last executing test programs: 6.536877529s ago: executing program 1 (id=6914): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRES16=r0], 0x64}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) close(r2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="11072abd7000ffdbdf2505"], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x4004040) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="33fdffff", @ANYRES16=r5, @ANYBLOB="000127bd7000ffdfdf250a00000005002a00000000004b36c36a86456344fde43b0f8ed0495c0314e44283"], 0x21}, 0x1, 0x0, 0x0, 0x8081}, 0x481) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="33fdffff", @ANYRES16=r5, @ANYBLOB="000127bd7000ffdfdf250a00000005002a00000000004b36c36a86456344fde43b0f8ed0495c0314e44283"], 0x21}, 0x1, 0x0, 0x0, 0x8081}, 0x481) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x58, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_CORR={0x10, 0x1, {0x14, 0x9, 0x7}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7f13, 0xfffffff7, 0x7, 0xe6e, 0x80000001}}]}}}]}, 0x88}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x58, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_CORR={0x10, 0x1, {0x14, 0x9, 0x7}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7f13, 0xfffffff7, 0x7, 0xe6e, 0x80000001}}]}}}]}, 0x88}}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @broadcast}, 0x14) (async) sendto$packet(r8, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @broadcast}, 0x14) socket$alg(0x26, 0x5, 0x0) (async) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) 4.241977961s ago: executing program 1 (id=6925): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x18, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 3.735737866s ago: executing program 1 (id=6932): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112c9000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112d9000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x418, 0x35, 0x107, 0xffffffff, 0xfffffffe, {0x5, 0x7c}, [@nested={0x404, 0x4, 0x0, 0x1, [@nested={0x3f5, 0xdb, 0x0, 0x1, [@nested={0x2e4, 0xfa, 0x0, 0x1, [@typed={0x8, 0x5e, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @nested={0x8, 0x138, 0x0, 0x1, [@nested={0x4, 0xe8}]}, @nested={0x200, 0x24, 0x0, 0x1, [@generic="7f15a4a0a32a5d7c4f55658ae72e179d2019401e0dc1558305139bde916cd39283649be6f7fca5dd1237ff8dd5425f1c50bb9f4528aebe9e27f4e1e126235f91287d3b0f34172d812091f50fc54476579d810e504aea0303d285564a6b0629553604d3e97c7678b3fa52b7d5e2bbf95d4b069acbdef31b243e8aa0cd711a15d8274d3436afd0e40ae30d6d74e667cf51f8f195e757fddf0aa1aa94287f4ebcbd", @generic="9b3b119cb71ef1bbc6bf7aef8c1f65829630b7bc5a7178b8e1093f8f739221d9b8dd73f51ad833af0fd59ff86bfdf0506c5d715e7fba8bce4fb97eb75cdd4265906b9069d13da63bc5b4b9da81be415c487689311983d227ecaa08c15f2576da49f6fabf76a8e2fb7c08049197e1d19a0b69d1964bd49e7f62957d1779f66faf1d21b47dc53593a0499c8907e7beb59915ea7f8be3f277c1a62057d8f2187dd8e6fb474c", @nested={0x4, 0x111}, @typed={0x8, 0x6f, 0x0, 0x0, @fd=r2}, @generic="7d903cb233186c4ab93bdaf392aecc020e0e8bef8dc5ed6f2739d585547cebbce74249128e49d89d54fe9d31432d5171c27f05c69ea71d26aa389e1a5014f697e532266bfec4aee609ceb270d7017645ae06bbfc62bf4e934ed2c2649679715e6329e3d4b93a0b7854fb7500c2e9ccee327c89e36c969a002d5bbe7ac594dac688ebb20b121d049b368276862f36e32591bf3fda6d5ff4a04f8ee7f8362516fac24a2288", @typed={0x8, 0xfb, 0x0, 0x0, @fd=r0}]}, @nested={0x41, 0x115, 0x0, 0x1, [@typed={0x8, 0x75, 0x0, 0x0, @ipv4=@empty}, @generic="3bed11b4de79d3b6258d77cb761ce94206c5a486b105dba2c63cdc4f8e418ef61d136979e9438e02bdfb78f84c4e06a880605ad285"]}, @nested={0x8b, 0x66, 0x0, 0x1, [@nested={0x4, 0x146}, @generic="efbf292a110a1671eb9ba71e2563b465172fcb45030e6c0d2442d46f81673ee5bc566ea3100cb606c9794e82f8fd2c04ebcd1aa35009873d1b2dcc67c0629aa6201b46a99a1820c8f28c7c97b2a7abd0df8e8c2fddb6eda88fd4887ef784d0cf06bcd2ef6e54c4b19d4e74ff98d35644a42d87ee1caed5228cf148", @typed={0x8, 0x11, 0x0, 0x0, @fd=r0}]}]}, @generic="e82bfdcfa0a16186b1b62459afda7cee3c4941923f7b2000fa36d3d78923c847c662889d4951b0c1b51141fb5522e6567acc8e97d6f3604aacb56f31cef096c1fa005d97833a224250b3132df6c67f9993ff3829a1aea032ab75db5c0e2c0e70a581b174316445cf4b6a82294b1001fe7e25e86a6e360b15d14a7a0e386325abaec43d09e0ce35d59768ff11f2cbd89a5ab49e34ce36945f2ab931c11239b114eb75c06f31830acb40ba74248a4e7c38789ff3f947d23215b52455c5104fee47cb9fb6be8f62d614fc", @generic="8f1b47d8b3369a72bae8dcd4668b50d97e2db1d9a2428c882e764e59b064d5e96217a28a17ac646b94a79af585095df5afedb11a9f217d51847b736e499f0e37795a4788"]}, @typed={0x8, 0x120, 0x0, 0x0, @u32=0xb}]}]}, 0x418}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 3.53333549s ago: executing program 1 (id=6937): socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x20, 0x0, 0x1000000, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x400, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', r4, 0x0, 0x0, 0x9, 0xc, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}}}) 3.289177009s ago: executing program 2 (id=6941): r0 = socket$isdn(0x22, 0x2, 0x3) close(r0) 3.152498698s ago: executing program 2 (id=6943): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000003000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) 2.951537865s ago: executing program 2 (id=6947): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x43e6, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=@can_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_LIM_HOPS={0x5}]}, 0x1c}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000080), 0x4) r2 = accept$netrom(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @rose}, [@default, @bcast, @default, @netrom, @netrom, @netrom, @default, @default]}, &(0x7f0000000000)=0x48) bind$netrom(r2, &(0x7f0000000200)={{0x3, @default, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000300)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)='dvmrp0\x00', 0x7, 0xffffffffffffff7f, 0x3}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000000140)=0x20) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r6) 2.696468363s ago: executing program 3 (id=6949): r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3ea}, [], {0x14, 0x3f9}}, 0x28}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6, 0x36}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000001) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r4, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r5, 0x4048587b, &(0x7f0000000400)={{r4, &(0x7f00000000c0)='team0\x00', 0x119600, &(0x7f0000000100)={@align=0x1, {0x800, 0x8a3, 0x4, 0x1ff}}, 0xff, &(0x7f0000000140), &(0x7f0000000180)=0x9}, 0x2, &(0x7f00000003c0)=[{0x1, 0x8, &(0x7f00000001c0)='devlink\x00', &(0x7f0000000300)="cf090b432c3810c352c0c0a34f090911bbc93829eb0a9704f2f8703b09063a0ec3170e801ed187c0b220d2e0522396b3ca7f301684ef38d063b626347c2a2136a97a4db13be27785470bb27f3ddc71f08a24236c8a793184f1fa374f494e58e60e5228b5b8497a255bae75e2d122dd1955b7547f384898bb9efa0541c8c1c13c3668c9302077a6ba9b4dabca0b09c1b56b8ebc3d281e652712496bc4857bb31f073c873f393abf0842a456a88c208f530891ea5d19a3b379e285fe", 0xbb, 0x10}, {0xb967fb615a0cbfb2, 0xfffffbbe, &(0x7f0000000200)='devlink\x00', &(0x7f0000000240)="d7dc75246fd90fe0770c4042d09e4483e626a9b239d9a4c413b9c32732b60720df93fb31e72b037583d5da4fd82b1132b17a20a181c346d87c98", 0x3a, 0x10}]}) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.100766872s ago: executing program 4 (id=6951): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000100)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x1, 0x6}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000080)={r4, 0x6}, 0x8) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x198, 0x198, 0x0, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 'syz_tun\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1, 0x4c}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'veth1_macvtap\x00', 'tunl0\x00'}, 0x0, 0xa0, 0x100, 0x0, {0x60010000}, [@common=@ah={{0x30}, {[0x1]}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0x9, [0x16, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x100]}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x3d}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) ioctl$sock_ifreq(r1, 0x8935, &(0x7f00000000c0)={'bond0\x00', @ifru_addrs=@in={0x2, 0x4e21, @multicast2}}) 2.035381395s ago: executing program 3 (id=6952): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_opts(r2, 0x0, 0x4, 0x0, &(0x7f0000000080)) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, 0x0, 0x0) (async) r4 = socket$inet(0x2, 0x80001, 0x84) listen(r4, 0x2f) listen(r4, 0xaca) (async) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000000)) (async) mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz0\x00', 0x1ff) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0307000000000000000008cd15c803000000"], 0x7c}}, 0x0) (async) sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x114, r6, 0x300, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9e3d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5, @empty, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xeb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xee}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x8000}, 0x4040c11) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002a00)=ANY=[@ANYBLOB="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"], 0x13bc}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)={'veth0_to_hsr\x00', @multicast}) (async) connect$inet6(r1, 0x0, 0x38) r9 = socket$unix(0x1, 0x2, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x60, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7ff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xa}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x11}, 0x20000802) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r10 = accept4$unix(r9, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e, 0x0) (async) r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r11, 0x104, 0x4, &(0x7f0000000000)=0x5, 0x4) r12 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="100000000000000700000029fb000000000100300100000200"/40], 0x28}, 0x0) (async) ioctl$AUTOFS_IOC_EXPIRE(r10, 0x810c9365, &(0x7f0000000380)={{0x4, 0x1}, 0x100, './file0\x00'}) close(r0) 1.92949981s ago: executing program 0 (id=6953): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) (fail_nth: 15) 1.928927899s ago: executing program 4 (id=6954): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f00000001c0)=[{0x20, 0x0, 0x3f, 0xfffff004}, {0x16, 0x0, 0x6, 0xfffffffe}]}) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f00000001c0)=[{0x20, 0x0, 0x3f, 0xfffff004}, {0x16, 0x0, 0x6, 0xfffffffe}]}) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r1) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.897275666s ago: executing program 2 (id=6955): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'bond_slave_1\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x20, 0x89, "dd7b4388a05944a0a4aa00a48474ec81c47a9a41a8a6190389c9439ea8b5b5198905f43545978f35fd8b71a4f5c5f53b9167d5d546ebd8b840ba4498dcaad16381f856d92dc3d6abe6583c678e1c3acdaf8309c3d311d5302fefa975302b763fc8e28d4e8a15400896cae454b26ec5381925fd3e5e51576f4ae8e9bf411f2fc6719609608700dbb0fd"}}) (async) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f00000001c0)="2e287e4d26beff7f995f626a20fdaa38d4fcc4679ea14c416dfa69e4616446533b7b9f16f49373bf77f665b495fea92e279bbdfeb1366121e1ab22c8f2669e51acca7f54ca26284c9d5c51988087067353497c22e088ad68dab895413f17621429e93189f9a12e06b9af5810a95a80a6b44df8ac7dd79c84748e430e9c7c942a68b2837a44bc64d648994d82b34230e678d4bcbf6d81f7b4bd30288087b24a3343366e44f73dddedb05cc96dd35bda1420a4117458dc1ffab65df0d58b7a201a628537a32a01bcfe995cf6104cb067b0bed962378bb0ad5b98b357b98dbfea5fa558be432fd4d22d9781a6bcb052b7bdc74569edffa0be6e", 0xf8) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000002c0)={'netdevsim0\x00', {0x2, 0x4e22, @multicast2}}) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r1) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x8, 0x800, 0x2, @mcast2, @mcast1, 0x91, 0x7, 0x3, 0x5a67b1a4}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x3, 0x7c08, 0x20, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x80, 0x0, 0x5}}) (async, rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r1, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00', 0x0}) (async) getpeername$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000640)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000680)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'ip6_vti0\x00', 0x0, 0x29, 0x67, 0x7, 0x5, 0x24, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x8, 0x4, 0x8}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'gre0\x00', &(0x7f00000007c0)={'gretap0\x00', 0x0, 0x10, 0x7800, 0x80000001, 0x1, {{0x3a, 0x4, 0x0, 0x0, 0xe8, 0x67, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010102, @private=0xa010101, {[@end, @cipso={0x86, 0x64, 0x3, [{0x6, 0xf, "c7b2960611aae5852e855d33a7"}, {0x2, 0xd, "4949e5fd2140855f3ad4da"}, {0x5, 0xb, "9fc03bbdfeb50a6c8f"}, {0x0, 0xf, "6e1b3e332d1b61f218851495e7"}, {0x2, 0xe, "2574690b3f1eb366ecb8e2c9"}, {0x7, 0xb, "1bc5dc020ec7a44981"}, {0x1, 0xf, "7c404014ac6a8ea9763dd6c3e1"}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0x1f, 0x56, [@multicast2, @empty, @multicast1, @remote, @multicast2, @remote, @broadcast]}, @timestamp={0x44, 0xc, 0x28, 0x0, 0x7, [0x0, 0x1]}, @end, @cipso={0x86, 0x36, 0x3, [{0x0, 0x11, "9d2d0bdc335adc2b50787cf51de2f6"}, {0x5, 0xf, "31f7954589e7f266383bb29ee3"}, {0x5, 0x10, "86ba66dea5e04004eb5e1d528a50"}]}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000b00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000940)={0x180, r3, 0x300, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) (async) syz_emit_ethernet(0x26, &(0x7f0000000b40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @val={@val={0x88a8, 0x7, 0x0, 0x2}, {0x8100, 0x5, 0x0, 0x1}}, {@can={0xc, {{0x2, 0x1}, 0x6, 0x3, 0x0, 0x0, "79bd4cd58da0b975"}}}}, &(0x7f0000000b80)={0x1, 0x3, [0x635, 0xed4, 0x1a8, 0x4bc]}) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000000cc0)={&(0x7f0000000bc0), 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)=@getqdisc={0x44, 0x26, 0x100, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x1, 0xf}, {0xa, 0xd}, {0xd, 0xfff3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8002}, 0x4000000) (async, rerun: 32) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x0) r13 = accept4(r2, 0x0, &(0x7f0000000d00), 0x80000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r13, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x24, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x24}}, 0x800) (async, rerun: 64) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000e40)={'veth1_to_hsr\x00', {0x2, 0x4e22, @multicast2}}) (async, rerun: 64) r14 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000e80), 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x30, r14, 0x908, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0x13, 0x1, 'batadv_slave_1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x80) r15 = socket$pptp(0x18, 0x1, 0x2) setsockopt(r15, 0x800, 0x4e, &(0x7f0000000fc0)="03edb634d72696570728487f63", 0xd) (async, rerun: 64) accept$packet(0xffffffffffffffff, &(0x7f0000001000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001040)=0x14) (rerun: 64) 1.551134892s ago: executing program 3 (id=6956): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000340)="18000000010005", 0x7) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x38, r5, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x840) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="040100001a0007000000000000000000fe80000000000000000000000000001be0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x104}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x4, 0xd1, 0xb}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r8}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000483", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000500040001000000"], 0x1c}}, 0x0) 1.43524984s ago: executing program 0 (id=6957): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000040)={0x8, 0x8, '\x00', 0x1, &(0x7f0000000000)=[0x0]}) ioctl$sock_bt_hci(r0, 0x400448e2, &(0x7f0000000080)="21cebebfb1cc6db46a69530f72e5bde3116b354181424a935ea6bbdd665d1a89f27b6ac50e300ef6484a1093d0d75947ca134dc633f6e4d96111c1995616ad927581e1496e58bac36ce25ea80bf2c58f852c937e2d85d9568171") 1.3716649s ago: executing program 0 (id=6958): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffece}, 0x48) socket$inet6(0xa, 0x2, 0x0) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0xfffffffffffffddd, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x200, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x2, 0x40020}, [@IFLA_PHYS_SWITCH_ID={0x0, 0x24, "4d8cead91f7ba049a2e4bd70372ad8248603794d6d725b27f53eac01"}, @IFLA_PROTO_DOWN={0x0, 0x27, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1.371121083s ago: executing program 3 (id=6959): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xec, r2, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7457, 0x20}}}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x61}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x54c2a0fa}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x24}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4cd}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x8, 0x10, 0xe8ba, 0x510c, 0xfb2]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x551}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xe4}]}, @NL80211_ATTR_CQM={0x50, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6a3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x81}, @NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x18e6, 0x8, 0x5, 0xc42, 0x9, 0x7, 0x0, 0x3, 0x10, 0x7]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x29e}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6184}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8159}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x2000c01c}, 0x4000890) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x5c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x15, 0x0, 0x0, @binary="0cac0f00"}, @generic="c2f374a8988e2841aa0d3e8dbfc81cac7312daa918c71837fc58a78d709089487224871fcdac7f53fe80ab8809c1b7573b5c0e380299e06d99ff6ee7db805628"]}, 0x5c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "5c8f022482395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0x9, 0x1, 'ipvs\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x24, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x7b, 0x0, 0x1, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xe, 0x16, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@alu={0x7, 0x0, 0x0, 0x4, 0x2, 0x100, 0xfffffffffffffff0}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}, @call={0x85, 0x0, 0x0, 0x44}, @jmp={0x5, 0x0, 0xd, 0x7, 0x5, 0x2, 0xfffffffffffffff6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) 1.271173155s ago: executing program 2 (id=6960): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff080045"], 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000000}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 1.191126839s ago: executing program 4 (id=6961): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) (fail_nth: 12) 1.112918127s ago: executing program 0 (id=6962): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000003000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) 496.189833ms ago: executing program 1 (id=6963): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x500, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x2}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x6, 0x40, 0xd, 0x5}, {0x4, 0xf9, 0xfc, 0xe58d06c}, {0x2, 0x65, 0x0, 0x1}, {0x7, 0x7, 0x1, 0x4}, {0x2, 0x72, 0x6, 0x4}, {0x4, 0x0, 0x1, 0x100}, {0xc, 0xc0, 0xd, 0x3d}, {0x8, 0x0, 0x8, 0x9}]}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map, 0xffffffffffffffff, 0x34}, 0x20) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000b40)={'dummy0\x00'}) sendfile(r0, r0, &(0x7f0000000000)=0x5, 0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, 0x0) 474.066045ms ago: executing program 4 (id=6964): socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="740000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17200000212000004c0012800c0001006d6163766c616e003c00028008000300030000000800010010000000280005800a00040096aaaaaaaaaa00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaab0000008000500", @ANYRES64=r0], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0xc000) r1 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x3dfa708e056562c6}, 0x48) (async) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000480)={'tunl0\x00', &(0x7f0000000340)={'syztnl2\x00', r5, 0x1, 0x8000, 0x5, 0xfffffffe, {{0x18, 0x4, 0x2, 0x3f, 0x60, 0x65, 0x0, 0x1, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x17, 0xb8, [@empty, @multicast1, @private=0xa010100, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x1c, 0x59, 0x1, 0x2, [{@loopback, 0x400}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x2}, {@multicast1, 0xa1944aea}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xf, 0x5d, [@multicast2, @local, @rand_addr=0x64010102]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x0, 0x1, 0x4, 0xb, 0x2, 0x1, 0xfffffffffffffff0}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @remote}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000880)={@cgroup, 0xffffffffffffffff, 0x9, 0x8}, 0x20) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r8, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_HEADER={0x4}, @ETHTOOL_A_EEE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xe}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4048000) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 464.273477ms ago: executing program 3 (id=6965): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x1, 0x0, 0x6}, [@RTA_GATEWAY={0x8, 0x5, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0xe8}}, 0x0) 357.892762ms ago: executing program 0 (id=6966): ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async, rerun: 32) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) unshare(0x2c020400) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getnexthop={0x2c, 0x6a, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) (async) openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.io_service_time\x00', 0x0, 0x0) 357.223661ms ago: executing program 2 (id=6967): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}], 0x1c) sendmmsg$inet6(r1, &(0x7f00000017c0)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x11, @loopback, 0x7ffffff}, 0x1c, &(0x7f0000001b40)=[{&(0x7f0000001200)='\x00', 0x1}], 0x1}}], 0x1, 0x400c800) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback}}}, 0x84) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x93}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800900010068617368000000002c00028008000640e80000ff08000140000000030800044020000003080003400000000408000240000000120900010073797a30000000000900020073797a32"], 0x94}}, 0x0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000680)=""/143, 0x8f}, {&(0x7f0000001780)=""/4100, 0x1004}, {&(0x7f00000003c0)=""/85, 0x55}, {&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000040)=""/42, 0x2a}], 0x5}, 0x12062) 248.641896ms ago: executing program 4 (id=6968): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00f0007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ff07000000ffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x14c, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4001, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@multicast1, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0x81}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0x3fc, 0xff}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @coaddr={0x14, 0xe, @in=@broadcast}]}, 0x14c}}, 0x844) 146.939946ms ago: executing program 0 (id=6969): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x18, r4, 0xdac7a804b810efff, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xe0}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f00000000c0)={{0x67, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x0, 'nq\x00', 0x8, 0x1, 0x5e}, {@private=0xa010101, 0x4e20, 0x8, 0x3, 0x5, 0x8}}, 0x44) 85.733564ms ago: executing program 3 (id=6970): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x14, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110a9000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r0, 0x0, &(0x7f0000000500)=""/184}, 0x20) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r2 = socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x1b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x76}}, &(0x7f0000000480)='GPL\x00'}, 0x90) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000080)={r3, 0x1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000140)={r3, @in6={{0xa, 0x4e22, 0x7f, @empty, 0x81}}, 0x7, 0x10}, &(0x7f0000000200)=0x90) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d) 85.172884ms ago: executing program 1 (id=6971): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001f"], 0x3}}, 0x0) r0 = epoll_create1(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) socket(0x11, 0x3, 0x0) (async) r3 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) r5 = socket$kcm(0x10, 0x2, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000640)={@ethernet={0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, {&(0x7f00000004c0)=""/182, 0xb6}, &(0x7f0000000580), 0x1}, 0xa0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0xa6ff, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r2, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) (async) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0xa6ff, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r2, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000480), r3) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x98, r7, 0x500, 0x70bd2b, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_1\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000045}, 0x200000c1) (async) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x98, r7, 0x500, 0x70bd2b, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_1\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000045}, 0x200000c1) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r8) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r8) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r8, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r9, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x38}, 0x1, 0x0, 0x0, 0x45}, 0x40005) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(r8, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r9, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x38}, 0x1, 0x0, 0x0, 0x45}, 0x40005) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)) 0s ago: executing program 4 (id=6972): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r3, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010010000000ffdbdf2530000000", @ANYRES32=r0, @ANYBLOB="20000000000000001c0012800b0001006d616373656300000c00028005000f"], 0x3c}}, 0x0) kernel console output (not intermixed with test programs): bute type 11 has an invalid length. [ 581.063695][T27067] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5929'. [ 581.079435][T23629] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.090408][T23629] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.110878][T23630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.125684][T23630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.169371][T23629] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.178292][T23629] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.320062][T23630] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.348844][T23630] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.424173][T23644] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.454000][T23644] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.466611][T27073] syzkaller0: entered promiscuous mode [ 581.689013][T27089] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5934'. [ 581.802803][ T24] IPVS: starting estimator thread 0... [ 581.896232][T27099] IPVS: using max 26 ests per chain, 62400 per kthread [ 582.255300][T27128] netlink: 'syz.1.5944': attribute type 64 has an invalid length. [ 582.336502][T27135] netlink: 'syz.1.5944': attribute type 64 has an invalid length. [ 582.798954][T27158] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5950'. [ 583.038098][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 583.048835][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 583.057268][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 583.066930][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 583.085173][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 583.133527][T27170] IPVS: set_ctl: invalid protocol: 103 172.30.0.5:20001 [ 583.194013][ T9017] net_ratelimit: 321 callbacks suppressed [ 583.194033][ T9017] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 583.208662][T23629] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 583.245341][T23629] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 583.286071][ T9017] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 583.315583][T27177] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5954'. [ 583.394816][ T9017] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 583.413564][T23642] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 583.415295][ T9017] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 583.457897][T27183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5956'. [ 583.468853][T23642] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 583.524819][T23628] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 583.532720][T23628] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 583.615790][T27187] netlink: 'syz.4.5957': attribute type 1 has an invalid length. [ 583.625859][T27187] netlink: 'syz.4.5957': attribute type 2 has an invalid length. [ 583.881838][T23642] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 583.922930][T23642] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.035148][T27206] netlink: 'syz.3.5963': attribute type 12 has an invalid length. [ 584.140485][T23642] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 584.182536][T23642] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.216242][T27216] IPVS: set_ctl: invalid protocol: 103 172.30.0.5:20001 [ 584.291488][T27222] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5965'. [ 584.325278][T27222] netlink: 43 bytes leftover after parsing attributes in process `syz.0.5965'. [ 584.334859][T27222] netlink: 'syz.0.5965': attribute type 6 has an invalid length. [ 584.343282][T27204] syzkaller1: entered promiscuous mode [ 584.354715][T27204] syzkaller1: entered allmulticast mode [ 584.371358][T27222] netlink: 'syz.0.5965': attribute type 5 has an invalid length. [ 584.399598][T27222] netlink: 43 bytes leftover after parsing attributes in process `syz.0.5965'. [ 584.444942][T27228] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5967'. [ 584.617431][T23642] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 584.646223][T23642] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.847299][T23642] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 584.882773][T23642] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.894056][T27254] netlink: 'syz.0.5970': attribute type 1 has an invalid length. [ 584.901824][T27254] netlink: 'syz.0.5970': attribute type 7 has an invalid length. [ 584.915497][T27254] netlink: 'syz.0.5970': attribute type 8 has an invalid length. [ 584.923598][T27254] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5970'. [ 585.022748][T27166] ip6_vti0 speed is unknown, defaulting to 1000 [ 585.147520][T23630] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.163938][ T5833] Bluetooth: hci4: command tx timeout [ 585.201438][T23629] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.283129][T23628] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.307743][T27262] mac80211_hwsim hwsim39 syzkaller0: Caught tx_queue_len zero misconfig [ 585.403523][T23629] netdevsim netdevsim1 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.456388][T23642] bridge_slave_1: left allmulticast mode [ 585.462104][T23642] bridge_slave_1: left promiscuous mode [ 585.472812][T23642] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.500202][T23642] ¾x9ÿ: left allmulticast mode [ 585.508537][T23642] ¾x9ÿ: left promiscuous mode [ 585.520633][T23642] bridge0: port 1(1¾x9ÿ) entered disabled state [ 585.550694][T27271] IPVS: set_ctl: invalid protocol: 103 172.30.0.5:20001 [ 585.608681][T27274] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5977'. [ 585.684572][T27277] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5978'. [ 585.693619][T27277] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5978'. [ 585.999835][T23629] smc: removing ib device syz2 [ 586.120320][T23642] dvmrp0 (unregistering): left allmulticast mode [ 586.221503][T23642] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 586.803565][T23642] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 586.819665][T23642] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 586.831409][T23642] bond0 (unregistering): Released all slaves [ 586.862956][T23642] bond1 (unregistering): Released all slaves [ 586.887890][T23642] bond2 (unregistering): Released all slaves [ 586.943518][T23642] bond3 (unregistering): Released all slaves [ 586.999901][T23642] bond4 (unregistering): (slave vcan0): Releasing backup interface [ 587.010488][T23642] vcan0: left promiscuous mode [ 587.042815][T23642] bond4 (unregistering): Released all slaves [ 587.068804][T23642] bond5 (unregistering): Released all slaves [ 587.150698][T23642] bond6 (unregistering): Released all slaves [ 587.244635][ T5833] Bluetooth: hci4: command tx timeout [ 587.333956][ T5942] ip6_vti0 speed is unknown, defaulting to 1000 [ 587.340270][ T5942] syz2: Port: 1 Link DOWN [ 587.433177][T27300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5984'. [ 587.492381][T27304] netlink: 248 bytes leftover after parsing attributes in process `syz.4.5985'. [ 587.794148][T27313] IPVS: set_ctl: invalid protocol: 103 172.30.0.5:20001 [ 587.909447][T27321] xt_SECMARK: invalid mode: 9 [ 587.924170][T27322] netlink: 'syz.2.5987': attribute type 13 has an invalid length. [ 587.939259][T27324] netlink: 'syz.3.5990': attribute type 21 has an invalid length. [ 588.229559][T23623] net_ratelimit: 382 callbacks suppressed [ 588.229579][T23623] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 588.247333][T23628] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 588.289211][T23623] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 588.300225][T23628] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 588.355845][T23623] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 588.363655][T23623] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 588.373993][T23630] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 588.403989][T23630] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 588.424276][T23628] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 588.444089][ T9017] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 588.589830][T27352] ip6t_REJECT: ECHOREPLY is not supported [ 588.831143][T27361] IPVS: set_ctl: invalid protocol: 103 172.30.0.1:20001 [ 588.850583][T27166] chnl_net:caif_netlink_parms(): no params data found [ 589.325098][T27349] Bluetooth: hci4: command tx timeout [ 589.360398][T27380] can: request_module (can-proto-5) failed. [ 589.489290][T27387] __nla_validate_parse: 3 callbacks suppressed [ 589.489312][T27387] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6005'. [ 589.537262][T27387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6005'. [ 589.983036][T27166] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.998746][T27166] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.016976][T27166] bridge_slave_0: entered allmulticast mode [ 590.056126][T27166] bridge_slave_0: entered promiscuous mode [ 590.099330][T23642] tipc: Left network mode [ 590.109910][T27166] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.132361][T27166] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.156493][T27337] lec:lec_atm_close: lec0: Shut down! [ 590.182692][T27166] bridge_slave_1: entered allmulticast mode [ 590.197568][T27166] bridge_slave_1: entered promiscuous mode [ 590.284870][T27415] IPVS: set_ctl: invalid protocol: 103 172.30.0.5:20001 [ 590.490831][T27166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 590.552681][T27166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 590.616989][T27349] Bluetooth: hci2: command 0x0c1a tx timeout [ 590.758349][T27166] team0: Port device team_slave_0 added [ 590.773527][T27166] team0: Port device team_slave_1 added [ 590.879070][T27435] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6017'. [ 590.906292][T27435] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6017'. [ 590.948599][T27440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6018'. [ 590.999385][T27448] IPVS: set_ctl: invalid protocol: 103 172.30.0.5:20001 [ 591.107747][T27166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 591.129245][T27166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.203480][T27166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 591.228686][T27166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 591.235995][T27166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.322390][T27166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 591.421391][ T5833] Bluetooth: hci4: command tx timeout [ 591.501549][T27469] netlink: 'syz.2.6025': attribute type 2 has an invalid length. [ 591.599494][T27463] tun0: tun_chr_ioctl cmd 1074025675 [ 591.609587][T27463] tun0: persist disabled [ 591.640866][T27166] hsr_slave_0: entered promiscuous mode [ 591.678313][T27166] hsr_slave_1: entered promiscuous mode [ 591.705408][T27166] debugfs: 'hsr0' already exists in 'hsr' [ 591.711277][T27166] Cannot create hsr debugfs directory [ 592.098760][T27498] vlan1: entered allmulticast mode [ 592.535184][T27518] IPVS: set_ctl: invalid protocol: 103 172.30.0.1:20001 [ 592.620522][T27527] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6041'. [ 592.672205][T27529] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6041'. [ 592.889848][T23642] hsr_slave_0: left promiscuous mode [ 592.903012][T23642] hsr_slave_1: left promiscuous mode [ 592.909632][T23642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 592.917868][T23642] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 592.936177][T23642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 592.945331][T23642] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 592.994078][T23642] veth1_macvtap: left promiscuous mode [ 593.244199][T23630] net_ratelimit: 412 callbacks suppressed [ 593.244224][T23630] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 593.245061][ T9017] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 593.264592][T23628] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 593.287604][T23628] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 593.296247][ T9017] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 593.334511][T23628] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 593.342440][T23628] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 593.354253][ T9017] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 593.373890][T23628] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 593.394738][T23629] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 593.441737][T23642] team0 (unregistering): Port device team_slave_1 removed [ 593.472050][T23642] team0 (unregistering): Port device team_slave_0 removed [ 593.557342][T27556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6049'. [ 593.642185][T27534] tipc: Started in network mode [ 593.657621][T27534] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 593.667544][T27559] netlink: 'syz.2.6050': attribute type 3 has an invalid length. [ 593.677571][T27534] tipc: Enabled bearer , priority 2 [ 593.735158][T27166] netdevsim netdevsim1 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.860202][T27563] netlink: 'syz.2.6051': attribute type 1 has an invalid length. [ 593.905941][T27563] netlink: 88 bytes leftover after parsing attributes in process `syz.2.6051'. [ 593.921242][T27166] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.937252][T27571] IPVS: set_ctl: invalid protocol: 103 172.30.0.4:20001 [ 593.939621][T27563] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6051'. [ 593.960071][T27563] netlink: 'syz.2.6051': attribute type 1 has an invalid length. [ 594.013345][T27575] vlan1: left allmulticast mode [ 594.028446][T27575] veth0_vlan: left allmulticast mode [ 594.034466][T27575] dvmrp6: left allmulticast mode [ 594.180533][T27586] netlink: 'syz.3.6057': attribute type 12 has an invalid length. [ 594.229017][T27166] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.434808][T27166] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.602654][T23642] IPVS: stop unused estimator thread 0... [ 594.814341][T11651] tipc: Node number set to 10463914 [ 594.901466][T27166] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 594.937998][T27166] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 594.977344][T27166] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 595.026253][T27166] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 595.067589][T27623] __nla_validate_parse: 2 callbacks suppressed [ 595.067609][T27623] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6068'. [ 595.479403][T27651] tap0: tun_chr_ioctl cmd 1074025678 [ 595.489553][T27651] tap0: group set to 0 [ 595.636801][T27166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.713482][T27166] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.760937][T23623] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.768159][T23623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 595.785489][T27666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6079'. [ 595.830373][T23628] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.837598][T23628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 595.878793][ T5833] block nbd5: Receive control failed (result -1) [ 596.453072][T27166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 596.625952][T27166] veth0_vlan: entered promiscuous mode [ 596.666954][T27166] veth1_vlan: entered promiscuous mode [ 596.817447][T27166] veth0_macvtap: entered promiscuous mode [ 596.838399][T27166] veth1_macvtap: entered promiscuous mode [ 596.979492][T27166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 597.041751][T27166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 597.110293][T23628] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.144006][T23628] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.182628][T27707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6088'. [ 597.194976][T23628] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.210194][T27709] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6089'. [ 597.219591][ T9017] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.489892][T23642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.524253][T23642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.566346][T27720] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 597.573685][T27720] IPv6: NLM_F_CREATE should be set when creating new route [ 597.581232][T27720] IPv6: NLM_F_CREATE should be set when creating new route [ 597.588524][T27720] IPv6: NLM_F_CREATE should be set when creating new route [ 597.639123][T27724] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 597.649793][ T9017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.669464][ T9017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.691767][T27725] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 0, id = 0 [ 598.008148][T27738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6094'. [ 598.109694][ T5833] block nbd6: Receive control failed (result -1) [ 598.192327][T27747] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 598.218985][T27747] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 598.255593][T23642] net_ratelimit: 312 callbacks suppressed [ 598.255615][T23642] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 598.270121][ T9017] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 598.288359][ T9017] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 598.324026][ T9017] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 598.336533][ T9017] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 598.414347][ T9017] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 598.432454][ T9017] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 598.484841][ T9017] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 598.492715][ T9017] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 598.509305][T27751] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 598.540724][T27751] IPVS: set_ctl: invalid protocol: 103 172.30.0.1:20001 [ 599.496707][T27794] veth0: entered promiscuous mode [ 599.517887][T27790] veth0: left promiscuous mode [ 599.541332][T27799] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6111'. [ 599.629519][ T5833] block nbd7: Receive control failed (result -1) [ 599.661573][T27805] bridge0: port 3(ipvlan2) entered blocking state [ 599.699075][T27805] bridge0: port 3(ipvlan2) entered disabled state [ 599.731072][T27805] ipvlan2: entered allmulticast mode [ 599.760120][T27805] bridge0: entered allmulticast mode [ 599.799365][T27805] ipvlan2: left allmulticast mode [ 599.818977][T27805] bridge0: left allmulticast mode [ 600.040401][T27813] netlink: 'syz.3.6114': attribute type 10 has an invalid length. [ 600.069757][T27817] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6115'. [ 600.094512][T27813] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 600.327630][T27822] netlink: 'syz.3.6116': attribute type 8 has an invalid length. [ 601.092896][T27870] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6130'. [ 601.185699][T27867] netlink: 'syz.3.6128': attribute type 21 has an invalid length. [ 601.193675][T27867] IPv6: NLM_F_CREATE should be specified when creating new route [ 602.267528][T27932] xt_CT: You must specify a L4 protocol and not use inversions on it [ 602.299942][T27931] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6145'. [ 602.395456][T27932] ip6gre3: entered promiscuous mode [ 602.698151][T27958] netlink: 'syz.3.6152': attribute type 16 has an invalid length. [ 602.718497][T27963] netlink: 'syz.0.6153': attribute type 1 has an invalid length. [ 602.754558][T27958] netlink: 'syz.3.6152': attribute type 17 has an invalid length. [ 602.898415][T27958] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.905800][T27958] bridge0: port 1(bridge_slave_0) entered listening state [ 603.287336][T23630] net_ratelimit: 204 callbacks suppressed [ 603.287358][T23630] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 603.301282][T23642] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 603.323915][T23642] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 603.363969][T23629] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 603.364996][T27996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6162'. [ 603.371991][T23629] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 603.456435][T23642] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 603.464412][T23642] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 603.514063][T28009] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6162'. [ 603.524770][T23642] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 603.543556][T23642] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 603.574116][T23630] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 603.716329][ T5487] lec:lec_start_xmit: lec0:No lecd attached [ 603.820845][T28021] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6167'. [ 603.906990][T28016] x_tables: duplicate underflow at hook 3 [ 603.926444][T28016] xt_TCPMSS: Only works on TCP SYN packets [ 604.240276][T27349] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 604.251802][T27349] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 604.260134][T27349] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 604.268919][T27349] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 604.278925][T27349] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 604.421681][T23629] gretap0: left allmulticast mode [ 604.434211][T23629] bridge0: port 1(gretap0) entered disabled state [ 604.593556][T28058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6180'. [ 604.618351][T28061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6180'. [ 604.735312][T28065] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6181'. [ 604.761696][T28065] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6181'. [ 604.797006][T28065] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6181'. [ 604.957034][T23629] bond6 (unregistering): (slave gretap1): Releasing active interface [ 604.983378][T23629] bond2 (unregistering): (slave geneve2): Releasing active interface [ 605.259328][T23629] bond1 (unregistering): Released all slaves [ 605.274584][T23629] bond0 (unregistering): Released all slaves [ 605.290036][T23629] bond2 (unregistering): Released all slaves [ 605.309925][T23629] bond3 (unregistering): (slave lo): Releasing backup interface [ 605.318582][T23629] bond3 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 605.336639][T23629] bond3 (unregistering): Released all slaves [ 605.360097][T23629] bond4 (unregistering): (slave batadv2): Releasing active interface [ 605.368484][T23629] batadv2: left promiscuous mode [ 605.373627][T23629] batadv2: left allmulticast mode [ 605.387616][T23629] bond4 (unregistering): Released all slaves [ 605.402716][T23629] bond5 (unregistering): Released all slaves [ 605.418764][T23629] bond6 (unregistering): Released all slaves [ 605.495355][T28052] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 605.550705][T28052] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 605.559287][T28052] gretap1: entered promiscuous mode [ 605.566789][T28052] gretap1: entered allmulticast mode [ 605.660123][T23629] tipc: Left network mode [ 605.683306][T28080] x_tables: duplicate underflow at hook 1 [ 606.318477][T28108] __nla_validate_parse: 3 callbacks suppressed [ 606.318501][T28108] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6192'. [ 606.364763][T27349] Bluetooth: hci5: command tx timeout [ 606.718135][T28125] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6198'. [ 607.612736][T28153] netlink: 'syz.3.6205': attribute type 3 has an invalid length. [ 607.620624][T28153] netlink: 'syz.3.6205': attribute type 1 has an invalid length. [ 607.630605][T28153] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.6205'. [ 607.834415][T23629] hsr_slave_0: left promiscuous mode [ 607.863890][T23629] hsr_slave_1: left promiscuous mode [ 607.886992][T23629] veth1_macvtap: left promiscuous mode [ 607.893691][T23629] veth0_macvtap: left promiscuous mode [ 607.904838][T23629] veth1_vlan: left promiscuous mode [ 607.910141][T23629] veth0_vlan: left promiscuous mode [ 608.168576][T23629] team0 (unregistering): Port device batadv1 removed [ 608.293914][T23623] net_ratelimit: 367 callbacks suppressed [ 608.293936][T23623] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 608.308980][ T9017] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 608.334968][ T9017] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 608.344153][T23628] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 608.367614][ T9017] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 608.376535][T23623] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 608.405599][ T9017] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 608.415799][T23627] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 608.434410][T23627] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 608.444252][T27349] Bluetooth: hci5: command tx timeout [ 608.448850][T23623] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 608.847193][T28044] chnl_net:caif_netlink_parms(): no params data found [ 609.005673][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5290 ms [ 609.014292][ C1] lec:lec_tx_timeout: lec0 [ 609.019901][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 609.126575][T28044] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.134354][T28044] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.141704][T28044] bridge_slave_0: entered allmulticast mode [ 609.150283][T28044] bridge_slave_0: entered promiscuous mode [ 609.209751][T28044] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.225261][T28044] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.242887][T28044] bridge_slave_1: entered allmulticast mode [ 609.251192][T28044] bridge_slave_1: entered promiscuous mode [ 609.425052][T28183] pim6reg1: entered promiscuous mode [ 609.441356][T28183] pim6reg1: entered allmulticast mode [ 609.468032][T28044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 609.497486][T28044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 609.687083][T28044] team0: Port device team_slave_0 added [ 609.701046][T28044] team0: Port device team_slave_1 added [ 609.736639][T23629] IPVS: stop unused estimator thread 0... [ 609.805351][T28193] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6214'. [ 609.829536][T28044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 609.838853][T28044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.867133][T28044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.882197][T28044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.897071][T28044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.924453][T28044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 610.210622][T28044] hsr_slave_0: entered promiscuous mode [ 610.227530][T28044] hsr_slave_1: entered promiscuous mode [ 610.244094][T28044] debugfs: 'hsr0' already exists in 'hsr' [ 610.261458][T28044] Cannot create hsr debugfs directory [ 610.283160][T28204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6219'. [ 610.458454][T27349] block nbd8: Receive control failed (result -1) [ 610.524011][T27349] Bluetooth: hci5: command tx timeout [ 610.665739][T28211] netlink: 212 bytes leftover after parsing attributes in process `syz.4.6221'. [ 611.117798][T28044] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.232931][T28044] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.355330][T28044] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.466391][T28044] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.594725][T28252] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.6231'. [ 611.705181][T28256] netlink: 'syz.1.6232': attribute type 16 has an invalid length. [ 611.713221][T28256] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6232'. [ 612.152060][T28236] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 612.168384][T28044] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 612.173506][T28255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.196892][T28044] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 612.232024][T28044] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 612.275687][T28044] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 612.425108][T28044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.447535][T28044] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.465856][T23628] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.473054][T23628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.495508][ T9017] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.502738][ T9017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.569327][T28293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6242'. [ 612.571085][T28294] netlink: 'syz.3.6241': attribute type 11 has an invalid length. [ 612.595164][T28293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6242'. [ 612.605120][T27349] Bluetooth: hci5: command tx timeout [ 612.978155][T28044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 613.053505][T23627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.077947][T23627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.106892][T28310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6247'. [ 613.120336][T28044] veth0_vlan: entered promiscuous mode [ 613.136572][T28044] veth1_vlan: entered promiscuous mode [ 613.165260][T28312] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6248'. [ 613.184297][T28312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6248'. [ 613.203457][T28310] bond6: entered promiscuous mode [ 613.209511][T28310] 8021q: adding VLAN 0 to HW filter on device bond6 [ 613.264803][T28314] bridge6: entered promiscuous mode [ 613.272764][T28314] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 613.321673][T23628] net_ratelimit: 327 callbacks suppressed [ 613.321694][T23628] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 613.335993][T23629] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 613.357544][T23629] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 613.382930][T28310] macvlan3: entered promiscuous mode [ 613.389050][T23629] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 613.402986][T28310] macvlan3: entered allmulticast mode [ 613.411625][T28310] bond6: (slave macvlan3): Error -98 calling set_mac_address [ 613.434956][T23629] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 613.443230][T28323] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6252'. [ 613.453933][T23623] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 613.462412][T28324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6251'. [ 613.472306][T28324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6251'. [ 613.485868][T23623] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 613.494778][T23628] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 613.514051][T23629] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 613.522155][T23623] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 613.533179][T11653] IPVS: starting estimator thread 0... [ 613.581866][T28321] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 613.595492][T28321] bond1 (unregistering): Released all slaves [ 613.624764][T28325] IPVS: using max 38 ests per chain, 91200 per kthread [ 613.730120][T28044] veth0_macvtap: entered promiscuous mode [ 613.776568][T28044] veth1_macvtap: entered promiscuous mode [ 613.863375][T28044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.897161][T28044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 613.910968][T23628] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.930860][T28340] sctp: [Deprecated]: syz.0.6257 (pid 28340) Use of struct sctp_assoc_value in delayed_ack socket option. [ 613.930860][T28340] Use struct sctp_sack_info instead [ 613.979998][T28342] ip6tnl0: Caught tx_queue_len zero misconfig [ 613.989218][T28342] netlink: 'syz.4.6258': attribute type 2 has an invalid length. [ 614.030087][T23628] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.038918][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 614.038992][ C1] lec:lec_tx_timeout: lec0 [ 614.047546][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 614.113887][T23628] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.189896][T23628] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.190505][T28352] "syz.0.6260" (28352) uses obsolete ecb(arc4) skcipher [ 614.322095][T28350] syzkaller0: entered promiscuous mode [ 614.327753][T28350] syzkaller0: entered allmulticast mode [ 614.557191][T28365] can: request_module (can-proto-4) failed. [ 616.440464][T23629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.466809][T23629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.612909][T23627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.632244][T23627] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.753045][T28414] __nla_validate_parse: 3 callbacks suppressed [ 616.753066][T28414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6273'. [ 616.803965][T28417] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6273'. [ 616.817155][T28416] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6274'. [ 617.022071][T28426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6172'. [ 617.076205][T28426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6172'. [ 617.371888][T28435] macvtap2: entered promiscuous mode [ 617.398677][T28435] macvtap2: entered allmulticast mode [ 617.474776][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 617.499619][T28443] macvtap3: entered promiscuous mode [ 617.532474][T28443] macvtap3: entered allmulticast mode [ 617.540894][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 617.555755][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 617.566877][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 617.585451][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 617.670810][T28452] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6282'. [ 617.904853][T28465] netlink: 'syz.3.6285': attribute type 1 has an invalid length. [ 618.016138][T28470] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6286'. [ 618.239990][T28478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6289'. [ 618.303673][T28487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6289'. [ 618.333201][T28487] bridge_slave_1: left allmulticast mode [ 618.352947][T28487] bridge_slave_1: left promiscuous mode [ 618.366214][T28487] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.404319][ T9017] net_ratelimit: 355 callbacks suppressed [ 618.404338][ T9017] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 618.419020][T23629] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 618.430907][T28487] bridge_slave_0: left allmulticast mode [ 618.437578][T28487] bridge_slave_0: left promiscuous mode [ 618.445922][T28487] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.454836][ T9017] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 618.474983][ T9017] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 618.474995][T23644] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 618.499444][ T9017] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 618.524487][T23642] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 618.532373][T23644] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 618.563956][T23628] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 618.571923][T23644] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 618.661098][T28498] netlink: 'syz.3.6294': attribute type 10 has an invalid length. [ 618.684760][T28498] netlink: 228 bytes leftover after parsing attributes in process `syz.3.6294'. [ 618.901032][T28507] netlink: 'syz.0.6297': attribute type 9 has an invalid length. [ 619.055159][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 619.063244][ C1] lec:lec_tx_timeout: lec0 [ 619.067899][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 619.544737][T28444] chnl_net:caif_netlink_parms(): no params data found [ 619.647689][ T5833] Bluetooth: hci1: command tx timeout [ 619.907034][T28444] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.922945][T28444] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.930884][T28444] bridge_slave_0: entered allmulticast mode [ 619.939221][T28444] bridge_slave_0: entered promiscuous mode [ 619.968452][T28444] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.004137][T28444] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.034533][T28444] bridge_slave_1: entered allmulticast mode [ 620.054808][T28444] bridge_slave_1: entered promiscuous mode [ 620.201535][T28534] netlink: 'syz.2.6307': attribute type 17 has an invalid length. [ 620.330931][T28444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.588355][T28571] bond1: entered promiscuous mode [ 620.604575][T28571] 8021q: adding VLAN 0 to HW filter on device bond1 [ 620.636194][T28444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 620.849461][T28444] team0: Port device team_slave_0 added [ 620.877996][T28444] team0: Port device team_slave_1 added [ 621.016511][T28444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.044093][T28444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.103940][T28444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.126325][T28444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.133304][T28444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.213847][T28444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 621.390367][T28444] hsr_slave_0: entered promiscuous mode [ 621.408116][T28444] hsr_slave_1: entered promiscuous mode [ 621.424843][T28444] debugfs: 'hsr0' already exists in 'hsr' [ 621.440799][T28444] Cannot create hsr debugfs directory [ 621.452345][T28614] syzkaller0: entered promiscuous mode [ 621.466579][T28614] syzkaller0: entered allmulticast mode [ 621.612126][T28619] syzkaller0: entered promiscuous mode [ 621.619947][T28619] syzkaller0: entered allmulticast mode [ 621.729875][T28623] 8021q: VLANs not supported on sit0 [ 621.735309][ T5833] Bluetooth: hci1: command tx timeout [ 621.911139][T28444] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.924818][T28444] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.076980][T28444] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 622.100279][T28444] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.250029][T28444] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 622.273834][T28444] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.542830][T28642] vlan2: entered promiscuous mode [ 622.552814][T28642] geneve1: entered promiscuous mode [ 622.563529][T28642] vlan2: entered allmulticast mode [ 622.585931][T28642] geneve1: entered allmulticast mode [ 622.683008][T28640] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 622.788594][T28444] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 622.818630][T28444] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 622.848114][T28444] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 622.892520][T28444] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 622.998105][T28661] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.026207][T28661] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.048379][T28661] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 49690 - 0 [ 623.127567][T28661] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.169312][T28661] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.203944][T28661] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 49690 - 0 [ 623.348302][T28661] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.386885][T28661] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.404026][T28661] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 49690 - 0 [ 623.424338][T23629] net_ratelimit: 338 callbacks suppressed [ 623.424356][T23629] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 623.438854][T23642] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 623.474205][T23627] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 623.482096][T23627] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 623.493974][T23628] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 623.513855][T23629] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 623.523398][T28661] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.533950][T23627] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 623.539985][T28685] openvswitch: netlink: IP tunnel dst address not specified [ 623.541728][T23627] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 623.556869][T28661] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.571463][T23642] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 623.583157][T28661] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 49690 - 0 [ 623.607575][T28685] veth1_macvtap: left promiscuous mode [ 623.613161][T28685] macsec0: entered promiscuous mode [ 623.619149][T28685] macsec0: entered allmulticast mode [ 623.638703][T28686] veth1_macvtap: entered promiscuous mode [ 623.645830][T28686] veth1_macvtap: entered allmulticast mode [ 623.653144][T28686] macsec0: left promiscuous mode [ 623.659693][T28686] macsec0: left allmulticast mode [ 623.667628][T28686] veth1_macvtap: left allmulticast mode [ 623.755883][T23642] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.765439][T23642] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 49690 - 0 [ 623.804207][ T5833] Bluetooth: hci1: command tx timeout [ 623.805252][T23642] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 623.841411][T28444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.881832][T23627] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.891305][T23627] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 49690 - 0 [ 623.932473][T23627] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 623.962853][T23627] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.988525][T23627] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 49690 - 0 [ 623.998545][T23627] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 624.057160][T28690] macvtap1: entered promiscuous mode [ 624.064902][T28690] macvtap1: entered allmulticast mode [ 624.073626][T28690] veth1_vlan: entered allmulticast mode [ 624.084304][T23627] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.096953][T23627] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 49690 - 0 [ 624.115245][T23627] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 624.141217][T28697] netlink: 'syz.1.6347': attribute type 11 has an invalid length. [ 624.150099][T28693] macvtap2: entered promiscuous mode [ 624.150122][T28697] __nla_validate_parse: 11 callbacks suppressed [ 624.150139][T28697] netlink: 2032 bytes leftover after parsing attributes in process `syz.1.6347'. [ 624.171526][T28693] macvtap2: entered allmulticast mode [ 624.217298][T28444] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.267465][T23629] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.274714][T23629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.321680][T23629] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.328899][T23629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.375739][ T1299] clip:clip_start_xmit: skb_dst(skb) == NULL [ 624.432845][T28444] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 624.480748][T28444] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 624.531970][T28706] FAULT_INJECTION: forcing a failure. [ 624.531970][T28706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 624.555855][T28706] CPU: 0 UID: 0 PID: 28706 Comm: syz.1.6350 Not tainted syzkaller #0 PREEMPT(full) [ 624.555886][T28706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 624.555901][T28706] Call Trace: [ 624.555911][T28706] [ 624.555921][T28706] dump_stack_lvl+0xe8/0x150 [ 624.555961][T28706] should_fail_ex+0x412/0x560 [ 624.555996][T28706] _copy_from_iter+0x1d3/0x1670 [ 624.556131][T28706] ? rcu_is_watching+0x15/0xb0 [ 624.556173][T28706] ? __pfx__copy_from_iter+0x10/0x10 [ 624.556210][T28706] ? netlink_sendmsg+0x650/0xb40 [ 624.556287][T28706] ? skb_put+0x11b/0x210 [ 624.556370][T28706] netlink_sendmsg+0x6c0/0xb40 [ 624.556410][T28706] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.556443][T28706] ? aa_sock_msg_perm+0xf1/0x1b0 [ 624.556606][T28706] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 624.556652][T28706] ____sys_sendmsg+0x972/0x9f0 [ 624.556699][T28706] ? __pfx_____sys_sendmsg+0x10/0x10 [ 624.556744][T28706] ? import_iovec+0x73/0xa0 [ 624.556782][T28706] ___sys_sendmsg+0x2a5/0x360 [ 624.556823][T28706] ? __pfx____sys_sendmsg+0x10/0x10 [ 624.556897][T28706] ? __fget_files+0x2a/0x420 [ 624.556932][T28706] ? __fget_files+0x3a0/0x420 [ 624.556976][T28706] __x64_sys_sendmsg+0x1bd/0x2a0 [ 624.557015][T28706] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 624.557068][T28706] ? __pfx_ksys_write+0x10/0x10 [ 624.557104][T28706] do_syscall_64+0x14d/0xf80 [ 624.557140][T28706] ? trace_irq_disable+0x3b/0x150 [ 624.557174][T28706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.557198][T28706] ? clear_bhb_loop+0x40/0x90 [ 624.557227][T28706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.557250][T28706] RIP: 0033:0x7f897bd9c799 [ 624.557271][T28706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.557291][T28706] RSP: 002b:00007f897ccc1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 624.557315][T28706] RAX: ffffffffffffffda RBX: 00007f897c015fa0 RCX: 00007f897bd9c799 [ 624.557332][T28706] RDX: 0000000024000000 RSI: 0000200000000b00 RDI: 0000000000000004 [ 624.557347][T28706] RBP: 00007f897ccc1090 R08: 0000000000000000 R09: 0000000000000000 [ 624.557361][T28706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.557375][T28706] R13: 00007f897c016038 R14: 00007f897c015fa0 R15: 00007ffd75c87c68 [ 624.557410][T28706] [ 624.843783][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5770 ms [ 624.851878][ C1] lec:lec_tx_timeout: lec0 [ 624.856666][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 625.173243][T28731] Can't find ip_set type list [ 625.224540][T23635] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 625.451229][T23635] bond6 (unregistering): (slave gretap1): Releasing active interface [ 625.541844][T23635] bond2 (unregistering): (slave geneve2): Releasing active interface [ 625.691051][T23635] bond6 (unregistering): (slave bridge2): Releasing active interface [ 625.848697][T23635] bond0 (unregistering): Released all slaves [ 625.861181][T23635] bond1 (unregistering): Released all slaves [ 625.876575][T23635] bond2 (unregistering): Released all slaves [ 625.884526][ T5833] Bluetooth: hci1: command tx timeout [ 625.901311][T23635] bond3 (unregistering): Released all slaves [ 625.922491][T23635] bond4 (unregistering): Released all slaves [ 625.938335][T23635] bond5 (unregistering): Released all slaves [ 625.960428][T23635] bond6 (unregistering): Released all slaves [ 625.976886][T23635] bond7 (unregistering): Released all slaves [ 625.993603][T23635] bond8 (unregistering): Released all slaves [ 626.016039][T23635] bond9 (unregistering): Released all slaves [ 626.035043][T23635] bond10 (unregistering): Released all slaves [ 626.053499][T23635] bond11 (unregistering): Released all slaves [ 626.072551][T23635] bond12 (unregistering): Released all slaves [ 626.331148][T28444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.349273][T23635] tipc: Disabling bearer [ 626.363082][T23635] tipc: Left network mode [ 626.437978][T28761] IPVS: Error connecting to the multicast addr [ 626.547859][T28765] netlink: 'syz.1.6365': attribute type 1 has an invalid length. [ 626.645781][T28773] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6369'. [ 626.676059][T28774] netlink: 'syz.1.6365': attribute type 10 has an invalid length. [ 626.740496][T28765] 8021q: adding VLAN 0 to HW filter on device bond1 [ 626.908203][T28774] team0 (unregistering): Port device team_slave_0 removed [ 626.925403][T28779] netlink: 'syz.0.6370': attribute type 33 has an invalid length. [ 626.933264][T28779] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6370'. [ 626.978470][T28774] team0 (unregistering): Port device team_slave_1 removed [ 627.011566][T28781] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6371'. [ 627.027407][T28779] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6370'. [ 627.372202][T28444] veth0_vlan: entered promiscuous mode [ 627.451572][T28444] veth1_vlan: entered promiscuous mode [ 627.457275][T28793] digital: digital_start_poll: Unknown protocol [ 627.495759][T28793] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 627.528108][T28793] bond0: (slave gre0): Error -95 calling set_mac_address [ 627.626787][T28444] veth0_macvtap: entered promiscuous mode [ 627.687867][T28444] veth1_macvtap: entered promiscuous mode [ 627.760919][T28444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.825676][T28444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 627.897837][T23628] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.952799][T23628] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.993307][T23628] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.053910][T23628] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.275224][T23635] hsr_slave_0: left promiscuous mode [ 628.281172][T23635] 0·: left promiscuous mode [ 628.301840][T28826] netlink: 'syz.0.6382': attribute type 1 has an invalid length. [ 628.450903][T23629] net_ratelimit: 226 callbacks suppressed [ 628.450926][T23629] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 628.495124][T23628] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 628.513926][T23628] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 628.534224][T23628] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 628.547835][T23635] team0 (unregistering): Port device batadv0 removed [ 628.567078][T23628] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 628.596815][T23628] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 628.624242][T23628] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 628.653938][T23644] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 628.684883][T23644] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 628.723885][T23644] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 629.352939][T28826] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 629.455384][T28832] veth3: entered promiscuous mode [ 629.484118][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 629.506619][T28834] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6384'. [ 629.602059][T28853] syzkaller1: entered promiscuous mode [ 629.646126][T28853] syzkaller1: entered allmulticast mode [ 629.711724][T23629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.735671][T23629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.824811][T28863] tipc: Resetting bearer [ 629.832772][T28863] veth1_vlan (unregistering): left allmulticast mode [ 629.866487][T28863] tipc: Disabling bearer [ 629.887970][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 629.896081][ C1] lec:lec_tx_timeout: lec0 [ 629.900936][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 630.220171][ T9017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.230489][ T9017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.290359][T23635] IPVS: stop unused estimator thread 0... [ 630.359342][T28889] IPVS: set_ctl: invalid protocol: 103 172.30.0.1:20001 [ 630.402150][T28890] netlink: 'syz.2.6391': attribute type 142 has an invalid length. [ 630.636658][T28902] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6392'. [ 630.688997][T28903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 630.783685][T28909] netlink: 'syz.4.6396': attribute type 1 has an invalid length. [ 630.844479][T28911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6397'. [ 630.904833][T28911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6397'. [ 630.951643][T27349] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 630.966198][T27349] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 630.975132][T27349] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 630.985939][T27349] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 630.993722][T27349] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 631.343667][T28934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6399'. [ 631.698564][ T982] IPVS: starting estimator thread 0... [ 631.704703][T28944] IPVS: set_ctl: invalid protocol: 103 172.30.0.5:20001 [ 631.827819][T28947] IPVS: using max 27 ests per chain, 64800 per kthread [ 632.015056][T28950] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 632.048838][T28950] gretap1: entered promiscuous mode [ 632.062734][T28967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6407'. [ 632.068920][T28950] gretap1: entered allmulticast mode [ 632.094870][T28968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6405'. [ 632.188428][T28958] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 632.221390][T28958] team0: Device macvlan2 is already an upper device of the team interface [ 632.301100][T28960] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.6405'. [ 632.666894][T28995] syzkaller0: entered promiscuous mode [ 632.688277][T28995] syzkaller0: entered allmulticast mode [ 633.005299][T29010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 633.094078][ T5833] Bluetooth: hci2: command tx timeout [ 633.335696][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 633.358296][T29030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6417'. [ 633.367479][T29030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6417'. [ 633.524250][T23644] net_ratelimit: 157 callbacks suppressed [ 633.524272][T23644] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 633.550218][T23644] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 633.684145][T23629] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 633.782064][T23629] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 633.814108][T23642] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 633.834015][T23629] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 633.895844][T23629] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 633.945275][T29050] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 633.966840][T23628] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 634.024694][T23628] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 634.079830][T29054] syzkaller0: entered promiscuous mode [ 634.085614][T29054] syzkaller0: entered allmulticast mode [ 634.376575][T28916] chnl_net:caif_netlink_parms(): no params data found [ 634.903114][T28916] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.920313][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 634.924197][T28916] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.928385][ C1] lec:lec_tx_timeout: lec0 [ 634.929155][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 634.975381][T29085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6428'. [ 634.987384][T28916] bridge_slave_0: entered allmulticast mode [ 634.997679][T28916] bridge_slave_0: entered promiscuous mode [ 635.105001][T28916] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.140103][T28916] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.165069][ T5833] Bluetooth: hci2: command tx timeout [ 635.175340][T28916] bridge_slave_1: entered allmulticast mode [ 635.193631][T28916] bridge_slave_1: entered promiscuous mode [ 635.214800][T29087] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6426'. [ 635.227629][T29082] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 635.268289][T29097] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6429'. [ 635.322091][T29101] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6429'. [ 635.323318][T29082] bond1: (slave lo): Enslaving as an active interface with an up link [ 635.368785][T29103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6430'. [ 635.383999][T29103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6430'. [ 635.537368][T28916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 635.609270][T28916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.790245][T28916] team0: Port device team_slave_0 added [ 635.828414][T28916] team0: Port device team_slave_1 added [ 636.048087][T28916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.079560][T28916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.082779][T29130] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6435'. [ 636.172688][T28916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 636.219844][T28916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 636.241203][T28916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.317140][T28916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.346950][T29134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.454330][T29144] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 636.494712][T29143] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 636.523556][T29156] IPVS: set_ctl: invalid protocol: 103 172.30.0.1:20001 [ 636.541934][T28916] hsr_slave_0: entered promiscuous mode [ 636.556729][T28916] hsr_slave_1: entered promiscuous mode [ 636.567563][T28916] debugfs: 'hsr0' already exists in 'hsr' [ 636.581525][T28916] Cannot create hsr debugfs directory [ 636.818968][T29165] netem: incorrect ge model size [ 636.831104][T29165] netem: change failed [ 636.876875][T29166] syz_tun: entered promiscuous mode [ 636.895670][T29166] macvtap1: entered promiscuous mode [ 636.918650][T29166] syz_tun: left promiscuous mode [ 636.996815][T23642] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.009502][T23642] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.049080][T23642] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.066241][T23642] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.163217][T28916] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.191660][T28916] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 49690 - 0 [ 637.225723][T28916] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 637.245484][ T5833] Bluetooth: hci2: command tx timeout [ 637.346325][T28916] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.362459][T28916] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 49690 - 0 [ 637.418972][T28916] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 637.615057][T29190] syzkaller0: entered promiscuous mode [ 637.620591][T29190] syzkaller0: entered allmulticast mode [ 637.639234][T28916] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.653047][T29190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6451'. [ 637.679662][T28916] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 49690 - 0 [ 637.721671][T28916] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 637.826505][T28916] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.852461][T28916] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 49690 - 0 [ 637.873819][T28916] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 637.978524][T29201] IPVS: set_ctl: invalid protocol: 103 172.30.0.5:20001 [ 638.009466][T29199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6455'. [ 638.278711][T28916] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 638.314433][T28916] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 638.347433][T28916] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 638.418928][T28916] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 638.534578][T23644] net_ratelimit: 174 callbacks suppressed [ 638.534600][T23644] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 638.593827][T23644] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 638.615000][T23644] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 638.645204][T23644] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 638.685239][T23628] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 638.715998][T23628] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 638.743941][T23644] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 638.789579][T23644] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 638.845731][T23628] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 638.854914][T28916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.886944][T23644] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 638.897705][T29246] IPVS: set_ctl: invalid protocol: 103 172.30.0.1:20001 [ 638.906880][T28916] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.937306][T23644] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.944530][T23644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.981752][T23644] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.988983][T23644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.324262][ T5833] Bluetooth: hci2: command tx timeout [ 639.344552][T29258] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6471'. [ 639.733068][T28916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 639.933810][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 639.941869][ C1] lec:lec_tx_timeout: lec0 [ 639.946800][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 639.955044][T29280] IPVS: set_ctl: invalid protocol: 103 172.30.0.5:20001 [ 640.013207][T28916] veth0_vlan: entered promiscuous mode [ 640.091550][T28916] veth1_vlan: entered promiscuous mode [ 640.167365][T29289] __nla_validate_parse: 1 callbacks suppressed [ 640.167386][T29289] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6480'. [ 640.190736][T28916] veth0_macvtap: entered promiscuous mode [ 640.221756][T29292] netlink: 'syz.0.6481': attribute type 3 has an invalid length. [ 640.286720][T28916] veth1_macvtap: entered promiscuous mode [ 640.383680][T28916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.421184][T28916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 640.461724][ T9017] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.506237][ T9017] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.609519][ T9017] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.636789][ T9017] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.696865][T29312] IPv6: NLM_F_CREATE should be specified when creating new route [ 640.794210][T29311] syzkaller1: entered promiscuous mode [ 640.813839][T29311] syzkaller1: entered allmulticast mode [ 640.881476][T23628] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.905501][T23628] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.978676][T23629] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.015199][T23629] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.129171][T29322] IPVS: set_ctl: invalid protocol: 103 172.30.0.1:20001 [ 641.181339][T29321] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 641.251937][T29330] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6393'. [ 641.327120][ T5833] block nbd9: Receive control failed (result -1) [ 641.403897][ T5833] Bluetooth: hci2: command tx timeout [ 641.452175][T29335] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6493'. [ 641.518082][T29340] bond0: Device is already in use. [ 641.614280][T29327] syzkaller1: entered promiscuous mode [ 641.620047][T29327] syzkaller1: entered allmulticast mode [ 642.218849][T29360] x_tables: unsorted underflow at hook 1 [ 642.416345][T29370] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6505'. [ 642.442179][T29375] FAULT_INJECTION: forcing a failure. [ 642.442179][T29375] name failslab, interval 1, probability 0, space 0, times 0 [ 642.460956][T29370] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6505'. [ 642.491435][T29374] geneve2: entered promiscuous mode [ 642.496875][T29375] CPU: 0 UID: 0 PID: 29375 Comm: syz.1.6506 Not tainted syzkaller #0 PREEMPT(full) [ 642.496905][T29375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 642.496919][T29375] Call Trace: [ 642.496928][T29375] [ 642.496939][T29375] dump_stack_lvl+0xe8/0x150 [ 642.496978][T29375] should_fail_ex+0x412/0x560 [ 642.497012][T29375] should_failslab+0xa8/0x100 [ 642.497042][T29375] ? skb_clone+0x212/0x3a0 [ 642.497081][T29375] kmem_cache_alloc_noprof+0x87/0x650 [ 642.497119][T29375] ? __netlink_lookup+0xc6/0x8b0 [ 642.497170][T29375] skb_clone+0x212/0x3a0 [ 642.497211][T29375] __netlink_deliver_tap+0x404/0x850 [ 642.497254][T29375] ? netlink_deliver_tap+0x2e/0x1b0 [ 642.497286][T29375] netlink_deliver_tap+0x19c/0x1b0 [ 642.497316][T29375] netlink_unicast+0x7e3/0x9b0 [ 642.497352][T29375] ? __pfx_netlink_unicast+0x10/0x10 [ 642.497380][T29375] ? netlink_sendmsg+0x650/0xb40 [ 642.497407][T29375] ? skb_put+0x11b/0x210 [ 642.497455][T29375] netlink_sendmsg+0x813/0xb40 [ 642.497495][T29375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 642.497527][T29375] ? aa_sock_msg_perm+0xf1/0x1b0 [ 642.497556][T29375] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 642.497584][T29375] ____sys_sendmsg+0x972/0x9f0 [ 642.497629][T29375] ? __pfx_____sys_sendmsg+0x10/0x10 [ 642.497672][T29375] ? import_iovec+0x73/0xa0 [ 642.497710][T29375] ___sys_sendmsg+0x2a5/0x360 [ 642.497750][T29375] ? __pfx____sys_sendmsg+0x10/0x10 [ 642.497821][T29375] ? __fget_files+0x2a/0x420 [ 642.497852][T29375] ? __fget_files+0x3a0/0x420 [ 642.497894][T29375] __x64_sys_sendmsg+0x1bd/0x2a0 [ 642.497932][T29375] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 642.497976][T29375] ? __pfx_ksys_write+0x10/0x10 [ 642.498009][T29375] do_syscall_64+0x14d/0xf80 [ 642.498045][T29375] ? trace_irq_disable+0x3b/0x150 [ 642.498077][T29375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.498100][T29375] ? clear_bhb_loop+0x40/0x90 [ 642.498127][T29375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.498149][T29375] RIP: 0033:0x7f897bd9c799 [ 642.498178][T29375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.498196][T29375] RSP: 002b:00007f897ccc1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 642.498220][T29375] RAX: ffffffffffffffda RBX: 00007f897c015fa0 RCX: 00007f897bd9c799 [ 642.498236][T29375] RDX: 0000000004000084 RSI: 0000200000000240 RDI: 0000000000000003 [ 642.498269][T29375] RBP: 00007f897ccc1090 R08: 0000000000000000 R09: 0000000000000000 [ 642.498283][T29375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 642.498297][T29375] R13: 00007f897c016038 R14: 00007f897c015fa0 R15: 00007ffd75c87c68 [ 642.498333][T29375] [ 642.509537][T29374] geneve2: entered allmulticast mode [ 642.798431][ T9017] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 642.820059][ T9017] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 642.862317][ T9017] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 642.889119][ T9017] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 643.399386][T29395] netlink: 'syz.1.6510': attribute type 1 has an invalid length. [ 643.462304][T29392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6508'. [ 643.543053][T29392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6508'. [ 643.557297][T23627] net_ratelimit: 115 callbacks suppressed [ 643.557320][T23627] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 643.669607][T23627] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 643.699566][T29395] bond2: entered promiscuous mode [ 643.733071][T29395] 8021q: adding VLAN 0 to HW filter on device bond2 [ 643.774103][T23627] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 643.894996][ T9017] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 643.902881][ T9017] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 643.918962][T29395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6510'. [ 644.053843][ T9017] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 644.061728][ T9017] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 644.190002][T29417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6515'. [ 644.206598][ T9017] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 644.230942][T29422] ip6t_srh: unknown srh invflags 4000 [ 644.234155][ T9017] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 644.276217][T29422] netlink: 'syz.0.6517': attribute type 2 has an invalid length. [ 644.387476][ T9017] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 644.825750][T29442] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6524'. [ 644.863901][T29018] IPVS: starting estimator thread 0... [ 644.888106][ T5833] block nbd10: Receive control failed (result -1) [ 644.953810][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 644.961870][ C1] lec:lec_tx_timeout: lec0 [ 644.966585][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 644.975354][T29445] IPVS: using max 28 ests per chain, 67200 per kthread [ 645.213578][T29458] tipc: Enabling of bearer rejected, failed to enable media [ 645.275907][T29460] __nla_validate_parse: 3 callbacks suppressed [ 645.275931][T29460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6528'. [ 645.526552][T29465] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6530'. [ 645.840430][T29478] IPVS: set_ctl: invalid protocol: 103 172.30.0.2:20001 [ 646.040388][T29484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6539'. [ 646.050486][T29484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6539'. [ 646.072987][T29488] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6538'. [ 646.278209][T29487] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 646.846788][T29527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6546'. [ 646.925326][ T5833] block nbd11: Receive control failed (result -1) [ 647.578067][T29551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6553'. [ 647.587250][T29551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6553'. [ 647.720204][T29557] netlink: 'syz.1.6556': attribute type 12 has an invalid length. [ 647.794253][T29557] bond3: option primary_reselect: invalid value (255) [ 647.805982][T29516] lec:lec_atm_close: lec0: Shut down! [ 648.027810][T29557] bond3 (unregistering): Released all slaves [ 648.559403][T29590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6564'. [ 648.654688][T23623] net_ratelimit: 97 callbacks suppressed [ 648.654710][T23623] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 648.658129][ T5833] block nbd12: Receive control failed (result -1) [ 648.673493][T23623] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 648.689007][T29597] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6565'. [ 648.784612][T29596] C: renamed from lo (while UP) [ 648.794929][T29594] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:20000 [ 648.825391][T23642] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 648.855544][T23642] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 648.868577][T29596] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 648.886727][T23623] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 648.912988][T23623] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 648.944945][T29599] batman_adv: batadv0: Adding interface: dummy0 [ 648.951279][T29599] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 649.017600][T29599] batman_adv: batadv0: Interface activated: dummy0 [ 649.054007][ T9017] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 649.073390][T29604] batadv0: mtu less than device minimum [ 649.088628][ T9017] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 649.217010][T29608] netlink: 'syz.0.6568': attribute type 3 has an invalid length. [ 649.242019][T29610] netlink: 'syz.1.6569': attribute type 29 has an invalid length. [ 649.432310][T29616] netlink: 'syz.2.6570': attribute type 1 has an invalid length. [ 649.621783][T29616] bond1: (slave gretap2): making interface the new active one [ 649.657035][T29616] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 650.215623][T29645] xt_cluster: node mask cannot exceed total number of nodes [ 650.352303][T29650] __nla_validate_parse: 7 callbacks suppressed [ 650.352327][T29650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6582'. [ 650.590081][ T5833] block nbd13: Receive control failed (result -1) [ 651.063429][T29672] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6589'. [ 651.798984][T29699] netlink: 192 bytes leftover after parsing attributes in process `syz.1.6599'. [ 651.975885][T29703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6602'. [ 652.050235][ T5833] block nbd14: Receive control failed (result -1) [ 652.452166][T29721] IPVS: set_ctl: invalid protocol: 103 172.30.0.4:20001 [ 652.492828][T29719] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6605'. [ 652.548811][T29723] netlink: 'syz.0.6606': attribute type 1 has an invalid length. [ 652.822274][T29723] bond2: entered promiscuous mode [ 652.843852][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5040 ms [ 652.851909][ C1] lec:lec_tx_timeout: lec0 [ 652.857491][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 652.874041][T29723] 8021q: adding VLAN 0 to HW filter on device bond2 [ 652.985582][T29726] bond2: (slave bridge1): making interface the new active one [ 652.993132][T29726] bridge1: entered promiscuous mode [ 653.054969][T29726] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 653.336427][T29733] syzkaller0: entered promiscuous mode [ 653.364511][T29733] syzkaller0: entered allmulticast mode [ 653.698458][T23623] net_ratelimit: 140 callbacks suppressed [ 653.698481][T23623] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 653.734097][T23630] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 653.761357][T29764] netlink: 'syz.3.6618': attribute type 2 has an invalid length. [ 653.784283][T23627] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 653.825330][T23627] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 653.874265][T23630] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 653.895011][T29767] IPVS: set_ctl: invalid protocol: 103 172.30.0.2:20001 [ 653.913969][T23630] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 653.944540][T23630] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 653.983875][T23627] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 654.000462][T29769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6620'. [ 654.017294][T23627] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 654.054384][T23623] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 654.100345][ T5833] block nbd15: Receive control failed (result -1) [ 656.787457][T29785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6625'. [ 657.272897][T29814] netlink: 'syz.4.6632': attribute type 9 has an invalid length. [ 657.329614][T29808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6631'. [ 657.367228][ T796] IPVS: starting estimator thread 0... [ 657.427854][ T5833] block nbd2: Receive control failed (result -1) [ 657.458476][T29825] IPVS: set_ctl: invalid protocol: 103 172.30.0.3:20001 [ 657.495183][T29824] IPVS: using max 24 ests per chain, 57600 per kthread [ 657.716710][T29831] netlink: 212304 bytes leftover after parsing attributes in process `syz.2.6636'. [ 657.884268][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 657.892356][ C1] lec:lec_tx_timeout: lec0 [ 657.897572][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 658.512594][T29850] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6642'. [ 658.747416][ T9017] net_ratelimit: 186 callbacks suppressed [ 658.747438][ T9017] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 658.762269][ T9017] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 658.821939][T29861] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6645'. [ 658.937406][T23630] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 658.990330][T23628] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 659.029788][T23628] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 659.086553][T23628] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 659.115242][T29867] netlink: 'syz.0.6647': attribute type 5 has an invalid length. [ 659.133865][T23628] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 659.157525][T23627] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 659.203186][T23630] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 659.233867][ T9017] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 659.342547][T29890] syzkaller0: entered promiscuous mode [ 659.352680][T29890] syzkaller0: entered allmulticast mode [ 659.481699][T29890] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6649'. [ 659.826848][T29913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6658'. [ 659.868020][T29913] bond2: option xmit_hash_policy: invalid value (64) [ 659.951223][T29913] bond2 (unregistering): Released all slaves [ 660.062303][T29923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6659'. [ 660.087301][T29924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6659'. [ 660.227490][T29923] team0: Port device team_slave_0 removed [ 660.328826][T29935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6663'. [ 661.060840][T29964] veth3: entered allmulticast mode [ 661.255921][T29971] netlink: 'syz.1.6674': attribute type 3 has an invalid length. [ 661.453925][T29984] netlink: 'syz.2.6681': attribute type 23 has an invalid length. [ 661.797773][T30001] netlink: 'syz.2.6688': attribute type 3 has an invalid length. [ 661.806079][T30001] __nla_validate_parse: 4 callbacks suppressed [ 661.806098][T30001] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6688'. [ 661.897548][T29997] veth3: entered allmulticast mode [ 662.047718][T30012] FAULT_INJECTION: forcing a failure. [ 662.047718][T30012] name failslab, interval 1, probability 0, space 0, times 0 [ 662.060888][T30012] CPU: 1 UID: 0 PID: 30012 Comm: syz.3.6691 Not tainted syzkaller #0 PREEMPT(full) [ 662.060916][T30012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 662.060931][T30012] Call Trace: [ 662.060940][T30012] [ 662.060949][T30012] dump_stack_lvl+0xe8/0x150 [ 662.060989][T30012] should_fail_ex+0x412/0x560 [ 662.061022][T30012] should_failslab+0xa8/0x100 [ 662.061053][T30012] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 662.061095][T30012] ? __alloc_skb+0x1d0/0x7d0 [ 662.061125][T30012] ? __local_bh_enable_ip+0xd0/0x130 [ 662.061196][T30012] __alloc_skb+0x1d0/0x7d0 [ 662.061232][T30012] ? inet6_rt_notify+0xaf/0x470 [ 662.061328][T30012] inet6_rt_notify+0x170/0x470 [ 662.061361][T30012] ? kernel_text_address+0xa5/0xe0 [ 662.061414][T30012] fib6_add_rt2node+0x1c19/0x35c0 [ 662.061497][T30012] ? __pfx_fib6_add_rt2node+0x10/0x10 [ 662.061528][T30012] ? fib6_add_1+0x7e7/0x1460 [ 662.061571][T30012] fib6_add+0x8e7/0x18c0 [ 662.061609][T30012] ? do_raw_spin_lock+0x12b/0x2f0 [ 662.061631][T30012] ? __pfx_fib6_add+0x10/0x10 [ 662.061667][T30012] ? ip6_ins_rt+0xc0/0x140 [ 662.061695][T30012] ip6_ins_rt+0xd6/0x140 [ 662.061720][T30012] ? __pfx_ip6_ins_rt+0x10/0x10 [ 662.061752][T30012] ? do_raw_spin_unlock+0xf5/0x210 [ 662.061781][T30012] __ipv6_dev_ac_inc+0x85c/0xaf0 [ 662.061849][T30012] ipv6_sock_ac_join+0x6a8/0x880 [ 662.061882][T30012] ? __pfx_ipv6_sock_ac_join+0x10/0x10 [ 662.061913][T30012] ? _copy_from_user+0x94/0xb0 [ 662.061953][T30012] do_ipv6_setsockopt+0x2031/0x31c0 [ 662.061998][T30012] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 662.062032][T30012] ? get_pid_task+0x20/0x1f0 [ 662.062052][T30012] ? get_pid_task+0x20/0x1f0 [ 662.062070][T30012] ? get_pid_task+0x20/0x1f0 [ 662.062108][T30012] ? __lock_acquire+0x6b5/0x2cf0 [ 662.062156][T30012] ? aa_sk_perm+0x6d5/0x900 [ 662.062192][T30012] ? __pfx_aa_sk_perm+0x10/0x10 [ 662.062220][T30012] ? __fget_files+0x2a/0x420 [ 662.062252][T30012] ? aa_sock_opt_perm+0xff/0x1a0 [ 662.062283][T30012] ipv6_setsockopt+0x59/0x170 [ 662.062316][T30012] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 662.062347][T30012] do_sock_setsockopt+0x17c/0x1b0 [ 662.062385][T30012] __x64_sys_setsockopt+0x13d/0x1b0 [ 662.062433][T30012] do_syscall_64+0x14d/0xf80 [ 662.062467][T30012] ? trace_irq_disable+0x3b/0x150 [ 662.062501][T30012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.062524][T30012] ? clear_bhb_loop+0x40/0x90 [ 662.062554][T30012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.062577][T30012] RIP: 0033:0x7fc44599c799 [ 662.062598][T30012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 662.062618][T30012] RSP: 002b:00007fc446848028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 662.062643][T30012] RAX: ffffffffffffffda RBX: 00007fc445c15fa0 RCX: 00007fc44599c799 [ 662.062660][T30012] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000004 [ 662.062674][T30012] RBP: 00007fc446848090 R08: 0000000000000014 R09: 0000000000000000 [ 662.062688][T30012] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 662.062703][T30012] R13: 00007fc445c16038 R14: 00007fc445c15fa0 R15: 00007ffd2fb35038 [ 662.062740][T30012] [ 662.199098][T30015] tipc: Enabling of bearer rejected, failed to enable media [ 662.468685][T30011] netlink: 'syz.1.6690': attribute type 1 has an invalid length. [ 662.488753][T30011] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6690'. [ 662.502599][T30011] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6690'. [ 662.516306][T30011] netlink: 658 bytes leftover after parsing attributes in process `syz.1.6690'. [ 662.631758][T30029] Bluetooth: MGMT ver 1.23 [ 662.903843][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 662.911963][ C1] lec:lec_tx_timeout: lec0 [ 662.917656][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 663.081132][T30044] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6702'. [ 663.137221][T30041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6700'. [ 663.414378][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.421713][ C0] bridge0: topology change detected, propagating [ 663.454644][T30053] veth3: entered allmulticast mode [ 663.833873][T23630] net_ratelimit: 143 callbacks suppressed [ 663.833898][T23630] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 663.876891][T23630] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 664.025479][T23627] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 664.033368][T23627] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 664.183899][T23628] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 664.192719][T23628] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 664.257412][T30089] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6715'. [ 664.347284][T23623] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 664.355252][T23623] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 664.473903][T23623] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 664.513266][T23623] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 664.663465][T30103] veth5: entered allmulticast mode [ 664.735270][T30110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6721'. [ 664.832185][T30114] netlink: 'syz.4.6722': attribute type 23 has an invalid length. [ 665.664927][T30139] veth7: entered allmulticast mode [ 666.622865][T30188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6739'. [ 666.787434][T30192] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6740'. [ 666.844447][T30193] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6740'. [ 666.921605][T30197] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6741'. [ 667.446026][T30206] veth3: entered allmulticast mode [ 667.485932][T30212] netlink: 'syz.1.6746': attribute type 1 has an invalid length. [ 667.687875][T30212] 8021q: adding VLAN 0 to HW filter on device bond3 [ 667.923818][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 667.931930][ C1] lec:lec_tx_timeout: lec0 [ 667.937718][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 668.123145][T30237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6753'. [ 668.273698][T30244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6755'. [ 668.517739][T30253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6758'. [ 668.591453][T30255] veth5: entered allmulticast mode [ 668.622281][T30260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6760'. [ 668.690942][T30259] netlink: 'syz.0.6761': attribute type 1 has an invalid length. [ 668.711009][T30259] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6761'. [ 668.738095][T30259] netlink: 'syz.0.6761': attribute type 1 has an invalid length. [ 668.778626][T30259] netlink: 'syz.0.6761': attribute type 8 has an invalid length. [ 668.800716][T30259] netlink: 606 bytes leftover after parsing attributes in process `syz.0.6761'. [ 668.965771][T23636] net_ratelimit: 123 callbacks suppressed [ 668.965795][T23636] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 669.004407][T29013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.076923][T23623] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 669.120066][T23623] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 669.186240][T30272] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6765'. [ 669.285966][T23642] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 669.334623][T23629] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 669.353831][T23642] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 669.373872][T23629] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 669.413804][T23629] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 669.427352][T30276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6767'. [ 669.443845][T23629] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 669.817883][T30293] netlink: 'syz.2.6772': attribute type 10 has an invalid length. [ 669.850313][T30293] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.858107][T30293] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.879002][T30297] netlink: 'syz.4.6774': attribute type 9 has an invalid length. [ 669.905319][T30293] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.912580][T30293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.920155][T30293] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.927376][T30293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.940044][T30293] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 670.428581][T30297] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.468401][T30310] FAULT_INJECTION: forcing a failure. [ 670.468401][T30310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 670.495124][T30310] CPU: 0 UID: 0 PID: 30310 Comm: syz.0.6777 Not tainted syzkaller #0 PREEMPT(full) [ 670.495154][T30310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 670.495169][T30310] Call Trace: [ 670.495179][T30310] [ 670.495188][T30310] dump_stack_lvl+0xe8/0x150 [ 670.495228][T30310] should_fail_ex+0x412/0x560 [ 670.495262][T30310] _copy_from_user+0x2d/0xb0 [ 670.495298][T30310] ___sys_sendmsg+0x1c6/0x360 [ 670.495341][T30310] ? __pfx____sys_sendmsg+0x10/0x10 [ 670.495416][T30310] ? __fget_files+0x2a/0x420 [ 670.495457][T30310] ? __fget_files+0x3a0/0x420 [ 670.495502][T30310] __x64_sys_sendmsg+0x1bd/0x2a0 [ 670.495542][T30310] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 670.495589][T30310] ? __pfx_ksys_write+0x10/0x10 [ 670.495624][T30310] do_syscall_64+0x14d/0xf80 [ 670.495659][T30310] ? trace_irq_disable+0x3b/0x150 [ 670.495695][T30310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.495718][T30310] ? clear_bhb_loop+0x40/0x90 [ 670.495747][T30310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.495770][T30310] RIP: 0033:0x7fcdd699c799 [ 670.495792][T30310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 670.495811][T30310] RSP: 002b:00007fcdd4bd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 670.495835][T30310] RAX: ffffffffffffffda RBX: 00007fcdd6c16090 RCX: 00007fcdd699c799 [ 670.495852][T30310] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 670.495867][T30310] RBP: 00007fcdd4bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 670.495881][T30310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 670.495894][T30310] R13: 00007fcdd6c16128 R14: 00007fcdd6c16090 R15: 00007ffd660eae68 [ 670.495930][T30310] [ 670.497300][T30310] IPVS: set_ctl: invalid protocol: 103 172.30.0.1:20001 [ 670.821088][T30297] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.933370][T30322] netlink: 'syz.0.6780': attribute type 1 has an invalid length. [ 670.939558][T30314] IPVS: set_ctl: invalid protocol: 103 172.30.0.2:20001 [ 670.973619][T30297] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.329238][T30297] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.470431][T30333] wireguard0: entered promiscuous mode [ 671.476771][T30333] wireguard0: entered allmulticast mode [ 671.571683][T23630] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.629059][T23630] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.688828][T23627] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.723171][T23627] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.936856][T30355] netlink: 'syz.4.6789': attribute type 2 has an invalid length. [ 671.974815][T30355] netlink: 'syz.4.6789': attribute type 5 has an invalid length. [ 672.037472][T30355] __nla_validate_parse: 5 callbacks suppressed [ 672.037495][T30355] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6789'. [ 672.085907][T30360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6791'. [ 672.501513][T30372] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 672.503576][T30376] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 672.660146][T30381] IPVS: length: 228 != 8 [ 672.933466][T30398] IPv6: NLM_F_CREATE should be specified when creating new route [ 672.942372][T30398] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 672.943948][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 672.949685][T30398] IPv6: NLM_F_CREATE should be set when creating new route [ 672.957656][ C1] lec:lec_tx_timeout: lec0 [ 672.958550][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 672.971365][T30398] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 672.982484][T30398] IPv6: NLM_F_CREATE should be set when creating new route [ 673.599341][T30410] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6807'. [ 674.054220][T23630] net_ratelimit: 122 callbacks suppressed [ 674.054244][T23630] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 674.082735][T23630] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 674.204694][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.216096][T23642] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 674.225763][T23642] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 674.343278][T30434] xt_connbytes: Forcing CT accounting to be enabled [ 674.350477][T23630] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 674.358990][T23630] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 674.476859][T23627] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 674.486716][T23627] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 674.613968][T23623] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 675.672932][T30388] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 676.652240][T30481] netlink: 'syz.0.6822': attribute type 1 has an invalid length. [ 676.742777][T30481] bond4: entered promiscuous mode [ 676.749002][T30481] 8021q: adding VLAN 0 to HW filter on device bond4 [ 676.851087][T30484] bond4: (slave bridge4): making interface the new active one [ 676.896704][T30484] bridge4: entered promiscuous mode [ 676.903438][T30484] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 677.029032][T30489] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6824'. [ 677.409001][T30508] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 677.446931][T30509] bond5: (slave gre0): Device is not bonding slave [ 677.482573][T30514] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6831'. [ 677.502164][T30509] bond5: option active_slave: invalid value (gre0) [ 677.545415][ T29] audit: type=1804 audit(1772599825.307:6): pid=30517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.6832" name="/newroot/91/cgroup.controllers" dev="tmpfs" ino=483 res=1 errno=0 [ 677.618734][T30521] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6834'. [ 677.633423][T30509] bond5 (unregistering): Released all slaves [ 677.663367][ T29] audit: type=1800 audit(1772599825.317:7): pid=30517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6832" name="cgroup.controllers" dev="tmpfs" ino=483 res=0 errno=0 [ 677.983838][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 677.991893][ C1] lec:lec_tx_timeout: lec0 [ 677.996624][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 678.089853][T30544] netlink: 'syz.1.6840': attribute type 1 has an invalid length. [ 678.108976][T30542] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6841'. [ 678.292805][T30550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6843'. [ 678.346495][T30553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6843'. [ 679.088371][T23623] net_ratelimit: 100 callbacks suppressed [ 679.088395][T23623] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 679.123354][T23623] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 679.165371][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.246978][T23628] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 679.268193][T23628] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 679.409242][T23623] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 679.424332][T23623] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 679.553969][T23623] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 679.574299][T23623] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 679.653667][T30598] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6856'. [ 679.735247][T23623] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 679.900903][T30603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6858'. [ 679.944420][T30603] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6858'. [ 680.001459][T30603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6858'. [ 680.075884][T30617] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 680.660018][T30648] netlink: 666 bytes leftover after parsing attributes in process `syz.4.6871'. [ 680.917033][T30660] netlink: 'syz.4.6875': attribute type 1 has an invalid length. [ 680.971798][T30660] netlink: 'syz.4.6875': attribute type 3 has an invalid length. [ 680.990575][T30656] bond2: entered promiscuous mode [ 681.022507][T30660] sctp: [Deprecated]: syz.4.6875 (pid 30660) Use of int in max_burst socket option deprecated. [ 681.022507][T30660] Use struct sctp_assoc_value instead [ 681.045294][T30656] bond2: entered allmulticast mode [ 681.073551][T30656] 8021q: adding VLAN 0 to HW filter on device bond2 [ 681.343046][T30677] dvmrp6: entered allmulticast mode [ 682.318204][T30740] FAULT_INJECTION: forcing a failure. [ 682.318204][T30740] name failslab, interval 1, probability 0, space 0, times 0 [ 682.330970][T30740] CPU: 1 UID: 0 PID: 30740 Comm: syz.2.6898 Not tainted syzkaller #0 PREEMPT(full) [ 682.330999][T30740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 682.331014][T30740] Call Trace: [ 682.331024][T30740] [ 682.331034][T30740] dump_stack_lvl+0xe8/0x150 [ 682.331075][T30740] should_fail_ex+0x412/0x560 [ 682.331110][T30740] should_failslab+0xa8/0x100 [ 682.331141][T30740] __kmalloc_cache_noprof+0x88/0x660 [ 682.331167][T30740] ? nfnetlink_rcv+0xfe1/0x27b0 [ 682.331291][T30740] nfnetlink_rcv+0xfe1/0x27b0 [ 682.331358][T30740] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 682.331402][T30740] ? ref_tracker_free+0x693/0x840 [ 682.331499][T30740] ? __netlink_deliver_tap+0x807/0x850 [ 682.331529][T30740] ? netlink_deliver_tap+0x2e/0x1b0 [ 682.331578][T30740] netlink_unicast+0x80f/0x9b0 [ 682.331614][T30740] ? __pfx_netlink_unicast+0x10/0x10 [ 682.331642][T30740] ? netlink_sendmsg+0x650/0xb40 [ 682.331669][T30740] ? skb_put+0x11b/0x210 [ 682.331707][T30740] netlink_sendmsg+0x813/0xb40 [ 682.331747][T30740] ? __pfx_netlink_sendmsg+0x10/0x10 [ 682.331781][T30740] ? aa_sock_msg_perm+0xf1/0x1b0 [ 682.331811][T30740] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 682.331838][T30740] ____sys_sendmsg+0x972/0x9f0 [ 682.331882][T30740] ? __pfx_____sys_sendmsg+0x10/0x10 [ 682.331927][T30740] ? import_iovec+0x73/0xa0 [ 682.331965][T30740] ___sys_sendmsg+0x2a5/0x360 [ 682.332006][T30740] ? __pfx____sys_sendmsg+0x10/0x10 [ 682.332083][T30740] ? __fget_files+0x2a/0x420 [ 682.332116][T30740] ? __fget_files+0x3a0/0x420 [ 682.332161][T30740] __x64_sys_sendmsg+0x1bd/0x2a0 [ 682.332202][T30740] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 682.332250][T30740] ? __pfx_ksys_write+0x10/0x10 [ 682.332287][T30740] do_syscall_64+0x14d/0xf80 [ 682.332322][T30740] ? trace_irq_disable+0x3b/0x150 [ 682.332356][T30740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.332380][T30740] ? clear_bhb_loop+0x40/0x90 [ 682.332409][T30740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.332431][T30740] RIP: 0033:0x7f7fb419c799 [ 682.332453][T30740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.332483][T30740] RSP: 002b:00007f7fb5016028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 682.332506][T30740] RAX: ffffffffffffffda RBX: 00007f7fb4415fa0 RCX: 00007f7fb419c799 [ 682.332523][T30740] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 682.332537][T30740] RBP: 00007f7fb5016090 R08: 0000000000000000 R09: 0000000000000000 [ 682.332551][T30740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.332564][T30740] R13: 00007f7fb4416038 R14: 00007f7fb4415fa0 R15: 00007ffe84b649d8 [ 682.332601][T30740] [ 682.343313][T30734] bond4: entered promiscuous mode [ 682.626402][T30743] netlink: 'syz.3.6899': attribute type 9 has an invalid length. [ 682.672422][T30745] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 682.957160][T30763] __nla_validate_parse: 5 callbacks suppressed [ 682.957175][T30763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6902'. [ 683.003824][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 683.011882][ C1] lec:lec_tx_timeout: lec0 [ 683.017794][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 683.046135][T30764] netlink: 'syz.1.6902': attribute type 6 has an invalid length. [ 683.146615][T30768] netlink: 'syz.2.6905': attribute type 10 has an invalid length. [ 683.194459][T30768] batman_adv: batadv0: Adding interface: netdevsim0 [ 683.213617][T30768] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 683.254635][T30768] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 683.653314][T30790] geneve2: entered promiscuous mode [ 683.671129][T30790] geneve2: entered allmulticast mode [ 683.703404][T23629] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 683.735715][T23629] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 683.764815][T23629] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 683.798694][T23629] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 683.972927][T30808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6917'. [ 683.993381][T30805] syzkaller0: entered promiscuous mode [ 684.014313][T30805] syzkaller0: entered allmulticast mode [ 684.106778][T23642] net_ratelimit: 141 callbacks suppressed [ 684.106802][T23642] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 684.135188][T23642] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 684.160263][T30818] netlink: 'syz.4.6919': attribute type 6 has an invalid length. [ 684.206250][T29017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.253845][T23628] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 684.263269][T23628] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 684.351718][T30799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6912'. [ 684.362406][T30799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6912'. [ 684.372865][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.388714][T11651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.388838][T30825] xt_hashlimit: size too large, truncated to 1048576 [ 684.412797][T30826] IPVS: set_ctl: invalid protocol: 103 172.30.0.1:20001 [ 684.416584][T30799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6912'. [ 684.420322][T23628] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 684.437295][T23629] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 684.452902][T30799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6912'. [ 684.463897][T23629] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 684.473872][T23628] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 684.484345][T23642] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 684.501400][T23628] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 684.518272][T30829] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6920'. [ 684.533972][T23628] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 685.764895][T30751] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 685.774330][T30793] netlink: 'syz.2.6912': attribute type 10 has an invalid length. [ 685.794363][T30793] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6912'. [ 685.803965][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 685.827120][ T1299] clip:clip_start_xmit: skb_dst(skb) == NULL [ 686.074201][T30843] only policy match revision 0 supported [ 686.074226][T30843] unable to load match [ 686.117810][T30840] netlink: 'syz.3.6923': attribute type 4 has an invalid length. [ 686.161109][T30846] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6925'. [ 686.323135][T30854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6928'. [ 686.745209][T30874] netlink: 'syz.1.6932': attribute type 4 has an invalid length. [ 687.036581][T30886] netlink: 'syz.4.6938': attribute type 1 has an invalid length. [ 687.455352][T30910] tipc: Failed to remove unknown binding: 66,0,0/0:1476083273/1476083274 [ 687.479692][T30907] tipc: Failed to remove unknown binding: 66,0,0/0:1476083273/1476083274 [ 687.716813][T30915] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 687.753075][T30917] FAULT_INJECTION: forcing a failure. [ 687.753075][T30917] name failslab, interval 1, probability 0, space 0, times 0 [ 687.814928][T30917] CPU: 1 UID: 0 PID: 30917 Comm: syz.4.6948 Not tainted syzkaller #0 PREEMPT(full) [ 687.814958][T30917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 687.814971][T30917] Call Trace: [ 687.814980][T30917] [ 687.814989][T30917] dump_stack_lvl+0xe8/0x150 [ 687.815028][T30917] should_fail_ex+0x412/0x560 [ 687.815060][T30917] should_failslab+0xa8/0x100 [ 687.815088][T30917] __kmalloc_cache_noprof+0x88/0x660 [ 687.815112][T30917] ? nft_pernet+0x23/0x240 [ 687.815192][T30917] ? nf_tables_commit+0x936/0xa400 [ 687.815229][T30917] nf_tables_commit+0x936/0xa400 [ 687.815277][T30917] ? nft_pernet+0x23/0x240 [ 687.815304][T30917] ? nft_pernet+0x23/0x240 [ 687.815324][T30917] ? nft_pernet+0x23/0x240 [ 687.815341][T30917] ? nft_pernet+0x23/0x240 [ 687.815363][T30917] ? __pfx_nf_tables_commit+0x10/0x10 [ 687.815404][T30917] ? nft_trans_commit_list_add_tail+0x179/0x520 [ 687.815431][T30917] ? nft_flush_table+0x1749/0x18e0 [ 687.815499][T30917] ? nf_tables_deltable+0x678/0xe80 [ 687.815540][T30917] ? __pfx_nf_tables_deltable+0x10/0x10 [ 687.815595][T30917] nfnetlink_rcv+0x1c1b/0x27b0 [ 687.815660][T30917] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 687.815703][T30917] ? ref_tracker_free+0x693/0x840 [ 687.815762][T30917] ? __netlink_deliver_tap+0x807/0x850 [ 687.815790][T30917] ? netlink_deliver_tap+0x2e/0x1b0 [ 687.815837][T30917] netlink_unicast+0x80f/0x9b0 [ 687.815872][T30917] ? __pfx_netlink_unicast+0x10/0x10 [ 687.815898][T30917] ? netlink_sendmsg+0x650/0xb40 [ 687.815925][T30917] ? skb_put+0x11b/0x210 [ 687.815960][T30917] netlink_sendmsg+0x813/0xb40 [ 687.816000][T30917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 687.816033][T30917] ? aa_sock_msg_perm+0xf1/0x1b0 [ 687.816061][T30917] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 687.816088][T30917] ____sys_sendmsg+0x972/0x9f0 [ 687.816134][T30917] ? __pfx_____sys_sendmsg+0x10/0x10 [ 687.816180][T30917] ? import_iovec+0x73/0xa0 [ 687.816218][T30917] ___sys_sendmsg+0x2a5/0x360 [ 687.816259][T30917] ? __pfx____sys_sendmsg+0x10/0x10 [ 687.816333][T30917] ? __fget_files+0x2a/0x420 [ 687.816364][T30917] ? __fget_files+0x3a0/0x420 [ 687.816417][T30917] __x64_sys_sendmsg+0x1bd/0x2a0 [ 687.816454][T30917] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 687.816500][T30917] ? __pfx_ksys_write+0x10/0x10 [ 687.816536][T30917] do_syscall_64+0x14d/0xf80 [ 687.816570][T30917] ? trace_irq_disable+0x3b/0x150 [ 687.816603][T30917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.816626][T30917] ? clear_bhb_loop+0x40/0x90 [ 687.816653][T30917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.816675][T30917] RIP: 0033:0x7f47bdb9c799 [ 687.816695][T30917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 687.816714][T30917] RSP: 002b:00007f47beaab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 687.816737][T30917] RAX: ffffffffffffffda RBX: 00007f47bde15fa0 RCX: 00007f47bdb9c799 [ 687.816753][T30917] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 687.816767][T30917] RBP: 00007f47beaab090 R08: 0000000000000000 R09: 0000000000000000 [ 687.816781][T30917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 687.816794][T30917] R13: 00007f47bde16038 R14: 00007f47bde15fa0 R15: 00007fff70bb5f68 [ 687.816828][T30917] [ 687.826219][T30915] team1: entered promiscuous mode [ 688.033974][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 688.100340][T30915] team1: entered allmulticast mode [ 688.102428][ C1] lec:lec_tx_timeout: lec0 [ 688.178163][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 688.304503][T30922] ipt_REJECT: TCP_RESET invalid for non-tcp [ 688.550784][T30932] FAULT_INJECTION: forcing a failure. [ 688.550784][T30932] name failslab, interval 1, probability 0, space 0, times 0 [ 688.577365][T30932] CPU: 1 UID: 0 PID: 30932 Comm: syz.0.6953 Not tainted syzkaller #0 PREEMPT(full) [ 688.577395][T30932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 688.577408][T30932] Call Trace: [ 688.577417][T30932] [ 688.577427][T30932] dump_stack_lvl+0xe8/0x150 [ 688.577464][T30932] should_fail_ex+0x412/0x560 [ 688.577497][T30932] should_failslab+0xa8/0x100 [ 688.577527][T30932] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 688.577568][T30932] ? __alloc_skb+0x1d0/0x7d0 [ 688.577598][T30932] ? __local_bh_enable_ip+0xd0/0x130 [ 688.577634][T30932] __alloc_skb+0x1d0/0x7d0 [ 688.577663][T30932] ? netlink_ack_tlv_len+0x6c/0x210 [ 688.577695][T30932] netlink_ack+0x146/0xa50 [ 688.577720][T30932] ? __pfx_genl_rcv_msg+0x10/0x10 [ 688.577758][T30932] ? __lock_acquire+0x6b5/0x2cf0 [ 688.577801][T30932] netlink_rcv_skb+0x2b6/0x4b0 [ 688.577830][T30932] ? __pfx_genl_rcv_msg+0x10/0x10 [ 688.577868][T30932] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 688.577915][T30932] ? down_read+0x272/0x2e0 [ 688.577935][T30932] ? genl_rcv+0xd/0x40 [ 688.577971][T30932] genl_rcv+0x28/0x40 [ 688.578004][T30932] netlink_unicast+0x80f/0x9b0 [ 688.578038][T30932] ? __pfx_netlink_unicast+0x10/0x10 [ 688.578065][T30932] ? netlink_sendmsg+0x650/0xb40 [ 688.578091][T30932] ? skb_put+0x11b/0x210 [ 688.578127][T30932] netlink_sendmsg+0x813/0xb40 [ 688.578166][T30932] ? __pfx_netlink_sendmsg+0x10/0x10 [ 688.578207][T30932] ? aa_sock_msg_perm+0xf1/0x1b0 [ 688.578237][T30932] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 688.578265][T30932] ____sys_sendmsg+0x972/0x9f0 [ 688.578310][T30932] ? __pfx_____sys_sendmsg+0x10/0x10 [ 688.578378][T30932] ? import_iovec+0x73/0xa0 [ 688.578417][T30932] ___sys_sendmsg+0x2a5/0x360 [ 688.578460][T30932] ? __pfx____sys_sendmsg+0x10/0x10 [ 688.578536][T30932] ? __fget_files+0x2a/0x420 [ 688.578581][T30932] ? __fget_files+0x3a0/0x420 [ 688.578625][T30932] __x64_sys_sendmsg+0x1bd/0x2a0 [ 688.578664][T30932] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 688.578709][T30932] ? __pfx_ksys_write+0x10/0x10 [ 688.578746][T30932] do_syscall_64+0x14d/0xf80 [ 688.578778][T30932] ? trace_irq_disable+0x3b/0x150 [ 688.578812][T30932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.578834][T30932] ? clear_bhb_loop+0x40/0x90 [ 688.578863][T30932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.578885][T30932] RIP: 0033:0x7fcdd699c799 [ 688.578905][T30932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 688.578923][T30932] RSP: 002b:00007fcdd4bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 688.578947][T30932] RAX: ffffffffffffffda RBX: 00007fcdd6c15fa0 RCX: 00007fcdd699c799 [ 688.578963][T30932] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 688.578978][T30932] RBP: 00007fcdd4bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 688.578991][T30932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 688.579004][T30932] R13: 00007fcdd6c16038 R14: 00007fcdd6c15fa0 R15: 00007ffd660eae68 [ 688.579040][T30932] [ 689.058286][T30946] __nla_validate_parse: 7 callbacks suppressed [ 689.058308][T30946] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6959'. [ 689.159465][T23623] net_ratelimit: 107 callbacks suppressed [ 689.159489][T23623] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 689.235434][T23623] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 689.275379][T23642] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 689.290214][T30952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6961'. [ 689.304927][T23623] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 689.316743][T30952] FAULT_INJECTION: forcing a failure. [ 689.316743][T30952] name failslab, interval 1, probability 0, space 0, times 0 [ 689.334357][T23623] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 689.353885][T23642] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 689.366175][T30952] CPU: 1 UID: 0 PID: 30952 Comm: syz.4.6961 Not tainted syzkaller #0 PREEMPT(full) [ 689.366206][T30952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 689.366220][T30952] Call Trace: [ 689.366230][T30952] [ 689.366240][T30952] dump_stack_lvl+0xe8/0x150 [ 689.366278][T30952] should_fail_ex+0x412/0x560 [ 689.366312][T30952] should_failslab+0xa8/0x100 [ 689.366343][T30952] __kmalloc_cache_noprof+0x88/0x660 [ 689.366370][T30952] ? nft_flush_table+0x1529/0x18e0 [ 689.366400][T30952] nft_flush_table+0x1529/0x18e0 [ 689.366440][T30952] nf_tables_deltable+0x5d2/0xe80 [ 689.366488][T30952] ? __pfx_nf_tables_deltable+0x10/0x10 [ 689.366523][T30952] ? nfnl_pernet+0x23/0x240 [ 689.366558][T30952] ? __nla_parse+0x40/0x60 [ 689.366594][T30952] nfnetlink_rcv+0x1240/0x27b0 [ 689.366676][T30952] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 689.366720][T30952] ? ref_tracker_free+0x693/0x840 [ 689.366781][T30952] ? __netlink_deliver_tap+0x807/0x850 [ 689.366811][T30952] ? netlink_deliver_tap+0x2e/0x1b0 [ 689.366861][T30952] netlink_unicast+0x80f/0x9b0 [ 689.366896][T30952] ? __pfx_netlink_unicast+0x10/0x10 [ 689.366924][T30952] ? netlink_sendmsg+0x650/0xb40 [ 689.366952][T30952] ? skb_put+0x11b/0x210 [ 689.366989][T30952] netlink_sendmsg+0x813/0xb40 [ 689.367029][T30952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 689.367063][T30952] ? aa_sock_msg_perm+0xf1/0x1b0 [ 689.367094][T30952] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 689.367128][T30952] ____sys_sendmsg+0x972/0x9f0 [ 689.367174][T30952] ? __pfx_____sys_sendmsg+0x10/0x10 [ 689.367220][T30952] ? import_iovec+0x73/0xa0 [ 689.367259][T30952] ___sys_sendmsg+0x2a5/0x360 [ 689.367303][T30952] ? __pfx____sys_sendmsg+0x10/0x10 [ 689.367379][T30952] ? __fget_files+0x2a/0x420 [ 689.367412][T30952] ? __fget_files+0x3a0/0x420 [ 689.367458][T30952] __x64_sys_sendmsg+0x1bd/0x2a0 [ 689.367498][T30952] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 689.367545][T30952] ? __pfx_ksys_write+0x10/0x10 [ 689.367581][T30952] do_syscall_64+0x14d/0xf80 [ 689.367616][T30952] ? trace_irq_disable+0x3b/0x150 [ 689.367651][T30952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.367674][T30952] ? clear_bhb_loop+0x40/0x90 [ 689.367704][T30952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.367726][T30952] RIP: 0033:0x7f47bdb9c799 [ 689.367747][T30952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 689.367766][T30952] RSP: 002b:00007f47beaab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 689.367789][T30952] RAX: ffffffffffffffda RBX: 00007f47bde15fa0 RCX: 00007f47bdb9c799 [ 689.367807][T30952] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 689.367821][T30952] RBP: 00007f47beaab090 R08: 0000000000000000 R09: 0000000000000000 [ 689.367835][T30952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 689.367849][T30952] R13: 00007f47bde16038 R14: 00007f47bde15fa0 R15: 00007fff70bb5f68 [ 689.367886][T30952] [ 689.377373][T23630] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 689.685376][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.695347][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.696953][T29017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.998593][T30959] gretap0: entered promiscuous mode [ 690.006500][T30963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6965'. [ 690.026820][T30965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6965'. [ 690.090861][T30963] xfrm1: entered promiscuous mode [ 690.105639][T30963] xfrm1: entered allmulticast mode [ 690.348115][T30985] IPVS: set_ctl: invalid protocol: 103 172.30.0.1:20001 [ 690.361795][T23635] ------------[ cut here ]------------ [ 690.367504][T23635] conntrack cleanup blocked for 60s [ 690.367535][T23635] WARNING: net/netfilter/nf_conntrack_core.c:2512 at nf_conntrack_cleanup_net_list+0x234/0x340, CPU#1: kworker/u8:32/23635 [ 690.385990][T23635] Modules linked in: [ 690.390391][T23635] CPU: 1 UID: 0 PID: 23635 Comm: kworker/u8:32 Not tainted syzkaller #0 PREEMPT(full) [ 690.400144][T23635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 690.410445][T23635] Workqueue: netns cleanup_net [ 690.415425][T23635] RIP: 0010:nf_conntrack_cleanup_net_list+0x234/0x340 [ 690.419508][T30988] netlink: 'syz.1.6971': attribute type 10 has an invalid length. [ 690.422220][T23635] Code: 08 48 89 df e8 4d 63 66 f8 4c 8b 3b 49 39 df 74 69 e8 f0 3d fc f7 45 31 e4 e9 8e fe ff ff e8 e3 3d fc f7 48 8d 3d cc 5f 57 06 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c cd fe ff [ 690.422273][T23635] RSP: 0018:ffffc900064f78d0 EFLAGS: 00010293 [ 690.456299][T23635] RAX: ffffffff89c94dcd RBX: ffffc900064f7a70 RCX: ffff888055cd1e40 [ 690.464364][T23635] RDX: 0000000000000000 RSI: fffffffffffffffd RDI: ffffffff9020ada0 [ 690.472376][T23635] RBP: 0000000000000001 R08: ffff88807c99c003 R09: 1ffff1100f933800 [ 690.480482][T23635] R10: dffffc0000000000 R11: ffffed100f933801 R12: 0000000000000001 [ 690.488561][T23635] R13: dffffc0000000000 R14: 00000001000097c4 R15: 00000001000097c7 [ 690.496654][T23635] FS: 0000000000000000(0000) GS:ffff888125564000(0000) knlGS:0000000000000000 [ 690.505678][T23635] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 690.512300][T23635] CR2: 00007fc0dec55440 CR3: 0000000091a08000 CR4: 00000000003526f0 [ 690.520391][T23635] Call Trace: [ 690.523807][T23635] [ 690.526789][T23635] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 690.533066][T23635] ops_undo_list+0x52b/0x940 [ 690.537754][T23635] ? __pfx_ops_undo_list+0x10/0x10 [ 690.542921][T23635] ? idr_destroy+0x227/0x290 [ 690.547696][T23635] cleanup_net+0x56b/0x800 [ 690.552174][T23635] ? __pfx_cleanup_net+0x10/0x10 [ 690.557234][T23635] ? process_scheduled_works+0xa25/0x1830 [ 690.563014][T23635] ? process_scheduled_works+0xa25/0x1830 [ 690.568899][T23635] process_scheduled_works+0xb02/0x1830 [ 690.574612][T23635] ? __pfx_process_scheduled_works+0x10/0x10 [ 690.580649][T23635] ? assign_work+0x3d5/0x5e0 [ 690.585385][T23635] worker_thread+0xa50/0xfc0 [ 690.590068][T23635] kthread+0x388/0x470 [ 690.594206][T23635] ? __pfx_worker_thread+0x10/0x10 [ 690.599368][T23635] ? __pfx_kthread+0x10/0x10 [ 690.604505][T23635] ret_from_fork+0x51e/0xb90 [ 690.609191][T23635] ? __pfx_ret_from_fork+0x10/0x10 [ 690.614402][T23635] ? __switch_to+0xc7d/0x1450 [ 690.619162][T23635] ? __pfx_kthread+0x10/0x10 [ 690.623905][T23635] ret_from_fork_asm+0x1a/0x30 [ 690.628750][T23635] [ 690.631957][T23635] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 690.639269][T23635] CPU: 1 UID: 0 PID: 23635 Comm: kworker/u8:32 Not tainted syzkaller #0 PREEMPT(full) [ 690.649019][T23635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 690.659108][T23635] Workqueue: netns cleanup_net [ 690.663927][T23635] Call Trace: [ 690.667236][T23635] [ 690.670195][T23635] vpanic+0x56c/0xa60 [ 690.674252][T23635] ? __pfx__printk+0x10/0x10 [ 690.678884][T23635] ? __pfx_vpanic+0x10/0x10 [ 690.683434][T23635] ? is_bpf_text_address+0x292/0x2b0 [ 690.688803][T23635] ? is_bpf_text_address+0x26/0x2b0 [ 690.694048][T23635] panic+0xc5/0xd0 [ 690.697820][T23635] ? __pfx_panic+0x10/0x10 [ 690.702299][T23635] ? ret_from_fork_asm+0x1a/0x30 [ 690.707294][T23635] __warn+0x315/0x4f0 [ 690.711344][T23635] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 690.717718][T23635] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 690.723919][T23635] __report_bug+0x29a/0x540 [ 690.728559][T23635] ? __lock_acquire+0x6b5/0x2cf0 [ 690.733549][T23635] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 690.739744][T23635] ? __pfx___report_bug+0x10/0x10 [ 690.744830][T23635] ? nf_conntrack_cleanup_net_list+0x13e/0x340 [ 690.751025][T23635] report_bug_entry+0x19a/0x290 [ 690.755909][T23635] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 690.762112][T23635] ? nf_conntrack_cleanup_net_list+0x239/0x340 [ 690.768288][T23635] handle_bug+0xca/0x200 [ 690.772549][T23635] exc_invalid_op+0x1a/0x50 [ 690.777070][T23635] asm_exc_invalid_op+0x1a/0x20 [ 690.781939][T23635] RIP: 0010:nf_conntrack_cleanup_net_list+0x234/0x340 [ 690.788831][T23635] Code: 08 48 89 df e8 4d 63 66 f8 4c 8b 3b 49 39 df 74 69 e8 f0 3d fc f7 45 31 e4 e9 8e fe ff ff e8 e3 3d fc f7 48 8d 3d cc 5f 57 06 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c cd fe ff [ 690.808473][T23635] RSP: 0018:ffffc900064f78d0 EFLAGS: 00010293 [ 690.814571][T23635] RAX: ffffffff89c94dcd RBX: ffffc900064f7a70 RCX: ffff888055cd1e40 [ 690.822582][T23635] RDX: 0000000000000000 RSI: fffffffffffffffd RDI: ffffffff9020ada0 [ 690.830574][T23635] RBP: 0000000000000001 R08: ffff88807c99c003 R09: 1ffff1100f933800 [ 690.838562][T23635] R10: dffffc0000000000 R11: ffffed100f933801 R12: 0000000000000001 [ 690.846562][T23635] R13: dffffc0000000000 R14: 00000001000097c4 R15: 00000001000097c7 [ 690.854654][T23635] ? nf_conntrack_cleanup_net_list+0x22d/0x340 [ 690.860861][T23635] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 690.866946][T23635] ops_undo_list+0x52b/0x940 [ 690.871568][T23635] ? __pfx_ops_undo_list+0x10/0x10 [ 690.876798][T23635] ? idr_destroy+0x227/0x290 [ 690.881417][T23635] cleanup_net+0x56b/0x800 [ 690.885863][T23635] ? __pfx_cleanup_net+0x10/0x10 [ 690.890842][T23635] ? process_scheduled_works+0xa25/0x1830 [ 690.896587][T23635] ? process_scheduled_works+0xa25/0x1830 [ 690.902334][T23635] process_scheduled_works+0xb02/0x1830 [ 690.907927][T23635] ? __pfx_process_scheduled_works+0x10/0x10 [ 690.913936][T23635] ? assign_work+0x3d5/0x5e0 [ 690.918557][T23635] worker_thread+0xa50/0xfc0 [ 690.923200][T23635] kthread+0x388/0x470 [ 690.927289][T23635] ? __pfx_worker_thread+0x10/0x10 [ 690.932421][T23635] ? __pfx_kthread+0x10/0x10 [ 690.937040][T23635] ret_from_fork+0x51e/0xb90 [ 690.941756][T23635] ? __pfx_ret_from_fork+0x10/0x10 [ 690.946892][T23635] ? __switch_to+0xc7d/0x1450 [ 690.951618][T23635] ? __pfx_kthread+0x10/0x10 [ 690.956225][T23635] ret_from_fork_asm+0x1a/0x30 [ 690.961034][T23635] [ 690.964668][T23635] Kernel Offset: disabled [ 690.968995][T23635] Rebooting in 86400 seconds..