last executing test programs: 15m39.283740605s ago: executing program 4 (id=4436): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000004b00)=[{&(0x7f0000003980)={0x104, 0x3c, 0x400, 0x70bd2a, 0x25dfdbfb, "", [@generic="9d60747f324f5574c76b6721eeab2aa812fbf830fcf328267a732f7dee0c2cfbea7a94f673e51258c2623c232b2761f053db0087b854eac8a71d04a412226f10c6c80028df6ed472b06b97fdd79d1135b8a6f293fdc4ae69a7c4231891e64f99254ff2a95cdbe8f2ffbe5a2d8cb744dd1085f19b379bca585e75979faa9ca26e2708e8005c104690280f617ea0297cb5a252fca5788ea89feb6969282ec06559e203102db0c90f83ae2c8f8f1c8c8d7b78d9a54dbd90298857604f0fa77c4b098f2acded46a17b7811234686ec1483b89963902f3594461178a8860960a7cee53ec04f68dacbe8b1e84c03298e802ec798e1"]}, 0x104}], 0x1, 0x0, 0x0, 0x40c2}, 0x4000004) 15m38.718541831s ago: executing program 4 (id=4442): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000240), 0x38, 0x5003, 0x0) 15m38.479364972s ago: executing program 4 (id=4445): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0}], 0x1, 0x4001) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={r2, 0x2, 0x1, "fa"}, 0x9) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x4e23, 0x7, @private2, 0x9}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={r2, 0x2}, 0x8) 15m37.490908123s ago: executing program 4 (id=4458): unshare(0x28000600) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) 15m37.36437403s ago: executing program 4 (id=4460): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000003c0)={0x0, 0x60000000, 0xfffffffb, 0xa}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) 15m37.119797511s ago: executing program 4 (id=4463): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 15m21.861483501s ago: executing program 32 (id=4463): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 13.016031592s ago: executing program 5 (id=11615): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000200)={0x2, 0xfffd, @rand_addr=0x64010102}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x9}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000007c0)={0x0, 0x1}, 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000400)=0x134, 0x4) bind$can_raw(0xffffffffffffffff, &(0x7f00000001c0), 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000004300)={0x1, 0x58, &(0x7f0000004280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000004340)={'wg2\x00', 0x0}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000005c40)={0x0, @initdev, @local}, &(0x7f0000005c80)=0xc) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005dc0)=[{{&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10, &(0x7f0000003ac0)=[{&(0x7f00000004c0)="56c5b09b2772acb5178354008de169a48c9a17d39c2f50838cca6f4aa515bd720058d47044a4ed864fd981b4a22c3c9f57d583183c12293ac5b44d82b38431ce3600e7df39d8745a26d30c94290b4634c5df584c595fef2bef7471a280f828740811f1f5908138185eac599e176b1eba0aebc434c701408f6c3a5b69808d5568742b7815b4cd0898d5d58b0cf2ac96d833de10ef7e02c03e71535b314a5b0c44db533340ad02e1e371b6cf9b1a274d3cb7a44652d4d0c43d1ec2529c139485ba1ef91d9b93524fe9d1fa8a9d0f8686191cec8dfc9139fcbb484b1a987d7899194bf37cd8f11beebebb94650e578dceea86421568d8104a08", 0xf8}, {&(0x7f0000000800)="de3cd28c0edc8559ee222ffa1bae91b7105d53ef206e73f818b7143a2bc6a6f6e9a46241c940a711bff0bc43e98ddba1f86f591d8dc1049f04c278037a97818fd3b9dec409356981a5e973c789ffaebc02c7aa42979b6efd447c4b28cfd5dbf1e84f0865e0b5c7bc19af980bc33db5bea519c5a9c65b3a6421fa7d57d2b28a7e06d94fd633e000c35297c4200b6fa62fe0456553fa47ac34dd1c509b796934abe5770de503d8f75e2e753c223aa6c94c214f5e7c5fdc254833f346a5a6239308354480540aa8de113989f3", 0xcb}, {&(0x7f0000000900)="b14e36", 0x3}, {&(0x7f0000000b00)="a834d8bfee10a34ef90ea51282c563eb9f039979c863d3bb5284809d435cd65cee88efabfc902f49dbe51706d037a900479913d533160ffeaa450eabff44faadb54f1bc20cbe7c150e933d023a1fa541f0fdcd9d482292e44987fb1bb6928996afb6a32d3a5c2c3a033de553a541f6e806f1ea54d0ed903a42653f55567d1472b3afbbf2be7159470e34b2700f4e34f405c81a9074a4ea2d755ea3985d4b09", 0x9f}, {&(0x7f0000000ac0)="013f532adb7ec9b8adf27acd9a5949001c988dacff64bad738a91f2faaa9c5e703a7ac333e203315", 0x28}, {&(0x7f0000002ac0)="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", 0x1000}], 0x6, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0xb0}}, {{&(0x7f0000003c00)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000003f80)=[{&(0x7f0000003c40)="35c97035ac1a836fa9b05e56728823f8b134d9e4ea36b5a75c5dcbadd77df218114386b2102d99d59dc9387880a122c5b08b8bbdee18f8e1565372a21951f7cf35e8bdf43aad85858e7c1dc9b062923912da14764c7ce7dd8aa5c8417f980ed52f16b7341d5c0b5c967cdcbb19c964972c25809e33d452a8a236b80419f8041ab90240e98eae340af8af9b4a0f090ff4e0901c848651a551", 0x98}, {&(0x7f0000003d00)="92817408f987f93bdc18fae8f62e81beaa17cf7e84cc72c522352823812f7755da0c9a52ce2dec51b2e92e5b6cb7c30258995fca50598c9fae627b9d57ceaa23967524e864602f", 0x47}, {&(0x7f0000003d80)="e71dae167a4285572235e565418ac6f48c751165ef942276d78aff0cd81e034a2f3b45bc23172472ed0efc5f1c08798dc3db63ce1cd42f029c6a8bae409bc210d0e66c1688c767bb26ee434a2e2f6b0879e65926d021d358a03d98e9f8beaf865f8f323fa4f776069107bbf7fa79fe3a427e2e9de83a0914d4debda1c7dbf696907ad6693bf5f2f51e3b690c0fc06612a87dcc72daaeb7dd8ed8b26371ab5c416dd57e0d7ed2bcb0093f", 0xaa}, {&(0x7f0000003e40)="6401c404e0b97b870753add254fc951e89c18f7eb5c4bdf61bf14eee605fbad3544f968a68d331bcf52f8080ca2624054f4295534fe8733211299a3db2e15e23e0caf94aa3ab700e49938251a9efebea2d23ed58e3ed9aed48bf22a1aec8f2f45d1c77caac574651abae617ff9b6e6ac17d2d4a7efa7970ec7771ca686ffd8960a1b0ed875bb2a002b7b93e8b22b6c9af4e2c16fdc04d05a3709d9a4be7f390fd7969f70d6715a03cd4893be0abc7567f08b3f7a3b0a34df22a6287c9f922d750ec27666c2b5ab70e43faf15293c8468302618beb127defb3eac9138cd90f27aabc52c4b37d73434e8cc6fe8374cac92c1d093ab7d1b95", 0xf7}, {&(0x7f0000003f40)="59ff53883eee2e99743a4e2cd28020ec0ea7d974c800eb9faf498a6e359850b8b63f0c67d7a994d63d775b406a8638", 0x2f}], 0x5, &(0x7f0000004000)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x38000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @multicast1}}}], 0x50}}, {{&(0x7f0000004080)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000004240)=[{&(0x7f00000040c0)="03cdcd97249178a21fe2043014cafd5edfc00d45a1d4a142492a6524245e77266773f318aa7e7589d71afa0af9e9a04b3f6c352c1b0fce2675da2b080f8b446036d164f3e5323af1445828c41d06fb66ac47c5852294cb351c21f086cb73f42380124648c82cbf62b8ec6390ee781bb151de5239323dc3f33b87064a8d4a9ab3625af80fdbf66f958315145b49c8dfc272036560e303988c22d73c8afbb855c457b6055d37379035878c0138223c2f7554b4cfe35545addc15bab0120a0265238a08103c8c555869d8e7c3ff5d4ed4716ceb2965e33cbd488a0d84f53b1e337417ffc872f47ef81f4fc17d9b96", 0xed}, {&(0x7f00000041c0)="170f98976dafeba1fb58bdde1282d233fec202dac69c64663cb98fd5091b19d0dda4e66e555f13e0ab4cd44b66583d000377cb5650644cdff7d6fe31bf0ec9abe7b4a8dc45120ecd6230c9ad93f7a1faf463f36f3d41bfa1f2cdeae9c78675", 0x5f}], 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="140000000000000000000000020000000000000000000000100000000000000000000000070000001c000000000000000000000008000000", @ANYRES32=r4, @ANYBLOB="ac143434ac143d1595ac1b358114db6ed18b8e9b4512dde70c000000d41aa812001c00414f487bef441bb96c8e932c03a0bbff5c83c5380b0838947554f13ea6686b080127e2", @ANYRES32=r5, @ANYBLOB="e0000001ac1414aa00000000140000000000000000000000020000000000000000000000140000000000000000000000020000000008000000000000110000000000000000000000010000000300000000000000"], 0xb0}}, {{&(0x7f0000004440)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000005540)=[{&(0x7f0000004480)="31a8abd6b106e2500802586e56a94f00", 0x10}, {&(0x7f00000044c0)="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", 0x1000}, {&(0x7f00000054c0)="b8742e95d35a1fb07ffd585a1074b53acdd813ab48084721600e4d1f16aa3ae6d0a7ca8313040be4c857acb3058f0633839959ef", 0x34}, {&(0x7f0000005500)="bcbe9381442dc88b54aa880697875c7fb062744fe1e717ae846d09411afdcfb924b2d1bd7c61f24436eac193ff06", 0x2e}], 0x4}}, {{&(0x7f0000005580)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10, &(0x7f0000005a40)=[{&(0x7f0000000bc0)="c892c2c0108f94791afb4c2b19c90d9f0b13f3374450340bd173b46ae027c582895978375dc551cda1cf16ed7f2b45651699769e35480200758ce0f945f51ce1f5db42f3ee9862fd4bc3fc938f7fbbdcfb979effdcb1e89dac188f1dc45cb5436486c6c4a64209df8e9262bad72f932b940486b680b82c8a4a", 0x79}, {&(0x7f0000005640)="4f032482d43a441b0f72fdd92837d295368b84e2c43935e77048d52d3662e86a43ab35f424bbc0d0722dc5b031fd1593319e799474a9f8bdc8ee7588cf33c2e8b97a52e060939ad8144e09181dba51bc2818b0ac8ed5dd282474ac949a0e6d740ecddf6f138fd2b818ec372c2040aa0fc0d8f815d8474fcdeb284c994ec64c951731a26ee46b1833abdbf34bc4ef11037d01a0ae5163c62c6497a3fa2e1027e0513846e6e0a5b5ca94611586ff2a32ad609e87f867a014b5e3cb9a518c8af2813ea73bea78c8d5d91562fedf6192ba53cfa099db439ee3f2e8fc10875c82f793b16888bc74d610a487e91c17e88c09", 0xef}, {&(0x7f0000005740)="dcccba228a7e484ed21f3ea96e1a169dcf5013b25b2e9a50ec261a5b347bd3333763b0b810f979707c6af389310b521609257a8d0be24f60bf5f2e689514244d67d27ed520a01ce9", 0x48}, {&(0x7f00000057c0)="af91f2a5f266ba70613d261e52e89852a4db8b7d0b2a785222abf4d3b9658f3507f6a9863c2e30e1464a0bbdf7cecc441a0bc6ce1f4294aae168e56461f47e4e814ef72fd78333fba8ef1a50fe2c587e171df9491dc1a8a167057223cb25210883839347abca2b03fbeccdc4ecf323aa908577c2384ff56b4eaff6e49130ceabb1fbef29c191cc2e5262a8b4ea65d9f92ffad2705e4fc6f0f94f47a4c014d2c0954153fd3919616e065ef3817c762a82a8ae105cbf0893d0670d55f5bbf4ed8a9cf7e918b2ca66253259e744991b73ee5597ee455c02e6ea8a", 0xd9}, {&(0x7f00000058c0)="9c5062b3fa547970f0142c3ef3acff91db6ec72eef1cc18a0df204bc198de89337fe6b77be855971da90cc594499c6e226c9205c3c6a6921391efabef718bddf4bdd321954942b8ea28effb2963dba67d0928ec7079d2d340b1ef369172eba549225052e2d844f71041466506ab2da132a12267b6414", 0x76}, {&(0x7f0000005940)="6bf8dcf366b708c587fc8b41ffd7739cfd223c3c4019c12de342dc593facabf7585801e024104171808e3118049445a1a863843d06c7e31bbe510e55c1bcc921d769137e204ed00184b3a046c4120412cd3331082dfa22970bd9c1d198bf549ee86bc43533c38a2576a43ba989ff49a3a6e8398632a2b60a42f318bd495788a0ab320739e73cb3dfeba7fde1d6d69581467baebf6366f4757cb2f46d4e241a09cc57cb22e594fca263", 0xa9}, {&(0x7f0000005a00)="83ce2a13ca67dbcdbe14d1b04fe6f881af73a14ea64aeee3c3e214b54507caca568007f189", 0x25}], 0x7}}, {{0x0, 0x0, &(0x7f0000005c00)=[{&(0x7f0000005ac0)="72f78d4dcf685ec6063fb7c390b62be43b8617f913f0433d30998175f97e1b13f1546dc441a99cd8d6923b700acfc4a5f4ebd50d56ba72fd63dc591a1a840af15edaa167cc7de39e145044e83013d326bc184ad202c6e8da27399f4cece108103ec5a83dded3b487365345ec236a28d79a0dd25d4df1934c55d3110299704dfd5903cbbe3f0e2fc5bb6f9b367b50c548b9145c4564e06b1ec9eb67b002f7af7e482135c1214b3898991136e87d1734e7d9eda514ad7318196cd9856ae19c2718b9e5d6f7b34634e4473674fd", 0xcc}, {&(0x7f0000005bc0)="08473c4736c04c5e336a3a5d2915671072cde573f936df8e32a69bcfe922b3d0c69eda83ef6ac7", 0x27}], 0x2, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r6, @ANYBLOB="ac141440ac1414aa000000001400000000000000000000000100000008000000000000001400000000000000000000000100000000000000000000001100000000000000000000000100000006000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="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"], 0xd0}}], 0x6, 0x4000000) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCBRADDBR(r7, 0x89a0, &(0x7f0000000000)='batadv_slave_1\x00') close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000a80)={'syzkaller0\x00', @broadcast}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000400000000000000000000000850000004f000000850000000f00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}, 0x50) close(r8) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2b, 0xfffffff8, {0x0, 0x0, 0x0, r10, {0xb, 0xd}, {}, {0x8, 0xc}}}, 0x24}}, 0x40004) recvmmsg(r2, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/62, 0x3e}, {&(0x7f0000000c40)=""/197, 0xc5}, {&(0x7f0000001ac0)=""/4090, 0xffa}, {&(0x7f0000000940)=""/73, 0x49}, {&(0x7f0000000340)=""/249, 0xf9}], 0x5}, 0x5d}], 0x1, 0x10022, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7eaa00e3b94e99cb000038000000000095dd94000000e700"], &(0x7f0000000480)='GPL\x00'}, 0x94) 7.792370335s ago: executing program 5 (id=11634): r0 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket(0x10, 0x803, 0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001940)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0xffffffff, 0xffffffff, 0x108, 0xffffffff, 0x1a8, 0xffffffff, 0xffffffff, 0x1a8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'nicvf0\x00', {0x7ff}}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffffff, 0x0, 'veth0_to_team\x00', 'team_slave_0\x00', {}, {0xff}, 0x6c, 0x3, 0x41}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x5, 0x3}, {0xffffffffffffffff, 0x5, 0x2}, 0xda, 0xfffffff8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x3, 0x0, 0x5}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000012000000) recvmmsg$unix(r1, &(0x7f0000006200)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/232, 0xe8}], 0x1}}], 0x1, 0x0, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x20}}, 0x40000c0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x440b0) 6.882361061s ago: executing program 5 (id=11642): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000018110004", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000006000000b7080000000000007b8af8ff00000000b708000078b500007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a50000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000087ca08"], 0x0, 0xf234, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff020000000000000000000000000001", 0x30}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="74000000010701030000000000000000030000040900010073797a3100000000540007800800024000000002080002400000b55a0800014000000001080001400000000108000240000000070800014000000006080001400000000808000240ffffdfda0800014000e000000806"], 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a000044000000eb00000000141001"], 0x3c}, 0x1, 0x0, 0x0, 0x800400d}, 0x8001) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0xe9, @dev={0xfe, 0x80, '\x00', 0xa}, 0x5}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="2b10", 0x2}, {&(0x7f0000000500)="13e71bc758e34015f1a0f8581d81c42b9393e429dbb0fd8000000000000000d92e12148aee8ded40391c77c27a45c61cd1672dcc9f6b50e277222443747f792411982fc1d9c08f147da8e83e48e0611bdcb868670ffd571cceddfb675561d37793b012afd134dfaba7a58ecd9e4fe7f3931b563ced65226694332ee53ca5d571b4e2e09b920825a5b6810d1bb45317eb9d12b18e87f7caca8ae2971998aa934a98c3c71b54b8f48fc8496f0b3635fe838da6bf26c91666268026933e26494b9749cc1825eb21092dec4a5d1cfc0261cd98dfabd0a5d4cd6c7f0c31dd000000000000", 0xe2}], 0x2, 0x0, 0x0, 0x2c}, 0x4) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050841) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 3.335210193s ago: executing program 2 (id=11668): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x840) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) getsockopt$sock_buf(r3, 0x1, 0x1a, &(0x7f0000000100)=""/2, &(0x7f0000000140)=0x2) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x20, 0xfffff034}, {0x6}]}, 0x10) syz_emit_ethernet(0x5eb, &(0x7f0000001780)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x5b5, 0x3a, 0x0, @remote, @local, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x0, "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"}}}}}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x4000190, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f0000000100)={0x0, @aes256, 0x0, @desc2}) 2.850516638s ago: executing program 2 (id=11672): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300fffffffe008500000005000000bf0900000000000035090100000000009500000000000000d7020000200000007b9af8ff00000000d6090000002000007baaf0ff00000000bf2720000000000007080000fffdffffbf9400000000000007040000f0ffffff640200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608ffff010000008500000005010000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 2.733120335s ago: executing program 1 (id=11673): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000040)=0x5, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1, 0x4) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000000c0)={0x0, 'syzkaller1\x00', {0x3}, 0x7}) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000000c0)={0x0, 'syzkaller1\x00', {0x3}, 0x7}) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x6}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000200)={r3, 0x1, 0xa1f9, 0x1, 0x9, 0xd7}, 0x14) (async) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000200)={r3, 0x1, 0xa1f9, 0x1, 0x9, 0xd7}, 0x14) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000240)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7d6, 0x63}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0xc810}, 0x4000004) (async) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7d6, 0x63}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0xc810}, 0x4000004) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0), r2) (async) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0), r2) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000440)={0x0, @l2tp={0x2, 0x0, @empty, 0x3}, @rc={0x1f, @none, 0x4}, @l2={0x1f, 0x1, @none, 0xff30, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x7f, &(0x7f0000000400)='syzkaller0\x00', 0x8, 0x10000, 0xc3}) (async) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000440)={0x0, @l2tp={0x2, 0x0, @empty, 0x3}, @rc={0x1f, @none, 0x4}, @l2={0x1f, 0x1, @none, 0xff30, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x7f, &(0x7f0000000400)='syzkaller0\x00', 0x8, 0x10000, 0xc3}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8982, &(0x7f00000004c0)={0x8, 'ip6erspan0\x00', {'virt_wifi0\x00'}, 0xb}) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000540)={r5, r6/1000+10000}, 0x10) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000580)=@req={0x4, 0x2, 0x1, 0x10000}, 0x10) (async) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000580)=@req={0x4, 0x2, 0x1, 0x10000}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000600)={r3, 0x8}, 0x8) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640), r2) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r8, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x884, @bearer=@udp='udp:syz2\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a80)={&(0x7f0000000840)={0x218, r7, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7, 0x57}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x2}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x14c, 0x3, 0x0, 0x1, [{0x104, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xfd, 0x1, "996569906e167f2fd259b12878abfcc3a7c2452f354fd7dd43ce47a2647e3f7797371146a0b3baccf62271b7227ebae6623800158e4b1dacb004d49b0cda222e508457ac83360f9233e07bad10fb55fdebee411d78c9c62cf51d9a0230582c8149c47b252c9ed8f717524f8c9fa287ad69c3bbd3157fe4f2134b1909ce88f3585dd109a16442d7a21ce659f59e8fa4216ce6c28a84d918015db8a45e94571bb5e0e92a158eee0e950aa2ca60e3930950369c431e542c4e82b6865a27f197ec0c0bce490856475f56c8808353f7823cdcb92c6b3d16892179d47f20f250a42e27dfe54501409ef1f5907161a315b1d7fbd044da12e324d59c51"}}, {0x38, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x34, 0x1, "c17a489bba1f60b6e06539dbb68f4c9513d5118f035e9f53b7cc6766c8996371d76bbb16f56273c56079201cb9feba95"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x4}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xffffff47}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x200020}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x6c, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x56, 0x1, "3a3ebb987d1561f006f89bc483d780370420234d26a1c58ad88c64593e3a46c6cb66040b66b8ad447ddc693a9d5cc25c548b00c718b7f4948c05728cc9a9e2a5d38757503c6a7efc7f6024024fc7073ebcad"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x800}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x218}, 0x1, 0x0, 0x0, 0x80}, 0x200400c1) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x48, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000cc0)={r2, 0x58, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000d80)={'syztnl1\x00', &(0x7f0000000d00)={'ip6_vti0\x00', r10, 0x4, 0x27, 0x1, 0x665, 0x20, @remote, @mcast2, 0x10, 0x20, 0x1, 0x6}}) accept4$inet(r2, &(0x7f0000000dc0)={0x2, 0x0, @remote}, &(0x7f0000000e00)=0x10, 0x80000) (async) r11 = accept4$inet(r2, &(0x7f0000000dc0)={0x2, 0x0, @remote}, &(0x7f0000000e00)=0x10, 0x80000) setsockopt$inet_opts(r11, 0x0, 0xd, &(0x7f0000000e40)="164b98acb3cdd044526c077ee6e84a29f1216450e195b17ddc47d3f115896c6947d95732ec52d897b48ebec514e83ad67a35eeba9c8e408b0f3ea2d494164a8f5c61cc6fc72b6a9baee565f7ff94f6174f770619b364da3a02521fe4faf352cb86e9e32dea9abc4a506abdd7c0aa6dfa5993137d8ef2d1696c8087a03179464b6f8616e90498123e24809503af25137cb8eb722427c4d6b36471f671d63f9d3e93aabe44e84e29fc510d42a146adeb6c08c04ff564a89b8699a344a945c3c524e285832ff08fe3351e54a96e35ae989b86232a061337ceb26e4749d4", 0xdc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000f40)={'pimreg0\x00'}) 2.68169375s ago: executing program 2 (id=11674): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x40, 0x14, 0x0, 0x1, 0x0, 0x0, 0x8, 0x30015}, [@FRA_SRC={0x14, 0x2, @private2}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="10000000001000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000214000200fc0200"], 0x5c}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000005880), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000005d00)={0x0, 0x0, &(0x7f0000005cc0)={&(0x7f0000000180)={0x18, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x8040) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x2, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x28c9f12561afc034}, 0x1) 2.624037772s ago: executing program 2 (id=11676): r0 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket(0x10, 0x803, 0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001940)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0xffffffff, 0xffffffff, 0x108, 0xffffffff, 0x1a8, 0xffffffff, 0xffffffff, 0x1a8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'nicvf0\x00', {0x7ff}}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffffff, 0x0, 'veth0_to_team\x00', 'team_slave_0\x00', {}, {0xff}, 0x6c, 0x3, 0x41}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x5, 0x3}, {0xffffffffffffffff, 0x5, 0x2}, 0xda, 0xfffffff8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x3, 0x0, 0x5}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000040000000) recvmmsg$unix(r1, &(0x7f0000006200)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/232, 0xe8}], 0x1}}], 0x1, 0x0, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x20}}, 0x40000c0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x440b0) 2.297587942s ago: executing program 1 (id=11680): ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000a40)) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000e500000001"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000a80)={0x0, r0}, 0x8) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x3, 0x0, 0x3, 0x0, 0x0, 0xa0}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) r1 = socket$key(0xf, 0x3, 0x2) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x528, 0x318, 0x18c, 0x203, 0x318, 0x19030000, 0x458, 0x2e0, 0x2e0, 0x458, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x318, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x8, 0x8, 0x1, 0x9, 0x3, 0x9, 0x5, 0xffffffff]}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x588) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="18000000250001"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r3, &(0x7f0000009040)=[{{0x0, 0x0, 0x0}, 0x8000003}, {{0x0, 0x0, &(0x7f0000008f80)=[{0x0}, {0xffffffffffffffff}], 0x2}, 0x6}], 0x2, 0x102, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x1b, 0x5, 0x508, 0x208, 0x0, 0xffffffff, 0x0, 0x0, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x1, 0x80}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x10, @ipv6=@private1, @ipv4=@rand_addr=0x64010100, @port=0x4e20, @gre_key=0x2}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv6=@empty, @gre_key=0x1, @icmp_id=0x68}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, [0xf1498d3c0c394cd3, 0xff, 0x0, 0xff], [0xff, 0xff000000, 0xff, 0xffffff00], 'vlan1\x00', 'veth1_vlan\x00', {}, {0xff}, 0x1d, 0xb, 0x4, 0x1}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {"d9c0"}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xe, @ipv6=@mcast1, @ipv4=@remote, @port=0x4e21, @gre_key=0x200}}}, {{@ipv6={@empty, @local, [0xffffffff, 0xffffff00, 0xffffff00, 0xff000000], [0xffffffff, 0xffffffff, 0xffffff00, 0xff000000], 'dvmrp0\x00', 'veth1_to_team\x00', {}, {0xff}, 0x5a, 0x9, 0x9, 0x40}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0xa0}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x17, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4=@empty, @gre_key=0x8, @icmp_id=0x65}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) (async) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd28, 0x3503}]}, 0x78}, 0x1, 0x7}, 0x0) 2.297290997s ago: executing program 3 (id=11681): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000004c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}], 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r3, 0x0, 0x0) shutdown(r2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x300, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) socket$inet(0x2, 0x2, 0x1) r4 = socket$inet_sctp(0x2, 0x5, 0x84) socket(0x2, 0x3, 0x100000001) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet_sctp(r4, &(0x7f0000004900)=[{&(0x7f00000000c0)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)}], 0x1, &(0x7f00000001c0)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}], 0x1, 0x0) 1.863559984s ago: executing program 2 (id=11682): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000201000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff1c3ab703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 1.829462718s ago: executing program 1 (id=11683): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001b00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="b4c243efa0d1cfc01de0a0743891621767b9bafe0dfd62af144ddb7bf90e5f1fec5407e388737b64f663ae004b8694f28b8e62f524193fbd37ec2efd592ae9811ca7b3e26fef142c6d9b093d4dfe7c2a258c6037f0d393a1b4a6cfd44d5d330e4913ec8a2ff58bf77308004900", @ANYRES32, @ANYRESDEC], 0x1194}, 0x1, 0x0, 0x0, 0x4}, 0x24004000) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000000c0)=0x3, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000000)=0x5) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000240)) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xad) connect$unix(r3, &(0x7f0000000340)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) sendto$inet(r1, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r6 = socket$inet6(0xa, 0x2, 0x3a) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r7, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r7, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_int(r7, 0x0, 0x16, &(0x7f00000000c0)=0x858, 0x4) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r8, &(0x7f00000001c0), 0x37) listen(r8, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2572}}, 0x7, 0x3}, &(0x7f00000003c0)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000000480)={r9, 0x7}, 0x8) 1.728259953s ago: executing program 3 (id=11684): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000080ffff008500000005000000bf0900000000000035090100000000009500000000000000d7020000200000007b9af8ff00000000d6090000002000007baaf0ff00000000bf2720000000000007080000fffdffffbf9400000000000007040000f0ffffff640200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608ffff010000008500000005010000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 1.724834478s ago: executing program 5 (id=11685): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc250}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4400}}}}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 1.691190477s ago: executing program 2 (id=11686): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000980)={0x0, @multicast2, @dev}, &(0x7f0000000a40)=0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x91, 0x91, 0x3, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @enum={0x8, 0x2, 0x0, 0x6, 0x4, [{0x0, 0x7}, {0x5, 0xffffff80}]}, @var={0x7, 0x0, 0x0, 0xe, 0x1, 0x1}, @ptr={0x7, 0x0, 0x0, 0x2, 0x4}, @datasec={0x7, 0x1, 0x0, 0xf, 0x1, [{0x3, 0x0, 0x44}], "bf"}, @enum={0x6, 0x3, 0x0, 0x6, 0x4, [{0xf, 0x3}, {0xb}, {0xb, 0x9}]}, @type_tag={0x2, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x2e]}}, &(0x7f0000000c00)=""/44, 0xaf, 0x2c, 0x1, 0x401, 0x10000}, 0x28) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000009c0)={'team0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x4, 0x3, 0xffffffff, 0x80000000, 0x20080, 0x1, 0x4, '\x00', r1, 0xffffffffffffffff, 0x0, 0x3, 0x2}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x1e, &(0x7f0000000980)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x3, 0x2, 0xa, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000840)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000880)=[{0x3, 0x2, 0x6, 0xc}, {0x5, 0x4, 0xc, 0x4}], 0x10, 0x9}, 0x94) r4 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000000), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={&(0x7f0000000640)=""/91, 0x5b, 0x0, &(0x7f00000006c0)=""/57, 0x39}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYRES32=r3], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000580), 0x8, 0x10, 0x0, 0x0, r5}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000007c0)="e06f5bec00"/14, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0x4) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r8, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r9, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x8, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r7, 0x4048587b, &(0x7f0000000580)={{r6, &(0x7f0000000040)='#\\@\x00', 0x10042, &(0x7f0000000180)={@align=0x7db07a47, {0x2, 0x9, 0xffffffff, 0x7}}, 0xecc, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x7fffffff}, 0x1, &(0x7f0000000440)=[{0x1, 0x8, &(0x7f0000000280)='\x00', &(0x7f0000000340)="7668170abacef49a12dcec2b1ae971189852100c0498dc563d3d9856abb9468ea2da9c7679d070f26a3d4b3333c41f6b2cce378af9f53aeb698b553529aa12675d991e6e3a3c888b2b997eb757035c495373d1e33df9717946bbcea6ecc4f4e11f0345c3386a7205b9e0e0f2b5f80d429d4bdd230caf28d3d60f1687e948dbbd9ff04e7758b3405b289e0d1571dba716c832f91e854c1dc5e1e3d1d72397dd8944d3e72b9a4f09793165c45557d49975f70de1ffb916b901494e7c0a50b024620699f5b3fc5a4ab8a7e6ddae85f35cd5f8ebf68b7c14a110d427364794d4553abe7182e3eb094aeaca16fe334460", 0xee, 0x18}]}) sendmsg$nl_xfrm(r11, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@newspdinfo={0x2c, 0x24, 0x0, 0x70bd2c, 0x25dfdbfe, 0x40, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x4000) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2660004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.690936954s ago: executing program 0 (id=11687): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000000000000000000000000000c7aa5035897b20a6c23f1fc4af2990c07f784b985a3de7740bd33848702930", 0x122}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0", 0x2e}, {&(0x7f0000000540)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafa", 0x91}], 0x4}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)="e6ba", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000001c0)="d59f41c0418ebad512facf22d697f3c97fa25becae148b518203467ee73c881817657efe92a415cd70d9ae44e7de8d81f558e67adb0be705fcdae72a6125b0a47c9267278147923ab3f54170671e0918c5d3fa469152f3ec919157824087", 0x5e}, {&(0x7f0000000700)="73347c742785f90aa563b4c01785f8371c6c153843eb25bce2d86628414138f6d3eb90c44817fbcc958e331db94a8d1119eefe09b541e73e4789594b627b7ba94f6c14265df07fabab61972e1be26c0cb37d32c3a771e304e6f8cc49bdbdb05c7569b6300fef45f8992df412b3f5905c23ae4503aa74d9fca9224332942529f26a5775237db47e838d478fa852f9cecd4a33d022d908d78e33f7fefaa1f92a1a2dd193e2484b2d719f288f1b036c64f6f3da5d91", 0xb4}, {&(0x7f0000000800)="7abb2d2c5611b0ce6d41587da9ccee436da0be1ffb3a9090594dc662f4160f2f648daab50485c3cccfc7adb8d813dd0a88f6b7f4f72c33896841b1cb7d608d887246e7f112b50e8c30501a3c17f6d0d19fbbffc8", 0x54}], 0x3}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000000c0)="f43945ca864918caf5375823337eb7c72fc5b6b5161a2c0ca175ff29e6e88a7cc3f70000000000", 0xffffffffffffff73, 0x340080d1, 0x0, 0x0) 1.589560358s ago: executing program 3 (id=11688): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000400)={0x345beed119ad2014, 0x0, {0x7, @usage=0x5, 0x0, 0xb, 0x2b3b, 0x400, 0x2, 0x2, 0xd6, @usage=0x409e, 0x9, 0x0, [0x9, 0x2, 0x100, 0x8, 0xffffffffffffffff, 0x1]}, {0x6, @struct={0xaf9, 0x9}, 0x0, 0x36368ea3, 0x561, 0x2, 0xc6, 0x7, 0x400, @usage, 0x2, 0x40, [0x3, 0xfffffffffffffffe, 0x8000000000000001, 0xf, 0x4, 0xd263]}, {0x7bcd, @struct={0x3, 0xffffffff}, 0x0, 0x200, 0x4, 0xfffffffffffffff8, 0x1, 0xc, 0x4, @struct={0xf6ab, 0x3}, 0x80, 0x7, [0xea3, 0x5fabfcdf, 0x0, 0x91b5, 0xffffffffffff0866, 0x401]}, {0x2, 0x3, 0x7fffffffffffffff}}) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) readv(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x8}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.589138725s ago: executing program 1 (id=11689): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000007cc0)=[{{&(0x7f0000000800)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0xd}, 0x6}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000340)="28b3", 0x2}], 0x1, &(0x7f00000019c0)=ANY=[@ANYBLOB="24000000000000002001000000000000000000000000000e14b65b156c4d1400", @ANYRES32=0x0, @ANYBLOB="00000000400000000000000029000000360000001d04000000000000000100c90300000000000000000000ffffac1414aac910fe8800000000000000000000000001010014000000000000002900000008000000070000000000000014000000000000002900000008000000060000000000000014"], 0xb0}}, {{&(0x7f0000001a80)={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3}, 0x1c, &(0x7f0000002e00)=[{&(0x7f0000001ac0)="01", 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000040)={0x0, 0x8, 0xb}, 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xee, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x91, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000001000000b708000000000000dbaaf8fff1000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006a000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES8=r2, @ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) syz_emit_ethernet(0xe, &(0x7f0000000180)={@empty, @multicast, @void, {@generic={0x88f5}}}, 0x0) 1.498447025s ago: executing program 0 (id=11690): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x840) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) getsockopt$sock_buf(r3, 0x1, 0x1a, &(0x7f0000000100)=""/2, &(0x7f0000000140)=0x2) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x20, 0xfffff034}, {0x6}]}, 0x10) syz_emit_ethernet(0x5eb, &(0x7f0000001780)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x5b5, 0x3a, 0x0, @remote, @local, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x0, "90c8a1a190c999b1f046a5f8502e73670cb7f4ab8035ca5ba53c4253cc4da3a75b04f4b82f3a1689ee3df70953d7085fdec7f497f5cc2d62a193023253aac15e73dbd3281353568d55068daae5fac37a26b04243257dcf4dc0fbd797d756a071225dfd6cd3dc31ad8c7c0c92bbfc03794c373498d3d89d05bb6386f13aa31d109ac4810e4502e74aae68aafa112cd1e90befbd59485a3396a44ff5387f60c329e0a740e62fb7bb9d695e12d9948a6e240b80ccc2ec5f2a69358b65cfa87a4bbd80e9b803b9816992fbc6c812c65fc10082b7468954573bedffa93ffd656148cf54a7ac3ef550a2be49f3b590db70c5286751c254d6fd14c3f699d1ff2c86b9f631078a31134ea0ad64f61a87a7a6506c79db494d7ef8eecf24e9ea143c259b6ec138e37d965d5577c23d225636d30385bbd04e5b57ebcbdf1984bd45eaf6a5659c22cc323c48dbf5fb3b77ccc125b38b8eb0cd11aaac4e77334f103895d82b4c3aecbd22186cf61b1d88da424bc3ddec9c49c0606e5aa1f6121052873fb08cbf344f6352d24150a865ea12da53ef04eb518f224c035c49a48ba2926b366e4530d60d27cdb4a850f9adba7f1e26b4fa6c941ced501439ef20e06c405dd0b384bec002dd591f8df1504d5634c96d4c67597fdd66a3576a97348d9610af83519fbf13bfb40ad39235068617582b387bce8d281d508b4a0b100cf629d157e8b777847a02a242a90906e6a084588b9d7461e6fb93532615ce6ea71e9d0d3fb13bb56982788d5786272d156e96996f23330eed4f84d7c120bf74441f35a137e313dd9e1a2a2a23504918e06d9a4f320522fe0d6df149364c032d3f14250b0db7e8ba445430515edb445e3fbdd8486067083f38042e973d58e3c79b575fdba68fee6b38f09001ef9b84e38f330a1aa65e48106a8629e7591fffa4f23c681c6584144d77c624b8369f5ae99faa194c7766fae96be118514d4b83f511f484515774c6261dc99189c12d46e67b9cecfefc5ad32cd0f5f59ab032bc93adb4d4476f6c8a5c011e00ebaca53eb4469c389122db553aabaed119fd640729d9557c50d78cfca4af346803804306a9796b090265e256dc820546c58fa2d3723c7205540006e831e1cfb3960ca77f606a6de6afd49e733c3720c801e1afc2142dbfad94ffd06c036395fcc2cd12c37ebd37d4c57ca8a83c45f0dd7f0020650c0e793e997bb9be183014f7225d84edb092362fadb3b30755331f9e7dd056c9148329a8ed848603770170e7ab2e9aae5b8ad97ab61179927427093feb59da6664fd14f14f059d04adac8d525c23a1fbf59f2eb334de8a38a0dc28943662e2eed21cefbb52e24f914723579e3b6ab9419f1399cec79d1a51b2c2668af2f71bcf3cf98cef743eace692612059486cf28365f897c6ae9a5e7176ad91404def08efe340e92ea3c790218511b9d69fcda5b500d694d59a768c866839cb22b918b9322689e6ac66d21866159c84e2a0e41d9324c092a6cfc14c6e42b1bf3657ed763fb3ee007e9633253e3250f7d5d2d574e4c89b4517d9cc7a9ff92b80e5870dd822d075e6082cae341f2db748921f2909264bad93d1ca36f01aa414c3681e382bf294cf2f436e5fee6871d8acadf504f784de821ac21811b894f0c78548a9cced0ef27bc07ab29a2556318e5133623ca3f346d197632455279b111a9ed789a927cf3b09c53ac1ebc7457cf50c79f211a7402d8ff5371bbaeb8fca4b52efdc944e81ddf7737475568c8589a353687a8d7cff5e7003a696d286bc51198b07b2676c9675a161b42c33aface83cd24976ec4af28e8e5a35a60ac1798d672a0b23ea519bc6f55be62c0e3db3a432cb54e3e75ea0adc375e4a8c1a645370a921e93d2a1b040d894d9153c4ba86f60b2aae3fd2c2b86502691a0728860e9e12210d237dc9dbe1d1795ef65c81f4e2e948466ca14829b3c7ee86e0e0510a232fd0d22c1fc7c62bdb2e7d2d11f22fc74c85974c6b88c5c02b6df180cd22ba092a1ae8ea4c60cb29e2faec1e97ebbf886c34815bb906ccb2a4f86f75a43"}}}}}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x4000190, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f0000000100)={0x0, @aes256, 0x0, @desc2}) 1.388122721s ago: executing program 5 (id=11691): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000000800004000000", @ANYRES32, @ANYBLOB="13008d71be8ab6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000280)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4048840}, 0x800) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x6b, 0x78, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18010000fcffffff0000000007000000850000007b"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_tracing={0x1a, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000008000000000c0080000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000010000085000000060000001844000001000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000070ffffff7b8af8ff00000000bfa2000000e9ffff06020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f00000006c0)='syzkaller\x00', 0x10000000, 0x94, &(0x7f0000000700)=""/148, 0x41100, 0x2, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x5, 0x6, 0x80000000, 0x5}, 0x10, 0x49dc, r2, 0x0, 0x0, 0x0, 0x10, 0x790}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x1, 0xc, &(0x7f0000001080)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x400ee78}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x14) syz_emit_ethernet(0x5a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "081200", 0x24, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[@fragment={0xff, 0x0, 0xc, 0x0, 0x0, 0x4, 0x64}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r7, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x5, 0x1e}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040010}, 0x8050) r9 = socket$inet6(0xa, 0x2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x18, 0x25, 0x301, 0x70bd26, 0x25dfdbf9, {0x15}, [@nested={0x4, 0x146}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000044}, 0x24008002) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@broadcast, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r11 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r11, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r9) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000150005012abd700000000000e00000020000000000000000000000000000000000000000000000000000000100000008000300000a00100002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000002000000000000000000000000000000140b00000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000fdff8e2c040e40f072f7ffffffffffff0000000000000000ff010000b56b6e00"], 0xb8}, 0x1, 0x0, 0x0, 0x810}, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000012c0), 0xc) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r12, 0x0, 0xe, 0x0, &(0x7f0000000040)="05806ab382844306d758e60803dc", 0x0, 0x6b2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.27827799s ago: executing program 1 (id=11692): r0 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket(0x10, 0x803, 0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001940)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0xffffffff, 0xffffffff, 0x108, 0xffffffff, 0x1a8, 0xffffffff, 0xffffffff, 0x1a8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'nicvf0\x00', {0x7ff}}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffffff, 0x0, 'veth0_to_team\x00', 'team_slave_0\x00', {}, {0xff}, 0x6c, 0x3, 0x41}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x5, 0x3}, {0xffffffffffffffff, 0x5, 0x2}, 0xda, 0xfffffff8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x3, 0x0, 0x5}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x92000000500d0000) recvmmsg$unix(r1, &(0x7f0000006200)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/232, 0xe8}], 0x1}}], 0x1, 0x0, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x20}}, 0x40000c0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x440b0) 1.039961957s ago: executing program 3 (id=11693): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c0001800600060008"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r4) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_LOCAL={0x8, 0x6, @multicast2}, @IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_TOS={0x5, 0x9, 0x6}, @IFLA_GRE_ERSPAN_HWID={0x6}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x8}, @IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x6c}}, 0x0) 859.507407ms ago: executing program 5 (id=11694): openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pipe(&(0x7f00000000c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf253f00000008000300", @ANYRES32=r2, @ANYBLOB="04005e801c005e8008000700c5f133694bbd07cb55000000080003006e8f000030005e800800020003000000080002491acf00000c0001"], 0x8c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0xa0, r1, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x9}, @NL80211_ATTR_SCAN_SSIDS={0x6c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0x5, 0x0, @random='2'}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x8}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0x2, 0x3, 0x17, 0xd, 0x8, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x20}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) 774.213531ms ago: executing program 1 (id=11695): r0 = epoll_create1(0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0xc4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="fb62056c18000000fd3f0000000000000900000085000000d0000000850000001100000044000000001ea300f0c26549f1abf24827365e1121ffdb3f521b5c38fe000000000000000248f78a80fe1129953c"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0xe, 0x0, &(0x7f00000000c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000980)=[{r5, 0x1}, {0xffffffffffffffff, 0x502}, {r0, 0x4}], 0x3, 0x0, 0x0, 0x0) epoll_wait(r5, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f00000000c0)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x56}) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r9, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r9) r10 = socket(0x10, 0x809, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x10) recvmmsg(r10, &(0x7f00000037c0), 0x0, 0x2000, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r10, 0x0, 0x61, 0x0, 0x0) 721.286433ms ago: executing program 0 (id=11696): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000301000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff1c3ab703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 699.018691ms ago: executing program 3 (id=11697): ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000005c0)={'geneve0\x00'}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x6, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xfff2}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000011}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000680)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0x190, 0x1c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@inet=@set2={{0x28}, {{0xfffe, 0x5, 0x4}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) 548.081081ms ago: executing program 0 (id=11698): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000400)={0x345beed119ad2014, 0x0, {0x7, @usage=0x5, 0x0, 0xb, 0x2b3b, 0x400, 0x2, 0x2, 0xd6, @usage=0x409e, 0x9, 0x0, [0x9, 0x2, 0x100, 0x8, 0xffffffffffffffff, 0x1]}, {0x6, @struct={0xaf9, 0x9}, 0x0, 0x36368ea3, 0x561, 0x2, 0xc6, 0x7, 0x400, @usage, 0x2, 0x40, [0x3, 0xfffffffffffffffe, 0x8000000000000001, 0xf, 0x4, 0xd263]}, {0x7bcd, @struct={0x3, 0xffffffff}, 0x0, 0x200, 0x4, 0xfffffffffffffff8, 0x1, 0xc, 0x4, @struct={0xf6ab, 0x3}, 0x80, 0x7, [0xea3, 0x5fabfcdf, 0x0, 0x91b5, 0xffffffffffff0866, 0x401]}, {0x2, 0x3, 0x7fffffffffffffff}}) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) readv(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) (fail_nth: 3) 289.592043ms ago: executing program 0 (id=11699): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030085ffffff008500000005000000bf0900000000000035090100000000009500000000000000d7020000200000007b9af8ff00000000d6090000002000007baaf0ff00000000bf2720000000000007080000fffdffffbf9400000000000007040000f0ffffff640200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608ffff010000008500000005010000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 201.371462ms ago: executing program 0 (id=11700): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}], 0x2}], 0x1, 0x40800) recvmmsg$unix(r1, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/88, 0x58}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/47, 0x2f}], 0x1}}], 0x2, 0x10120, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x1}, 0x28) r5 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000900000000000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r6, &(0x7f0000000bc0), &(0x7f0000000c00)=@udp6=r4}, 0x20) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x28, 0x7, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c800}, 0x800) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x64}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 0s ago: executing program 3 (id=11701): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000000000000000000000000000c7aa5035897b20a6c23f1fc4af2990c07f784b985a3de7740bd33848702930", 0x122}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0", 0x2e}, {&(0x7f0000000540)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafa", 0x91}], 0x4}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)="e6ba", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000001c0)="d59f41c0418ebad512facf22d697f3c97fa25becae148b518203467ee73c881817657efe92a415cd70d9ae44e7de8d81f558e67adb0be705fcdae72a6125b0a47c9267278147923ab3f54170671e0918c5d3fa469152f3ec919157824087", 0x5e}, {&(0x7f0000000700)="73347c742785f90aa563b4c01785f8371c6c153843eb25bce2d86628414138f6d3eb90c44817fbcc958e331db94a8d1119eefe09b541e73e4789594b627b7ba94f6c14265df07fabab61972e1be26c0cb37d32c3a771e304e6f8cc49bdbdb05c7569b6300fef45f8992df412b3f5905c23ae4503aa74d9fca9224332942529f26a5775237db47e838d478fa852f9cecd4a33d022d908d78e33f7fefaa1f92a1a2dd193e2484b2d719f288f1b036c64f6f3da5d91", 0xb4}, {&(0x7f0000000800)="7abb2d2c5611b0ce6d41587da9ccee436da0be1ffb3a9090594dc662f4160f2f648daab50485c3cccfc7adb8d813dd0a88f6b7f4f72c33896841b1cb7d608d887246e7f112b50e8c30501a3c17f6d0d19fbbffc8", 0x54}], 0x3}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000000c0)="f43945ca864918caf5375823337eb7c72fc5b6b5161a2c0ca175ff29e6e88a7cc3f70000000000", 0xffffffffffffff73, 0x340080d1, 0x0, 0x0) kernel console output (not intermixed with test programs): 16.132878][T12278] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1416.170204][T12295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10548'. [ 1416.223045][ T29] audit: type=1107 audit(1776991494.218:93): pid=12297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='š†7 ªvÍúDÈ3«ê®È^\Õ¿ñ —ºmk íQû펼ñIOcT¥•öç4ðï輟\þ™J' [ 1416.447811][T12311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1416.482868][T12315] openvswitch: netlink: IPv4 tun info is not correct [ 1416.841976][T12330] netlink: 'syz.2.10557': attribute type 2 has an invalid length. [ 1416.897762][T12330] netlink: 119 bytes leftover after parsing attributes in process `syz.2.10557'. [ 1417.351815][T12343] xt_CT: No such helper "snmp_trap" [ 1417.382799][T12355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10562'. [ 1417.403064][T11993] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1417.543320][T12360] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10562'. [ 1417.757562][T11993] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1417.923287][T11993] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1417.942111][T11993] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1417.969950][T12372] netlink: 136 bytes leftover after parsing attributes in process `syz.2.10563'. [ 1417.980958][T11993] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1418.010461][T11993] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1418.046421][T12372] tipc: Started in network mode [ 1418.061552][T12372] tipc: Node identity d6c7bebcac24, cluster identity 4711 [ 1418.072959][T12372] tipc: Enabled bearer , priority 0 [ 1418.164036][T12380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1418.259553][T12374] syzkaller0: entered promiscuous mode [ 1418.271752][T12374] syzkaller0: entered allmulticast mode [ 1418.290799][T12374] tipc: Resetting bearer [ 1418.297450][T11993] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1418.342021][T11993] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1418.360807][T12370] tipc: Resetting bearer [ 1418.405709][T12389] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10568'. [ 1423.319618][ T1299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.348489][ T1299] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1423.357335][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1424.471392][T12463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1424.699710][T12370] tipc: Disabling bearer [ 1424.713210][ T5071] tipc: Node number set to 2061745852 [ 1425.011309][T11993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1425.102439][T11993] 8021q: adding VLAN 0 to HW filter on device team0 [ 1425.120295][T12486] tun0: tun_chr_ioctl cmd 1074812118 [ 1425.135101][T22292] bridge0: port 1(bridge_slave_0) entered blocking state [ 1425.142370][T22292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1425.160560][T12486] tun0: tun_chr_ioctl cmd 1074033169 [ 1425.177479][T22311] bridge0: port 2(bridge_slave_1) entered blocking state [ 1425.184809][T22311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1425.460602][T12500] syzkaller0: entered promiscuous mode [ 1425.783792][T12518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10587'. [ 1426.006702][T11993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1426.164711][T12535] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10589'. [ 1426.639090][T12553] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1426.691940][T12553] team0: Unable to change to the same mode the team is in [ 1427.013230][T12570] bond1: option downdelay: invalid value (18446744073709551371) [ 1427.030193][T12570] bond1: option downdelay: allowed values 0 - 2147483647 [ 1427.069066][T12570] bond1 (unregistering): Released all slaves [ 1428.402207][T12612] netlink: 'syz.2.10602': attribute type 1 has an invalid length. [ 1429.147798][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 1429.155891][ C0] lec:lec_tx_timeout: lec0 [ 1430.871604][T12612] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 1430.981663][T12626] netlink: 76 bytes leftover after parsing attributes in process `syz.1.10603'. [ 1431.036836][T11993] veth0_vlan: entered promiscuous mode [ 1431.092122][T11993] veth1_vlan: entered promiscuous mode [ 1431.225405][T11993] veth0_macvtap: entered promiscuous mode [ 1431.255177][T11993] veth1_macvtap: entered promiscuous mode [ 1431.321548][T11993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1431.452624][T12645] bond2: option downdelay: invalid value (18446744073709551371) [ 1431.474955][T12645] bond2: option downdelay: allowed values 0 - 2147483647 [ 1431.494922][T12645] bond2 (unregistering): Released all slaves [ 1431.654269][T11993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1431.699441][T22292] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.731939][T22292] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.780105][T22292] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.815194][T22292] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1432.120921][T22298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1432.163729][T22298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1432.380086][T22292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1432.397637][T12675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10612'. [ 1432.416617][T22292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1432.882761][T12694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10615'. [ 1432.932223][T12694] netlink: 'syz.1.10615': attribute type 5 has an invalid length. [ 1432.953843][T12694] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10615'. [ 1433.013983][T12697] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10616'. [ 1433.042160][T12694] geneve2: entered promiscuous mode [ 1433.071645][T12694] geneve2: entered allmulticast mode [ 1433.102725][T22298] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 1433.129229][T22298] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 1433.161872][T22298] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 1433.198828][T12705] bond0: (slave bond_slave_0): Releasing backup interface [ 1433.238091][T12705] bond0: (slave bond_slave_1): Releasing backup interface [ 1433.277668][T12705] team0: Port device team_slave_0 removed [ 1433.322086][T12705] team0: Port device team_slave_1 removed [ 1433.339914][T12705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1433.368474][T12705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1433.392045][T12705] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1433.424554][T22298] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 1433.623096][T12731] netlink: 'syz.5.10623': attribute type 4 has an invalid length. [ 1433.705679][T12737] netlink: 'syz.3.10625': attribute type 10 has an invalid length. [ 1433.714372][T12737] veth0_vlan: left promiscuous mode [ 1433.721630][T12737] veth0_vlan: entered promiscuous mode [ 1433.732568][T12737] team0: Device veth0_vlan failed to register rx_handler [ 1433.839461][T12732] gre0 speed is unknown, defaulting to 1000 [ 1434.279529][T12751] netlink: 76 bytes leftover after parsing attributes in process `syz.1.10627'. [ 1434.292896][T12751] syzkaller0: entered promiscuous mode [ 1434.299591][T12751] syzkaller0: entered allmulticast mode [ 1434.792102][T12762] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland [ 1434.930566][T12763] gre0 speed is unknown, defaulting to 1000 [ 1435.112238][T12780] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10632'. [ 1435.382546][T12780] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1435.394013][T28807] Bluetooth: hci2: command tx timeout [ 1435.842053][T12803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10633'. [ 1435.996570][T12766] gre0 speed is unknown, defaulting to 1000 [ 1436.678444][T12833] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10637'. [ 1436.707223][T12824] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1436.754152][T12833] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10637'. [ 1437.589882][T12845] gre0 speed is unknown, defaulting to 1000 [ 1437.930585][T12868] netlink: 72 bytes leftover after parsing attributes in process `syz.5.10643'. [ 1438.343211][T14743] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1439.580032][T12910] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.10651'. [ 1439.712999][ T29] audit: type=1107 audit(1776991517.708:94): pid=12912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1440.622006][T12935] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1441.182283][T12939] syzkaller0: entered promiscuous mode [ 1441.188020][T12939] syzkaller0: entered allmulticast mode [ 1441.616005][T12953] netlink: 'syz.5.10661': attribute type 1 has an invalid length. [ 1441.875796][T12956] netlink: 76 bytes leftover after parsing attributes in process `syz.1.10662'. [ 1441.896441][T12960] syzkaller0: entered promiscuous mode [ 1441.919550][T12960] syzkaller0: entered allmulticast mode [ 1441.978558][T12962] netlink: 1204 bytes leftover after parsing attributes in process `syz.2.10664'. [ 1442.099311][T12966] Bluetooth: MGMT ver 1.23 [ 1442.285292][T12972] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10668'. [ 1442.306612][T12970] netlink: 76 bytes leftover after parsing attributes in process `syz.2.10666'. [ 1442.337136][T12970] syzkaller0: entered promiscuous mode [ 1442.342902][T12970] syzkaller0: entered allmulticast mode [ 1442.353823][T12968] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10667'. [ 1442.363294][T12968] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10667'. [ 1442.439655][T12975] FAULT_INJECTION: forcing a failure. [ 1442.439655][T12975] name failslab, interval 1, probability 0, space 0, times 0 [ 1442.485086][T12975] CPU: 1 UID: 0 PID: 12975 Comm: syz.0.10669 Not tainted syzkaller #0 PREEMPT(full) [ 1442.485115][T12975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1442.485128][T12975] Call Trace: [ 1442.485137][T12975] [ 1442.485152][T12975] dump_stack_lvl+0xe8/0x150 [ 1442.485189][T12975] should_fail_ex+0x412/0x560 [ 1442.485222][T12975] should_failslab+0xa8/0x100 [ 1442.485247][T12975] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1442.485275][T12975] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 1442.485307][T12975] ? __alloc_skb+0x1d0/0x7d0 [ 1442.485339][T12975] __alloc_skb+0x1d0/0x7d0 [ 1442.485370][T12975] tipc_buf_acquire+0x2b/0xe0 [ 1442.485392][T12975] tipc_msg_build+0x8d7/0xf00 [ 1442.485430][T12975] ? __pfx_tipc_msg_build+0x10/0x10 [ 1442.485457][T12975] ? net_generic+0x1e/0x240 [ 1442.485475][T12975] ? net_generic+0x1e/0x240 [ 1442.485497][T12975] ? tipc_group_bc_cong+0x15f/0x210 [ 1442.485527][T12975] tipc_send_group_bcast+0x7db/0xad0 [ 1442.485576][T12975] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 1442.485612][T12975] ? __pfx_woken_wake_function+0x10/0x10 [ 1442.485636][T12975] ? process_measurement+0x451/0x1c80 [ 1442.485659][T12975] ? process_measurement+0x451/0x1c80 [ 1442.485688][T12975] __tipc_sendmsg+0x33b/0x2bc0 [ 1442.485719][T12975] ? up_write+0x1ab/0x410 [ 1442.485746][T12975] ? __pfx___tipc_sendmsg+0x10/0x10 [ 1442.485765][T12975] ? process_measurement+0x195e/0x1c80 [ 1442.485786][T12975] ? aa_label_sk_perm+0x532/0x6e0 [ 1442.485822][T12975] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1442.485848][T12975] ? __pfx_process_measurement+0x10/0x10 [ 1442.485871][T12975] ? tomoyo_check_open_permission+0x38e/0x470 [ 1442.485901][T12975] ? __lock_acquire+0x6b5/0x2cf0 [ 1442.485974][T12975] ? tipc_sendmsg+0x47/0x70 [ 1442.485999][T12975] ? __local_bh_enable_ip+0xd0/0x130 [ 1442.486032][T12975] tipc_sendmsg+0x55/0x70 [ 1442.486057][T12975] ____sys_sendmsg+0x972/0x9f0 [ 1442.486088][T12975] ? __might_fault+0xaf/0x130 [ 1442.486123][T12975] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1442.486165][T12975] ? import_iovec+0x73/0xa0 [ 1442.486191][T12975] ___sys_sendmsg+0x2a5/0x360 [ 1442.486220][T12975] ? __lock_acquire+0x6b5/0x2cf0 [ 1442.486251][T12975] ? __pfx____sys_sendmsg+0x10/0x10 [ 1442.486288][T12975] ? kstrtouint+0x6e/0xe0 [ 1442.486343][T12975] ? __fget_files+0x2a/0x420 [ 1442.486369][T12975] ? __fget_files+0x3a0/0x420 [ 1442.486408][T12975] __sys_sendmmsg+0x27c/0x4e0 [ 1442.486445][T12975] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1442.486474][T12975] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1442.486530][T12975] ? ksys_write+0x242/0x270 [ 1442.486571][T12975] ? __pfx_ksys_write+0x10/0x10 [ 1442.486607][T12975] __x64_sys_sendmmsg+0xa0/0xc0 [ 1442.486637][T12975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1442.486659][T12975] do_syscall_64+0x15f/0xf80 [ 1442.486683][T12975] ? trace_irq_disable+0x3b/0x140 [ 1442.486706][T12975] ? clear_bhb_loop+0x40/0x90 [ 1442.486732][T12975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1442.486752][T12975] RIP: 0033:0x7f0c90f9cdd9 [ 1442.486773][T12975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1442.486792][T12975] RSP: 002b:00007f0c91e68028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1442.486814][T12975] RAX: ffffffffffffffda RBX: 00007f0c91215fa0 RCX: 00007f0c90f9cdd9 [ 1442.486831][T12975] RDX: 0400000000000181 RSI: 00002000000030c0 RDI: 0000000000000007 [ 1442.486845][T12975] RBP: 00007f0c91e68090 R08: 0000000000000000 R09: 0000000000000000 [ 1442.486858][T12975] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1442.486872][T12975] R13: 00007f0c91216038 R14: 00007f0c91215fa0 R15: 00007fff695d5c38 [ 1442.486907][T12975] [ 1442.919037][T12987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10672'. [ 1443.161080][T12999] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10678'. [ 1443.270827][T13000] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1443.574994][T13011] gre0 speed is unknown, defaulting to 1000 [ 1444.426347][T13030] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10689'. [ 1444.443942][T13028] netlink: 76 bytes leftover after parsing attributes in process `syz.2.10687'. [ 1444.464416][T13028] syzkaller0: entered promiscuous mode [ 1444.480215][T13028] syzkaller0: entered allmulticast mode [ 1444.590873][T13034] FAULT_INJECTION: forcing a failure. [ 1444.590873][T13034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1444.620208][T13034] CPU: 1 UID: 0 PID: 13034 Comm: syz.3.10691 Not tainted syzkaller #0 PREEMPT(full) [ 1444.620240][T13034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1444.620253][T13034] Call Trace: [ 1444.620263][T13034] [ 1444.620273][T13034] dump_stack_lvl+0xe8/0x150 [ 1444.620317][T13034] should_fail_ex+0x412/0x560 [ 1444.620354][T13034] _copy_from_iter+0x1d3/0x1670 [ 1444.620386][T13034] ? rcu_is_watching+0x15/0xb0 [ 1444.620416][T13034] ? trace_kmalloc+0x2a/0xf0 [ 1444.620448][T13034] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 1444.620480][T13034] ? __pfx__copy_from_iter+0x10/0x10 [ 1444.620516][T13034] ? __alloc_skb+0x55c/0x7d0 [ 1444.620541][T13034] ? skb_put+0x11b/0x210 [ 1444.620568][T13034] ? tipc_msg_build+0xafd/0xf00 [ 1444.620598][T13034] tipc_msg_build+0x87d/0xf00 [ 1444.620635][T13034] ? __pfx_tipc_msg_build+0x10/0x10 [ 1444.620664][T13034] ? net_generic+0x1e/0x240 [ 1444.620683][T13034] ? net_generic+0x1e/0x240 [ 1444.620713][T13034] ? tipc_group_bc_cong+0x15f/0x210 [ 1444.620744][T13034] tipc_send_group_bcast+0x7db/0xad0 [ 1444.620790][T13034] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 1444.620827][T13034] ? __pfx_woken_wake_function+0x10/0x10 [ 1444.620852][T13034] ? process_measurement+0x451/0x1c80 [ 1444.620875][T13034] ? process_measurement+0x451/0x1c80 [ 1444.620906][T13034] __tipc_sendmsg+0x33b/0x2bc0 [ 1444.620941][T13034] ? up_write+0x1ab/0x410 [ 1444.620968][T13034] ? __pfx___tipc_sendmsg+0x10/0x10 [ 1444.620987][T13034] ? process_measurement+0x195e/0x1c80 [ 1444.621009][T13034] ? aa_label_sk_perm+0x532/0x6e0 [ 1444.621046][T13034] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1444.621073][T13034] ? __pfx_process_measurement+0x10/0x10 [ 1444.621095][T13034] ? tomoyo_check_open_permission+0x38e/0x470 [ 1444.621126][T13034] ? __lock_acquire+0x6b5/0x2cf0 [ 1444.621206][T13034] ? tipc_sendmsg+0x47/0x70 [ 1444.621232][T13034] ? __local_bh_enable_ip+0xd0/0x130 [ 1444.621266][T13034] tipc_sendmsg+0x55/0x70 [ 1444.621298][T13034] ____sys_sendmsg+0x972/0x9f0 [ 1444.621329][T13034] ? __might_fault+0xaf/0x130 [ 1444.621364][T13034] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1444.621406][T13034] ? import_iovec+0x73/0xa0 [ 1444.621433][T13034] ___sys_sendmsg+0x2a5/0x360 [ 1444.621462][T13034] ? __lock_acquire+0x6b5/0x2cf0 [ 1444.621493][T13034] ? __pfx____sys_sendmsg+0x10/0x10 [ 1444.621530][T13034] ? kstrtouint+0x6e/0xe0 [ 1444.621593][T13034] ? __fget_files+0x2a/0x420 [ 1444.621619][T13034] ? __fget_files+0x3a0/0x420 [ 1444.621657][T13034] __sys_sendmmsg+0x27c/0x4e0 [ 1444.621695][T13034] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1444.621724][T13034] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1444.621780][T13034] ? ksys_write+0x242/0x270 [ 1444.621812][T13034] ? __pfx_ksys_write+0x10/0x10 [ 1444.621850][T13034] __x64_sys_sendmmsg+0xa0/0xc0 [ 1444.621881][T13034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1444.621903][T13034] do_syscall_64+0x15f/0xf80 [ 1444.621927][T13034] ? trace_irq_disable+0x3b/0x140 [ 1444.621950][T13034] ? clear_bhb_loop+0x40/0x90 [ 1444.621977][T13034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1444.621998][T13034] RIP: 0033:0x7f4333b9cdd9 [ 1444.622020][T13034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1444.622039][T13034] RSP: 002b:00007f43349d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1444.622064][T13034] RAX: ffffffffffffffda RBX: 00007f4333e15fa0 RCX: 00007f4333b9cdd9 [ 1444.622080][T13034] RDX: 0400000000000181 RSI: 00002000000030c0 RDI: 0000000000000007 [ 1444.622094][T13034] RBP: 00007f43349d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1444.622107][T13034] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1444.622121][T13034] R13: 00007f4333e16038 R14: 00007f4333e15fa0 R15: 00007ffe77b80118 [ 1444.622157][T13034] [ 1446.828326][T13074] syzkaller0: entered promiscuous mode [ 1446.844843][T13074] syzkaller0: entered allmulticast mode [ 1446.917405][T13077] netlink: 'syz.3.10703': attribute type 11 has an invalid length. [ 1447.159492][T13079] FAULT_INJECTION: forcing a failure. [ 1447.159492][T13079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1447.212318][T13079] CPU: 1 UID: 0 PID: 13079 Comm: syz.2.10704 Not tainted syzkaller #0 PREEMPT(full) [ 1447.212349][T13079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1447.212362][T13079] Call Trace: [ 1447.212371][T13079] [ 1447.212381][T13079] dump_stack_lvl+0xe8/0x150 [ 1447.212417][T13079] should_fail_ex+0x412/0x560 [ 1447.212451][T13079] _copy_from_iter+0x1d3/0x1670 [ 1447.212482][T13079] ? rcu_is_watching+0x15/0xb0 [ 1447.212511][T13079] ? trace_kmalloc+0x2a/0xf0 [ 1447.212552][T13079] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 1447.212583][T13079] ? __pfx__copy_from_iter+0x10/0x10 [ 1447.212618][T13079] ? __alloc_skb+0x55c/0x7d0 [ 1447.212643][T13079] ? skb_put+0x11b/0x210 [ 1447.212670][T13079] ? tipc_msg_build+0xafd/0xf00 [ 1447.212699][T13079] tipc_msg_build+0x87d/0xf00 [ 1447.212735][T13079] ? __pfx_tipc_msg_build+0x10/0x10 [ 1447.212764][T13079] ? net_generic+0x1e/0x240 [ 1447.212782][T13079] ? net_generic+0x1e/0x240 [ 1447.212804][T13079] ? tipc_group_bc_cong+0x15f/0x210 [ 1447.212834][T13079] tipc_send_group_bcast+0x7db/0xad0 [ 1447.212878][T13079] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 1447.212914][T13079] ? __pfx_woken_wake_function+0x10/0x10 [ 1447.212939][T13079] ? process_measurement+0x451/0x1c80 [ 1447.212963][T13079] ? process_measurement+0x451/0x1c80 [ 1447.212992][T13079] __tipc_sendmsg+0x33b/0x2bc0 [ 1447.213026][T13079] ? up_write+0x1ab/0x410 [ 1447.213052][T13079] ? __pfx___tipc_sendmsg+0x10/0x10 [ 1447.213072][T13079] ? process_measurement+0x195e/0x1c80 [ 1447.213099][T13079] ? aa_label_sk_perm+0x532/0x6e0 [ 1447.213134][T13079] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1447.213160][T13079] ? __pfx_process_measurement+0x10/0x10 [ 1447.213183][T13079] ? tomoyo_check_open_permission+0x38e/0x470 [ 1447.213212][T13079] ? __lock_acquire+0x6b5/0x2cf0 [ 1447.213282][T13079] ? tipc_sendmsg+0x47/0x70 [ 1447.213309][T13079] ? __local_bh_enable_ip+0xd0/0x130 [ 1447.213341][T13079] tipc_sendmsg+0x55/0x70 [ 1447.213363][T13079] ____sys_sendmsg+0x972/0x9f0 [ 1447.213394][T13079] ? __might_fault+0xaf/0x130 [ 1447.213428][T13079] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1447.213469][T13079] ? import_iovec+0x73/0xa0 [ 1447.213493][T13079] ___sys_sendmsg+0x2a5/0x360 [ 1447.213530][T13079] ? __lock_acquire+0x6b5/0x2cf0 [ 1447.213562][T13079] ? __pfx____sys_sendmsg+0x10/0x10 [ 1447.213599][T13079] ? kstrtouint+0x6e/0xe0 [ 1447.213653][T13079] ? __fget_files+0x2a/0x420 [ 1447.213679][T13079] ? __fget_files+0x3a0/0x420 [ 1447.213716][T13079] __sys_sendmmsg+0x27c/0x4e0 [ 1447.213754][T13079] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1447.213782][T13079] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1447.213836][T13079] ? ksys_write+0x242/0x270 [ 1447.213868][T13079] ? __pfx_ksys_write+0x10/0x10 [ 1447.213908][T13079] __x64_sys_sendmmsg+0xa0/0xc0 [ 1447.213939][T13079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1447.213963][T13079] do_syscall_64+0x15f/0xf80 [ 1447.213988][T13079] ? trace_irq_disable+0x3b/0x140 [ 1447.214010][T13079] ? clear_bhb_loop+0x40/0x90 [ 1447.214035][T13079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1447.214055][T13079] RIP: 0033:0x7fe9e7d9cdd9 [ 1447.214075][T13079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1447.214094][T13079] RSP: 002b:00007fe9e8c75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1447.214117][T13079] RAX: ffffffffffffffda RBX: 00007fe9e8015fa0 RCX: 00007fe9e7d9cdd9 [ 1447.214132][T13079] RDX: 0400000000000181 RSI: 00002000000030c0 RDI: 0000000000000007 [ 1447.214146][T13079] RBP: 00007fe9e8c75090 R08: 0000000000000000 R09: 0000000000000000 [ 1447.214159][T13079] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1447.214172][T13079] R13: 00007fe9e8016038 R14: 00007fe9e8015fa0 R15: 00007ffed9ecc968 [ 1447.214207][T13079] [ 1448.181832][T13107] __nla_validate_parse: 1 callbacks suppressed [ 1448.181854][T13107] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10711'. [ 1449.179833][T13135] IPVS: Scheduler module ip_vs_ not found [ 1449.250714][T13125] syzkaller0: entered promiscuous mode [ 1449.268733][T13125] syzkaller0: entered allmulticast mode [ 1449.286586][T13128] syzkaller1: entered promiscuous mode [ 1449.299581][T13128] syzkaller1: entered allmulticast mode [ 1449.331852][T22323] syzkaller0: tun_net_xmit 48 [ 1449.460706][T13154] FAULT_INJECTION: forcing a failure. [ 1449.460706][T13154] name failslab, interval 1, probability 0, space 0, times 0 [ 1449.488369][T13154] CPU: 0 UID: 0 PID: 13154 Comm: syz.5.10722 Not tainted syzkaller #0 PREEMPT(full) [ 1449.488402][T13154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1449.488415][T13154] Call Trace: [ 1449.488423][T13154] [ 1449.488433][T13154] dump_stack_lvl+0xe8/0x150 [ 1449.488467][T13154] should_fail_ex+0x412/0x560 [ 1449.488502][T13154] should_failslab+0xa8/0x100 [ 1449.488527][T13154] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1449.488555][T13154] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 1449.488586][T13154] ? __alloc_skb+0x1d0/0x7d0 [ 1449.488620][T13154] __alloc_skb+0x1d0/0x7d0 [ 1449.488655][T13154] tipc_buf_acquire+0x2b/0xe0 [ 1449.488677][T13154] tipc_msg_build+0x8d7/0xf00 [ 1449.488714][T13154] ? __pfx_tipc_msg_build+0x10/0x10 [ 1449.488743][T13154] ? net_generic+0x1e/0x240 [ 1449.488762][T13154] ? net_generic+0x1e/0x240 [ 1449.488784][T13154] ? tipc_group_bc_cong+0x15f/0x210 [ 1449.488813][T13154] tipc_send_group_bcast+0x7db/0xad0 [ 1449.488856][T13154] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 1449.488890][T13154] ? lapic_next_event+0x11/0x20 [ 1449.488919][T13154] ? clockevents_program_event+0x491/0x5f0 [ 1449.488949][T13154] ? __pfx_woken_wake_function+0x10/0x10 [ 1449.488974][T13154] ? __pfx_clockevents_program_event+0x10/0x10 [ 1449.489015][T13154] __tipc_sendmsg+0x33b/0x2bc0 [ 1449.489048][T13154] ? finish_task_switch+0x41f/0xbe0 [ 1449.489073][T13154] ? lockdep_hardirqs_on+0x7a/0x110 [ 1449.489097][T13154] ? finish_task_switch+0x41f/0xbe0 [ 1449.489122][T13154] ? __pfx___tipc_sendmsg+0x10/0x10 [ 1449.489143][T13154] ? trace_sched_exit_tp+0x3a/0x130 [ 1449.489165][T13154] ? aa_label_sk_perm+0x532/0x6e0 [ 1449.489202][T13154] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1449.489243][T13154] ? __pfx_process_measurement+0x10/0x10 [ 1449.489266][T13154] ? tomoyo_check_open_permission+0x38e/0x470 [ 1449.489296][T13154] ? __lock_acquire+0x6b5/0x2cf0 [ 1449.489368][T13154] ? tipc_sendmsg+0x47/0x70 [ 1449.489393][T13154] ? __local_bh_enable_ip+0xd0/0x130 [ 1449.489433][T13154] tipc_sendmsg+0x55/0x70 [ 1449.489457][T13154] ____sys_sendmsg+0x972/0x9f0 [ 1449.489486][T13154] ? __might_fault+0xaf/0x130 [ 1449.489520][T13154] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1449.489561][T13154] ? import_iovec+0x73/0xa0 [ 1449.489587][T13154] ___sys_sendmsg+0x2a5/0x360 [ 1449.489616][T13154] ? __lock_acquire+0x6b5/0x2cf0 [ 1449.489647][T13154] ? __pfx____sys_sendmsg+0x10/0x10 [ 1449.489682][T13154] ? kstrtouint+0x6e/0xe0 [ 1449.489740][T13154] ? __fget_files+0x2a/0x420 [ 1449.489764][T13154] ? __fget_files+0x3a0/0x420 [ 1449.489801][T13154] __sys_sendmmsg+0x27c/0x4e0 [ 1449.489838][T13154] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1449.489866][T13154] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1449.489920][T13154] ? ksys_write+0x242/0x270 [ 1449.489952][T13154] ? __pfx_ksys_write+0x10/0x10 [ 1449.489990][T13154] __x64_sys_sendmmsg+0xa0/0xc0 [ 1449.490021][T13154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1449.490043][T13154] do_syscall_64+0x15f/0xf80 [ 1449.490066][T13154] ? trace_irq_disable+0x3b/0x140 [ 1449.490088][T13154] ? clear_bhb_loop+0x40/0x90 [ 1449.490114][T13154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1449.490134][T13154] RIP: 0033:0x7f1d3ad9cdd9 [ 1449.490154][T13154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1449.490172][T13154] RSP: 002b:00007f1d3bc46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1449.490194][T13154] RAX: ffffffffffffffda RBX: 00007f1d3b015fa0 RCX: 00007f1d3ad9cdd9 [ 1449.490219][T13154] RDX: 0400000000000181 RSI: 00002000000030c0 RDI: 0000000000000007 [ 1449.490233][T13154] RBP: 00007f1d3bc46090 R08: 0000000000000000 R09: 0000000000000000 [ 1449.490246][T13154] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1449.490259][T13154] R13: 00007f1d3b016038 R14: 00007f1d3b015fa0 R15: 00007ffd21f85588 [ 1449.490295][T13154] [ 1450.629570][T13174] netlink: 'syz.0.10724': attribute type 2 has an invalid length. [ 1450.690096][T13175] netlink: 'syz.0.10724': attribute type 2 has an invalid length. [ 1453.936705][T13157] netlink: 76 bytes leftover after parsing attributes in process `syz.3.10721'. [ 1453.969591][T13164] syzkaller0: entered promiscuous mode [ 1453.976383][T13164] syzkaller0: entered allmulticast mode [ 1454.130912][T13181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10727'. [ 1454.141632][T13181] block nbd1: Unsupported socket: should be TCP or UNIX. [ 1455.698460][T27496] lec:lec_start_xmit: lec0:No lecd attached [ 1457.179867][T13174] : entered promiscuous mode [ 1457.473592][T13203] netlink: 'syz.3.10734': attribute type 29 has an invalid length. [ 1457.700761][T13212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1457.728812][T13212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1457.757343][T13209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10736'. [ 1457.928357][T13220] netlink: 'syz.3.10738': attribute type 1 has an invalid length. [ 1457.946857][T13220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10738'. [ 1457.972564][T13221] xt_hashlimit: size too large, truncated to 1048576 [ 1458.257103][T13228] netlink: 'syz.3.10741': attribute type 39 has an invalid length. [ 1458.679986][T13239] netlink: 'syz.1.10745': attribute type 32 has an invalid length. [ 1458.695649][T13242] netlink: 'syz.2.10746': attribute type 3 has an invalid length. [ 1458.713677][T13242] netlink: 'syz.2.10746': attribute type 1 has an invalid length. [ 1458.736494][T13242] netlink: 232 bytes leftover after parsing attributes in process `syz.2.10746'. [ 1458.949799][T13239] syzkaller0: entered promiscuous mode [ 1458.960516][T13251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10749'. [ 1458.997304][T13239] syzkaller0: entered allmulticast mode [ 1459.034844][T13254] siw: device registration error -23 [ 1459.275252][T13266] netlink: 364 bytes leftover after parsing attributes in process `syz.2.10753'. [ 1459.694506][T13278] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10757'. [ 1459.710635][T13278] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1459.803146][T13281] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10758'. [ 1461.157126][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5450 ms [ 1461.165252][ C0] lec:lec_tx_timeout: lec0 [ 1463.484126][T13292] macsec0: entered promiscuous mode [ 1463.496619][T13292] macsec0: entered allmulticast mode [ 1463.510050][T13292] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 1463.682094][T13302] netlink: 104 bytes leftover after parsing attributes in process `syz.1.10763'. [ 1463.941288][T13320] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10768'. [ 1464.166203][T13328] netlink: 44 bytes leftover after parsing attributes in process `syz.5.10771'. [ 1464.178094][T13326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1464.201525][T13326] 8021q: adding VLAN 0 to HW filter on device team0 [ 1464.239951][T13326] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1464.424068][T13332] bond2: option downdelay: invalid value (18446744073709551371) [ 1464.432232][T13332] bond2: option downdelay: allowed values 0 - 2147483647 [ 1464.465146][T13332] bond2 (unregistering): Released all slaves [ 1464.649452][T13341] netlink: 'syz.1.10774': attribute type 1 has an invalid length. [ 1464.777389][T13347] 8021q: VLANs not supported on wg2 [ 1464.790554][T13341] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10774'. [ 1464.856982][T13359] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10779'. [ 1464.860058][T13341] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1464.971506][T13346] macvlan2: entered promiscuous mode [ 1464.999575][T13346] macvlan2: entered allmulticast mode [ 1465.025241][T13346] bond1: entered promiscuous mode [ 1465.045868][T13346] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1465.074194][T13346] bond1: left promiscuous mode [ 1465.522026][T13396] bond2: option downdelay: invalid value (18446744073709551371) [ 1465.530196][T13396] bond2: option downdelay: allowed values 0 - 2147483647 [ 1465.540725][T13396] bond2 (unregistering): Released all slaves [ 1465.685041][T13401] bond2: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 1465.701141][T13401] bond2 (unregistering): Released all slaves [ 1465.714174][T13405] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10790'. [ 1465.723463][T13405] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10790'. [ 1466.040252][T13414] netlink: 'syz.5.10795': attribute type 1 has an invalid length. [ 1466.050443][T13414] netlink: 224 bytes leftover after parsing attributes in process `syz.5.10795'. [ 1466.259762][T13427] gre0 speed is unknown, defaulting to 1000 [ 1466.369658][T13437] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10800'. [ 1466.652020][T13444] netlink: 820 bytes leftover after parsing attributes in process `syz.1.10802'. [ 1466.661813][T13444] netlink: 820 bytes leftover after parsing attributes in process `syz.1.10802'. [ 1467.028950][T13452] bond1: entered promiscuous mode [ 1467.035384][T13452] bond1: entered allmulticast mode [ 1467.041245][T13452] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1467.712967][T13472] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1468.134602][T13480] syzkaller0: entered promiscuous mode [ 1468.142465][T13480] syzkaller0: entered allmulticast mode [ 1468.245309][T13490] netlink: 76 bytes leftover after parsing attributes in process `syz.1.10816'. [ 1468.269019][T13490] syzkaller0: entered promiscuous mode [ 1468.279723][T13490] syzkaller0: entered allmulticast mode [ 1471.936069][T13527] gre0 speed is unknown, defaulting to 1000 [ 1471.991994][T13533] __nla_validate_parse: 2 callbacks suppressed [ 1471.992016][T13533] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10827'. [ 1472.030035][T13533] netlink: 292 bytes leftover after parsing attributes in process `syz.5.10827'. [ 1472.131345][T13538] netem: incorrect gi model size [ 1472.159930][T13538] netem: change failed [ 1472.357276][T13552] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1472.470581][T13555] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10836'. [ 1472.677686][T13564] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 1472.903194][T13581] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10843'. [ 1472.919133][T13580] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10843'. [ 1472.942378][T13581] Cannot find set identified by id 0 to match [ 1472.987936][T13584] : renamed from veth0_to_bond [ 1473.069162][T13586] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1473.096814][T13587] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.10846'. [ 1473.352589][T13597] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10849'. [ 1473.529486][T13598] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10849'. [ 1473.956383][T13606] gre0 speed is unknown, defaulting to 1000 [ 1473.995498][T13614] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10853'. [ 1474.007211][T13614] openvswitch: netlink: Invalid VLAN frame [ 1474.043258][T13614] netlink: 4008 bytes leftover after parsing attributes in process `syz.5.10853'. [ 1475.932990][T13668] netlink: 'syz.0.10866': attribute type 21 has an invalid length. [ 1477.221628][T13627] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1477.232798][T13650] netlink: 'syz.5.10862': attribute type 1 has an invalid length. [ 1477.384595][T13698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1477.543034][T13706] bond3: option downdelay: invalid value (18446744073709551371) [ 1477.555593][T13706] bond3: option downdelay: allowed values 0 - 2147483647 [ 1477.572703][T13712] netlink: 'syz.3.10881': attribute type 64 has an invalid length. [ 1477.590523][T13706] bond3 (unregistering): Released all slaves [ 1477.733213][T13713] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1478.028194][T13726] sctp: [Deprecated]: syz.5.10887 (pid 13726) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1478.028194][T13726] Use struct sctp_sack_info instead [ 1478.240312][T13739] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1478.296355][T13741] smc: net device wlan0 erased user defined pnetid SYZ0 [ 1478.331755][T13741] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ0 [ 1478.413091][T13745] bond2: option downdelay: invalid value (18446744073709551371) [ 1478.459998][T13745] bond2: option downdelay: allowed values 0 - 2147483647 [ 1478.476471][T13753] xt_hashlimit: size too large, truncated to 1048576 [ 1478.507573][T13745] bond2 (unregistering): Released all slaves [ 1478.645146][T13766] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10898'. [ 1478.818870][T13771] FAULT_INJECTION: forcing a failure. [ 1478.818870][T13771] name failslab, interval 1, probability 0, space 0, times 0 [ 1478.853920][T13771] CPU: 0 UID: 0 PID: 13771 Comm: syz.0.10902 Not tainted syzkaller #0 PREEMPT(full) [ 1478.853953][T13771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1478.853967][T13771] Call Trace: [ 1478.853977][T13771] [ 1478.853986][T13771] dump_stack_lvl+0xe8/0x150 [ 1478.854022][T13771] should_fail_ex+0x412/0x560 [ 1478.854057][T13771] should_failslab+0xa8/0x100 [ 1478.854081][T13771] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1478.854108][T13771] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 1478.854139][T13771] ? __alloc_skb+0x1d0/0x7d0 [ 1478.854172][T13771] __alloc_skb+0x1d0/0x7d0 [ 1478.854204][T13771] tipc_buf_acquire+0x2b/0xe0 [ 1478.854228][T13771] tipc_msg_build+0x8d7/0xf00 [ 1478.854267][T13771] ? __pfx_tipc_msg_build+0x10/0x10 [ 1478.854297][T13771] ? net_generic+0x1e/0x240 [ 1478.854315][T13771] ? net_generic+0x1e/0x240 [ 1478.854338][T13771] ? tipc_group_bc_cong+0x15f/0x210 [ 1478.854370][T13771] tipc_send_group_bcast+0x7db/0xad0 [ 1478.854415][T13771] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 1478.854452][T13771] ? __pfx_woken_wake_function+0x10/0x10 [ 1478.854480][T13771] ? trace_hrtimer_start+0x82/0x200 [ 1478.854513][T13771] __tipc_sendmsg+0x33b/0x2bc0 [ 1478.854549][T13771] ? rcu_is_watching+0x15/0xb0 [ 1478.854583][T13771] ? __pfx___tipc_sendmsg+0x10/0x10 [ 1478.854602][T13771] ? __schedule+0x17ca/0x5680 [ 1478.854627][T13771] ? aa_label_sk_perm+0x532/0x6e0 [ 1478.854664][T13771] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1478.854696][T13771] ? __lock_acquire+0x6b5/0x2cf0 [ 1478.854727][T13771] ? __lock_acquire+0x6b5/0x2cf0 [ 1478.854802][T13771] ? tipc_sendmsg+0x47/0x70 [ 1478.854827][T13771] ? __local_bh_enable_ip+0xd0/0x130 [ 1478.854866][T13771] tipc_sendmsg+0x55/0x70 [ 1478.854890][T13771] ____sys_sendmsg+0x972/0x9f0 [ 1478.854970][T13771] ? __might_fault+0xaf/0x130 [ 1478.855005][T13771] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1478.855047][T13771] ? import_iovec+0x73/0xa0 [ 1478.855074][T13771] ___sys_sendmsg+0x2a5/0x360 [ 1478.855103][T13771] ? __lock_acquire+0x6b5/0x2cf0 [ 1478.855136][T13771] ? __pfx____sys_sendmsg+0x10/0x10 [ 1478.855171][T13771] ? kstrtouint+0x6e/0xe0 [ 1478.855227][T13771] ? __fget_files+0x2a/0x420 [ 1478.855253][T13771] ? __fget_files+0x3a0/0x420 [ 1478.855291][T13771] __sys_sendmmsg+0x27c/0x4e0 [ 1478.855330][T13771] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1478.855358][T13771] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1478.855415][T13771] ? ksys_write+0x242/0x270 [ 1478.855454][T13771] ? __pfx_ksys_write+0x10/0x10 [ 1478.855493][T13771] __x64_sys_sendmmsg+0xa0/0xc0 [ 1478.855523][T13771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1478.855547][T13771] do_syscall_64+0x15f/0xf80 [ 1478.855571][T13771] ? trace_irq_disable+0x3b/0x140 [ 1478.855595][T13771] ? clear_bhb_loop+0x40/0x90 [ 1478.855621][T13771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1478.855642][T13771] RIP: 0033:0x7f0c90f9cdd9 [ 1478.855663][T13771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1478.855682][T13771] RSP: 002b:00007f0c91e68028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1478.855707][T13771] RAX: ffffffffffffffda RBX: 00007f0c91215fa0 RCX: 00007f0c90f9cdd9 [ 1478.855722][T13771] RDX: 0400000000000181 RSI: 00002000000030c0 RDI: 0000000000000007 [ 1478.855738][T13771] RBP: 00007f0c91e68090 R08: 0000000000000000 R09: 0000000000000000 [ 1478.855751][T13771] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1478.855764][T13771] R13: 00007f0c91216038 R14: 00007f0c91215fa0 R15: 00007fff695d5c38 [ 1478.855800][T13771] [ 1479.528284][T13779] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1479.910838][T13793] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10909'. [ 1480.099491][T13793] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1480.110208][T13803] IPVS: Scheduler module ip_vs_sip not found [ 1480.295111][T13819] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1480.443022][T13827] tipc: Started in network mode [ 1480.466332][T13827] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 1480.485964][T13827] tipc: Enabled bearer , priority 26 [ 1480.564303][T13837] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1480.577446][T13827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10917'. [ 1480.658943][T13843] tipc: Started in network mode [ 1480.664442][T13843] tipc: Node identity f69b58e9b38, cluster identity 4711 [ 1480.672092][T13843] tipc: Enabled bearer , priority 0 [ 1480.681804][T13840] syzkaller0: entered promiscuous mode [ 1480.688484][T13840] syzkaller0: entered allmulticast mode [ 1480.728085][T13840] tipc: Resetting bearer [ 1480.780338][T13843] tipc: Resetting bearer [ 1480.844502][T13843] tipc: Disabling bearer [ 1480.873080][T13851] netlink: 'syz.2.10924': attribute type 8 has an invalid length. [ 1480.884537][T13851] sch_fq: defrate 0 ignored. [ 1481.007827][T13859] netlink: 14 bytes leftover after parsing attributes in process `syz.3.10926'. [ 1481.069335][T13859] bond0 (unregistering): Released all slaves [ 1481.250791][T13871] gre0 speed is unknown, defaulting to 1000 [ 1481.376858][T13877] tipc: Enabling of bearer rejected, failed to enable media [ 1481.608898][T13890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1481.724033][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 1481.798118][ T6297] tipc: Node number set to 10463914 [ 1481.900825][T13898] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10937'. [ 1481.963211][T13900] netlink: 228 bytes leftover after parsing attributes in process `syz.5.10938'. [ 1482.000734][T13900] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10938'. [ 1482.248109][T13908] netlink: 'syz.3.10941': attribute type 21 has an invalid length. [ 1482.256992][T13908] IPv6: NLM_F_CREATE should be specified when creating new route [ 1482.265790][T13908] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1482.273130][T13908] IPv6: NLM_F_CREATE should be set when creating new route [ 1482.280467][T13908] IPv6: NLM_F_CREATE should be set when creating new route [ 1482.287779][T13908] IPv6: NLM_F_CREATE should be set when creating new route [ 1482.671062][T13927] pim6reg: entered allmulticast mode [ 1482.679199][T13925] pim6reg: left allmulticast mode [ 1482.988194][T13941] netlink: 'syz.1.10950': attribute type 9 has an invalid length. [ 1482.998481][T13941] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.10950'. [ 1483.580978][T13964] FAULT_INJECTION: forcing a failure. [ 1483.580978][T13964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1483.619724][T13964] CPU: 1 UID: 0 PID: 13964 Comm: syz.0.10954 Not tainted syzkaller #0 PREEMPT(full) [ 1483.619755][T13964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1483.619768][T13964] Call Trace: [ 1483.619777][T13964] [ 1483.619786][T13964] dump_stack_lvl+0xe8/0x150 [ 1483.619822][T13964] should_fail_ex+0x412/0x560 [ 1483.619856][T13964] _copy_from_iter+0x1d3/0x1670 [ 1483.619889][T13964] ? rcu_is_watching+0x15/0xb0 [ 1483.619923][T13964] ? __pfx__copy_from_iter+0x10/0x10 [ 1483.619961][T13964] ? netlink_sendmsg+0x650/0xb40 [ 1483.619995][T13964] ? skb_put+0x11b/0x210 [ 1483.620028][T13964] netlink_sendmsg+0x6c0/0xb40 [ 1483.620068][T13964] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1483.620102][T13964] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1483.620131][T13964] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1483.620175][T13964] ____sys_sendmsg+0x972/0x9f0 [ 1483.620207][T13964] ? __might_fault+0xaf/0x130 [ 1483.620243][T13964] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1483.620284][T13964] ? import_iovec+0x73/0xa0 [ 1483.620306][T13964] ___sys_sendmsg+0x2a5/0x360 [ 1483.620335][T13964] ? __lock_acquire+0x6b5/0x2cf0 [ 1483.620366][T13964] ? __pfx____sys_sendmsg+0x10/0x10 [ 1483.620434][T13964] ? __fget_files+0x2a/0x420 [ 1483.620459][T13964] ? __fget_files+0x3a0/0x420 [ 1483.620496][T13964] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1483.620530][T13964] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1483.620571][T13964] ? __pfx_ksys_write+0x10/0x10 [ 1483.620610][T13964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1483.620634][T13964] do_syscall_64+0x15f/0xf80 [ 1483.620658][T13964] ? trace_irq_disable+0x3b/0x140 [ 1483.620682][T13964] ? clear_bhb_loop+0x40/0x90 [ 1483.620708][T13964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1483.620729][T13964] RIP: 0033:0x7f0c90f9cdd9 [ 1483.620749][T13964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1483.620767][T13964] RSP: 002b:00007f0c91e47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1483.620790][T13964] RAX: ffffffffffffffda RBX: 00007f0c91216090 RCX: 00007f0c90f9cdd9 [ 1483.620806][T13964] RDX: 0000000000000800 RSI: 0000200000000580 RDI: 0000000000000004 [ 1483.620818][T13964] RBP: 00007f0c91e47090 R08: 0000000000000000 R09: 0000000000000000 [ 1483.620831][T13964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1483.620844][T13964] R13: 00007f0c91216128 R14: 00007f0c91216090 R15: 00007fff695d5c38 [ 1483.620877][T13964] [ 1484.110560][T13982] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10959'. [ 1484.755666][ T1299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1484.768273][ T1299] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1484.776979][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1484.780666][T14005] netlink: 'syz.5.10966': attribute type 29 has an invalid length. [ 1484.791478][T14005] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10966'. [ 1484.909708][T14009] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1485.463434][T14039] tipc: Enabling of bearer rejected, failed to enable media [ 1485.524836][T14044] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10981'. [ 1485.598384][T14047] netlink: 'syz.2.10983': attribute type 3 has an invalid length. [ 1485.606441][T14047] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10983'. [ 1485.618693][T14047] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1485.797382][T14056] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10986'. [ 1486.062040][T14061] netlink: 14 bytes leftover after parsing attributes in process `syz.5.10987'. [ 1486.139855][T14062] netlink: 44 bytes leftover after parsing attributes in process `syz.5.10987'. [ 1486.164009][T14062] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10987'. [ 1486.183220][T14062] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10987'. [ 1486.554203][T14076] macsec1: entered promiscuous mode [ 1486.581482][T14076] macsec1: entered allmulticast mode [ 1486.599785][T14085] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10995'. [ 1486.640850][T14075] gre0 speed is unknown, defaulting to 1000 [ 1486.764474][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1486.787960][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1486.799545][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1486.810649][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1486.823076][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1487.726126][T14091] gre0 speed is unknown, defaulting to 1000 [ 1488.560903][ T5068] IPVS: starting estimator thread 0... [ 1488.686371][T14140] IPVS: using max 27 ests per chain, 64800 per kthread [ 1488.776009][T14145] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1488.880822][T14145] team0: Mode changed to "loadbalance" [ 1488.903613][ T5835] Bluetooth: hci4: command tx timeout [ 1489.122012][T14151] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11008'. [ 1489.248286][T22313] bridge_slave_1: left promiscuous mode [ 1489.254986][T22313] bridge0: port 2(bridge_slave_1) entered disabled state [ 1489.270259][T22313] bridge_slave_0: left allmulticast mode [ 1489.277998][T22313] bridge_slave_0: left promiscuous mode [ 1489.294280][T22313] bridge0: port 1(bridge_slave_0) entered disabled state [ 1489.450447][T22313] bond6 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 1489.462118][T22313] bond6 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1489.471882][T22313] bond6 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 2a:ff:17:10:dc:99 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1489.910080][T22313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1489.920801][T22313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1489.931513][T22313] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1489.945732][T22313] bond0 (unregistering): Released all slaves [ 1489.957349][T22313] bond1 (unregistering): Released all slaves [ 1489.973287][T22313] bond2 (unregistering): Released all slaves [ 1489.994796][T22313] bond3 (unregistering): Released all slaves [ 1490.009905][T22313] bond4 (unregistering): Released all slaves [ 1490.025560][T22313] bond5 (unregistering): Released all slaves [ 1490.057379][T22313] bond6 (unregistering): (slave veth5): Releasing backup interface [ 1490.068690][T22313] bond6 (unregistering): Released all slaves [ 1490.091632][T22313] bond7 (unregistering): Released all slaves [ 1490.103817][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5330 ms [ 1490.111905][ C0] lec:lec_tx_timeout: lec0 [ 1490.139313][T22313] bond8 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1490.150173][T22313] bond8 (unregistering): Released all slaves [ 1490.171630][T22313] bond9 (unregistering): Released all slaves [ 1490.187940][T22313] bond10 (unregistering): Released all slaves [ 1490.202690][T22313] bond12 (unregistering): Released all slaves [ 1490.539038][T14176] bond3: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 1490.557281][T14176] bond3 (unregistering): Released all slaves [ 1490.778992][T22313] : left promiscuous mode [ 1490.845173][T14188] netlink: 76 bytes leftover after parsing attributes in process `syz.1.11017'. [ 1490.986004][T28807] Bluetooth: hci4: command tx timeout [ 1491.055228][T14185] syzkaller0: entered promiscuous mode [ 1491.060903][T14185] syzkaller0: entered allmulticast mode [ 1491.077993][T22313] tipc: Left network mode [ 1491.078035][T14180] gre0 speed is unknown, defaulting to 1000 [ 1491.946860][T28807] Bluetooth: hci5: command 0x0406 tx timeout [ 1493.067428][ T5835] Bluetooth: hci4: command tx timeout [ 1495.157429][ T5835] Bluetooth: hci4: command tx timeout [ 1495.449988][T14091] chnl_net:caif_netlink_parms(): no params data found [ 1495.728603][ T5491] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1495.758051][T14247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11026'. [ 1495.759694][T14246] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11025'. [ 1495.949941][T14243] atomic_op ffff888044a8f198 conn xmit_atomic 0000000000000000 [ 1496.112970][T14250] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11027'. [ 1496.240392][T22303] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1496.273994][T22303] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1496.380770][T22303] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1496.410840][T22303] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1496.434077][T14091] bridge0: port 1(bridge_slave_0) entered blocking state [ 1496.458965][T14091] bridge0: port 1(bridge_slave_0) entered disabled state [ 1496.480225][T14091] bridge_slave_0: entered allmulticast mode [ 1496.516791][T14091] bridge_slave_0: entered promiscuous mode [ 1496.539324][T14091] bridge0: port 2(bridge_slave_1) entered blocking state [ 1496.563929][T14091] bridge0: port 2(bridge_slave_1) entered disabled state [ 1496.586831][T14091] bridge_slave_1: entered allmulticast mode [ 1496.616377][T14091] bridge_slave_1: entered promiscuous mode [ 1497.267234][T14091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1497.336376][T14091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1497.467177][T22313] hsr_slave_0: left promiscuous mode [ 1497.484208][T22313] hsr_slave_1: left promiscuous mode [ 1497.860846][T22313] team0 (unregistering): Port device team_slave_1 removed [ 1497.881749][T22313] team0 (unregistering): Port device team_slave_0 removed [ 1497.890018][T22292] smc: removing ib device !yz! [ 1498.049800][ T5491] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1498.442700][T14091] team0: Port device team_slave_0 added [ 1498.475551][T14091] team0: Port device team_slave_1 added [ 1498.699510][T14091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1498.731789][T14091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1498.818528][T14091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1498.870789][T14091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1498.893605][T14091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1498.937398][T14091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1499.024506][T14296] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11035'. [ 1499.348808][T14313] FAULT_INJECTION: forcing a failure. [ 1499.348808][T14313] name failslab, interval 1, probability 0, space 0, times 0 [ 1499.372021][T14313] CPU: 0 UID: 0 PID: 14313 Comm: syz.0.11040 Not tainted syzkaller #0 PREEMPT(full) [ 1499.372051][T14313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1499.372064][T14313] Call Trace: [ 1499.372073][T14313] [ 1499.372083][T14313] dump_stack_lvl+0xe8/0x150 [ 1499.372119][T14313] should_fail_ex+0x412/0x560 [ 1499.372156][T14313] should_failslab+0xa8/0x100 [ 1499.372182][T14313] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1499.372211][T14313] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 1499.372244][T14313] ? __alloc_skb+0x1d0/0x7d0 [ 1499.372280][T14313] __alloc_skb+0x1d0/0x7d0 [ 1499.372314][T14313] tipc_buf_acquire+0x2b/0xe0 [ 1499.372339][T14313] tipc_msg_build+0x8d7/0xf00 [ 1499.372378][T14313] ? __pfx_tipc_msg_build+0x10/0x10 [ 1499.372408][T14313] ? net_generic+0x1e/0x240 [ 1499.372427][T14313] ? net_generic+0x1e/0x240 [ 1499.372449][T14313] ? tipc_group_bc_cong+0x15f/0x210 [ 1499.372479][T14313] tipc_send_group_bcast+0x7db/0xad0 [ 1499.372523][T14313] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 1499.372557][T14313] ? __pfx_woken_wake_function+0x10/0x10 [ 1499.372581][T14313] ? process_measurement+0x451/0x1c80 [ 1499.372606][T14313] ? process_measurement+0x451/0x1c80 [ 1499.372635][T14313] __tipc_sendmsg+0x33b/0x2bc0 [ 1499.372670][T14313] ? up_write+0x1ab/0x410 [ 1499.372697][T14313] ? __pfx___tipc_sendmsg+0x10/0x10 [ 1499.372717][T14313] ? process_measurement+0x195e/0x1c80 [ 1499.372738][T14313] ? aa_label_sk_perm+0x532/0x6e0 [ 1499.372783][T14313] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1499.372808][T14313] ? __pfx_process_measurement+0x10/0x10 [ 1499.372831][T14313] ? tomoyo_check_open_permission+0x38e/0x470 [ 1499.372861][T14313] ? __lock_acquire+0x6b5/0x2cf0 [ 1499.372935][T14313] ? tipc_sendmsg+0x47/0x70 [ 1499.372960][T14313] ? __local_bh_enable_ip+0xd0/0x130 [ 1499.372994][T14313] tipc_sendmsg+0x55/0x70 [ 1499.373017][T14313] ____sys_sendmsg+0x972/0x9f0 [ 1499.373048][T14313] ? __might_fault+0xaf/0x130 [ 1499.373080][T14313] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1499.373120][T14313] ? import_iovec+0x73/0xa0 [ 1499.373146][T14313] ___sys_sendmsg+0x2a5/0x360 [ 1499.373175][T14313] ? __lock_acquire+0x6b5/0x2cf0 [ 1499.373208][T14313] ? __pfx____sys_sendmsg+0x10/0x10 [ 1499.373245][T14313] ? kstrtouint+0x6e/0xe0 [ 1499.373302][T14313] ? __fget_files+0x2a/0x420 [ 1499.373326][T14313] ? __fget_files+0x3a0/0x420 [ 1499.373364][T14313] __sys_sendmmsg+0x27c/0x4e0 [ 1499.373401][T14313] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1499.373430][T14313] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1499.373490][T14313] ? ksys_write+0x242/0x270 [ 1499.373524][T14313] ? __pfx_ksys_write+0x10/0x10 [ 1499.373561][T14313] __x64_sys_sendmmsg+0xa0/0xc0 [ 1499.373593][T14313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1499.373613][T14313] do_syscall_64+0x15f/0xf80 [ 1499.373637][T14313] ? trace_irq_disable+0x3b/0x140 [ 1499.373660][T14313] ? clear_bhb_loop+0x40/0x90 [ 1499.373687][T14313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1499.373707][T14313] RIP: 0033:0x7f0c90f9cdd9 [ 1499.373729][T14313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1499.373756][T14313] RSP: 002b:00007f0c91e68028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1499.373779][T14313] RAX: ffffffffffffffda RBX: 00007f0c91215fa0 RCX: 00007f0c90f9cdd9 [ 1499.373794][T14313] RDX: 0400000000000181 RSI: 00002000000030c0 RDI: 0000000000000007 [ 1499.373809][T14313] RBP: 00007f0c91e68090 R08: 0000000000000000 R09: 0000000000000000 [ 1499.373822][T14313] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1499.373835][T14313] R13: 00007f0c91216038 R14: 00007f0c91215fa0 R15: 00007fff695d5c38 [ 1499.373871][T14313] [ 1499.816233][T14316] Cannot find del_set index 0 as target [ 1499.826639][T14091] hsr_slave_0: entered promiscuous mode [ 1499.839168][T14091] hsr_slave_1: entered promiscuous mode [ 1500.340916][T14327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11044'. [ 1500.360224][T14328] netlink: 'syz.5.11043': attribute type 21 has an invalid length. [ 1500.384811][T14328] netlink: 128 bytes leftover after parsing attributes in process `syz.5.11043'. [ 1500.403977][T14327] netlink: 'syz.0.11044': attribute type 1 has an invalid length. [ 1500.516957][T14334] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11044'. [ 1500.548351][T14334] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11044'. [ 1500.829653][T14327] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1500.846366][T14328] netlink: 'syz.5.11043': attribute type 5 has an invalid length. [ 1500.870142][T14328] netlink: 'syz.5.11043': attribute type 6 has an invalid length. [ 1500.899493][T14328] netlink: 3 bytes leftover after parsing attributes in process `syz.5.11043'. [ 1501.208042][T14333] bond3: (slave veth5): Enslaving as an active interface with a down link [ 1501.698276][ T5491] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1501.834968][T14365] bond2: option downdelay: invalid value (18446744073709551371) [ 1501.842922][T14365] bond2: option downdelay: allowed values 0 - 2147483647 [ 1501.857525][T14365] bond2 (unregistering): Released all slaves [ 1502.625853][T14374] tipc: Disabling bearer [ 1502.737406][T14395] netlink: 'syz.0.11057': attribute type 4 has an invalid length. [ 1502.792484][T14395] netlink: 'syz.0.11057': attribute type 4 has an invalid length. [ 1503.456509][T14375] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1503.484044][T14375] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1503.738452][T14405] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11058'. [ 1503.754451][T14406] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11058'. [ 1503.851973][T14406] netlink: 'syz.0.11058': attribute type 9 has an invalid length. [ 1503.895512][T14375] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1503.906136][T14375] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1504.072550][T14375] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1504.083165][T14375] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1504.216046][T14375] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1504.264185][T14375] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1504.378499][T14743] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1504.775184][T14426] netlink: 'syz.3.11062': attribute type 1 has an invalid length. [ 1504.838661][T14431] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11063'. [ 1504.861526][T22307] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1504.880965][T22307] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1505.006941][T14091] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1505.022687][T14091] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1505.034496][T22307] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1505.048253][T22307] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1505.076770][T14091] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1505.092553][T14091] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1505.200250][T22307] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1505.209911][T22307] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1505.221585][T22307] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1505.254141][T22307] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1505.264843][T14091] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1505.291336][T14091] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1505.309564][T14091] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1505.332328][T14091] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1505.609922][T14091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1505.654272][T14091] 8021q: adding VLAN 0 to HW filter on device team0 [ 1505.725117][T22313] bridge0: port 1(bridge_slave_0) entered blocking state [ 1505.732367][T22313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1505.775555][T22307] bridge0: port 2(bridge_slave_1) entered blocking state [ 1505.782798][T22307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1506.216888][T14483] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11070'. [ 1506.330024][T14490] netlink: 56 bytes leftover after parsing attributes in process `syz.5.11070'. [ 1506.538834][T14091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1506.718132][T14091] veth0_vlan: entered promiscuous mode [ 1506.773022][T14091] veth1_vlan: entered promiscuous mode [ 1507.039121][T14091] veth0_macvtap: entered promiscuous mode [ 1507.074641][T14091] veth1_macvtap: entered promiscuous mode [ 1507.142402][T14091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1507.185187][T14091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1507.222508][T22313] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.273083][T22313] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.313215][T22313] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.340755][T22313] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.410172][T14526] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11078'. [ 1507.571585][T14531] IPVS: Error connecting to the multicast addr [ 1507.674199][T14536] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11080'. [ 1507.699652][T22303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1507.722173][T22303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1507.929840][T14539] tipc: Started in network mode [ 1507.957560][T14539] tipc: Node identity 7a7c12c37c15, cluster identity 4711 [ 1507.985112][T14539] tipc: Enabled bearer , priority 0 [ 1508.060000][T22292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1508.061229][T14547] syzkaller0: entered promiscuous mode [ 1508.082271][T22292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1508.089661][T14547] syzkaller0: entered allmulticast mode [ 1508.144249][T14556] netlink: 'syz.1.11085': attribute type 1 has an invalid length. [ 1508.184416][T14556] netlink: 88 bytes leftover after parsing attributes in process `syz.1.11085'. [ 1508.213191][T14563] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11084'. [ 1508.217024][T14556] netlink: 1 bytes leftover after parsing attributes in process `syz.1.11085'. [ 1508.257799][T14563] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11084'. [ 1508.273800][T14556] netlink: 658 bytes leftover after parsing attributes in process `syz.1.11085'. [ 1508.323106][T14547] tipc: Resetting bearer [ 1508.368854][T14563] ip6gretap0: entered promiscuous mode [ 1508.409666][T14563] ip6gretap0: left promiscuous mode [ 1508.467870][T14573] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11087'. [ 1508.491981][T14537] tipc: Resetting bearer [ 1508.553318][T14537] tipc: Disabling bearer [ 1509.009614][ T6297] IPVS: starting estimator thread 0... [ 1509.111272][T14607] IPVS: using max 26 ests per chain, 62400 per kthread [ 1513.666124][T14637] pimreg: tun_chr_ioctl cmd 1074025677 [ 1513.676979][T14637] pimreg: linktype set to 823 [ 1513.793120][T14684] netlink: 'syz.3.11098': attribute type 1 has an invalid length. [ 1513.853086][T14684] gretap1: entered allmulticast mode [ 1513.944476][T14693] __nla_validate_parse: 1 callbacks suppressed [ 1513.944501][T14693] netlink: 44 bytes leftover after parsing attributes in process `syz.5.11101'. [ 1514.510742][T14725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1514.521864][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1514.567542][T14728] gre0 speed is unknown, defaulting to 1000 [ 1514.695109][T14725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11109'. [ 1514.835401][T14745] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1515.239851][T14762] netlink: 'syz.2.11116': attribute type 21 has an invalid length. [ 1515.276629][T14762] IPv6: NLM_F_CREATE should be specified when creating new route [ 1515.301695][T14762] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1515.309061][T14762] IPv6: NLM_F_CREATE should be set when creating new route [ 1515.316403][T14762] IPv6: NLM_F_CREATE should be set when creating new route [ 1515.323704][T14762] IPv6: NLM_F_CREATE should be set when creating new route [ 1515.629539][T14769] netlink: 'syz.2.11118': attribute type 21 has an invalid length. [ 1515.678531][T14774] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11117'. [ 1515.728830][T14769] macsec0: entered promiscuous mode [ 1515.748874][T14769] macsec0: left promiscuous mode [ 1515.771322][T14777] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11117'. [ 1516.268973][T14797] netlink: 596 bytes leftover after parsing attributes in process `syz.2.11122'. [ 1516.296489][T14790] netlink: 'syz.2.11122': attribute type 29 has an invalid length. [ 1516.402789][T14794] netlink: 'syz.2.11122': attribute type 29 has an invalid length. [ 1516.692711][T14804] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1516.701029][T14806] IPVS: Scheduler module ip_vs_sip not found [ 1516.771504][T14808] team0: Unable to change to the same mode the team is in [ 1517.215925][T14826] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11130'. [ 1517.250680][T14826] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11130'. [ 1517.290732][T14826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11130'. [ 1517.360355][T14831] : entered promiscuous mode [ 1517.482460][T14834] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11132'. [ 1517.642650][T14837] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11134'. [ 1518.917873][T22303] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1518.944975][T22303] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1518.987131][T22303] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1519.143890][T27496] lec:lec_start_xmit: lec0:No lecd attached [ 1519.208498][T22303] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1519.261010][T14891] FAULT_INJECTION: forcing a failure. [ 1519.261010][T14891] name failslab, interval 1, probability 0, space 0, times 0 [ 1519.314134][T14891] CPU: 0 UID: 0 PID: 14891 Comm: syz.0.11149 Not tainted syzkaller #0 PREEMPT(full) [ 1519.314165][T14891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1519.314178][T14891] Call Trace: [ 1519.314186][T14891] [ 1519.314195][T14891] dump_stack_lvl+0xe8/0x150 [ 1519.314232][T14891] should_fail_ex+0x412/0x560 [ 1519.314268][T14891] should_failslab+0xa8/0x100 [ 1519.314292][T14891] __kmalloc_cache_noprof+0x88/0x660 [ 1519.314323][T14891] ? tcf_chain_create+0xb0/0x310 [ 1519.314360][T14891] tcf_chain_create+0xb0/0x310 [ 1519.314397][T14891] __tcf_chain_get+0x111/0x3c0 [ 1519.314429][T14891] tc_new_tfilter+0x77e/0x1780 [ 1519.314478][T14891] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1519.314515][T14891] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1519.314558][T14891] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1519.314578][T14891] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1519.314603][T14891] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 1519.314630][T14891] ? netlink_sendmsg+0x5d4/0xb40 [ 1519.314661][T14891] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1519.314687][T14891] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1519.314715][T14891] ? __lock_acquire+0x6b5/0x2cf0 [ 1519.314765][T14891] netlink_rcv_skb+0x232/0x4b0 [ 1519.314795][T14891] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1519.314824][T14891] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1519.314867][T14891] ? netlink_deliver_tap+0x2e/0x1b0 [ 1519.314894][T14891] ? netlink_deliver_tap+0x2e/0x1b0 [ 1519.314932][T14891] netlink_unicast+0x75c/0x8e0 [ 1519.314971][T14891] netlink_sendmsg+0x813/0xb40 [ 1519.315010][T14891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1519.315043][T14891] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1519.315072][T14891] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1519.315104][T14891] ____sys_sendmsg+0x972/0x9f0 [ 1519.315135][T14891] ? __might_fault+0xaf/0x130 [ 1519.315169][T14891] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1519.315210][T14891] ? import_iovec+0x73/0xa0 [ 1519.315236][T14891] ___sys_sendmsg+0x2a5/0x360 [ 1519.315265][T14891] ? __lock_acquire+0x6b5/0x2cf0 [ 1519.315296][T14891] ? __pfx____sys_sendmsg+0x10/0x10 [ 1519.315367][T14891] ? __fget_files+0x2a/0x420 [ 1519.315392][T14891] ? __fget_files+0x3a0/0x420 [ 1519.315428][T14891] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1519.315462][T14891] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1519.315502][T14891] ? __pfx_ksys_write+0x10/0x10 [ 1519.315541][T14891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1519.315564][T14891] do_syscall_64+0x15f/0xf80 [ 1519.315588][T14891] ? trace_irq_disable+0x3b/0x140 [ 1519.315609][T14891] ? clear_bhb_loop+0x40/0x90 [ 1519.315635][T14891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1519.315656][T14891] RIP: 0033:0x7f0c90f9cdd9 [ 1519.315676][T14891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1519.315693][T14891] RSP: 002b:00007f0c91e68028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1519.315716][T14891] RAX: ffffffffffffffda RBX: 00007f0c91215fa0 RCX: 00007f0c90f9cdd9 [ 1519.315731][T14891] RDX: 00000000000000c0 RSI: 0000200000000580 RDI: 0000000000000009 [ 1519.315756][T14891] RBP: 00007f0c91e68090 R08: 0000000000000000 R09: 0000000000000000 [ 1519.315769][T14891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1519.315781][T14891] R13: 00007f0c91216038 R14: 00007f0c91215fa0 R15: 00007fff695d5c38 [ 1519.315817][T14891] [ 1520.147216][T14911] __nla_validate_parse: 4 callbacks suppressed [ 1520.147237][T14911] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11151'. [ 1520.281931][T14916] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11151'. [ 1520.546235][T14921] xt_hashlimit: size too large, truncated to 1048576 [ 1521.613318][T14930] netlink: 148 bytes leftover after parsing attributes in process `syz.0.11157'. [ 1521.725410][T14932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1521.811414][T14930] netlink: 64 bytes leftover after parsing attributes in process `syz.0.11157'. [ 1522.246008][T14949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11163'. [ 1522.521185][T14961] netlink: 'syz.5.11167': attribute type 1 has an invalid length. [ 1522.535401][T14961] netlink: 'syz.5.11167': attribute type 2 has an invalid length. [ 1522.560998][T14961] netlink: 'syz.5.11167': attribute type 1 has an invalid length. [ 1522.581674][T14961] netlink: 'syz.5.11167': attribute type 3 has an invalid length. [ 1522.615860][T14961] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11167'. [ 1522.804735][T14967] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11170'. [ 1523.553118][T14989] tipc: Enabled bearer , priority 0 [ 1523.567426][T14989] syzkaller0: entered promiscuous mode [ 1523.574229][T14989] syzkaller0: entered allmulticast mode [ 1523.646986][T14993] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11175'. [ 1523.720211][T14989] tipc: Resetting bearer [ 1523.766919][T14988] tipc: Resetting bearer [ 1523.780303][T14997] netlink: 'syz.5.11174': attribute type 1 has an invalid length. [ 1523.843097][T14988] tipc: Disabling bearer [ 1523.918740][T14995] netlink: 204 bytes leftover after parsing attributes in process `syz.5.11174'. [ 1523.950301][T14997] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1524.082098][T14999] bond3: (slave ip6erspan0): making interface the new active one [ 1524.103314][T14999] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1524.135647][T15008] netlink: 'syz.3.11179': attribute type 1 has an invalid length. [ 1524.153794][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1524.161900][ C0] lec:lec_tx_timeout: lec0 [ 1524.173202][T15007] FAULT_INJECTION: forcing a failure. [ 1524.173202][T15007] name failslab, interval 1, probability 0, space 0, times 0 [ 1524.204699][T15007] CPU: 0 UID: 0 PID: 15007 Comm: syz.2.11178 Not tainted syzkaller #0 PREEMPT(full) [ 1524.204738][T15007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1524.204751][T15007] Call Trace: [ 1524.204760][T15007] [ 1524.204769][T15007] dump_stack_lvl+0xe8/0x150 [ 1524.204805][T15007] should_fail_ex+0x412/0x560 [ 1524.204840][T15007] should_failslab+0xa8/0x100 [ 1524.204863][T15007] __kmalloc_cache_noprof+0x88/0x660 [ 1524.204894][T15007] ? u32_init+0x19e/0x6d0 [ 1524.204921][T15007] u32_init+0x19e/0x6d0 [ 1524.204941][T15007] ? __raw_spin_lock_init+0x45/0x100 [ 1524.204973][T15007] tcf_proto_create+0x248/0x330 [ 1524.205000][T15007] tc_new_tfilter+0x12ff/0x1780 [ 1524.205048][T15007] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1524.205086][T15007] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1524.205128][T15007] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1524.205149][T15007] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1524.205179][T15007] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1524.205204][T15007] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1524.205228][T15007] ? ref_tracker_free+0x693/0x840 [ 1524.205261][T15007] ? __pfx_ref_tracker_free+0x10/0x10 [ 1524.205302][T15007] netlink_rcv_skb+0x232/0x4b0 [ 1524.205332][T15007] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1524.205361][T15007] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1524.205403][T15007] ? netlink_deliver_tap+0x2e/0x1b0 [ 1524.205430][T15007] ? netlink_deliver_tap+0x2e/0x1b0 [ 1524.205463][T15007] netlink_unicast+0x75c/0x8e0 [ 1524.205502][T15007] netlink_sendmsg+0x813/0xb40 [ 1524.205542][T15007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1524.205576][T15007] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1524.205606][T15007] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1524.205640][T15007] ____sys_sendmsg+0x972/0x9f0 [ 1524.205670][T15007] ? __might_fault+0xaf/0x130 [ 1524.205704][T15007] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1524.205754][T15007] ? import_iovec+0x73/0xa0 [ 1524.205780][T15007] ___sys_sendmsg+0x2a5/0x360 [ 1524.205809][T15007] ? __lock_acquire+0x6b5/0x2cf0 [ 1524.205840][T15007] ? __pfx____sys_sendmsg+0x10/0x10 [ 1524.205910][T15007] ? __fget_files+0x2a/0x420 [ 1524.205935][T15007] ? __fget_files+0x3a0/0x420 [ 1524.205972][T15007] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1524.206006][T15007] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1524.206046][T15007] ? __pfx_ksys_write+0x10/0x10 [ 1524.206085][T15007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1524.206107][T15007] do_syscall_64+0x15f/0xf80 [ 1524.206132][T15007] ? trace_irq_disable+0x3b/0x140 [ 1524.206154][T15007] ? clear_bhb_loop+0x40/0x90 [ 1524.206180][T15007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1524.206200][T15007] RIP: 0033:0x7f1ec819cdd9 [ 1524.206220][T15007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1524.206237][T15007] RSP: 002b:00007f1ec90b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1524.206261][T15007] RAX: ffffffffffffffda RBX: 00007f1ec8415fa0 RCX: 00007f1ec819cdd9 [ 1524.206276][T15007] RDX: 00000000000000c0 RSI: 0000200000000580 RDI: 0000000000000009 [ 1524.206290][T15007] RBP: 00007f1ec90b3090 R08: 0000000000000000 R09: 0000000000000000 [ 1524.206302][T15007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1524.206315][T15007] R13: 00007f1ec8416038 R14: 00007f1ec8415fa0 R15: 00007ffe690eb3c8 [ 1524.206349][T15007] [ 1524.571734][T14995] netlink: 84 bytes leftover after parsing attributes in process `syz.5.11174'. [ 1525.679520][T15025] bridge_slave_0: left allmulticast mode [ 1525.702936][T15025] bridge_slave_0: left promiscuous mode [ 1525.722785][T15025] bridge0: port 1(bridge_slave_0) entered disabled state [ 1525.743405][T15025] bridge_slave_1: left allmulticast mode [ 1525.749496][T15025] bridge_slave_1: left promiscuous mode [ 1525.757408][T15025] bridge0: port 2(bridge_slave_1) entered disabled state [ 1525.780499][T15025] bond0: (slave bond_slave_0): Releasing backup interface [ 1525.833390][T15037] netlink: 236 bytes leftover after parsing attributes in process `syz.2.11185'. [ 1525.848561][T15025] bond0: (slave bond_slave_1): Releasing backup interface [ 1525.892026][T15037] netlink: 172 bytes leftover after parsing attributes in process `syz.2.11185'. [ 1525.927312][T15025] team0: Port device team_slave_0 removed [ 1525.992794][T15025] team0: Port device team_slave_1 removed [ 1526.034551][T15025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1526.067512][T15025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1526.097742][T15025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1526.118361][T15025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1526.165418][T15047] netlink: 'syz.1.11187': attribute type 10 has an invalid length. [ 1526.171362][T15025] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1526.365184][T15027] team0: Mode changed to "loadbalance" [ 1526.622225][T15030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1527.049435][T15070] tipc: Enabling of bearer rejected, failed to enable media [ 1527.138846][T15072] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11194'. [ 1527.145830][T15068] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11192'. [ 1527.313316][T15072] syzkaller0: entered promiscuous mode [ 1527.320362][T15072] syzkaller0: entered allmulticast mode [ 1527.616360][T15080] bond4: option downdelay: invalid value (18446744073709551371) [ 1527.634025][T15080] bond4: option downdelay: allowed values 0 - 2147483647 [ 1527.655810][T15080] bond4 (unregistering): Released all slaves [ 1527.744586][T15078] syzkaller0: entered promiscuous mode [ 1527.752095][T15078] syzkaller0: entered allmulticast mode [ 1528.195529][T15100] xt_hashlimit: size too large, truncated to 1048576 [ 1528.784624][T15116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11210'. [ 1529.046552][T15122] bond4: option downdelay: invalid value (18446744073709551371) [ 1529.078495][T15122] bond4: option downdelay: allowed values 0 - 2147483647 [ 1529.093389][T15122] bond4 (unregistering): Released all slaves [ 1530.508878][T15178] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1531.419008][T15200] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11230'. [ 1531.447096][T15200] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11230'. [ 1531.551849][T15205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11232'. [ 1531.604269][T15205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11232'. [ 1531.632299][T15206] netlink: 'syz.2.11231': attribute type 1 has an invalid length. [ 1531.700101][T15208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11232'. [ 1531.810952][T15214] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11234'. [ 1531.878619][T15210] netlink: 'syz.2.11231': attribute type 4 has an invalid length. [ 1531.943310][T15206] netlink: 'syz.2.11231': attribute type 4 has an invalid length. [ 1533.006333][T15239] gre0 speed is unknown, defaulting to 1000 [ 1533.882952][T15246] syzkaller1: entered promiscuous mode [ 1533.922510][T15246] syzkaller1: entered allmulticast mode [ 1534.057794][T15261] netlink: 'syz.5.11247': attribute type 1 has an invalid length. [ 1534.189964][T15265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11249'. [ 1534.356594][T15261] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1534.454013][T15266] vlan3: entered promiscuous mode [ 1534.463120][T15266] bond4: entered promiscuous mode [ 1534.476023][T15266] vlan3: entered allmulticast mode [ 1534.482083][T15266] bond4: entered allmulticast mode [ 1534.509938][T15265] netlink: 'syz.2.11249': attribute type 1 has an invalid length. [ 1534.538117][T15265] netlink: 'syz.2.11249': attribute type 2 has an invalid length. [ 1534.647806][T15275] syzkaller0: entered promiscuous mode [ 1534.672816][T15275] syzkaller0: entered allmulticast mode [ 1534.859848][T15280] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1534.918827][T15282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11253'. [ 1534.998613][T15282] hsr_slave_0: left promiscuous mode [ 1535.023419][T15282] hsr_slave_1: left promiscuous mode [ 1535.082787][T15280] team0: Unable to change to the same mode the team is in [ 1535.130331][T15275] gre0 speed is unknown, defaulting to 1000 [ 1538.199007][T15358] gre0 speed is unknown, defaulting to 1000 [ 1539.132990][T15386] bond1: option downdelay: invalid value (18446744073709551371) [ 1539.171002][T15386] bond1: option downdelay: allowed values 0 - 2147483647 [ 1539.212418][T15386] bond1 (unregistering): Released all slaves [ 1539.916323][T15375] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11275'. [ 1539.942750][T15397] ip6tnl1: entered promiscuous mode [ 1539.982011][T15397] ip6tnl1: entered allmulticast mode [ 1540.369425][T15401] gre0 speed is unknown, defaulting to 1000 [ 1540.991025][T15415] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1541.149939][T15417] netlink: 'syz.3.11285': attribute type 1 has an invalid length. [ 1541.262629][T15427] netlink: 14 bytes leftover after parsing attributes in process `syz.3.11285'. [ 1541.325311][T15417] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1541.488568][T15421] bond3: (slave veth3): Enslaving as an active interface with a down link [ 1542.436708][T15451] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11292'. [ 1542.530054][T15448] bond1: option downdelay: invalid value (18446744073709551371) [ 1542.539620][T15448] bond1: option downdelay: allowed values 0 - 2147483647 [ 1542.560828][T15448] bond1 (unregistering): Released all slaves [ 1543.166146][T15468] bridge_slave_0: left allmulticast mode [ 1543.209308][T15468] bridge_slave_0: left promiscuous mode [ 1543.232400][T15468] bridge0: port 1(bridge_slave_0) entered disabled state [ 1543.295376][T15468] bridge_slave_1: left allmulticast mode [ 1543.333651][T15468] bridge_slave_1: left promiscuous mode [ 1543.354401][T15468] bridge0: port 2(bridge_slave_1) entered disabled state [ 1543.437494][T15468] bond0: (slave bond_slave_0): Releasing backup interface [ 1543.485265][T15468] bond0: (slave bond_slave_1): Releasing backup interface [ 1543.577614][T15468] team0: Port device team_slave_0 removed [ 1543.656555][T15468] team0: Port device team_slave_1 removed [ 1543.669900][T15468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1543.686508][T15468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1543.707970][T15468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1543.729758][T15468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1544.011957][T15469] team0: Mode changed to "loadbalance" [ 1544.435139][T15478] syzkaller0: entered promiscuous mode [ 1544.445027][T15478] syzkaller0: entered allmulticast mode [ 1546.227316][ T1299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.246992][ T1299] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1546.250742][T15522] netlink: 'syz.5.11309': attribute type 1 has an invalid length. [ 1546.258536][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1546.268183][T15522] netlink: 'syz.5.11309': attribute type 2 has an invalid length. [ 1546.278032][T15522] netlink: 'syz.5.11309': attribute type 3 has an invalid length. [ 1546.882363][T15532] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1546.968511][T15534] netlink: 'syz.0.11312': attribute type 1 has an invalid length. [ 1547.216640][T15540] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11312'. [ 1549.575674][T15515] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1549.585508][T15534] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1549.993320][T15564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1550.102169][T22311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1550.113027][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1550.142380][T22311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1550.151873][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1550.175380][T22311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1550.184183][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1550.200114][T22311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1551.145875][T15595] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11327'. [ 1551.273514][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1551.281580][ C0] lec:lec_tx_timeout: lec0 [ 1551.695801][T15606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11333'. [ 1551.719171][T15607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11328'. [ 1551.746905][T15605] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11333'. [ 1551.759718][T15607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11328'. [ 1552.005739][T15616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11335'. [ 1552.017170][T15617] netlink: 64 bytes leftover after parsing attributes in process `syz.3.11335'. [ 1553.208020][T15646] netlink: 'syz.0.11344': attribute type 10 has an invalid length. [ 1553.388539][T28807] Bluetooth: hci0: command 0x0406 tx timeout [ 1554.027769][ T41] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1554.080533][ T41] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1554.113630][ T41] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1554.133882][ T41] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1554.369537][T15681] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11354'. [ 1554.402783][T15681] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1554.470666][T15683] xt_hashlimit: size too large, truncated to 1048576 [ 1554.661558][T15688] net_ratelimit: 7 callbacks suppressed [ 1554.661580][T15688] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1556.613028][T15726] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1556.937644][T15731] xt_hashlimit: size too large, truncated to 1048576 [ 1558.085183][T15757] xt_hashlimit: size too large, truncated to 1048576 [ 1558.105266][T15757] xt_hashlimit: max too large, truncated to 1048576 [ 1558.503800][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 1559.064795][T15775] netlink: 5 bytes leftover after parsing attributes in process `syz.2.11388'. [ 1560.340802][T15775] vlan2: entered allmulticast mode [ 1560.356036][T15775] bridge_slave_0: entered allmulticast mode [ 1560.371861][T15775] bridge0: port 1(vlan2) entered blocking state [ 1560.388935][T15775] bridge0: port 1(vlan2) entered disabled state [ 1560.410174][T15775] vlan2: entered promiscuous mode [ 1560.423906][T15775] bridge_slave_0: entered promiscuous mode [ 1560.441455][T15777] team0: Unable to change to the same mode the team is in [ 1560.475107][T22309] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.503108][T22309] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.657039][T15788] bond1: left promiscuous mode [ 1560.679703][T15788] bond1: left allmulticast mode [ 1560.716611][T15788] gretap1: left allmulticast mode [ 1560.809525][T22309] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.849741][T22309] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1562.218398][T15830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11404'. [ 1562.657856][T15832] team0: Unable to change to the same mode the team is in [ 1562.984342][T15844] pim6reg: entered allmulticast mode [ 1563.035074][T15844] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11409'. [ 1563.074485][T15844] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11409'. [ 1563.146056][T15844] geneve4: entered allmulticast mode [ 1563.201489][T15844] pim6reg: left allmulticast mode [ 1563.551958][T15854] gre0 speed is unknown, defaulting to 1000 [ 1565.459424][T15896] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11419'. [ 1566.073224][T15909] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11425'. [ 1566.098846][T15909] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11425'. [ 1566.112334][T15909] netlink: 'syz.1.11425': attribute type 4 has an invalid length. [ 1566.161732][T15903] gre0 speed is unknown, defaulting to 1000 [ 1566.350390][T15916] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11427'. [ 1567.057935][T15931] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11430'. [ 1568.882285][T15937] gre0 speed is unknown, defaulting to 1000 [ 1568.927253][ T5081] IPVS: starting estimator thread 0... [ 1569.166516][T15940] IPVS: using max 27 ests per chain, 64800 per kthread [ 1569.266097][T14743] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1569.551662][T15957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11437'. [ 1570.195380][T15969] netlink: 'syz.3.11439': attribute type 1 has an invalid length. [ 1570.204024][T15969] netlink: 224 bytes leftover after parsing attributes in process `syz.3.11439'. [ 1570.411909][T15976] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11440'. [ 1570.423421][T15976] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11440'. [ 1570.519159][T15976] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11440'. [ 1570.573928][T15976] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11440'. [ 1570.614260][T15976] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11440'. [ 1570.670031][T15976] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11440'. [ 1570.712950][T15979] vcan0: entered allmulticast mode [ 1571.244437][T16009] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1572.016841][T16020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11449'. [ 1572.787258][T16042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11456'. [ 1573.090765][T16052] netlink: 'syz.3.11460': attribute type 1 has an invalid length. [ 1573.168369][T16059] xt_hashlimit: size too large, truncated to 1048576 [ 1573.513191][T16071] netlink: 'syz.2.11465': attribute type 13 has an invalid length. [ 1573.545366][T16071] gretap0: refused to change device tx_queue_len [ 1573.560277][T16071] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1573.747788][T16075] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 1574.010201][T16085] syz.5.11471: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1574.032268][T16085] CPU: 0 UID: 0 PID: 16085 Comm: syz.5.11471 Not tainted syzkaller #0 PREEMPT(full) [ 1574.032300][T16085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1574.032313][T16085] Call Trace: [ 1574.032322][T16085] [ 1574.032332][T16085] dump_stack_lvl+0xe8/0x150 [ 1574.032369][T16085] warn_alloc+0x249/0x340 [ 1574.032403][T16085] ? stack_trace_save+0xa9/0x100 [ 1574.032432][T16085] ? __pfx_warn_alloc+0x10/0x10 [ 1574.032471][T16085] ? kasan_save_track+0x4f/0x80 [ 1574.032500][T16085] ? kasan_save_track+0x3e/0x80 [ 1574.032527][T16085] ? __kasan_kmalloc+0x93/0xb0 [ 1574.032544][T16085] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1574.032572][T16085] ? xskq_create+0x56/0x170 [ 1574.032591][T16085] ? xsk_setsockopt+0x54c/0x990 [ 1574.032608][T16085] ? do_sock_setsockopt+0x17c/0x1b0 [ 1574.032634][T16085] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1574.032660][T16085] ? do_syscall_64+0x15f/0xf80 [ 1574.032689][T16085] __vmalloc_node_range_noprof+0x132/0x1730 [ 1574.032753][T16085] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1574.032790][T16085] ? __kasan_kmalloc+0x93/0xb0 [ 1574.032817][T16085] vmalloc_user_noprof+0xad/0xe0 [ 1574.032847][T16085] ? xskq_create+0xbf/0x170 [ 1574.032870][T16085] xskq_create+0xbf/0x170 [ 1574.032897][T16085] xsk_init_queue+0x8a/0xe0 [ 1574.032922][T16085] xsk_setsockopt+0x54c/0x990 [ 1574.032945][T16085] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1574.032966][T16085] ? __pfx_aa_sk_perm+0x10/0x10 [ 1574.032997][T16085] ? aa_sock_opt_perm+0xff/0x1a0 [ 1574.033029][T16085] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1574.033058][T16085] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1574.033082][T16085] do_sock_setsockopt+0x17c/0x1b0 [ 1574.033117][T16085] __x64_sys_setsockopt+0x13d/0x1b0 [ 1574.033150][T16085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1574.033182][T16085] do_syscall_64+0x15f/0xf80 [ 1574.033206][T16085] ? trace_irq_disable+0x3b/0x140 [ 1574.033229][T16085] ? clear_bhb_loop+0x40/0x90 [ 1574.033256][T16085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1574.033277][T16085] RIP: 0033:0x7f1d3ad9cdd9 [ 1574.033297][T16085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1574.033315][T16085] RSP: 002b:00007f1d3bc46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1574.033339][T16085] RAX: ffffffffffffffda RBX: 00007f1d3b015fa0 RCX: 00007f1d3ad9cdd9 [ 1574.033354][T16085] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1574.033367][T16085] RBP: 00007f1d3ae32d69 R08: 0000000000000004 R09: 0000000000000000 [ 1574.033379][T16085] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1574.033393][T16085] R13: 00007f1d3b016038 R14: 00007f1d3b015fa0 R15: 00007ffd21f85588 [ 1574.033434][T16085] [ 1574.430545][T16085] Mem-Info: [ 1574.433962][T16085] active_anon:6723 inactive_anon:735 isolated_anon:0 [ 1574.433962][T16085] active_file:2951 inactive_file:41268 isolated_file:0 [ 1574.433962][T16085] unevictable:768 dirty:249 writeback:0 [ 1574.433962][T16085] slab_reclaimable:14552 slab_unreclaimable:162450 [ 1574.433962][T16085] mapped:30171 shmem:1418 pagetables:1439 [ 1574.433962][T16085] sec_pagetables:0 bounce:0 [ 1574.433962][T16085] kernel_misc_reclaimable:0 [ 1574.433962][T16085] free:1234139 free_pcp:25065 free_cma:0 [ 1574.483243][T16085] Node 0 active_anon:26992kB inactive_anon:2940kB active_file:11804kB inactive_file:164868kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:26476kB dirty:996kB writeback:0kB shmem:4136kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16576kB pagetables:5616kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1574.516561][T16085] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:94208kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1574.547972][T16085] Node 0 DMA free:11232kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:24kB free_cma:0kB [ 1574.579681][T16085] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 1574.586193][T16085] Node 0 DMA32 free:1249012kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26992kB inactive_anon:2940kB active_file:11804kB inactive_file:164868kB unevictable:1536kB writepending:996kB zspages:0kB present:3129332kB managed:2551528kB mlocked:0kB bounce:0kB free_pcp:40648kB local_pcp:21484kB free_cma:0kB [ 1574.648882][T16091] __nla_validate_parse: 4 callbacks suppressed [ 1574.648935][T16091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11472'. [ 1574.651359][T16096] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11473'. [ 1574.685604][T16085] lowmem_reserve[]: 0 0 0 0 0 [ 1574.695732][T16085] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:612kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1574.730681][T16085] lowmem_reserve[]: 0 0 0 0 0 [ 1574.737524][T16085] Node 1 Normal free:3676312kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:59440kB local_pcp:29984kB free_cma:0kB [ 1574.775328][T16085] lowmem_reserve[]: 0 0 0 0 0 [ 1574.794480][T16085] Node 0 DMA: 0*4kB 2*8kB (U) 1*16kB (U) 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11232kB [ 1574.812807][T16085] Node 0 DMA32: 11353*4kB (UME) 9453*8kB (UME) 5346*16kB (UME) 1286*32kB (UME) 477*64kB (UME) 236*128kB (UME) 553*256kB (UME) 480*512kB (UM) 329*1024kB (UM) 107*2048kB (UM) 0*4096kB = 1251820kB [ 1574.868126][T16085] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1574.909604][T16085] Node 1 Normal: 4*4kB (U) 13*8kB (UM) 20*16kB (UM) 11*32kB (UM) 12*64kB (UM) 13*128kB (UM) 10*256kB (UM) 9*512kB (UM) 8*1024kB (UM) 8*2048kB (U) 889*4096kB (UM) = 3676312kB [ 1574.931906][T16085] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1574.941982][T16085] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1574.951547][T16085] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1574.961474][T16085] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1574.971027][T16085] 45633 total pagecache pages [ 1574.975899][T16085] 0 pages in swap cache [ 1574.980106][T16085] Free swap = 124996kB [ 1574.985007][T16085] Total swap = 124996kB [ 1574.989220][T16085] 2097051 pages RAM [ 1574.993044][T16085] 0 pages HighMem/MovableOnly [ 1574.997831][T16085] 427401 pages reserved [ 1575.002004][T16085] 0 pages cma reserved [ 1575.060516][T16093] pim6reg: entered allmulticast mode [ 1575.267894][T16114] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11476'. [ 1575.292606][T16114] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11476'. [ 1575.330310][T16114] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11476'. [ 1575.348344][T16118] xt_hashlimit: size too large, truncated to 1048576 [ 1575.353855][T16114] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11476'. [ 1575.440506][T16122] dummy0: entered promiscuous mode [ 1575.457881][T16122] bond0: entered promiscuous mode [ 1575.476395][T16122] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 1575.500383][T16122] hsr1: entered allmulticast mode [ 1575.515571][T16122] dummy0: entered allmulticast mode [ 1575.543179][T16122] bond0: entered allmulticast mode [ 1575.555178][T16125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11480'. [ 1575.711027][T16131] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11482'. [ 1575.721582][T16131] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11482'. [ 1575.783217][T16131] syzkaller0: entered promiscuous mode [ 1575.789151][T16131] syzkaller0: entered allmulticast mode [ 1577.731075][T16099] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1579.939578][T16164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11491'. [ 1579.979630][T16164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11491'. [ 1580.064488][T16164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11491'. [ 1580.074021][T22303] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1580.107878][T22303] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1580.121956][T16164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11491'. [ 1580.139345][T22303] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1580.167938][T22303] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1580.414836][T16177] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11493'. [ 1580.783168][T16186] netlink: 'syz.2.11496': attribute type 3 has an invalid length. [ 1581.372536][T16186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1581.425887][T16186] 8021q: adding VLAN 0 to HW filter on device team0 [ 1581.448168][T16186] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1581.744084][T16207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11502'. [ 1581.994600][T16211] gre0 speed is unknown, defaulting to 1000 [ 1582.002826][T16213] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1582.163885][T16219] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11504'. [ 1582.185563][T16219] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11504'. [ 1582.250323][T16219] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11504'. [ 1582.283380][T16219] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11504'. [ 1582.830610][T16237] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1583.524628][T16240] syzkaller0: entered promiscuous mode [ 1583.556795][T16240] syzkaller0: entered allmulticast mode [ 1584.060331][T27496] lec:lec_start_xmit: lec0:No lecd attached [ 1584.294202][T22313] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1584.311355][T22313] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1584.360301][T22313] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1584.396860][T22313] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1585.269845][T16291] __nla_validate_parse: 5 callbacks suppressed [ 1585.269867][T16291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11527'. [ 1585.706821][T16301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1585.912532][T16307] macsec0: mtu greater than device maximum [ 1585.991556][T16307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11532'. [ 1586.855207][T16335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11540'. [ 1587.031287][T16342] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11542'. [ 1587.066473][T16342] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11542'. [ 1587.085886][T16342] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11542'. [ 1587.096243][T16342] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11542'. [ 1587.107326][T16342] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11542'. [ 1587.117921][T16342] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11542'. [ 1587.128393][T16342] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11542'. [ 1587.227273][T16342] vcan0: left allmulticast mode [ 1587.314178][T16342] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1587.740241][T16359] bond0 (unregistering): Released all slaves [ 1588.742948][T16398] x_tables: ip_tables: socket match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT [ 1589.143519][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5080 ms [ 1589.151628][ C0] lec:lec_tx_timeout: lec0 [ 1589.162120][T16408] tipc: New replicast peer: 255.255.255.255 [ 1589.170206][T16408] tipc: Enabled bearer , priority 10 [ 1589.706975][T16422] erspan0: entered promiscuous mode [ 1589.870960][T16436] netlink: 'syz.1.11570': attribute type 64 has an invalid length. [ 1590.122969][T16422] 8021q: adding VLAN 0 to HW filter on device team0 [ 1590.242752][T16422] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1590.311282][T16431] __nla_validate_parse: 20 callbacks suppressed [ 1590.311305][T16431] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11573'. [ 1590.433330][T16429] bond2: entered promiscuous mode [ 1590.449030][T16429] bond2: entered allmulticast mode [ 1591.078999][T16471] netlink: 'syz.1.11582': attribute type 2 has an invalid length. [ 1591.103265][T16471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11582'. [ 1591.169589][T16471] netlink: 'syz.1.11582': attribute type 2 has an invalid length. [ 1591.213917][T16470] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1591.657583][T16484] vlan3: entered allmulticast mode [ 1591.673796][T16484] bond0: entered allmulticast mode [ 1591.789324][T16492] bond1: option downdelay: invalid value (18446744073709551371) [ 1591.797626][T16492] bond1: option downdelay: allowed values 0 - 2147483647 [ 1591.807311][T16492] bond1 (unregistering): Released all slaves [ 1591.873289][T16497] netlink: 68 bytes leftover after parsing attributes in process `syz.5.11589'. [ 1591.959499][T16499] netlink: 'syz.0.11590': attribute type 13 has an invalid length. [ 1591.975568][T16499] netlink: 'syz.0.11590': attribute type 17 has an invalid length. [ 1592.055244][T16497] netlink: 68 bytes leftover after parsing attributes in process `syz.5.11589'. [ 1592.210355][T16499] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1592.304630][T16497] netlink: 68 bytes leftover after parsing attributes in process `syz.5.11589'. [ 1592.350108][T16504] tipc: Enabled bearer , priority 0 [ 1592.440700][T16497] netlink: 68 bytes leftover after parsing attributes in process `syz.5.11589'. [ 1592.454352][T16504] : entered promiscuous mode [ 1592.525224][T16504] tipc: Resetting bearer [ 1592.531965][T16497] netlink: 68 bytes leftover after parsing attributes in process `syz.5.11589'. [ 1592.564864][T16503] tipc: Disabling bearer [ 1592.582548][T16510] netlink: 88 bytes leftover after parsing attributes in process `syz.2.11593'. [ 1592.613817][T16510] openvswitch: netlink: Flow key attr not present in new flow. [ 1592.656978][T16497] netlink: 68 bytes leftover after parsing attributes in process `syz.5.11589'. [ 1593.086466][T16523] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1593.170095][T16525] netlink: 14 bytes leftover after parsing attributes in process `syz.5.11597'. [ 1594.368260][T16525] bond0 (unregistering): Released all slaves [ 1594.436050][T16537] netlink: 'syz.1.11603': attribute type 6 has an invalid length. [ 1596.060385][T16594] syzkaller0: entered promiscuous mode [ 1596.082181][T16594] syzkaller0: entered allmulticast mode [ 1596.157691][T16598] syzkaller0: entered promiscuous mode [ 1596.180399][T16598] syzkaller0: entered allmulticast mode [ 1596.504855][T16614] __nla_validate_parse: 4 callbacks suppressed [ 1596.504877][T16614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11619'. [ 1596.879875][T16623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11625'. [ 1596.906221][T16623] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11625'. [ 1597.383199][T16640] netlink: 240 bytes leftover after parsing attributes in process `syz.3.11630'. [ 1597.394596][T16640] netlink: 56 bytes leftover after parsing attributes in process `syz.3.11630'. [ 1597.529747][T16642] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11631'. [ 1601.123262][T16659] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11633'. [ 1601.176974][T16659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11633'. [ 1601.208849][T16659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11633'. [ 1601.501012][T16673] FAULT_INJECTION: forcing a failure. [ 1601.501012][T16673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1601.525742][T16673] CPU: 1 UID: 0 PID: 16673 Comm: syz.1.11639 Not tainted syzkaller #0 PREEMPT(full) [ 1601.525774][T16673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1601.525787][T16673] Call Trace: [ 1601.525797][T16673] [ 1601.525806][T16673] dump_stack_lvl+0xe8/0x150 [ 1601.525844][T16673] should_fail_ex+0x412/0x560 [ 1601.525879][T16673] _copy_from_user+0x2d/0xb0 [ 1601.525902][T16673] __sys_sendto+0x2b0/0x710 [ 1601.525933][T16673] ? __pfx___sys_sendto+0x10/0x10 [ 1601.525959][T16673] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1601.525998][T16673] ? __fget_files+0x3a0/0x420 [ 1601.526037][T16673] ? ksys_write+0x242/0x270 [ 1601.526070][T16673] ? __pfx_ksys_write+0x10/0x10 [ 1601.526106][T16673] __x64_sys_sendto+0xde/0x100 [ 1601.526136][T16673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1601.526159][T16673] do_syscall_64+0x15f/0xf80 [ 1601.526184][T16673] ? trace_irq_disable+0x3b/0x140 [ 1601.526207][T16673] ? clear_bhb_loop+0x40/0x90 [ 1601.526233][T16673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1601.526254][T16673] RIP: 0033:0x7f9728b9cdd9 [ 1601.526274][T16673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1601.526293][T16673] RSP: 002b:00007f9726df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1601.526318][T16673] RAX: ffffffffffffffda RBX: 00007f9728e15fa0 RCX: 00007f9728b9cdd9 [ 1601.526333][T16673] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000c [ 1601.526346][T16673] RBP: 00007f9726df6090 R08: 0000200000000080 R09: 0000000000000014 [ 1601.526360][T16673] R10: 0000000000000b01 R11: 0000000000000246 R12: 0000000000000001 [ 1601.526374][T16673] R13: 00007f9728e16038 R14: 00007f9728e15fa0 R15: 00007ffdc4795198 [ 1601.526408][T16673] [ 1601.961861][T16681] netlink: 208240 bytes leftover after parsing attributes in process `syz.5.11642'. [ 1602.581022][T16679] gre0 speed is unknown, defaulting to 1000 [ 1603.031159][T16707] xt_hashlimit: size too large, truncated to 1048576 [ 1603.168520][T16715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11651'. [ 1603.177561][T16715] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11651'. [ 1603.574110][T16728] FAULT_INJECTION: forcing a failure. [ 1603.574110][T16728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1603.603844][T16728] CPU: 0 UID: 0 PID: 16728 Comm: syz.0.11656 Not tainted syzkaller #0 PREEMPT(full) [ 1603.603875][T16728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1603.603889][T16728] Call Trace: [ 1603.603898][T16728] [ 1603.603907][T16728] dump_stack_lvl+0xe8/0x150 [ 1603.603944][T16728] should_fail_ex+0x412/0x560 [ 1603.603980][T16728] _copy_to_user+0x31/0xb0 [ 1603.604006][T16728] simple_read_from_buffer+0xe1/0x170 [ 1603.604038][T16728] proc_fail_nth_read+0x1bb/0x230 [ 1603.604071][T16728] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1603.604108][T16728] ? rw_verify_area+0x2a6/0x4d0 [ 1603.604139][T16728] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1603.604168][T16728] vfs_read+0x20c/0xa70 [ 1603.604205][T16728] ? __pfx___mutex_lock+0x10/0x10 [ 1603.604233][T16728] ? __pfx_vfs_read+0x10/0x10 [ 1603.604265][T16728] ? __fget_files+0x2a/0x420 [ 1603.604297][T16728] ? __fget_files+0x3a0/0x420 [ 1603.604321][T16728] ? __fget_files+0x2a/0x420 [ 1603.604357][T16728] ksys_read+0x150/0x270 [ 1603.604390][T16728] ? __pfx_ksys_read+0x10/0x10 [ 1603.604430][T16728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.604453][T16728] do_syscall_64+0x15f/0xf80 [ 1603.604478][T16728] ? trace_irq_disable+0x3b/0x140 [ 1603.604501][T16728] ? clear_bhb_loop+0x40/0x90 [ 1603.604528][T16728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.604549][T16728] RIP: 0033:0x7f0c90f5d60e [ 1603.604571][T16728] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1603.604597][T16728] RSP: 002b:00007f0c91e67fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1603.604621][T16728] RAX: ffffffffffffffda RBX: 00007f0c91e686c0 RCX: 00007f0c90f5d60e [ 1603.604637][T16728] RDX: 000000000000000f RSI: 00007f0c91e680a0 RDI: 000000000000000d [ 1603.604650][T16728] RBP: 00007f0c91e68090 R08: 0000000000000000 R09: 0000000000000000 [ 1603.604663][T16728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1603.604675][T16728] R13: 00007f0c91216038 R14: 00007f0c91215fa0 R15: 00007fff695d5c38 [ 1603.604711][T16728] [ 1603.970077][T16732] bridge0: port 1(vlan0) entered blocking state [ 1603.976685][T16732] bridge0: port 1(vlan0) entered disabled state [ 1603.983225][T16732] vlan0: entered allmulticast mode [ 1603.988595][T16732] dummy0: entered allmulticast mode [ 1604.098591][T16720] netlink: 148 bytes leftover after parsing attributes in process `syz.3.11653'. [ 1604.217431][T16717] lec:lec_atm_close: lec0: Shut down! [ 1604.574614][T16755] xt_hashlimit: size too large, truncated to 1048576 [ 1604.641729][T16758] FAULT_INJECTION: forcing a failure. [ 1604.641729][T16758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1604.660136][T16757] syzkaller1: entered promiscuous mode [ 1604.660164][T16757] syzkaller1: entered allmulticast mode [ 1604.662641][T16757] xt_hashlimit: size too large, truncated to 1048576 [ 1604.788303][T16762] x_tables: duplicate underflow at hook 1 [ 1604.796013][T16758] CPU: 1 UID: 0 PID: 16758 Comm: syz.2.11664 Not tainted syzkaller #0 PREEMPT(full) [ 1604.796043][T16758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1604.796058][T16758] Call Trace: [ 1604.796067][T16758] [ 1604.796077][T16758] dump_stack_lvl+0xe8/0x150 [ 1604.796113][T16758] should_fail_ex+0x412/0x560 [ 1604.796148][T16758] _copy_from_user+0x2d/0xb0 [ 1604.796171][T16758] ___sys_sendmsg+0x1c6/0x360 [ 1604.796202][T16758] ? __lock_acquire+0x6b5/0x2cf0 [ 1604.796233][T16758] ? __pfx____sys_sendmsg+0x10/0x10 [ 1604.796303][T16758] ? __fget_files+0x2a/0x420 [ 1604.796329][T16758] ? __fget_files+0x3a0/0x420 [ 1604.796364][T16758] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1604.796398][T16758] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1604.796438][T16758] ? __pfx_ksys_write+0x10/0x10 [ 1604.796476][T16758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1604.796499][T16758] do_syscall_64+0x15f/0xf80 [ 1604.796523][T16758] ? trace_irq_disable+0x3b/0x140 [ 1604.796547][T16758] ? clear_bhb_loop+0x40/0x90 [ 1604.796572][T16758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1604.796592][T16758] RIP: 0033:0x7f1ec819cdd9 [ 1604.796613][T16758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1604.796631][T16758] RSP: 002b:00007f1ec9092028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1604.796654][T16758] RAX: ffffffffffffffda RBX: 00007f1ec8416090 RCX: 00007f1ec819cdd9 [ 1604.796669][T16758] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1604.796683][T16758] RBP: 00007f1ec9092090 R08: 0000000000000000 R09: 0000000000000000 [ 1604.796697][T16758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1604.796709][T16758] R13: 00007f1ec8416128 R14: 00007f1ec8416090 R15: 00007ffe690eb3c8 [ 1604.796743][T16758] [ 1606.276201][T16803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11679'. [ 1606.286799][T16804] xt_hashlimit: size too large, truncated to 1048576 [ 1606.369662][T16807] FAULT_INJECTION: forcing a failure. [ 1606.369662][T16807] name failslab, interval 1, probability 0, space 0, times 0 [ 1606.427311][T16807] CPU: 0 UID: 0 PID: 16807 Comm: syz.0.11678 Not tainted syzkaller #0 PREEMPT(full) [ 1606.427342][T16807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1606.427354][T16807] Call Trace: [ 1606.427363][T16807] [ 1606.427372][T16807] dump_stack_lvl+0xe8/0x150 [ 1606.427407][T16807] should_fail_ex+0x412/0x560 [ 1606.427443][T16807] should_failslab+0xa8/0x100 [ 1606.427468][T16807] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1606.427500][T16807] ? __alloc_skb+0x1d0/0x7d0 [ 1606.427526][T16807] ? __local_bh_enable_ip+0xd0/0x130 [ 1606.427561][T16807] __alloc_skb+0x1d0/0x7d0 [ 1606.427593][T16807] __ip6_append_data+0x2d6d/0x3f70 [ 1606.427651][T16807] ? __pfx_raw6_getfrag+0x10/0x10 [ 1606.427699][T16807] ? ip6_mtu+0x7d/0x490 [ 1606.427732][T16807] ? __pfx___ip6_append_data+0x10/0x10 [ 1606.427761][T16807] ? ip6_setup_cork+0x544/0xf30 [ 1606.427791][T16807] ? ip6_append_data+0x1b7/0x280 [ 1606.427831][T16807] ip6_append_data+0x10f/0x280 [ 1606.427862][T16807] ? __pfx_raw6_getfrag+0x10/0x10 [ 1606.427896][T16807] rawv6_sendmsg+0x12d3/0x18e0 [ 1606.427944][T16807] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1606.427988][T16807] ? aa_sk_perm+0x6d5/0x900 [ 1606.428023][T16807] ? __pfx_aa_sk_perm+0x10/0x10 [ 1606.428052][T16807] ? sock_rps_record_flow+0x19/0x350 [ 1606.428075][T16807] ? inet_sendmsg+0x2f4/0x370 [ 1606.428094][T16807] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1606.428128][T16807] ____sys_sendmsg+0x80a/0x9f0 [ 1606.428158][T16807] ? __might_fault+0xaf/0x130 [ 1606.428193][T16807] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1606.428235][T16807] ? import_iovec+0x73/0xa0 [ 1606.428261][T16807] ___sys_sendmsg+0x2a5/0x360 [ 1606.428290][T16807] ? __lock_acquire+0x6b5/0x2cf0 [ 1606.428322][T16807] ? __pfx____sys_sendmsg+0x10/0x10 [ 1606.428389][T16807] ? __fget_files+0x2a/0x420 [ 1606.428414][T16807] ? __fget_files+0x3a0/0x420 [ 1606.428451][T16807] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1606.428484][T16807] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1606.428527][T16807] ? __pfx_ksys_write+0x10/0x10 [ 1606.428568][T16807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1606.428591][T16807] do_syscall_64+0x15f/0xf80 [ 1606.428615][T16807] ? trace_irq_disable+0x3b/0x140 [ 1606.428638][T16807] ? clear_bhb_loop+0x40/0x90 [ 1606.428665][T16807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1606.428686][T16807] RIP: 0033:0x7f0c90f9cdd9 [ 1606.428706][T16807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1606.428724][T16807] RSP: 002b:00007f0c91e47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1606.428747][T16807] RAX: ffffffffffffffda RBX: 00007f0c91216090 RCX: 00007f0c90f9cdd9 [ 1606.428762][T16807] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1606.428776][T16807] RBP: 00007f0c91e47090 R08: 0000000000000000 R09: 0000000000000000 [ 1606.428790][T16807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1606.428804][T16807] R13: 00007f0c91216128 R14: 00007f0c91216090 R15: 00007fff695d5c38 [ 1606.428847][T16807] [ 1607.150316][T16830] gre0 speed is unknown, defaulting to 1000 [ 1607.167327][T16829] xt_hashlimit: size too large, truncated to 1048576 [ 1607.688317][ T1299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1607.702394][ T1299] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1607.851703][T16844] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.11693'. [ 1607.860995][T16844] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1607.908429][T16844] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1607.990099][T16849] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11694'. [ 1608.062891][T16849] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11694'. [ 1608.083216][T16854] Cannot find set identified by id 65534 to match [ 1608.140467][T16861] xt_hashlimit: size too large, truncated to 1048576 [ 1608.392184][T16860] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1608.417683][T16860] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1608.427405][T16860] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1608.633728][T16873] bridge0: entered promiscuous mode [ 1608.639017][T16873] vlan0: entered promiscuous mode [ 1608.644077][T16873] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:609 [ 1608.653389][T16873] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 16873, name: syz.0.11700 [ 1608.662628][T16873] preempt_count: 201, expected: 0 [ 1608.667706][T16873] RCU nest depth: 0, expected: 0 [ 1608.672675][T16873] 3 locks held by syz.0.11700/16873: [ 1608.676125][T22310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.677990][T16873] #0: [ 1608.686450][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.710098][T16873] ffffffff90341a58 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1608.719231][T16873] #1: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1608.728345][T16873] #2: ffff88805bfd4370 (&dev_addr_list_lock_key#7/2){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 1608.738640][T16873] Preemption disabled at: [ 1608.738657][T16873] [] dev_uc_add+0x56/0x120 [ 1608.745406][T22313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.749004][T16873] CPU: 1 UID: 0 PID: 16873 Comm: syz.0.11700 Not tainted syzkaller #0 PREEMPT(full) [ 1608.749033][T16873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1608.749046][T16873] Call Trace: [ 1608.749054][T16873] [ 1608.749063][T16873] dump_stack_lvl+0xe8/0x150 [ 1608.749098][T16873] __might_resched+0x378/0x4d0 [ 1608.749127][T16873] ? dev_uc_add+0x56/0x120 [ 1608.749149][T16873] __mutex_lock+0x11c/0x1550 [ 1608.749177][T16873] ? __pfx__printk+0x10/0x10 [ 1608.749198][T16873] ? __wake_up_klogd+0xe6/0x120 [ 1608.749222][T16873] ? __netdev_printk+0x36f/0x480 [ 1608.749244][T16873] ? dev_set_promiscuity+0x10e/0x260 [ 1608.749274][T16873] ? __pfx___mutex_lock+0x10/0x10 [ 1608.749297][T16873] ? netdev_info+0x11e/0x180 [ 1608.749325][T16873] ? __pfx_netdev_info+0x10/0x10 [ 1608.749343][T16873] ? _printk+0xdd/0x130 [ 1608.749361][T16873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1608.749392][T16873] dev_set_promiscuity+0x10e/0x260 [ 1608.749423][T16873] ? __pfx_vlan_dev_change_rx_flags+0x10/0x10 [ 1608.749449][T16873] __dev_set_promiscuity+0x515/0x710 [ 1608.749479][T16873] ? netdev_info+0x11e/0x180 [ 1608.749516][T16873] netif_set_promiscuity+0x50/0xe0 [ 1608.749547][T16873] dev_set_promiscuity+0x126/0x260 [ 1608.749579][T16873] br_manage_promisc+0x180/0x560 [ 1608.749615][T16873] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 1608.749637][T16873] __dev_set_promiscuity+0x515/0x710 [ 1608.749665][T16873] ? __hw_addr_add_ex+0x361/0x650 [ 1608.749698][T16873] __dev_set_rx_mode+0x17c/0x260 [ 1608.749729][T16873] dev_uc_add+0xc8/0x120 [ 1608.749750][T16873] vlan_dev_open+0x3e5/0x5e0 [ 1608.749782][T16873] __dev_open+0x44d/0x830 [ 1608.749819][T16873] ? __pfx___dev_open+0x10/0x10 [ 1608.749840][T16873] ? __dev_change_flags+0x1b0/0x690 [ 1608.749870][T16873] ? __local_bh_enable_ip+0xd0/0x130 [ 1608.749900][T16873] __dev_change_flags+0x1f7/0x690 [ 1608.749934][T16873] ? __pfx___dev_change_flags+0x10/0x10 [ 1608.749972][T16873] rtnl_newlink_create+0x587/0xb70 [ 1608.750000][T16873] ? __pfx___nla_validate_parse+0x10/0x10 [ 1608.750031][T16873] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1608.750062][T16873] ? __pfx___mutex_lock+0x10/0x10 [ 1608.750097][T16873] ? ns_capable+0x89/0xe0 [ 1608.750126][T16873] rtnl_newlink+0x166a/0x1bb0 [ 1608.750168][T16873] ? __pfx_rtnl_newlink+0x10/0x10 [ 1608.750191][T16873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1608.750249][T16873] ? kasan_quarantine_put+0xbb/0x1f0 [ 1608.750276][T16873] ? lockdep_hardirqs_on+0x7a/0x110 [ 1608.750304][T16873] ? nlmon_xmit+0xb0/0x100 [ 1608.750325][T16873] ? kmem_cache_free+0x180/0x630 [ 1608.750365][T16873] ? __lock_acquire+0x6b5/0x2cf0 [ 1608.750395][T16873] ? __dev_queue_xmit+0x2b6/0x3950 [ 1608.750417][T16873] ? __local_bh_enable_ip+0xd0/0x130 [ 1608.750442][T16873] ? lockdep_hardirqs_on+0x7a/0x110 [ 1608.750464][T16873] ? __dev_queue_xmit+0x2b6/0x3950 [ 1608.750481][T16873] ? __local_bh_enable_ip+0xd0/0x130 [ 1608.750504][T16873] ? __dev_queue_xmit+0x2b6/0x3950 [ 1608.750531][T16873] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1608.750571][T16873] ? __pfx_rtnl_newlink+0x10/0x10 [ 1608.750596][T16873] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1608.750625][T16873] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1608.750650][T16873] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1608.750672][T16873] ? ref_tracker_free+0x693/0x840 [ 1608.750703][T16873] ? __pfx_ref_tracker_free+0x10/0x10 [ 1608.750741][T16873] netlink_rcv_skb+0x232/0x4b0 [ 1608.750769][T16873] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1608.750796][T16873] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1608.750842][T16873] ? netlink_deliver_tap+0x2e/0x1b0 [ 1608.750868][T16873] ? netlink_deliver_tap+0x2e/0x1b0 [ 1608.750900][T16873] netlink_unicast+0x75c/0x8e0 [ 1608.750937][T16873] netlink_sendmsg+0x813/0xb40 [ 1608.750974][T16873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1608.751004][T16873] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1608.751032][T16873] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1608.751064][T16873] ____sys_sendmsg+0x972/0x9f0 [ 1608.751092][T16873] ? __might_fault+0xaf/0x130 [ 1608.751125][T16873] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1608.751163][T16873] ? import_iovec+0x73/0xa0 [ 1608.751187][T16873] ___sys_sendmsg+0x2a5/0x360 [ 1608.751213][T16873] ? __lock_acquire+0x6b5/0x2cf0 [ 1608.751242][T16873] ? __pfx____sys_sendmsg+0x10/0x10 [ 1608.751277][T16873] ? futex_wake+0x4ac/0x580 [ 1608.751324][T16873] ? __fget_files+0x2a/0x420 [ 1608.751347][T16873] ? __fget_files+0x3a0/0x420 [ 1608.751382][T16873] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1608.751414][T16873] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1608.751451][T16873] ? rcu_is_watching+0x15/0xb0 [ 1608.751488][T16873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1608.751509][T16873] do_syscall_64+0x15f/0xf80 [ 1608.751532][T16873] ? trace_irq_disable+0x3b/0x140 [ 1608.751553][T16873] ? clear_bhb_loop+0x40/0x90 [ 1608.751576][T16873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1608.751595][T16873] RIP: 0033:0x7f0c90f9cdd9 [ 1608.751615][T16873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1608.751631][T16873] RSP: 002b:00007f0c91e47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1608.751652][T16873] RAX: ffffffffffffffda RBX: 00007f0c91216090 RCX: 00007f0c90f9cdd9 [ 1608.751667][T16873] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1608.751680][T16873] RBP: 00007f0c91032d69 R08: 0000000000000000 R09: 0000000000000000 [ 1608.751692][T16873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1608.751704][T16873] R13: 00007f0c91216128 R14: 00007f0c91216090 R15: 00007fff695d5c38 [ 1608.751736][T16873] [ 1608.751746][T16873] [ 1608.757339][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.766548][T16873] ============================= [ 1608.766559][T16873] [ BUG: Invalid wait context ] [ 1608.766571][T16873] syzkaller #0 Tainted: G W [ 1608.766583][T16873] ----------------------------- [ 1608.766591][T16873] syz.0.11700/16873 is trying to lock: [ 1608.766603][T16873] ffff88807c524d88 ( [ 1609.223807][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1609.238639][T16873] &dev_instance_lock_key#3){+.+.}-{4:4}, at: dev_set_promiscuity+0x10e/0x260 [ 1609.247105][ C0] lec:lec_tx_timeout: lec0 [ 1609.255054][T16873] other info that might help us debug this: [ 1609.255065][T16873] context-{5:5} [ 1609.255076][T16873] 3 locks held by syz.0.11700/16873: [ 1609.263497][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1609.271014][T16873] #0: ffffffff90341a58 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1609.381204][T16873] #1: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1609.390275][T16873] #2: ffff88805bfd4370 (&dev_addr_list_lock_key#7/2){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 1609.400473][T16873] stack backtrace: [ 1609.404202][T16873] CPU: 1 UID: 0 PID: 16873 Comm: syz.0.11700 Tainted: G W syzkaller #0 PREEMPT(full) [ 1609.404227][T16873] Tainted: [W]=WARN [ 1609.404233][T16873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1609.404245][T16873] Call Trace: [ 1609.404253][T16873] [ 1609.404261][T16873] dump_stack_lvl+0xe8/0x150 [ 1609.404286][T16873] __lock_acquire+0xec1/0x2cf0 [ 1609.404311][T16873] ? __show_trace_log_lvl+0x478/0x550 [ 1609.404338][T16873] ? dev_set_promiscuity+0x10e/0x260 [ 1609.404361][T16873] lock_acquire+0x106/0x350 [ 1609.404381][T16873] ? dev_set_promiscuity+0x10e/0x260 [ 1609.404405][T16873] ? dump_stack_lvl+0x135/0x150 [ 1609.404426][T16873] ? __might_resched+0x378/0x4d0 [ 1609.404452][T16873] __mutex_lock+0x1a3/0x1550 [ 1609.404472][T16873] ? dev_set_promiscuity+0x10e/0x260 [ 1609.404497][T16873] ? __pfx__printk+0x10/0x10 [ 1609.404512][T16873] ? __wake_up_klogd+0xe6/0x120 [ 1609.404530][T16873] ? __netdev_printk+0x36f/0x480 [ 1609.404548][T16873] ? dev_set_promiscuity+0x10e/0x260 [ 1609.404572][T16873] ? __pfx___mutex_lock+0x10/0x10 [ 1609.404592][T16873] ? netdev_info+0x11e/0x180 [ 1609.404610][T16873] ? __pfx_netdev_info+0x10/0x10 [ 1609.404625][T16873] ? _printk+0xdd/0x130 [ 1609.404639][T16873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1609.404659][T16873] dev_set_promiscuity+0x10e/0x260 [ 1609.404683][T16873] ? __pfx_vlan_dev_change_rx_flags+0x10/0x10 [ 1609.404708][T16873] __dev_set_promiscuity+0x515/0x710 [ 1609.404732][T16873] ? netdev_info+0x11e/0x180 [ 1609.404749][T16873] netif_set_promiscuity+0x50/0xe0 [ 1609.404774][T16873] dev_set_promiscuity+0x126/0x260 [ 1609.404805][T16873] br_manage_promisc+0x180/0x560 [ 1609.404832][T16873] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 1609.404851][T16873] __dev_set_promiscuity+0x515/0x710 [ 1609.404874][T16873] ? __hw_addr_add_ex+0x361/0x650 [ 1609.404901][T16873] __dev_set_rx_mode+0x17c/0x260 [ 1609.404925][T16873] dev_uc_add+0xc8/0x120 [ 1609.404940][T16873] vlan_dev_open+0x3e5/0x5e0 [ 1609.404964][T16873] __dev_open+0x44d/0x830 [ 1609.404985][T16873] ? __pfx___dev_open+0x10/0x10 [ 1609.405004][T16873] ? __dev_change_flags+0x1b0/0x690 [ 1609.405028][T16873] ? __local_bh_enable_ip+0xd0/0x130 [ 1609.405053][T16873] __dev_change_flags+0x1f7/0x690 [ 1609.405078][T16873] ? __pfx___dev_change_flags+0x10/0x10 [ 1609.405105][T16873] rtnl_newlink_create+0x587/0xb70 [ 1609.405129][T16873] ? __pfx___nla_validate_parse+0x10/0x10 [ 1609.405149][T16873] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1609.405174][T16873] ? __pfx___mutex_lock+0x10/0x10 [ 1609.405197][T16873] ? ns_capable+0x89/0xe0 [ 1609.405220][T16873] rtnl_newlink+0x166a/0x1bb0 [ 1609.405246][T16873] ? __pfx_rtnl_newlink+0x10/0x10 [ 1609.405266][T16873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1609.405294][T16873] ? kasan_quarantine_put+0xbb/0x1f0 [ 1609.405318][T16873] ? lockdep_hardirqs_on+0x7a/0x110 [ 1609.405338][T16873] ? nlmon_xmit+0xb0/0x100 [ 1609.405358][T16873] ? kmem_cache_free+0x180/0x630 [ 1609.405387][T16873] ? __lock_acquire+0x6b5/0x2cf0 [ 1609.405409][T16873] ? __dev_queue_xmit+0x2b6/0x3950 [ 1609.405426][T16873] ? __local_bh_enable_ip+0xd0/0x130 [ 1609.405447][T16873] ? lockdep_hardirqs_on+0x7a/0x110 [ 1609.405466][T16873] ? __dev_queue_xmit+0x2b6/0x3950 [ 1609.405481][T16873] ? __local_bh_enable_ip+0xd0/0x130 [ 1609.405502][T16873] ? __dev_queue_xmit+0x2b6/0x3950 [ 1609.405520][T16873] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1609.405547][T16873] ? __pfx_rtnl_newlink+0x10/0x10 [ 1609.405567][T16873] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1609.405589][T16873] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1609.405610][T16873] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1609.405630][T16873] ? ref_tracker_free+0x693/0x840 [ 1609.405655][T16873] ? __pfx_ref_tracker_free+0x10/0x10 [ 1609.405682][T16873] netlink_rcv_skb+0x232/0x4b0 [ 1609.405705][T16873] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1609.405727][T16873] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1609.405754][T16873] ? netlink_deliver_tap+0x2e/0x1b0 [ 1609.405776][T16873] ? netlink_deliver_tap+0x2e/0x1b0 [ 1609.405807][T16873] netlink_unicast+0x75c/0x8e0 [ 1609.405831][T16873] netlink_sendmsg+0x813/0xb40 [ 1609.405858][T16873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1609.405882][T16873] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1609.405904][T16873] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1609.405930][T16873] ____sys_sendmsg+0x972/0x9f0 [ 1609.405955][T16873] ? __might_fault+0xaf/0x130 [ 1609.405979][T16873] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1609.406007][T16873] ? import_iovec+0x73/0xa0 [ 1609.406024][T16873] ___sys_sendmsg+0x2a5/0x360 [ 1609.406047][T16873] ? __lock_acquire+0x6b5/0x2cf0 [ 1609.406069][T16873] ? __pfx____sys_sendmsg+0x10/0x10 [ 1609.406096][T16873] ? futex_wake+0x4ac/0x580 [ 1609.406120][T16873] ? __fget_files+0x2a/0x420 [ 1609.406140][T16873] ? __fget_files+0x3a0/0x420 [ 1609.406164][T16873] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1609.406189][T16873] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1609.406217][T16873] ? rcu_is_watching+0x15/0xb0 [ 1609.406244][T16873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1609.406260][T16873] do_syscall_64+0x15f/0xf80 [ 1609.406280][T16873] ? trace_irq_disable+0x3b/0x140 [ 1609.406296][T16873] ? clear_bhb_loop+0x40/0x90 [ 1609.406314][T16873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1609.406332][T16873] RIP: 0033:0x7f0c90f9cdd9 [ 1609.406348][T16873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1609.406362][T16873] RSP: 002b:00007f0c91e47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1609.406380][T16873] RAX: ffffffffffffffda RBX: 00007f0c91216090 RCX: 00007f0c90f9cdd9 [ 1609.406393][T16873] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1609.406404][T16873] RBP: 00007f0c91032d69 R08: 0000000000000000 R09: 0000000000000000 [ 1609.406415][T16873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1609.406425][T16873] R13: 00007f0c91216128 R14: 00007f0c91216090 R15: 00007fff695d5c38 [ 1609.406443][T16873] SYZFAIL: failed to send rpc fd=3 want=1336 sent=0 n=-1 (errno 32: Broken pipe) [ 1610.037974][T16873] dummy0: entered promiscuous mode [ 1610.052881][T16873] bridge0: port 2(vlan1) entered blocking state [ 1610.063412][T16873] bridge0: port 2(vlan1) entered disabled state [ 1610.070308][T16873] vlan1: entered allmulticast mode [ 1610.075537][T16873] bridge0: entered allmulticast mode [ 1610.091725][T22310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1610.099992][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1610.188656][T22298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1610.197017][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1610.266469][T16873] vlan1: left allmulticast mode [ 1610.271905][T16873] bridge0: left allmulticast mode [ 1610.346469][T16873] bridge0: left promiscuous mode [ 1610.351613][T16873] vlan0: left promiscuous mode [ 1610.356450][T16873] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:609 [ 1610.365797][T16873] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 16873, name: syz.0.11700 [ 1610.375055][T16873] preempt_count: 201, expected: 0 [ 1610.380094][T16873] RCU nest depth: 0, expected: 0 [ 1610.385084][T16873] INFO: lockdep is turned off. [ 1610.389905][T16873] Preemption disabled at: [ 1610.389917][T16873] [] dev_uc_del+0x56/0x110 [ 1610.400312][T16873] CPU: 0 UID: 0 PID: 16873 Comm: syz.0.11700 Tainted: G W syzkaller #0 PREEMPT(full) [ 1610.400346][T16873] Tainted: [W]=WARN [ 1610.400354][T16873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1610.400368][T16873] Call Trace: [ 1610.400376][T16873] [ 1610.400385][T16873] dump_stack_lvl+0xe8/0x150 [ 1610.400417][T16873] __might_resched+0x378/0x4d0 [ 1610.400447][T16873] ? dev_uc_del+0x56/0x110 [ 1610.400467][T16873] __mutex_lock+0x11c/0x1550 [ 1610.400495][T16873] ? __pfx__printk+0x10/0x10 [ 1610.400516][T16873] ? __netdev_printk+0x36f/0x480 [ 1610.400537][T16873] ? dev_set_promiscuity+0x10e/0x260 [ 1610.400566][T16873] ? __pfx___mutex_lock+0x10/0x10 [ 1610.400590][T16873] ? netdev_info+0x11e/0x180 [ 1610.400612][T16873] ? __pfx_netdev_info+0x10/0x10 [ 1610.400633][T16873] ? __kasan_kmalloc+0x93/0xb0 [ 1610.400654][T16873] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1610.400685][T16873] dev_set_promiscuity+0x10e/0x260 [ 1610.400715][T16873] ? __pfx_vlan_dev_change_rx_flags+0x10/0x10 [ 1610.400743][T16873] __dev_set_promiscuity+0x515/0x710 [ 1610.400774][T16873] ? lock_release+0x4b/0x3c0 [ 1610.400808][T16873] netif_set_promiscuity+0x50/0xe0 [ 1610.400838][T16873] dev_set_promiscuity+0x126/0x260 [ 1610.400869][T16873] br_manage_promisc+0x4db/0x560 [ 1610.400901][T16873] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 1610.400925][T16873] __dev_set_promiscuity+0x515/0x710 [ 1610.400954][T16873] ? __hw_addr_del_ex+0x73/0x4e0 [ 1610.400975][T16873] __dev_set_rx_mode+0x17c/0x260 [ 1610.401005][T16873] dev_uc_del+0xc0/0x110 [ 1610.401025][T16873] vlan_dev_stop+0x12f/0x230 [ 1610.401052][T16873] ? __pfx_vlan_dev_stop+0x10/0x10 [ 1610.401079][T16873] __dev_close_many+0x36d/0x6e0 [ 1610.401102][T16873] ? stack_depot_save_flags+0x33/0x810 [ 1610.401133][T16873] ? __pfx___dev_close_many+0x10/0x10 [ 1610.401156][T16873] ? kasan_save_stack+0x4d/0x60 [ 1610.401185][T16873] ? call_rcu+0xee/0x890 [ 1610.401212][T16873] ? rtnl_newlink_create+0x843/0xb70 [ 1610.401241][T16873] ? rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1610.401265][T16873] ? netlink_rcv_skb+0x232/0x4b0 [ 1610.401291][T16873] ? netlink_unicast+0x75c/0x8e0 [ 1610.401315][T16873] ? netlink_sendmsg+0x813/0xb40 [ 1610.401344][T16873] netif_close_many+0x225/0x420 [ 1610.401371][T16873] ? __pfx_netif_close_many+0x10/0x10 [ 1610.401401][T16873] unregister_netdevice_many_notify+0xb50/0x22c0 [ 1610.401430][T16873] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1610.401454][T16873] ? rcu_is_watching+0x15/0xb0 [ 1610.401483][T16873] ? trace_irq_enable+0x3b/0x140 [ 1610.401511][T16873] rtnl_newlink_create+0x84b/0xb70 [ 1610.401540][T16873] ? __pfx___nla_validate_parse+0x10/0x10 [ 1610.401564][T16873] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1610.401594][T16873] ? __pfx___mutex_lock+0x10/0x10 [ 1610.401624][T16873] ? ns_capable+0x89/0xe0 [ 1610.401652][T16873] rtnl_newlink+0x166a/0x1bb0 [ 1610.401686][T16873] ? __pfx_rtnl_newlink+0x10/0x10 [ 1610.401710][T16873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1610.401747][T16873] ? kasan_quarantine_put+0xbb/0x1f0 [ 1610.401784][T16873] ? lockdep_hardirqs_on+0x7a/0x110 [ 1610.401809][T16873] ? nlmon_xmit+0xb0/0x100 [ 1610.401831][T16873] ? kmem_cache_free+0x180/0x630 [ 1610.401867][T16873] ? __lock_acquire+0x6b5/0x2cf0 [ 1610.401894][T16873] ? __dev_queue_xmit+0x2b6/0x3950 [ 1610.401916][T16873] ? __local_bh_enable_ip+0xd0/0x130 [ 1610.401942][T16873] ? lockdep_hardirqs_on+0x7a/0x110 [ 1610.401966][T16873] ? __dev_queue_xmit+0x2b6/0x3950 [ 1610.401984][T16873] ? __local_bh_enable_ip+0xd0/0x130 [ 1610.402009][T16873] ? __dev_queue_xmit+0x2b6/0x3950 [ 1610.402033][T16873] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1610.402066][T16873] ? __pfx_rtnl_newlink+0x10/0x10 [ 1610.402091][T16873] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1610.402118][T16873] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1610.402144][T16873] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1610.402169][T16873] ? ref_tracker_free+0x693/0x840 [ 1610.402199][T16873] ? __pfx_ref_tracker_free+0x10/0x10 [ 1610.402232][T16873] netlink_rcv_skb+0x232/0x4b0 [ 1610.402261][T16873] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1610.402287][T16873] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1610.402320][T16873] ? netlink_deliver_tap+0x2e/0x1b0 [ 1610.402347][T16873] ? netlink_deliver_tap+0x2e/0x1b0 [ 1610.402377][T16873] netlink_unicast+0x75c/0x8e0 [ 1610.402408][T16873] netlink_sendmsg+0x813/0xb40 [ 1610.402441][T16873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1610.402470][T16873] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1610.402498][T16873] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1610.402530][T16873] ____sys_sendmsg+0x972/0x9f0 [ 1610.402560][T16873] ? __might_fault+0xaf/0x130 [ 1610.402589][T16873] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1610.402623][T16873] ? import_iovec+0x73/0xa0 [ 1610.402645][T16873] ___sys_sendmsg+0x2a5/0x360 [ 1610.402673][T16873] ? __lock_acquire+0x6b5/0x2cf0 [ 1610.402701][T16873] ? __pfx____sys_sendmsg+0x10/0x10 [ 1610.402734][T16873] ? futex_wake+0x4ac/0x580 [ 1610.402765][T16873] ? __fget_files+0x2a/0x420 [ 1610.402798][T16873] ? __fget_files+0x3a0/0x420 [ 1610.402827][T16873] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1610.402859][T16873] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1610.402892][T16873] ? rcu_is_watching+0x15/0xb0 [ 1610.402925][T16873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1610.402947][T16873] do_syscall_64+0x15f/0xf80 [ 1610.402971][T16873] ? trace_irq_disable+0x3b/0x140 [ 1610.402991][T16873] ? clear_bhb_loop+0x40/0x90 [ 1610.403014][T16873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1610.403033][T16873] RIP: 0033:0x7f0c90f9cdd9 [ 1610.403053][T16873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1610.403072][T16873] RSP: 002b:00007f0c91e47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1610.403096][T16873] RAX: ffffffffffffffda RBX: 00007f0c91216090 RCX: 00007f0c90f9cdd9 [ 1610.403113][T16873] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1610.403127][T16873] RBP: 00007f0c91032d69 R08: 0000000000000000 R09: 0000000000000000 [ 1610.403141][T16873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1610.403154][T16873] R13: 00007f0c91216128 R14: 00007f0c91216090 R15: 00007fff695d5c38 [ 1610.403178][T16873] [ 1610.403189][T16873] dummy0: left promiscuous mode [ 1611.038889][T16860] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1611.050523][T16860] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1611.061681][T16860] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1611.167235][T16860] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1611.194041][T16860] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1611.214249][T16860] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1611.291771][T16860] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1611.303017][T16860] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1611.358090][T16860] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1611.491635][T22298] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1611.500316][T22298] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1611.509424][T22298] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 1611.525677][T22298] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1611.535200][T22298] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1611.544094][T22298] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 1611.563704][T22298] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1611.572151][T22298] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1611.581174][T22298] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 1611.593728][T22298] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1611.614367][T22298] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1611.631337][T22298] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 1611.986181][T22310] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1612.044105][T22310] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1612.132761][T22310] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1612.204465][T22310] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1612.315536][T22310] vlan2: left promiscuous mode [ 1612.320374][T22310] bridge_slave_0: left promiscuous mode [ 1612.326351][T22310] bridge0: port 1(vlan2) entered disabled state [ 1612.537336][T22310] bond0 (unregistering): Released all slaves [ 1613.181953][ T5491] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1613.630400][T22310] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1613.641145][T22310] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1613.652855][T22310] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1613.682449][ T5491] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1613.778115][T22310] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1613.789813][T22310] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1613.801318][T22310] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1613.877762][T22310] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1613.888681][T22310] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1613.901426][T22310] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1613.941215][T22310] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1613.951878][T22310] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1613.961691][T22310] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1614.012333][ T5491] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1614.288028][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1614.296126][ C0] lec:lec_tx_timeout: lec0 [ 1614.480295][T22310] bond0 (unregistering): left promiscuous mode [ 1614.487106][T22310] bond0 (unregistering): Released all slaves [ 1614.496737][T22310] bond1 (unregistering): Released all slaves [ 1614.508316][T22310] bond2 (unregistering): Released all slaves [ 1614.520348][ T5491] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1614.595412][T22310] tipc: Disabling bearer [ 1614.600917][T22310] tipc: Left network mode [ 1614.841900][T22310] dummy0: left promiscuous mode [ 1614.848704][T22310] hsr_slave_0: left promiscuous mode [ 1614.854949][T22310] hsr_slave_1: left promiscuous mode [ 1614.894777][T22310] pim6reg (unregistering): left allmulticast mode [ 1615.094153][ T5491] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1615.468139][ T5491] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1615.549479][T22310] IPVS: stop unused estimator thread 0... [ 1615.893110][ T5491] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1616.265610][ T5491] 8021q: adding VLAN 0 to HW filter on device eth12