last executing test programs: 2.901626653s ago: executing program 4 (id=7745): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32=r1, @ANYBLOB="0a001800030303030303000004005a8020005a8018000080140005000027"], 0x4c}}, 0x4040810) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r2) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x28, r3, 0x1, 0x80000, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x28}}, 0x40000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x3d, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xc7, '\x00', 0x86dc, 0x3, 0x100, 0xc}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x50}}, 0x4000010) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c661a26bb27ebacbff0c1776400006a", @ANYRES16=r4, @ANYBLOB="00022dbd7000fddbdf2510000000080032000700000005002f000100000008003b008e00000008002b0004000000080032000300000008000300", @ANYRES32=r6, @ANYBLOB="0600280001000000080032003497000005002a000000000008002c0006000000"], 0x64}, 0x1, 0x0, 0x0, 0x20000040}, 0x8001) 2.783677423s ago: executing program 1 (id=7748): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020600) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x1000005, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0x400, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x82, 0xd, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x84ac, 0xd9a, 0x5, 0x82a2, 0xfff, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x200, 0x1fc, 0xc5c, 0xffffffff]}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0x2}, {0x0, 0xa00, 0x40800000000000, 0x7fffffffffffffd}}}, 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x4, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@private=0xa010100, @in6=@private0, @in=@private=0xa010100, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}}, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000005500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x3a38, 0xe, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3a18, 0x3, 0x0, 0x1, [{0x1540, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x29c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x250, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x240, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0x23c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xec, 0x1, "b58fe9b7b8d9966b729d42dfe6142270730e05037b75c55e61964bda57bbd7705051cbd6f5f183830d67d662f4b57d7be1c5a1c71d07a65a70ad0472258a9557e22edc4b1234a1536b214225d03ec592d9666d1e5cde190be238017bfebc40bab3a16c6cfc4248f3ee45335be7490be8fdc090ca73c63d9e8e6101c6ef053fd32dcf4d272c292bf525cfe8a0ed12312b7461539f829a6868bcc6292aba82542607d4696c33881fb88e8ad82c1e1b5be9f3d4276f1940ad00fca1864fda79f4db7591c4a86ebf29108a86dc9a2d8141f4b8ecb05bbf45dd448d6a55133f7acf6fd16395064b1292cc"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x56, 0x1, "7bfa2b1acfc85bdf7c4d0eea1996f2c3107ac0f0c9225c3bcb26091b5cb10129ff7e1f44571dacba3264e0d8087b69721a448a7712e6332777fdf9404b096da7784137bd1b733da289d42a7d3a21807c05e9"}, @NFTA_DATA_VALUE={0x3f, 0x1, "9cd14bb5b10023b8c676ac313dfffbbfc4f48e4ba3c6da50a710d3cc68a949c7f11a200245ee3c521618e2210b18dad0fa713351dd3028126ee220"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}}}, {0x38, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_FAMILY={0x8}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x18}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_SET_ELEM_KEY={0x1188, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x8b, 0x1, "9ab5636c33ec509fb3815a6ec9a72094431488a8fbbae5cf326c146af41d8317676499c176dfbe36413bec72d3c48038725aacb1f2c1221756e147b22141f87ee3ecd66cad08d4628500ca02a2a9b8796c7cd61c72607fb5f21820cdfcdccc82ff5e6f227e53f1fb0c95cec8c9f4670ea9a25699983cf42a222433f51cdcafe3574b219ff695f1"}, @NFTA_DATA_VALUE={0xa0, 0x1, "c9517b988467366c9a53a6e66034b3988d5b3ece823057bba7f71b699eea39f570f1120d3b9f6cfae8e5244ee9ea81393b063b563258b56e1684a0612abe31adace5039cc5caf052005e6e67d2464c3172924855b7597d417749a9fcb94f9f3be782c4949aad6c094c45d7f02f735c7a6162991777641c62a3217f4c4541c67a3410c2670e4a13ecbd5cbc98912f0ed7cd3f30fbf0c48a9ab0830c34"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffff}, @NFTA_SET_ELEM_EXPRESSIONS={0xe0, 0xb, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x5b, 0x3, "ef4f4384ef0c3fc060e083ceeb4c0964e7df8a4d56e3b8753bdcaf832df112f2b218d846d2099a3392e940f1a8a60daa3a7603810a781bf312ffdfd3a609d8cd3ac2c1fda399e619be125dff084b2212ea0929034c91aa"}]}}}, {0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_TYPE={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x15}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz0\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x249c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x88, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x84, 0x1, "50aeb8729995eee0e5223d62f88c3220d7918c45832a66144fe2afb2522387ae52985f19f54d9500b9cdabae93fc9907bdf06ce35c32c15f39c0036dd761c3ac0d4db453daf38ecdab90c3c0dabba780e7ef746034cbcede6a14cdd903c61625e7d85599baeaa8f05f7d9bcecd6a04133d9528011c85596603e56880d6ab7765"}]}, @NFTA_SET_ELEM_USERDATA={0xe5, 0x6, 0x1, 0x0, "2bcc87385b7f5c40a4d94bc7bbbaddf104ad450f7e5a2f362b678964f926eb5b4b4f212bda36f2e40e3bed518c118f1c2899b16204adcb1f05574e3ed26a6a7aa0fd96fe28bddce2caf158a86ad162c92570ac157c85e6826223f6326f2f9967a63578186da76adfa4fb6ca74dec44ad06db73264dd96d96934696b078380d2729800c719d09357c4760c0ab995cae2dab1d1ef4c104925340df45128994f3dda5b5937f1481aa48e8bcbd2cc3572ac3ad62a1af02f975415d38de7856a8b9e13a2383d59a0b01e525d361fda36fcf20167c2f7a5ac6b180c1ac0426035aacd5b3"}, @NFTA_SET_ELEM_DATA={0x5c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}]}, @NFTA_DATA_VALUE={0x38, 0x1, "198ae3edd7da8bca27fa00af8c19db3f3b83bb8b08f95dc9e29b93232af64cc7e2e824485b2616c197c42d610ded258dfbb30009"}]}, @NFTA_SET_ELEM_KEY_END={0x1fc4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x36, 0x1, "41412bf0512d10ab532ca4f5e88f43ee2a278c175ba0a34d4db3d8ccd628fbe13cec9d9df74e7300937a49c17f9d1e38b656"}, @NFTA_DATA_VALUE={0x1004, 0x1, "09629b32583dc644d66a3b533d5c8806f2a668ee64f8435743bbe6fabe46f1a1f157246b786f2e311b235c41e855bdc72f2b6242126f9e65378caaf3002eb3afd92620f891c6c50fa3391272c1305d0375fde1fad8bb410b092279a34a68c302838ef72b6c028de7ac5366b272825b15e6fb20f3dac81fca7a87d024ed21184f1b43a4a49bcaef0c5f80e83ffff1d2d20b315a3992a95bdfbc00bf68c59c7879513d00fa9afd16caf5152f581f6b2fc49a723c75362dc4b5cf7321db71c0b7b4ebeb0567cd036bc08fe91e993c771d285cb6c727ae527423421a82c50c9c1d075c5bd1916bbb560c4b9a3af786d3b29c212f165933303ee42379cc8770eb00aa90d5c08c68011b186902ab8cb53d2aa003ca672e85981d0b5760fe2e30e2111b86072812364cb50183061210be6ca89250f45199acd6a70caa71cb16232279409cca3764283743ff63dafb791316abe22a34ecd1795372ca35a793bf4874ff7cbd11c97a2439b166f24a1315e6585e811f3117f97542eaeee4b57bb8036150c3cb1cc0db3e650c1ca8c2f73b16c23e98ee2ce5f60a76a25a41672d4bc3ffa0b98d1e30c0e1e4c8d56800cc8c5df9b5025d3f15da86652410caa4a149335ea7b27f267a36d300105f49f29e172839a3a0d934462b7d8e9b30eef1f70cbeca73d0296512451c04aa7bbcbf83d3ee63c281d06311c16c485fdf2b149d7c8e990b1f2acb463ec69bc1df9c956fec428ed8c3f21ac0f906d0e79a64a076fd38328463e244f6577fb2a9c85f8305f416bf260046ad933f6dd7f0024e37dfdfe7e7678ace3c92ee91fa49a7a024ba8d96c041b1f7f2b5f11e80f6ab4e40638c869525b444c566440f3f97493571fad11bd07bf22225002d736891f422d845d25bd7f950d9449c8f68a374061240f6640dc02980ef2d5fd34bdccb44a952b5f76ac97218be0f2577bcd085459454d9ee7c200215b66e18097b22f0d2f8e2a317f521fb3991546a81dc134cd164315713cc8f738eaea01954fef2cb8ae71a178b394088bee47dd9e1f66d9bfab1d630f6fd909c7f01849ea5ef78e4677b7b27496f67dd13bfd15eacbe821254f45b6cbde8bd5ea69266407d6c8a509053bd70e1acfa42c3aef7828dfd729176848339b375555be019a96ca5a9f4d6ebe2e248119134c6825b173ffefbc4e43b9d882f65b2998389bae596c61ed0df6d216dac2b79966bd187b77e1df2399860aef9cc19cab036297fabf4ebdd2d4beeaa339f2bb42dec01fa4b383679286915fa35e9033e046a4a452add496610b01f77de561a868701c54a2692870b8edb2e1fa4ccc90e15ac9c4cabe09eca2f9bbbed281321637c9dc0277fe83c422c89e21c0cf78a6f53a31b6aa84ee0c4c7023086e0e95a751c533eaa6e7b57ba0a0f734dde552d4d77d977ebc973e35798c8dc61de22f3f59d492a9d32447f89b74d4c6748088542256a3a53d4abe411e393ddf896a4a01b8f70decd0c9d137d7ce99983f1d5991a4f9a1bf7f422001c98a380677b8ff87de92584462cef88a9546f92ab66b5377553b697e56dd8ac465aa40f503b05bdffbdb9ae5400235c61e0af7b029059eeb951595dec48b084eedad4fd0124f7054b4e14186e7503739e87f5aa72af28b6eada2d32af8d8ba50e692bb74cd914d1eba68f3987d7196f43afb85144326cecdac838f8b8ff18b008013a296e8231525f33c9f162b2f0f0de6278d02ce7f92ff1de6ec0e527ad5ba4d420abba61de536169a37d5f0737b78438cd14717d44f71b9e9c426c0941c734854fb8c603d6bff7c08f9886104130b4dcde5c303bcc9e14f8b30099b53bbfa17989462f0b5ffda63e5efb8ebd5688f75db5f80f4faa70308f1d1e7ee7619b064907d1b39a7c0edaa20e7e99d0d5196db793545798728d891a682708e4d1de018dbbea0ed2af259f526775684319972e59af986abdf8ee7a5d634c15957e8fe6b1710339737106e8fc1407546fd6adf77f5158813bd86c5aa62e2dc2da1aac687473d88dbbc1b9ebb15c8949ee8b876af2a5c9407b3fc66a6e304a1e1d9d383f231cd9bef05ee583469ac0af361d0beaa062e9233b9bfc03955d489d569ece1d2a512304cc12ad5cdedf680b1d5d26840de91be1a4651d58cbb3e8a73d509dc7345745f2c897cb7e1c64e769fe914c560fb36e5d92cde4d4a45cdc4366af0b5f5097cb84445d301ab1b8da8081f27eec2a5ca6522695cf504959c9a3dc9d1a4ffa8e3bd8f8aa208d83cec88cfa3e1ca615bc55b009c8ca86b319f9480db42cb13593f532798c682bd344055a4d645b964eda22331657f24a098cba4914282a7bc236a72f0f5d137eeb3b3058b2a8fb0bd04bf4f40e0c8c5683180cfb776ff3469a00b9d411335555802b7559b263c401d7061e3f42f3360da24941f7229ad2e20e02f60446393e84241d844a417aff18ef9f1e6a18df1736dda3870960bb0be6be9d630e1a41e74a17aecbbea0ca3c5613d5c3d32d83fd878a108ef696c36c90b0c536f5f57550c3e7043ac0c0ac944d7f859c785eb57293b7151ce781af994e903822f08fe52c189e95bf8e34578e6dd820c4b27d734e0e89729e012ddd97520cd616083079f738f4c6b8d0db9321531d0e00b91cf0c5be2ac53bd2cec173a1f5ce825886c9bf8a164b9f0a893d69099091c430ff18a061ded3ddbb960c06d42095092e9213fe31a9041b779f9c1f8830ba45f7d9808da39c09ba17ba4daf4412a2ff8f711de62e6401b2ddd191dcaad9ee5751479ebc70bea8335a2b916452bcc215f1ee6892897417b18510bac92c91a76db3fd35b49ce870321ac9d061b089f2d891dc1ec8144be5f8f6e00eb38b37171e9ee6879b8e794571a5d94d32b0c9ec627f94e66eaee4145a7d821e2e5e367a06b234bce0bff33222585ef8ecb86a58448cd64439b82d78c553048c9a39b0795c5e8c8be8c175e632162c0375b8bffb2590c52bd02deef27dbc5f5462a43c28b7bb6e4ed2c2ecdd6ef521795b56ab6201c850e86fe123112e3a631b178255632c15256b9d64e7f28f06ba949cb9a15b15088d2f325219b9545fad15f93130c7e730c36164488b73a8f815baeb19176c933ea1f90e10716496b456d6f4c401675209573ca399475e49bf91fe43113ece20d0deafc990b5c30281be8627b32cdff52b49e1b29c152e60c6ad3b368c6338d67c1111b39fd818c9e5c3c4dc31fc7ee6e79e68754b2d58e17065d3544d8bf1ec30d13cdd1cb9ee9e23089d4e0ab7e72ba472caf410f7260b7d1854003d612c7f4deb734005dd787d64d35d11db5788c25c6bee7b165cb582250f107258d71388769f73d6007040a4d3e06859898d82ce5213c3b35b3d7de81480cbe5136a721dad30be11bac7279d2fa2b5c6dbdc47da607dc27b26f73ff8b0e9fd69a8bb7854bbfb51833cf9a780c45d480275da650e937cdc3ebcc5b8ba823d4468060847cf18aaba9a590f4343838c370d09281725b02f66b838d6ac366576c978e99284c0d9d217c7b9e4e769d2fcfa08d3a302ff20e87f11a863927e998ec55b4848360d883f47125ca131a60062cdc46747a830affd9eb44fa8923084337209efd4fb0d58048496da4cdf35b201417e2e3be24333ce8eac9bc4ed49cab46def0accccd91a0d05546828a9ab1c37e18191e4cedf7c829f10287510924635340d9bce301a9e7b3402c6fb54ab6233c29caa70f6b26efe3b015045e1e67e2013182375ef0162398271976f97fa6a32ae2a1b8e7124516a117e05ecea7ffb288e6d303320d4b1a4b67ba99fbc93fd3c83371a2217d6e047e313f9222cbdacc7d301c170fff5d4bf4c092cae43751ad6a0e9a42ec0023d667c7d86367e3964fce78eb86b2adf76989e48db4a05e699808e4ccd4dbf9ae644707baeab74ed236799b4a92fb90b8c4f1bd22b61b8f22cae87f78c103066d1e9a4909dcf4929bcba4ee7dbd3dae7d1a90baf25b33f47875a27360b5726056594a81ede39969ec6b14453bcfd5cb321e3981e615ec76e0850dc201ceac1f722fbc0a16a97887059586d6ee4c9ba4bf08d353ee8413ff5550b11660a19b518b907f07f301fdcc510368810289b5d2684aadb57bb3fe405ef1b6e1dcf0aa094742d2d9269bd7b1412bf32eb8b470dbe0fc5aa165c7d694e53583a6ac5b9f67d3f9f20cdd75e21e1a30eafdc0e2eaa8e76541ee4843ac7ff9e15215c8f443f51099772a746aa9757f5e6bbb354174b6d33fc783644add4aedc1ac3c26a00468b5d3913c5401b43b5d097ea370745a27b9538c8ac75562c384b6c6a0e8f0f3d4d87698ed797e31c3a3071178dffd3df49108c84fd9fe113cdb5f3c75710f2f98a1738614486d2eaa4be51d211c98f17ffd77d5b6103c5a2699ac1b918f7bffc7c9ca0f54082f4dd61fccdac256852f74a376a0e1c439b3e89d2261cd4b58dfa6a488f4285e77b72c329c715013a06270d1c3d9dcbcc0f548fc652b5b64b0bde91f51257761ca888aeb95c0b79ea9ce4baa1798296bb1369974cf440c4d05a278a40afd5d38c6c0faf838766d538f5d495f974a2e6c92c09841565ab5a4d05e0198cb2566f296520451fb12e44d17e46a28b8b090917dea5028aa410d742c53b9dd7447b7d222f2dcfd66b88f4f68bd4f73014b4bd64fcaf41f253ce04591e1c82c3794bc2cfa113d9001e6e2c7f8e05110cd472bb86da583611d05abbbcbfd61daf8d090a331e1b78ca9c8280c33ad26f22b5813c8e8bb884244d9da05f8829fe4447f90a0d77b3c6d034766347b1cb89ccb87220a23ae70a0f83c5383599b9c934dbfaabec8cc4fb43210ef7a88f74cb13543f673826c2fa1e50fe2058610b8da1c45b7c0462ad1b400ba672b3a8bfff748d31b8d5e41790ff967c2863ac9406b6621bec2e4483c2efba63258e8ba5181776edbe15cb6265ba95ee70eeed0d8d9de9f3d206a5f21abb9d75d3f5aa2c64c4670a11ae0d6b10618ecffe4f7213bbd0b81e72c692f3b8c2bd909c1f4f834b63825ad7fa8c7d812810d54daeed08149750e28c1b86dd524fa230dc3304ad93d7e15dd0fc96a1b1ee217afd71bfe00ea97e7bb9651d324e1dcc84afd2072d0a1a28c34eb808ccf8938d5fec8109c530a9367bc158d240891b0f84a5e60104bf360cf36f6039affe333b43057284fe52f25b900903be75177b2611c40c15e2ca55b8d99a8dff597aee0b791eeaa21a8c047598c53a23ca804cf162c7b07061e20afd265e41a7cb48dcf9239d31b0245ba069ceb4acb245135eabbbe57b5bf6cb70c47e5e876ccd56e90c8f18b288f5eea759fbd439888f8b2ccf96297616fb2acb3ab5bfe15a35b96c7054c1ded43b21771bde26ba37bc246c6d07b99a332db534524ed9862f2a40ad038160f646d9c4fa3956e6440a3b01088fe60e43828301883a36abb9250bf3b7fafc7de2131e39452d5186361ddcc1621c664c7cb7616b99b28893970a1fbcf22ea4c6740ea5054f96a5e67de6d7a3631b8255775501f5455ef3e0bd071333dde913dec40284c73882cfc2117312af1da167c29478960b26641616e35cf586e8d6e2cd84e33392575fc30db8a9782416718c3c59bd123d4185b22750f3a7efceea91c150da6ea529040733d6f46d9c7c535d6a4efc39f114128a70ef93bc559723e4f17e34242aa76b706beb4c671178f70437a826530942e6c134fbfc82addc2bf0ef8a81a39def27b7b9228f7576c413e208699ed4b0aea9d3b30bd1c7bbbae9956b662e39e317503e7c1d0af21afa102810eb9c5ef13ae7f76bb2a76ff6"}, @NFTA_DATA_VALUE={0xf84, 0x1, "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"}]}, @NFTA_SET_ELEM_DATA={0x308, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc8, 0x1, "2663eea73a3232b9d422a008e578b29d1e866412124722dd518d159398cc75667da3a2b7e922cc49f42f31a93646dbb2ec2054d9bdf5de188dde223d943b931fe8b108b2630a8fc1edcfc17b996e3fc56102c1bab46d0680d75c1f847b02fe179148cf2aa1eeda7090069291cd9be36d65d1e1d2ce7db6e84f4f6be103263af516a57a810678c2d5a1976862d56972f59d69390fc8b3eb57647e9c92bcca2eed51540d7f019484d4c4e1605cf1089746b84a9bd77472817a8616e0a9a9eb4352ff2e9c44"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x9d, 0x1, "84f4f964b92b821a169b62f94aa0d1617d44ea398eb78c4426e7f601c978eb85fc41ab27bf1850eae0f2a53c6fa3718e524fa02790e59b320539c4d4568848d8a5262b58bd376d47f066b47ba6dab86b3a77d69eb52f0ae6ccdb58398ced6c7c76c32631ddadf48b4cd5c7d56724b20f9dcaded989f1c46641eeb9be23271139cea1f13cba921f61a3afcabf7697a482aa8e65f30ffd9e392f"}, @NFTA_DATA_VALUE={0x42, 0x1, "8ca2834959af877e0a681be433e3a7808ea4d07925b5718c956b4983817025e1599929852ea6f3a6dc838ffc75af962f247529d72b1c1a595caf1c94a364"}, @NFTA_DATA_VALUE={0x3c, 0x1, "559fff540715488d4576d80635d2ae9140bd847707796ce8441598201d4b0ed49679f59d49f782b35cf127e10e3550650baa600f3dc27d0a"}, @NFTA_DATA_VALUE={0xcb, 0x1, "6a78326574dd338b2273fec9ef9b0ac6553f920bc089c066766a55bdc8eab6051c493f46b33b084bff616f1da076817f8663804b57a72e84f8552e7a7ce6acaa035e91a11712a8ae56c409d628f9b5737004f8f4c13b1e300c7c549b70d265e141ea77162f06b2df2212cf4b6b015ac65f5a9a04da554ce945daa9b6c9cd6bb68124913705a4ea116052b827af6ecd3e88e031b45143cdd15338803e8382e80604d8ae21d1ff686b3279d7456429eb72fe686f404bc3545e777051e3917baaaf883c9fd55ead34"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8000000000000000}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfff}]}]}]}, @NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x3a80}, 0x1, 0x0, 0x0, 0x8014}, 0x40) 2.654661764s ago: executing program 4 (id=7749): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x7) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4003, 0x1}, 0x48) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x87, &(0x7f0000000480)=""/135}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0) 2.65137679s ago: executing program 1 (id=7750): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="40100000", @ANYRES16=r0, @ANYBLOB="01000cbd701004f7ffff04000000080009"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9403000010000104f04e93294c00000000001700", @ANYRES32=0x0, @ANYBLOB="00000000000000001400350076657468305f6d61637674617000000005001100050000000a0002"], 0x394}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x1c, r4, 0xf03, 0x70bd2b, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x0, 0x4, 0x6, 0xd, 0x8002, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x50) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000280)={@mcast1, 0x0}, &(0x7f0000000300)=0x14) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0600000004000000040000000a00000000000000", @ANYRES32=r5, @ANYBLOB='\x00'/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="040000000000001000"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000180), 0x0, 0x8}, 0x20) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000001700)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x205, 0x0, 0x2}, 0x10) sendto$inet6(r10, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r11 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r11, &(0x7f0000000000)={0x2, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x9, 0x12, &(0x7f0000000f80)=ANY=[@ANYBLOB="18000000ff7f000000000000fbff000085100000f9ffffff9876040008000000851000000100000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70200000000000085000000860000008520000001000000851000000100000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000e77b328d9ca9766f8a0400000034330000850000008600000070560c"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0xd4, &(0x7f0000000640)=""/212, 0x41100, 0x20, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x10, 0xffff, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000380)=[0x1, 0x1, 0x1, 0xffffffffffffffff, r8, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x3, 0x3, 0xf, 0x1}, {0x4, 0x1, 0x8, 0x9}], 0x10, 0x7}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r12, 0x6, 0xe, &(0x7f0000000740)={@in={{0x2, 0x4e23, @private=0xa010101}}, 0x0, 0x0, 0x2a, 0x0, "955b94b19a44f02aa23c6a4a3c6ec11144bdee5d5ac0d8cb63051a062ed1c96567b1db8c7c21607784474bf11312bf3fcd5722a45429b214a097963a1a5644d190193a1ceb23ed9bb6d25ad252bd381d"}, 0xd8) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r14, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) 2.33051376s ago: executing program 4 (id=7754): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x5, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1820000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000001500000018010000716c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.287867582s ago: executing program 1 (id=7756): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000140)={r2, 0x9, 0xb5}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {0x6, 0xffe0}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xa, [0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0xd, 0x1, 0x0, 0x4, 0x1], 0x0, [0x5, 0x4, 0x2, 0xf5a5, 0x8, 0xffff, 0x9, 0x8, 0x0, 0x0, 0x0, 0x90, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)=@ipmr_newroute={0x30, 0x18, 0x100, 0x70bd2a, 0x25dfdbfc, {0x80, 0x0, 0x0, 0xd9, 0xfe, 0x7, 0xfe, 0x8, 0x200}, [@RTA_NH_ID={0x8, 0x1e, 0xe}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4810) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r8) sendmsg$NL802154_CMD_GET_WPAN_PHY(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="6d932bbd700000000000010000000800030003000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2.157003614s ago: executing program 4 (id=7757): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x2, 0x0, 0xb153, 0x1, 0x1fc, 0x0, 0x5}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b00bda5663596359ccb000000000401045a0b09", @ANYRES32=0x0, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000001580)=ANY=[@ANYBLOB="18080000ddf7ffff000000000000000018110000", @ANYRES8=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000739af8ff00000000b509000001000000dbaaf8ff10010000bf8600000000000007080000fffdffffbfc702000008000000182200000000000000000000000000000000003366f49c10cc82cc1455ce717279d3cf39377756882ea6576c143ace4ad8bead2702ad534de98e31e327a3d1ef538cd53cf4cf95f348123c3acbc34045939ad0d9e2a7946eaf15e9b05a14", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000010000008500000007000000b7000000000000009500000000000000"], &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) shutdown(r5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) shutdown(r2, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="010000000400"}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000013b0101000c498faf6d00bf88ea0c7490fa000000000000"], 0x1c}}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="1e00000008ffffff0900000008100000", @ANYRESDEC=r1, @ANYBLOB="01000100"/20, @ANYRES32=r0, @ANYRES64=r8, @ANYBLOB="010000000300000002711f4367ce026a930000000d00000000000000"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r11, &(0x7f0000000440)="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", &(0x7f0000000300)=""/156}, 0x20) close(0x3) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r12 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) ioctl$sock_ifreq(r12, 0x8948, &(0x7f0000000000)={'syzkaller0\x00', @ifru_settings={0xe04, 0x8001, @fr=&(0x7f0000000180)={0x2, 0x7f, 0x1a8b601c, 0x8, 0x800, 0x7, 0x6}}}) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) 2.12844173s ago: executing program 2 (id=7758): bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="4dc07f94716330", 0x7) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111500008000000060000000000000095"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fb", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r7], 0x54}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r10], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000110001002dbd7000f9dbdf2500000000", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00'}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) r12 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) accept4(r12, 0x0, 0x0, 0x80800) 2.088705031s ago: executing program 1 (id=7759): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={0x9c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_EXPECT_MASK={0x44, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x98}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="46cfbd7307140000001000010000000000000000000000000a2800ff00000a0101000000005e1affd5020000001000010073797a300000000008000240000000032c000000030a01030000e6ff00000000020080000900010073797a30000000000900030073797a320000000014000000110001", @ANYRES32=r0, @ANYRESOCT=0x0, @ANYRES16=r0, @ANYRES64=r0], 0x7c}}, 0x4) unshare(0x2c020400) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x20, 0x1405, 0x621, 0x70bd26, 0x0, "", [{{0x8}, {0x8}}]}, 0x20}}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x5, &(0x7f00000007c0)=0xe0, 0x4) getsockopt$inet6_tcp_int(r3, 0x6, 0x5, 0x0, &(0x7f00000009c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="2d72646d6116"], 0x6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x4000) r5 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r5, 0x29, 0x7, 0x0, &(0x7f0000000100)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES16=r3, @ANYRESDEC=r6, @ANYRESOCT=r5, @ANYRES8=r0], 0xac}, 0x1, 0x0, 0x0, 0x10840}, 0x20048001) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000008000000000000a5c000000060a0b0400000000000000000200000014000480100001800700010072740000040002801e0007401d567dec59152593973cecc53736e4457241be78e57c658f00000c00034000000000000000030600074003070000140000001100010000000000000000000100000a0000"], 0x84}}, 0x4048010) 1.927107558s ago: executing program 2 (id=7760): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x24000000) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001200192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x4, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)={0x24, 0x4, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) unshare(0x400) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0x8004b706, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'}) 1.764788558s ago: executing program 1 (id=7761): socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x266) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000600f5fe009d2fb112ff000000008a151f75080039", 0x27) 1.530830432s ago: executing program 0 (id=7762): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r2, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000"], 0x54}}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}}, 0x0) close(r4) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8fffdffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x4008040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1.357536227s ago: executing program 0 (id=7763): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) syz_emit_ethernet(0x3e, &(0x7f0000000a40)={@random="9db99c8b9427", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x8, 0x3a, 0xff, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, {[], @echo_reply={0x81, 0x0, 0x0, 0x9, 0x4}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r1, @ANYBLOB='\x00\x00w\x00\b\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.263331402s ago: executing program 4 (id=7765): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x10820, 0x400}}, 0x20}}, 0x4084) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4000) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x34000844}, 0x200c4094) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00'}) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000140)={0x0, 0xe, 0x9, 0x6c2, 0xa99e, 0x6, 0x7, 0x4e0, {0x0, @in6={{0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x2, 0x4, 0x4, 0x9, 0x9}}, &(0x7f0000000080)=0xb0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)={0x6c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x31, 0x115, "7ad84b96849fd267deab5d1ea8783be5a7d602ee7344d0c6189125fc192f5f1af41295b0d3e2b6c816aac46f38"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xacc3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000300)={r7, 0x89, "bfb7db8466d4736226d1b900f74436b761f69644f8b27e8aedd42fa51bad462338c1ce9fc271b5710b88a19b1991d48069a7a597b5256f3d584b778bbf25b7cc438cf1a78894e2a931a9d041010abab571d07ce3dfb690942a7e844d7480d5048e3ce77e787a49c73c8c6b3f2d046e133eddfe2c55adfb20f3832a66fa01e62d77d7542b2565e956f7"}, &(0x7f00000000c0)=0x91) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x80800) r10 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f00000002c0)={0x3}) 1.250355965s ago: executing program 0 (id=7766): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (fail_nth: 9) 872.906094ms ago: executing program 0 (id=7767): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) r9 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000380)={{{@in=@multicast1, @in=@broadcast, 0xfffd, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x1d}, {0xffbffffffffffffe, 0x6, 0x1, 0x0, 0x0, 0x2009, 0xf0e, 0x10000}, {0x3, 0xb, 0x4053e5, 0x20}, 0x8, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in6=@remote, 0x1, 0x32}, 0xa, @in=@empty, 0x3502, 0x1, 0x0, 0x0, 0x2, 0x1, 0x3}}, 0xe8) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r3, 0x5, 0x3, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r11 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r11, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) sendmmsg(r11, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r13}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r12}, &(0x7f0000000200), &(0x7f0000000280)=r13}, 0x20) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000006c000100"/20, @ANYBLOB="00000000000000001800348014003580"], 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) 858.078874ms ago: executing program 2 (id=7768): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9febbb0018"], &(0x7f0000001640)=""/197, 0x45, 0xc5, 0x1}, 0x20) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="940100002e00010000000000fcdbdf258d01f2800c00180008ac0f0000000000520f945c3da2c10fba1479004bee683e9b62e8095d27c4c0650638b96b5d9fd320efc7451c5eec979ca6ee09c1719aead4a4e84fe311d9582e49c604c18c225161cab9936d423b9ffa41c4e4ec4d3be23d420ef88599a2a9916ef668396d724b7810b86bd53aca276f1111a6ede69a23a3678558ba6c98087f91b1a564701d7aa1994a671f336bcf515e62c8fc5e21d884f250bb2d6f67d29d6fabadb107d0def49c88ea04ab8bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be820400e900"/404], 0x194}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800010000000000080003000100000008003c000000000008000100020000050000030004000000000000000000cb9d08a1ae8aa809af9026438f6100000000000000000000d5e5432b60ca6240577cdeae888c6b198274898099686d5a746105e8cae122a0f176498c92"], 0x38}, 0x1, 0x0, 0x0, 0x20040800}, 0x4000800) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000013000500000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000000c001a80080005800400"], 0x2c}}, 0x0) r4 = socket(0x11, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r4, &(0x7f00000001c0)={0x11, 0x0, r7, 0x1, 0x2, 0x6, @broadcast}, 0x14) close(r4) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, 0x0, 0x0) 823.850334ms ago: executing program 1 (id=7769): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0xf00, @loopback}, 0x1c) 720.96999ms ago: executing program 3 (id=7770): bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="4dc07f94716330", 0x7) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111500008000000060000000000000095"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c7515092", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r7], 0x54}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r10], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000110001002dbd7000f9dbdf2500000000", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00'}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) r12 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) accept4(r12, 0x0, 0x0, 0x80800) 719.709996ms ago: executing program 0 (id=7771): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(r1, &(0x7f0000000000), 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000340)='cgroup\x00'}, 0x30) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)) preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0x4c}], 0x1, 0x3, 0xffffffff) write$cgroup_int(r0, &(0x7f0000000200), 0x12) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept$alg(r6, 0x0, 0x0) recvmmsg(r7, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)=""/92, 0x5c}, {0x0}], 0x2}, 0x3fe}], 0x2, 0x2101, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r9) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r9, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r11, @ANYBLOB="50002f800c0002000203aaaaaaaaaaaa0c00038008000100020000003400038008000100000000001e0003"], 0x6c}, 0x1, 0x0, 0x0, 0x20000041}, 0x4880) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x28, 0x2, 0x3, 0x201, 0x0, 0x0, {0x7}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x9}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x2427}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000810}, 0x20004090) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x51a23}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @local}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0x41, 0xfffffffffffffffe}}, @IFLA_GRE_LINK={0x8, 0x1, r5}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000005ff030000000000000300000d02eb7c"], &(0x7f0000000f40)=""/4089, 0x4a, 0xff9, 0xa, 0x7fb}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) 663.423932ms ago: executing program 4 (id=7772): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, &(0x7f00000001c0)=0x1c, 0x80800) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e24, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0xfffffffffffffff2}]}]}, @NFT_MSG_DELFLOWTABLE={0x30, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0xb8}}, 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0xd}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) recvmmsg(r5, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000003c00)=""/4090, 0xffa}], 0x1}}], 0x2, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = getpid() sendmsg$nl_netfilter(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000a00)={0x3d0, 0x0, 0x3, 0x5, 0x0, 0x0, {0x2}, [@nested={0x3bc, 0x131, 0x0, 0x1, [@generic="fbc2cc9a45e75518a5709794a7066a5c9ff01621ee4f4606af8e3f79ae44efc5067cc7e20d7a9c3e53692dd4eee4ea0ecac3950ab7731af8284fea2a156bd41d01ad63d50e17ab178a626bf858d8584ae97463a9c2ea4a52ca5db772659617d4", @nested={0x1cb, 0x109, 0x0, 0x1, [@generic="606825d1e6f54022e4fec0c393934f76ffbac03c3c512701e5f7f5e9210d", @generic="110141ec1f882196a8a2aeb9394213855fde9ada9325094ebd39786bcbd1c4cc9bb73f345d61d6f336015b9567ad5b07b5cc9746917d67995bf687f54ccf4bdf9a6232af7cc567b920f93e666b733c353670537f8e2898f9b74013ff4ff53d3fb5c73ce84f7d6dd06a2de7f6c0c94330bb615089ed76a4d285e6037514efd669313713343ebd5f982001503280f22a492d481f4ee5aa84d4d2f781002beac53bd509a2d892a6b76d9dd3a9db4c95325898e3370d4ea7a64a666467f48ff44d64e0c8784c6732eb96ab27a72979fac4136be5", @generic="6428b72ff3b793e427821044a2ac1ba72612ae42c6a3d3e3e8e3e850f2a940ca820259c06b6322f5832fd22073c114a37d9a09f1dd4e4805867eef414ba0beb256d5fe307948fa8f9704f88de81716c2ed63cf5e915cea2c04938bfdeaae700490c6a7437916e3206780bc829f3253b070ffd38426de812f76ddd2b3b42befaacb1989607e88e555307f8883de9722f67c984799bd092ab0a4352bdf527c738f59eda5facac9c6eacd69f5b590a102c2fa275b783257971f2aa9f28e0bd54e", @typed={0x14, 0xc4, 0x0, 0x0, @ipv6=@empty}, @nested={0x4, 0x3f}]}, @typed={0x8, 0x81, 0x0, 0x0, @pid=r9}, @nested={0x184, 0xb0, 0x0, 0x1, [@generic="44e7ac1a40ae50983ebd21012e700ad6f978adb46fbddf82f60c926b71d54a1e74fdb4a1afec9630d0a8d2cdcef61ab53e4b81f61d51e9bb4d4d0bee04ef222024e9b19545217b40b9415e5ed73a2ac0046775401f51fbd6ff6df52d1ccccd027971c1c986b29a1cec054b64fcb0cfd1a3b12675c468070caa3397663b7dbedc847ab155f6c86d48eb70", @typed={0x14, 0x4b, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x29}}, @typed={0x8, 0xa6, 0x0, 0x0, @u32=0x9}, @generic="d4654d24a65660317346d41fc14dd733802a948352ff28a4666b094355c1ba52130cd3eda474f61535e633a343dbbd9e342108a375b076cbee32410581ffbfad184cb52c2c2db7be23e5b7d2ce021a952d593421f720acc5998aa41bc8d911c80146443b42ff831831e86b2e768f58bba4fc8187673fdfade1d2ce407b7822b01bb5213e8296717d66db2a66b22e2803e6f2cc5c81b9dd4a429b6fcfcc686f8757d448406dc8a4bab40672c9bd1d817f69902c6f13088eba27ef0572be79e9a9a0836f0c4d556e00d5e933b5ee5a0f9b26b3803530cb2a012e63"]}]}]}, 0x3d0}}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r11, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xfffffeb7}], 0x1, 0x1) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 536.095003ms ago: executing program 3 (id=7773): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2500, 0x7315, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x2, 0x4, 0x0, @multicast1, @multicast1}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x10, 0x10, 0x9, 0xfffffffd, {{0x5, 0x4, 0x1, 0x27, 0x14, 0x66, 0x0, 0xc, 0x29, 0x0, @empty, @multicast2}}}}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) pselect6(0x2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0xffffffffffff004f, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0xf0, 0x28, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r5}, [@filter_kind_options=@f_flow={{0x9}, {0xb8, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x8f}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x800}, @TCA_FLOW_KEYS={0x8, 0x1, 0xdd96}, @TCA_FLOW_XOR={0x2, 0x7, 0x1}, @TCA_FLOW_EMATCHES={0x94, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x400}, {0x400, 0x2, 0x1, "8876"}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0xb}, {0x6, 0x2, 0x3, 0x0, 0x6}}}, @TCF_EM_CONTAINER={0xc, 0x3, 0x0, 0x0, {{0x3}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x2, 0x3, 0x6}, {0x5, 0x8, 0x3, 0x2fba}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x800}}]}]}}, @TCA_RATE={0x6, 0x5, {0xb8, 0x1}}]}, 0xf0}}, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async) r6 = socket(0x1e, 0x5, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061042c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) (async) listen(r6, 0x0) (async) accept4$inet6(r6, 0x0, 0x0, 0x0) sendmsg$tipc(r6, &(0x7f0000000380)={&(0x7f00000000c0)=@id={0x1e, 0x3, 0x0, {0x4e22}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000140)="265a4cc7b46f4fb6", 0x8}, {&(0x7f00000001c0)="214d2cb5c4c74d317ca3c2ec5913b6245a4c4d74fba167d1a78678fe0162d43890fe0627b1f22bf8adb5957f15f533f98f6798f495ae28c3", 0x38}, {&(0x7f0000000280)="c363301462640dfc0e05d5d8795e63e886c55b843ed7fd902c1901b26e8bdf69217998dca65ed76421741a958a74d14817fd97ad07c8123445df0b", 0x3b}], 0x3, &(0x7f0000000340)="e19b9203fef2e8f0a7a42991e0f3330f00", 0x11, 0x8001}, 0x4000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x50) (async) close(0x3) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0x1}, 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000000540)={r1, 0x2, 0x400, 0x7}) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000580)={'wlan0\x00', 0x10}) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r10}, 0x10) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030500040000000000090f94955b255393a4cde4a68e832f4e00020073797a32200000001400078005001400fc0000000800084000000000200005000a0000000c00030068"], 0x58}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000100)=@framed={{}, [@jmp={0x5, 0x1, 0xc, 0x5, 0x8, 0x0, 0x8}]}, &(0x7f0000000180)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) 404.99784ms ago: executing program 2 (id=7774): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, 0x0, 0x1, {0x2, 0xf0}, 0xfe}, 0x18, &(0x7f0000000180)={&(0x7f0000000080)="93f257020d427cbc67f2e7b16e5de972f7599b60454296127d93ef08e03ee7345217ea7a29f9fff2df1be9ef916cc72b141d5e", 0x33}, 0x1, 0x0, 0x0, 0x4000040}, 0x840) 387.664993ms ago: executing program 3 (id=7775): r0 = socket(0x30, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000001100)=""/4112, &(0x7f0000001040)=0x1010) 320.293855ms ago: executing program 2 (id=7776): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x14f2b}]}, 0x38}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000140)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x2, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@in6_addr=@ipv4={'\x00', '\xff\xff', @empty}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) syz_emit_ethernet(0x6f, &(0x7f0000000080)={@broadcast, @multicast, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x35, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @local, @local, [], "fafb17c133"}}}}}}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r3, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@newchain={0x24, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 269.152619ms ago: executing program 3 (id=7777): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) 169.737764ms ago: executing program 3 (id=7778): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0xff00000000000000) 95.071826ms ago: executing program 2 (id=7779): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r4, 0x800442d4, &(0x7f0000002600)=0x2) setsockopt$sock_void(r3, 0x1, 0x1b, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x48, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}}, 0x20000000) 1.198329ms ago: executing program 3 (id=7780): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}, 0x1, 0x0, 0x4000000}, 0x2000c058) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) syz_emit_ethernet(0x2a, 0x0, 0x0) socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) socketpair(0x29, 0x2, 0x0, &(0x7f0000000140)) 0s ago: executing program 0 (id=7781): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x8001}, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a00110001fef5fe009d2fb112ff000000008a151f75080039", 0x27) kernel console output (not intermixed with test programs): nk: 8 bytes leftover after parsing attributes in process `syz.0.6989'. [ 749.716660][T27469] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6989'. [ 749.877252][T27477] sctp: [Deprecated]: syz.1.6990 (pid 27477) Use of struct sctp_assoc_value in delayed_ack socket option. [ 749.877252][T27477] Use struct sctp_sack_info instead [ 749.964712][T27477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6990'. [ 750.575152][T27490] netlink: 120 bytes leftover after parsing attributes in process `syz.4.6994'. [ 750.585752][T27494] veth31: entered promiscuous mode [ 751.006303][T27516] tipc: Enabled bearer , priority 0 [ 751.050498][T27510] tipc: Resetting bearer [ 751.219494][T27524] netlink: 'syz.2.7001': attribute type 1 has an invalid length. [ 751.976693][T27513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 754.333489][T27510] tipc: Disabling bearer [ 754.422399][ T64] net_ratelimit: 16 callbacks suppressed [ 754.422423][ T64] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 754.468699][T27539] FAULT_INJECTION: forcing a failure. [ 754.468699][T27539] name failslab, interval 1, probability 0, space 0, times 0 [ 754.481482][T27539] CPU: 1 UID: 0 PID: 27539 Comm: syz.1.7004 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 754.481512][T27539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 754.481523][T27539] Call Trace: [ 754.481531][T27539] [ 754.481538][T27539] dump_stack_lvl+0x189/0x250 [ 754.481561][T27539] ? __pfx____ratelimit+0x10/0x10 [ 754.481586][T27539] ? __pfx_dump_stack_lvl+0x10/0x10 [ 754.481603][T27539] ? __pfx__printk+0x10/0x10 [ 754.481626][T27539] ? rcu_is_watching+0x15/0xb0 [ 754.481659][T27539] should_fail_ex+0x414/0x560 [ 754.481690][T27539] should_failslab+0xa8/0x100 [ 754.481707][T27539] kmem_cache_alloc_noprof+0x73/0x3c0 [ 754.481731][T27539] ? skb_clone+0x212/0x3a0 [ 754.481752][T27539] skb_clone+0x212/0x3a0 [ 754.481773][T27539] bpf_clone_redirect+0xad/0x3d0 [ 754.481802][T27539] ? bpf_test_run+0x197/0x7b0 [ 754.481825][T27539] bpf_prog_6893982b85ceadf7+0x5f/0x68 [ 754.481845][T27539] ? ktime_get+0x3e/0x1f0 [ 754.481869][T27539] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 754.481895][T27539] ? lockdep_hardirqs_on+0x9c/0x150 [ 754.481918][T27539] ? ktime_get+0x3e/0x1f0 [ 754.481932][T27539] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 754.481957][T27539] ? __local_bh_disable_ip+0xf1/0x190 [ 754.481990][T27539] ? __pfx___cant_migrate+0x10/0x10 [ 754.482017][T27539] ? __local_bh_enable_ip+0x12d/0x1c0 [ 754.482046][T27539] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 754.482073][T27539] ? bpf_test_timer_continue+0x136/0x350 [ 754.482102][T27539] bpf_test_run+0x318/0x7b0 [ 754.482146][T27539] ? __pfx_bpf_test_run+0x10/0x10 [ 754.482191][T27539] ? slab_build_skb+0x273/0x3e0 [ 754.482216][T27539] ? convert___skb_to_skb+0x3d/0x590 [ 754.482242][T27539] bpf_prog_test_run_skb+0xb30/0x1560 [ 754.482279][T27539] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 754.482303][T27539] bpf_prog_test_run+0x2c4/0x340 [ 754.482330][T27539] __sys_bpf+0x581/0x870 [ 754.482354][T27539] ? __pfx___sys_bpf+0x10/0x10 [ 754.482387][T27539] ? ksys_write+0x22a/0x250 [ 754.482412][T27539] ? __pfx_ksys_write+0x10/0x10 [ 754.482432][T27539] ? rcu_is_watching+0x15/0xb0 [ 754.482463][T27539] __x64_sys_bpf+0x7c/0x90 [ 754.482484][T27539] do_syscall_64+0xfa/0x3b0 [ 754.482507][T27539] ? lockdep_hardirqs_on+0x9c/0x150 [ 754.482529][T27539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.482545][T27539] ? clear_bhb_loop+0x60/0xb0 [ 754.482565][T27539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.482580][T27539] RIP: 0033:0x7f9089d8eb69 [ 754.482595][T27539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 754.482610][T27539] RSP: 002b:00007f9087bd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 754.482629][T27539] RAX: ffffffffffffffda RBX: 00007f9089fb6080 RCX: 00007f9089d8eb69 [ 754.482642][T27539] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 754.482653][T27539] RBP: 00007f9087bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 754.482664][T27539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 754.482674][T27539] R13: 0000000000000000 R14: 00007f9089fb6080 R15: 00007ffce89579d8 [ 754.482700][T27539] [ 754.793276][ T4558] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 754.805587][T27540] FAULT_INJECTION: forcing a failure. [ 754.805587][T27540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 754.818702][T27540] CPU: 1 UID: 0 PID: 27540 Comm: syz.0.7005 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 754.818733][T27540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 754.818746][T27540] Call Trace: [ 754.818755][T27540] [ 754.818766][T27540] dump_stack_lvl+0x189/0x250 [ 754.818794][T27540] ? __pfx____ratelimit+0x10/0x10 [ 754.818825][T27540] ? __pfx_dump_stack_lvl+0x10/0x10 [ 754.818847][T27540] ? __pfx__printk+0x10/0x10 [ 754.818899][T27540] should_fail_ex+0x414/0x560 [ 754.818938][T27540] _copy_from_user+0x2d/0xb0 [ 754.818968][T27540] copy_from_sockptr+0x48/0x70 [ 754.819003][T27540] ip_mroute_setsockopt+0x763/0xf60 [ 754.819045][T27540] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 754.819093][T27540] ? vfs_write+0x8d8/0xa90 [ 754.819130][T27540] do_ip_setsockopt+0xf11/0x2d00 [ 754.819163][T27540] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 754.819193][T27540] ? aa_sk_perm+0x81e/0x950 [ 754.819224][T27540] ? __pfx_aa_sk_perm+0x10/0x10 [ 754.819250][T27540] ? __fget_files+0x2a/0x420 [ 754.819275][T27540] ip_setsockopt+0x66/0x110 [ 754.819298][T27540] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 754.819327][T27540] do_sock_setsockopt+0x17c/0x1b0 [ 754.819355][T27540] __x64_sys_setsockopt+0x13f/0x1b0 [ 754.819383][T27540] do_syscall_64+0xfa/0x3b0 [ 754.819412][T27540] ? lockdep_hardirqs_on+0x9c/0x150 [ 754.819440][T27540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.819460][T27540] ? clear_bhb_loop+0x60/0xb0 [ 754.819487][T27540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.819507][T27540] RIP: 0033:0x7f82e2b8eb69 [ 754.819527][T27540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 754.819544][T27540] RSP: 002b:00007f82e3a4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 754.819568][T27540] RAX: ffffffffffffffda RBX: 00007f82e2db6080 RCX: 00007f82e2b8eb69 [ 754.819583][T27540] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 000000000000000b [ 754.819596][T27540] RBP: 00007f82e3a4e090 R08: 000000000000003c R09: 0000000000000000 [ 754.819609][T27540] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 754.819622][T27540] R13: 0000000000000000 R14: 00007f82e2db6080 R15: 00007ffe371e68a8 [ 754.819659][T27540] [ 754.820541][T27540] netlink: 'syz.0.7005': attribute type 1 has an invalid length. [ 755.074664][ T4558] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 755.131855][T27544] erspan0 speed is unknown, defaulting to 1000 [ 755.239358][ T12] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 755.297481][T27552] smc: adding net device syzkaller1 with user defined pnetid SYZ2 [ 755.320380][T27557] netlink: 'syz.2.7007': attribute type 3 has an invalid length. [ 755.468228][T27551] smc: removing net device syzkaller1 with user defined pnetid SYZ2 [ 755.584817][ T12] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 755.706103][T27565] openvswitch: netlink: VXLAN extension message has 9 unknown bytes. [ 755.713652][T27560] bridge0: left promiscuous mode [ 755.787427][T27560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 755.826997][T27560] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 755.915908][ T12] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 756.213867][T27544] lo speed is unknown, defaulting to 1000 [ 756.351580][ T1165] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 756.482415][T23622] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 756.724634][T27590] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 756.845248][T27592] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 756.850015][T27594] netlink: 'syz.4.7020': attribute type 4 has an invalid length. [ 756.884661][T27594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7020'. [ 756.918815][T27597] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7021'. [ 757.037868][T27601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7022'. [ 757.378566][T27612] netlink: 'syz.0.7025': attribute type 10 has an invalid length. [ 758.003713][T27624] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7029'. [ 758.043780][T27622] erspan0 speed is unknown, defaulting to 1000 [ 758.334063][T27622] lo speed is unknown, defaulting to 1000 [ 758.469518][T27635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7031'. [ 758.563812][ T5918] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 758.671456][T27640] netlink: 'syz.3.7033': attribute type 1 has an invalid length. [ 758.843367][T27640] 8021q: adding VLAN 0 to HW filter on device bond12 [ 759.050306][T27644] 8021q: adding VLAN 0 to HW filter on device bond12 [ 759.058038][T27644] bond12: (slave vxcan1): The slave device specified does not support setting the MAC address [ 759.075307][T27644] bond12: (slave vxcan1): Error -95 calling set_mac_address [ 759.202803][T27660] netlink: 'syz.4.7039': attribute type 1 has an invalid length. [ 759.221859][T27631] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 759.295914][T27646] veth15: entered promiscuous mode [ 759.338181][T27646] bond12: (slave veth15): Enslaving as an active interface with a down link [ 759.371849][T27639] tun0: tun_chr_ioctl cmd 2147767520 [ 759.396937][ T5918] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 759.427856][T27650] erspan0: entered allmulticast mode [ 759.456415][T27650] bond12: (slave erspan0): making interface the new active one [ 759.466262][T27650] bond12: (slave erspan0): Enslaving as an active interface with an up link [ 759.476034][ T64] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 759.497108][ T5918] erspan0 speed is unknown, defaulting to 1000 [ 759.545730][T22957] erspan0 speed is unknown, defaulting to 1000 [ 759.562198][ T4558] net_ratelimit: 17 callbacks suppressed [ 759.562221][ T4558] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 759.588666][T22957] syz1: Port: 1 Link ACTIVE [ 759.647369][T27669] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7042'. [ 759.703805][ T4558] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 759.798394][T27673] netpci0: tun_chr_ioctl cmd 1074025681 [ 759.814978][ T1165] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 759.849936][T27676] openvswitch: netlink: Unknown key attributes 2 [ 759.861075][T27676] netlink: 'syz.4.7045': attribute type 1 has an invalid length. [ 759.915770][T27680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7046'. [ 759.928552][T27680] netlink: 108 bytes leftover after parsing attributes in process `syz.0.7046'. [ 759.959321][T27682] vlan3: entered allmulticast mode [ 760.021098][T27680] vlan2: entered allmulticast mode [ 760.028641][T27680] veth1: entered allmulticast mode [ 760.035637][T27683] geneve0: entered allmulticast mode [ 760.064093][ T1165] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 760.073790][T27674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.084159][T27686] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7047'. [ 760.096175][T27686] tipc: Enabling of bearer rejected, failed to enable media [ 760.192829][ T1165] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 760.239065][T27690] netlink: 'syz.3.7049': attribute type 10 has an invalid length. [ 760.313332][ T1165] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 760.351620][T27694] netlink: 'syz.0.7051': attribute type 10 has an invalid length. [ 760.433179][ T1165] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 760.512604][T27703] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7055'. [ 760.517622][ T4558] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 760.541719][ T4558] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 760.620316][T27703] bond13 (unregistering): Released all slaves [ 760.642637][ T5932] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 760.667134][T27710] netlink: 'syz.1.7053': attribute type 10 has an invalid length. [ 760.705633][T27710] bond0: (slave wlan1): Opening slave failed [ 760.713931][ T1165] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 760.823500][ T64] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 761.211771][T27733] netlink: 'syz.2.7062': attribute type 10 has an invalid length. [ 761.275560][T27721] FAULT_INJECTION: forcing a failure. [ 761.275560][T27721] name failslab, interval 1, probability 0, space 0, times 0 [ 761.309818][T27721] CPU: 1 UID: 0 PID: 27721 Comm: syz.0.7059 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 761.309851][T27721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 761.309864][T27721] Call Trace: [ 761.309873][T27721] [ 761.309882][T27721] dump_stack_lvl+0x189/0x250 [ 761.309910][T27721] ? __pfx____ratelimit+0x10/0x10 [ 761.309939][T27721] ? __pfx_dump_stack_lvl+0x10/0x10 [ 761.309960][T27721] ? __pfx__printk+0x10/0x10 [ 761.309989][T27721] ? __pfx___might_resched+0x10/0x10 [ 761.310019][T27721] ? fs_reclaim_acquire+0x7d/0x100 [ 761.310048][T27721] should_fail_ex+0x414/0x560 [ 761.310086][T27721] should_failslab+0xa8/0x100 [ 761.310109][T27721] __kmalloc_cache_noprof+0x70/0x3d0 [ 761.310137][T27721] ? cryptomgr_notify+0x85/0x970 [ 761.310170][T27721] cryptomgr_notify+0x85/0x970 [ 761.310208][T27721] notifier_call_chain+0x1b3/0x3e0 [ 761.310239][T27721] blocking_notifier_call_chain+0x6a/0x90 [ 761.310264][T27721] crypto_alg_mod_lookup+0x3b1/0x5f0 [ 761.310293][T27721] crypto_alloc_tfm_node+0x13e/0x3f0 [ 761.310330][T27721] alg_bind+0x2fa/0x570 [ 761.310369][T27721] __sys_bind+0x2c3/0x3e0 [ 761.310401][T27721] ? __pfx___sys_bind+0x10/0x10 [ 761.310451][T27721] ? rcu_is_watching+0x15/0xb0 [ 761.310489][T27721] __x64_sys_bind+0x7a/0x90 [ 761.310519][T27721] do_syscall_64+0xfa/0x3b0 [ 761.310547][T27721] ? lockdep_hardirqs_on+0x9c/0x150 [ 761.310575][T27721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.310596][T27721] ? clear_bhb_loop+0x60/0xb0 [ 761.310622][T27721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.310643][T27721] RIP: 0033:0x7f82e2b8eb69 [ 761.310662][T27721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 761.310682][T27721] RSP: 002b:00007f82e3a6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 761.310705][T27721] RAX: ffffffffffffffda RBX: 00007f82e2db5fa0 RCX: 00007f82e2b8eb69 [ 761.310720][T27721] RDX: 0000000000000058 RSI: 0000200000000300 RDI: 0000000000000003 [ 761.310733][T27721] RBP: 00007f82e3a6f090 R08: 0000000000000000 R09: 0000000000000000 [ 761.310746][T27721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 761.310758][T27721] R13: 0000000000000000 R14: 00007f82e2db5fa0 R15: 00007ffe371e68a8 [ 761.310793][T27721] [ 761.902459][T27759] __nla_validate_parse: 4 callbacks suppressed [ 761.902480][T27759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7067'. [ 761.958415][T27762] netlink: 'syz.2.7070': attribute type 1 has an invalid length. [ 762.046641][T27762] 8021q: adding VLAN 0 to HW filter on device bond18 [ 762.070947][T27753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7068'. [ 762.113138][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 762.114104][T27767] bond18: (slave veth17): Enslaving as an active interface with a down link [ 762.138909][T27761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 762.258582][T27773] netlink: 'syz.3.7073': attribute type 10 has an invalid length. [ 762.303793][T27777] smc: adding net device syzkaller1 with user defined pnetid SYZ2 [ 762.341769][T27779] netlink: 'syz.0.7076': attribute type 10 has an invalid length. [ 762.505992][T27774] smc: removing net device syzkaller1 with user defined pnetid SYZ2 [ 762.530713][T27781] dvmrp1: entered allmulticast mode [ 762.714043][T27790] bridge0: entered promiscuous mode [ 762.719865][T27794] netlink: 80 bytes leftover after parsing attributes in process `syz.0.7083'. [ 762.720992][T27790] bridge0: port 1(macvlan3) entered blocking state [ 762.740492][T27790] bridge0: port 1(macvlan3) entered disabled state [ 762.751138][T27790] macvlan3: entered allmulticast mode [ 762.759978][T27790] bridge0: entered allmulticast mode [ 762.774678][T27794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7083'. [ 762.787226][T27790] macvlan3: left allmulticast mode [ 762.798171][T27794] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7083'. [ 762.812082][T27790] bridge0: left allmulticast mode [ 762.828575][T27790] bridge0: left promiscuous mode [ 763.296332][T27816] netlink: 'syz.0.7087': attribute type 10 has an invalid length. [ 763.361750][T27819] netlink: 'syz.2.7088': attribute type 10 has an invalid length. [ 763.686776][ T30] audit: type=1107 audit(1754397710.616:6): pid=27828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' ñbé[L¥x¢_Y€¾`V©Òú¼KÔÞ}H¢/09ˆJªè¬DÕ dÄ pt_' [ 763.963414][T27845] FAULT_INJECTION: forcing a failure. [ 763.963414][T27845] name failslab, interval 1, probability 0, space 0, times 0 [ 764.004933][T27848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7098'. [ 764.012048][T27845] CPU: 1 UID: 0 PID: 27845 Comm: syz.1.7097 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 764.012080][T27845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 764.012092][T27845] Call Trace: [ 764.012101][T27845] [ 764.012109][T27845] dump_stack_lvl+0x189/0x250 [ 764.012136][T27845] ? __pfx____ratelimit+0x10/0x10 [ 764.012164][T27845] ? __pfx_dump_stack_lvl+0x10/0x10 [ 764.012183][T27845] ? __pfx__printk+0x10/0x10 [ 764.012214][T27845] ? __pfx___might_resched+0x10/0x10 [ 764.012240][T27845] ? fs_reclaim_acquire+0x7d/0x100 [ 764.012265][T27845] should_fail_ex+0x414/0x560 [ 764.012300][T27845] should_failslab+0xa8/0x100 [ 764.012320][T27845] __kmalloc_cache_noprof+0x70/0x3d0 [ 764.012346][T27845] ? nft_delflowtable+0x57/0x470 [ 764.012374][T27845] nft_delflowtable+0x57/0x470 [ 764.012404][T27845] nft_flush_table+0x64a/0xea0 [ 764.012435][T27845] nf_tables_deltable+0x5cc/0xe10 [ 764.012463][T27845] ? __pfx_nf_tables_deltable+0x10/0x10 [ 764.012481][T27845] ? nfnl_pernet+0x23/0x240 [ 764.012516][T27845] ? __nla_parse+0x40/0x60 [ 764.012543][T27845] nfnetlink_rcv+0x112f/0x2520 [ 764.012603][T27845] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 764.012686][T27845] ? netlink_deliver_tap+0x2e/0x1b0 [ 764.012734][T27845] netlink_unicast+0x82c/0x9e0 [ 764.012782][T27845] ? __pfx_netlink_unicast+0x10/0x10 [ 764.012809][T27845] ? netlink_sendmsg+0x642/0xb30 [ 764.012832][T27845] ? skb_put+0x11b/0x210 [ 764.012855][T27845] netlink_sendmsg+0x805/0xb30 [ 764.012893][T27845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 764.012924][T27845] ? aa_sock_msg_perm+0x94/0x160 [ 764.012951][T27845] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 764.012972][T27845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 764.013001][T27845] __sock_sendmsg+0x219/0x270 [ 764.013029][T27845] ____sys_sendmsg+0x505/0x830 [ 764.013056][T27845] ? __pfx_____sys_sendmsg+0x10/0x10 [ 764.013087][T27845] ? import_iovec+0x74/0xa0 [ 764.013117][T27845] ___sys_sendmsg+0x21f/0x2a0 [ 764.013140][T27845] ? __pfx____sys_sendmsg+0x10/0x10 [ 764.013202][T27845] ? __fget_files+0x2a/0x420 [ 764.013219][T27845] ? __fget_files+0x3a0/0x420 [ 764.013250][T27845] __x64_sys_sendmsg+0x19b/0x260 [ 764.013273][T27845] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 764.013305][T27845] ? __pfx_ksys_write+0x10/0x10 [ 764.013329][T27845] ? rcu_is_watching+0x15/0xb0 [ 764.013364][T27845] ? do_syscall_64+0xbe/0x3b0 [ 764.013395][T27845] do_syscall_64+0xfa/0x3b0 [ 764.013420][T27845] ? lockdep_hardirqs_on+0x9c/0x150 [ 764.013445][T27845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.013464][T27845] ? clear_bhb_loop+0x60/0xb0 [ 764.013487][T27845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.013505][T27845] RIP: 0033:0x7f9089d8eb69 [ 764.013522][T27845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 764.013539][T27845] RSP: 002b:00007f9087bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 764.013561][T27845] RAX: ffffffffffffffda RBX: 00007f9089fb5fa0 RCX: 00007f9089d8eb69 [ 764.013575][T27845] RDX: 0000000000000880 RSI: 0000200000000500 RDI: 000000000000000a [ 764.013587][T27845] RBP: 00007f9087bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 764.013599][T27845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 764.013610][T27845] R13: 0000000000000000 R14: 00007f9089fb5fa0 R15: 00007ffce89579d8 [ 764.013642][T27845] [ 764.300342][T27861] netlink: 'syz.4.7102': attribute type 10 has an invalid length. [ 764.375541][T27840] erspan0 speed is unknown, defaulting to 1000 [ 764.572235][T27866] netlink: 'syz.1.7103': attribute type 10 has an invalid length. [ 764.622554][ T4558] net_ratelimit: 24 callbacks suppressed [ 764.622576][ T4558] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 764.694747][T27840] lo speed is unknown, defaulting to 1000 [ 764.792569][ T4558] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 764.841579][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 764.915116][ T1154] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 765.043957][ T1165] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 765.184061][ T1165] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 765.256138][T27883] FAULT_INJECTION: forcing a failure. [ 765.256138][T27883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 765.284543][T27883] CPU: 0 UID: 0 PID: 27883 Comm: syz.1.7108 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 765.284575][T27883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 765.284588][T27883] Call Trace: [ 765.284598][T27883] [ 765.284607][T27883] dump_stack_lvl+0x189/0x250 [ 765.284636][T27883] ? __pfx____ratelimit+0x10/0x10 [ 765.284666][T27883] ? __pfx_dump_stack_lvl+0x10/0x10 [ 765.284688][T27883] ? __pfx__printk+0x10/0x10 [ 765.284728][T27883] should_fail_ex+0x414/0x560 [ 765.284767][T27883] _copy_to_user+0x31/0xb0 [ 765.284808][T27883] simple_read_from_buffer+0xe1/0x170 [ 765.284844][T27883] proc_fail_nth_read+0x1b3/0x220 [ 765.284872][T27883] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 765.284901][T27883] ? rw_verify_area+0x258/0x650 [ 765.284928][T27883] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 765.284954][T27883] vfs_read+0x1fd/0x980 [ 765.284982][T27883] ? fdget_pos+0x247/0x320 [ 765.285008][T27883] ? __pfx___mutex_lock+0x10/0x10 [ 765.285038][T27883] ? __pfx_vfs_read+0x10/0x10 [ 765.285069][T27883] ? __fget_files+0x2a/0x420 [ 765.285095][T27883] ? __fget_files+0x3a0/0x420 [ 765.285113][T27883] ? __fget_files+0x2a/0x420 [ 765.285150][T27883] ksys_read+0x145/0x250 [ 765.285182][T27883] ? __pfx_ksys_read+0x10/0x10 [ 765.285206][T27883] ? rcu_is_watching+0x15/0xb0 [ 765.285245][T27883] ? do_syscall_64+0xbe/0x3b0 [ 765.285280][T27883] do_syscall_64+0xfa/0x3b0 [ 765.285307][T27883] ? lockdep_hardirqs_on+0x9c/0x150 [ 765.285334][T27883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.285354][T27883] ? clear_bhb_loop+0x60/0xb0 [ 765.285382][T27883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.285401][T27883] RIP: 0033:0x7f9089d8d57c [ 765.285420][T27883] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 765.285438][T27883] RSP: 002b:00007f9087bf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 765.285462][T27883] RAX: ffffffffffffffda RBX: 00007f9089fb5fa0 RCX: 00007f9089d8d57c [ 765.285476][T27883] RDX: 000000000000000f RSI: 00007f9087bf60a0 RDI: 0000000000000007 [ 765.285489][T27883] RBP: 00007f9087bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 765.285502][T27883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 765.285514][T27883] R13: 0000000000000000 R14: 00007f9089fb5fa0 R15: 00007ffce89579d8 [ 765.285548][T27883] [ 765.529502][ T4558] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 765.652341][T23622] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 766.109071][T27896] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7113'. [ 766.171431][T27894] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7) [ 766.242648][T27903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7115'. [ 766.243899][T23622] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 766.285012][T27893] netlink: 'syz.4.7112': attribute type 13 has an invalid length. [ 766.298341][T27893] netlink: 'syz.4.7112': attribute type 17 has an invalid length. [ 766.502983][T27909] FAULT_INJECTION: forcing a failure. [ 766.502983][T27909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 766.516627][T27909] CPU: 0 UID: 0 PID: 27909 Comm: syz.3.7118 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 766.516659][T27909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 766.516672][T27909] Call Trace: [ 766.516681][T27909] [ 766.516691][T27909] dump_stack_lvl+0x189/0x250 [ 766.516719][T27909] ? __pfx____ratelimit+0x10/0x10 [ 766.516748][T27909] ? __pfx_dump_stack_lvl+0x10/0x10 [ 766.516771][T27909] ? __pfx__printk+0x10/0x10 [ 766.516796][T27909] ? __might_fault+0xb0/0x130 [ 766.516839][T27909] should_fail_ex+0x414/0x560 [ 766.516878][T27909] _copy_from_user+0x2d/0xb0 [ 766.516907][T27909] ___sys_sendmsg+0x158/0x2a0 [ 766.516934][T27909] ? __pfx____sys_sendmsg+0x10/0x10 [ 766.517001][T27909] ? __fget_files+0x2a/0x420 [ 766.517021][T27909] ? __fget_files+0x3a0/0x420 [ 766.517065][T27909] __x64_sys_sendmsg+0x19b/0x260 [ 766.517091][T27909] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 766.517126][T27909] ? __pfx_ksys_write+0x10/0x10 [ 766.517152][T27909] ? rcu_is_watching+0x15/0xb0 [ 766.517189][T27909] ? do_syscall_64+0xbe/0x3b0 [ 766.517223][T27909] do_syscall_64+0xfa/0x3b0 [ 766.517249][T27909] ? lockdep_hardirqs_on+0x9c/0x150 [ 766.517277][T27909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.517298][T27909] ? clear_bhb_loop+0x60/0xb0 [ 766.517323][T27909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.517343][T27909] RIP: 0033:0x7fa61098eb69 [ 766.517362][T27909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 766.517380][T27909] RSP: 002b:00007fa611844038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 766.517404][T27909] RAX: ffffffffffffffda RBX: 00007fa610bb5fa0 RCX: 00007fa61098eb69 [ 766.517420][T27909] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 766.517433][T27909] RBP: 00007fa611844090 R08: 0000000000000000 R09: 0000000000000000 [ 766.517446][T27909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 766.517459][T27909] R13: 0000000000000000 R14: 00007fa610bb5fa0 R15: 00007ffd3b2098b8 [ 766.517494][T27909] [ 767.242539][T27893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 767.267142][T27893] 8021q: adding VLAN 0 to HW filter on device team0 [ 767.274793][T27893] tipc: Resetting bearer [ 767.330051][T27893] tipc: Resetting bearer [ 769.049051][T27893] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 769.101683][T27898] syzkaller0: entered allmulticast mode [ 769.222859][ T1154] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 769.414530][T27933] netlink: 23 bytes leftover after parsing attributes in process `syz.0.7123'. [ 769.783085][T27940] sctp: [Deprecated]: syz.0.7125 (pid 27940) Use of struct sctp_assoc_value in delayed_ack socket option. [ 769.783085][T27940] Use struct sctp_sack_info instead [ 771.712295][T27901] erspan0 speed is unknown, defaulting to 1000 [ 771.723074][ T1165] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 771.740657][T27932] bond0: option mode: unable to set because the bond device has slaves [ 771.837425][T23622] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 771.906972][T27944] netlink: 'syz.3.7127': attribute type 10 has an invalid length. [ 771.962157][ T1165] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 772.075336][ T1165] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 772.194977][T23622] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 772.312504][ T1165] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 772.330481][T27901] lo speed is unknown, defaulting to 1000 [ 772.473426][T23622] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 772.653110][ T1154] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 772.728855][T27954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7131'. [ 772.773016][T23622] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 772.903024][ T1154] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 772.956792][T27964] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 773.397974][T27977] netlink: 'syz.3.7136': attribute type 3 has an invalid length. [ 773.632183][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 773.940726][T27979] netlink: 'syz.2.7138': attribute type 10 has an invalid length. [ 774.821369][T27995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 774.900220][T27995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 774.951009][T27995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 775.001214][T27995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7145'. [ 775.044429][T28005] netlink: 'syz.3.7144': attribute type 1 has an invalid length. [ 775.122382][T28005] 8021q: adding VLAN 0 to HW filter on device bond13 [ 775.130107][T28001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7146'. [ 775.139728][T28001] netlink: 26 bytes leftover after parsing attributes in process `syz.2.7146'. [ 775.170326][T28007] netlink: 'syz.1.7149': attribute type 10 has an invalid length. [ 775.185505][T28007] bond0: (slave wlan1): Opening slave failed [ 775.306908][T28014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7148'. [ 775.350624][T28014] netlink: 'syz.4.7148': attribute type 16 has an invalid length. [ 775.370372][T28014] netlink: 'syz.4.7148': attribute type 17 has an invalid length. [ 775.407225][T28014] tipc: Resetting bearer [ 775.659889][T28029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7156'. [ 775.747207][T28032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 775.819973][T28032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 775.844932][T28032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 775.876444][T28032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7158'. [ 775.890868][T28040] netlink: 'syz.0.7160': attribute type 1 has an invalid length. [ 775.956452][T28040] 8021q: adding VLAN 0 to HW filter on device bond26 [ 776.080860][T28035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7159'. [ 776.095574][T28035] netlink: 26 bytes leftover after parsing attributes in process `syz.2.7159'. [ 776.124155][T28048] netlink: 'syz.4.7162': attribute type 10 has an invalid length. [ 776.427340][T28060] tipc: Enabling of bearer rejected, already enabled [ 776.540924][T28060] erspan0 speed is unknown, defaulting to 1000 [ 776.581276][T28068] FAULT_INJECTION: forcing a failure. [ 776.581276][T28068] name failslab, interval 1, probability 0, space 0, times 0 [ 776.627385][T28068] CPU: 1 UID: 0 PID: 28068 Comm: syz.2.7169 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 776.627416][T28068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 776.627429][T28068] Call Trace: [ 776.627437][T28068] [ 776.627447][T28068] dump_stack_lvl+0x189/0x250 [ 776.627474][T28068] ? __pfx____ratelimit+0x10/0x10 [ 776.627502][T28068] ? __pfx_dump_stack_lvl+0x10/0x10 [ 776.627522][T28068] ? __pfx__printk+0x10/0x10 [ 776.627555][T28068] ? __pfx___might_resched+0x10/0x10 [ 776.627583][T28068] ? fs_reclaim_acquire+0x7d/0x100 [ 776.627610][T28068] should_fail_ex+0x414/0x560 [ 776.627646][T28068] should_failslab+0xa8/0x100 [ 776.627667][T28068] __kmalloc_noprof+0xcb/0x4f0 [ 776.627694][T28068] ? kfree+0x4d/0x440 [ 776.627717][T28068] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 776.627751][T28068] tomoyo_realpath_from_path+0xe3/0x5d0 [ 776.627782][T28068] ? tomoyo_domain+0xd9/0x130 [ 776.627816][T28068] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 776.627840][T28068] tomoyo_path_number_perm+0x1e8/0x5a0 [ 776.627868][T28068] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 776.627912][T28068] ? __lock_acquire+0xab9/0xd20 [ 776.627964][T28068] ? __fget_files+0x2a/0x420 [ 776.627986][T28068] ? __fget_files+0x2a/0x420 [ 776.628010][T28068] ? __fget_files+0x3a0/0x420 [ 776.628028][T28068] ? __fget_files+0x2a/0x420 [ 776.628052][T28068] security_file_ioctl+0xcb/0x2d0 [ 776.628077][T28068] __se_sys_ioctl+0x47/0x170 [ 776.628106][T28068] do_syscall_64+0xfa/0x3b0 [ 776.628133][T28068] ? lockdep_hardirqs_on+0x9c/0x150 [ 776.628159][T28068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.628178][T28068] ? clear_bhb_loop+0x60/0xb0 [ 776.628203][T28068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.628221][T28068] RIP: 0033:0x7fd4c0b8eb69 [ 776.628239][T28068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 776.628257][T28068] RSP: 002b:00007fd4c1a14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 776.628280][T28068] RAX: ffffffffffffffda RBX: 00007fd4c0db5fa0 RCX: 00007fd4c0b8eb69 [ 776.628294][T28068] RDX: 0000200000000000 RSI: 0000000000008b04 RDI: 0000000000000003 [ 776.628308][T28068] RBP: 00007fd4c1a14090 R08: 0000000000000000 R09: 0000000000000000 [ 776.628320][T28068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 776.628332][T28068] R13: 0000000000000000 R14: 00007fd4c0db5fa0 R15: 00007fffe5c93bb8 [ 776.628366][T28068] [ 776.628375][T28068] ERROR: Out of memory at tomoyo_realpath_from_path. [ 776.644116][T28064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7167'. [ 776.782278][T28072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7167'. [ 776.856799][ T4558] net_ratelimit: 31 callbacks suppressed [ 776.856818][ T4558] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 777.202508][T23622] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 777.225567][T28087] netlink: 'syz.0.7171': attribute type 1 has an invalid length. [ 777.267955][T28087] 8021q: adding VLAN 0 to HW filter on device bond27 [ 777.336520][T23622] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 777.485811][T28096] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 777.507909][T21470] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 777.642509][T21470] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 777.784932][ T1165] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 777.820534][T28060] lo speed is unknown, defaulting to 1000 [ 777.830035][T28108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 777.840032][T28078] erspan0 speed is unknown, defaulting to 1000 [ 777.917317][T28108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 777.928602][ T1165] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 777.988732][T28108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 778.052347][ T4558] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 778.172133][T21470] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 778.282123][ T1165] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 778.633427][T28122] netpci0: tun_chr_ioctl cmd 1074025681 [ 778.815117][T28078] lo speed is unknown, defaulting to 1000 [ 778.926835][T28136] netlink: 'syz.2.7185': attribute type 10 has an invalid length. [ 779.014847][T28138] netlink: 'syz.2.7186': attribute type 1 has an invalid length. [ 779.071229][T28138] 8021q: adding VLAN 0 to HW filter on device bond19 [ 779.603085][T28152] netlink: 'syz.2.7189': attribute type 3 has an invalid length. [ 779.668488][T28154] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7) [ 780.997158][T28160] smc: adding net device syzkaller1 with user defined pnetid SYZ2 [ 781.038218][T28160] netlink: 'syz.4.7192': attribute type 8 has an invalid length. [ 781.429297][T28159] smc: removing net device syzkaller1 with user defined pnetid SYZ2 [ 781.579776][T28173] syzkaller0: entered promiscuous mode [ 781.596420][T28175] netlink: 'syz.4.7197': attribute type 30 has an invalid length. [ 781.596461][T28173] syzkaller0: entered allmulticast mode [ 781.922742][ T4558] net_ratelimit: 24 callbacks suppressed [ 781.922765][ T4558] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 782.058557][T28192] __nla_validate_parse: 6 callbacks suppressed [ 782.058580][T28192] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7203'. [ 782.162408][T28194] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7) [ 782.203047][ T1165] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 782.218891][T28190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 782.314549][ T4558] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 782.434096][ T4558] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 782.554368][ T12] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 782.648722][T28213] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 782.659816][T28213] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 782.677224][T21470] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 782.793931][ T4558] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 782.880521][T28224] smc: adding net device syzkaller1 with user defined pnetid SYZ2 [ 782.922237][ T1165] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 782.955858][T28226] FAULT_INJECTION: forcing a failure. [ 782.955858][T28226] name failslab, interval 1, probability 0, space 0, times 0 [ 782.968959][T28226] CPU: 1 UID: 0 PID: 28226 Comm: syz.1.7215 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 782.968989][T28226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 782.969001][T28226] Call Trace: [ 782.969009][T28226] [ 782.969018][T28226] dump_stack_lvl+0x189/0x250 [ 782.969043][T28226] ? __pfx____ratelimit+0x10/0x10 [ 782.969070][T28226] ? __pfx_dump_stack_lvl+0x10/0x10 [ 782.969090][T28226] ? __pfx__printk+0x10/0x10 [ 782.969119][T28226] ? __pfx___might_resched+0x10/0x10 [ 782.969151][T28226] should_fail_ex+0x414/0x560 [ 782.969187][T28226] should_failslab+0xa8/0x100 [ 782.969209][T28226] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 782.969238][T28226] ? __alloc_skb+0x112/0x2d0 [ 782.969272][T28226] __alloc_skb+0x112/0x2d0 [ 782.969306][T28226] netlink_sendmsg+0x5c6/0xb30 [ 782.969346][T28226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 782.969378][T28226] ? aa_sock_msg_perm+0x94/0x160 [ 782.969405][T28226] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 782.969426][T28226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 782.969456][T28226] __sock_sendmsg+0x219/0x270 [ 782.969485][T28226] ____sys_sendmsg+0x505/0x830 [ 782.969512][T28226] ? __pfx_____sys_sendmsg+0x10/0x10 [ 782.969544][T28226] ? import_iovec+0x74/0xa0 [ 782.969575][T28226] ___sys_sendmsg+0x21f/0x2a0 [ 782.969599][T28226] ? __pfx____sys_sendmsg+0x10/0x10 [ 782.969661][T28226] ? __fget_files+0x2a/0x420 [ 782.969679][T28226] ? __fget_files+0x3a0/0x420 [ 782.969709][T28226] __x64_sys_sendmsg+0x19b/0x260 [ 782.969733][T28226] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 782.969765][T28226] ? __pfx_ksys_write+0x10/0x10 [ 782.969787][T28226] ? rcu_is_watching+0x15/0xb0 [ 782.969819][T28226] ? do_syscall_64+0xbe/0x3b0 [ 782.969849][T28226] do_syscall_64+0xfa/0x3b0 [ 782.969873][T28226] ? lockdep_hardirqs_on+0x9c/0x150 [ 782.969907][T28226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.969924][T28226] ? clear_bhb_loop+0x60/0xb0 [ 782.969947][T28226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.969963][T28226] RIP: 0033:0x7f9089d8eb69 [ 782.969980][T28226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 782.969996][T28226] RSP: 002b:00007f9087bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 782.970017][T28226] RAX: ffffffffffffffda RBX: 00007f9089fb5fa0 RCX: 00007f9089d8eb69 [ 782.970030][T28226] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 782.970042][T28226] RBP: 00007f9087bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 782.970053][T28226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 782.970064][T28226] R13: 0000000000000000 R14: 00007f9089fb5fa0 R15: 00007ffce89579d8 [ 782.970095][T28226] [ 783.299116][T28223] smc: removing net device syzkaller1 with user defined pnetid SYZ2 [ 783.322408][ T4558] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 783.457257][T28231] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7) [ 783.469441][ T4558] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 783.859267][T28258] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7226'. [ 783.871347][T28258] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7226'. [ 784.071411][T28255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7225'. [ 784.094077][T28255] netlink: 26 bytes leftover after parsing attributes in process `syz.3.7225'. [ 784.118782][T28255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7225'. [ 784.190037][T28274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7231'. [ 784.210142][T28276] netlink: 'syz.1.7232': attribute type 83 has an invalid length. [ 784.220967][T28276] tipc: Enabling of bearer rejected, already enabled [ 784.225039][T28274] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7231'. [ 784.445623][T28283] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7) [ 784.477615][T28285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7235'. [ 784.841850][T28296] netpci0: tun_chr_ioctl cmd 1074025681 [ 785.006675][T28301] bridge0: port 3(macvlan2) entered blocking state [ 785.043318][T28301] bridge0: port 3(macvlan2) entered disabled state [ 785.050379][T28301] macvlan2: entered allmulticast mode [ 785.057760][T28301] bridge0: entered allmulticast mode [ 785.069849][T28301] macvlan2: left allmulticast mode [ 785.080466][T28312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7242'. [ 785.097598][T28301] bridge0: left allmulticast mode [ 785.140902][T28312] netlink: 'syz.3.7242': attribute type 30 has an invalid length. [ 785.161304][T28305] erspan0 speed is unknown, defaulting to 1000 [ 785.256662][T28316] sctp: [Deprecated]: syz.2.7243 (pid 28316) Use of struct sctp_assoc_value in delayed_ack socket option. [ 785.256662][T28316] Use struct sctp_sack_info instead [ 785.297199][T28320] netlink: 'syz.0.7245': attribute type 9 has an invalid length. [ 785.326163][T28320] netlink: 'syz.0.7245': attribute type 6 has an invalid length. [ 785.849733][T28305] lo speed is unknown, defaulting to 1000 [ 786.076473][T28334] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7) [ 787.144382][T28355] __nla_validate_parse: 6 callbacks suppressed [ 787.144409][T28355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7254'. [ 787.177643][T28355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7254'. [ 787.194020][ T12] net_ratelimit: 26 callbacks suppressed [ 787.194045][ T12] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 787.207149][T28355] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7254'. [ 787.229591][T28352] netlink: 'syz.1.7255': attribute type 1 has an invalid length. [ 787.231019][T28361] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7254'. [ 787.242762][T28352] netlink: 'syz.1.7255': attribute type 1 has an invalid length. [ 787.319528][T28352] netlink: 'syz.1.7255': attribute type 1 has an invalid length. [ 787.342179][T28355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7254'. [ 787.369362][T28355] netlink: 'syz.3.7254': attribute type 30 has an invalid length. [ 787.383818][T28357] netlink: 'syz.4.7257': attribute type 10 has an invalid length. [ 787.387577][T28352] netlink: 'syz.1.7255': attribute type 1 has an invalid length. [ 787.409967][T28355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7254'. [ 787.453050][ T1154] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 787.601647][ T1165] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 787.723274][ T1154] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 787.825115][T28375] FAULT_INJECTION: forcing a failure. [ 787.825115][T28375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 787.876372][ T12] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 787.914567][T28375] CPU: 1 UID: 0 PID: 28375 Comm: syz.0.7261 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 787.914599][T28375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 787.914611][T28375] Call Trace: [ 787.914620][T28375] [ 787.914631][T28375] dump_stack_lvl+0x189/0x250 [ 787.914660][T28375] ? __pfx____ratelimit+0x10/0x10 [ 787.914690][T28375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 787.914711][T28375] ? __pfx__printk+0x10/0x10 [ 787.914738][T28375] ? __might_fault+0xb0/0x130 [ 787.914782][T28375] should_fail_ex+0x414/0x560 [ 787.914819][T28375] _copy_from_user+0x2d/0xb0 [ 787.914849][T28375] ___sys_sendmsg+0x158/0x2a0 [ 787.914875][T28375] ? __pfx____sys_sendmsg+0x10/0x10 [ 787.914951][T28375] ? __fget_files+0x2a/0x420 [ 787.914971][T28375] ? __fget_files+0x3a0/0x420 [ 787.915004][T28375] __x64_sys_sendmsg+0x19b/0x260 [ 787.915030][T28375] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 787.915065][T28375] ? __pfx_ksys_write+0x10/0x10 [ 787.915091][T28375] ? rcu_is_watching+0x15/0xb0 [ 787.915128][T28375] ? do_syscall_64+0xbe/0x3b0 [ 787.915162][T28375] do_syscall_64+0xfa/0x3b0 [ 787.915188][T28375] ? lockdep_hardirqs_on+0x9c/0x150 [ 787.915217][T28375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.915237][T28375] ? clear_bhb_loop+0x60/0xb0 [ 787.915263][T28375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.915282][T28375] RIP: 0033:0x7f82e2b8eb69 [ 787.915302][T28375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 787.915320][T28375] RSP: 002b:00007f82e3a6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 787.915343][T28375] RAX: ffffffffffffffda RBX: 00007f82e2db5fa0 RCX: 00007f82e2b8eb69 [ 787.915359][T28375] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 787.915372][T28375] RBP: 00007f82e3a6f090 R08: 0000000000000000 R09: 0000000000000000 [ 787.915385][T28375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 787.915397][T28375] R13: 0000000000000000 R14: 00007f82e2db5fa0 R15: 00007ffe371e68a8 [ 787.915442][T28375] [ 788.243943][ T1165] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 788.253481][T28373] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 788.352761][ T1165] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 788.487335][ T1154] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 788.612151][T21470] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 788.733363][ T1154] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 788.912479][T28395] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 789.082081][T28405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7269'. [ 789.107111][T28401] bond17: entered promiscuous mode [ 789.113587][T28405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7269'. [ 789.131563][T28401] 8021q: adding VLAN 0 to HW filter on device bond17 [ 789.162103][T28405] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7269'. [ 789.208222][T28402] bond17: (slave bridge6): making interface the new active one [ 789.222982][T28406] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7269'. [ 789.242377][T28402] bridge6: entered promiscuous mode [ 789.253437][T28402] bond17: (slave bridge6): Enslaving as an active interface with an up link [ 789.276645][T28405] validate_nla: 62 callbacks suppressed [ 789.276667][T28405] netlink: 'syz.0.7269': attribute type 30 has an invalid length. [ 789.523516][T28420] netlink: 'syz.4.7272': attribute type 3 has an invalid length. [ 789.844543][T28430] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 790.656254][T28458] netlink: 'syz.1.7290': attribute type 10 has an invalid length. [ 790.665928][T28458] bond0: (slave wlan1): Opening slave failed [ 790.912213][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 791.101284][T28476] netlink: 'syz.1.7293': attribute type 3 has an invalid length. [ 791.155133][T28477] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7) [ 791.643575][T28486] netlink: 'syz.0.7297': attribute type 3 has an invalid length. [ 791.730295][T28490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 791.822377][T28490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 791.864433][T28490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 792.233096][ T1165] net_ratelimit: 25 callbacks suppressed [ 792.233120][ T1165] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 792.362804][T23622] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 792.429250][T28503] netlink: 'syz.1.7303': attribute type 10 has an invalid length. [ 792.439715][T28503] bond0: (slave wlan1): Opening slave failed [ 792.483128][T21470] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 792.599982][T21470] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 792.639339][T28508] __nla_validate_parse: 7 callbacks suppressed [ 792.639364][T28508] netlink: 844 bytes leftover after parsing attributes in process `syz.3.7307'. [ 792.722154][ T1154] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 792.814123][T28514] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 792.853065][ T1154] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 792.964039][ T1165] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 793.092349][T21470] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 793.165239][T28523] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 793.202191][T23622] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 793.316501][T23622] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 793.371426][T28540] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7317'. [ 793.404405][T28540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 793.476528][T28545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 793.489741][T28540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 793.504940][T28540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7317'. [ 793.604386][T28553] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7321'. [ 793.617460][T28552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7322'. [ 793.751799][T28559] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7325'. [ 794.109804][T28574] FAULT_INJECTION: forcing a failure. [ 794.109804][T28574] name failslab, interval 1, probability 0, space 0, times 0 [ 794.167022][T28574] CPU: 1 UID: 0 PID: 28574 Comm: syz.3.7332 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 794.167054][T28574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 794.167068][T28574] Call Trace: [ 794.167076][T28574] [ 794.167087][T28574] dump_stack_lvl+0x189/0x250 [ 794.167115][T28574] ? __pfx____ratelimit+0x10/0x10 [ 794.167144][T28574] ? __pfx_dump_stack_lvl+0x10/0x10 [ 794.167167][T28574] ? __pfx__printk+0x10/0x10 [ 794.167200][T28574] ? __pfx___might_resched+0x10/0x10 [ 794.167236][T28574] should_fail_ex+0x414/0x560 [ 794.167272][T28574] should_failslab+0xa8/0x100 [ 794.167294][T28574] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 794.167325][T28574] ? __alloc_skb+0x112/0x2d0 [ 794.167360][T28574] __alloc_skb+0x112/0x2d0 [ 794.167395][T28574] netlink_sendmsg+0x5c6/0xb30 [ 794.167438][T28574] ? __pfx_netlink_sendmsg+0x10/0x10 [ 794.167473][T28574] ? aa_sock_msg_perm+0x94/0x160 [ 794.167503][T28574] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 794.167526][T28574] ? __pfx_netlink_sendmsg+0x10/0x10 [ 794.167556][T28574] __sock_sendmsg+0x219/0x270 [ 794.167588][T28574] ____sys_sendmsg+0x505/0x830 [ 794.167628][T28574] ? __pfx_____sys_sendmsg+0x10/0x10 [ 794.167662][T28574] ? import_iovec+0x74/0xa0 [ 794.167696][T28574] ___sys_sendmsg+0x21f/0x2a0 [ 794.167722][T28574] ? __pfx____sys_sendmsg+0x10/0x10 [ 794.167789][T28574] ? __fget_files+0x2a/0x420 [ 794.167808][T28574] ? __fget_files+0x3a0/0x420 [ 794.167842][T28574] __x64_sys_sendmsg+0x19b/0x260 [ 794.167867][T28574] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 794.167902][T28574] ? __pfx_ksys_write+0x10/0x10 [ 794.167929][T28574] ? rcu_is_watching+0x15/0xb0 [ 794.167966][T28574] ? do_syscall_64+0xbe/0x3b0 [ 794.168000][T28574] do_syscall_64+0xfa/0x3b0 [ 794.168027][T28574] ? lockdep_hardirqs_on+0x9c/0x150 [ 794.168055][T28574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.168076][T28574] ? clear_bhb_loop+0x60/0xb0 [ 794.168102][T28574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.168122][T28574] RIP: 0033:0x7fa61098eb69 [ 794.168142][T28574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 794.168161][T28574] RSP: 002b:00007fa611844038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 794.168185][T28574] RAX: ffffffffffffffda RBX: 00007fa610bb5fa0 RCX: 00007fa61098eb69 [ 794.168201][T28574] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 794.168215][T28574] RBP: 00007fa611844090 R08: 0000000000000000 R09: 0000000000000000 [ 794.168228][T28574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 794.168241][T28574] R13: 0000000000000000 R14: 00007fa610bb5fa0 R15: 00007ffd3b2098b8 [ 794.168277][T28574] [ 794.510784][T28581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7334'. [ 794.817792][T28597] netlink: 'syz.1.7339': attribute type 1 has an invalid length. [ 794.929027][T28605] FAULT_INJECTION: forcing a failure. [ 794.929027][T28605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 794.957365][T28605] CPU: 1 UID: 0 PID: 28605 Comm: syz.0.7340 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 794.957398][T28605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 794.957411][T28605] Call Trace: [ 794.957420][T28605] [ 794.957430][T28605] dump_stack_lvl+0x189/0x250 [ 794.957458][T28605] ? __pfx____ratelimit+0x10/0x10 [ 794.957488][T28605] ? __pfx_dump_stack_lvl+0x10/0x10 [ 794.957511][T28605] ? __pfx__printk+0x10/0x10 [ 794.957537][T28605] ? __might_fault+0xb0/0x130 [ 794.957580][T28605] should_fail_ex+0x414/0x560 [ 794.957627][T28605] _copy_from_iter+0x1db/0x16f0 [ 794.957659][T28605] ? rcu_is_watching+0x15/0xb0 [ 794.957691][T28605] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 794.957724][T28605] ? __pfx__copy_from_iter+0x10/0x10 [ 794.957752][T28605] ? __build_skb_around+0x257/0x3e0 [ 794.957788][T28605] ? netlink_sendmsg+0x642/0xb30 [ 794.957815][T28605] ? skb_put+0x11b/0x210 [ 794.957839][T28605] netlink_sendmsg+0x6b2/0xb30 [ 794.957879][T28605] ? __pfx_netlink_sendmsg+0x10/0x10 [ 794.957913][T28605] ? aa_sock_msg_perm+0x94/0x160 [ 794.957942][T28605] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 794.957965][T28605] ? __pfx_netlink_sendmsg+0x10/0x10 [ 794.957996][T28605] __sock_sendmsg+0x219/0x270 [ 794.958027][T28605] ____sys_sendmsg+0x505/0x830 [ 794.958057][T28605] ? __pfx_____sys_sendmsg+0x10/0x10 [ 794.958091][T28605] ? import_iovec+0x74/0xa0 [ 794.958124][T28605] ___sys_sendmsg+0x21f/0x2a0 [ 794.958148][T28605] ? __pfx____sys_sendmsg+0x10/0x10 [ 794.958215][T28605] ? __fget_files+0x2a/0x420 [ 794.958235][T28605] ? __fget_files+0x3a0/0x420 [ 794.958268][T28605] __x64_sys_sendmsg+0x19b/0x260 [ 794.958294][T28605] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 794.958334][T28605] ? __pfx_ksys_write+0x10/0x10 [ 794.958360][T28605] ? rcu_is_watching+0x15/0xb0 [ 794.958397][T28605] ? do_syscall_64+0xbe/0x3b0 [ 794.958432][T28605] do_syscall_64+0xfa/0x3b0 [ 794.958459][T28605] ? lockdep_hardirqs_on+0x9c/0x150 [ 794.958487][T28605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.958507][T28605] ? clear_bhb_loop+0x60/0xb0 [ 794.958532][T28605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.958552][T28605] RIP: 0033:0x7f82e2b8eb69 [ 794.958571][T28605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 794.958590][T28605] RSP: 002b:00007f82e3a2d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 794.958612][T28605] RAX: ffffffffffffffda RBX: 00007f82e2db6160 RCX: 00007f82e2b8eb69 [ 794.958637][T28605] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000008 [ 794.958650][T28605] RBP: 00007f82e3a2d090 R08: 0000000000000000 R09: 0000000000000000 [ 794.958664][T28605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 794.958676][T28605] R13: 0000000000000000 R14: 00007f82e2db6160 R15: 00007ffe371e68a8 [ 794.958712][T28605] [ 795.392205][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 795.472981][T28612] bridge0: entered allmulticast mode [ 795.512831][T28615] netlink: 'syz.1.7342': attribute type 3 has an invalid length. [ 795.628811][T28617] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7343'. [ 795.711817][T28624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 795.731574][T28625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7344'. [ 795.783466][T28624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 795.814047][T28624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 795.845309][T28624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7343'. [ 795.848657][T28628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 796.002831][T28628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 796.037083][T28628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 796.298551][T28645] netlink: 'syz.2.7351': attribute type 10 has an invalid length. [ 796.488447][T28653] netlink: 'syz.0.7356': attribute type 10 has an invalid length. [ 796.992553][T28674] netlink: 'syz.4.7363': attribute type 10 has an invalid length. [ 797.342986][ T4558] net_ratelimit: 29 callbacks suppressed [ 797.343008][ T4558] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 797.516055][ T1165] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 797.642609][T23622] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 797.671620][T28702] __nla_validate_parse: 8 callbacks suppressed [ 797.671642][T28702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7372'. [ 797.706922][T28698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7370'. [ 797.716363][T28698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7370'. [ 797.725971][T28698] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7370'. [ 797.776075][T28706] netlink: 'syz.0.7372': attribute type 1 has an invalid length. [ 797.800826][T28707] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7370'. [ 797.813234][ T1165] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 797.818042][T28704] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 797.959612][ T1165] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 797.993396][T28710] 8021q: adding VLAN 0 to HW filter on device bond14 [ 798.091262][T28718] netlink: 'syz.2.7376': attribute type 1 has an invalid length. [ 798.319894][T28710] bond14 (unregistering): Released all slaves [ 798.400880][T28718] 8021q: adding VLAN 0 to HW filter on device bond20 [ 798.423182][ T4558] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 798.534968][ T1154] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 798.664758][T21470] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 798.786739][T28750] erspan0 speed is unknown, defaulting to 1000 [ 798.804110][ T1154] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 798.888014][T28758] smc: adding net device syzkaller1 with user defined pnetid SYZ2 [ 799.136075][T28763] netlink: 'syz.3.7388': attribute type 3 has an invalid length. [ 799.193926][T28757] smc: removing net device syzkaller1 with user defined pnetid SYZ2 [ 799.259483][T28764] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7388'. [ 799.489170][T28750] lo speed is unknown, defaulting to 1000 [ 799.550963][T28774] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7391'. [ 800.302819][T28794] FAULT_INJECTION: forcing a failure. [ 800.302819][T28794] name failslab, interval 1, probability 0, space 0, times 0 [ 800.356868][T28794] CPU: 0 UID: 0 PID: 28794 Comm: syz.3.7397 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 800.356899][T28794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 800.356911][T28794] Call Trace: [ 800.356920][T28794] [ 800.356929][T28794] dump_stack_lvl+0x189/0x250 [ 800.356956][T28794] ? __pfx____ratelimit+0x10/0x10 [ 800.356985][T28794] ? __pfx_dump_stack_lvl+0x10/0x10 [ 800.357005][T28794] ? __pfx__printk+0x10/0x10 [ 800.357033][T28794] ? __pfx___might_resched+0x10/0x10 [ 800.357062][T28794] ? fs_reclaim_acquire+0x7d/0x100 [ 800.357090][T28794] should_fail_ex+0x414/0x560 [ 800.357128][T28794] should_failslab+0xa8/0x100 [ 800.357149][T28794] __kmalloc_noprof+0xcb/0x4f0 [ 800.357177][T28794] ? tomoyo_encode+0x28b/0x550 [ 800.357211][T28794] tomoyo_encode+0x28b/0x550 [ 800.357246][T28794] tomoyo_realpath_from_path+0x58d/0x5d0 [ 800.357278][T28794] ? tomoyo_domain+0xd9/0x130 [ 800.357314][T28794] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 800.357338][T28794] tomoyo_path_number_perm+0x1e8/0x5a0 [ 800.357366][T28794] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 800.357412][T28794] ? __lock_acquire+0xab9/0xd20 [ 800.357465][T28794] ? __fget_files+0x2a/0x420 [ 800.357488][T28794] ? __fget_files+0x2a/0x420 [ 800.357506][T28794] ? __fget_files+0x3a0/0x420 [ 800.357528][T28794] ? __fget_files+0x2a/0x420 [ 800.357553][T28794] security_file_ioctl+0xcb/0x2d0 [ 800.357578][T28794] __se_sys_ioctl+0x47/0x170 [ 800.357617][T28794] do_syscall_64+0xfa/0x3b0 [ 800.357644][T28794] ? lockdep_hardirqs_on+0x9c/0x150 [ 800.357671][T28794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.357689][T28794] ? clear_bhb_loop+0x60/0xb0 [ 800.357714][T28794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.357731][T28794] RIP: 0033:0x7fa61098eb69 [ 800.357749][T28794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 800.357766][T28794] RSP: 002b:00007fa611844038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 800.357788][T28794] RAX: ffffffffffffffda RBX: 00007fa610bb5fa0 RCX: 00007fa61098eb69 [ 800.357803][T28794] RDX: 0000200000000440 RSI: 0000000000008b07 RDI: 0000000000000004 [ 800.357815][T28794] RBP: 00007fa611844090 R08: 0000000000000000 R09: 0000000000000000 [ 800.357827][T28794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 800.357839][T28794] R13: 0000000000000000 R14: 00007fa610bb5fa0 R15: 00007ffd3b2098b8 [ 800.357873][T28794] [ 800.357924][T28794] ERROR: Out of memory at tomoyo_realpath_from_path. [ 800.704193][T28803] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7401'. [ 800.717206][T28803] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7401'. [ 800.727009][T28803] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7401'. [ 801.313526][T28826] syz_tun: entered allmulticast mode [ 801.633105][T28840] syz.1.7412: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 801.655275][T28833] erspan0 speed is unknown, defaulting to 1000 [ 801.719482][T28840] CPU: 1 UID: 0 PID: 28840 Comm: syz.1.7412 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 801.719516][T28840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 801.719529][T28840] Call Trace: [ 801.719539][T28840] [ 801.719549][T28840] dump_stack_lvl+0x189/0x250 [ 801.719590][T28840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 801.719614][T28840] ? __pfx__printk+0x10/0x10 [ 801.719642][T28840] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 801.719668][T28840] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 801.719695][T28840] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 801.719724][T28840] warn_alloc+0x214/0x310 [ 801.719746][T28840] ? stack_depot_save_flags+0x40/0x900 [ 801.719773][T28840] ? __pfx_warn_alloc+0x10/0x10 [ 801.719799][T28840] ? kasan_save_track+0x4f/0x80 [ 801.719828][T28840] ? xskq_create+0x56/0x170 [ 801.719853][T28840] ? xsk_init_queue+0xb0/0x110 [ 801.719878][T28840] ? xsk_setsockopt+0x4dc/0x8d0 [ 801.719901][T28840] ? do_sock_setsockopt+0x17c/0x1b0 [ 801.719921][T28840] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 801.719939][T28840] ? do_syscall_64+0xfa/0x3b0 [ 801.719967][T28840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.719999][T28840] __vmalloc_node_range_noprof+0x125/0x12f0 [ 801.720060][T28840] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 801.720090][T28840] ? __kasan_kmalloc+0x93/0xb0 [ 801.720125][T28840] vmalloc_user_noprof+0xad/0xf0 [ 801.720147][T28840] ? xskq_create+0xbf/0x170 [ 801.720176][T28840] xskq_create+0xbf/0x170 [ 801.720208][T28840] xsk_init_queue+0xb0/0x110 [ 801.720238][T28840] xsk_setsockopt+0x4dc/0x8d0 [ 801.720268][T28840] ? __pfx_xsk_setsockopt+0x10/0x10 [ 801.720295][T28840] ? __pfx_aa_sk_perm+0x10/0x10 [ 801.720329][T28840] ? aa_sock_opt_perm+0x74/0x110 [ 801.720360][T28840] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 801.720384][T28840] ? __pfx_xsk_setsockopt+0x10/0x10 [ 801.720414][T28840] do_sock_setsockopt+0x17c/0x1b0 [ 801.720442][T28840] __x64_sys_setsockopt+0x13f/0x1b0 [ 801.720472][T28840] do_syscall_64+0xfa/0x3b0 [ 801.720506][T28840] ? lockdep_hardirqs_on+0x9c/0x150 [ 801.720535][T28840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.720557][T28840] ? clear_bhb_loop+0x60/0xb0 [ 801.720593][T28840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.720613][T28840] RIP: 0033:0x7f9089d8eb69 [ 801.720634][T28840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 801.720653][T28840] RSP: 002b:00007f9087bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 801.720677][T28840] RAX: ffffffffffffffda RBX: 00007f9089fb5fa0 RCX: 00007f9089d8eb69 [ 801.720693][T28840] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 801.720707][T28840] RBP: 00007f9089e11df1 R08: 0000000000000004 R09: 0000000000000000 [ 801.720720][T28840] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 801.720734][T28840] R13: 0000000000000000 R14: 00007f9089fb5fa0 R15: 00007ffce89579d8 [ 801.720772][T28840] [ 801.721705][T28840] Mem-Info: [ 802.042637][T28840] active_anon:6759 inactive_anon:0 isolated_anon:0 [ 802.042637][T28840] active_file:2238 inactive_file:40114 isolated_file:0 [ 802.042637][T28840] unevictable:768 dirty:306 writeback:0 [ 802.042637][T28840] slab_reclaimable:12944 slab_unreclaimable:143161 [ 802.042637][T28840] mapped:30823 shmem:1377 pagetables:1010 [ 802.042637][T28840] sec_pagetables:0 bounce:0 [ 802.042637][T28840] kernel_misc_reclaimable:0 [ 802.042637][T28840] free:1274722 free_pcp:12382 free_cma:0 [ 802.095039][T28840] Node 0 active_anon:27028kB inactive_anon:0kB active_file:8952kB inactive_file:160252kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123288kB dirty:1244kB writeback:0kB shmem:3972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:17936kB pagetables:3920kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 802.159279][T28840] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 802.199983][T28840] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 802.250179][T28840] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 802.266529][T28840] Node 0 DMA32 free:1185384kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26980kB inactive_anon:0kB active_file:8952kB inactive_file:158436kB unevictable:1536kB writepending:1244kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:30784kB local_pcp:18340kB free_cma:0kB [ 802.304352][T28840] lowmem_reserve[]: 0 0 1 1 1 [ 802.309260][T28840] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1816kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 802.344342][T28840] lowmem_reserve[]: 0 0 0 0 0 [ 802.349197][T28840] Node 1 Normal free:3898204kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:18268kB local_pcp:10392kB free_cma:0kB [ 802.403563][T21470] net_ratelimit: 27 callbacks suppressed [ 802.403586][T21470] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 802.427344][T28840] lowmem_reserve[]: 0 0 0 0 0 [ 802.461492][T28840] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 802.509488][T28833] lo speed is unknown, defaulting to 1000 [ 802.510715][T28850] erspan0 speed is unknown, defaulting to 1000 [ 802.552110][T28840] Node 0 DMA32: 995*4kB (UME) 1152*8kB (UME) 888*16kB (UME) 1091*32kB (UME) 172*64kB (UME) 22*128kB (UM) 20*256kB (UM) 9*512kB (UM) 11*1024kB (UME) 5*2048kB (UME) 263*4096kB (UM) = 1184620kB [ 802.577180][T28840] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 802.592258][T23622] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 802.642870][T28840] Node 1 Normal: 245*4kB (UE) 57*8kB (UME) 32*16kB (UME) 134*32kB (UME) 32*64kB (UME) 10*128kB (UME) 4*256kB (UM) 3*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 947*4096kB (M) = 3898204kB [ 802.671633][T28840] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 802.722995][T21470] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 802.742258][T28840] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 802.764178][T28840] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 802.795810][T28840] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 802.812501][T28840] 43726 total pagecache pages [ 802.817477][T28840] 0 pages in swap cache [ 802.827474][T28840] Free swap = 124996kB [ 802.835728][T28840] Total swap = 124996kB [ 802.839925][T28840] 2097051 pages RAM [ 802.864412][T28840] 0 pages HighMem/MovableOnly [ 802.881205][T28840] 424872 pages reserved [ 802.885928][T28840] 0 pages cma reserved [ 802.913228][ T1165] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 803.007034][T28862] 8021q: adding VLAN 0 to HW filter on device bond21 [ 803.324130][T28858] bond21 (unregistering): Released all slaves [ 803.369452][T28850] lo speed is unknown, defaulting to 1000 [ 803.385685][ T1165] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 803.466540][T28875] __nla_validate_parse: 5 callbacks suppressed [ 803.466562][T28875] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7422'. [ 803.500943][T28877] netlink: 844 bytes leftover after parsing attributes in process `syz.2.7423'. [ 803.519745][T28875] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7422'. [ 803.582603][T28878] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7422'. [ 803.586917][T28875] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7422'. [ 803.653820][T21470] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 803.775640][ T4558] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 804.014461][ T1165] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 804.106688][T28888] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7428'. [ 804.212539][ T1165] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 804.322149][ T1165] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 805.207444][T28908] FAULT_INJECTION: forcing a failure. [ 805.207444][T28908] name failslab, interval 1, probability 0, space 0, times 0 [ 805.220534][T28908] CPU: 1 UID: 0 PID: 28908 Comm: syz.4.7435 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 805.220566][T28908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 805.220579][T28908] Call Trace: [ 805.220589][T28908] [ 805.220598][T28908] dump_stack_lvl+0x189/0x250 [ 805.220626][T28908] ? __pfx____ratelimit+0x10/0x10 [ 805.220656][T28908] ? __pfx_dump_stack_lvl+0x10/0x10 [ 805.220679][T28908] ? __pfx__printk+0x10/0x10 [ 805.220713][T28908] ? __pfx___might_resched+0x10/0x10 [ 805.220742][T28908] ? fs_reclaim_acquire+0x7d/0x100 [ 805.220771][T28908] should_fail_ex+0x414/0x560 [ 805.220810][T28908] should_failslab+0xa8/0x100 [ 805.220842][T28908] __kmalloc_cache_noprof+0x70/0x3d0 [ 805.220872][T28908] ? nf_tables_newtable+0x435/0x1890 [ 805.220901][T28908] nf_tables_newtable+0x435/0x1890 [ 805.220922][T28908] ? __pfx_nfnetlink_has_listeners+0x2/0x10 [ 805.220974][T28908] nfnetlink_rcv+0x112f/0x2520 [ 805.221045][T28908] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 805.221094][T28908] ? ref_tracker_free+0x63a/0x7d0 [ 805.221156][T28908] ? __netlink_deliver_tap+0x807/0x850 [ 805.221186][T28908] ? netlink_deliver_tap+0x2e/0x1b0 [ 805.221240][T28908] netlink_unicast+0x82c/0x9e0 [ 805.221280][T28908] ? __pfx_netlink_unicast+0x10/0x10 [ 805.221311][T28908] ? netlink_sendmsg+0x642/0xb30 [ 805.221339][T28908] ? skb_put+0x11b/0x210 [ 805.221365][T28908] netlink_sendmsg+0x805/0xb30 [ 805.221408][T28908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 805.221443][T28908] ? aa_sock_msg_perm+0x94/0x160 [ 805.221473][T28908] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 805.221497][T28908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 805.221528][T28908] __sock_sendmsg+0x219/0x270 [ 805.221566][T28908] ____sys_sendmsg+0x505/0x830 [ 805.221596][T28908] ? __pfx_____sys_sendmsg+0x10/0x10 [ 805.221632][T28908] ? import_iovec+0x74/0xa0 [ 805.221666][T28908] ___sys_sendmsg+0x21f/0x2a0 [ 805.221693][T28908] ? __pfx____sys_sendmsg+0x10/0x10 [ 805.221766][T28908] ? __fget_files+0x2a/0x420 [ 805.221785][T28908] ? __fget_files+0x3a0/0x420 [ 805.221828][T28908] __x64_sys_sendmsg+0x19b/0x260 [ 805.221855][T28908] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 805.221891][T28908] ? __pfx_ksys_write+0x10/0x10 [ 805.221917][T28908] ? rcu_is_watching+0x15/0xb0 [ 805.221953][T28908] ? do_syscall_64+0xbe/0x3b0 [ 805.221987][T28908] do_syscall_64+0xfa/0x3b0 [ 805.222014][T28908] ? lockdep_hardirqs_on+0x9c/0x150 [ 805.222041][T28908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.222060][T28908] ? clear_bhb_loop+0x60/0xb0 [ 805.222086][T28908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.222105][T28908] RIP: 0033:0x7f190c58eb69 [ 805.222124][T28908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 805.222142][T28908] RSP: 002b:00007f190d4c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 805.222167][T28908] RAX: ffffffffffffffda RBX: 00007f190c7b5fa0 RCX: 00007f190c58eb69 [ 805.222183][T28908] RDX: 0000000000000080 RSI: 00002000000000c0 RDI: 0000000000000003 [ 805.222196][T28908] RBP: 00007f190d4c3090 R08: 0000000000000000 R09: 0000000000000000 [ 805.222210][T28908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 805.222223][T28908] R13: 0000000000000000 R14: 00007f190c7b5fa0 R15: 00007ffd14072eb8 [ 805.222260][T28908] [ 805.567367][T28910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7436'. [ 805.748788][T28917] netlink: 'syz.4.7438': attribute type 1 has an invalid length. [ 805.804306][T28917] 8021q: adding VLAN 0 to HW filter on device bond22 [ 805.827115][T28924] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7440'. [ 805.836610][T28924] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7440'. [ 805.845685][T28924] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7440'. [ 805.861513][T28922] bond22: (slave gretap2): making interface the new active one [ 805.873198][T28922] bond22: (slave gretap2): Enslaving as an active interface with an up link [ 806.615822][T28942] netlink: 'syz.2.7445': attribute type 13 has an invalid length. [ 806.683663][T28942] gretap0: refused to change device tx_queue_len [ 806.708977][T28945] IPVS: Unknown mcast interface: veth0_virt_wifi [ 807.373303][T28981] netlink: 'syz.3.7457': attribute type 7 has an invalid length. [ 807.396163][T28981] netlink: 'syz.3.7457': attribute type 8 has an invalid length. [ 807.413576][ T13] net_ratelimit: 23 callbacks suppressed [ 807.413602][ T13] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 807.540674][T28983] smc: adding net device syzkaller1 with user defined pnetid SYZ2 [ 807.568164][T28983] syzkaller1: entered promiscuous mode [ 807.579893][T28983] syzkaller1: entered allmulticast mode [ 807.604994][T28987] netlink: 'syz.0.7460': attribute type 10 has an invalid length. [ 807.613021][ T1154] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 807.631915][T28992] netlink: 'syz.2.7462': attribute type 1 has an invalid length. [ 807.662712][T28992] FAULT_INJECTION: forcing a failure. [ 807.662712][T28992] name failslab, interval 1, probability 0, space 0, times 0 [ 807.684970][T28992] CPU: 0 UID: 0 PID: 28992 Comm: syz.2.7462 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 807.685003][T28992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 807.685016][T28992] Call Trace: [ 807.685026][T28992] [ 807.685036][T28992] dump_stack_lvl+0x189/0x250 [ 807.685063][T28992] ? __pfx____ratelimit+0x10/0x10 [ 807.685092][T28992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 807.685114][T28992] ? __pfx__printk+0x10/0x10 [ 807.685147][T28992] ? __pfx___might_resched+0x10/0x10 [ 807.685176][T28992] ? fs_reclaim_acquire+0x7d/0x100 [ 807.685204][T28992] should_fail_ex+0x414/0x560 [ 807.685243][T28992] should_failslab+0xa8/0x100 [ 807.685265][T28992] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 807.685296][T28992] ? __alloc_workqueue+0x8e8/0x1b70 [ 807.685327][T28992] __alloc_workqueue+0x8e8/0x1b70 [ 807.685355][T28992] ? genl_rcv+0x28/0x40 [ 807.685391][T28992] alloc_workqueue+0xd4/0x210 [ 807.685424][T28992] ? __pfx_alloc_workqueue+0x10/0x10 [ 807.685466][T28992] ieee802154_register_hw+0x13b/0x980 [ 807.685504][T28992] ? __pfx_ieee802154_register_hw+0x10/0x10 [ 807.685534][T28992] ? ksm_get_folio+0xaf0/0xb20 [ 807.685559][T28992] ? hwsim_add_one+0x365/0x1420 [ 807.685594][T28992] hwsim_add_one+0x4b2/0x1420 [ 807.685638][T28992] genl_family_rcv_msg_doit+0x215/0x300 [ 807.685672][T28992] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 807.685714][T28992] ? bpf_lsm_capable+0x9/0x20 [ 807.685741][T28992] ? security_capable+0x7e/0x2e0 [ 807.685777][T28992] genl_rcv_msg+0x60e/0x790 [ 807.685820][T28992] ? __pfx_genl_rcv_msg+0x10/0x10 [ 807.685844][T28992] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 807.685899][T28992] netlink_rcv_skb+0x205/0x470 [ 807.685926][T28992] ? __lock_acquire+0xab9/0xd20 [ 807.685955][T28992] ? __pfx_genl_rcv_msg+0x10/0x10 [ 807.685981][T28992] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 807.686035][T28992] ? down_read+0x1ad/0x2e0 [ 807.686057][T28992] genl_rcv+0x28/0x40 [ 807.686079][T28992] netlink_unicast+0x82c/0x9e0 [ 807.686116][T28992] ? __pfx_netlink_unicast+0x10/0x10 [ 807.686145][T28992] ? netlink_sendmsg+0x642/0xb30 [ 807.686171][T28992] ? skb_put+0x11b/0x210 [ 807.686196][T28992] netlink_sendmsg+0x805/0xb30 [ 807.686236][T28992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 807.686269][T28992] ? aa_sock_msg_perm+0x94/0x160 [ 807.686297][T28992] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 807.686318][T28992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 807.686348][T28992] __sock_sendmsg+0x219/0x270 [ 807.686378][T28992] ____sys_sendmsg+0x505/0x830 [ 807.686407][T28992] ? __pfx_____sys_sendmsg+0x10/0x10 [ 807.686440][T28992] ? import_iovec+0x74/0xa0 [ 807.686471][T28992] ___sys_sendmsg+0x21f/0x2a0 [ 807.686496][T28992] ? __pfx____sys_sendmsg+0x10/0x10 [ 807.686564][T28992] ? __fget_files+0x2a/0x420 [ 807.686583][T28992] ? __fget_files+0x3a0/0x420 [ 807.686616][T28992] __x64_sys_sendmsg+0x19b/0x260 [ 807.686641][T28992] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 807.686676][T28992] ? __pfx_ksys_write+0x10/0x10 [ 807.686701][T28992] ? rcu_is_watching+0x15/0xb0 [ 807.686737][T28992] ? do_syscall_64+0xbe/0x3b0 [ 807.686772][T28992] do_syscall_64+0xfa/0x3b0 [ 807.686799][T28992] ? lockdep_hardirqs_on+0x9c/0x150 [ 807.686835][T28992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.686854][T28992] ? clear_bhb_loop+0x60/0xb0 [ 807.686880][T28992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.686900][T28992] RIP: 0033:0x7fd4c0b8eb69 [ 807.686921][T28992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 807.686938][T28992] RSP: 002b:00007fd4c1a14038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 807.686962][T28992] RAX: ffffffffffffffda RBX: 00007fd4c0db5fa0 RCX: 00007fd4c0b8eb69 [ 807.686977][T28992] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 807.686990][T28992] RBP: 00007fd4c1a14090 R08: 0000000000000000 R09: 0000000000000000 [ 807.687004][T28992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 807.687017][T28992] R13: 0000000000000000 R14: 00007fd4c0db5fa0 R15: 00007fffe5c93bb8 [ 807.687055][T28992] [ 808.098068][T28983] smc: removing net device syzkaller1 with user defined pnetid SYZ2 [ 808.133603][ T12] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 808.150269][T28997] netlink: 'syz.2.7464': attribute type 10 has an invalid length. [ 808.260965][ T1154] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 808.402590][T29001] IPv4: Oversized IP packet from 127.202.26.0 [ 808.463126][ T1154] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 808.481460][T29012] __nla_validate_parse: 12 callbacks suppressed [ 808.481659][T29012] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7471'. [ 808.582192][ T1154] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 808.699896][ T1154] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 808.788267][T29023] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7) [ 808.832509][T21470] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 808.955923][T29024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 808.967083][T21470] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 809.207188][T29038] netlink: 'syz.4.7478': attribute type 10 has an invalid length. [ 809.723714][T29059] netlink: 'syz.3.7485': attribute type 1 has an invalid length. [ 809.741911][T29058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7486'. [ 809.826765][T29059] 8021q: adding VLAN 0 to HW filter on device bond14 [ 809.838602][T29064] FAULT_INJECTION: forcing a failure. [ 809.838602][T29064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 809.890916][T29064] CPU: 0 UID: 0 PID: 29064 Comm: syz.2.7489 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 809.890948][T29064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 809.890961][T29064] Call Trace: [ 809.890969][T29064] [ 809.890979][T29064] dump_stack_lvl+0x189/0x250 [ 809.891007][T29064] ? __pfx____ratelimit+0x10/0x10 [ 809.891036][T29064] ? __pfx_dump_stack_lvl+0x10/0x10 [ 809.891058][T29064] ? __pfx__printk+0x10/0x10 [ 809.891100][T29064] should_fail_ex+0x414/0x560 [ 809.891138][T29064] _copy_to_user+0x31/0xb0 [ 809.891170][T29064] simple_read_from_buffer+0xe1/0x170 [ 809.891206][T29064] proc_fail_nth_read+0x1b3/0x220 [ 809.891235][T29064] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 809.891263][T29064] ? rw_verify_area+0x258/0x650 [ 809.891290][T29064] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 809.891315][T29064] vfs_read+0x1fd/0x980 [ 809.891344][T29064] ? fdget_pos+0x247/0x320 [ 809.891369][T29064] ? __pfx___mutex_lock+0x10/0x10 [ 809.891399][T29064] ? __pfx_vfs_read+0x10/0x10 [ 809.891430][T29064] ? __fget_files+0x2a/0x420 [ 809.891456][T29064] ? __fget_files+0x3a0/0x420 [ 809.891475][T29064] ? __fget_files+0x2a/0x420 [ 809.891506][T29064] ksys_read+0x145/0x250 [ 809.891532][T29064] ? __pfx_ksys_read+0x10/0x10 [ 809.891552][T29064] ? rcu_is_watching+0x15/0xb0 [ 809.891588][T29064] ? do_syscall_64+0xbe/0x3b0 [ 809.891623][T29064] do_syscall_64+0xfa/0x3b0 [ 809.891650][T29064] ? lockdep_hardirqs_on+0x9c/0x150 [ 809.891678][T29064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.891699][T29064] ? clear_bhb_loop+0x60/0xb0 [ 809.891726][T29064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.891756][T29064] RIP: 0033:0x7fd4c0b8d57c [ 809.891777][T29064] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 809.891796][T29064] RSP: 002b:00007fd4c1a14030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 809.891819][T29064] RAX: ffffffffffffffda RBX: 00007fd4c0db5fa0 RCX: 00007fd4c0b8d57c [ 809.891835][T29064] RDX: 000000000000000f RSI: 00007fd4c1a140a0 RDI: 0000000000000004 [ 809.891849][T29064] RBP: 00007fd4c1a14090 R08: 0000000000000000 R09: 0000000000000000 [ 809.891863][T29064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 809.891876][T29064] R13: 0000000000000000 R14: 00007fd4c0db5fa0 R15: 00007fffe5c93bb8 [ 809.891913][T29064] [ 810.239530][T29075] netlink: 'syz.2.7492': attribute type 10 has an invalid length. [ 810.653141][T29101] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7502'. [ 810.662793][T29101] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7502'. [ 810.671862][T29101] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7502'. [ 810.711929][T29101] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7502'. [ 810.796248][T29105] netlink: 'syz.2.7504': attribute type 1 has an invalid length. [ 811.026465][T29111] 8021q: adding VLAN 0 to HW filter on device bond21 [ 811.292987][T29116] bond21 (unregistering): Released all slaves [ 811.323813][T29118] FAULT_INJECTION: forcing a failure. [ 811.323813][T29118] name failslab, interval 1, probability 0, space 0, times 0 [ 811.347955][T29118] CPU: 1 UID: 0 PID: 29118 Comm: syz.0.7507 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 811.347987][T29118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 811.348000][T29118] Call Trace: [ 811.348009][T29118] [ 811.348019][T29118] dump_stack_lvl+0x189/0x250 [ 811.348052][T29118] ? __pfx____ratelimit+0x10/0x10 [ 811.348081][T29118] ? __pfx_dump_stack_lvl+0x10/0x10 [ 811.348104][T29118] ? __pfx__printk+0x10/0x10 [ 811.348137][T29118] ? __pfx___might_resched+0x10/0x10 [ 811.348166][T29118] ? fs_reclaim_acquire+0x7d/0x100 [ 811.348194][T29118] should_fail_ex+0x414/0x560 [ 811.348232][T29118] should_failslab+0xa8/0x100 [ 811.348255][T29118] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 811.348285][T29118] ? __alloc_skb+0x112/0x2d0 [ 811.348321][T29118] __alloc_skb+0x112/0x2d0 [ 811.348357][T29118] netlink_ack+0x146/0xa50 [ 811.348384][T29118] ? __pfx_genl_rcv_msg+0x10/0x10 [ 811.348405][T29118] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 811.348427][T29118] ? __pfx_nl80211_post_doit+0x10/0x10 [ 811.348468][T29118] netlink_rcv_skb+0x28c/0x470 [ 811.348514][T29118] ? __lock_acquire+0xab9/0xd20 [ 811.348542][T29118] ? __pfx_genl_rcv_msg+0x10/0x10 [ 811.348564][T29118] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 811.348612][T29118] ? down_read+0x1ad/0x2e0 [ 811.348636][T29118] genl_rcv+0x28/0x40 [ 811.348657][T29118] netlink_unicast+0x82c/0x9e0 [ 811.348696][T29118] ? __pfx_netlink_unicast+0x10/0x10 [ 811.348727][T29118] ? netlink_sendmsg+0x642/0xb30 [ 811.348753][T29118] ? skb_put+0x11b/0x210 [ 811.348779][T29118] netlink_sendmsg+0x805/0xb30 [ 811.348830][T29118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 811.348864][T29118] ? aa_sock_msg_perm+0x94/0x160 [ 811.348893][T29118] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 811.348917][T29118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 811.348947][T29118] __sock_sendmsg+0x219/0x270 [ 811.348976][T29118] ____sys_sendmsg+0x505/0x830 [ 811.349005][T29118] ? __pfx_____sys_sendmsg+0x10/0x10 [ 811.349041][T29118] ? import_iovec+0x74/0xa0 [ 811.349073][T29118] ___sys_sendmsg+0x21f/0x2a0 [ 811.349098][T29118] ? __pfx____sys_sendmsg+0x10/0x10 [ 811.349168][T29118] ? __fget_files+0x2a/0x420 [ 811.349188][T29118] ? __fget_files+0x3a0/0x420 [ 811.349223][T29118] __x64_sys_sendmsg+0x19b/0x260 [ 811.349248][T29118] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 811.349283][T29118] ? __pfx_ksys_write+0x10/0x10 [ 811.349307][T29118] ? rcu_is_watching+0x15/0xb0 [ 811.349343][T29118] ? do_syscall_64+0xbe/0x3b0 [ 811.349371][T29118] do_syscall_64+0xfa/0x3b0 [ 811.349393][T29118] ? lockdep_hardirqs_on+0x9c/0x150 [ 811.349415][T29118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.349431][T29118] ? clear_bhb_loop+0x60/0xb0 [ 811.349452][T29118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.349467][T29118] RIP: 0033:0x7f82e2b8eb69 [ 811.349483][T29118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 811.349497][T29118] RSP: 002b:00007f82e3a6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 811.349516][T29118] RAX: ffffffffffffffda RBX: 00007f82e2db5fa0 RCX: 00007f82e2b8eb69 [ 811.349529][T29118] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 811.349539][T29118] RBP: 00007f82e3a6f090 R08: 0000000000000000 R09: 0000000000000000 [ 811.349550][T29118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 811.349560][T29118] R13: 0000000000000000 R14: 00007f82e2db5fa0 R15: 00007ffe371e68a8 [ 811.349587][T29118] [ 811.398512][T29125] syzkaller0: entered promiscuous mode [ 811.626092][T29135] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7511'. [ 811.683112][T29125] syzkaller0: entered allmulticast mode [ 811.831254][T29144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7512'. [ 812.110262][T29160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7516'. [ 812.175160][T29144] bond0: (slave team0): Releasing backup interface [ 812.184728][T29144] team0 (unregistering): left promiscuous mode [ 812.191088][T29144] team_slave_0: left promiscuous mode [ 812.197531][T29144] team_slave_1: left promiscuous mode [ 812.203483][T29144] dummy0: left promiscuous mode [ 812.212550][T29144] team0 (unregistering): Port device team_slave_0 removed [ 812.221008][T29144] team0 (unregistering): Port device team_slave_1 removed [ 812.239138][T29144] team0 (unregistering): Port device dummy0 removed [ 812.374501][T29163] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7518'. [ 812.423530][T21470] net_ratelimit: 16 callbacks suppressed [ 812.423552][T21470] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 812.783567][T21470] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 812.846198][T29179] bridge0: entered promiscuous mode [ 812.876027][T29179] bridge0: port 1(macvlan3) entered blocking state [ 812.916628][T29179] bridge0: port 1(macvlan3) entered disabled state [ 812.953477][T29179] macvlan3: entered allmulticast mode [ 812.978158][T29179] bridge0: entered allmulticast mode [ 813.025700][T29179] macvlan3: left allmulticast mode [ 813.061384][T29179] bridge0: left allmulticast mode [ 813.125182][T29179] bridge0: left promiscuous mode [ 813.373364][ T1154] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 813.498626][T29204] 8021q: adding VLAN 0 to HW filter on device bond15 [ 813.655476][T29207] bond15 (unregistering): Released all slaves [ 813.685782][T29217] vlan4: entered promiscuous mode [ 813.783756][ T1154] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 813.862215][T29221] smc: adding net device syzkaller1 with user defined pnetid SYZ2 [ 813.917521][ T1165] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 813.942547][T29221] syzkaller1: entered promiscuous mode [ 813.948330][T29221] syzkaller1: entered allmulticast mode [ 813.965503][T29221] __nla_validate_parse: 4 callbacks suppressed [ 813.965524][T29221] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7528'. [ 813.986734][T29231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7531'. [ 814.012572][T29231] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) ! [ 814.050765][T29233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7533'. [ 814.088230][T29236] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7535'. [ 814.106470][T29236] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7535'. [ 814.116741][T29236] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7535'. [ 814.135152][T29221] smc: removing net device syzkaller1 with user defined pnetid SYZ2 [ 814.153255][ T1154] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 814.153918][T29236] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7535'. [ 814.234644][T29240] netlink: 'syz.1.7536': attribute type 1 has an invalid length. [ 814.364396][ T1154] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 814.385816][T29240] 8021q: adding VLAN 0 to HW filter on device bond18 [ 814.710029][T29240] bond18 (unregistering): Released all slaves [ 814.743104][ T1165] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 814.864683][T23622] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 814.883510][ T1165] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 814.905585][T29269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7543'. [ 815.015722][T21470] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 815.258792][T29276] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7541'. [ 815.650438][T29305] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7549'. [ 816.581316][T29331] netlink: 'syz.1.7555': attribute type 3 has an invalid length. [ 817.453165][ T12] net_ratelimit: 17 callbacks suppressed [ 817.453187][ T12] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 817.613572][T23622] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 817.723987][T23622] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 817.886627][ T12] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 817.908072][T29372] erspan0 speed is unknown, defaulting to 1000 [ 817.959662][T29377] netlink: 'syz.4.7571': attribute type 10 has an invalid length. [ 818.022313][ T64] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 818.163312][T21470] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 818.280530][T29391] hsr0: entered allmulticast mode [ 818.316499][T29391] hsr_slave_0: entered allmulticast mode [ 818.340891][T29391] hsr_slave_1: entered allmulticast mode [ 818.375218][ T13] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 818.492705][T23622] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 818.544792][T29395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 818.622817][ T1154] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 818.657840][T29400] FAULT_INJECTION: forcing a failure. [ 818.657840][T29400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 818.673232][T29400] CPU: 0 UID: 0 PID: 29400 Comm: syz.0.7577 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 818.673263][T29400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 818.673277][T29400] Call Trace: [ 818.673286][T29400] [ 818.673295][T29400] dump_stack_lvl+0x189/0x250 [ 818.673322][T29400] ? __pfx____ratelimit+0x10/0x10 [ 818.673351][T29400] ? __pfx_dump_stack_lvl+0x10/0x10 [ 818.673373][T29400] ? __pfx__printk+0x10/0x10 [ 818.673399][T29400] ? __might_fault+0xb0/0x130 [ 818.673444][T29400] should_fail_ex+0x414/0x560 [ 818.673493][T29400] _copy_from_user+0x2d/0xb0 [ 818.673523][T29400] kstrtouint_from_user+0xc4/0x170 [ 818.673551][T29400] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 818.673599][T29400] proc_fail_nth_write+0x88/0x200 [ 818.673624][T29400] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 818.673656][T29400] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 818.673683][T29400] vfs_write+0x27b/0xa90 [ 818.673724][T29400] ? __pfx_vfs_write+0x10/0x10 [ 818.673755][T29400] ? __fget_files+0x2a/0x420 [ 818.673782][T29400] ? __fget_files+0x3a0/0x420 [ 818.673802][T29400] ? __fget_files+0x2a/0x420 [ 818.673834][T29400] ksys_write+0x145/0x250 [ 818.673867][T29400] ? __pfx_ksys_write+0x10/0x10 [ 818.673891][T29400] ? rcu_is_watching+0x15/0xb0 [ 818.673930][T29400] ? do_syscall_64+0xbe/0x3b0 [ 818.673965][T29400] do_syscall_64+0xfa/0x3b0 [ 818.673992][T29400] ? lockdep_hardirqs_on+0x9c/0x150 [ 818.674019][T29400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.674040][T29400] ? clear_bhb_loop+0x60/0xb0 [ 818.674067][T29400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.674087][T29400] RIP: 0033:0x7f82e2b8d61f [ 818.674107][T29400] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 818.674125][T29400] RSP: 002b:00007f82e3a6f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 818.674149][T29400] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f82e2b8d61f [ 818.674165][T29400] RDX: 0000000000000001 RSI: 00007f82e3a6f0a0 RDI: 0000000000000008 [ 818.674178][T29400] RBP: 00007f82e3a6f090 R08: 0000000000000000 R09: 0000000000000000 [ 818.674192][T29400] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 818.674206][T29400] R13: 0000000000000000 R14: 00007f82e2db5fa0 R15: 00007ffe371e68a8 [ 818.674244][T29400] [ 818.760173][T29403] netlink: 'syz.3.7576': attribute type 1 has an invalid length. [ 818.905023][ T13] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 818.989199][T29372] lo speed is unknown, defaulting to 1000 [ 819.124843][T29407] __nla_validate_parse: 7 callbacks suppressed [ 819.124866][T29407] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7579'. [ 819.149331][T29407] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7579'. [ 819.163263][T29407] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7579'. [ 819.192152][T29407] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7579'. [ 819.896971][T29427] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7584'. [ 819.912542][T29427] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7584'. [ 819.942373][T29427] netlink: 'syz.1.7584': attribute type 4 has an invalid length. [ 820.889021][T29451] gtp1: entered promiscuous mode [ 820.939127][T29451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7594'. [ 820.963932][T29451] siw: device registration error -23 [ 821.121129][T29454] bond18: entered promiscuous mode [ 821.189254][T29461] netlink: 'syz.4.7597': attribute type 10 has an invalid length. [ 821.706946][T29476] syzkaller0: entered promiscuous mode [ 821.712851][T29476] syzkaller0: entered allmulticast mode [ 821.784445][T29484] netlink: 844 bytes leftover after parsing attributes in process `syz.2.7607'. [ 821.812538][T29484] netlink: 'syz.2.7607': attribute type 4 has an invalid length. [ 821.820981][T29484] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7607'. [ 821.853874][T29486] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7605'. [ 822.007986][T29494] bridge0: port 3(macvlan0) entered blocking state [ 822.015292][T29494] bridge0: port 3(macvlan0) entered disabled state [ 822.025939][T29494] macvlan0: entered allmulticast mode [ 822.073325][T29494] macvlan0: left allmulticast mode [ 822.082835][T29492] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 822.379821][T29512] netlink: 'syz.1.7613': attribute type 10 has an invalid length. [ 822.408228][T29512] bond0: (slave wlan1): Opening slave failed [ 822.537539][ T64] net_ratelimit: 24 callbacks suppressed [ 822.537563][ T64] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 822.662117][ T64] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 822.774350][T29519] vlan2: entered promiscuous mode [ 822.801132][T29519] gretap0: entered promiscuous mode [ 822.843731][T21470] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 822.964205][T21470] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 823.068976][T29538] netlink: 'syz.0.7619': attribute type 10 has an invalid length. [ 823.093064][ T1165] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 823.125259][T29538] macvlan0: entered promiscuous mode [ 823.154450][T29538] bond0: (slave macvlan0): Enslaving as an active interface with a down link [ 823.223557][ T12] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 823.333062][ T13] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 823.375866][T29551] netem: unknown loss type 0 [ 823.388920][T29551] netem: change failed [ 823.452877][T23622] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 823.534701][T29561] netlink: 'syz.2.7626': attribute type 10 has an invalid length. [ 823.583170][ T13] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 823.713595][T23622] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 824.157784][T29592] netlink: 'syz.2.7633': attribute type 3 has an invalid length. [ 824.225426][T29593] syzkaller0: entered promiscuous mode [ 824.231055][T29593] syzkaller0: entered allmulticast mode [ 824.628252][T29603] __nla_validate_parse: 7 callbacks suppressed [ 824.628276][T29603] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7638'. [ 824.715120][T29605] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7640'. [ 824.795984][T29607] netlink: 'syz.4.7641': attribute type 10 has an invalid length. [ 824.832207][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 824.945849][T29613] netlink: 'syz.1.7643': attribute type 1 has an invalid length. [ 825.245218][T29623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7647'. [ 825.272110][T29623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7647'. [ 825.663926][T29642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7653'. [ 825.709694][T29645] netlink: 'syz.0.7654': attribute type 3 has an invalid length. [ 825.809247][T29642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7653'. [ 825.876871][T29649] FAULT_INJECTION: forcing a failure. [ 825.876871][T29649] name failslab, interval 1, probability 0, space 0, times 0 [ 825.899610][T29649] CPU: 0 UID: 0 PID: 29649 Comm: syz.1.7655 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 825.899654][T29649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 825.899668][T29649] Call Trace: [ 825.899678][T29649] [ 825.899687][T29649] dump_stack_lvl+0x189/0x250 [ 825.899729][T29649] ? __pfx____ratelimit+0x10/0x10 [ 825.899761][T29649] ? __pfx_dump_stack_lvl+0x10/0x10 [ 825.899784][T29649] ? __pfx__printk+0x10/0x10 [ 825.899814][T29649] ? __pfx___might_resched+0x10/0x10 [ 825.899845][T29649] ? fs_reclaim_acquire+0x7d/0x100 [ 825.899875][T29649] should_fail_ex+0x414/0x560 [ 825.899915][T29649] should_failslab+0xa8/0x100 [ 825.899938][T29649] __kmalloc_noprof+0xcb/0x4f0 [ 825.899967][T29649] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 825.900001][T29649] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 825.900036][T29649] genl_family_rcv_msg_doit+0xb8/0x300 [ 825.900071][T29649] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 825.900101][T29649] ? __pfx_genl_get_cmd+0x10/0x10 [ 825.900123][T29649] ? __pfx_nl80211_get_ftm_responder_stats+0x10/0x10 [ 825.900154][T29649] ? stack_trace_save+0x9c/0xe0 [ 825.900184][T29649] genl_rcv_msg+0x60e/0x790 [ 825.900217][T29649] ? __pfx_genl_rcv_msg+0x10/0x10 [ 825.900240][T29649] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 825.900261][T29649] ? __pfx_nl80211_get_ftm_responder_stats+0x10/0x10 [ 825.900281][T29649] ? __pfx_nl80211_post_doit+0x10/0x10 [ 825.900323][T29649] netlink_rcv_skb+0x205/0x470 [ 825.900351][T29649] ? __lock_acquire+0xab9/0xd20 [ 825.900382][T29649] ? __pfx_genl_rcv_msg+0x10/0x10 [ 825.900486][T29649] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 825.900555][T29649] ? down_read+0x1ad/0x2e0 [ 825.900581][T29649] genl_rcv+0x28/0x40 [ 825.900603][T29649] netlink_unicast+0x82c/0x9e0 [ 825.900643][T29649] ? __pfx_netlink_unicast+0x10/0x10 [ 825.900677][T29649] ? netlink_sendmsg+0x642/0xb30 [ 825.900703][T29649] ? skb_put+0x11b/0x210 [ 825.900729][T29649] netlink_sendmsg+0x805/0xb30 [ 825.900774][T29649] ? __pfx_netlink_sendmsg+0x10/0x10 [ 825.900810][T29649] ? aa_sock_msg_perm+0x94/0x160 [ 825.900842][T29649] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 825.900865][T29649] ? __pfx_netlink_sendmsg+0x10/0x10 [ 825.900896][T29649] __sock_sendmsg+0x219/0x270 [ 825.900928][T29649] ____sys_sendmsg+0x505/0x830 [ 825.900960][T29649] ? __pfx_____sys_sendmsg+0x10/0x10 [ 825.900996][T29649] ? import_iovec+0x74/0xa0 [ 825.901031][T29649] ___sys_sendmsg+0x21f/0x2a0 [ 825.901057][T29649] ? __pfx____sys_sendmsg+0x10/0x10 [ 825.901128][T29649] ? __fget_files+0x2a/0x420 [ 825.901149][T29649] ? __fget_files+0x3a0/0x420 [ 825.901185][T29649] __x64_sys_sendmsg+0x19b/0x260 [ 825.901212][T29649] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 825.901247][T29649] ? __pfx_ksys_write+0x10/0x10 [ 825.901274][T29649] ? rcu_is_watching+0x15/0xb0 [ 825.901311][T29649] ? do_syscall_64+0xbe/0x3b0 [ 825.901347][T29649] do_syscall_64+0xfa/0x3b0 [ 825.901378][T29649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.901398][T29649] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 825.901432][T29649] ? clear_bhb_loop+0x60/0xb0 [ 825.901459][T29649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.901480][T29649] RIP: 0033:0x7f9089d8eb69 [ 825.901502][T29649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 825.901521][T29649] RSP: 002b:00007f9087bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 825.901545][T29649] RAX: ffffffffffffffda RBX: 00007f9089fb5fa0 RCX: 00007f9089d8eb69 [ 825.901561][T29649] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 825.901585][T29649] RBP: 00007f9087bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 825.901599][T29649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 825.901612][T29649] R13: 0000000000000000 R14: 00007f9089fb5fa0 R15: 00007ffce89579d8 [ 825.901648][T29649] [ 826.546372][T29655] netlink: 'syz.4.7658': attribute type 10 has an invalid length. [ 826.643720][T29660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7659'. [ 826.658873][T29658] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 826.684422][T29660] netlink: 'syz.3.7659': attribute type 1 has an invalid length. [ 827.403556][T29689] netlink: 11280 bytes leftover after parsing attributes in process `syz.0.7668'. [ 827.606170][ T1154] net_ratelimit: 29 callbacks suppressed [ 827.606195][ T1154] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 827.775678][ T1154] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 827.987807][T29712] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7676'. [ 828.002258][T29712] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7676'. [ 828.013914][ T13] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 828.031085][T29709] netpci0: tun_chr_ioctl cmd 1074025681 [ 828.139910][ T1154] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 828.262622][ T1154] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 828.382482][ T13] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 828.492266][ T1154] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 828.539104][T29731] netlink: set zone limit has 8 unknown bytes [ 828.672125][ T1154] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 828.773560][T29740] netlink: 'syz.1.7689': attribute type 1 has an invalid length. [ 828.783116][ T13] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 828.867302][T29713] delete_channel: no stack [ 829.032678][T29750] netlink: 'syz.2.7692': attribute type 10 has an invalid length. [ 829.277728][T29767] vlan4: entered promiscuous mode [ 829.290458][T29754] IPVS: Scheduler module ip_vs_ not found [ 829.408177][T29771] netlink: 'syz.2.7698': attribute type 3 has an invalid length. [ 830.076270][T29795] __nla_validate_parse: 8 callbacks suppressed [ 830.076296][T29795] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7704'. [ 830.125069][T29798] netlink: 'syz.3.7708': attribute type 10 has an invalid length. [ 830.332680][T29803] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7712'. [ 830.382262][T29785] netlink: 136 bytes leftover after parsing attributes in process `syz.0.7704'. [ 830.416794][T29785] netlink: 180 bytes leftover after parsing attributes in process `syz.0.7704'. [ 830.527274][T29814] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7714'. [ 830.719547][T29822] veth27: entered promiscuous mode [ 830.778028][T29814] netlink: 'syz.1.7714': attribute type 11 has an invalid length. [ 830.917773][T29829] sit2: entered promiscuous mode [ 831.026666][T29840] netlink: 'syz.0.7720': attribute type 10 has an invalid length. [ 831.271673][T29846] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7724'. [ 831.434664][T29856] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7729'. [ 831.491091][T29858] netpci0: tun_chr_ioctl cmd 1074025681 [ 831.607010][T29864] FAULT_INJECTION: forcing a failure. [ 831.607010][T29864] name failslab, interval 1, probability 0, space 0, times 0 [ 831.615859][T29865] FAULT_INJECTION: forcing a failure. [ 831.615859][T29865] name failslab, interval 1, probability 0, space 0, times 0 [ 831.645898][T29864] CPU: 1 UID: 0 PID: 29864 Comm: syz.3.7732 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 831.645931][T29864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 831.645943][T29864] Call Trace: [ 831.645953][T29864] [ 831.645962][T29864] dump_stack_lvl+0x189/0x250 [ 831.645991][T29864] ? __pfx____ratelimit+0x10/0x10 [ 831.646021][T29864] ? __pfx_dump_stack_lvl+0x10/0x10 [ 831.646042][T29864] ? __pfx__printk+0x10/0x10 [ 831.646074][T29864] ? __pfx___might_resched+0x10/0x10 [ 831.646102][T29864] ? fs_reclaim_acquire+0x7d/0x100 [ 831.646128][T29864] should_fail_ex+0x414/0x560 [ 831.646167][T29864] should_failslab+0xa8/0x100 [ 831.646188][T29864] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 831.646217][T29864] ? __alloc_skb+0x112/0x2d0 [ 831.646250][T29864] __alloc_skb+0x112/0x2d0 [ 831.646285][T29864] netlink_ack+0x146/0xa50 [ 831.646310][T29864] ? __pfx_genl_rcv_msg+0x10/0x10 [ 831.646331][T29864] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 831.646352][T29864] ? __pfx_nl80211_post_doit+0x10/0x10 [ 831.646394][T29864] netlink_rcv_skb+0x28c/0x470 [ 831.646420][T29864] ? __lock_acquire+0xab9/0xd20 [ 831.646447][T29864] ? __pfx_genl_rcv_msg+0x10/0x10 [ 831.646473][T29864] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 831.646527][T29864] ? down_read+0x1ad/0x2e0 [ 831.646552][T29864] genl_rcv+0x28/0x40 [ 831.646573][T29864] netlink_unicast+0x82c/0x9e0 [ 831.646612][T29864] ? __pfx_netlink_unicast+0x10/0x10 [ 831.646642][T29864] ? netlink_sendmsg+0x642/0xb30 [ 831.646668][T29864] ? skb_put+0x11b/0x210 [ 831.646701][T29864] netlink_sendmsg+0x805/0xb30 [ 831.646743][T29864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 831.646778][T29864] ? aa_sock_msg_perm+0x94/0x160 [ 831.646807][T29864] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 831.646831][T29864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 831.646862][T29864] __sock_sendmsg+0x219/0x270 [ 831.646894][T29864] ____sys_sendmsg+0x505/0x830 [ 831.646922][T29864] ? __pfx_____sys_sendmsg+0x10/0x10 [ 831.646955][T29864] ? import_iovec+0x74/0xa0 [ 831.646988][T29864] ___sys_sendmsg+0x21f/0x2a0 [ 831.647014][T29864] ? __pfx____sys_sendmsg+0x10/0x10 [ 831.647085][T29864] ? __fget_files+0x2a/0x420 [ 831.647105][T29864] ? __fget_files+0x3a0/0x420 [ 831.647139][T29864] __x64_sys_sendmsg+0x19b/0x260 [ 831.647165][T29864] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 831.647200][T29864] ? __pfx_ksys_write+0x10/0x10 [ 831.647225][T29864] ? rcu_is_watching+0x15/0xb0 [ 831.647263][T29864] ? do_syscall_64+0xbe/0x3b0 [ 831.647297][T29864] do_syscall_64+0xfa/0x3b0 [ 831.647324][T29864] ? lockdep_hardirqs_on+0x9c/0x150 [ 831.647352][T29864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.647372][T29864] ? clear_bhb_loop+0x60/0xb0 [ 831.647399][T29864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.647419][T29864] RIP: 0033:0x7fa61098eb69 [ 831.647437][T29864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 831.647455][T29864] RSP: 002b:00007fa611844038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 831.647479][T29864] RAX: ffffffffffffffda RBX: 00007fa610bb5fa0 RCX: 00007fa61098eb69 [ 831.647495][T29864] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 831.647508][T29864] RBP: 00007fa611844090 R08: 0000000000000000 R09: 0000000000000000 [ 831.647521][T29864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 831.647533][T29864] R13: 0000000000000000 R14: 00007fa610bb5fa0 R15: 00007ffd3b2098b8 [ 831.647566][T29864] [ 831.648867][T29865] CPU: 0 UID: 0 PID: 29865 Comm: syz.2.7733 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 831.648894][T29865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 831.648907][T29865] Call Trace: [ 831.648916][T29865] [ 831.648926][T29865] dump_stack_lvl+0x189/0x250 [ 831.648951][T29865] ? __pfx____ratelimit+0x10/0x10 [ 831.648980][T29865] ? __pfx_dump_stack_lvl+0x10/0x10 [ 831.649002][T29865] ? __pfx__printk+0x10/0x10 [ 831.649031][T29865] ? __pfx___might_resched+0x10/0x10 [ 831.649061][T29865] ? fs_reclaim_acquire+0x7d/0x100 [ 831.649095][T29865] should_fail_ex+0x414/0x560 [ 831.649134][T29865] should_failslab+0xa8/0x100 [ 831.649156][T29865] kmem_cache_alloc_noprof+0x73/0x3c0 [ 831.649185][T29865] ? security_file_alloc+0x34/0x330 [ 831.649214][T29865] security_file_alloc+0x34/0x330 [ 831.649240][T29865] init_file+0x93/0x2f0 [ 831.649268][T29865] alloc_empty_file+0x6e/0x1d0 [ 831.649293][T29865] alloc_file_pseudo+0x13d/0x210 [ 831.649321][T29865] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 831.649342][T29865] ? do_raw_spin_unlock+0x122/0x240 [ 831.649371][T29865] ? _raw_spin_unlock+0x28/0x50 [ 831.649407][T29865] sock_alloc_file+0xb8/0x2e0 [ 831.649439][T29865] ? __sys_socket+0x12c/0x1b0 [ 831.649471][T29865] __sys_socket+0x13d/0x1b0 [ 831.649504][T29865] __x64_sys_socket+0x7a/0x90 [ 831.649533][T29865] do_syscall_64+0xfa/0x3b0 [ 831.649562][T29865] ? lockdep_hardirqs_on+0x9c/0x150 [ 831.649589][T29865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.649610][T29865] ? clear_bhb_loop+0x60/0xb0 [ 831.649636][T29865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.649657][T29865] RIP: 0033:0x7fd4c0b90a87 [ 831.649676][T29865] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 831.649695][T29865] RSP: 002b:00007fd4c1a12fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 831.649718][T29865] RAX: ffffffffffffffda RBX: 00007fd4c0db5fa0 RCX: 00007fd4c0b90a87 [ 831.649733][T29865] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 831.649746][T29865] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 831.649759][T29865] R10: 00002000000000c0 R11: 0000000000000286 R12: 0000000000000001 [ 831.649772][T29865] R13: 0000000000000000 R14: 00007fd4c0db5fa0 R15: 00007fffe5c93bb8 [ 831.649808][T29865] [ 832.288530][T29869] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7734'. [ 832.298449][T29871] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 832.312766][T29871] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 832.589908][T29887] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7741'. [ 832.649682][T29888] macvlan2: entered allmulticast mode [ 832.662879][T29888] veth1_vlan: entered allmulticast mode [ 832.677358][T29888] veth1_vlan: left allmulticast mode [ 832.699193][T29894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7744'. [ 832.733027][ T13] net_ratelimit: 24 callbacks suppressed [ 832.733049][ T13] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 832.803569][T29894] syz_tun (unregistering): left allmulticast mode [ 832.888799][ T13] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 832.998675][T29907] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 833.046549][ T12] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 833.081687][T29913] netlink: 'syz.2.7751': attribute type 23 has an invalid length. [ 833.202373][ T1165] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 833.323091][ T12] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 833.432681][ T1154] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 833.555667][ T1154] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 833.603471][T29938] erspan0 speed is unknown, defaulting to 1000 [ 833.683368][T29942] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 833.763013][ T1165] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 833.912883][ T12] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 833.953070][T29949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.160598][T29955] vlan3: entered promiscuous mode [ 834.373743][T29965] FAULT_INJECTION: forcing a failure. [ 834.373743][T29965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 834.388678][T29965] CPU: 1 UID: 0 PID: 29965 Comm: syz.0.7766 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 834.388710][T29965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 834.388723][T29965] Call Trace: [ 834.388732][T29965] [ 834.388741][T29965] dump_stack_lvl+0x189/0x250 [ 834.388769][T29965] ? __pfx____ratelimit+0x10/0x10 [ 834.388799][T29965] ? __pfx_dump_stack_lvl+0x10/0x10 [ 834.388821][T29965] ? __pfx__printk+0x10/0x10 [ 834.388849][T29965] ? __might_fault+0xb0/0x130 [ 834.388893][T29965] should_fail_ex+0x414/0x560 [ 834.388932][T29965] _copy_from_user+0x2d/0xb0 [ 834.388961][T29965] kstrtouint_from_user+0xc4/0x170 [ 834.388990][T29965] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 834.389037][T29965] proc_fail_nth_write+0x88/0x200 [ 834.389062][T29965] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 834.389094][T29965] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 834.389121][T29965] vfs_write+0x27b/0xa90 [ 834.389163][T29965] ? __pfx_vfs_write+0x10/0x10 [ 834.389194][T29965] ? __fget_files+0x2a/0x420 [ 834.389220][T29965] ? __fget_files+0x3a0/0x420 [ 834.389239][T29965] ? __fget_files+0x2a/0x420 [ 834.389271][T29965] ksys_write+0x145/0x250 [ 834.389303][T29965] ? __pfx_ksys_write+0x10/0x10 [ 834.389328][T29965] ? rcu_is_watching+0x15/0xb0 [ 834.389366][T29965] ? do_syscall_64+0xbe/0x3b0 [ 834.389400][T29965] do_syscall_64+0xfa/0x3b0 [ 834.389436][T29965] ? lockdep_hardirqs_on+0x9c/0x150 [ 834.389463][T29965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.389484][T29965] ? clear_bhb_loop+0x60/0xb0 [ 834.389510][T29965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.389531][T29965] RIP: 0033:0x7f82e2b8d61f [ 834.389551][T29965] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 834.389568][T29965] RSP: 002b:00007f82e3a6f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 834.389592][T29965] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f82e2b8d61f [ 834.389607][T29965] RDX: 0000000000000001 RSI: 00007f82e3a6f0a0 RDI: 0000000000000005 [ 834.389620][T29965] RBP: 00007f82e3a6f090 R08: 0000000000000000 R09: 0000000000000000 [ 834.389632][T29965] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 834.389644][T29965] R13: 0000000000000000 R14: 00007f82e2db5fa0 R15: 00007ffe371e68a8 [ 834.389686][T29965] [ 834.783286][T29970] netlink: 'syz.0.7767': attribute type 10 has an invalid length. [ 835.293101][T29984] __nla_validate_parse: 7 callbacks suppressed [ 835.293125][T29984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7771'. [ 835.368113][T30000] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.7776'. [ 835.552261][T29477] Bluetooth: hci4: command 0x0406 tx timeout [ 835.675028][T30005] [ 835.677519][T30005] ====================================================== [ 835.684564][T30005] WARNING: possible circular locking dependency detected [ 835.691710][T30005] 6.16.0-syzkaller-06574-gd9104cec3e8f #0 Not tainted [ 835.698478][T30005] ------------------------------------------------------ [ 835.705499][T30005] syz.2.7779/30005 is trying to acquire lock: [ 835.711562][T30005] ffff8881433f2d28 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0xf0/0x320 [ 835.721057][T30005] [ 835.721057][T30005] but task is already holding lock: [ 835.728446][T30005] ffff8881433f27e8 (&q->q_usage_counter(io)#57){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 835.738813][T30005] [ 835.738813][T30005] which lock already depends on the new lock. [ 835.738813][T30005] [ 835.749568][T30005] [ 835.749568][T30005] the existing dependency chain (in reverse order) is: [ 835.758698][T30005] [ 835.758698][T30005] -> #3 (&q->q_usage_counter(io)#57){++++}-{0:0}: [ 835.767333][T30005] lock_acquire+0x120/0x360 [ 835.772481][T30005] blk_alloc_queue+0x538/0x620 [ 835.777774][T30005] __blk_mq_alloc_disk+0x15c/0x340 [ 835.783416][T30005] nbd_dev_add+0x46c/0xae0 [ 835.788367][T30005] nbd_init+0x168/0x1f0 [ 835.793053][T30005] do_one_initcall+0x233/0x820 [ 835.798555][T30005] do_initcall_level+0x104/0x190 [ 835.804046][T30005] do_initcalls+0x59/0xa0 [ 835.808932][T30005] kernel_init_freeable+0x334/0x4a0 [ 835.814688][T30005] kernel_init+0x1d/0x1d0 [ 835.819550][T30005] ret_from_fork+0x3fc/0x770 [ 835.824682][T30005] ret_from_fork_asm+0x1a/0x30 [ 835.830156][T30005] [ 835.830156][T30005] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 835.837458][T30005] lock_acquire+0x120/0x360 [ 835.842502][T30005] fs_reclaim_acquire+0x72/0x100 [ 835.847984][T30005] prepare_alloc_pages+0x153/0x610 [ 835.853616][T30005] __alloc_frozen_pages_noprof+0x123/0x370 [ 835.859957][T30005] __alloc_pages_noprof+0xa/0x30 [ 835.865418][T30005] pcpu_populate_chunk+0x182/0xb30 [ 835.871056][T30005] pcpu_alloc_noprof+0xcbf/0x16b0 [ 835.876607][T30005] bpf_map_alloc_percpu+0xbc/0x1b0 [ 835.882281][T30005] prealloc_init+0x225/0x630 [ 835.887485][T30005] htab_map_alloc+0x6ce/0xc70 [ 835.892690][T30005] map_create+0xaa3/0x1310 [ 835.897720][T30005] __sys_bpf+0x60f/0x870 [ 835.902494][T30005] __x64_sys_bpf+0x7c/0x90 [ 835.907531][T30005] do_syscall_64+0xfa/0x3b0 [ 835.912569][T30005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.919078][T30005] [ 835.919078][T30005] -> #1 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 835.926814][T30005] lock_acquire+0x120/0x360 [ 835.931931][T30005] __mutex_lock+0x187/0x1340 [ 835.937059][T30005] pcpu_alloc_noprof+0x286/0x16b0 [ 835.942787][T30005] sbitmap_init_node+0x1e1/0x630 [ 835.948249][T30005] sbitmap_queue_init_node+0x41/0x660 [ 835.954150][T30005] blk_mq_init_tags+0x110/0x280 [ 835.959532][T30005] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 835.965516][T30005] blk_mq_init_sched+0x28a/0x710 [ 835.971067][T30005] elevator_switch+0x19c/0x5f0 [ 835.976354][T30005] elevator_change+0x21b/0x320 [ 835.981650][T30005] elevator_set_default+0x186/0x260 [ 835.987432][T30005] blk_register_queue+0x35d/0x400 [ 835.992980][T30005] __add_disk+0x677/0xd50 [ 835.997847][T30005] add_disk_fwnode+0xfc/0x480 [ 836.003140][T30005] nbd_dev_add+0x717/0xae0 [ 836.008076][T30005] nbd_init+0x168/0x1f0 [ 836.012762][T30005] do_one_initcall+0x233/0x820 [ 836.018050][T30005] do_initcall_level+0x104/0x190 [ 836.023507][T30005] do_initcalls+0x59/0xa0 [ 836.028359][T30005] kernel_init_freeable+0x334/0x4a0 [ 836.034183][T30005] kernel_init+0x1d/0x1d0 [ 836.039044][T30005] ret_from_fork+0x3fc/0x770 [ 836.044180][T30005] ret_from_fork_asm+0x1a/0x30 [ 836.049470][T30005] [ 836.049470][T30005] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 836.057297][T30005] validate_chain+0xb9b/0x2140 [ 836.062606][T30005] __lock_acquire+0xab9/0xd20 [ 836.067811][T30005] lock_acquire+0x120/0x360 [ 836.072842][T30005] __mutex_lock+0x187/0x1340 [ 836.078138][T30005] elevator_change+0xf0/0x320 [ 836.083333][T30005] elevator_set_none+0x42/0xb0 [ 836.088623][T30005] blk_mq_update_nr_hw_queues+0x68f/0x1890 [ 836.094968][T30005] nbd_start_device+0x17f/0xb10 [ 836.100574][T30005] nbd_genl_connect+0x135b/0x18f0 [ 836.106128][T30005] genl_family_rcv_msg_doit+0x215/0x300 [ 836.112235][T30005] genl_rcv_msg+0x60e/0x790 [ 836.117286][T30005] netlink_rcv_skb+0x205/0x470 [ 836.122580][T30005] genl_rcv+0x28/0x40 [ 836.127261][T30005] netlink_unicast+0x82c/0x9e0 [ 836.132552][T30005] netlink_sendmsg+0x805/0xb30 [ 836.137844][T30005] __sock_sendmsg+0x219/0x270 [ 836.143131][T30005] ____sys_sendmsg+0x505/0x830 [ 836.148444][T30005] ___sys_sendmsg+0x21f/0x2a0 [ 836.153666][T30005] __x64_sys_sendmsg+0x19b/0x260 [ 836.159223][T30005] do_syscall_64+0xfa/0x3b0 [ 836.164393][T30005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.171179][T30005] [ 836.171179][T30005] other info that might help us debug this: [ 836.171179][T30005] [ 836.181415][T30005] Chain exists of: [ 836.181415][T30005] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#57 [ 836.181415][T30005] [ 836.195618][T30005] Possible unsafe locking scenario: [ 836.195618][T30005] [ 836.203239][T30005] CPU0 CPU1 [ 836.208608][T30005] ---- ---- [ 836.213974][T30005] lock(&q->q_usage_counter(io)#57); [ 836.219442][T30005] lock(fs_reclaim); [ 836.225950][T30005] lock(&q->q_usage_counter(io)#57); [ 836.233856][T30005] lock(&q->elevator_lock); [ 836.238464][T30005] [ 836.238464][T30005] *** DEADLOCK *** [ 836.238464][T30005] [ 836.246703][T30005] 6 locks held by syz.2.7779/30005: [ 836.251899][T30005] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 836.260112][T30005] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 836.269690][T30005] #2: ffff8880255f2188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa6/0x1890 [ 836.281202][T30005] #3: ffff8880255f20d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xb9/0x1890 [ 836.292177][T30005] #4: ffff8881433f27e8 (&q->q_usage_counter(io)#57){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 836.302894][T30005] #5: ffff8881433f2820 (&q->q_usage_counter(queue)#9){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 836.313778][T30005] [ 836.313778][T30005] stack backtrace: [ 836.319666][T30005] CPU: 1 UID: 0 PID: 30005 Comm: syz.2.7779 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 836.319689][T30005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 836.319700][T30005] Call Trace: [ 836.319710][T30005] [ 836.319719][T30005] dump_stack_lvl+0x189/0x250 [ 836.319740][T30005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 836.319757][T30005] ? __pfx__printk+0x10/0x10 [ 836.319777][T30005] ? print_lock_name+0xde/0x100 [ 836.319797][T30005] print_circular_bug+0x2ee/0x310 [ 836.319815][T30005] check_noncircular+0x134/0x160 [ 836.319834][T30005] validate_chain+0xb9b/0x2140 [ 836.319858][T30005] __lock_acquire+0xab9/0xd20 [ 836.319882][T30005] ? elevator_change+0xf0/0x320 [ 836.319899][T30005] lock_acquire+0x120/0x360 [ 836.319920][T30005] ? elevator_change+0xf0/0x320 [ 836.319941][T30005] __mutex_lock+0x187/0x1340 [ 836.319966][T30005] ? elevator_change+0xf0/0x320 [ 836.319983][T30005] ? xa_find_after+0xae/0x430 [ 836.320000][T30005] ? xa_find_after+0x402/0x430 [ 836.320015][T30005] ? elevator_change+0xf0/0x320 [ 836.320030][T30005] ? xa_find_after+0xae/0x430 [ 836.320046][T30005] ? __pfx___mutex_lock+0x10/0x10 [ 836.320072][T30005] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 836.320093][T30005] ? __blk_freeze_queue_start+0x275/0x380 [ 836.320117][T30005] elevator_change+0xf0/0x320 [ 836.320132][T30005] ? elevator_set_none+0x37/0xb0 [ 836.320150][T30005] elevator_set_none+0x42/0xb0 [ 836.320168][T30005] blk_mq_update_nr_hw_queues+0x68f/0x1890 [ 836.320194][T30005] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 836.320219][T30005] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 836.320243][T30005] ? sysfs_add_file_mode_ns+0x259/0x300 [ 836.320263][T30005] nbd_start_device+0x17f/0xb10 [ 836.320281][T30005] ? device_create_file+0xf4/0x1c0 [ 836.320301][T30005] nbd_genl_connect+0x135b/0x18f0 [ 836.320320][T30005] ? __pfx_nbd_genl_connect+0x10/0x10 [ 836.320340][T30005] ? __nla_parse+0x40/0x60 [ 836.320367][T30005] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 836.320390][T30005] genl_family_rcv_msg_doit+0x215/0x300 [ 836.320412][T30005] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 836.320436][T30005] ? stack_trace_save+0x9c/0xe0 [ 836.320457][T30005] genl_rcv_msg+0x60e/0x790 [ 836.320477][T30005] ? __pfx_genl_rcv_msg+0x10/0x10 [ 836.320494][T30005] ? __pfx_nbd_genl_connect+0x10/0x10 [ 836.320514][T30005] netlink_rcv_skb+0x205/0x470 [ 836.320537][T30005] ? __lock_acquire+0xab9/0xd20 [ 836.320559][T30005] ? __pfx_genl_rcv_msg+0x10/0x10 [ 836.320577][T30005] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 836.320608][T30005] ? down_read+0x1ad/0x2e0 [ 836.320623][T30005] genl_rcv+0x28/0x40 [ 836.320639][T30005] netlink_unicast+0x82c/0x9e0 [ 836.320663][T30005] ? __pfx_netlink_unicast+0x10/0x10 [ 836.320685][T30005] ? netlink_sendmsg+0x642/0xb30 [ 836.320708][T30005] ? skb_put+0x11b/0x210 [ 836.320724][T30005] netlink_sendmsg+0x805/0xb30 [ 836.320751][T30005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 836.320776][T30005] ? aa_sock_msg_perm+0x94/0x160 [ 836.320798][T30005] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 836.320817][T30005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 836.320841][T30005] __sock_sendmsg+0x219/0x270 [ 836.320864][T30005] ____sys_sendmsg+0x505/0x830 [ 836.320882][T30005] ? __pfx_____sys_sendmsg+0x10/0x10 [ 836.320902][T30005] ? import_iovec+0x74/0xa0 [ 836.320925][T30005] ___sys_sendmsg+0x21f/0x2a0 [ 836.320943][T30005] ? __pfx____sys_sendmsg+0x10/0x10 [ 836.320972][T30005] ? __fget_files+0x2a/0x420 [ 836.320987][T30005] ? __fget_files+0x3a0/0x420 [ 836.321006][T30005] __x64_sys_sendmsg+0x19b/0x260 [ 836.321023][T30005] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 836.321044][T30005] ? rcu_is_watching+0x15/0xb0 [ 836.321070][T30005] ? do_syscall_64+0xbe/0x3b0 [ 836.321095][T30005] do_syscall_64+0xfa/0x3b0 [ 836.321118][T30005] ? lockdep_hardirqs_on+0x9c/0x150 [ 836.321140][T30005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.321156][T30005] ? clear_bhb_loop+0x60/0xb0 [ 836.321174][T30005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.321191][T30005] RIP: 0033:0x7fd4c0b8eb69 [ 836.321206][T30005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 836.321221][T30005] RSP: 002b:00007fd4c1a14038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 836.321239][T30005] RAX: ffffffffffffffda RBX: 00007fd4c0db5fa0 RCX: 00007fd4c0b8eb69 [ 836.321252][T30005] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 836.321263][T30005] RBP: 00007fd4c0c11df1 R08: 0000000000000000 R09: 0000000000000000 [ 836.321274][T30005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 836.321284][T30005] R13: 0000000000000000 R14: 00007fd4c0db5fa0 R15: 00007fffe5c93bb8 [ 836.321302][T30005] [ 836.841423][ T5856] block nbd8: Receive control failed (result -32) [ 836.848103][T29477] block nbd8: Receive control failed (result -32) [ 836.886023][T30005] nbd8: detected capacity change from 0 to 127 [ 836.915841][T30011] macsec1: entered promiscuous mode [ 836.921175][T30011] syzkaller0: entered promiscuous mode [ 836.928935][T30011] syzkaller0: left promiscuous mode [ 837.812285][ T4558] net_ratelimit: 21 callbacks suppressed [ 837.812310][ T4558] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 837.932267][ T13] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 838.042120][T21470] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 838.152144][ T1165] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 838.272633][ T4558] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 838.382512][T21470] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 838.492081][ T13] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 838.612115][ T4558] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 838.722320][ T1154] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 838.832469][T21470] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 842.852296][ T4558] net_ratelimit: 35 callbacks suppressed [ 842.852320][ T4558] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 842.972468][ T13] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 843.082272][T21470] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 843.192297][ T4558] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 843.302140][ T12] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 843.412288][T21470] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 843.522523][T21470] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 843.642320][T21470] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 843.752265][ T12] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 843.872213][ T12] bond15: (slave ip6gretap1): failed to get link speed/duplex