ago: executing program 0 (id=8105): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x48804}, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000005c0)=""/4077, 0xfed}], 0x1}, 0x1}, {{0x0, 0x0, 0x0}, 0x5b07}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0xd4a}, {{0x0, 0x0, 0x0}, 0x3}], 0x4, 0x2, 0x0) 732.057655ms ago: executing program 0 (id=8106): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f00000001c0)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x9a}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x8) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000002c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x88}, @exit], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f00000001c0)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x9a}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x8) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000002c0), 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x88}, @exit], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51}, 0x90) (async) 724.559398ms ago: executing program 3 (id=8107): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) r2 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x80000) ioctl$sock_SIOCADDRT(r2, 0x890b, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 648.458714ms ago: executing program 4 (id=8108): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fcdbdf251700000054000680040003004c00040067636d286165732900000000000000000000000000000200000000000000000024"], 0x68}}, 0x0) 565.863265ms ago: executing program 0 (id=8109): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) r1 = socket(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x1000000000003e, 0x0, &(0x7f00000003c0)) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=@security={'security\x00', 0xe, 0x4, 0x2e0, 0xffffffff, 0x0, 0x130, 0x1d8, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0xa, 0x7, 0x0, 0x3], 0x1, 0x1}, {0x4, [0x4, 0x1, 0x3, 0x1, 0x5, 0xe], 0x2, 0x4}}}}, {{@ip={@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff, 'macvtap0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x32, 0x3, 0x10}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x6, 0x1}, {0x2, 0x5, 0x6}, {0x6, 0x4, 0x4}, 0x8001}}}, {{@ip={@remote, @rand_addr=0x64010102, 0xffffff00, 0xff, 'ipvlan1\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x0, 0x1, 0x81f6fc83b80a76cf}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x0, 0x2, 0x1, 0x2, 0x3], 0x2, 0x2}, {0x1, [0x2, 0x0, 0x1, 0x6, 0x0, 0x1], 0x2, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000e4ff009b42e4b0e4e808ab00062a2300000000000000"], 0x48) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000280)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000002c0)={0x0, 0x4, 0x1}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'pimreg\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000340)="45000028000100004011000001010101e000000100000000001400"/36, 0x28, 0x0, &(0x7f0000000380)={0x11, 0x800, r4, 0x0, 0x0, 0x0}, 0x14) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000500)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18e7ffffff00000000000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000580)={'syzkaller1\x00', 0xc201}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000005c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newtfilter={0x478, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x448, 0x2, [@TCA_CGROUP_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x7fffffff, 0x1, 0x4, 0xc0000, 0x0, 0x0, 0x3, 0x8, 0x9, 0x4, 0x5, 0x1, 0xa, 0x4, 0x4678, 0x0, 0x8, 0x4b9b, 0x2, 0x7fffffff, 0x6, 0x8, 0x6, 0x48e, 0xd, 0x9, 0x0, 0x8, 0xfffffff4, 0x4, 0x0, 0x1, 0x899, 0x2, 0xd5, 0x3, 0x0, 0x3, 0x9327, 0x400000, 0x38000000, 0x0, 0x2, 0x2212, 0x7, 0x3, 0x8, 0xff, 0x7, 0x5, 0x5, 0x2e38, 0x0, 0x8, 0x10, 0x9, 0xf823, 0x9, 0x7, 0x5, 0x211f, 0xfd28, 0x7fff, 0x3, 0x8, 0x5, 0x200, 0x4365, 0x2, 0x7fff, 0x3433, 0x5, 0x1, 0x101, 0x7, 0x0, 0x7, 0x5, 0xd192, 0x401, 0xb, 0x8, 0x0, 0x13e, 0x0, 0x8, 0x5, 0xe298, 0x3, 0x6, 0x6, 0x33, 0xfffffff7, 0xfffffffa, 0x9934, 0x80, 0x4, 0x4, 0x8, 0x3, 0x9, 0x7ff, 0x2, 0x6, 0x4, 0xe7af, 0x40, 0x3, 0x0, 0xabb6, 0x0, 0x8000, 0xffffff7f, 0xeb0, 0x2, 0x8, 0xef1, 0x2, 0xfffffff9, 0x7f, 0x8, 0x0, 0x1d, 0x3, 0xfb23, 0xffffffff, 0x7, 0x4, 0x6, 0xcf, 0x6, 0x3, 0xa, 0x6, 0x0, 0xac1, 0x8, 0x8, 0x1, 0x5d95, 0xff, 0x101, 0x7, 0x7f4b, 0x7, 0x3, 0xe, 0x7, 0x6, 0x0, 0x1ff, 0x6, 0x9, 0x2, 0x1, 0x2, 0x6, 0x0, 0x4, 0x87, 0xd23f, 0x4, 0x40, 0xfff, 0x3, 0x3, 0x1, 0x4, 0x2, 0xad4, 0x12000, 0x2d6, 0x3, 0x3, 0x74c10000, 0x3, 0x5, 0xe9, 0x2f5, 0x3, 0x24, 0xe, 0x4, 0x2, 0x4, 0x5f8f, 0x7, 0xfff, 0xd7, 0x3, 0x8, 0x1, 0x6, 0x2, 0x7, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x200, 0xf423, 0x7, 0x4c0d, 0x200, 0x1, 0x4, 0x2, 0x3, 0xb, 0x10001, 0x6, 0x6, 0x3, 0x9, 0xfffffff9, 0x4, 0x82, 0x2, 0x7, 0x3, 0x8c, 0x8, 0xee52bce, 0x0, 0x0, 0xfff, 0x9, 0x4, 0x1, 0x7, 0x101, 0x400, 0x2, 0x6, 0x4, 0x6, 0x8d7, 0xc10, 0x3, 0xffff, 0x8, 0x6d498044, 0xdd, 0x470f, 0x8d45, 0x200, 0x7fffffff, 0x7, 0xffffffff, 0x1a90, 0x3, 0x8000, 0x2, 0x6, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000008, 0x0, 0x6, 0x10001, {0x6, 0x0, 0xdaab, 0xd, 0x1, 0x4}, {0x81, 0xb1e342480a2cca97, 0x137a, 0x80, 0x5deb}, 0xff, 0xf5, 0x60}}]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) close(r7) sendmsg$nl_generic(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r0, @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x6, 0xc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000fc0)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r11, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f00000010c0)=""/4112, 0x1010}], 0x1f}, 0x7f}, {{0x0, 0x0, 0x0}, 0x606}], 0x2, 0x4000830b, 0x0) socket$inet6(0xa, 0x2, 0x0) 532.532525ms ago: executing program 3 (id=8110): bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340)="00010203f00c060795", 0x9) 449.897244ms ago: executing program 2 (id=8111): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xbf}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x9, 0x1, 0x4, 0x2, 0x43aaca7d, 0xa, 0x3, 0x5, 0x1}, &(0x7f0000000140)=0x20) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x3}}, [@tmpl={0x144, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@remote, 0x3502}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3}, {{@in6=@mcast2, 0x4d3, 0x3c}, 0x2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4}]}]}, 0x1fc}}, 0x0) getsockopt$inet_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(r1, 0x84, 0x84, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e24, 0x8, @local, 0xbe92}}, 0x4e24}, &(0x7f0000000240)=0x90) 445.107953ms ago: executing program 4 (id=8112): syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2, 0x0, 0x0, 0x9}}}}}}}, 0x0) 366.639312ms ago: executing program 4 (id=8113): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x13, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}, {0x85, 0x0, 0x0, 0x72}}, @printk={@lld, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x41}, {0x5}}]}, &(0x7f0000000440)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r2}, @CGW_SRC_IF={0x8, 0x9, r3}]}, 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000480)={0x6, 0x7, 'syz0\x00'}, &(0x7f00000004c0)=0x28) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4}}}, @IFLA_IFNAME={0x14}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044010}, 0x5a5ad85cf3f2d242) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='#\x00'], 0x48) r5 = socket$netlink(0x10, 0x3, 0xa) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x28, r7, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x20000084) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0}, &(0x7f0000000640)=0xc) sendmsg$nl_route(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r10}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000780)={{{@in6=@private0, @in6=@private2, 0x4e22, 0x7fff, 0x4e24, 0x0, 0xa, 0x80, 0xa0, 0x2b, r8, r10}, {0x9, 0x1, 0x9, 0x9, 0xfffffffffffffff7, 0xf72b, 0xffffffff}, {0x5, 0xc, 0x5, 0x1ff}, 0x3, 0x0, 0x1, 0x1, 0x3}, {{@in6=@loopback, 0x4d3, 0x32}, 0x2, @in=@empty, 0x3503, 0x3, 0x2, 0x6, 0x8, 0x8f, 0xf}}, 0xe8) 341.005635ms ago: executing program 3 (id=8114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWSET={0x18, 0x12, 0xa, 0x9, 0x0, 0x6000, {0x3}, [@NFTA_SET_EXPRESSIONS={0x4}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14, 0x14}}, 0x74}}, 0x0) 309.289692ms ago: executing program 1 (id=8115): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x5a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="14f086dd0000000000feff000000", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 298.824896ms ago: executing program 2 (id=8116): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x3, 0x6, @random="7c6a97bead69"}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0xfffffffc, 0x2000001, {0x0, 0x0, 0x0, r2, {0x8, 0xa}, {0xd, 0x8}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x44090) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'veth1_to_hsr\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x4a88, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x30, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x62}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1ff}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40001}, 0x4080) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0x0, 0x0, 0x10}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f00000008c0)=ANY=[], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r9, 0x2000000, 0xe, 0xffffffffffffff94, &(0x7f00000009c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)}, 0x20) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r13 = socket$kcm(0x2, 0xa, 0x2) r14 = socket$packet(0x11, 0x3, 0x300) bind$packet(r14, &(0x7f0000000300)={0x11, 0xf5, 0x0, 0x1, 0x11, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000340)={'syzkaller1\x00', @link_local}) write$tun(r12, &(0x7f0000000380)=ANY=[], 0xfdef) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b00)={r15, &(0x7f0000000b40), &(0x7f0000000b80)=@tcp6=r11}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_tracing={0x1a, 0x7, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x7}, [@map_val={0x18, 0x8, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x6}, @map_fd={0x18, 0xa, 0x1, 0x0, r7}]}, &(0x7f0000000680)='syzkaller\x00', 0x697, 0x0, 0x0, 0x41100, 0x8, '\x00', r8, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0x0, 0x1ff, 0x3}, 0x10, 0xb81b, r9, 0x2, &(0x7f0000000bc0)=[r10, r15], &(0x7f0000000c00)=[{0x0, 0x4, 0xf, 0x7}, {0x5, 0x0, 0x0, 0x1}], 0x10, 0xd}, 0x94) 217.544369ms ago: executing program 4 (id=8117): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x148, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x73c7d38a1b8432c4, 0x2, [@TCA_RED_STAB={0x104, 0x2, "55f4b32d215d09ad34a54ecd392b645312028acf803a4be046ac0250a6ab00acdbbcc0a681ef62574eb95c3668168a2237f2cc488cf760d067868e8021f61308c6db4e4ac2ec40342736d4b782ed114b6e548109d0d25d975663c05ceaa64032471a805702a7a92bca01e7f16cfd7858b64cf7168d9220b64044c8dab5221c7a97fe9b875c33dfe30b850d7b07be151a84a139feeb514347d3e58683a3a7a624b0c79700622bbb5c8f573b27d294ff211faa3ef5d05472c85cd1ed4d7bdfbbe8aea77753e983bf2350c11b80e2e0c058bc01ebfe9e4faec45b78bb3d2551f3fec86fca5bea0668c9c98e75db02191cc525ec2d3f9a4db0895a3ff2b1931fa0da"}, @TCA_RED_PARMS={0x14}]}}]}, 0x148}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="4c0000004800010029bd7000ffdbdf250a008000", @ANYRES32=r2, @ANYBLOB="f9ffffff080002000b000000140001feff000000000000000000ffff00000000140001"], 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[], 0x48}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000d80)=0xb, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000dc0)={'ip6gretap0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000e00)="0b031260feffffff02005400f6a13bb1000000086086dd480300", 0x100a6, 0x0, &(0x7f0000000e40)={0x11, 0x86dd, r4}, 0x50) syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) 166.300478ms ago: executing program 3 (id=8118): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000000202010800000000000000000a0000004400028006000340000000000c0002d905000100000000002c00018014000300fe88000000000000000000001a000001090004"], 0x58}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180), 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x11, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2000000046000901fefffffffeffffff017c00000c0003804e2d"], 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$XFS_IOC_SCRUB_METADATA(r3, 0xc040583c, &(0x7f0000000500)={0xffffffff, 0x1a0, 0x6, 0x3, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) 166.041454ms ago: executing program 1 (id=8119): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$sock_linger(r2, 0x1, 0x3d, &(0x7f0000000140)={0x1, 0x6}, 0x8) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x40004}}, 0x10) (async) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10) bind$tipc(r0, 0x0, 0x0) (async) close(r0) syz_emit_ethernet(0x63d, &(0x7f00000003c0)={@random='\x00\x00\x00\x00@\x00', @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x607, 0x3a, 0xff, @remote, @mcast1, {[@fragment={0x3a, 0x0, 0x1, 0x1, 0x0, 0x9, 0x66}, @hopopts={0x33, 0x49, '\x00', [@calipso={0x7, 0x50, {0x3, 0x12, 0x4, 0x8000, [0x4, 0x0, 0xe, 0x1, 0x8, 0x4800000000000, 0x9, 0x5, 0xffffffffffffffff]}}, @jumbo={0xc2, 0x4, 0xe21f}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x4}}, @calipso={0x7, 0x20, {0x0, 0x6, 0x3, 0x80, [0x9, 0x0, 0x2]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x3, 0xc, 0x83, 0xf5, [0x7fffffff, 0x2, 0x8, 0x0, 0x6, 0x12a1]}}, @generic={0x6, 0x8a, "489b3619c4c5731283b3c462f6edcd2afc51ba4ab41a3e22e09256d8d631c5132f1f54b7ec253517a8c3eb4e1605e97685409f3fc1452b6be9fd16d7eb6faae0c029e3c4a1ebf260c0da60afe1d7e7388965bf2d2cfbc1d7998b4e90315c3fda516d308132c41f550fc58be859a6f112d5ab86be6139fee477006679f3470ce98b4abccd87fccb446667"}, @jumbo={0xc2, 0x4, 0x7}, @generic={0x7, 0xdf, "39c5c7f81d10b8ce083350ec01e18b36bc283b7e9b29a7b447f414d36c00ed925d327eac2a6ac13083d022ccb9ce90535a534dea2f6bfd72148e884c7a19bbd1092bb37145eb94d7503551ac831091d2b5093fafe94262fc0d7fce633629dc7fc3e8b66eeae5b0245482024d79ed07c0cc427f69789cb894aeacd3b82bb0de70efa2f7df5fab24ade0a48dd3ec801d36d372c64c40da18e751d7d5c57f8dd29bd810e2d9637a99e57d84c71cef7ca1d4f8ea8daeb34ca45f24020bc80364f362cdf110614b5f2e710049be15a052adee43ba466d1b3b3ff728da78d3ade693"}]}, @srh={0x67, 0x6, 0x4, 0x1, 0x2, 0x0, 0x7, {@empty, [@private2={0xfc, 0x2, '\x00', 0x1}, @private2]}}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2, 0x2, 0x11, 0x0, [{0xe, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffffffff8026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x18, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x22, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c764c2d227a83b89483b1084743474677e45e65eb27a5c8d989417019f619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x5, "fcc1876d4ec1876d4e6f8fce2dfd02006f02205dfe5c2d6b9363ed09bd9281c9fe68d16212fb"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x0, 0x5, "090000000900000036da018dff16e70b8b1400000000e18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 67.584771ms ago: executing program 1 (id=8120): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r3 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x80000) ioctl$sock_SIOCADDRT(r3, 0x890b, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@bridge_newvlan={0x18, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x0) 39.472122ms ago: executing program 4 (id=8121): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000280)={0x1d, r4, 0x0, {0x0, 0xf0, 0x4}, 0xfe}, 0x18) socket(0x23, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000002c0)=0x1, 0x4) sendmmsg(r1, &(0x7f0000000300)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000000340)=[{&(0x7f0000000380)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000100)=[{0x2, 0x1, {0x2, 0xff, 0x1}, {0x0, 0xff, 0x6}, 0x1, 0xfd}, {0x1, 0x3, {0x1, 0x1}, {0x1, 0xf0, 0x1}, 0xfe, 0x1}, {0x2, 0x3, {0x1, 0xf0, 0x2}, {0x0, 0xff, 0x3}, 0x2, 0x2}, {0x1, 0x2, {0x2, 0x0, 0x3}, {0x0, 0xff}, 0xfc, 0x1}], 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001b80)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0x2, 0xb}, {0xf, 0xa}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20040) 0s ago: executing program 3 (id=8122): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fcdbdf251700000054000680040003004c00040067636d286165732900000000000000000000000000001000000000000000000024"], 0x68}}, 0x0) kernel console output (not intermixed with test programs): invalid length. [ 539.709498][ T5989] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 539.861072][T25786] netlink: 'syz.1.7190': attribute type 1 has an invalid length. [ 539.861182][T25795] FAULT_INJECTION: forcing a failure. [ 539.861182][T25795] name failslab, interval 1, probability 0, space 0, times 0 [ 539.861209][T25795] CPU: 0 UID: 0 PID: 25795 Comm: syz.2.7194 Not tainted syzkaller #0 PREEMPT(full) [ 539.861232][T25795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 539.861244][T25795] Call Trace: [ 539.861252][T25795] [ 539.861260][T25795] dump_stack_lvl+0xe8/0x150 [ 539.861297][T25795] should_fail_ex+0x3eb/0x540 [ 539.861328][T25795] should_failslab+0xa8/0x100 [ 539.861363][T25795] ? skb_clone+0x212/0x3a0 [ 539.861387][T25795] kmem_cache_alloc_noprof+0x9c/0x600 [ 539.861413][T25795] ? skb_clone+0x212/0x3a0 [ 539.861445][T25795] skb_clone+0x212/0x3a0 [ 539.861473][T25795] __netlink_deliver_tap+0x355/0x6e0 [ 539.861516][T25795] ? netlink_deliver_tap+0x2e/0x1b0 [ 539.861526][T25783] __nla_validate_parse: 13 callbacks suppressed [ 539.861540][T25783] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7190'. [ 539.861547][T25795] netlink_deliver_tap+0x19c/0x1b0 [ 539.861580][T25795] netlink_sendskb+0x68/0x140 [ 539.861609][T25795] netlink_rcv_skb+0x2a4/0x4a0 [ 539.861640][T25795] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 539.861665][T25795] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 539.861710][T25795] ? netlink_deliver_tap+0x2e/0x1b0 [ 539.861739][T25795] ? netlink_deliver_tap+0x2e/0x1b0 [ 539.861774][T25795] netlink_unicast+0x8ef/0xa80 [ 539.861821][T25795] netlink_sendmsg+0x7f0/0xb20 [ 539.861849][T25795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 539.861867][T25795] ? __lock_acquire+0x747/0x2de0 [ 539.861897][T25795] ? aa_sock_msg_perm+0x144/0x210 [ 539.861933][T25795] ? apparmor_socket_sendmsg+0x98/0x360 [ 539.861962][T25795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 539.861999][T25795] sock_sendmsg_nosec+0x14e/0x190 [ 539.862031][T25795] ____sys_sendmsg+0x49f/0x790 [ 539.862064][T25795] ? __pfx_____sys_sendmsg+0x10/0x10 [ 539.862098][T25795] ? import_iovec+0x73/0xa0 [ 539.862128][T25795] ___sys_sendmsg+0x2f7/0x3d0 [ 539.862148][T25795] ? __lock_acquire+0x747/0x2de0 [ 539.862179][T25795] ? __pfx____sys_sendmsg+0x10/0x10 [ 539.862246][T25795] ? __fget_files+0x3a2/0x420 [ 539.862269][T25795] ? __fget_files+0x2a/0x420 [ 539.862306][T25795] __x64_sys_sendmsg+0x1b1/0x290 [ 539.862332][T25795] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 539.862382][T25795] do_syscall_64+0x166/0x520 [ 539.862410][T25795] ? trace_irq_disable+0x3b/0x140 [ 539.862436][T25795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.862457][T25795] ? clear_bhb_loop+0x70/0xc0 [ 539.862482][T25795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.862502][T25795] RIP: 0033:0x7fdc505a94d9 [ 539.862523][T25795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.862540][T25795] RSP: 002b:00007fdc51418028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 539.862562][T25795] RAX: ffffffffffffffda RBX: 00007fdc50825fa0 RCX: 00007fdc505a94d9 [ 539.862578][T25795] RDX: 0000000000004080 RSI: 0000200000000000 RDI: 0000000000000003 [ 539.862591][T25795] RBP: 00007fdc51418090 R08: 0000000000000000 R09: 0000000000000000 [ 539.862605][T25795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 539.862616][T25795] R13: 00007fdc50826038 R14: 00007fdc50825fa0 R15: 00007ffd3c824568 [ 539.862651][T25795] [ 539.879132][ T5989] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 539.988170][ T96] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.989222][ T96] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 540.100835][ T5980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 540.209189][ T43] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 540.260374][T25802] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 540.318843][ T43] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 540.429296][ T43] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 540.468965][T25814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7203'. [ 540.540590][ T96] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 540.714667][T25826] netlink: 'syz.0.7206': attribute type 1 has an invalid length. [ 540.715037][T25826] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7206'. [ 541.073964][T25848] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7212'. [ 541.192890][T25854] netlink: 'syz.2.7215': attribute type 30 has an invalid length. [ 541.193144][T25854] FAULT_INJECTION: forcing a failure. [ 541.193144][T25854] name failslab, interval 1, probability 0, space 0, times 0 [ 541.193171][T25854] CPU: 1 UID: 0 PID: 25854 Comm: syz.2.7215 Not tainted syzkaller #0 PREEMPT(full) [ 541.193194][T25854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 541.193206][T25854] Call Trace: [ 541.193215][T25854] [ 541.193225][T25854] dump_stack_lvl+0xe8/0x150 [ 541.193262][T25854] should_fail_ex+0x3eb/0x540 [ 541.193282][T25854] should_failslab+0xa8/0x100 [ 541.193302][T25854] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 541.193320][T25854] ? vxlan_newlink+0x29f/0x8b0 [ 541.193337][T25854] ? vxlan_newlink+0x29f/0x8b0 [ 541.193353][T25854] ? vxlan_config_validate+0xa52/0xde0 [ 541.193372][T25854] kmemdup_noprof+0x2b/0x70 [ 541.193388][T25854] vxlan_newlink+0x29f/0x8b0 [ 541.193407][T25854] ? alloc_netdev_mqs+0xd5b/0x1240 [ 541.193436][T25854] ? __pfx_vxlan_newlink+0x10/0x10 [ 541.193456][T25854] ? alloc_netdev_mqs+0xd5b/0x1240 [ 541.193471][T25854] ? __kvmalloc_node_noprof+0x52a/0x820 [ 541.193497][T25854] ? validate_linkmsg+0x809/0xa50 [ 541.193519][T25854] ? rtnl_create_link+0xa04/0xd70 [ 541.193536][T25854] ? __pfx_vxlan_newlink+0x10/0x10 [ 541.193554][T25854] rtnl_newlink_create+0x305/0x7b0 [ 541.193573][T25854] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 541.193591][T25854] ? __pfx___mutex_lock+0x10/0x10 [ 541.193615][T25854] ? ns_capable+0x84/0xe0 [ 541.193634][T25854] rtnl_newlink+0x167a/0x1c30 [ 541.193658][T25854] ? __pfx_rtnl_newlink+0x10/0x10 [ 541.193669][T25854] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 541.193686][T25854] ? netlink_deliver_tap+0x19c/0x1b0 [ 541.193703][T25854] ? netlink_unicast+0x8c1/0xa80 [ 541.193717][T25854] ? netlink_sendmsg+0x7f0/0xb20 [ 541.193727][T25854] ? sock_sendmsg_nosec+0x14e/0x190 [ 541.193742][T25854] ? ____sys_sendmsg+0x49f/0x790 [ 541.193754][T25854] ? ___sys_sendmsg+0x2f7/0x3d0 [ 541.193766][T25854] ? __x64_sys_sendmsg+0x1b1/0x290 [ 541.193779][T25854] ? do_syscall_64+0x166/0x520 [ 541.193794][T25854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.193829][T25854] ? kasan_quarantine_put+0xbb/0x1f0 [ 541.193846][T25854] ? lockdep_hardirqs_on+0x7b/0x110 [ 541.193864][T25854] ? nlmon_xmit+0xb0/0x100 [ 541.193877][T25854] ? kmem_cache_free+0x182/0x650 [ 541.193899][T25854] ? __lock_acquire+0x747/0x2de0 [ 541.193919][T25854] ? __pfx_hook_capable+0x10/0x10 [ 541.193934][T25854] ? __dev_queue_xmit+0x29b/0x3920 [ 541.193952][T25854] ? __pfx_hook_capable+0x10/0x10 [ 541.193963][T25854] ? lockdep_hardirqs_on+0x7b/0x110 [ 541.193996][T25854] ? __pfx_rtnl_newlink+0x10/0x10 [ 541.194008][T25854] rtnetlink_rcv_msg+0x802/0xc00 [ 541.194024][T25854] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 541.194036][T25854] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 541.194051][T25854] ? __copy_skb_header+0xa3/0x4a0 [ 541.194073][T25854] netlink_rcv_skb+0x226/0x4a0 [ 541.194091][T25854] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 541.194106][T25854] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 541.194132][T25854] ? netlink_deliver_tap+0x2e/0x1b0 [ 541.194150][T25854] ? netlink_deliver_tap+0x2e/0x1b0 [ 541.194171][T25854] netlink_unicast+0x8ef/0xa80 [ 541.194202][T25854] netlink_sendmsg+0x7f0/0xb20 [ 541.194229][T25854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.194247][T25854] ? __lock_acquire+0x747/0x2de0 [ 541.194274][T25854] ? aa_sock_msg_perm+0x144/0x210 [ 541.194312][T25854] ? apparmor_socket_sendmsg+0x98/0x360 [ 541.194343][T25854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.194362][T25854] sock_sendmsg_nosec+0x14e/0x190 [ 541.194389][T25854] ____sys_sendmsg+0x49f/0x790 [ 541.194408][T25854] ? __pfx_____sys_sendmsg+0x10/0x10 [ 541.194435][T25854] ? import_iovec+0x73/0xa0 [ 541.194454][T25854] ___sys_sendmsg+0x2f7/0x3d0 [ 541.194466][T25854] ? __lock_acquire+0x747/0x2de0 [ 541.194484][T25854] ? __pfx____sys_sendmsg+0x10/0x10 [ 541.194522][T25854] ? __fget_files+0x3a2/0x420 [ 541.194537][T25854] ? __fget_files+0x2a/0x420 [ 541.194558][T25854] __x64_sys_sendmsg+0x1b1/0x290 [ 541.194574][T25854] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 541.194602][T25854] do_syscall_64+0x166/0x520 [ 541.194618][T25854] ? trace_irq_disable+0x3b/0x140 [ 541.194634][T25854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.194646][T25854] ? clear_bhb_loop+0x70/0xc0 [ 541.194661][T25854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.194673][T25854] RIP: 0033:0x7fdc505a94d9 [ 541.194686][T25854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.194697][T25854] RSP: 002b:00007fdc51418028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 541.194713][T25854] RAX: ffffffffffffffda RBX: 00007fdc50825fa0 RCX: 00007fdc505a94d9 [ 541.194722][T25854] RDX: 0000000004008840 RSI: 0000200000000000 RDI: 0000000000000005 [ 541.194730][T25854] RBP: 00007fdc51418090 R08: 0000000000000000 R09: 0000000000000000 [ 541.194738][T25854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 541.194746][T25854] R13: 00007fdc50826038 R14: 00007fdc50825fa0 R15: 00007ffd3c824568 [ 541.194766][T25854] [ 541.403241][T25858] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7217'. [ 541.739868][T25867] netlink: 'syz.2.7221': attribute type 1 has an invalid length. [ 541.739892][T25867] nbd: error processing sock list [ 541.903882][T25877] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7224'. [ 541.947982][T25872] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 542.049842][T25877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7224'. [ 542.161883][T25896] netlink: 'syz.0.7228': attribute type 30 has an invalid length. [ 542.382843][T25906] xt_hashlimit: invalid interval [ 542.383114][T25906] netlink: 412 bytes leftover after parsing attributes in process `syz.4.7232'. [ 542.693922][T25924] Cannot find set identified by id 2 to match [ 542.951869][T25941] tipc: Enabling of bearer rejected, no device for the media [ 543.032091][T25946] netlink: 'syz.2.7241': attribute type 3 has an invalid length. [ 543.051210][T25944] netlink: 'syz.1.7244': attribute type 30 has an invalid length. [ 543.299322][T25955] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7247'. [ 543.399439][T25958] netlink: 'syz.4.7248': attribute type 29 has an invalid length. [ 543.401815][T25958] netlink: 'syz.4.7248': attribute type 29 has an invalid length. [ 543.437529][T25964] netlink: 'syz.4.7248': attribute type 29 has an invalid length. [ 543.923706][T25989] bond0 (unregistering): Released all slaves [ 544.073754][T25999] netlink: 284 bytes leftover after parsing attributes in process `syz.3.7260'. [ 544.262344][T26010] FAULT_INJECTION: forcing a failure. [ 544.262344][T26010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 544.262377][T26010] CPU: 1 UID: 0 PID: 26010 Comm: syz.2.7263 Not tainted syzkaller #0 PREEMPT(full) [ 544.262400][T26010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 544.262412][T26010] Call Trace: [ 544.262421][T26010] [ 544.262430][T26010] dump_stack_lvl+0xe8/0x150 [ 544.262469][T26010] should_fail_ex+0x3eb/0x540 [ 544.262500][T26010] _copy_from_iter+0x1d3/0x1680 [ 544.262537][T26010] ? __pfx__copy_from_iter+0x10/0x10 [ 544.262557][T26010] ? __kmalloc_node_track_caller_noprof+0x2e6/0x720 [ 544.262583][T26010] ? netlink_sendmsg+0x5cd/0xb20 [ 544.262601][T26010] ? netlink_sendmsg+0x5cd/0xb20 [ 544.262626][T26010] ? netlink_sendmsg+0x64f/0xb20 [ 544.262644][T26010] ? skb_put+0x112/0x210 [ 544.262669][T26010] netlink_sendmsg+0x6bb/0xb20 [ 544.262694][T26010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 544.262712][T26010] ? __lock_acquire+0x747/0x2de0 [ 544.262740][T26010] ? aa_sock_msg_perm+0x144/0x210 [ 544.262774][T26010] ? apparmor_socket_sendmsg+0x98/0x360 [ 544.262806][T26010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 544.262824][T26010] sock_sendmsg_nosec+0x14e/0x190 [ 544.262855][T26010] ____sys_sendmsg+0x49f/0x790 [ 544.262887][T26010] ? __pfx_____sys_sendmsg+0x10/0x10 [ 544.262920][T26010] ? import_iovec+0x73/0xa0 [ 544.262959][T26010] ___sys_sendmsg+0x2f7/0x3d0 [ 544.262981][T26010] ? __lock_acquire+0x747/0x2de0 [ 544.263011][T26010] ? __pfx____sys_sendmsg+0x10/0x10 [ 544.263078][T26010] ? __fget_files+0x3a2/0x420 [ 544.263104][T26010] ? __fget_files+0x2a/0x420 [ 544.263138][T26010] __x64_sys_sendmsg+0x1b1/0x290 [ 544.263165][T26010] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 544.263210][T26010] do_syscall_64+0x166/0x520 [ 544.263237][T26010] ? trace_irq_disable+0x3b/0x140 [ 544.263263][T26010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.263285][T26010] ? clear_bhb_loop+0x70/0xc0 [ 544.263309][T26010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.263329][T26010] RIP: 0033:0x7fdc505a94d9 [ 544.263349][T26010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.263366][T26010] RSP: 002b:00007fdc513f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 544.263389][T26010] RAX: ffffffffffffffda RBX: 00007fdc50826090 RCX: 00007fdc505a94d9 [ 544.263404][T26010] RDX: 0000000000000004 RSI: 0000200000000280 RDI: 0000000000000003 [ 544.263417][T26010] RBP: 00007fdc513f7090 R08: 0000000000000000 R09: 0000000000000000 [ 544.263430][T26010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.263442][T26010] R13: 00007fdc50826128 R14: 00007fdc50826090 R15: 00007ffd3c824568 [ 544.263474][T26010] [ 544.639100][ T96] net_ratelimit: 42 callbacks suppressed [ 544.639122][ T96] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 544.691042][T26022] tipc: Enabling of bearer rejected, failed to enable media [ 544.747375][ T5989] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 544.857533][ T5989] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 544.897181][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.946493][T26033] __nla_validate_parse: 1 callbacks suppressed [ 544.946517][T26033] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7272'. [ 544.967697][ T43] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 545.077549][ T96] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 545.187311][ T96] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 545.298194][ T5981] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 545.407294][ T96] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 545.488784][ T5989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.634445][T26042] validate_nla: 2 callbacks suppressed [ 545.634467][T26042] netlink: 'syz.3.7277': attribute type 4 has an invalid length. [ 545.682846][T26042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7277'. [ 545.683349][T26042] netlink: 'syz.3.7277': attribute type 4 has an invalid length. [ 545.716870][T26047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7278'. [ 545.806082][T26051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7279'. [ 545.960762][T26062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7281'. [ 546.728450][T26096] netlink: 'syz.1.7292': attribute type 1 has an invalid length. [ 546.732096][T26096] netlink: 'syz.1.7292': attribute type 1 has an invalid length. [ 546.925467][T26109] netlink: 'syz.0.7296': attribute type 12 has an invalid length. [ 546.925495][T26109] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.7296'. [ 547.059269][T26113] No such timeout policy "syz1" [ 547.375894][T26130] netlink: 'syz.1.7302': attribute type 1 has an invalid length. [ 547.450048][T26126] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7302'. [ 547.475243][T26137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7307'. [ 547.481688][T26132] syzkaller0: entered promiscuous mode [ 547.481709][T26132] syzkaller0: entered allmulticast mode [ 547.541418][T26141] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7308'. [ 547.632962][T26126] xt_hashlimit: size too large, truncated to 1048576 [ 547.770854][T26154] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7312'. [ 548.770435][T26205] netlink: 'syz.2.7332': attribute type 12 has an invalid length. [ 549.032753][T26217] bridge_slave_1: left promiscuous mode [ 549.034283][T26217] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.064816][T26217] bridge_slave_0: left allmulticast mode [ 549.064845][T26217] bridge_slave_0: left promiscuous mode [ 549.066161][T26217] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.410701][T26240] sctp: [Deprecated]: syz.4.7347 (pid 26240) Use of struct sctp_assoc_value in delayed_ack socket option. [ 549.410701][T26240] Use struct sctp_sack_info instead [ 549.672580][T26255] netlink: 'syz.2.7352': attribute type 2 has an invalid length. [ 549.675007][T26255] netlink: 'syz.2.7352': attribute type 2 has an invalid length. [ 549.676648][T26261] net_ratelimit: 42 callbacks suppressed [ 549.676667][T26261] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 549.679913][T26255] netlink: 'syz.2.7352': attribute type 2 has an invalid length. [ 549.730250][ T5980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 549.743461][T26248] xt_CT: No such helper "syz0" [ 549.837646][ T43] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 549.899718][ T5980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.947361][ T5989] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 549.986850][T26270] vxlan2: entered allmulticast mode [ 550.018417][T26273] FAULT_INJECTION: forcing a failure. [ 550.018417][T26273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.018450][T26273] CPU: 0 UID: 0 PID: 26273 Comm: syz.3.7358 Not tainted syzkaller #0 PREEMPT(full) [ 550.018473][T26273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 550.018485][T26273] Call Trace: [ 550.018493][T26273] [ 550.018503][T26273] dump_stack_lvl+0xe8/0x150 [ 550.018541][T26273] should_fail_ex+0x3eb/0x540 [ 550.018572][T26273] _copy_from_iter+0x1d3/0x1680 [ 550.018596][T26273] ? __alloc_skb+0x27a/0x7a0 [ 550.018620][T26273] ? __alloc_skb+0x27a/0x7a0 [ 550.018642][T26273] ? __alloc_skb+0x27a/0x7a0 [ 550.018662][T26273] ? __pfx__copy_from_iter+0x10/0x10 [ 550.018683][T26273] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 550.018707][T26273] ? __alloc_skb+0x27a/0x7a0 [ 550.018724][T26273] ? __alloc_skb+0x27a/0x7a0 [ 550.018751][T26273] ? netlink_sendmsg+0x64f/0xb20 [ 550.018770][T26273] ? skb_put+0x112/0x210 [ 550.018794][T26273] netlink_sendmsg+0x6bb/0xb20 [ 550.018825][T26273] ? __pfx_netlink_sendmsg+0x10/0x10 [ 550.018843][T26273] ? __lock_acquire+0x747/0x2de0 [ 550.018879][T26273] ? aa_sock_msg_perm+0x144/0x210 [ 550.018914][T26273] ? apparmor_socket_sendmsg+0x98/0x360 [ 550.018944][T26273] ? __pfx_netlink_sendmsg+0x10/0x10 [ 550.018963][T26273] sock_sendmsg_nosec+0x14e/0x190 [ 550.018995][T26273] ____sys_sendmsg+0x49f/0x790 [ 550.019028][T26273] ? __pfx_____sys_sendmsg+0x10/0x10 [ 550.019062][T26273] ? import_iovec+0x73/0xa0 [ 550.019091][T26273] ___sys_sendmsg+0x2f7/0x3d0 [ 550.019112][T26273] ? __lock_acquire+0x747/0x2de0 [ 550.019141][T26273] ? __pfx____sys_sendmsg+0x10/0x10 [ 550.019207][T26273] ? __fget_files+0x3a2/0x420 [ 550.019231][T26273] ? __fget_files+0x2a/0x420 [ 550.019266][T26273] __x64_sys_sendmsg+0x1b1/0x290 [ 550.019292][T26273] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 550.019340][T26273] do_syscall_64+0x166/0x520 [ 550.019365][T26273] ? trace_irq_disable+0x3b/0x140 [ 550.019391][T26273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.019412][T26273] ? clear_bhb_loop+0x70/0xc0 [ 550.019437][T26273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.019456][T26273] RIP: 0033:0x7f73c55a94d9 [ 550.019476][T26273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.019494][T26273] RSP: 002b:00007f73c639e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 550.019517][T26273] RAX: ffffffffffffffda RBX: 00007f73c5825fa0 RCX: 00007f73c55a94d9 [ 550.019532][T26273] RDX: 0000000000008410 RSI: 0000200000000540 RDI: 0000000000000003 [ 550.019546][T26273] RBP: 00007f73c639e090 R08: 0000000000000000 R09: 0000000000000000 [ 550.019559][T26273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.019571][T26273] R13: 00007f73c5826038 R14: 00007f73c5825fa0 R15: 00007ffeb48c66b8 [ 550.019607][T26273] [ 550.067823][ T5989] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 550.187248][ T96] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 550.266573][T26279] openvswitch: netlink: IP tunnel dst address not specified [ 550.298334][ T5981] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 550.366711][T26282] __nla_validate_parse: 3 callbacks suppressed [ 550.366733][T26282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7362'. [ 550.397203][ T5981] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 550.654003][T26303] validate_nla: 62 callbacks suppressed [ 550.655221][T26303] netlink: 'syz.0.7369': attribute type 30 has an invalid length. [ 550.662422][T26303] FAULT_INJECTION: forcing a failure. [ 550.662422][T26303] name failslab, interval 1, probability 0, space 0, times 0 [ 550.662450][T26303] CPU: 0 UID: 0 PID: 26303 Comm: syz.0.7369 Not tainted syzkaller #0 PREEMPT(full) [ 550.662474][T26303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 550.662485][T26303] Call Trace: [ 550.662494][T26303] [ 550.662502][T26303] dump_stack_lvl+0xe8/0x150 [ 550.662537][T26303] should_fail_ex+0x3eb/0x540 [ 550.662566][T26303] should_failslab+0xa8/0x100 [ 550.662597][T26303] __kvmalloc_node_noprof+0x171/0x820 [ 550.662626][T26303] ? __rhashtable_init_noprof+0x5fa/0xbd0 [ 550.662646][T26303] ? __rhashtable_init_noprof+0x5fa/0xbd0 [ 550.662674][T26303] __rhashtable_init_noprof+0x5fa/0xbd0 [ 550.662700][T26303] vxlan_mdb_init+0x28/0x80 [ 550.662724][T26303] vxlan_init+0x197/0x540 [ 550.662756][T26303] register_netdevice+0x6ae/0x2280 [ 550.662790][T26303] ? rcu_is_watching+0x16/0xb0 [ 550.662817][T26303] ? trace_kmalloc+0x2a/0xf0 [ 550.662841][T26303] ? __pfx_register_netdevice+0x10/0x10 [ 550.662882][T26303] vxlan_newlink+0x3c7/0x8b0 [ 550.662917][T26303] ? __pfx_vxlan_newlink+0x10/0x10 [ 550.662943][T26303] ? alloc_netdev_mqs+0xd5b/0x1240 [ 550.662966][T26303] ? __kvmalloc_node_noprof+0x52a/0x820 [ 550.663004][T26303] ? validate_linkmsg+0x809/0xa50 [ 550.663038][T26303] ? rtnl_create_link+0xa04/0xd70 [ 550.663063][T26303] ? __pfx_vxlan_newlink+0x10/0x10 [ 550.663090][T26303] rtnl_newlink_create+0x305/0x7b0 [ 550.663119][T26303] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 550.663146][T26303] ? __pfx___mutex_lock+0x10/0x10 [ 550.663182][T26303] ? ns_capable+0x84/0xe0 [ 550.663212][T26303] rtnl_newlink+0x167a/0x1c30 [ 550.663249][T26303] ? __pfx_rtnl_newlink+0x10/0x10 [ 550.663266][T26303] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 550.663291][T26303] ? netlink_deliver_tap+0x19c/0x1b0 [ 550.663315][T26303] ? netlink_unicast+0x8c1/0xa80 [ 550.663337][T26303] ? netlink_sendmsg+0x7f0/0xb20 [ 550.663352][T26303] ? sock_sendmsg_nosec+0x14e/0x190 [ 550.663386][T26303] ? ____sys_sendmsg+0x49f/0x790 [ 550.663407][T26303] ? ___sys_sendmsg+0x2f7/0x3d0 [ 550.663427][T26303] ? __x64_sys_sendmsg+0x1b1/0x290 [ 550.663447][T26303] ? do_syscall_64+0x166/0x520 [ 550.663471][T26303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.663534][T26303] ? kasan_quarantine_put+0xbb/0x1f0 [ 550.663560][T26303] ? lockdep_hardirqs_on+0x7b/0x110 [ 550.663587][T26303] ? nlmon_xmit+0xb0/0x100 [ 550.663608][T26303] ? kmem_cache_free+0x182/0x650 [ 550.663641][T26303] ? __lock_acquire+0x747/0x2de0 [ 550.663671][T26303] ? __pfx_hook_capable+0x10/0x10 [ 550.663689][T26303] ? __dev_queue_xmit+0x29b/0x3920 [ 550.663716][T26303] ? __pfx_hook_capable+0x10/0x10 [ 550.663734][T26303] ? lockdep_hardirqs_on+0x7b/0x110 [ 550.663786][T26303] ? __pfx_rtnl_newlink+0x10/0x10 [ 550.663804][T26303] rtnetlink_rcv_msg+0x802/0xc00 [ 550.663829][T26303] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 550.663848][T26303] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 550.663871][T26303] ? __copy_skb_header+0xa3/0x4a0 [ 550.663905][T26303] netlink_rcv_skb+0x226/0x4a0 [ 550.663933][T26303] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 550.663955][T26303] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 550.663996][T26303] ? netlink_deliver_tap+0x2e/0x1b0 [ 550.664022][T26303] ? netlink_deliver_tap+0x2e/0x1b0 [ 550.664055][T26303] netlink_unicast+0x8ef/0xa80 [ 550.664099][T26303] netlink_sendmsg+0x7f0/0xb20 [ 550.664123][T26303] ? __pfx_netlink_sendmsg+0x10/0x10 [ 550.664139][T26303] ? __lock_acquire+0x747/0x2de0 [ 550.664164][T26303] ? aa_sock_msg_perm+0x144/0x210 [ 550.664197][T26303] ? apparmor_socket_sendmsg+0x98/0x360 [ 550.664224][T26303] ? __pfx_netlink_sendmsg+0x10/0x10 [ 550.664240][T26303] sock_sendmsg_nosec+0x14e/0x190 [ 550.664268][T26303] ____sys_sendmsg+0x49f/0x790 [ 550.664299][T26303] ? __pfx_____sys_sendmsg+0x10/0x10 [ 550.664331][T26303] ? import_iovec+0x73/0xa0 [ 550.664358][T26303] ___sys_sendmsg+0x2f7/0x3d0 [ 550.664385][T26303] ? __lock_acquire+0x747/0x2de0 [ 550.664413][T26303] ? __pfx____sys_sendmsg+0x10/0x10 [ 550.664474][T26303] ? __fget_files+0x3a2/0x420 [ 550.664495][T26303] ? __fget_files+0x2a/0x420 [ 550.664528][T26303] __x64_sys_sendmsg+0x1b1/0x290 [ 550.664552][T26303] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 550.664597][T26303] do_syscall_64+0x166/0x520 [ 550.664620][T26303] ? trace_irq_disable+0x3b/0x140 [ 550.664644][T26303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.664663][T26303] ? clear_bhb_loop+0x70/0xc0 [ 550.664686][T26303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.664704][T26303] RIP: 0033:0x7fcc8d1a94d9 [ 550.664723][T26303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.664739][T26303] RSP: 002b:00007fcc8e05a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 550.664760][T26303] RAX: ffffffffffffffda RBX: 00007fcc8d425fa0 RCX: 00007fcc8d1a94d9 [ 550.664774][T26303] RDX: 0000000004008840 RSI: 0000200000000000 RDI: 0000000000000005 [ 550.664786][T26303] RBP: 00007fcc8e05a090 R08: 0000000000000000 R09: 0000000000000000 [ 550.664798][T26303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 550.664809][T26303] R13: 00007fcc8d426038 R14: 00007fcc8d425fa0 R15: 00007fff19f4cad8 [ 550.664841][T26303] [ 551.075375][T26315] netlink: 'syz.0.7371': attribute type 1 has an invalid length. [ 551.335501][T26322] netlink: 'syz.1.7374': attribute type 10 has an invalid length. [ 551.352118][T26322] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7374'. [ 551.394224][T26325] bond21: (slave geneve3): making interface the new active one [ 551.394692][T26325] bond21: (slave geneve3): Enslaving as an active interface with an up link [ 551.418491][ T5992] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 551.422483][ T5981] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 551.422526][ T5981] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 551.492565][T26329] FAULT_INJECTION: forcing a failure. [ 551.492565][T26329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 551.492599][T26329] CPU: 0 UID: 0 PID: 26329 Comm: syz.1.7377 Not tainted syzkaller #0 PREEMPT(full) [ 551.492623][T26329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 551.492635][T26329] Call Trace: [ 551.492644][T26329] [ 551.492654][T26329] dump_stack_lvl+0xe8/0x150 [ 551.492693][T26329] should_fail_ex+0x3eb/0x540 [ 551.492725][T26329] _copy_from_iter+0x1d3/0x1680 [ 551.492749][T26329] ? __alloc_skb+0x27a/0x7a0 [ 551.492773][T26329] ? __alloc_skb+0x27a/0x7a0 [ 551.492795][T26329] ? __alloc_skb+0x27a/0x7a0 [ 551.492815][T26329] ? __pfx__copy_from_iter+0x10/0x10 [ 551.492836][T26329] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 551.492860][T26329] ? __alloc_skb+0x27a/0x7a0 [ 551.492878][T26329] ? __alloc_skb+0x27a/0x7a0 [ 551.492906][T26329] ? netlink_sendmsg+0x64f/0xb20 [ 551.492925][T26329] ? skb_put+0x112/0x210 [ 551.492949][T26329] netlink_sendmsg+0x6bb/0xb20 [ 551.492977][T26329] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.492995][T26329] ? __lock_acquire+0x747/0x2de0 [ 551.493024][T26329] ? aa_sock_msg_perm+0x144/0x210 [ 551.493061][T26329] ? apparmor_socket_sendmsg+0x18b/0x360 [ 551.493092][T26329] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.493111][T26329] sock_sendmsg_nosec+0x14e/0x190 [ 551.493143][T26329] ____sys_sendmsg+0x49f/0x790 [ 551.493177][T26329] ? __pfx_____sys_sendmsg+0x10/0x10 [ 551.493212][T26329] ? import_iovec+0x73/0xa0 [ 551.493241][T26329] ___sys_sendmsg+0x2f7/0x3d0 [ 551.493262][T26329] ? __lock_acquire+0x747/0x2de0 [ 551.493293][T26329] ? __pfx____sys_sendmsg+0x10/0x10 [ 551.493359][T26329] ? __fget_files+0x3a2/0x420 [ 551.493387][T26329] ? __fget_files+0x2a/0x420 [ 551.493432][T26329] __x64_sys_sendmsg+0x1b1/0x290 [ 551.493460][T26329] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 551.493509][T26329] do_syscall_64+0x166/0x520 [ 551.493535][T26329] ? trace_irq_disable+0x3b/0x140 [ 551.493561][T26329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.493582][T26329] ? clear_bhb_loop+0x70/0xc0 [ 551.493607][T26329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.493628][T26329] RIP: 0033:0x7f0b537a94d9 [ 551.493648][T26329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.493666][T26329] RSP: 002b:00007f0b545a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 551.493690][T26329] RAX: ffffffffffffffda RBX: 00007f0b53a25fa0 RCX: 00007f0b537a94d9 [ 551.493706][T26329] RDX: 0000000020000040 RSI: 0000200000000c40 RDI: 0000000000000003 [ 551.493720][T26329] RBP: 00007f0b545a9090 R08: 0000000000000000 R09: 0000000000000000 [ 551.493733][T26329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.493746][T26329] R13: 00007f0b53a26038 R14: 00007f0b53a25fa0 R15: 00007ffda67341b8 [ 551.493782][T26329] [ 551.798724][T26335] netlink: 'syz.2.7379': attribute type 2 has an invalid length. [ 551.799633][T26335] ipvlan0: Caught tx_queue_len zero misconfig [ 551.894818][T26340] netlink: 'syz.4.7382': attribute type 30 has an invalid length. [ 551.901476][T26340] FAULT_INJECTION: forcing a failure. [ 551.901476][T26340] name failslab, interval 1, probability 0, space 0, times 0 [ 551.901503][T26340] CPU: 0 UID: 0 PID: 26340 Comm: syz.4.7382 Not tainted syzkaller #0 PREEMPT(full) [ 551.901524][T26340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 551.901535][T26340] Call Trace: [ 551.901543][T26340] [ 551.901551][T26340] dump_stack_lvl+0xe8/0x150 [ 551.901586][T26340] should_fail_ex+0x3eb/0x540 [ 551.901614][T26340] should_failslab+0xa8/0x100 [ 551.901645][T26340] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 551.901671][T26340] ? kobject_set_name_vargs+0x61/0x110 [ 551.901748][T26340] ? kobject_set_name_vargs+0x61/0x110 [ 551.901775][T26340] kstrdup+0x42/0x100 [ 551.901798][T26340] kobject_set_name_vargs+0x61/0x110 [ 551.901820][T26340] dev_set_name+0xe2/0x140 [ 551.901906][T26340] ? __pfx_dev_set_name+0x10/0x10 [ 551.901932][T26340] ? __init_waitqueue_head+0xa8/0x150 [ 551.901963][T26340] ? device_initialize+0x394/0x470 [ 551.902005][T26340] netdev_register_kobject+0xb7/0x350 [ 551.902061][T26340] register_netdevice+0x17be/0x2280 [ 551.902102][T26340] ? __pfx_register_netdevice+0x10/0x10 [ 551.902147][T26340] vxlan_newlink+0x3c7/0x8b0 [ 551.902183][T26340] ? __pfx_vxlan_newlink+0x10/0x10 [ 551.902208][T26340] ? alloc_netdev_mqs+0xd5b/0x1240 [ 551.902232][T26340] ? __kvmalloc_node_noprof+0x52a/0x820 [ 551.902271][T26340] ? validate_linkmsg+0x809/0xa50 [ 551.902305][T26340] ? rtnl_create_link+0xa04/0xd70 [ 551.902330][T26340] ? __pfx_vxlan_newlink+0x10/0x10 [ 551.902364][T26340] rtnl_newlink_create+0x305/0x7b0 [ 551.902394][T26340] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 551.902420][T26340] ? __pfx___mutex_lock+0x10/0x10 [ 551.902456][T26340] ? ns_capable+0x84/0xe0 [ 551.902486][T26340] rtnl_newlink+0x167a/0x1c30 [ 551.902523][T26340] ? __pfx_rtnl_newlink+0x10/0x10 [ 551.902540][T26340] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 551.902566][T26340] ? netlink_deliver_tap+0x19c/0x1b0 [ 551.902590][T26340] ? netlink_unicast+0x8c1/0xa80 [ 551.902612][T26340] ? netlink_sendmsg+0x7f0/0xb20 [ 551.902628][T26340] ? sock_sendmsg_nosec+0x14e/0x190 [ 551.902651][T26340] ? ____sys_sendmsg+0x49f/0x790 [ 551.902668][T26340] ? ___sys_sendmsg+0x2f7/0x3d0 [ 551.902687][T26340] ? __x64_sys_sendmsg+0x1b1/0x290 [ 551.902705][T26340] ? do_syscall_64+0x166/0x520 [ 551.902728][T26340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.902786][T26340] ? kasan_quarantine_put+0xbb/0x1f0 [ 551.902809][T26340] ? lockdep_hardirqs_on+0x7b/0x110 [ 551.902837][T26340] ? nlmon_xmit+0xb0/0x100 [ 551.902857][T26340] ? kmem_cache_free+0x182/0x650 [ 551.902890][T26340] ? __lock_acquire+0x747/0x2de0 [ 551.902920][T26340] ? __pfx_hook_capable+0x10/0x10 [ 551.902938][T26340] ? __dev_queue_xmit+0x29b/0x3920 [ 551.902965][T26340] ? __pfx_hook_capable+0x10/0x10 [ 551.902983][T26340] ? lockdep_hardirqs_on+0x7b/0x110 [ 551.903036][T26340] ? __pfx_rtnl_newlink+0x10/0x10 [ 551.903055][T26340] rtnetlink_rcv_msg+0x802/0xc00 [ 551.903079][T26340] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 551.903099][T26340] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 551.903122][T26340] ? __copy_skb_header+0xa3/0x4a0 [ 551.903156][T26340] netlink_rcv_skb+0x226/0x4a0 [ 551.903184][T26340] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 551.903206][T26340] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 551.903247][T26340] ? netlink_deliver_tap+0x2e/0x1b0 [ 551.903273][T26340] ? netlink_deliver_tap+0x2e/0x1b0 [ 551.903305][T26340] netlink_unicast+0x8ef/0xa80 [ 551.903349][T26340] netlink_sendmsg+0x7f0/0xb20 [ 551.903388][T26340] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.903404][T26340] ? __lock_acquire+0x747/0x2de0 [ 551.903429][T26340] ? aa_sock_msg_perm+0x144/0x210 [ 551.903462][T26340] ? apparmor_socket_sendmsg+0x98/0x360 [ 551.903490][T26340] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.903506][T26340] sock_sendmsg_nosec+0x14e/0x190 [ 551.903535][T26340] ____sys_sendmsg+0x49f/0x790 [ 551.903565][T26340] ? __pfx_____sys_sendmsg+0x10/0x10 [ 551.903597][T26340] ? import_iovec+0x73/0xa0 [ 551.903624][T26340] ___sys_sendmsg+0x2f7/0x3d0 [ 551.903643][T26340] ? __lock_acquire+0x747/0x2de0 [ 551.903670][T26340] ? __pfx____sys_sendmsg+0x10/0x10 [ 551.903732][T26340] ? __fget_files+0x3a2/0x420 [ 551.903753][T26340] ? __fget_files+0x2a/0x420 [ 551.903786][T26340] __x64_sys_sendmsg+0x1b1/0x290 [ 551.903810][T26340] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 551.903854][T26340] do_syscall_64+0x166/0x520 [ 551.903877][T26340] ? trace_irq_disable+0x3b/0x140 [ 551.903901][T26340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.903919][T26340] ? clear_bhb_loop+0x70/0xc0 [ 551.903942][T26340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.903960][T26340] RIP: 0033:0x7fde9b7a94d9 [ 551.903978][T26340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.903994][T26340] RSP: 002b:00007fde9c6c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 551.904015][T26340] RAX: ffffffffffffffda RBX: 00007fde9ba25fa0 RCX: 00007fde9b7a94d9 [ 551.904028][T26340] RDX: 0000000004008840 RSI: 0000200000000000 RDI: 0000000000000005 [ 551.904040][T26340] RBP: 00007fde9c6c1090 R08: 0000000000000000 R09: 0000000000000000 [ 551.904051][T26340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 551.904063][T26340] R13: 00007fde9ba26038 R14: 00007fde9ba25fa0 R15: 00007ffc85399e68 [ 551.904096][T26340] [ 552.132060][T26345] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7384'. [ 552.981546][T26389] Bluetooth: hci0: unsupported parameter 5135 [ 552.981570][T26389] Bluetooth: hci0: unsupported parameter 8192 [ 552.981583][T26389] Bluetooth: hci0: unsupported parameter 5135 [ 552.981595][T26389] Bluetooth: hci0: unsupported parameter 8192 [ 553.245468][T26406] netlink: 'syz.0.7406': attribute type 1 has an invalid length. [ 553.302238][T26406] 8021q: adding VLAN 0 to HW filter on device bond22 [ 553.348062][T26415] bond22: (slave veth15): Enslaving as an active interface with a down link [ 553.394420][T26406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7406'. [ 553.455181][T26406] netlink: 'syz.0.7406': attribute type 10 has an invalid length. [ 553.455207][T26406] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7406'. [ 553.455365][T26406] dummy0: entered promiscuous mode [ 553.751771][T26436] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7418'. [ 553.796207][T26439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7419'. [ 553.833969][T26442] batman_adv: batadv0: Adding interface: syz_tun [ 553.833990][T26442] batman_adv: batadv0: The MTU of interface syz_tun is too small (1282) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1314 would solve the problem. [ 553.834021][T26442] batman_adv: batadv0: Interface activated: syz_tun [ 554.297837][T26465] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7431'. [ 554.680777][T26477] netlink: 6 bytes leftover after parsing attributes in process `syz.1.7437'. [ 554.681221][T26477] net_ratelimit: 59 callbacks suppressed [ 554.681238][T26477] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 554.772674][ T96] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 554.851751][T26499] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7445'. [ 554.853503][T26502] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 554.898584][ T5992] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 555.008330][ T5992] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 555.080276][T26513] FAULT_INJECTION: forcing a failure. [ 555.080276][T26513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.080309][T26513] CPU: 1 UID: 0 PID: 26513 Comm: syz.3.7450 Not tainted syzkaller #0 PREEMPT(full) [ 555.080337][T26513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 555.080358][T26513] Call Trace: [ 555.080367][T26513] [ 555.080377][T26513] dump_stack_lvl+0xe8/0x150 [ 555.080415][T26513] should_fail_ex+0x3eb/0x540 [ 555.080447][T26513] _copy_from_user+0x2d/0xb0 [ 555.080474][T26513] __sys_bind+0x1c6/0x410 [ 555.080507][T26513] ? __pfx___sys_bind+0x10/0x10 [ 555.080551][T26513] ? __pfx_ksys_write+0x10/0x10 [ 555.080590][T26513] __x64_sys_bind+0x7a/0x90 [ 555.080620][T26513] do_syscall_64+0x166/0x520 [ 555.080647][T26513] ? trace_irq_disable+0x3b/0x140 [ 555.080674][T26513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.080694][T26513] ? clear_bhb_loop+0x70/0xc0 [ 555.080720][T26513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.080740][T26513] RIP: 0033:0x7f73c55a94d9 [ 555.080760][T26513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.080778][T26513] RSP: 002b:00007f73c639e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 555.080802][T26513] RAX: ffffffffffffffda RBX: 00007f73c5825fa0 RCX: 00007f73c55a94d9 [ 555.080818][T26513] RDX: 0000000000000006 RSI: 0000200000000140 RDI: 0000000000000005 [ 555.080832][T26513] RBP: 00007f73c639e090 R08: 0000000000000000 R09: 0000000000000000 [ 555.080843][T26513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.080856][T26513] R13: 00007f73c5826038 R14: 00007f73c5825fa0 R15: 00007ffeb48c66b8 [ 555.080892][T26513] [ 555.139751][ T5992] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 555.248597][ T96] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 555.348904][T26523] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 555.357250][ T96] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 555.423888][T26527] __nla_validate_parse: 2 callbacks suppressed [ 555.423909][T26527] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7457'. [ 555.468474][ T96] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 555.700763][T26543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7461'. [ 555.765353][T26549] netlink: 'syz.3.7463': attribute type 2 has an invalid length. [ 556.584779][T26600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7476'. [ 556.643861][T26602] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7477'. [ 556.751425][T26606] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7478'. [ 556.830204][T26608] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7480'. [ 557.051890][T26619] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7486'. [ 557.240880][T26632] netlink: 'syz.2.7490': attribute type 15 has an invalid length. [ 557.240907][T26632] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7490'. [ 557.408195][T26645] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7493'. [ 557.932252][T26672] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7502'. [ 558.350362][T26697] bond_slave_0: Caught tx_queue_len zero misconfig [ 559.597732][T26773] netlink: 'syz.0.7540': attribute type 2 has an invalid length. [ 559.682865][T26779] netlink: 'syz.4.7542': attribute type 30 has an invalid length. [ 559.688327][T26782] netlink: 'syz.3.7541': attribute type 1 has an invalid length. [ 559.689315][T26778] net_ratelimit: 46 callbacks suppressed [ 559.689329][T26778] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 559.781751][ T5981] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 559.907520][ T5989] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 559.968627][ T5980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.979780][T26791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 560.017759][ T5989] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 560.127537][ T5980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 560.135514][T26803] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 560.224051][T26809] FAULT_INJECTION: forcing a failure. [ 560.224051][T26809] name failslab, interval 1, probability 0, space 0, times 0 [ 560.224083][T26809] CPU: 0 UID: 0 PID: 26809 Comm: syz.0.7553 Not tainted syzkaller #0 PREEMPT(full) [ 560.224105][T26809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 560.224117][T26809] Call Trace: [ 560.224126][T26809] [ 560.224135][T26809] dump_stack_lvl+0xe8/0x150 [ 560.224173][T26809] should_fail_ex+0x3eb/0x540 [ 560.224203][T26809] should_failslab+0xa8/0x100 [ 560.224236][T26809] __kmalloc_cache_noprof+0x9e/0x600 [ 560.224264][T26809] ? nfnetlink_rcv+0x1021/0x28c0 [ 560.224365][T26809] ? nfnetlink_rcv+0x1021/0x28c0 [ 560.224401][T26809] nfnetlink_rcv+0x1021/0x28c0 [ 560.224474][T26809] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 560.224555][T26809] ? skb_clone+0x246/0x3a0 [ 560.224596][T26809] ? netlink_deliver_tap+0x2e/0x1b0 [ 560.224626][T26809] ? netlink_deliver_tap+0x2e/0x1b0 [ 560.224661][T26809] netlink_unicast+0x8ef/0xa80 [ 560.224711][T26809] netlink_sendmsg+0x7f0/0xb20 [ 560.224739][T26809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 560.224755][T26809] ? __lock_acquire+0x747/0x2de0 [ 560.224783][T26809] ? aa_sock_msg_perm+0x144/0x210 [ 560.224820][T26809] ? apparmor_socket_sendmsg+0x98/0x360 [ 560.224850][T26809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 560.224867][T26809] sock_sendmsg_nosec+0x14e/0x190 [ 560.224899][T26809] ____sys_sendmsg+0x49f/0x790 [ 560.224931][T26809] ? __pfx_____sys_sendmsg+0x10/0x10 [ 560.224967][T26809] ? import_iovec+0x73/0xa0 [ 560.224997][T26809] ___sys_sendmsg+0x2f7/0x3d0 [ 560.225018][T26809] ? __lock_acquire+0x747/0x2de0 [ 560.225048][T26809] ? __pfx____sys_sendmsg+0x10/0x10 [ 560.225117][T26809] ? __fget_files+0x3a2/0x420 [ 560.225142][T26809] ? __fget_files+0x2a/0x420 [ 560.225179][T26809] __x64_sys_sendmsg+0x1b1/0x290 [ 560.225206][T26809] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 560.225256][T26809] do_syscall_64+0x166/0x520 [ 560.225291][T26809] ? trace_irq_disable+0x3b/0x140 [ 560.225317][T26809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.225338][T26809] ? clear_bhb_loop+0x70/0xc0 [ 560.225364][T26809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.225384][T26809] RIP: 0033:0x7fcc8d1a94d9 [ 560.225405][T26809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.225423][T26809] RSP: 002b:00007fcc8e05a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 560.225447][T26809] RAX: ffffffffffffffda RBX: 00007fcc8d425fa0 RCX: 00007fcc8d1a94d9 [ 560.225463][T26809] RDX: 0000000000000080 RSI: 0000200000002c00 RDI: 0000000000000003 [ 560.225477][T26809] RBP: 00007fcc8e05a090 R08: 0000000000000000 R09: 0000000000000000 [ 560.225490][T26809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 560.225503][T26809] R13: 00007fcc8d426038 R14: 00007fcc8d425fa0 R15: 00007fff19f4cad8 [ 560.225540][T26809] [ 560.239185][ T5981] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 560.347755][ T5980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 560.457167][ T5989] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 560.600867][T26820] netlink: 'syz.1.7557': attribute type 30 has an invalid length. [ 560.608329][T26820] FAULT_INJECTION: forcing a failure. [ 560.608329][T26820] name failslab, interval 1, probability 0, space 0, times 0 [ 560.608356][T26820] CPU: 1 UID: 0 PID: 26820 Comm: syz.1.7557 Not tainted syzkaller #0 PREEMPT(full) [ 560.608378][T26820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 560.608388][T26820] Call Trace: [ 560.608396][T26820] [ 560.608404][T26820] dump_stack_lvl+0xe8/0x150 [ 560.608439][T26820] should_fail_ex+0x3eb/0x540 [ 560.608468][T26820] should_failslab+0xa8/0x100 [ 560.608496][T26820] ? __kernfs_new_node+0xe6/0x980 [ 560.608516][T26820] kmem_cache_alloc_noprof+0x9c/0x600 [ 560.608538][T26820] ? kstrdup+0x81/0x100 [ 560.608559][T26820] ? __kernfs_new_node+0xe6/0x980 [ 560.608586][T26820] __kernfs_new_node+0xe6/0x980 [ 560.608608][T26820] ? lock_acquire+0x115/0x350 [ 560.608635][T26820] ? __pfx___kernfs_new_node+0x10/0x10 [ 560.608655][T26820] ? kernfs_root+0x1c/0x230 [ 560.608680][T26820] ? kernfs_root+0x1c/0x230 [ 560.608698][T26820] ? kernfs_root+0x1c/0x230 [ 560.608717][T26820] ? kernfs_root+0x1c/0x230 [ 560.608741][T26820] kernfs_new_node+0xeb/0x140 [ 560.608765][T26820] kernfs_create_link+0xe3/0x240 [ 560.608801][T26820] sysfs_do_create_link_sd+0x83/0x110 [ 560.608831][T26820] device_add_class_symlinks+0x1cf/0x240 [ 560.608856][T26820] device_add+0x467/0xb80 [ 560.608878][T26820] netdev_register_kobject+0x197/0x350 [ 560.608912][T26820] register_netdevice+0x17be/0x2280 [ 560.608953][T26820] ? __pfx_register_netdevice+0x10/0x10 [ 560.608995][T26820] vxlan_newlink+0x3c7/0x8b0 [ 560.609031][T26820] ? __pfx_vxlan_newlink+0x10/0x10 [ 560.609057][T26820] ? alloc_netdev_mqs+0xd5b/0x1240 [ 560.609080][T26820] ? __kvmalloc_node_noprof+0x52a/0x820 [ 560.609120][T26820] ? validate_linkmsg+0x809/0xa50 [ 560.609154][T26820] ? rtnl_create_link+0xa04/0xd70 [ 560.609180][T26820] ? __pfx_vxlan_newlink+0x10/0x10 [ 560.609207][T26820] rtnl_newlink_create+0x305/0x7b0 [ 560.609236][T26820] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 560.609263][T26820] ? __pfx___mutex_lock+0x10/0x10 [ 560.609300][T26820] ? ns_capable+0x84/0xe0 [ 560.609329][T26820] rtnl_newlink+0x167a/0x1c30 [ 560.609366][T26820] ? __pfx_rtnl_newlink+0x10/0x10 [ 560.609384][T26820] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 560.609409][T26820] ? netlink_deliver_tap+0x19c/0x1b0 [ 560.609434][T26820] ? netlink_unicast+0x8c1/0xa80 [ 560.609456][T26820] ? netlink_sendmsg+0x7f0/0xb20 [ 560.609471][T26820] ? sock_sendmsg_nosec+0x14e/0x190 [ 560.609495][T26820] ? ____sys_sendmsg+0x49f/0x790 [ 560.609514][T26820] ? ___sys_sendmsg+0x2f7/0x3d0 [ 560.609532][T26820] ? __x64_sys_sendmsg+0x1b1/0x290 [ 560.609550][T26820] ? do_syscall_64+0x166/0x520 [ 560.609573][T26820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.609631][T26820] ? kasan_quarantine_put+0xbb/0x1f0 [ 560.609655][T26820] ? lockdep_hardirqs_on+0x7b/0x110 [ 560.609683][T26820] ? nlmon_xmit+0xb0/0x100 [ 560.609703][T26820] ? kmem_cache_free+0x182/0x650 [ 560.609736][T26820] ? __lock_acquire+0x747/0x2de0 [ 560.609766][T26820] ? __pfx_hook_capable+0x10/0x10 [ 560.609790][T26820] ? __dev_queue_xmit+0x29b/0x3920 [ 560.609816][T26820] ? __pfx_hook_capable+0x10/0x10 [ 560.609834][T26820] ? lockdep_hardirqs_on+0x7b/0x110 [ 560.609886][T26820] ? __pfx_rtnl_newlink+0x10/0x10 [ 560.609904][T26820] rtnetlink_rcv_msg+0x802/0xc00 [ 560.609929][T26820] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 560.609948][T26820] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 560.609971][T26820] ? __copy_skb_header+0xa3/0x4a0 [ 560.610005][T26820] netlink_rcv_skb+0x226/0x4a0 [ 560.610032][T26820] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 560.610055][T26820] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 560.610096][T26820] ? netlink_deliver_tap+0x2e/0x1b0 [ 560.610122][T26820] ? netlink_deliver_tap+0x2e/0x1b0 [ 560.610154][T26820] netlink_unicast+0x8ef/0xa80 [ 560.610198][T26820] netlink_sendmsg+0x7f0/0xb20 [ 560.610222][T26820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 560.610238][T26820] ? __lock_acquire+0x747/0x2de0 [ 560.610263][T26820] ? aa_sock_msg_perm+0x144/0x210 [ 560.610296][T26820] ? apparmor_socket_sendmsg+0x98/0x360 [ 560.610324][T26820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 560.610340][T26820] sock_sendmsg_nosec+0x14e/0x190 [ 560.610368][T26820] ____sys_sendmsg+0x49f/0x790 [ 560.610398][T26820] ? __pfx_____sys_sendmsg+0x10/0x10 [ 560.610430][T26820] ? import_iovec+0x73/0xa0 [ 560.610457][T26820] ___sys_sendmsg+0x2f7/0x3d0 [ 560.610475][T26820] ? __lock_acquire+0x747/0x2de0 [ 560.610503][T26820] ? __pfx____sys_sendmsg+0x10/0x10 [ 560.610564][T26820] ? __fget_files+0x3a2/0x420 [ 560.610586][T26820] ? __fget_files+0x2a/0x420 [ 560.610619][T26820] __x64_sys_sendmsg+0x1b1/0x290 [ 560.610643][T26820] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 560.610688][T26820] do_syscall_64+0x166/0x520 [ 560.610710][T26820] ? trace_irq_disable+0x3b/0x140 [ 560.610735][T26820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.610754][T26820] ? clear_bhb_loop+0x70/0xc0 [ 560.610787][T26820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.610806][T26820] RIP: 0033:0x7f0b537a94d9 [ 560.610825][T26820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.610841][T26820] RSP: 002b:00007f0b545a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 560.610862][T26820] RAX: ffffffffffffffda RBX: 00007f0b53a25fa0 RCX: 00007f0b537a94d9 [ 560.610875][T26820] RDX: 0000000004008840 RSI: 0000200000000000 RDI: 0000000000000005 [ 560.610888][T26820] RBP: 00007f0b545a9090 R08: 0000000000000000 R09: 0000000000000000 [ 560.610899][T26820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 560.610910][T26820] R13: 00007f0b53a26038 R14: 00007f0b53a25fa0 R15: 00007ffda67341b8 [ 560.610942][T26820] [ 560.797336][T26825] __nla_validate_parse: 18 callbacks suppressed [ 560.797355][T26825] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7558'. [ 561.296154][T26843] netlink: 124 bytes leftover after parsing attributes in process `syz.1.7568'. [ 561.329513][T26839] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 561.472881][T26850] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7572'. [ 561.475465][T26852] FAULT_INJECTION: forcing a failure. [ 561.475465][T26852] name failslab, interval 1, probability 0, space 0, times 0 [ 561.475494][T26852] CPU: 1 UID: 0 PID: 26852 Comm: syz.1.7570 Not tainted syzkaller #0 PREEMPT(full) [ 561.475516][T26852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 561.475528][T26852] Call Trace: [ 561.475536][T26852] [ 561.475545][T26852] dump_stack_lvl+0xe8/0x150 [ 561.475585][T26852] should_fail_ex+0x3eb/0x540 [ 561.475616][T26852] should_failslab+0xa8/0x100 [ 561.475650][T26852] __kmalloc_cache_noprof+0x9e/0x600 [ 561.475677][T26852] ? nfnetlink_rcv+0x1021/0x28c0 [ 561.475704][T26852] ? nfnetlink_rcv+0x1021/0x28c0 [ 561.475750][T26852] nfnetlink_rcv+0x1021/0x28c0 [ 561.475819][T26852] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 561.475905][T26852] ? skb_clone+0x246/0x3a0 [ 561.475947][T26852] ? netlink_deliver_tap+0x2e/0x1b0 [ 561.475978][T26852] ? netlink_deliver_tap+0x2e/0x1b0 [ 561.476014][T26852] netlink_unicast+0x8ef/0xa80 [ 561.476064][T26852] netlink_sendmsg+0x7f0/0xb20 [ 561.476092][T26852] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.476110][T26852] ? __lock_acquire+0x747/0x2de0 [ 561.476139][T26852] ? aa_sock_msg_perm+0x144/0x210 [ 561.476177][T26852] ? apparmor_socket_sendmsg+0x98/0x360 [ 561.476208][T26852] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.476226][T26852] sock_sendmsg_nosec+0x14e/0x190 [ 561.476257][T26852] ____sys_sendmsg+0x49f/0x790 [ 561.476291][T26852] ? __pfx_____sys_sendmsg+0x10/0x10 [ 561.476325][T26852] ? import_iovec+0x73/0xa0 [ 561.476356][T26852] ___sys_sendmsg+0x2f7/0x3d0 [ 561.476378][T26852] ? __lock_acquire+0x747/0x2de0 [ 561.476407][T26852] ? __pfx____sys_sendmsg+0x10/0x10 [ 561.476476][T26852] ? __fget_files+0x3a2/0x420 [ 561.476502][T26852] ? __fget_files+0x2a/0x420 [ 561.476538][T26852] __x64_sys_sendmsg+0x1b1/0x290 [ 561.476566][T26852] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 561.476616][T26852] do_syscall_64+0x166/0x520 [ 561.476643][T26852] ? trace_irq_disable+0x3b/0x140 [ 561.476669][T26852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.476689][T26852] ? clear_bhb_loop+0x70/0xc0 [ 561.476715][T26852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.476745][T26852] RIP: 0033:0x7f0b537a94d9 [ 561.476767][T26852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.476786][T26852] RSP: 002b:00007f0b545a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 561.476809][T26852] RAX: ffffffffffffffda RBX: 00007f0b53a25fa0 RCX: 00007f0b537a94d9 [ 561.476825][T26852] RDX: 0000000000000080 RSI: 0000200000002c00 RDI: 0000000000000003 [ 561.476838][T26852] RBP: 00007f0b545a9090 R08: 0000000000000000 R09: 0000000000000000 [ 561.476852][T26852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.476864][T26852] R13: 00007f0b53a26038 R14: 00007f0b53a25fa0 R15: 00007ffda67341b8 [ 561.476901][T26852] [ 562.185322][T26880] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7581'. [ 562.622312][T26900] Bluetooth: hci0: unsupported parameter 5135 [ 562.622338][T26900] Bluetooth: hci0: unsupported parameter 8192 [ 562.622351][T26900] Bluetooth: hci0: unsupported parameter 5135 [ 562.622365][T26900] Bluetooth: hci0: unsupported parameter 8192 [ 562.627005][T26900] netlink: 596 bytes leftover after parsing attributes in process `syz.0.7587'. [ 562.643891][T26903] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7589'. [ 562.936677][T26912] bond23: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 562.956205][T26912] bond23 (unregistering): Released all slaves [ 562.981689][T26910] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7592'. [ 562.984920][T26910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7592'. [ 562.984944][T26910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7592'. [ 563.060217][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.102241][T26922] netlink: 'syz.3.7597': attribute type 30 has an invalid length. [ 563.104973][T26922] FAULT_INJECTION: forcing a failure. [ 563.104973][T26922] name failslab, interval 1, probability 0, space 0, times 0 [ 563.105002][T26922] CPU: 1 UID: 0 PID: 26922 Comm: syz.3.7597 Not tainted syzkaller #0 PREEMPT(full) [ 563.105025][T26922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 563.105037][T26922] Call Trace: [ 563.105046][T26922] [ 563.105056][T26922] dump_stack_lvl+0xe8/0x150 [ 563.105094][T26922] should_fail_ex+0x3eb/0x540 [ 563.105127][T26922] should_failslab+0xa8/0x100 [ 563.105157][T26922] ? __kernfs_new_node+0xe6/0x980 [ 563.105180][T26922] kmem_cache_alloc_noprof+0x9c/0x600 [ 563.105208][T26922] ? __kernfs_new_node+0xe6/0x980 [ 563.105239][T26922] __kernfs_new_node+0xe6/0x980 [ 563.105281][T26922] ? __pfx___kernfs_new_node+0x10/0x10 [ 563.105301][T26922] ? lock_acquire+0x115/0x350 [ 563.105327][T26922] ? kernfs_root+0x1c/0x230 [ 563.105356][T26922] ? kernfs_root+0x1c/0x230 [ 563.105376][T26922] ? kernfs_root+0x1c/0x230 [ 563.105393][T26922] ? kernfs_root+0x1c/0x230 [ 563.105420][T26922] kernfs_new_node+0xeb/0x140 [ 563.105448][T26922] __kernfs_create_file+0x4b/0x2e0 [ 563.105479][T26922] sysfs_add_file_mode_ns+0x237/0x300 [ 563.105522][T26922] internal_create_group+0x679/0x1180 [ 563.105561][T26922] ? kernfs_add_one+0xfc/0x510 [ 563.105582][T26922] ? __pfx_internal_create_group+0x10/0x10 [ 563.105610][T26922] ? kernfs_activate_one+0x22d/0x340 [ 563.105638][T26922] sysfs_create_groups+0x59/0x120 [ 563.105663][T26922] device_add_attrs+0xde/0x600 [ 563.105690][T26922] ? __pfx_device_add_attrs+0x10/0x10 [ 563.105716][T26922] ? device_add_class_symlinks+0x21f/0x240 [ 563.105743][T26922] device_add+0x488/0xb80 [ 563.105768][T26922] netdev_register_kobject+0x197/0x350 [ 563.105805][T26922] register_netdevice+0x17be/0x2280 [ 563.105852][T26922] ? __pfx_register_netdevice+0x10/0x10 [ 563.105899][T26922] vxlan_newlink+0x3c7/0x8b0 [ 563.105940][T26922] ? __pfx_vxlan_newlink+0x10/0x10 [ 563.105968][T26922] ? alloc_netdev_mqs+0xd5b/0x1240 [ 563.105994][T26922] ? __kvmalloc_node_noprof+0x52a/0x820 [ 563.106038][T26922] ? validate_linkmsg+0x809/0xa50 [ 563.106076][T26922] ? rtnl_create_link+0xa04/0xd70 [ 563.106105][T26922] ? __pfx_vxlan_newlink+0x10/0x10 [ 563.106135][T26922] rtnl_newlink_create+0x305/0x7b0 [ 563.106169][T26922] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 563.106200][T26922] ? __pfx___mutex_lock+0x10/0x10 [ 563.106266][T26922] ? ns_capable+0x84/0xe0 [ 563.106301][T26922] rtnl_newlink+0x167a/0x1c30 [ 563.106344][T26922] ? __pfx_rtnl_newlink+0x10/0x10 [ 563.106364][T26922] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 563.106392][T26922] ? netlink_deliver_tap+0x19c/0x1b0 [ 563.106420][T26922] ? netlink_unicast+0x8c1/0xa80 [ 563.106446][T26922] ? netlink_sendmsg+0x7f0/0xb20 [ 563.106463][T26922] ? sock_sendmsg_nosec+0x14e/0x190 [ 563.106489][T26922] ? ____sys_sendmsg+0x49f/0x790 [ 563.106510][T26922] ? ___sys_sendmsg+0x2f7/0x3d0 [ 563.106531][T26922] ? __x64_sys_sendmsg+0x1b1/0x290 [ 563.106552][T26922] ? do_syscall_64+0x166/0x520 [ 563.106577][T26922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.106651][T26922] ? kasan_quarantine_put+0xbb/0x1f0 [ 563.106678][T26922] ? lockdep_hardirqs_on+0x7b/0x110 [ 563.106710][T26922] ? nlmon_xmit+0xb0/0x100 [ 563.106733][T26922] ? kmem_cache_free+0x182/0x650 [ 563.106769][T26922] ? __lock_acquire+0x747/0x2de0 [ 563.106803][T26922] ? __pfx_hook_capable+0x10/0x10 [ 563.106823][T26922] ? __dev_queue_xmit+0x29b/0x3920 [ 563.106853][T26922] ? __pfx_hook_capable+0x10/0x10 [ 563.106875][T26922] ? lockdep_hardirqs_on+0x7b/0x110 [ 563.106934][T26922] ? __pfx_rtnl_newlink+0x10/0x10 [ 563.106955][T26922] rtnetlink_rcv_msg+0x802/0xc00 [ 563.106983][T26922] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 563.107005][T26922] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 563.107031][T26922] ? __copy_skb_header+0xa3/0x4a0 [ 563.107070][T26922] netlink_rcv_skb+0x226/0x4a0 [ 563.107102][T26922] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 563.107127][T26922] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 563.107174][T26922] ? netlink_deliver_tap+0x2e/0x1b0 [ 563.107204][T26922] ? netlink_deliver_tap+0x2e/0x1b0 [ 563.107241][T26922] netlink_unicast+0x8ef/0xa80 [ 563.107299][T26922] netlink_sendmsg+0x7f0/0xb20 [ 563.107327][T26922] ? __pfx_netlink_sendmsg+0x10/0x10 [ 563.107346][T26922] ? __lock_acquire+0x747/0x2de0 [ 563.107380][T26922] ? aa_sock_msg_perm+0x144/0x210 [ 563.107417][T26922] ? apparmor_socket_sendmsg+0x98/0x360 [ 563.107449][T26922] ? __pfx_netlink_sendmsg+0x10/0x10 [ 563.107467][T26922] sock_sendmsg_nosec+0x14e/0x190 [ 563.107499][T26922] ____sys_sendmsg+0x49f/0x790 [ 563.107535][T26922] ? __pfx_____sys_sendmsg+0x10/0x10 [ 563.107570][T26922] ? import_iovec+0x73/0xa0 [ 563.107600][T26922] ___sys_sendmsg+0x2f7/0x3d0 [ 563.107622][T26922] ? __lock_acquire+0x747/0x2de0 [ 563.107653][T26922] ? __pfx____sys_sendmsg+0x10/0x10 [ 563.107724][T26922] ? __fget_files+0x3a2/0x420 [ 563.107748][T26922] ? __fget_files+0x2a/0x420 [ 563.107785][T26922] __x64_sys_sendmsg+0x1b1/0x290 [ 563.107814][T26922] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 563.107865][T26922] do_syscall_64+0x166/0x520 [ 563.107891][T26922] ? trace_irq_disable+0x3b/0x140 [ 563.107917][T26922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.107938][T26922] ? clear_bhb_loop+0x70/0xc0 [ 563.107965][T26922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.107985][T26922] RIP: 0033:0x7f73c55a94d9 [ 563.108007][T26922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.108025][T26922] RSP: 002b:00007f73c639e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 563.108048][T26922] RAX: ffffffffffffffda RBX: 00007f73c5825fa0 RCX: 00007f73c55a94d9 [ 563.108064][T26922] RDX: 0000000004008840 RSI: 0000200000000000 RDI: 0000000000000005 [ 563.108077][T26922] RBP: 00007f73c639e090 R08: 0000000000000000 R09: 0000000000000000 [ 563.108090][T26922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 563.108102][T26922] R13: 00007f73c5826038 R14: 00007f73c5825fa0 R15: 00007ffeb48c66b8 [ 563.108140][T26922] [ 563.311948][T26931] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7601'. [ 563.352494][T26931] IPVS: Unknown mcast interface: rose0 [ 563.993867][T26960] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 564.739982][ T96] net_ratelimit: 47 callbacks suppressed [ 564.740006][ T96] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 564.851005][ T5989] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 564.913626][T27008] netlink: 'syz.0.7630': attribute type 30 has an invalid length. [ 564.997514][ T96] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 565.108190][ T5980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 565.206989][T27026] netlink: 'syz.4.7634': attribute type 72 has an invalid length. [ 565.218653][ T5989] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 565.327779][ T5989] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 565.437286][ T5989] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 565.478621][ T5980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.555156][T27046] rxe_eth0 speed is unknown, defaulting to 1000 [ 565.568480][ T96] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 565.679120][ T96] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 566.009364][T27068] __nla_validate_parse: 15 callbacks suppressed [ 566.009387][T27068] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7652'. [ 566.110800][T27070] netlink: 'syz.0.7653': attribute type 30 has an invalid length. [ 566.115310][T27070] FAULT_INJECTION: forcing a failure. [ 566.115310][T27070] name failslab, interval 1, probability 0, space 0, times 0 [ 566.115341][T27070] CPU: 1 UID: 0 PID: 27070 Comm: syz.0.7653 Not tainted syzkaller #0 PREEMPT(full) [ 566.115364][T27070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 566.115376][T27070] Call Trace: [ 566.115385][T27070] [ 566.115394][T27070] dump_stack_lvl+0xe8/0x150 [ 566.115433][T27070] should_fail_ex+0x3eb/0x540 [ 566.115466][T27070] should_failslab+0xa8/0x100 [ 566.115496][T27070] ? __kernfs_new_node+0xe6/0x980 [ 566.115519][T27070] kmem_cache_alloc_noprof+0x9c/0x600 [ 566.115548][T27070] ? __kernfs_new_node+0xe6/0x980 [ 566.115583][T27070] __kernfs_new_node+0xe6/0x980 [ 566.115616][T27070] ? __pfx___kernfs_new_node+0x10/0x10 [ 566.115636][T27070] ? lock_acquire+0x115/0x350 [ 566.115663][T27070] ? kernfs_root+0x1c/0x230 [ 566.115692][T27070] ? kernfs_root+0x1c/0x230 [ 566.115711][T27070] ? kernfs_root+0x1c/0x230 [ 566.115728][T27070] ? kernfs_root+0x1c/0x230 [ 566.115755][T27070] kernfs_new_node+0xeb/0x140 [ 566.115782][T27070] __kernfs_create_file+0x4b/0x2e0 [ 566.115812][T27070] sysfs_add_file_mode_ns+0x237/0x300 [ 566.115851][T27070] internal_create_group+0x679/0x1180 [ 566.115890][T27070] ? kernfs_add_one+0xfc/0x510 [ 566.115911][T27070] ? __pfx_internal_create_group+0x10/0x10 [ 566.115939][T27070] ? kernfs_activate_one+0x22d/0x340 [ 566.115966][T27070] sysfs_create_groups+0x59/0x120 [ 566.115991][T27070] device_add_attrs+0xde/0x600 [ 566.116016][T27070] ? __pfx_device_add_attrs+0x10/0x10 [ 566.116043][T27070] ? device_add_class_symlinks+0x21f/0x240 [ 566.116069][T27070] device_add+0x488/0xb80 [ 566.116094][T27070] netdev_register_kobject+0x197/0x350 [ 566.116132][T27070] register_netdevice+0x17be/0x2280 [ 566.116179][T27070] ? __pfx_register_netdevice+0x10/0x10 [ 566.116225][T27070] vxlan_newlink+0x3c7/0x8b0 [ 566.116273][T27070] ? __pfx_vxlan_newlink+0x10/0x10 [ 566.116300][T27070] ? alloc_netdev_mqs+0xd5b/0x1240 [ 566.116326][T27070] ? __kvmalloc_node_noprof+0x52a/0x820 [ 566.116371][T27070] ? validate_linkmsg+0x809/0xa50 [ 566.116409][T27070] ? rtnl_create_link+0xa04/0xd70 [ 566.116438][T27070] ? __pfx_vxlan_newlink+0x10/0x10 [ 566.116468][T27070] rtnl_newlink_create+0x305/0x7b0 [ 566.116502][T27070] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 566.116532][T27070] ? __pfx___mutex_lock+0x10/0x10 [ 566.116573][T27070] ? ns_capable+0x84/0xe0 [ 566.116606][T27070] rtnl_newlink+0x167a/0x1c30 [ 566.116649][T27070] ? __pfx_rtnl_newlink+0x10/0x10 [ 566.116668][T27070] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 566.116697][T27070] ? netlink_deliver_tap+0x19c/0x1b0 [ 566.116723][T27070] ? netlink_unicast+0x8c1/0xa80 [ 566.116747][T27070] ? netlink_sendmsg+0x7f0/0xb20 [ 566.116765][T27070] ? sock_sendmsg_nosec+0x14e/0x190 [ 566.116790][T27070] ? ____sys_sendmsg+0x49f/0x790 [ 566.116810][T27070] ? ___sys_sendmsg+0x2f7/0x3d0 [ 566.116829][T27070] ? __x64_sys_sendmsg+0x1b1/0x290 [ 566.116850][T27070] ? do_syscall_64+0x166/0x520 [ 566.116874][T27070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.116940][T27070] ? kasan_quarantine_put+0xbb/0x1f0 [ 566.116967][T27070] ? lockdep_hardirqs_on+0x7b/0x110 [ 566.116998][T27070] ? nlmon_xmit+0xb0/0x100 [ 566.117021][T27070] ? kmem_cache_free+0x182/0x650 [ 566.117059][T27070] ? __lock_acquire+0x747/0x2de0 [ 566.117093][T27070] ? __pfx_hook_capable+0x10/0x10 [ 566.117113][T27070] ? __dev_queue_xmit+0x29b/0x3920 [ 566.117143][T27070] ? __pfx_hook_capable+0x10/0x10 [ 566.117164][T27070] ? lockdep_hardirqs_on+0x7b/0x110 [ 566.117223][T27070] ? __pfx_rtnl_newlink+0x10/0x10 [ 566.117244][T27070] rtnetlink_rcv_msg+0x802/0xc00 [ 566.117279][T27070] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 566.117301][T27070] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 566.117327][T27070] ? __copy_skb_header+0xa3/0x4a0 [ 566.117365][T27070] netlink_rcv_skb+0x226/0x4a0 [ 566.117395][T27070] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 566.117421][T27070] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 566.117467][T27070] ? netlink_deliver_tap+0x2e/0x1b0 [ 566.117496][T27070] ? netlink_deliver_tap+0x2e/0x1b0 [ 566.117532][T27070] netlink_unicast+0x8ef/0xa80 [ 566.117581][T27070] netlink_sendmsg+0x7f0/0xb20 [ 566.117609][T27070] ? __pfx_netlink_sendmsg+0x10/0x10 [ 566.117627][T27070] ? __lock_acquire+0x747/0x2de0 [ 566.117654][T27070] ? aa_sock_msg_perm+0x144/0x210 [ 566.117691][T27070] ? apparmor_socket_sendmsg+0x98/0x360 [ 566.117722][T27070] ? __pfx_netlink_sendmsg+0x10/0x10 [ 566.117741][T27070] sock_sendmsg_nosec+0x14e/0x190 [ 566.117772][T27070] ____sys_sendmsg+0x49f/0x790 [ 566.117808][T27070] ? __pfx_____sys_sendmsg+0x10/0x10 [ 566.117844][T27070] ? import_iovec+0x73/0xa0 [ 566.117875][T27070] ___sys_sendmsg+0x2f7/0x3d0 [ 566.117896][T27070] ? __lock_acquire+0x747/0x2de0 [ 566.117927][T27070] ? __pfx____sys_sendmsg+0x10/0x10 [ 566.117997][T27070] ? __fget_files+0x3a2/0x420 [ 566.118022][T27070] ? __fget_files+0x2a/0x420 [ 566.118059][T27070] __x64_sys_sendmsg+0x1b1/0x290 [ 566.118086][T27070] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 566.118137][T27070] do_syscall_64+0x166/0x520 [ 566.118163][T27070] ? trace_irq_disable+0x3b/0x140 [ 566.118189][T27070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.118210][T27070] ? clear_bhb_loop+0x70/0xc0 [ 566.118237][T27070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.118264][T27070] RIP: 0033:0x7fcc8d1a94d9 [ 566.118285][T27070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.118303][T27070] RSP: 002b:00007fcc8e05a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 566.118327][T27070] RAX: ffffffffffffffda RBX: 00007fcc8d425fa0 RCX: 00007fcc8d1a94d9 [ 566.118342][T27070] RDX: 0000000004008840 RSI: 0000200000000000 RDI: 0000000000000005 [ 566.118356][T27070] RBP: 00007fcc8e05a090 R08: 0000000000000000 R09: 0000000000000000 [ 566.118370][T27070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 566.118383][T27070] R13: 00007fcc8d426038 R14: 00007fcc8d425fa0 R15: 00007fff19f4cad8 [ 566.118420][T27070] [ 566.193308][T27074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7655'. [ 566.201976][T27074] gre0: Caught tx_queue_len zero misconfig [ 566.603112][T27078] ovs-dp0: entered promiscuous mode [ 566.817469][T27046] lo speed is unknown, defaulting to 1000 [ 566.819422][T27046] lo speed is unknown, defaulting to 1000 [ 567.169090][T27104] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7666'. [ 567.520573][T27112] tipc: Enabling of bearer rejected, already enabled [ 567.678210][T27126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7673'. [ 567.678237][T27126] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7673'. [ 568.460607][T27156] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7681'. [ 568.557177][T27162] batadv_slave_1: entered allmulticast mode [ 568.558994][T27161] batadv_slave_1: left allmulticast mode [ 568.636222][T27159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7683'. [ 568.726860][T27168] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7688'. [ 568.801658][T27173] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7689'. [ 568.806220][T27170] xt_REDIRECT: bad rangesize 26624. [ 568.828027][T27173] xfrm0: Caught tx_queue_len zero misconfig [ 568.830447][T27173] netlink: 9 bytes leftover after parsing attributes in process `syz.1.7689'. [ 568.831748][T27173] 0ªî{X¹¦: left allmulticast mode [ 569.004143][T27180] netlink: 'syz.2.7691': attribute type 6 has an invalid length. [ 569.034120][T27181] netlink: 'syz.2.7691': attribute type 6 has an invalid length. [ 569.425287][T27201] nbd: nbd2 already in use [ 569.558583][T27202] netlink: 'syz.1.7698': attribute type 1 has an invalid length. [ 569.668366][T27202] bond0 (unregistering): Released all slaves [ 569.808535][ T96] net_ratelimit: 35 callbacks suppressed [ 569.808560][ T96] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 569.957951][ T5981] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 570.067977][ T5981] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 570.177877][ T5981] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 570.298826][ T5989] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 570.377608][T27256] batadv0: entered promiscuous mode [ 570.377826][T27256] macsec1: entered promiscuous mode [ 570.382710][T27256] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 570.385864][T27256] batadv0: left promiscuous mode [ 570.438814][ T5981] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 570.550535][ T5989] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 570.660095][ T5991] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 570.769250][ T96] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 570.878167][ T5989] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 571.016838][T27294] ip6t_hbh: too many supported opts specified [ 571.026423][T27297] __nla_validate_parse: 9 callbacks suppressed [ 571.026443][T27297] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7735'. [ 571.043874][T27297] Bluetooth: hci0: unsupported parameter 5161 [ 571.043898][T27297] Bluetooth: hci0: unsupported parameter 8192 [ 571.043910][T27297] Bluetooth: hci0: unsupported parameter 5161 [ 571.043922][T27297] Bluetooth: hci0: unsupported parameter 8192 [ 571.258799][T27305] batadv_slave_1: entered allmulticast mode [ 571.261431][T27304] batadv_slave_1: left allmulticast mode [ 571.416191][T27310] netlink: 'syz.4.7741': attribute type 2 has an invalid length. [ 571.725252][T27328] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7748'. [ 571.727614][T27328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7748'. [ 571.729335][T27328] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7748'. [ 571.912049][T27337] netlink: 'syz.2.7750': attribute type 30 has an invalid length. [ 571.926734][T27337] FAULT_INJECTION: forcing a failure. [ 571.926734][T27337] name failslab, interval 1, probability 0, space 0, times 0 [ 571.926769][T27337] CPU: 1 UID: 0 PID: 27337 Comm: syz.2.7750 Not tainted syzkaller #0 PREEMPT(full) [ 571.926793][T27337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 571.926805][T27337] Call Trace: [ 571.926813][T27337] [ 571.926822][T27337] dump_stack_lvl+0xe8/0x150 [ 571.926860][T27337] should_fail_ex+0x3eb/0x540 [ 571.926893][T27337] should_failslab+0xa8/0x100 [ 571.926924][T27337] ? __kernfs_new_node+0xe6/0x980 [ 571.926948][T27337] kmem_cache_alloc_noprof+0x9c/0x600 [ 571.926974][T27337] ? __kernfs_new_node+0xe6/0x980 [ 571.927003][T27337] __kernfs_new_node+0xe6/0x980 [ 571.927038][T27337] ? __pfx___kernfs_new_node+0x10/0x10 [ 571.927059][T27337] ? lock_acquire+0x115/0x350 [ 571.927084][T27337] ? kernfs_root+0x1c/0x230 [ 571.927111][T27337] ? kernfs_root+0x1c/0x230 [ 571.927131][T27337] ? kernfs_root+0x1c/0x230 [ 571.927148][T27337] ? kernfs_root+0x1c/0x230 [ 571.927174][T27337] kernfs_new_node+0xeb/0x140 [ 571.927210][T27337] __kernfs_create_file+0x4b/0x2e0 [ 571.927240][T27337] sysfs_add_file_mode_ns+0x237/0x300 [ 571.927278][T27337] internal_create_group+0x679/0x1180 [ 571.927318][T27337] ? kernfs_add_one+0xfc/0x510 [ 571.927339][T27337] ? __pfx_internal_create_group+0x10/0x10 [ 571.927373][T27337] ? kernfs_activate_one+0x22d/0x340 [ 571.927401][T27337] sysfs_create_groups+0x59/0x120 [ 571.927425][T27337] device_add_attrs+0xde/0x600 [ 571.927451][T27337] ? __pfx_device_add_attrs+0x10/0x10 [ 571.927479][T27337] ? device_add_class_symlinks+0x21f/0x240 [ 571.927504][T27337] device_add+0x488/0xb80 [ 571.927530][T27337] netdev_register_kobject+0x197/0x350 [ 571.927568][T27337] register_netdevice+0x17be/0x2280 [ 571.927614][T27337] ? __pfx_register_netdevice+0x10/0x10 [ 571.927661][T27337] vxlan_newlink+0x3c7/0x8b0 [ 571.927700][T27337] ? __pfx_vxlan_newlink+0x10/0x10 [ 571.927730][T27337] ? alloc_netdev_mqs+0xd5b/0x1240 [ 571.927756][T27337] ? __kvmalloc_node_noprof+0x52a/0x820 [ 571.927800][T27337] ? validate_linkmsg+0x809/0xa50 [ 571.927838][T27337] ? rtnl_create_link+0xa04/0xd70 [ 571.927867][T27337] ? __pfx_vxlan_newlink+0x10/0x10 [ 571.927896][T27337] rtnl_newlink_create+0x305/0x7b0 [ 571.927931][T27337] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 571.927961][T27337] ? __pfx___mutex_lock+0x10/0x10 [ 571.928002][T27337] ? ns_capable+0x84/0xe0 [ 571.928035][T27337] rtnl_newlink+0x167a/0x1c30 [ 571.928078][T27337] ? __pfx_rtnl_newlink+0x10/0x10 [ 571.928098][T27337] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 571.928126][T27337] ? netlink_deliver_tap+0x19c/0x1b0 [ 571.928153][T27337] ? netlink_unicast+0x8c1/0xa80 [ 571.928176][T27337] ? netlink_sendmsg+0x7f0/0xb20 [ 571.928203][T27337] ? sock_sendmsg_nosec+0x14e/0x190 [ 571.928229][T27337] ? ____sys_sendmsg+0x49f/0x790 [ 571.928249][T27337] ? ___sys_sendmsg+0x2f7/0x3d0 [ 571.928269][T27337] ? __x64_sys_sendmsg+0x1b1/0x290 [ 571.928288][T27337] ? do_syscall_64+0x166/0x520 [ 571.928314][T27337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.928380][T27337] ? kasan_quarantine_put+0xbb/0x1f0 [ 571.928408][T27337] ? lockdep_hardirqs_on+0x7b/0x110 [ 571.928439][T27337] ? nlmon_xmit+0xb0/0x100 [ 571.928464][T27337] ? kmem_cache_free+0x182/0x650 [ 571.928501][T27337] ? __lock_acquire+0x747/0x2de0 [ 571.928535][T27337] ? __pfx_hook_capable+0x10/0x10 [ 571.928554][T27337] ? __dev_queue_xmit+0x29b/0x3920 [ 571.928583][T27337] ? __pfx_hook_capable+0x10/0x10 [ 571.928602][T27337] ? lockdep_hardirqs_on+0x7b/0x110 [ 571.928658][T27337] ? __pfx_rtnl_newlink+0x10/0x10 [ 571.928680][T27337] rtnetlink_rcv_msg+0x802/0xc00 [ 571.928706][T27337] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 571.928729][T27337] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 571.928755][T27337] ? __copy_skb_header+0xa3/0x4a0 [ 571.928794][T27337] netlink_rcv_skb+0x226/0x4a0 [ 571.928825][T27337] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 571.928851][T27337] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 571.928897][T27337] ? netlink_deliver_tap+0x2e/0x1b0 [ 571.928926][T27337] ? netlink_deliver_tap+0x2e/0x1b0 [ 571.928972][T27337] netlink_unicast+0x8ef/0xa80 [ 571.929021][T27337] netlink_sendmsg+0x7f0/0xb20 [ 571.929050][T27337] ? __pfx_netlink_sendmsg+0x10/0x10 [ 571.929068][T27337] ? __lock_acquire+0x747/0x2de0 [ 571.929096][T27337] ? aa_sock_msg_perm+0x144/0x210 [ 571.929134][T27337] ? apparmor_socket_sendmsg+0x98/0x360 [ 571.929164][T27337] ? __pfx_netlink_sendmsg+0x10/0x10 [ 571.929191][T27337] sock_sendmsg_nosec+0x14e/0x190 [ 571.929224][T27337] ____sys_sendmsg+0x49f/0x790 [ 571.929257][T27337] ? __pfx_____sys_sendmsg+0x10/0x10 [ 571.929293][T27337] ? import_iovec+0x73/0xa0 [ 571.929321][T27337] ___sys_sendmsg+0x2f7/0x3d0 [ 571.929342][T27337] ? __lock_acquire+0x747/0x2de0 [ 571.929370][T27337] ? __pfx____sys_sendmsg+0x10/0x10 [ 571.929438][T27337] ? __fget_files+0x3a2/0x420 [ 571.929462][T27337] ? __fget_files+0x2a/0x420 [ 571.929498][T27337] __x64_sys_sendmsg+0x1b1/0x290 [ 571.929526][T27337] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 571.929576][T27337] do_syscall_64+0x166/0x520 [ 571.929602][T27337] ? trace_irq_disable+0x3b/0x140 [ 571.929628][T27337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.929649][T27337] ? clear_bhb_loop+0x70/0xc0 [ 571.929675][T27337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.929694][T27337] RIP: 0033:0x7fdc505a94d9 [ 571.929715][T27337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.929733][T27337] RSP: 002b:00007fdc51418028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 571.929756][T27337] RAX: ffffffffffffffda RBX: 00007fdc50825fa0 RCX: 00007fdc505a94d9 [ 571.929772][T27337] RDX: 0000000004008840 RSI: 0000200000000000 RDI: 0000000000000005 [ 571.929786][T27337] RBP: 00007fdc51418090 R08: 0000000000000000 R09: 0000000000000000 [ 571.929800][T27337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 571.929812][T27337] R13: 00007fdc50826038 R14: 00007fdc50825fa0 R15: 00007ffd3c824568 [ 571.929850][T27337] [ 573.161924][T27372] netlink: 'syz.3.7763': attribute type 30 has an invalid length. [ 573.165833][T27372] FAULT_INJECTION: forcing a failure. [ 573.165833][T27372] name failslab, interval 1, probability 0, space 0, times 0 [ 573.165864][T27372] CPU: 0 UID: 0 PID: 27372 Comm: syz.3.7763 Not tainted syzkaller #0 PREEMPT(full) [ 573.165891][T27372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 573.165904][T27372] Call Trace: [ 573.165913][T27372] [ 573.165923][T27372] dump_stack_lvl+0xe8/0x150 [ 573.165963][T27372] should_fail_ex+0x3eb/0x540 [ 573.165997][T27372] should_failslab+0xa8/0x100 [ 573.166027][T27372] ? __kernfs_new_node+0xe6/0x980 [ 573.166050][T27372] kmem_cache_alloc_noprof+0x9c/0x600 [ 573.166079][T27372] ? __kernfs_new_node+0xe6/0x980 [ 573.166109][T27372] __kernfs_new_node+0xe6/0x980 [ 573.166164][T27372] ? __pfx___kernfs_new_node+0x10/0x10 [ 573.166184][T27372] ? lock_acquire+0x115/0x350 [ 573.166209][T27372] ? kernfs_root+0x1c/0x230 [ 573.166258][T27372] ? kernfs_root+0x1c/0x230 [ 573.166278][T27372] ? kernfs_root+0x1c/0x230 [ 573.166295][T27372] ? kernfs_root+0x1c/0x230 [ 573.166321][T27372] kernfs_new_node+0xeb/0x140 [ 573.166348][T27372] __kernfs_create_file+0x4b/0x2e0 [ 573.166378][T27372] sysfs_add_file_mode_ns+0x237/0x300 [ 573.166414][T27372] internal_create_group+0x679/0x1180 [ 573.166452][T27372] ? kernfs_add_one+0xfc/0x510 [ 573.166473][T27372] ? __pfx_internal_create_group+0x10/0x10 [ 573.166501][T27372] ? kernfs_activate_one+0x22d/0x340 [ 573.166528][T27372] sysfs_create_groups+0x59/0x120 [ 573.166552][T27372] device_add_attrs+0xde/0x600 [ 573.166578][T27372] ? __pfx_device_add_attrs+0x10/0x10 [ 573.166605][T27372] ? device_add_class_symlinks+0x21f/0x240 [ 573.166631][T27372] device_add+0x488/0xb80 [ 573.166656][T27372] netdev_register_kobject+0x197/0x350 [ 573.166693][T27372] register_netdevice+0x17be/0x2280 [ 573.166739][T27372] ? __pfx_register_netdevice+0x10/0x10 [ 573.166786][T27372] vxlan_newlink+0x3c7/0x8b0 [ 573.166827][T27372] ? __pfx_vxlan_newlink+0x10/0x10 [ 573.166856][T27372] ? alloc_netdev_mqs+0xd5b/0x1240 [ 573.166882][T27372] ? __kvmalloc_node_noprof+0x52a/0x820 [ 573.166926][T27372] ? validate_linkmsg+0x809/0xa50 [ 573.166964][T27372] ? rtnl_create_link+0xa04/0xd70 [ 573.166992][T27372] ? __pfx_vxlan_newlink+0x10/0x10 [ 573.167022][T27372] rtnl_newlink_create+0x305/0x7b0 [ 573.167054][T27372] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 573.167082][T27372] ? __pfx___mutex_lock+0x10/0x10 [ 573.167122][T27372] ? ns_capable+0x84/0xe0 [ 573.167154][T27372] rtnl_newlink+0x167a/0x1c30 [ 573.167195][T27372] ? __pfx_rtnl_newlink+0x10/0x10 [ 573.167213][T27372] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 573.167250][T27372] ? netlink_deliver_tap+0x19c/0x1b0 [ 573.167276][T27372] ? netlink_unicast+0x8c1/0xa80 [ 573.167299][T27372] ? netlink_sendmsg+0x7f0/0xb20 [ 573.167315][T27372] ? sock_sendmsg_nosec+0x14e/0x190 [ 573.167340][T27372] ? ____sys_sendmsg+0x49f/0x790 [ 573.167359][T27372] ? ___sys_sendmsg+0x2f7/0x3d0 [ 573.167378][T27372] ? __x64_sys_sendmsg+0x1b1/0x290 [ 573.167397][T27372] ? do_syscall_64+0x166/0x520 [ 573.167421][T27372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.167486][T27372] ? kasan_quarantine_put+0xbb/0x1f0 [ 573.167513][T27372] ? lockdep_hardirqs_on+0x7b/0x110 [ 573.167543][T27372] ? nlmon_xmit+0xb0/0x100 [ 573.167566][T27372] ? kmem_cache_free+0x182/0x650 [ 573.167602][T27372] ? __lock_acquire+0x747/0x2de0 [ 573.167636][T27372] ? __pfx_hook_capable+0x10/0x10 [ 573.167656][T27372] ? __dev_queue_xmit+0x29b/0x3920 [ 573.167684][T27372] ? __pfx_hook_capable+0x10/0x10 [ 573.167704][T27372] ? lockdep_hardirqs_on+0x7b/0x110 [ 573.167760][T27372] ? __pfx_rtnl_newlink+0x10/0x10 [ 573.167782][T27372] rtnetlink_rcv_msg+0x802/0xc00 [ 573.167808][T27372] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 573.167830][T27372] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 573.167854][T27372] ? __copy_skb_header+0xa3/0x4a0 [ 573.167885][T27372] netlink_rcv_skb+0x226/0x4a0 [ 573.167910][T27372] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 573.167930][T27372] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 573.167967][T27372] ? netlink_deliver_tap+0x2e/0x1b0 [ 573.167991][T27372] ? netlink_deliver_tap+0x2e/0x1b0 [ 573.168021][T27372] netlink_unicast+0x8ef/0xa80 [ 573.168062][T27372] netlink_sendmsg+0x7f0/0xb20 [ 573.168084][T27372] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.168103][T27372] ? aa_sock_msg_perm+0x144/0x210 [ 573.168134][T27372] ? apparmor_socket_sendmsg+0x98/0x360 [ 573.168159][T27372] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.168174][T27372] sock_sendmsg_nosec+0x14e/0x190 [ 573.168200][T27372] ____sys_sendmsg+0x49f/0x790 [ 573.168228][T27372] ? __pfx_____sys_sendmsg+0x10/0x10 [ 573.168265][T27372] ? import_iovec+0x73/0xa0 [ 573.168291][T27372] ___sys_sendmsg+0x2f7/0x3d0 [ 573.168308][T27372] ? __lock_acquire+0x747/0x2de0 [ 573.168333][T27372] ? __pfx____sys_sendmsg+0x10/0x10 [ 573.168389][T27372] ? __fget_files+0x3a2/0x420 [ 573.168409][T27372] ? __fget_files+0x2a/0x420 [ 573.168438][T27372] __x64_sys_sendmsg+0x1b1/0x290 [ 573.168460][T27372] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 573.168501][T27372] do_syscall_64+0x166/0x520 [ 573.168522][T27372] ? trace_irq_disable+0x3b/0x140 [ 573.168546][T27372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.168562][T27372] ? clear_bhb_loop+0x70/0xc0 [ 573.168583][T27372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.168599][T27372] RIP: 0033:0x7f73c55a94d9 [ 573.168617][T27372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 573.168631][T27372] RSP: 002b:00007f73c639e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 573.168651][T27372] RAX: ffffffffffffffda RBX: 00007f73c5825fa0 RCX: 00007f73c55a94d9 [ 573.168664][T27372] RDX: 0000000004008840 RSI: 0000200000000000 RDI: 0000000000000005 [ 573.168675][T27372] RBP: 00007f73c639e090 R08: 0000000000000000 R09: 0000000000000000 [ 573.168685][T27372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 573.168696][T27372] R13: 00007f73c5826038 R14: 00007f73c5825fa0 R15: 00007ffeb48c66b8 [ 573.168726][T27372] [ 573.367344][T27377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7765'. [ 573.499921][T27377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7765'. [ 573.786577][T27387] veth0_to_bond: Caught tx_queue_len zero misconfig [ 573.934504][T27397] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7772'. [ 573.982108][T27397] netlink: 'syz.2.7772': attribute type 16 has an invalid length. [ 573.982137][T27397] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7772'. [ 573.982163][T27397] veth1_macvtap: entered allmulticast mode [ 574.023237][T27401] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7772'. [ 574.067789][T27397] netlink: 'syz.2.7772': attribute type 16 has an invalid length. [ 574.067817][T27397] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7772'. [ 574.173331][T27409] bond1: option mode: unable to set because the bond device is up [ 574.190352][T27409] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 574.271573][T27409] 8021q: adding VLAN 0 to HW filter on device bond1 [ 574.294292][T27409] bond1: (slave lo): making interface the new active one [ 574.295246][T27409] bond1: (slave lo): Enslaving as an active interface with an up link [ 574.314270][ T5766] lo speed is unknown, defaulting to 1000 [ 574.316052][ T5643] lo speed is unknown, defaulting to 1000 [ 574.316100][ T5643] syz_device_name_32_chars_1234567: Port: 1 Link ACTIVE [ 574.556971][T27430] batadv_slave_1: entered allmulticast mode [ 574.817467][ T5992] net_ratelimit: 34 callbacks suppressed [ 574.817491][ T5992] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 574.927758][ T5992] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 574.990873][T27456] netlink: 'syz.2.7792': attribute type 3 has an invalid length. [ 575.038911][ T96] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 575.148066][ T5981] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 575.257787][ T5981] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 575.327680][T27470] xt_connbytes: Forcing CT accounting to be enabled [ 575.327745][T27470] xt_CT: You must specify a L4 protocol and not use inversions on it [ 575.367386][ T5980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 575.479836][ T5981] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 575.540749][T27499] netlink: 'syz.1.7805': attribute type 1 has an invalid length. [ 575.540773][T27499] netlink: 'syz.1.7805': attribute type 268 has an invalid length. [ 575.588657][ T96] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 575.702814][ T5981] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 575.745541][T27508] batadv_slave_1: entered allmulticast mode [ 575.752124][T27508] FAULT_INJECTION: forcing a failure. [ 575.752124][T27508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 575.752152][T27508] CPU: 0 UID: 0 PID: 27508 Comm: syz.2.7809 Not tainted syzkaller #0 PREEMPT(full) [ 575.752173][T27508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 575.752184][T27508] Call Trace: [ 575.752191][T27508] [ 575.752199][T27508] dump_stack_lvl+0xe8/0x150 [ 575.752236][T27508] should_fail_ex+0x3eb/0x540 [ 575.752264][T27508] _copy_from_user+0x2d/0xb0 [ 575.752289][T27508] do_sock_getsockopt+0x1fa/0x640 [ 575.752316][T27508] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 575.752353][T27508] ? __fget_files+0x3a2/0x420 [ 575.752376][T27508] ? __fget_files+0x2a/0x420 [ 575.752406][T27508] __x64_sys_getsockopt+0x1a4/0x240 [ 575.752437][T27508] do_syscall_64+0x166/0x520 [ 575.752460][T27508] ? trace_irq_disable+0x3b/0x140 [ 575.752485][T27508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.752504][T27508] ? clear_bhb_loop+0x70/0xc0 [ 575.752526][T27508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.752543][T27508] RIP: 0033:0x7fdc505a94d9 [ 575.752562][T27508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.752577][T27508] RSP: 002b:00007fdc51418028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 575.752599][T27508] RAX: ffffffffffffffda RBX: 00007fdc50825fa0 RCX: 00007fdc505a94d9 [ 575.752620][T27508] RDX: 0000000000000487 RSI: 0000000000000000 RDI: 0000000000000004 [ 575.752632][T27508] RBP: 00007fdc51418090 R08: 0000200000000180 R09: 0000000000000000 [ 575.752644][T27508] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 575.752655][T27508] R13: 00007fdc50826038 R14: 00007fdc50825fa0 R15: 00007ffd3c824568 [ 575.752686][T27508] [ 575.756909][T27507] batadv_slave_1: left allmulticast mode [ 575.817223][ T5992] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 575.901744][T27510] bond3: entered allmulticast mode [ 575.901767][T27510] wireguard0: entered allmulticast mode [ 575.910669][T27509] bond3: left allmulticast mode [ 575.910692][T27509] wireguard0: left allmulticast mode [ 577.276457][T27554] netlink: 'syz.0.7826': attribute type 12 has an invalid length. [ 577.278826][T27554] __nla_validate_parse: 7 callbacks suppressed [ 577.278844][T27554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7826'. [ 578.156213][T27608] FAULT_INJECTION: forcing a failure. [ 578.156213][T27608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 578.156245][T27608] CPU: 0 UID: 0 PID: 27608 Comm: syz.4.7842 Not tainted syzkaller #0 PREEMPT(full) [ 578.156268][T27608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 578.156280][T27608] Call Trace: [ 578.156289][T27608] [ 578.156298][T27608] dump_stack_lvl+0xe8/0x150 [ 578.156336][T27608] should_fail_ex+0x3eb/0x540 [ 578.156367][T27608] _copy_from_user+0x2d/0xb0 [ 578.156394][T27608] do_ip_vs_get_ctl+0x2ee/0xe40 [ 578.156509][T27608] ? __pfx_do_ip_vs_get_ctl+0x10/0x10 [ 578.156549][T27608] ? nf_getsockopt+0x224/0x290 [ 578.156580][T27608] ? __mutex_unlock_slowpath+0x731/0x900 [ 578.156616][T27608] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 578.156660][T27608] nf_getsockopt+0x26e/0x290 [ 578.156693][T27608] ip_getsockopt+0x19e/0x230 [ 578.156751][T27608] ? __pfx_ip_getsockopt+0x10/0x10 [ 578.156778][T27608] ? get_pid_task+0x20/0x1f0 [ 578.156810][T27608] raw_getsockopt+0x13c/0x3e0 [ 578.156840][T27608] ? __pfx_raw_getsockopt+0x10/0x10 [ 578.156871][T27608] ? __might_fault+0xaf/0x130 [ 578.156894][T27608] ? sock_common_getsockopt+0x2d/0xb0 [ 578.156922][T27608] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 578.156951][T27608] do_sock_getsockopt+0x4aa/0x640 [ 578.156980][T27608] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 578.157024][T27608] ? __fget_files+0x3a2/0x420 [ 578.157048][T27608] ? __fget_files+0x2a/0x420 [ 578.157081][T27608] __x64_sys_getsockopt+0x1a4/0x240 [ 578.157126][T27608] do_syscall_64+0x166/0x520 [ 578.157152][T27608] ? trace_irq_disable+0x3b/0x140 [ 578.157180][T27608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.157201][T27608] ? clear_bhb_loop+0x70/0xc0 [ 578.157226][T27608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.157246][T27608] RIP: 0033:0x7fde9b7a94d9 [ 578.157267][T27608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.157284][T27608] RSP: 002b:00007fde9c6c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 578.157307][T27608] RAX: ffffffffffffffda RBX: 00007fde9ba25fa0 RCX: 00007fde9b7a94d9 [ 578.157323][T27608] RDX: 0000000000000487 RSI: 0000000000000000 RDI: 0000000000000004 [ 578.157335][T27608] RBP: 00007fde9c6c1090 R08: 0000200000000180 R09: 0000000000000000 [ 578.157348][T27608] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 578.157361][T27608] R13: 00007fde9ba26038 R14: 00007fde9ba25fa0 R15: 00007ffc85399e68 [ 578.157395][T27608] [ 578.451802][T27622] netlink: 'syz.0.7844': attribute type 1 has an invalid length. [ 578.451826][T27622] netlink: 'syz.0.7844': attribute type 3 has an invalid length. [ 578.451839][T27622] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7844'. [ 578.661892][T27629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7851'. [ 578.661988][T27629] batadv0: Caught tx_queue_len zero misconfig [ 578.695103][T27634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7851'. [ 578.786171][T27638] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 579.021892][T27651] rxe_eth0 speed is unknown, defaulting to 1000 [ 579.085092][T27656] FAULT_INJECTION: forcing a failure. [ 579.085092][T27656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 579.085124][T27656] CPU: 1 UID: 0 PID: 27656 Comm: syz.1.7860 Not tainted syzkaller #0 PREEMPT(full) [ 579.085147][T27656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 579.085159][T27656] Call Trace: [ 579.085168][T27656] [ 579.085182][T27656] dump_stack_lvl+0xe8/0x150 [ 579.085221][T27656] should_fail_ex+0x3eb/0x540 [ 579.085254][T27656] _copy_from_user+0x2d/0xb0 [ 579.085281][T27656] kstrtouint_from_user+0xd6/0x180 [ 579.085307][T27656] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 579.085341][T27656] ? lock_acquire+0x115/0x350 [ 579.085372][T27656] proc_fail_nth_write+0x8e/0x210 [ 579.085396][T27656] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 579.085428][T27656] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 579.085449][T27656] vfs_write+0x296/0xba0 [ 579.085489][T27656] ? __pfx_vfs_write+0x10/0x10 [ 579.085520][T27656] ? __fget_files+0x2a/0x420 [ 579.085544][T27656] ? __fget_files+0x3a2/0x420 [ 579.085568][T27656] ? __fget_files+0x2a/0x420 [ 579.085606][T27656] ? fdget+0x1ac/0x250 [ 579.085641][T27656] ksys_write+0x150/0x270 [ 579.085672][T27656] ? __pfx_ksys_write+0x10/0x10 [ 579.085715][T27656] do_syscall_64+0x166/0x520 [ 579.085743][T27656] ? trace_irq_disable+0x3b/0x140 [ 579.085770][T27656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.085791][T27656] ? clear_bhb_loop+0x70/0xc0 [ 579.085817][T27656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.085837][T27656] RIP: 0033:0x7f0b53769d0e [ 579.085858][T27656] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 579.085876][T27656] RSP: 002b:00007f0b545a8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 579.085900][T27656] RAX: ffffffffffffffda RBX: 00007f0b545a96c0 RCX: 00007f0b53769d0e [ 579.085915][T27656] RDX: 0000000000000001 RSI: 00007f0b545a90a0 RDI: 0000000000000006 [ 579.085928][T27656] RBP: 00007f0b545a9090 R08: 0000000000000000 R09: 0000000000000000 [ 579.085941][T27656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.085953][T27656] R13: 00007f0b53a26038 R14: 00007f0b53a25fa0 R15: 00007ffda67341b8 [ 579.085990][T27656] [ 579.448750][T27669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7864'. [ 579.635449][T27675] netlink: 'syz.4.7867': attribute type 1 has an invalid length. [ 579.765462][T27675] bond8: entered promiscuous mode [ 579.767841][T27675] 8021q: adding VLAN 0 to HW filter on device bond8 [ 579.810876][T27680] FAULT_INJECTION: forcing a failure. [ 579.810876][T27680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 579.810910][T27680] CPU: 0 UID: 0 PID: 27680 Comm: syz.1.7868 Not tainted syzkaller #0 PREEMPT(full) [ 579.810933][T27680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 579.810946][T27680] Call Trace: [ 579.810955][T27680] [ 579.810966][T27680] dump_stack_lvl+0xe8/0x150 [ 579.811010][T27680] should_fail_ex+0x3eb/0x540 [ 579.811042][T27680] _copy_to_user+0x31/0xb0 [ 579.811071][T27680] simple_read_from_buffer+0xe1/0x170 [ 579.811105][T27680] proc_fail_nth_read+0x1bb/0x230 [ 579.811131][T27680] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 579.811158][T27680] ? rw_verify_area+0x24a/0x4c0 [ 579.811184][T27680] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 579.811212][T27680] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 579.811241][T27680] vfs_read+0x213/0xa80 [ 579.811276][T27680] ? __pfx___mutex_lock+0x10/0x10 [ 579.811305][T27680] ? __pfx_vfs_read+0x10/0x10 [ 579.811336][T27680] ? __fget_files+0x2a/0x420 [ 579.811360][T27680] ? __fget_files+0x3a2/0x420 [ 579.811384][T27680] ? __fget_files+0x2a/0x420 [ 579.811415][T27680] ? fdget+0x1ac/0x250 [ 579.811449][T27680] ksys_read+0x150/0x270 [ 579.811481][T27680] ? __pfx_ksys_read+0x10/0x10 [ 579.811505][T27680] ? fput+0xa0/0xd0 [ 579.811600][T27680] do_syscall_64+0x166/0x520 [ 579.811627][T27680] ? trace_irq_disable+0x3b/0x140 [ 579.811654][T27680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.811676][T27680] ? clear_bhb_loop+0x70/0xc0 [ 579.811703][T27680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.811723][T27680] RIP: 0033:0x7f0b53769d0e [ 579.811744][T27680] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 579.811761][T27680] RSP: 002b:00007f0b545a8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 579.811786][T27680] RAX: ffffffffffffffda RBX: 00007f0b545a96c0 RCX: 00007f0b53769d0e [ 579.811802][T27680] RDX: 000000000000000f RSI: 00007f0b545a90a0 RDI: 0000000000000007 [ 579.811815][T27680] RBP: 00007f0b545a9090 R08: 0000000000000000 R09: 0000000000000000 [ 579.811828][T27680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.811841][T27680] R13: 00007f0b53a26038 R14: 00007f0b53a25fa0 R15: 00007ffda67341b8 [ 579.811879][T27680] [ 579.843490][T27682] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 579.843517][T27682] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 579.843532][T27682] bond8: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 579.873853][T27686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7870'. [ 579.873885][T27686] netlink: 'syz.2.7870': attribute type 2 has an invalid length. [ 580.040076][ T43] net_ratelimit: 33 callbacks suppressed [ 580.040096][ T43] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 580.148974][ T43] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 580.228032][T27695] netlink: 284 bytes leftover after parsing attributes in process `syz.4.7873'. [ 580.235304][T27695] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543 [ 580.263422][ T5981] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 580.371762][ T43] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 580.457638][T27651] lo speed is unknown, defaulting to 1000 [ 580.463317][T27651] lo speed is unknown, defaulting to 1000 [ 580.482655][ T5989] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 580.590851][ T5991] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 580.737554][ T43] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 580.744401][T27710] ip_tables: iptables: counters copy to user failed while replacing table [ 580.870046][T27716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7882'. [ 580.870084][T27716] netlink: 'syz.0.7882': attribute type 2 has an invalid length. [ 580.898555][ T5989] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 581.135404][T27725] netlink: 'syz.2.7884': attribute type 30 has an invalid length. [ 581.175303][T27725] FAULT_INJECTION: forcing a failure. [ 581.175303][T27725] name failslab, interval 1, probability 0, space 0, times 0 [ 581.175337][T27725] CPU: 0 UID: 0 PID: 27725 Comm: syz.2.7884 Not tainted syzkaller #0 PREEMPT(full) [ 581.175359][T27725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 581.175371][T27725] Call Trace: [ 581.175380][T27725] [ 581.175389][T27725] dump_stack_lvl+0xe8/0x150 [ 581.175428][T27725] should_fail_ex+0x3eb/0x540 [ 581.175461][T27725] should_failslab+0xa8/0x100 [ 581.175495][T27725] ? __kernfs_new_node+0xe6/0x980 [ 581.175518][T27725] kmem_cache_alloc_noprof+0x9c/0x600 [ 581.175546][T27725] ? __kernfs_new_node+0xe6/0x980 [ 581.175576][T27725] __kernfs_new_node+0xe6/0x980 [ 581.175610][T27725] ? __pfx___kernfs_new_node+0x10/0x10 [ 581.175631][T27725] ? lock_acquire+0x115/0x350 [ 581.175655][T27725] ? kernfs_root+0x1c/0x230 [ 581.175682][T27725] ? kernfs_root+0x1c/0x230 [ 581.175700][T27725] ? kernfs_root+0x1c/0x230 [ 581.175718][T27725] ? kernfs_root+0x1c/0x230 [ 581.175743][T27725] kernfs_new_node+0xeb/0x140 [ 581.175771][T27725] __kernfs_create_file+0x4b/0x2e0 [ 581.175801][T27725] sysfs_add_file_mode_ns+0x237/0x300 [ 581.175838][T27725] internal_create_group+0x679/0x1180 [ 581.175877][T27725] ? kernfs_add_one+0xfc/0x510 [ 581.175898][T27725] ? __pfx_internal_create_group+0x10/0x10 [ 581.175926][T27725] ? kernfs_activate_one+0x22d/0x340 [ 581.175953][T27725] sysfs_create_groups+0x59/0x120 [ 581.175977][T27725] device_add_attrs+0xde/0x600 [ 581.176001][T27725] ? __pfx_device_add_attrs+0x10/0x10 [ 581.176028][T27725] ? device_add_class_symlinks+0x21f/0x240 [ 581.176054][T27725] device_add+0x488/0xb80 [ 581.176079][T27725] netdev_register_kobject+0x197/0x350 [ 581.176123][T27725] register_netdevice+0x17be/0x2280 [ 581.176169][T27725] ? __pfx_register_netdevice+0x10/0x10 [ 581.176215][T27725] vxlan_newlink+0x3c7/0x8b0 [ 581.176255][T27725] ? __pfx_vxlan_newlink+0x10/0x10 [ 581.176284][T27725] ? alloc_netdev_mqs+0xd5b/0x1240 [ 581.176309][T27725] ? __kvmalloc_node_noprof+0x52a/0x820 [ 581.176350][T27725] ? validate_linkmsg+0x809/0xa50 [ 581.176387][T27725] ? rtnl_create_link+0xa04/0xd70 [ 581.176416][T27725] ? __pfx_vxlan_newlink+0x10/0x10 [ 581.176446][T27725] rtnl_newlink_create+0x305/0x7b0 [ 581.176478][T27725] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 581.176508][T27725] ? __pfx___mutex_lock+0x10/0x10 [ 581.176559][T27725] ? ns_capable+0x84/0xe0 [ 581.176593][T27725] rtnl_newlink+0x167a/0x1c30 [ 581.176634][T27725] ? __pfx_rtnl_newlink+0x10/0x10 [ 581.176654][T27725] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 581.176682][T27725] ? netlink_deliver_tap+0x19c/0x1b0 [ 581.176709][T27725] ? netlink_unicast+0x8c1/0xa80 [ 581.176733][T27725] ? netlink_sendmsg+0x7f0/0xb20 [ 581.176751][T27725] ? sock_sendmsg_nosec+0x14e/0x190 [ 581.176777][T27725] ? ____sys_sendmsg+0x49f/0x790 [ 581.176797][T27725] ? ___sys_sendmsg+0x2f7/0x3d0 [ 581.176818][T27725] ? __x64_sys_sendmsg+0x1b1/0x290 [ 581.176838][T27725] ? do_syscall_64+0x166/0x520 [ 581.176862][T27725] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.176936][T27725] ? kasan_quarantine_put+0xbb/0x1f0 [ 581.176965][T27725] ? lockdep_hardirqs_on+0x7b/0x110 [ 581.176996][T27725] ? nlmon_xmit+0xb0/0x100 [ 581.177019][T27725] ? kmem_cache_free+0x182/0x650 [ 581.177054][T27725] ? __lock_acquire+0x747/0x2de0 [ 581.177088][T27725] ? __pfx_hook_capable+0x10/0x10 [ 581.177107][T27725] ? __dev_queue_xmit+0x29b/0x3920 [ 581.177145][T27725] ? __pfx_hook_capable+0x10/0x10 [ 581.177164][T27725] ? lockdep_hardirqs_on+0x7b/0x110 [ 581.177219][T27725] ? __pfx_rtnl_newlink+0x10/0x10 [ 581.177239][T27725] rtnetlink_rcv_msg+0x802/0xc00 [ 581.177265][T27725] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 581.177285][T27725] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 581.177310][T27725] ? __copy_skb_header+0xa3/0x4a0 [ 581.177346][T27725] netlink_rcv_skb+0x226/0x4a0 [ 581.177376][T27725] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 581.177400][T27725] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 581.177445][T27725] ? netlink_deliver_tap+0x2e/0x1b0 [ 581.177473][T27725] ? netlink_deliver_tap+0x2e/0x1b0 [ 581.177508][T27725] netlink_unicast+0x8ef/0xa80 [ 581.177556][T27725] netlink_sendmsg+0x7f0/0xb20 [ 581.177582][T27725] ? __pfx_netlink_sendmsg+0x10/0x10 [ 581.177598][T27725] ? __lock_acquire+0x747/0x2de0 [ 581.177625][T27725] ? aa_sock_msg_perm+0x144/0x210 [ 581.177661][T27725] ? apparmor_socket_sendmsg+0x98/0x360 [ 581.177690][T27725] ? __pfx_netlink_sendmsg+0x10/0x10 [ 581.177708][T27725] sock_sendmsg_nosec+0x14e/0x190 [ 581.177738][T27725] ____sys_sendmsg+0x49f/0x790 [ 581.177773][T27725] ? __pfx_____sys_sendmsg+0x10/0x10 [ 581.177808][T27725] ? import_iovec+0x73/0xa0 [ 581.177839][T27725] ___sys_sendmsg+0x2f7/0x3d0 [ 581.177861][T27725] ? __lock_acquire+0x747/0x2de0 [ 581.177892][T27725] ? __pfx____sys_sendmsg+0x10/0x10 [ 581.177960][T27725] ? __fget_files+0x3a2/0x420 [ 581.177984][T27725] ? __fget_files+0x2a/0x420 [ 581.178017][T27725] __x64_sys_sendmsg+0x1b1/0x290 [ 581.178044][T27725] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 581.178094][T27725] do_syscall_64+0x166/0x520 [ 581.178128][T27725] ? trace_irq_disable+0x3b/0x140 [ 581.178154][T27725] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.178175][T27725] ? clear_bhb_loop+0x70/0xc0 [ 581.178201][T27725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.178221][T27725] RIP: 0033:0x7fdc505a94d9 [ 581.178243][T27725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 581.178259][T27725] RSP: 002b:00007fdc51418028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 581.178282][T27725] RAX: ffffffffffffffda RBX: 00007fdc50825fa0 RCX: 00007fdc505a94d9 [ 581.178297][T27725] RDX: 0000000004008840 RSI: 0000200000000000 RDI: 0000000000000005 [ 581.178311][T27725] RBP: 00007fdc51418090 R08: 0000000000000000 R09: 0000000000000000 [ 581.178324][T27725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 581.178336][T27725] R13: 00007fdc50826038 R14: 00007fdc50825fa0 R15: 00007ffd3c824568 [ 581.178373][T27725] [ 581.188792][T27730] netlink: 284 bytes leftover after parsing attributes in process `syz.0.7885'. [ 581.200940][T27731] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7886'. [ 581.200962][T27731] netlink: 'syz.1.7886': attribute type 9 has an invalid length. [ 581.988107][T27758] netlink: 'syz.0.7894': attribute type 1 has an invalid length. [ 582.080043][T27758] bond23: entered promiscuous mode [ 582.084276][T27758] 8021q: adding VLAN 0 to HW filter on device bond23 [ 582.144679][T27758] 8021q: adding VLAN 0 to HW filter on device bond23 [ 582.145096][T27758] bond23: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 582.145118][T27758] bond23: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 582.183634][T27758] bond23: (slave ip6gre2): making interface the new active one [ 582.183663][T27758] ip6gre2: entered promiscuous mode [ 582.183954][T27765] netlink: 'syz.2.7895': attribute type 2 has an invalid length. [ 582.211579][T27758] bond23: (slave ip6gre2): Enslaving as an active interface with an up link [ 582.312918][T27767] __nla_validate_parse: 2 callbacks suppressed [ 582.312940][T27767] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7896'. [ 582.894712][T27787] netlink: 284 bytes leftover after parsing attributes in process `syz.0.7902'. [ 583.276515][T27803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7907'. [ 583.276554][T27803] netlink: 'syz.1.7907': attribute type 2 has an invalid length. [ 583.525432][T27812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7909'. [ 583.753484][T27824] netlink: 284 bytes leftover after parsing attributes in process `syz.2.7916'. [ 584.098552][T27845] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7923'. [ 584.180328][T27854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7927'. [ 584.254880][T27856] netlink: 'syz.1.7926': attribute type 1 has an invalid length. [ 584.444345][T27871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7933'. [ 584.480693][T27868] netlink: 284 bytes leftover after parsing attributes in process `syz.0.7931'. [ 584.892451][T27894] netlink: 'syz.3.7937': attribute type 30 has an invalid length. [ 584.895713][T27894] FAULT_INJECTION: forcing a failure. [ 584.895713][T27894] name failslab, interval 1, probability 0, space 0, times 0 [ 584.895745][T27894] CPU: 0 UID: 0 PID: 27894 Comm: syz.3.7937 Not tainted syzkaller #0 PREEMPT(full) [ 584.895767][T27894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 584.895780][T27894] Call Trace: [ 584.895789][T27894] [ 584.895799][T27894] dump_stack_lvl+0xe8/0x150 [ 584.895838][T27894] should_fail_ex+0x3eb/0x540 [ 584.895871][T27894] should_failslab+0xa8/0x100 [ 584.895902][T27894] ? __kernfs_new_node+0xe6/0x980 [ 584.895925][T27894] kmem_cache_alloc_noprof+0x9c/0x600 [ 584.895954][T27894] ? __kernfs_new_node+0xe6/0x980 [ 584.895984][T27894] __kernfs_new_node+0xe6/0x980 [ 584.896019][T27894] ? __pfx___kernfs_new_node+0x10/0x10 [ 584.896037][T27894] ? lock_acquire+0x115/0x350 [ 584.896062][T27894] ? kernfs_root+0x1c/0x230 [ 584.896091][T27894] ? kernfs_root+0x1c/0x230 [ 584.896111][T27894] ? kernfs_root+0x1c/0x230 [ 584.896129][T27894] ? kernfs_root+0x1c/0x230 [ 584.896155][T27894] kernfs_new_node+0xeb/0x140 [ 584.896184][T27894] __kernfs_create_file+0x4b/0x2e0 [ 584.896217][T27894] sysfs_add_file_mode_ns+0x237/0x300 [ 584.896255][T27894] internal_create_group+0x679/0x1180 [ 584.896293][T27894] ? kernfs_add_one+0xfc/0x510 [ 584.896313][T27894] ? __pfx_internal_create_group+0x10/0x10 [ 584.896340][T27894] ? kernfs_activate_one+0x22d/0x340 [ 584.896364][T27894] sysfs_create_groups+0x59/0x120 [ 584.896388][T27894] device_add_attrs+0xde/0x600 [ 584.896414][T27894] ? __pfx_device_add_attrs+0x10/0x10 [ 584.896440][T27894] ? device_add_class_symlinks+0x21f/0x240 [ 584.896464][T27894] device_add+0x488/0xb80 [ 584.896488][T27894] netdev_register_kobject+0x197/0x350 [ 584.896525][T27894] register_netdevice+0x17be/0x2280 [ 584.896702][T27894] ? __pfx_register_netdevice+0x10/0x10 [ 584.896749][T27894] vxlan_newlink+0x3c7/0x8b0 [ 584.896790][T27894] ? __pfx_vxlan_newlink+0x10/0x10 [ 584.896819][T27894] ? alloc_netdev_mqs+0xd5b/0x1240 [ 584.896844][T27894] ? __kvmalloc_node_noprof+0x52a/0x820 [ 584.896890][T27894] ? validate_linkmsg+0x809/0xa50 [ 584.896928][T27894] ? rtnl_create_link+0xa04/0xd70 [ 584.896958][T27894] ? __pfx_vxlan_newlink+0x10/0x10 [ 584.896987][T27894] rtnl_newlink_create+0x305/0x7b0 [ 584.897019][T27894] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 584.897049][T27894] ? __pfx___mutex_lock+0x10/0x10 [ 584.897088][T27894] ? ns_capable+0x84/0xe0 [ 584.897121][T27894] rtnl_newlink+0x167a/0x1c30 [ 584.897174][T27894] ? __pfx_rtnl_newlink+0x10/0x10 [ 584.897194][T27894] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 584.897221][T27894] ? netlink_deliver_tap+0x19c/0x1b0 [ 584.897247][T27894] ? netlink_unicast+0x8c1/0xa80 [ 584.897270][T27894] ? netlink_sendmsg+0x7f0/0xb20 [ 584.897286][T27894] ? sock_sendmsg_nosec+0x14e/0x190 [ 584.897312][T27894] ? ____sys_sendmsg+0x49f/0x790 [ 584.897331][T27894] ? ___sys_sendmsg+0x2f7/0x3d0 [ 584.897350][T27894] ? __x64_sys_sendmsg+0x1b1/0x290 [ 584.897369][T27894] ? do_syscall_64+0x166/0x520 [ 584.897393][T27894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.897456][T27894] ? kasan_quarantine_put+0xbb/0x1f0 [ 584.897483][T27894] ? lockdep_hardirqs_on+0x7b/0x110 [ 584.897514][T27894] ? nlmon_xmit+0xb0/0x100 [ 584.897536][T27894] ? kmem_cache_free+0x182/0x650 [ 584.897572][T27894] ? __lock_acquire+0x747/0x2de0 [ 584.897605][T27894] ? __pfx_hook_capable+0x10/0x10 [ 584.897624][T27894] ? __dev_queue_xmit+0x29b/0x3920 [ 584.897653][T27894] ? __pfx_hook_capable+0x10/0x10 [ 584.897673][T27894] ? lockdep_hardirqs_on+0x7b/0x110 [ 584.897729][T27894] ? __pfx_rtnl_newlink+0x10/0x10 [ 584.897751][T27894] rtnetlink_rcv_msg+0x802/0xc00 [ 584.897779][T27894] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 584.897802][T27894] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 584.897829][T27894] ? __copy_skb_header+0xa3/0x4a0 [ 584.897864][T27894] netlink_rcv_skb+0x226/0x4a0 [ 584.897896][T27894] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 584.897921][T27894] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 584.897967][T27894] ? netlink_deliver_tap+0x2e/0x1b0 [ 584.897996][T27894] ? netlink_deliver_tap+0x2e/0x1b0 [ 584.898032][T27894] netlink_unicast+0x8ef/0xa80 [ 584.898083][T27894] netlink_sendmsg+0x7f0/0xb20 [ 584.898113][T27894] ? __pfx_netlink_sendmsg+0x10/0x10 [ 584.898131][T27894] ? __lock_acquire+0x747/0x2de0 [ 584.898168][T27894] ? aa_sock_msg_perm+0x144/0x210 [ 584.898206][T27894] ? apparmor_socket_sendmsg+0x98/0x360 [ 584.898238][T27894] ? __pfx_netlink_sendmsg+0x10/0x10 [ 584.898253][T27894] sock_sendmsg_nosec+0x14e/0x190 [ 584.898277][T27894] ____sys_sendmsg+0x49f/0x790 [ 584.898308][T27894] ? __pfx_____sys_sendmsg+0x10/0x10 [ 584.898343][T27894] ? import_iovec+0x73/0xa0 [ 584.898374][T27894] ___sys_sendmsg+0x2f7/0x3d0 [ 584.898395][T27894] ? __lock_acquire+0x747/0x2de0 [ 584.898428][T27894] ? __pfx____sys_sendmsg+0x10/0x10 [ 584.898500][T27894] ? __fget_files+0x3a2/0x420 [ 584.898526][T27894] ? __fget_files+0x2a/0x420 [ 584.898563][T27894] __x64_sys_sendmsg+0x1b1/0x290 [ 584.898592][T27894] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 584.898643][T27894] do_syscall_64+0x166/0x520 [ 584.898669][T27894] ? trace_irq_disable+0x3b/0x140 [ 584.898696][T27894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.898717][T27894] ? clear_bhb_loop+0x70/0xc0 [ 584.898744][T27894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.898766][T27894] RIP: 0033:0x7f73c55a94d9 [ 584.898789][T27894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.898807][T27894] RSP: 002b:00007f73c639e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 584.898830][T27894] RAX: ffffffffffffffda RBX: 00007f73c5825fa0 RCX: 00007f73c55a94d9 [ 584.898845][T27894] RDX: 0000000004008840 RSI: 0000200000000000 RDI: 0000000000000005 [ 584.898859][T27894] RBP: 00007f73c639e090 R08: 0000000000000000 R09: 0000000000000000 [ 584.898872][T27894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 584.898885][T27894] R13: 00007f73c5826038 R14: 00007f73c5825fa0 R15: 00007ffeb48c66b8 [ 584.898923][T27894] [ 585.070240][ T43] net_ratelimit: 36 callbacks suppressed [ 585.070260][ T43] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 585.190073][ T5980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 585.310409][ T5980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 585.399917][T27913] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7944'. [ 585.428877][ T43] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 585.537978][ T5980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 585.614064][T27917] netlink: 'syz.4.7945': attribute type 1 has an invalid length. [ 585.682352][T27921] netlink: 'syz.2.7946': attribute type 2 has an invalid length. [ 585.727968][ T5981] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 585.844975][ T5989] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 585.947284][ T5981] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 585.973994][T27930] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543 [ 586.062315][ T5980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 586.369765][T27944] tipc: Bearer : already 2 bearers with priority 10 [ 586.369788][T27944] tipc: Bearer : trying with adjusted priority [ 586.369801][T27944] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 586.449486][T27946] netlink: 'syz.0.7952': attribute type 1 has an invalid length. [ 586.526708][T27945] bond23: entered allmulticast mode [ 586.526735][T27945] ip6gre2: entered allmulticast mode [ 586.529479][T27943] bond23: left allmulticast mode [ 586.529498][T27943] ip6gre2: left allmulticast mode [ 586.671496][T27964] netlink: 'syz.0.7958': attribute type 2 has an invalid length. [ 586.942454][T27977] netlink: 'syz.1.7963': attribute type 3 has an invalid length. [ 586.943117][T27976] netlink: 'syz.1.7963': attribute type 3 has an invalid length. [ 587.015823][T27983] nbd3: detected capacity change from 0 to 274877906944 [ 587.425917][T28010] __nla_validate_parse: 11 callbacks suppressed [ 587.425943][T28010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7971'. [ 587.449208][T28010] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 587.541350][T28015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7972'. [ 587.541387][T28015] netlink: 'syz.3.7972': attribute type 2 has an invalid length. [ 587.628640][T28021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7974'. [ 587.763850][T28028] netlink: 'syz.1.7976': attribute type 2 has an invalid length. [ 587.797605][T28022] bond15: entered promiscuous mode [ 587.800846][T18542] block nbd3: Receive control failed (result -104) [ 587.872155][T28026] macvlan4: entered promiscuous mode [ 587.872181][T28026] macvlan4: entered allmulticast mode [ 587.876869][T28026] bond15: (slave macvlan4): Opening slave failed [ 587.923674][T28030] netlink: 284 bytes leftover after parsing attributes in process `syz.4.7977'. [ 587.960050][T28038] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7980'. [ 588.099352][T28046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7985'. [ 588.226956][T28051] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7984'. [ 588.308831][T28056] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7987'. [ 588.367201][T28054] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7986'. [ 588.439224][T28064] netlink: 'syz.4.7991': attribute type 24 has an invalid length. [ 588.510083][T28071] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7992'. [ 588.645807][T28077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 590.157546][ T96] net_ratelimit: 106 callbacks suppressed [ 590.157569][ T96] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 590.175392][T28133] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 590.175417][T28133] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 590.183727][T28133] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 590.271417][ T96] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 590.348517][T28142] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 590.378911][ T5989] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 590.383779][T28141] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543 [ 590.487850][ T43] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 590.598665][ T43] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 590.763943][T28157] 8021q: adding VLAN 0 to HW filter on device bond9 [ 590.768854][ T5980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 590.882407][ T96] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 591.459858][T28194] syzkaller0: entered promiscuous mode [ 591.460127][T28194] syzkaller0: entered allmulticast mode [ 591.678729][T28209] tipc: Enabling of bearer rejected, failed to enable media [ 591.911201][T28221] netlink: 'syz.0.8042': attribute type 3 has an invalid length. [ 592.099170][T28228] bond16: Invalid ad_actor_system MAC address. [ 592.099191][T28228] bond16: option ad_actor_system: invalid value (1) [ 592.132251][T28228] bond16 (unregistering): Released all slaves [ 592.375429][T28250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 592.480136][T28256] batadv_slave_1: entered allmulticast mode [ 592.481701][T28253] batadv_slave_1: left allmulticast mode [ 592.793935][T28276] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 592.802246][T28260] bond0: entered promiscuous mode [ 592.802268][T28260] erspan1: entered promiscuous mode [ 592.905085][T28276] __nla_validate_parse: 14 callbacks suppressed [ 592.905109][T28276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8060'. [ 592.905129][T28276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8060'. [ 593.111247][T28292] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8065'. [ 593.183578][T28298] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8067'. [ 593.481538][T28309] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8072'. [ 593.824203][T28334] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8081'. [ 593.899581][T28338] netlink: 'syz.3.8083': attribute type 1 has an invalid length. [ 593.980541][T28338] 8021q: adding VLAN 0 to HW filter on device bond16 [ 594.157631][T28344] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 594.206346][T28344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8085'. [ 594.573683][T28381] netlink: 'syz.2.8097': attribute type 4 has an invalid length. [ 594.614759][T28385] netlink: 'syz.2.8097': attribute type 4 has an invalid length. [ 594.645538][T28391] netlink: 'syz.1.8096': attribute type 32 has an invalid length. [ 594.899069][T28404] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8100'. [ 594.942097][T28406] vlan3: entered allmulticast mode [ 594.942123][T28406] gretap0: entered allmulticast mode [ 595.197951][ T5992] net_ratelimit: 41 callbacks suppressed [ 595.197975][ T5992] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 595.225581][T28423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8104'. [ 595.308157][ T96] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 595.417790][ T5991] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 595.527760][ T96] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 595.584794][T28440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8116'. [ 595.708539][T28449] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543 [ 595.872358][T28440] [ 595.874747][T28440] ====================================================== [ 595.881859][T28440] WARNING: possible circular locking dependency detected [ 595.888959][T28440] syzkaller #0 Not tainted [ 595.893370][T28440] ------------------------------------------------------ [ 595.900400][T28440] syz.2.8116/28440 is trying to acquire lock: [ 595.906468][T28440] ffff88801d28d2a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 595.916378][T28440] [ 595.916378][T28440] but task is already holding lock: [ 595.923735][T28440] ffffffff90c20c60 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 595.932457][T28440] [ 595.932457][T28440] which lock already depends on the new lock. [ 595.932457][T28440] [ 595.942868][T28440] [ 595.942868][T28440] the existing dependency chain (in reverse order) is: [ 595.951884][T28440] [ 595.951884][T28440] -> #10 (gdp_mutex){+.+.}-{4:4}: [ 595.959161][T28440] __mutex_lock+0x197/0x15a0 [ 595.964376][T28440] get_device_parent+0x16f/0x3a0 [ 595.969842][T28440] device_add+0x2d4/0xb80 [ 595.974702][T28440] device_create+0x269/0x300 [ 595.979812][T28440] msr_device_create+0x33/0x50 [ 595.985097][T28440] cpuhp_invoke_callback+0x434/0x810 [ 595.991078][T28440] cpuhp_thread_fun+0x362/0x780 [ 595.996448][T28440] smpboot_thread_fn+0x5f8/0xb30 [ 596.001910][T28440] kthread+0x38b/0x480 [ 596.006527][T28440] ret_from_fork+0x514/0xb70 [ 596.011838][T28440] ret_from_fork_asm+0x1a/0x30 [ 596.017119][T28440] [ 596.017119][T28440] -> #9 (cpuhp_state-up){+.+.}-{0:0}: [ 596.024755][T28440] cpuhp_thread_fun+0x127/0x780 [ 596.030129][T28440] smpboot_thread_fn+0x5f8/0xb30 [ 596.035675][T28440] kthread+0x38b/0x480 [ 596.040267][T28440] ret_from_fork+0x514/0xb70 [ 596.045374][T28440] ret_from_fork_asm+0x1a/0x30 [ 596.050654][T28440] [ 596.050654][T28440] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 596.058465][T28440] cpus_read_lock+0x3d/0x160 [ 596.063612][T28440] static_key_slow_inc+0x12/0x30 [ 596.069065][T28440] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 596.075383][T28440] nbd_genl_foreach_sock+0x265/0x450 [ 596.081181][T28440] nbd_genl_reconfigure+0xbbb/0x1040 [ 596.086998][T28440] genl_family_rcv_msg_doit+0x233/0x340 [ 596.093165][T28440] genl_rcv_msg+0x614/0x7a0 [ 596.098198][T28440] netlink_rcv_skb+0x226/0x4a0 [ 596.103484][T28440] genl_rcv+0x28/0x40 [ 596.103698][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880565bcc00: rx timeout, send abort [ 596.116222][T28440] netlink_unicast+0x8ef/0xa80 [ 596.121546][T28440] netlink_sendmsg+0x7f0/0xb20 [ 596.126826][T28440] sock_sendmsg_nosec+0x14e/0x190 [ 596.132370][T28440] ____sys_sendmsg+0x49f/0x790 [ 596.137754][T28440] ___sys_sendmsg+0x2f7/0x3d0 [ 596.142957][T28440] __x64_sys_sendmsg+0x1b1/0x290 [ 596.148431][T28440] do_syscall_64+0x166/0x520 [ 596.153567][T28440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.160150][T28440] [ 596.160150][T28440] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 596.167784][T28440] __mutex_lock+0x197/0x15a0 [ 596.172904][T28440] nbd_queue_rq+0x373/0xff0 [ 596.177927][T28440] blk_mq_dispatch_rq_list+0x499/0x1990 [ 596.184089][T28440] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 596.190964][T28440] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 596.197492][T28440] blk_mq_run_work_fn+0x167/0x2f0 [ 596.203064][T28440] process_scheduled_works+0xc3d/0x1630 [ 596.209145][T28440] worker_thread+0xa47/0xfb0 [ 596.214253][T28440] kthread+0x38b/0x480 [ 596.218837][T28440] ret_from_fork+0x514/0xb70 [ 596.223941][T28440] ret_from_fork_asm+0x1a/0x30 [ 596.229235][T28440] [ 596.229235][T28440] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 596.236436][T28440] __mutex_lock+0x197/0x15a0 [ 596.241568][T28440] nbd_queue_rq+0xc1/0xff0 [ 596.246500][T28440] blk_mq_dispatch_rq_list+0x499/0x1990 [ 596.252564][T28440] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 596.259406][T28440] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 596.265900][T28440] blk_mq_run_work_fn+0x167/0x2f0 [ 596.271454][T28440] process_scheduled_works+0xc3d/0x1630 [ 596.277536][T28440] worker_thread+0xa47/0xfb0 [ 596.282670][T28440] kthread+0x38b/0x480 [ 596.287253][T28440] ret_from_fork+0x514/0xb70 [ 596.292357][T28440] ret_from_fork_asm+0x1a/0x30 [ 596.297639][T28440] [ 596.297639][T28440] -> #5 (set->srcu){.+.+}-{0:0}: [ 596.304755][T28440] __synchronize_srcu+0xca/0x2f0 [ 596.310213][T28440] elevator_switch+0x1e8/0x7b0 [ 596.315576][T28440] elevator_change+0x2fa/0x480 [ 596.320872][T28440] elevator_set_default+0x375/0x440 [ 596.326634][T28440] blk_register_queue+0x404/0x4f0 [ 596.332255][T28440] __add_disk+0x6b8/0xdb0 [ 596.337144][T28440] add_disk_fwnode+0x100/0x3a0 [ 596.342425][T28440] nbd_dev_add+0x733/0xb60 [ 596.347358][T28440] nbd_init+0x168/0x1f0 [ 596.352135][T28440] do_one_initcall+0x250/0x870 [ 596.357416][T28440] do_initcall_level+0x10a/0x1a0 [ 596.362951][T28440] do_initcalls+0x59/0xa0 [ 596.367818][T28440] kernel_init_freeable+0x29d/0x3e0 [ 596.373531][T28440] kernel_init+0x22/0x1d0 [ 596.378397][T28440] ret_from_fork+0x514/0xb70 [ 596.383504][T28440] ret_from_fork_asm+0x1a/0x30 [ 596.388783][T28440] [ 596.388783][T28440] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 596.396610][T28440] __mutex_lock+0x197/0x15a0 [ 596.401719][T28440] elevator_change+0x1af/0x480 [ 596.407105][T28440] elevator_set_none+0xb5/0x140 [ 596.412473][T28440] blk_mq_update_nr_hw_queues+0x60b/0x1b70 [ 596.418811][T28440] nbd_start_device+0x189/0xb30 [ 596.424177][T28440] nbd_genl_connect+0x167d/0x1cd0 [ 596.429725][T28440] genl_family_rcv_msg_doit+0x233/0x340 [ 596.435824][T28440] genl_rcv_msg+0x614/0x7a0 [ 596.440848][T28440] netlink_rcv_skb+0x226/0x4a0 [ 596.446131][T28440] genl_rcv+0x28/0x40 [ 596.450767][T28440] netlink_unicast+0x8ef/0xa80 [ 596.456084][T28440] netlink_sendmsg+0x7f0/0xb20 [ 596.461381][T28440] sock_sendmsg_nosec+0x14e/0x190 [ 596.466944][T28440] ____sys_sendmsg+0x49f/0x790 [ 596.472240][T28440] ___sys_sendmsg+0x2f7/0x3d0 [ 596.477436][T28440] __x64_sys_sendmsg+0x1b1/0x290 [ 596.482896][T28440] do_syscall_64+0x166/0x520 [ 596.488030][T28440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.494438][T28440] [ 596.494438][T28440] -> #3 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 596.503035][T28440] blk_alloc_queue+0x544/0x690 [ 596.508324][T28440] __blk_mq_alloc_disk+0x194/0x390 [ 596.513988][T28440] nbd_dev_add+0x494/0xb60 [ 596.518926][T28440] nbd_init+0x168/0x1f0 [ 596.523623][T28440] do_one_initcall+0x250/0x870 [ 596.528912][T28440] do_initcall_level+0x10a/0x1a0 [ 596.534390][T28440] do_initcalls+0x59/0xa0 [ 596.539361][T28440] kernel_init_freeable+0x29d/0x3e0 [ 596.545076][T28440] kernel_init+0x22/0x1d0 [ 596.549930][T28440] ret_from_fork+0x514/0xb70 [ 596.555071][T28440] ret_from_fork_asm+0x1a/0x30 [ 596.560371][T28440] [ 596.560371][T28440] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 596.567579][T28440] fs_reclaim_acquire+0x71/0x100 [ 596.573049][T28440] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 596.579289][T28440] alloc_inode+0xb8/0x1b0 [ 596.584151][T28440] iget_locked+0x12c/0x690 [ 596.589082][T28440] kernfs_get_inode+0x4f/0x770 [ 596.594361][T28440] kernfs_get_tree+0x5dc/0x9a0 [ 596.599700][T28440] vfs_get_tree+0x92/0x2a0 [ 596.603846][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880565bcc00: abort rx timeout. Force session deactivation [ 596.604235][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807c169800: rx timeout, send abort [ 596.623195][T28440] do_new_mount+0x325/0xb00 [ 596.628255][T28440] __se_sys_mount+0x31d/0x420 [ 596.633451][T28440] do_syscall_64+0x166/0x520 [ 596.638563][T28440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.644986][T28440] [ 596.644986][T28440] -> #1 (&root->kernfs_rwsem){++++}-{4:4}: [ 596.652971][T28440] down_write+0x91/0x200 [ 596.657737][T28440] kernfs_remove_by_name_ns+0x4e/0x140 [ 596.663714][T28440] device_links_driver_bound+0x4ab/0x1440 [ 596.669958][T28440] driver_bound+0xd8/0x2e0 [ 596.674943][T28440] really_probe+0x774/0xae0 [ 596.679964][T28440] __driver_probe_device+0x1e8/0x360 [ 596.685766][T28440] driver_probe_device+0x4f/0x240 [ 596.691309][T28440] __device_attach_driver+0x270/0x410 [ 596.697196][T28440] bus_for_each_drv+0x258/0x2f0 [ 596.702564][T28440] __device_attach+0x2bd/0x430 [ 596.707861][T28440] device_initial_probe+0x9c/0x100 [ 596.713501][T28440] __bus_probe_device+0x126/0x220 [ 596.719077][T28440] device_add+0x7d7/0xb80 [ 596.723926][T28440] faux_device_create_with_groups+0x1a5/0x2b0 [ 596.730555][T28440] regulator_dummy_init+0x19/0x40 [ 596.736140][T28440] regulator_init+0xca/0x110 [ 596.741249][T28440] do_one_initcall+0x250/0x870 [ 596.746546][T28440] do_initcall_level+0x10a/0x1a0 [ 596.752011][T28440] do_initcalls+0x59/0xa0 [ 596.756855][T28440] kernel_init_freeable+0x29d/0x3e0 [ 596.762568][T28440] kernel_init+0x22/0x1d0 [ 596.767411][T28440] ret_from_fork+0x514/0xb70 [ 596.772516][T28440] ret_from_fork_asm+0x1a/0x30 [ 596.777810][T28440] [ 596.777810][T28440] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 596.786417][T28440] __lock_acquire+0x164c/0x2de0 [ 596.791791][T28440] lock_acquire+0x115/0x350 [ 596.796841][T28440] down_read+0x45/0x320 [ 596.801516][T28440] kernfs_remove+0x35/0x80 [ 596.806452][T28440] __kobject_del+0xe0/0x310 [ 596.811468][T28440] kobject_del+0x45/0x60 [ 596.816224][T28440] cleanup_glue_dir+0x1a3/0x220 [ 596.821611][T28440] device_del+0x77d/0x8f0 [ 596.826456][T28440] device_destroy+0xb2/0x1a0 [ 596.831563][T28440] macvtap_device_event+0x226/0x400 [ 596.837350][T28440] notifier_call_chain+0x1a5/0x3d0 [ 596.842977][T28440] unregister_netdevice_many_notify+0x1432/0x1dc0 [ 596.849912][T28440] macvlan_device_event+0x93a/0x9e0 [ 596.855633][T28440] notifier_call_chain+0x1a5/0x3d0 [ 596.861263][T28440] unregister_netdevice_many_notify+0x1432/0x1dc0 [ 596.868222][T28440] rtnl_dellink+0x5bc/0x810 [ 596.873263][T28440] rtnetlink_rcv_msg+0x802/0xc00 [ 596.878743][T28440] netlink_rcv_skb+0x226/0x4a0 [ 596.884035][T28440] netlink_unicast+0x8ef/0xa80 [ 596.889319][T28440] netlink_sendmsg+0x7f0/0xb20 [ 596.894602][T28440] sock_sendmsg_nosec+0x14e/0x190 [ 596.900146][T28440] ____sys_sendmsg+0x49f/0x790 [ 596.905425][T28440] ___sys_sendmsg+0x2f7/0x3d0 [ 596.910614][T28440] __x64_sys_sendmsg+0x1b1/0x290 [ 596.916066][T28440] do_syscall_64+0x166/0x520 [ 596.921188][T28440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.927613][T28440] [ 596.927613][T28440] other info that might help us debug this: [ 596.927613][T28440] [ 596.937834][T28440] Chain exists of: [ 596.937834][T28440] &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex [ 596.937834][T28440] [ 596.951208][T28440] Possible unsafe locking scenario: [ 596.951208][T28440] [ 596.958712][T28440] CPU0 CPU1 [ 596.964068][T28440] ---- ---- [ 596.969477][T28440] lock(gdp_mutex); [ 596.973366][T28440] lock(cpuhp_state-up); [ 596.980224][T28440] lock(gdp_mutex); [ 596.986705][T28440] rlock(&root->kernfs_supers_rwsem); [ 596.992197][T28440] [ 596.992197][T28440] *** DEADLOCK *** [ 596.992197][T28440] [ 597.000338][T28440] locks held by syz.2.8116/28440: 2, last CPU#1: [ 597.006726][T28440] #0: ffffffff916938e0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x419/0x810 [ 597.015687][T28440] #1: ffffffff90c20c60 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 597.024828][T28440] [ 597.024828][T28440] stack backtrace: [ 597.030713][T28440] CPU: 1 UID: 0 PID: 28440 Comm: syz.2.8116 Not tainted syzkaller #0 PREEMPT(full) [ 597.040072][T28440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 597.050137][T28440] Call Trace: [ 597.053421][T28440] [ 597.056379][T28440] dump_stack_lvl+0xe8/0x150 [ 597.060981][T28440] print_circular_bug+0x2e2/0x300 [ 597.066008][T28440] check_noncircular+0x12f/0x150 [ 597.070946][T28440] __lock_acquire+0x164c/0x2de0 [ 597.075810][T28440] lock_acquire+0x115/0x350 [ 597.080309][T28440] ? kernfs_remove+0x35/0x80 [ 597.084907][T28440] down_read+0x45/0x320 [ 597.089070][T28440] ? kernfs_remove+0x35/0x80 [ 597.093655][T28440] kernfs_remove+0x35/0x80 [ 597.098066][T28440] __kobject_del+0xe0/0x310 [ 597.102564][T28440] kobject_del+0x45/0x60 [ 597.104288][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807c169800: abort rx timeout. Force session deactivation [ 597.116936][T28440] cleanup_glue_dir+0x1a3/0x220 [ 597.121808][T28440] device_del+0x77d/0x8f0 [ 597.126136][T28440] ? __pfx_device_del+0x10/0x10 [ 597.130985][T28440] ? kobject_put+0x50f/0x550 [ 597.135573][T28440] device_destroy+0xb2/0x1a0 [ 597.140157][T28440] ? __pfx_device_destroy+0x10/0x10 [ 597.145351][T28440] ? kernfs_remove_by_name_ns+0x101/0x140 [ 597.151067][T28440] macvtap_device_event+0x226/0x400 [ 597.156263][T28440] ? __pfx_ipvlan_device_event+0x10/0x10 [ 597.161942][T28440] ? __pfx_macvtap_device_event+0x10/0x10 [ 597.167661][T28440] ? lockdep_rtnl_is_held+0x26/0x40 [ 597.172860][T28440] notifier_call_chain+0x1a5/0x3d0 [ 597.177976][T28440] unregister_netdevice_many_notify+0x1432/0x1dc0 [ 597.184394][T28440] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 597.191155][T28440] ? netdev_upper_dev_unlink+0x99/0xe0 [ 597.196608][T28440] ? __pfx_netdev_upper_dev_unlink+0x10/0x10 [ 597.202585][T28440] ? macvlan_dellink+0x3e4/0x470 [ 597.207518][T28440] macvlan_device_event+0x93a/0x9e0 [ 597.212713][T28440] ? __pfx_ipvlan_device_event+0x10/0x10 [ 597.218359][T28440] ? __pfx_macvlan_device_event+0x10/0x10 [ 597.224088][T28440] ? lockdep_rtnl_is_held+0x26/0x40 [ 597.229285][T28440] notifier_call_chain+0x1a5/0x3d0 [ 597.234408][T28440] unregister_netdevice_many_notify+0x1432/0x1dc0 [ 597.240821][T28440] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 597.247582][T28440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.253661][T28440] ? __kasan_slab_free+0x5c/0x80 [ 597.258600][T28440] ? __pfx_veth_dellink+0x10/0x10 [ 597.263620][T28440] ? __pfx_veth_dellink+0x10/0x10 [ 597.268653][T28440] rtnl_dellink+0x5bc/0x810 [ 597.273242][T28440] ? __pfx_rtnl_dellink+0x10/0x10 [ 597.278454][T28440] ? lock_acquire+0x115/0x350 [ 597.283129][T28440] ? __pfx_rtnl_dellink+0x10/0x10 [ 597.288161][T28440] ? __pfx_rtnl_dellink+0x10/0x10 [ 597.293178][T28440] rtnetlink_rcv_msg+0x802/0xc00 [ 597.298111][T28440] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 597.303222][T28440] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 597.308676][T28440] ? __copy_skb_header+0xa3/0x4a0 [ 597.313700][T28440] netlink_rcv_skb+0x226/0x4a0 [ 597.318482][T28440] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 597.323936][T28440] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 597.329226][T28440] ? netlink_deliver_tap+0x2e/0x1b0 [ 597.334424][T28440] ? netlink_deliver_tap+0x2e/0x1b0 [ 597.339634][T28440] netlink_unicast+0x8ef/0xa80 [ 597.344401][T28440] netlink_sendmsg+0x7f0/0xb20 [ 597.349247][T28440] ? __pfx_netlink_sendmsg+0x10/0x10 [ 597.354523][T28440] ? __lock_acquire+0x747/0x2de0 [ 597.359455][T28440] ? aa_sock_msg_perm+0x144/0x210 [ 597.364479][T28440] ? apparmor_socket_sendmsg+0x98/0x360 [ 597.370023][T28440] ? __pfx_netlink_sendmsg+0x10/0x10 [ 597.375300][T28440] sock_sendmsg_nosec+0x14e/0x190 [ 597.380339][T28440] ____sys_sendmsg+0x49f/0x790 [ 597.385101][T28440] ? __pfx_____sys_sendmsg+0x10/0x10 [ 597.390381][T28440] ? import_iovec+0x73/0xa0 [ 597.394882][T28440] ___sys_sendmsg+0x2f7/0x3d0 [ 597.399552][T28440] ? __lock_acquire+0x747/0x2de0 [ 597.404489][T28440] ? __pfx____sys_sendmsg+0x10/0x10 [ 597.409680][T28440] ? futex_wait+0x2a2/0x390 [ 597.414213][T28440] ? __fget_files+0x3a2/0x420 [ 597.418899][T28440] ? __fget_files+0x2a/0x420 [ 597.423489][T28440] __x64_sys_sendmsg+0x1b1/0x290 [ 597.428432][T28440] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 597.433895][T28440] do_syscall_64+0x166/0x520 [ 597.438487][T28440] ? trace_irq_disable+0x3b/0x140 [ 597.443523][T28440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.449584][T28440] ? clear_bhb_loop+0x70/0xc0 [ 597.454259][T28440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.460146][T28440] RIP: 0033:0x7fdc505a94d9 [ 597.464557][T28440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.484157][T28440] RSP: 002b:00007fdc51418028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 597.492568][T28440] RAX: ffffffffffffffda RBX: 00007fdc50825fa0 RCX: 00007fdc505a94d9 [ 597.500533][T28440] RDX: 0000000000044090 RSI: 0000200000000100 RDI: 0000000000000005 [ 597.508499][T28440] RBP: 00007fdc5063804e R08: 0000000000000000 R09: 0000000000000000 [ 597.516481][T28440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.524469][T28440] R13: 00007fdc50826038 R14: 00007fdc50825fa0 R15: 00007ffd3c824568 [ 597.532538][T28440] [ 597.607938][T28445] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 597.649622][ T5980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 597.758769][ T5981] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 597.868984][ T5980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 597.977824][ T5992] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 598.087657][ T5989] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 600.217823][ T5981] net_ratelimit: 18 callbacks suppressed [ 600.217850][ T5981] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 600.328032][ T5981] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 600.438413][ T43] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 600.548242][ T43] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 600.658315][ T5992] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 600.768255][ T5992] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 600.877635][ T5980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 600.987423][ T5980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 601.098018][ T5980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 601.218049][ T5981] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 605.237990][ T5981] net_ratelimit: 35 callbacks suppressed [ 605.238017][ T5981] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 605.348102][ T43] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 605.458755][ T5981] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 605.568104][ T5992] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 605.678653][ T5981] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 605.787185][ T43] bond1: (slave ip6gretap1): failed to get link speed/duplex