last executing test programs: 4.06780241s ago: executing program 2 (id=9397): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r2, &(0x7f0000000040)={0xfffffffffffffffe, 0x20, 0x4, 0x20, 0x3}, 0x48) syz_emit_ethernet(0x46, &(0x7f0000000340)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x88}}}}}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_mreq(r3, 0x29, 0x4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000001100)={0x11, 0x3, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5, r7}, 0x38) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000ac0)={0x3, 0x7}, 0x4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x1, 0x4) setsockopt$MRT_ADD_MFC(r9, 0x0, 0xcc, 0x0, 0x3c) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r8, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[{0x5658, 0x5, 0x9, 0x8}, {0x2, 0x0, 0x7, 0x1ff}, {0xe2, 0x7f, 0x6c, 0x3}, {0xd0a, 0x3, 0x9, 0x6}, {0x6, 0x7, 0x81, 0x4}]}, 0x10) 3.843580239s ago: executing program 2 (id=9400): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffff6f81}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x17}]}}}]}, 0x44}}, 0x0) 3.563053932s ago: executing program 2 (id=9404): sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004007770616e330000000c0017000201aa8d"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r1 = epoll_create1(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000fdffffff00000500000a400000000c0a010400000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d65b0000140000001100010000000000000000000700000a"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140300000000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31400000000900010073797a310000000014000380100000800c00018006000100d1030000140000001100010000000000000000000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x2e, 0x9, 0x2, 0x25dfdbff, {0x3}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000c040) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x78, r6, 0x0, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'virt_wifi0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'gretap0\x00'}]}, 0x78}}, 0x4042) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x6, 0xb, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r8 = epoll_create(0xffff) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r1, &(0x7f00000001c0)={0x8800000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r8, &(0x7f00000002c0)={0x8002015}) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000140), &(0x7f0000000180)=0xc) socket(0x2b, 0x5, 0x9eb) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r7) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f00000015c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001580)={&(0x7f0000000540)={0x1040, r9, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0x1004, 0xa8, @random="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"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x1040}, 0x1, 0x0, 0x0, 0x480}, 0x8812) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 3.337843071s ago: executing program 2 (id=9408): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f00000002c0)=0x3) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x8, 0x726d852a, 0xf726}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x8c, r2, 0x30c, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5443}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8001}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40804}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a91010000060a0b0400000000000000000200000064010480600101800a0001006d617463680000005001028008000240000000000b000100706f6c696379000038010300ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6070000004e8278ad51f6d123a616cf3eb44b275fe6bc6bf402a3f9335458bb7a92f23fc0aa88f2495ff70157ea6b29f7fab11ec362920cab3350208c749f342b38e0df9334cea6fe1e331d76beb7094102d5d409992dcd236e3fd7a8785f97ae9d01b0822c161a491bef0501f8e81ddd66d1b676e8c9f0b2159c2cc0b069669b5af555f644c39bedd627181d27d9c185aae5d910550f08822c6fec60302779b9e812403a2ff826781b4c761bd14eb7515ae224260c9534891afdd05d18b2ffe91f52766a0b9fe3955bfb1866142e7c1caceb88de7d6e8a5c08ce052bb461f0c7ee914ca5c98c19442d0262a6d04a8e3e29360a9b5871812e08542d54775f5843d70b15871bc247e30d66b83560c014f5000000000900010073797a30000000000900020073797a32"], 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f00000002c0)=0x3) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x8, 0x726d852a, 0xf726}) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x8c, r2, 0x30c, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5443}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8001}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40804}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) (async) 3.08433569s ago: executing program 2 (id=9413): syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x3, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0xc, 0x10, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x44, 0x0, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_BYTES={0xc}, @NFACCT_QUOTA={0xc}, @NFACCT_PKTS={0xc}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}}, 0x0) (async) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x44, 0x0, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_BYTES={0xc}, @NFACCT_QUOTA={0xc}, @NFACCT_PKTS={0xc}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}}, 0x0) 2.952381288s ago: executing program 2 (id=9416): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) (async) write$tun(r3, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0xd, 0x2e, 0x0, @rand_addr=0x64010102, @broadcast}}}, 0x22) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='pids.events\x00', 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f0000000340)=0xc80, 0x8) (async) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a00000001900010000000000010000001c140000fe00000100000000840013000000030000000000000000000000000000000000000000000000000000000f000000000000000f0000000000000000000000050000000000000f0f00000001000000000000000000000000002000000000000000000000000000010000000000000003000000010000000000000f0c00000000000000000000000f0000000000"], 0xa0}}, 0x48014) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000380)=[@in={0x2, 0x4e23, @multicast1}], 0x10) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r9, 0x5, 0xe, 0x0, &(0x7f0000000000)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000000127bd7200fedbdf2500001000", @ANYRES32=0x0, @ANYBLOB="15010000000000002800128009000100766c616e000000001800028006000100030000000c000200110000001300000008000500", @ANYRES32=r7, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 1.928046709s ago: executing program 3 (id=9433): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)={0x14, 0x5e, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.732645589s ago: executing program 3 (id=9435): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000180)={0x5c, 0x10, '\x00', [@enc_lim={0x4, 0x1, 0x40}, @generic={0xa0, 0x10, "1029903a0cc926b5b94e65c10837c192"}, @pad1, @hao={0xc9, 0x10, @empty}, @jumbo={0xc2, 0x4, 0x3}, @hao={0xc9, 0x10, @private0}, @generic={0x2, 0x34, "06a0fcb83ec91118633c6a48fe6a1d5d71f88c5734a55c2e22a5ab6485ad170701030f8d3a8657558e34f6285feecbe9153caae2"}, @ra={0x5, 0x2, 0x7}, @pad1, @pad1]}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8}}, 0x0, 0x4}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f0000000080), &(0x7f00000000c0)=""/102}, 0x20) 1.452259155s ago: executing program 3 (id=9439): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0xa573c61e948a51bb, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x6}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x8, 0x3}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'batadv_slave_0\x00', 0x10}) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}}}, 0x10) (async) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x4}}, 0x10) sendmsg$tipc(r3, &(0x7f00000006c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044094}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000b80)={0x40, 0x1, 0x44f2ade573ff9a8a}, 0x10) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x3, 0x2, 0xf, 0x6, 0x7, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0x3, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$netlink(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) (async) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r13, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r15, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x20040084) 1.321012913s ago: executing program 4 (id=9440): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="840000001500000126bd7000ffdbdf250a38d4fd", @ANYRES32=r2, @ANYBLOB="14000200ff01000000000000000000000000000114000100ff01000000000000000000000000000108000900bbafa30c14000600c0010000020000000a0000000900000014ea9a0739251969e3ff43ad78000600070000001500000005000000070000001400060052c60000"], 0x84}, 0x1, 0xba01}, 0x4) 1.192565275s ago: executing program 4 (id=9441): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x30, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {{0x12}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x8008) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x9, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x4, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5a}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x7}}, [], {{0x6, 0x1, 0x3, 0x8}, {0x6, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.131730434s ago: executing program 3 (id=9443): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x44, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6}, @L2TP_ATTR_UDP_DPORT={0x6}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40010}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x0) 1.098485869s ago: executing program 0 (id=9444): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x3}, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x4045}, 0x0) 1.043074579s ago: executing program 1 (id=9445): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0xf, 0x4, 0xc, 0x0, 0x8001, 0x9, 0x3ff, 0x7, 0x0}, &(0x7f0000000080)=0x20) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000180)={r1, 0x8, 0x1}, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r2) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002180)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4020040}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0000006700000008000000ad00000008680100", @ANYRES32=0x1, @ANYBLOB="8100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000003000000040000000500"/24, @ANYRES32, @ANYBLOB="09307d6a0e148981ad707c8109465f716c65be6e8570487e585dcd7d60c83a6c4c8361062446f4f5bc5c58562c43b38c4d557951dab95269ab90b920e96b236776d7b59f5e1c0e93280a0264ffe4767bcd"], 0x50) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) 939.591647ms ago: executing program 4 (id=9446): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@random="e90c610faca2", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x18, 0x0, @wg=@data={0x4, 0x485cb6fc, 0x7fff}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x5}}}}}}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newqdisc={0x94, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}, @TCA_RATE={0x6, 0x5, {0xd9, 0xfb}}]}, 0x94}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x23, &(0x7f00000000c0)=0x3, 0x4) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x58, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_bridge\x00'}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 937.366945ms ago: executing program 3 (id=9447): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e32, 0xffffffff, @loopback, 0xfffffffe}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) close(r1) close(0x3) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48010) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a300000000074000000090a010400000000000000000700000008000a40000000000900020073797a30000000f7ec0b1b0073797a3000000000080005400000000d300012802c0001800c000100636f756e746572001c0002800c00014000000000000000020c00024000000000000000050800034000000110140000001000010000000000000000000084000a"], 0xbc}}, 0x20050800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000037c00000400fc800c00018006"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711093000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) 902.846003ms ago: executing program 0 (id=9448): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x7, 0x2, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0xbb, &(0x7f00000001c0)=""/187, 0x40f00, 0x0, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000440)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0x5, 0x1, 0x5}, 0x10}, 0x94) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipv4_newroute={0x12, 0x1a, 0x1, 0x0, 0x200000, {0x2, 0x20, 0x20, 0x0, 0xfc, 0x0, 0x0, 0x4}}, 0x1c}}, 0x20000000) 879.957191ms ago: executing program 1 (id=9449): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}}, 0x0) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) 731.505933ms ago: executing program 3 (id=9450): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000012c0), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x20000253) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x14, 0x0, 0x6, 0x401}, 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r3) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x66}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x6000, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="070060000009384800000000000200000014000180060001000200000008000300ac1414aa2f3de296f0a4b826bd2bfd46118cf3be6a5e222410d6e4cdd32d79b724a584ffff282c9097e946d0dcd490fd6e054463ac5c28945e2a5b21d0d4ebe96391597a7127c3c6f31ef4ab4e1e10000000007afa86d1cfa36604cb0000000000"], 0x28}}, 0x4040) 680.351119ms ago: executing program 1 (id=9451): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x1, 0x3, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000080) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@struct={0x5, 0x1, 0x0, 0xf, 0x0, 0xe06, [{0xd, 0x4, 0xa}]}]}, {0x0, [0x2e, 0x0, 0x2e, 0x0, 0x2e, 0x0]}}, 0x0, 0x38, 0x0, 0xa}, 0x28) 647.682359ms ago: executing program 0 (id=9452): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r2, &(0x7f0000000e00)=[{{&(0x7f00000002c0)={0xa, 0x4e22, 0xf58, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4040884) 596.15038ms ago: executing program 4 (id=9453): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe8000000000000000000000000000bb"], 0xf8}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x54}}]}, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100e70300000800034000000001140000001100010000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f00000003c0)='ipvlan0\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="660a00000000000061119d0000000000850000006300000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90) 456.557508ms ago: executing program 0 (id=9454): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x17a, 0x17a, 0x6, [@enum64={0x4, 0x1, 0x0, 0x13, 0x1, 0x1, [{0xb, 0x9, 0x34}]}, @ptr={0xb}, @const={0xd, 0x0, 0x0, 0xa, 0x5}, @enum={0xb, 0x5, 0x0, 0x6, 0x4, [{0xa, 0x9}, {0x9, 0x475}, {0xd, 0x4}, {0xe, 0x4}, {0xe, 0x7}]}, @datasec={0x2, 0x4, 0x0, 0xf, 0x3, [{0x4, 0x80000000, 0x5}, {0x5, 0x8, 0x6}, {0x1, 0x8, 0x1c807685}, {0x5, 0x7ff, 0xfffffffb}], "7fdcaf"}, @enum64={0x1, 0x6, 0x0, 0x13, 0x0, 0x9, [{0x4, 0x4, 0x10}, {0x5, 0x2, 0x5}, {0xf, 0x81, 0x7fffffff}, {0xd, 0x7, 0x6}, {0xd, 0xb86, 0x401}, {0x8, 0x937, 0xffff}]}, @datasec={0x6, 0x5, 0x0, 0xf, 0x3, [{0x3, 0x8}, {0x4, 0x3, 0x8}, {0x4, 0x5, 0x8}, {0x1, 0x5, 0x7fffffff}, {0x5, 0x1, 0x9}], "838b68"}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x2b, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x1, 0x1}]}, {0x0, [0x2e, 0x2e, 0x2e, 0x0]}}, &(0x7f00000003c0)=""/214, 0x19a, 0xd6, 0x1, 0x0, 0x10000}, 0x28) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000}, 0x50) ioctl$FIONCLEX(r0, 0x5450) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 432.436625ms ago: executing program 1 (id=9455): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9beb010018000000000000000c0000000c000000050000000d000000000000100600000000005f5f00"], &(0x7f00000004c0)=""/246, 0x29, 0xf6, 0x1, 0xba}, 0x28) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x6011, r1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0xd1383000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000040)={0x1100, 0x2, 0x8, 0x10003}) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0xffffffff) r3 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000240)={0x0, 0x4, 0x0, 0xb9b1, 0x9, 0x4e, 0x1, 0x4, {0x0, @in6={{0xa, 0x4e20, 0x6, @private0, 0x2}}, 0x0, 0x8, 0x0, 0x1}}, &(0x7f00000000c0)=0xb0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'tunl0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x1, 0x40, 0xb4, 0xe, {{0x24, 0x4, 0x1, 0x8, 0x90, 0x68, 0x0, 0x9, 0x29, 0x0, @broadcast, @private=0xa010101, {[@timestamp_prespec={0x44, 0x24, 0xbd, 0x3, 0x2, [{@multicast2, 0xc}, {@private=0xa010100, 0xf6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@broadcast, 0x3}]}, @generic={0x56c97afe901e1b61, 0xf, "fbaacd1ae22f2b02478833ab4e"}, @lsrr={0x83, 0x13, 0xbd, [@private=0xa010102, @loopback, @multicast1, @rand_addr=0x64010102]}, @generic={0x44, 0x5, "1b5c61"}, @timestamp_addr={0x44, 0xc, 0xf9, 0x1, 0x3, [{@multicast2, 0x86}]}, @generic={0x89, 0x12, "06658b9aaa0f38295a1fe688a1c461c1"}, @lsrr={0x83, 0x13, 0x34, [@empty, @rand_addr=0x64010101, @remote, @rand_addr=0x64010100]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x80000000, 0x504, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@delchain={0x34, 0x65, 0x400, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xc}, {0x8, 0xfff2}, {0x9, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0xa}, @TCA_CHAIN={0x8, 0xb, 0xb79d}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtaction={0x6c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x800) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000380)={0x2, 'netpci0\x00', {0xc}, 0xfffd}) 331.801297ms ago: executing program 4 (id=9456): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x58, 0x0, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0) (async, rerun: 64) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 64) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async, rerun: 32) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x300}) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async, rerun: 64) r3 = socket$igmp6(0xa, 0x3, 0x3a) (rerun: 64) getsockopt$MRT6(r3, 0x29, 0xce, 0x0, &(0x7f0000000040)) (async, rerun: 64) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) (async, rerun: 64) writev(r1, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x1a, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf2502"], 0x114}], 0x1}, 0x0) (async, rerun: 32) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000080)=0x7, 0x4) 309.427461ms ago: executing program 0 (id=9457): socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1c}}, 0x0) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f00000003c0)={0x3, @bcast}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 190.535145ms ago: executing program 1 (id=9458): r0 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x4a, 0x0, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x4a, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) (async) listen(r2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) writev(r0, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r4 = socket$inet6(0xa, 0x1, 0x0) socket$inet(0x2, 0x2, 0x1) (async) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @dev}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)="c2be", 0x2}, {&(0x7f0000000040)="96bc14585c62", 0x6}], 0x2, &(0x7f00000004c0)=[@ip_tos_int={{0x14, 0x0, 0x34}}], 0x18, 0x1000000}, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x68) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x380000, @empty}, 0x1b) (async) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x380000, @empty}, 0x1b) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000080c0)=@newtaction={0x18, 0x31, 0x901, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendto$inet6(r4, &(0x7f0000000140)="102181a44bac1e33746033d9fc0bcbc10c1c03e6834fd4e403b00f6eabd3c17922a8af0fb5cc4de099378a1de6f3228fd525a1bafaa964011c0fb8596d7b53de7f1b8098a007c878896643ef2e9192083f341efefd41b3223217dde54c0f489785fa5ce5d806f4b74a4e69f62a8d46903fbb01943053010fb09167ffe9f1512b4a114b6b4719bbbe864daafe04aa24197df5b6b558a1a79fcf2221df", 0x9c, 0x0, 0x0, 0x0) 24.011609ms ago: executing program 0 (id=9459): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x110, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e22, 0x3, 0x4e23, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0xee00}, {@in6=@remote, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0x1}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x3, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @mark={0xc, 0x15, {0x35075b, 0x3b}}]}, 0x110}}, 0x4000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x1, 0x8000, 0x10000, 0x800, {{0xa, 0x4, 0x3, 0x0, 0x28, 0x67, 0x0, 0x7f, 0x2f, 0x0, @remote, @broadcast, {[@lsrr={0x83, 0xb, 0x98, [@local, @empty]}, @end, @end, @lsrr={0x83, 0x7, 0x95, [@multicast2]}]}}}}}) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007002abd700000000000fe80000000064a00000000000000001be0000001000000000000000000000000ffff00004e2200000000000002000000", @ANYRES32=r2, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000030000000000000000b40000000000000200000000000000010000007ffffffe0000000000000000000006000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200010000000000000014000e00ff020000000000000000000000000001"], 0x104}}, 0x0) 23.637292ms ago: executing program 4 (id=9460): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='xfrm0\x00', 0x10) r2 = socket$inet6(0xa, 0x4, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000fc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)=ANY=[@ANYBLOB="94abccb1c5ac7619a4", @ANYRES16=r3, @ANYBLOB="01002ebd700007dcdf250c00000008000300ebf95126cfd31e860279da4e977849f5ea5b68e5df0477e89d964e32d89982aeeb52000083d0a998097e18027c2afd8d1e4fe15ca0c10a66c756e988de0ca16b88b2a9fe69bd4574950cc6506a6cfb41fb7cc8997be70cca8d3a782cd49eca633914b831faefa7e61e9ad1f049f52e8efe38f2e06f4c3a78b4cfc0115cb1dc7c9ee29507acdce04844220590aed34e5bd9f1", @ANYRES32=r5, @ANYBLOB="04000b00"], 0x20}, 0x1, 0x0, 0x0, 0x4040801}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x5, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) (async) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='xfrm0\x00', 0x10) (async) socket$inet6(0xa, 0x4, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) (async) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000fc0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)=ANY=[@ANYBLOB="94abccb1c5ac7619a4", @ANYRES16=r3, @ANYBLOB="01002ebd700007dcdf250c00000008000300ebf95126cfd31e860279da4e977849f5ea5b68e5df0477e89d964e32d89982aeeb52000083d0a998097e18027c2afd8d1e4fe15ca0c10a66c756e988de0ca16b88b2a9fe69bd4574950cc6506a6cfb41fb7cc8997be70cca8d3a782cd49eca633914b831faefa7e61e9ad1f049f52e8efe38f2e06f4c3a78b4cfc0115cb1dc7c9ee29507acdce04844220590aed34e5bd9f1", @ANYRES32=r5, @ANYBLOB="04000b00"], 0x20}, 0x1, 0x0, 0x0, 0x4040801}, 0x4000) (async) 0s ago: executing program 1 (id=9461): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r0, 0x89e2) (async, rerun: 64) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1a5, 0xf}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xcbe}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x295}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x100, r1, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7e3, 0x5c}}}}, [@NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8d}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x63}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x7f]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x700}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x778a788a, 0x9, 0x5, 0x9, 0xc2]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x26d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x81}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7ff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x7}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffff8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2f}]}, @NL80211_ATTR_CQM={0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000340)={0x2, [0x0, 0x0]}, &(0x7f0000000380)=0xc) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f00000003c0)={r4, 0x8e, "6abb9bad40f5f73f1286c4dfed28e1266b8bf69b69cf873f2018c9ba79bb24d14d38e9a41f65ea7ef2d8e3594711f5cbf2c30bea9dab4867c9bc3dbf30642220c9389a740f156f6aa342096eba6e9c2a4d6c9bc0c6029ecd86ff2eb86d190c7a48c5aa308923e739ab867982bfb34c3cb0ea79f6e17c096e47cad140747de978bab702249c0d240ff87503a6dddb"}, &(0x7f0000000480)=0x96) r5 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000500)=0x10, 0x0) getsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, &(0x7f0000000540), &(0x7f0000000580)=0x4) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)=@delqdisc={0xac, 0x25, 0x207, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0x4, 0xa}, {0xc, 0xa}}, [@TCA_STAB={0x60, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x45, 0x1, 0x15, 0xffff, 0x2, 0x10000, 0x5, 0x6}}, {0x10, 0x2, [0x3, 0x401, 0x2, 0x10, 0x1, 0xf5]}}, {{0x1c, 0x1, {0x9, 0x2, 0x4, 0xfffffffe, 0x0, 0x1, 0x5, 0x7}}, {0x12, 0x2, [0x9, 0xfff, 0x9, 0x3, 0xeb, 0x3b, 0x9]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x10000}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_RATE={0x6, 0x5, {0x0, 0xb}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_RATE={0x6, 0x5, {0x4, 0x9}}]}, 0xac}, 0x1, 0x0, 0x0, 0x2404c805}, 0x10) (async) r6 = socket(0x5, 0x6, 0x3) ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f0000000740)) setsockopt$inet6_tcp_int(r6, 0x6, 0x3, &(0x7f0000000780)=0x5, 0x4) (async) sendto$l2tp(r6, &(0x7f00000007c0)="762a511d81702655a1637f5f11fd8e3b3fd42f84ef2f3872c46ced8d0c44224d0958903816642d0561554a6dfa8b6618c14164dad63b2f8150f76bac911c001f6d66623bcb164e51afa5b6952b3d9936340094ba07cc2d271723ee260a21d9e11d32765b564cb2", 0x67, 0x4804, &(0x7f0000000840)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r6) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000cc0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c80)={&(0x7f0000000900)={0x344, r7, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}, @TIPC_NLA_SOCK={0x94, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffe000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7530000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x21}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0xe1f}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @remote, 0x6}}}}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_MEDIA={0xb4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe5b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3e2b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x73}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x57}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5222}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}]}, 0x344}}, 0x20004044) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8982, &(0x7f0000000d00)={0x7, 'ip6erspan0\x00', {0x8}, 0x2}) (async, rerun: 64) ioctl$sock_netrom_SIOCADDRT(r6, 0x890b, &(0x7f0000000d40)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xffffffff, 0x0, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000e80)={'syztnl0\x00', &(0x7f0000000e00)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0x2, 0x6, 0x28, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x700, 0x8000, 0x6, 0x80000001}}) sendmsg$nl_route(r6, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)=@getstats={0x1c, 0x5e, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r8, 0x4}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40090}, 0x800) (async) sendmsg$FOU_CMD_GET(r6, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40041}, 0x80) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000010c0), r6) sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x147a63b310062af1}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x28, r9, 0x106, 0x70bd25, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x0) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), r6) sendmsg$NL80211_CMD_LEAVE_OCB(r6, &(0x7f00000012c0)={&(0x7f00000011c0), 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x20, r10, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1c}}}}, [""]}, 0x20}}, 0x88c4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg(r5, &(0x7f00000018c0)={&(0x7f0000001300)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x2}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001380)="4b8088d338fc00854ec19d217e9d4a6004abfd74871e10cba2a294a584ecdbeaa79eb49398453cab373e66095884d6fef06fb3c4a036a9e2", 0x38}, {&(0x7f00000013c0)="37ff06fdaf0428da36a660bbf05cd82b91ba552a195517e272a26964d6a8a6d62da52e72ef8e6d44d68000562e80037551d7266380f5efe1a98c43c66cc504f758eeab5fceef84e12fa54e7d3c53281132dad1a36684e9ea991632528a36dce8659be4614cd32c53826c50c56c3da82a6c16ff44a999649c8662c5042364caa7c178c8ab8cfef02c5237bf2dd4b282ac8fc3939dd90ded84b723bebe44dc221765ab37e75adb554a6123e9e46e6bd812fefd36202ad7c10c2b6dd74651696b010612ecdb6ed0710aee90c4b30d66bfeb239eeecbd856689511af3acd7f283d77fe6725267001d4fa5a3381ab7ffaef2f97cfc43bcaaa38fac6", 0xf9}, {&(0x7f00000014c0)="51de379f1b4ea9d97b175b1800038b154eb687c2e87dc554d5a6056d3f0052c617694aa391b9f1a7548b7e9a404212c56965cb491ee0d7cefa7611244fa44bc169cd436b95607a66f7ad5a4df921d1f5fbff2313d121798f700bc3f41c02e61e160462ce568ed8ed81969bfefb6fb1108746eacf2ac80ad009561acd3693d756184d210fa501593574a5cfee58d0864dd2a1861e97eb8ff72891ead55482cd58aeb2366641051535b27c3036f98765611b7ce6a816648d86048bdf35dff36ff5f55e843509b1e6a387d1ad7d458a507f3c", 0xd1}, {&(0x7f00000015c0)="ec2710361a88fae430a28841305fb9a6174b631be4fc06ddb3a0e31301e160b9afd9d54d7c72a7b48e6eec9d64a1b28a34407ff49a4de18bf7966c959bcd00515be80e9119a78fad148353c3d1a0ef2b5d4a4cfd", 0x54}, {&(0x7f0000001640)="d8a63b00d815d9076c222e0351abff89f2215e53dd670bfa71ce0abbc276992aa4bc94e1f7f8a8334dc41a367956", 0x2e}, {&(0x7f0000001680)="ed30cbb404a9f95b13d81f299498e5f99b7cbed67bee2ff488acb9f2439879", 0x1f}, {&(0x7f00000016c0)="d487b92e1d1775583af95f769af04d37e906d71cc372e7cc64d92a6387797b9b96f313d799de0d434a5ee7ad73197aa3ff0aabd6c4684012a97cb99b67c94d2cdaef97f7644b43fac6d95a31de61a12fb9db339e88f14b09f6903dec6d34e00a8e74e306", 0x64}], 0x7, &(0x7f00000017c0)=[{0xe0, 0x6, 0x6, "5cf3b30c4969aae83c29d180bd00725e27f023f8c564e7c13029d2bc09d877525b083cb4b0886b60a9cc5c5a0df9cfdcbdfe07ce076447c47c618ab27e3dd837602a908b13c94b16245408eb4088e1098001525105d34854735380f9e426a20ad2d8573b91409246856caf93f0491a6532d530484f9b6ef3b291b27f60227845196a8b6be1d8d82cf5cf9a0624faee43d63fc692c1ad79530d7dc132b950b32a3ded85783bf74c273470709be99499f853d31b8759d261325c8685b1809b4d9192f337ea6b0086d3bb69aba18f1c60"}], 0xe0}, 0x40) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000001900)='scalable', 0x8) kernel console output (not intermixed with test programs): vsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 973.918392][T10591] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.935541][T10591] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 973.946541][T10591] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.958677][ T2318] sctp: [Deprecated]: syz.1.7666 (pid 2318) Use of int in maxseg socket option. [ 973.958677][ T2318] Use struct sctp_assoc_value instead [ 974.019876][T10591] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 974.055567][T10591] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.120452][ T2329] xt_hashlimit: size too large, truncated to 1048576 [ 974.128075][ T2325] __nla_validate_parse: 14 callbacks suppressed [ 974.128098][ T2325] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7669'. [ 974.130272][ T2325] netlink: 'syz.3.7669': attribute type 21 has an invalid length. [ 974.162980][ T2325] netlink: 'syz.3.7669': attribute type 22 has an invalid length. [ 974.209272][ T2325] netlink: 'syz.3.7669': attribute type 23 has an invalid length. [ 974.224106][ T2325] netlink: 'syz.3.7669': attribute type 25 has an invalid length. [ 974.251852][ T2325] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7669'. [ 974.376134][ T2342] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 974.414196][ T2342] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 974.542639][ T2354] .: renamed from bridge_slave_1 (while UP) [ 974.584861][ T2354] xt_HMARK: proto mask must be zero with L3 mode [ 974.619160][ T2358] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7677'. [ 974.847872][ T2369] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7681'. [ 974.851921][ T2371] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 975.187042][ T30] audit: type=1800 audit(1770328782.251:9): pid=2392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7688" name="memory.events" dev="tmpfs" ino=1364 res=0 errno=0 [ 975.198965][ T2390] netlink: 'syz.1.7689': attribute type 12 has an invalid length. [ 975.237844][ T30] audit: type=1804 audit(1770328782.281:10): pid=2392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.7688" name="/newroot/262/memory.events" dev="tmpfs" ino=1364 res=1 errno=0 [ 975.284269][ T2390] sit0: entered promiscuous mode [ 975.290171][ T2390] netlink: 1 bytes leftover after parsing attributes in process `syz.1.7689'. [ 975.468705][ T2415] tipc: New replicast peer: 255.255.255.255 [ 975.492572][ T2415] tipc: Enabled bearer , priority 10 [ 975.513858][ T2418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7696'. [ 975.552070][ T2415] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7694'. [ 975.788317][ T2442] siw: device registration error -23 [ 976.061531][ T2465] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7705'. [ 976.092860][ T2466] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 976.221394][ T2472] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 976.291865][ T2472] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 976.341319][ T2480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7710'. [ 976.619533][T17421] tipc: Node number set to 3428437764 [ 976.882390][ T2522] SET target dimension over the limit! [ 976.968623][ T2528] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7719'. [ 977.013561][ T2506] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 977.768302][ T2581] validate_nla: 3 callbacks suppressed [ 977.768325][ T2581] netlink: 'syz.4.7733': attribute type 2 has an invalid length. [ 977.840696][ T2590] netlink: 'syz.1.7735': attribute type 7 has an invalid length. [ 978.053270][ T2601] bond2: Removing last arp target with arp_interval on [ 978.123912][ T2614] netlink: 'syz.3.7742': attribute type 11 has an invalid length. [ 978.248648][ T2614] team0: Port device team_slave_0 removed [ 978.722756][ T2665] x_tables: duplicate underflow at hook 1 [ 978.743840][ T2665] x_tables: duplicate underflow at hook 3 [ 978.919974][ T2672] gre1: entered promiscuous mode [ 978.929506][ T2672] gre1: entered allmulticast mode [ 978.944739][ T2679] bond0: (slave gre0): Error: Device type is different from other slaves [ 979.060033][ T2686] nbd: illegal input index -8454144 [ 979.149166][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5810 ms [ 979.157280][ C0] lec:lec_tx_timeout: lec0 [ 979.462093][ T2718] __nla_validate_parse: 15 callbacks suppressed [ 979.462114][ T2718] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7766'. [ 979.498120][ T2718] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7766'. [ 979.644378][ T2729] syzkaller0: entered promiscuous mode [ 979.667894][ T2729] syzkaller0: entered allmulticast mode [ 980.090662][ T2760] netlink: 120 bytes leftover after parsing attributes in process `syz.1.7774'. [ 980.102368][ T2760] netlink: 'syz.1.7774': attribute type 1 has an invalid length. [ 980.119581][ T2760] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7774'. [ 980.129913][ T2762] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 980.153768][ T2760] netlink: 'syz.1.7774': attribute type 21 has an invalid length. [ 980.162037][ T2767] netlink: 'syz.2.7776': attribute type 83 has an invalid length. [ 980.209564][ T2760] netlink: 'syz.1.7774': attribute type 22 has an invalid length. [ 980.232077][ T2760] netlink: 'syz.1.7774': attribute type 23 has an invalid length. [ 980.240462][ T2769] IPVS: set_ctl: invalid protocol: 4 100.1.1.1:20004 [ 980.250056][ T2760] netlink: 'syz.1.7774': attribute type 25 has an invalid length. [ 980.271486][ T2760] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7774'. [ 980.829576][ T2804] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7785'. [ 980.910202][ T2817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7788'. [ 980.936568][ T2809] bond3: entered promiscuous mode [ 980.959878][ T2809] macvlan4: entered promiscuous mode [ 980.970812][ T2809] macvlan4: entered allmulticast mode [ 980.978903][ T2824] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7790'. [ 980.983241][ T2809] bond3: (slave macvlan4): Opening slave failed [ 981.144481][ T2833] netlink: 'syz.0.7792': attribute type 10 has an invalid length. [ 981.297432][ T2847] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 981.304264][ T2847] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 981.455724][ T2861] bond5 (unregistering): Released all slaves [ 981.620323][ T2877] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 981.857049][ T2891] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 981.917731][ T2895] netlink: 88 bytes leftover after parsing attributes in process `syz.3.7807'. [ 982.212569][ T2919] openvswitch: netlink: IP tunnel TTL not specified. [ 982.270840][ T2920] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7814'. [ 982.593592][ T2942] bond3: entered promiscuous mode [ 982.941691][ T2965] syzkaller1: entered promiscuous mode [ 982.955825][ T2962] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 982.963675][ T2965] syzkaller1: entered allmulticast mode [ 982.970108][ T2968] @0Ù: renamed from bond_slave_1 (while UP) [ 983.067220][ T2971] sctp: [Deprecated]: syz.4.7827 (pid 2971) Use of int in maxseg socket option. [ 983.067220][ T2971] Use struct sctp_assoc_value instead [ 983.571895][ T3005] openvswitch: netlink: Duplicate key (type 32). [ 983.894287][ T3019] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.901579][ T3019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 983.966709][ T3028] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 984.125095][ T3044] syzkaller0: entered promiscuous mode [ 984.140745][ T3044] syzkaller0: entered allmulticast mode [ 984.175277][ T3044] dvmrp6: left allmulticast mode [ 984.356548][ T3055] validate_nla: 2 callbacks suppressed [ 984.356570][ T3055] netlink: 'syz.1.7855': attribute type 13 has an invalid length. [ 984.374543][ T3055] netlink: 'syz.1.7855': attribute type 13 has an invalid length. [ 984.469891][ T3066] gre0: entered promiscuous mode [ 984.481988][ T3066] gre0: entered allmulticast mode [ 984.492770][ T3068] netlink: 'syz.0.7858': attribute type 21 has an invalid length. [ 984.521996][ T3068] IPv6: NLM_F_CREATE should be specified when creating new route [ 984.552860][ T3072] __nla_validate_parse: 12 callbacks suppressed [ 984.552883][ T3072] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7860'. [ 984.828975][ T3089] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7864'. [ 984.839715][ T3089] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7864'. [ 985.609575][ T3120] netlink: 'syz.3.7875': attribute type 9 has an invalid length. [ 985.617672][ T3120] netlink: 'syz.3.7875': attribute type 11 has an invalid length. [ 985.626119][ T3120] netlink: 'syz.3.7875': attribute type 12 has an invalid length. [ 985.635002][ T3120] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.7875'. [ 985.646662][ T3120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7875'. [ 985.687856][ T3120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7875'. [ 985.731198][ T3132] nbd: couldn't find a device at index 0 [ 985.745670][ T3132] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7877'. [ 985.786816][ T3132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7877'. [ 986.324950][ T3166] netlink: 412 bytes leftover after parsing attributes in process `syz.4.7886'. [ 986.465527][ T3177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7891'. [ 986.574060][ T3177] 8021q: adding VLAN 0 to HW filter on device bond6 [ 986.612543][ T3180] netlink: 'syz.2.7890': attribute type 2 has an invalid length. [ 986.639933][ T3180] netlink: 'syz.2.7890': attribute type 4 has an invalid length. [ 986.739630][ T3201] netlink: 'syz.1.7896': attribute type 2 has an invalid length. [ 987.053566][ T3223] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 987.093696][ T3219] 8021q: adding VLAN 0 to HW filter on device bond5 [ 987.142401][ T3227] 8021q: adding VLAN 0 to HW filter on device bond6 [ 987.601347][ T3257] atomic_op ffff888079447998 conn xmit_atomic 0000000000000000 [ 987.750219][ T3261] nbd5: detected capacity change from 0 to 127 [ 987.758214][ T52] block nbd5: Receive control failed (result -32) [ 987.762418][ T3175] block nbd5: Send control failed (result -32) [ 987.781721][ T3175] block nbd5: Request send failed, requeueing [ 987.803973][ T25] block nbd5: Dead connection, failed to find a fallback [ 987.819722][ T25] block nbd5: shutting down sockets [ 987.825869][ T25] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 987.838435][ T25] Buffer I/O error on dev nbd5, logical block 0, async page read [ 987.847061][ T3175] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 987.860048][ T3175] Buffer I/O error on dev nbd5, logical block 1, async page read [ 987.868054][ T3175] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 987.879603][ T3175] Buffer I/O error on dev nbd5, logical block 2, async page read [ 987.887530][ T3175] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 987.897416][ T3175] Buffer I/O error on dev nbd5, logical block 3, async page read [ 987.905977][ T3175] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 987.916304][ T3175] Buffer I/O error on dev nbd5, logical block 0, async page read [ 987.928858][ T3175] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 987.938795][ T3268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 987.948712][ T3175] Buffer I/O error on dev nbd5, logical block 1, async page read [ 987.958633][ T3175] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 987.960451][ T3270] Can't find ip_set type p,port [ 987.969311][ T3175] Buffer I/O error on dev nbd5, logical block 2, async page read [ 987.981812][ T3175] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 987.993473][ T3175] Buffer I/O error on dev nbd5, logical block 3, async page read [ 988.005772][ T3175] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 988.015798][ T3175] Buffer I/O error on dev nbd5, logical block 0, async page read [ 988.026089][ T3175] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 988.050412][ T3175] Buffer I/O error on dev nbd5, logical block 1, async page read [ 988.064707][ T3175] ldm_validate_partition_table(): Disk read failed. [ 988.077971][ T3175] Dev nbd5: unable to read RDB block 0 [ 988.085056][ T3175] nbd5: unable to read partition table [ 988.101584][ T3175] ldm_validate_partition_table(): Disk read failed. [ 988.108808][ T3175] Dev nbd5: unable to read RDB block 0 [ 988.120762][ T3175] nbd5: unable to read partition table [ 988.180381][ T3285] 8021q: adding VLAN 0 to HW filter on device bond4 [ 988.188099][ T3285] netlink: 'syz.2.7922': attribute type 1 has an invalid length. [ 988.335444][ T7912] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 988.352475][ T7912] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 988.367637][ T7912] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 988.388687][ T7912] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 988.433156][ T3300] ip6gre2: entered allmulticast mode [ 988.604682][ T3307] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 988.620805][ T3311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 988.855320][ T3322] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 989.057251][ T3336] Cannot find add_set index 0 as target [ 989.200711][ T3346] 8021q: VLANs not supported on ip6_vti0 [ 989.662305][ T3374] hsr_slave_0 (unregistering): left promiscuous mode [ 989.700274][ T3385] syzkaller0: entered promiscuous mode [ 989.730266][ T3385] syzkaller0: entered allmulticast mode [ 990.152364][ T3410] __nla_validate_parse: 19 callbacks suppressed [ 990.152388][ T3410] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7958'. [ 990.180904][ T3410] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7958'. [ 990.194230][ T3410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7958'. [ 990.203902][ T3411] mac80211_hwsim hwsim69 wlan0: entered promiscuous mode [ 990.206356][ T3410] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 990.405527][ T3425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7963'. [ 990.515093][ T3435] validate_nla: 2 callbacks suppressed [ 990.515117][ T3435] netlink: 'syz.0.7966': attribute type 1 has an invalid length. [ 990.551059][ T3435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7966'. [ 990.719693][ T3444] openvswitch: netlink: IP tunnel dst address not specified [ 990.841693][ T3452] netlink: 'syz.0.7971': attribute type 4 has an invalid length. [ 990.860685][ T3456] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7972'. [ 990.880437][ T3456] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7972'. [ 990.898164][ T3460] netlink: 'syz.2.7973': attribute type 1 has an invalid length. [ 990.906840][ T3456] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7972'. [ 990.930728][ T3460] netlink: 'syz.2.7973': attribute type 29 has an invalid length. [ 990.938694][ T3460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7973'. [ 990.995123][ T3462] syzkaller0: entered promiscuous mode [ 991.001481][ T3462] syzkaller0: entered allmulticast mode [ 991.100679][ T3470] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7977'. [ 991.185216][ T3470] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 991.287697][ T3473] netlink: 'syz.4.7978': attribute type 10 has an invalid length. [ 991.397008][ T3484] netlink: 'syz.1.7980': attribute type 4 has an invalid length. [ 991.731872][ T3519] syzkaller0: entered promiscuous mode [ 991.742600][ T3519] syzkaller0: entered allmulticast mode [ 992.086977][ T3544] tc_dump_action: action bad kind [ 992.122279][ T3546] ip6t_srh: unknown srh invflags 4000 [ 992.122320][ T3547] ip6t_srh: unknown srh invflags 4000 [ 992.207002][ T3553] netlink: 'syz.2.8002': attribute type 23 has an invalid length. [ 992.263737][ T3546] : entered promiscuous mode [ 993.238727][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 993.334191][ T3625] xt_CT: No such helper "syz1" [ 993.348201][ T3625] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 993.770271][ T3664] netlink: 'syz.0.8035': attribute type 10 has an invalid length. [ 993.805565][ T3664] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 993.953934][ T3675] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 994.187298][ T3695] bond8: option lp_interval: invalid value (0) [ 994.193759][ T3695] bond8: option lp_interval: allowed values 1 - 2147483647 [ 994.204496][ T3695] bond8 (unregistering): Released all slaves [ 994.226267][ T3690] netlink: 'syz.3.8042': attribute type 1 has an invalid length. [ 994.384814][ T3705] netlink: 'syz.1.8047': attribute type 1 has an invalid length. [ 994.667076][ T3726] x_tables: duplicate underflow at hook 1 [ 994.821650][ T3732] bridge0: port 1(veth0_to_bridge) entered blocking state [ 994.830423][ T3735] openvswitch: netlink: Flow key attr not present in new flow. [ 994.879555][ T3732] bridge0: port 1(veth0_to_bridge) entered disabled state [ 994.890304][ T3732] veth0_to_bridge: entered allmulticast mode [ 994.898843][ T3732] veth0_to_bridge: entered promiscuous mode [ 994.963036][ T3743] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 994.981803][ T3743] syzkaller1: Refused to change device type [ 994.987824][ T3742] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 995.004686][ T3742] syzkaller1: Refused to change device type [ 995.124100][ T3748] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 995.182430][ T3754] __nla_validate_parse: 20 callbacks suppressed [ 995.182453][ T3754] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8060'. [ 995.235740][ T3754] ip6gre1: entered promiscuous mode [ 995.255578][ T3754] ip6gre1: entered allmulticast mode [ 995.298149][T26434] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 995.335547][ T3754] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 995.343032][T26434] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 995.351311][ T5891] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 995.533399][ T5891] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 995.591692][ T3754] bond7: Removing last ns target with arp_interval on [ 995.640433][ T5891] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 995.712423][ T3788] ipt_REJECT: TCP_RESET invalid for non-tcp [ 995.956008][ T3805] openvswitch: netlink: IP tunnel dst address not specified [ 995.974205][ T3805] netlink: 'syz.1.8073': attribute type 10 has an invalid length. [ 995.984568][ T3805] bridge_slave_1: left allmulticast mode [ 995.993766][ T3805] bridge_slave_1: left promiscuous mode [ 996.000304][ T3805] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.018109][ T3807] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8074'. [ 996.031111][ T3805] `: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 996.144779][ T3815] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8077'. [ 996.158169][ T3815] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8077'. [ 996.187138][ T3818] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8079'. [ 996.375221][ T3832] netlink: 148 bytes leftover after parsing attributes in process `syz.0.8082'. [ 996.919414][ T3867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8092'. [ 996.939177][ T3867] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8092'. [ 996.968186][ T3872] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 996.996510][ T3875] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 997.346182][ T3900] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 997.370786][ T3903] netlink: 'syz.3.8103': attribute type 4 has an invalid length. [ 997.916752][ T3943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8111'. [ 998.244956][ T3964] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8115'. [ 998.249279][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 998.262140][ C0] lec:lec_tx_timeout: lec0 [ 998.393714][ T3975] smc: net device team0 applied user defined pnetid SYZ2 [ 998.412587][ T3976] ipvlan2: entered promiscuous mode [ 998.432282][ T3975] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 998.450679][ T3976] netlink: 'syz.3.8118': attribute type 11 has an invalid length. [ 999.410657][ T3991] netlink: 'syz.2.8124': attribute type 4 has an invalid length. [ 999.427814][ T3991] syzkaller1: entered promiscuous mode [ 999.433479][ T3991] syzkaller1: entered allmulticast mode [ 999.469442][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 999.694984][ T4012] netlink: 'syz.0.8128': attribute type 1 has an invalid length. [ 999.846862][ T4021] syzkaller1: entered promiscuous mode [ 999.879213][ T4021] syzkaller1: entered allmulticast mode [ 999.992863][ T4029] tipc: Enabled bearer , priority 0 [ 1000.115614][ T4028] tipc: Disabling bearer [ 1000.194440][ T4045] __nla_validate_parse: 11 callbacks suppressed [ 1000.194463][ T4045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8139'. [ 1000.270643][ T4049] syzkaller0: entered promiscuous mode [ 1000.276390][ T4049] syzkaller0: entered allmulticast mode [ 1000.312580][ T4051] netlink: 'syz.1.8142': attribute type 1 has an invalid length. [ 1000.326564][ T4053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8143'. [ 1000.425507][ T4058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8143'. [ 1000.512612][ T4064] IPv6: sit2: Disabled Multicast RS [ 1000.520830][ T4064] sit2: entered allmulticast mode [ 1000.756827][ T4082] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8152'. [ 1001.366952][ T4113] syzkaller0: entered promiscuous mode [ 1001.372871][ T4113] syzkaller0: entered allmulticast mode [ 1001.550778][ T4130] xt_l2tp: v2 doesn't support IP mode [ 1003.495431][ T4135] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1003.502675][ T4136] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8166'. [ 1003.514674][ T4137] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8166'. [ 1003.810775][ T4159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8173'. [ 1003.905685][ T4162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8174'. [ 1004.070526][ T4172] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8178'. [ 1004.369621][ T4186] +: renamed from syzkaller0 [ 1004.391657][ T4188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8183'. [ 1004.690352][ T4205] delete_channel: no stack [ 1005.316739][ T4242] __nla_validate_parse: 3 callbacks suppressed [ 1005.316760][ T4242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8196'. [ 1005.462381][ T4250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8199'. [ 1005.471455][ T4250] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8199'. [ 1005.499186][ T4250] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8199'. [ 1005.616595][ T4253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8200'. [ 1005.792393][ T4253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8200'. [ 1005.806423][ T4273] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8206'. [ 1005.889609][ T4275] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8207'. [ 1006.122168][ T4294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8209'. [ 1006.212415][ T4299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8213'. [ 1006.375236][ T4299] netlink: 'syz.2.8213': attribute type 5 has an invalid length. [ 1006.682796][ T4319] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1006.856741][ T4339] openvswitch: netlink: Key type 218 is out of range max 32 [ 1006.892455][ T4341] tipc: Enabled bearer , priority 0 [ 1006.967603][ T4340] tipc: Disabling bearer [ 1007.388754][ T4381] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1007.416408][ T4380] netlink: 'syz.4.8238': attribute type 3 has an invalid length. [ 1007.562992][ T4386] pimreg3: entered allmulticast mode [ 1007.896208][ T4411] xt_hashlimit: size too large, truncated to 1048576 [ 1007.898329][ T4409] erspan0: entered promiscuous mode [ 1008.306167][ T4434] xt_hashlimit: size too large, truncated to 1048576 [ 1008.415982][ T4438] sctp: [Deprecated]: syz.2.8256 (pid 4438) Use of int in max_burst socket option deprecated. [ 1008.415982][ T4438] Use struct sctp_assoc_value instead [ 1008.577018][ T4447] C speed is unknown, defaulting to 1000 [ 1008.589773][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1008.770636][ T4458] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1009.061131][ T4447] ip6_vti0 speed is unknown, defaulting to 1000 [ 1010.828107][ T4541] __nla_validate_parse: 18 callbacks suppressed [ 1010.828240][ T4541] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8283'. [ 1010.856415][ T4544] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 1011.232916][ T4543] syzkaller1: entered promiscuous mode [ 1011.238770][ T4543] syzkaller1: entered allmulticast mode [ 1011.809751][ T4585] netlink: 'syz.1.8294': attribute type 1 has an invalid length. [ 1011.978778][ T4585] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1012.095011][ T4594] veth5: entered promiscuous mode [ 1012.123227][ T4594] bond7: (slave veth5): Enslaving as an active interface with a down link [ 1012.160407][ T4602] netlink: 256 bytes leftover after parsing attributes in process `syz.0.8297'. [ 1012.171740][ T4602] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 1012.183250][ T4585] bond7: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1012.326247][ T4610] openvswitch: netlink: IP tunnel dst address not specified [ 1012.489812][ T4623] xt_hashlimit: size too large, truncated to 1048576 [ 1012.514887][ T4625] debugfs: 'KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼ÚÞlS·œ-!' already exists in 'ieee80211' [ 1012.792989][ T4643] IPv6: sit3: Disabled Multicast RS [ 1012.802038][ T4643] sit3: entered allmulticast mode [ 1013.000133][ T4640] syzkaller0: entered promiscuous mode [ 1013.005795][ T4640] syzkaller0: entered allmulticast mode [ 1013.226875][ T4652] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8312'. [ 1013.503929][ T4677] bond6: (slave veth9): Enslaving as an active interface with a down link [ 1013.578854][ T4670] bond6: (slave veth11): Enslaving as an active interface with a down link [ 1014.244044][ T4719] xt_hashlimit: max too large, truncated to 1048576 [ 1015.680459][ T4677] veth13: entered allmulticast mode [ 1015.824060][ T4732] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8332'. [ 1016.007311][ T4740] delete_channel: no stack [ 1016.165702][ T4753] netlink: 'syz.0.8339': attribute type 4 has an invalid length. [ 1016.183415][ T4753] netlink: 'syz.0.8339': attribute type 4 has an invalid length. [ 1016.316344][ T4764] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8341'. [ 1016.672590][ T4780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8345'. [ 1016.855501][ T4788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8348'. [ 1016.994556][ T4794] netlink: 'syz.3.8352': attribute type 1 has an invalid length. [ 1017.009769][ T4793] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8351'. [ 1017.076573][ T4800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8352'. [ 1017.137991][ T4794] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1017.144892][ T4800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8352'. [ 1017.466974][ T4830] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8361'. [ 1017.579883][ T4835] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1017.587261][ T4835] IPv6: NLM_F_CREATE should be set when creating new route [ 1017.594894][ T4835] IPv6: NLM_F_CREATE should be set when creating new route [ 1017.602356][ T4835] IPv6: NLM_F_CREATE should be set when creating new route [ 1017.646104][ T4842] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8364'. [ 1017.679450][ T4835] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1017.692475][ T4842] dvmrp0: entered allmulticast mode [ 1017.702484][ T4845] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1017.847163][ T4853] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8367'. [ 1017.921719][ T4859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8370'. [ 1017.973280][ T4859] netlink: 'syz.4.8370': attribute type 21 has an invalid length. [ 1018.297258][ T4888] sctp: [Deprecated]: syz.3.8376 (pid 4888) Use of int in max_burst socket option deprecated. [ 1018.297258][ T4888] Use struct sctp_assoc_value instead [ 1018.532425][ T4900] sctp: [Deprecated]: syz.2.8383 (pid 4900) Use of int in maxseg socket option. [ 1018.532425][ T4900] Use struct sctp_assoc_value instead [ 1018.605490][ T4907] netlink: 'syz.4.8385': attribute type 2 has an invalid length. [ 1019.204513][ T4950] bond8: option xmit_hash_policy: invalid value (64) [ 1019.221639][ T4950] bond8 (unregistering): Released all slaves [ 1019.475853][ T4968] ipt_REJECT: ECHOREPLY no longer supported. [ 1019.482848][ T4967] syzkaller1: entered promiscuous mode [ 1019.488438][ T4967] syzkaller1: entered allmulticast mode [ 1019.514408][ T4967] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 1019.523943][ T4967] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.884096][ T4974] bridge0: port 2(batadv0) entered blocking state [ 1019.907310][ T4974] bridge0: port 2(batadv0) entered disabled state [ 1019.923604][ T4974] batadv0: entered allmulticast mode [ 1019.938847][ T4974] batadv0: entered promiscuous mode [ 1019.957987][ T4992] netlink: 'syz.2.8409': attribute type 2 has an invalid length. [ 1019.979914][ T4992] nbd: couldn't find a device at index 0 [ 1020.033546][ T4995] syzkaller0: entered promiscuous mode [ 1020.039897][ T4995] syzkaller0: entered allmulticast mode [ 1020.360563][T10591] batman_adv: batadv0: IGMP Querier appeared [ 1020.366711][T10591] batman_adv: batadv0: MLD Querier appeared [ 1020.515457][ T5025] netlink: 'syz.4.8419': attribute type 1 has an invalid length. [ 1020.549104][ T5025] netlink: 'syz.4.8419': attribute type 2 has an invalid length. [ 1020.656093][ T5031] xt_limit: Overflow, try lower: 271964/0 [ 1020.682391][ T5030] netlink: 'syz.3.8422': attribute type 33 has an invalid length. [ 1020.711396][ T5035] nbd: couldn't find a device at index 0 [ 1020.786427][ T5030] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1020.820787][ T5030] bond5 (unregistering): Released all slaves [ 1021.055490][ T5060] netlink: zone id is out of range [ 1021.070083][ T5060] netlink: zone id is out of range [ 1021.126484][ T5058] netlink: set zone limit has 4 unknown bytes [ 1021.525633][ T5073] __nla_validate_parse: 14 callbacks suppressed [ 1021.525655][ T5073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8434'. [ 1021.549335][ T5072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8434'. [ 1021.595666][ T5071] bond7: option miimon: invalid value (18446744073709551585) [ 1021.609191][ T5071] bond7: option miimon: allowed values 0 - 2147483647 [ 1021.644817][ T5071] bond7 (unregistering): Released all slaves [ 1021.758470][ T5072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8434'. [ 1021.768331][ T5073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8434'. [ 1022.139692][ T5092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8443'. [ 1022.811191][ T5104] team_slave_0: entered promiscuous mode [ 1022.817244][ T5104] team_slave_1: entered promiscuous mode [ 1022.855783][ T5104] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 1022.876669][ T5104] team0: Device macvlan6 is already an upper device of the team interface [ 1022.912931][ T5104] team_slave_0: left promiscuous mode [ 1022.918479][ T5104] team_slave_1: left promiscuous mode [ 1023.131720][ T5117] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.8450'. [ 1023.156911][ T5117] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.8450'. [ 1023.463093][ T5135] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.8455'. [ 1023.569805][ T5147] netlink: 'syz.3.8459': attribute type 1 has an invalid length. [ 1023.644819][ T5153] bond5: (slave gretap1): making interface the new active one [ 1023.655667][ T5153] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 1023.799231][ T5165] openvswitch: netlink: Actions may not be safe on all matching packets [ 1023.932587][ T5170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8466'. [ 1023.978074][ T5177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8467'. [ 1024.137703][ T5188] netlink: 'syz.2.8470': attribute type 1 has an invalid length. [ 1024.608027][ T5229] netlink: 'syz.1.8485': attribute type 2 has an invalid length. [ 1024.622092][ T5229] netlink: 'syz.1.8485': attribute type 7 has an invalid length. [ 1024.630888][ T5229] netlink: 'syz.1.8485': attribute type 8 has an invalid length. [ 1024.843447][ T5247] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 1025.869266][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1026.056625][ T5287] bond7: option mode: invalid value (133) [ 1026.073420][ T5287] bond7 (unregistering): Released all slaves [ 1026.382959][ T5300] netlink: 'syz.0.8503': attribute type 5 has an invalid length. [ 1026.516547][ T5310] x_tables: duplicate underflow at hook 1 [ 1026.699402][ T5328] __nla_validate_parse: 8 callbacks suppressed [ 1026.699425][ T5328] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8511'. [ 1026.810425][ T5335] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8512'. [ 1026.846548][ T5338] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8514'. [ 1026.857966][ T5341] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8511'. [ 1026.874696][ T5338] netlink: 'syz.4.8514': attribute type 7 has an invalid length. [ 1026.883169][ T5338] netlink: 'syz.4.8514': attribute type 8 has an invalid length. [ 1026.891383][ T5338] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8514'. [ 1026.941299][ T5344] netlink: 388 bytes leftover after parsing attributes in process `syz.3.8515'. [ 1027.177184][ T5366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8522'. [ 1027.427357][ T5379] netlink: 'syz.3.8525': attribute type 1 has an invalid length. [ 1027.435420][ T5379] netlink: 'syz.3.8525': attribute type 2 has an invalid length. [ 1027.603411][ T5385] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8528'. [ 1027.737104][ T5393] erspan0: refused to change device tx_queue_len [ 1027.750658][ T5393] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1027.751921][ T5402] block nbd6: Unsupported socket: should be TCP or UNIX. [ 1027.820612][ T5402] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8534'. [ 1027.852010][ T5402] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8534'. [ 1027.878460][ T5402] tipc: Enabling of bearer rejected, failed to enable media [ 1027.942742][ T5410] sctp: [Deprecated]: syz.3.8537 (pid 5410) Use of int in max_burst socket option. [ 1027.942742][ T5410] Use struct sctp_assoc_value instead [ 1028.028459][ T5413] IPv6: NLM_F_CREATE should be specified when creating new route [ 1028.078544][ T5413] tipc: Enabled bearer , priority 10 [ 1028.387107][ T5430] C speed is unknown, defaulting to 1000 [ 1028.418826][ T5439] ¾x9ÿ: renamed from bridge_slave_0 [ 1028.643197][ T5446] validate_nla: 2 callbacks suppressed [ 1028.643218][ T5446] netlink: 'syz.2.8550': attribute type 11 has an invalid length. [ 1028.906913][ T5430] ip6_vti0 speed is unknown, defaulting to 1000 [ 1029.909084][ T5516] geneve3: entered promiscuous mode [ 1029.926813][T26432] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 40291 - 0 [ 1029.948002][T26432] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 40291 - 0 [ 1030.006280][T26432] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 40291 - 0 [ 1030.045454][T26432] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 40291 - 0 [ 1031.350283][ T5581] xt_hashlimit: size too large, truncated to 1048576 [ 1031.737860][ T5604] netlink: 'syz.0.8586': attribute type 4 has an invalid length. [ 1031.757569][ T5604] __nla_validate_parse: 16 callbacks suppressed [ 1031.757591][ T5604] netlink: 17 bytes leftover after parsing attributes in process `syz.0.8586'. [ 1031.803341][ T5604] syzkaller0: entered promiscuous mode [ 1031.809125][ T5604] syzkaller0: entered allmulticast mode [ 1032.004613][ T5611] netlink: 272 bytes leftover after parsing attributes in process `syz.1.8589'. [ 1032.031755][ T5620] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8590'. [ 1032.042244][ T5611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8589'. [ 1032.128568][ T5611] bond8: entered promiscuous mode [ 1032.132772][ T5629] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8595'. [ 1032.154953][ T5611] bond8: entered allmulticast mode [ 1032.174057][ T5611] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1032.178056][ T5632] sctp: [Deprecated]: syz.0.8594 (pid 5632) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1032.178056][ T5632] Use struct sctp_sack_info instead [ 1032.258333][ T5622] macvlan3: entered promiscuous mode [ 1032.273341][ T5622] macvlan3: entered allmulticast mode [ 1032.285320][ T5622] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1032.497993][ T5657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8598'. [ 1032.548190][ T5626] ipvlan2: entered promiscuous mode [ 1032.617239][ T5647] nft_compat: unsupported protocol 0 [ 1032.762169][ T5668] netlink: 'syz.4.8602': attribute type 1 has an invalid length. [ 1032.775830][ T5670] ip6t_srh: unknown srh match flags 4000 [ 1032.807625][ T5673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8605'. [ 1032.818969][ T5674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8605'. [ 1032.834689][ T5673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8605'. [ 1032.883318][ T52] block nbd6: Receive control failed (result -107) [ 1032.908882][ T5679] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1033.089123][ T5685] netlink: 'syz.0.8609': attribute type 24 has an invalid length. [ 1033.120295][ T5685] syzkaller0: entered promiscuous mode [ 1033.126383][ T5685] syzkaller0: entered allmulticast mode [ 1033.132432][ T5687] netlink: 54 bytes leftover after parsing attributes in process `syz.2.8610'. [ 1033.297062][ T5691] bridge8: port 1(veth15) entered blocking state [ 1033.307810][ T5691] bridge8: port 1(veth15) entered disabled state [ 1033.316271][ T5691] veth15: entered allmulticast mode [ 1033.325884][ T5691] veth15: entered promiscuous mode [ 1033.335295][ T5694] bridge8: port 2(veth0_to_bond) entered blocking state [ 1033.342934][ T5694] bridge8: port 2(veth0_to_bond) entered disabled state [ 1033.351536][ T5694] veth0_to_bond: entered allmulticast mode [ 1033.360784][ T5694] veth0_to_bond: entered promiscuous mode [ 1033.520897][ T5704] netlink: 'syz.0.8615': attribute type 4 has an invalid length. [ 1033.963046][ T5724] syzkaller0: entered promiscuous mode [ 1034.001325][ T5724] syzkaller0: entered allmulticast mode [ 1034.096214][ T5730] clip:clip_setentry: non-CLIP VCC [ 1036.412470][ T7879] dummy0: left allmulticast mode [ 1036.419406][ T7879] bridge0: port 3(dummy0) entered disabled state [ 1036.481118][ T7879] bridge_slave_1: left allmulticast mode [ 1036.486945][ T7879] bridge_slave_1: left promiscuous mode [ 1036.508738][ T5770] netlink: 'syz.4.8627': attribute type 3 has an invalid length. [ 1036.509666][ T7879] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.569986][ T7879] bridge_slave_0: left allmulticast mode [ 1036.580758][ T7879] bridge_slave_0: left promiscuous mode [ 1036.596816][ T7879] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.643244][ T7879] veth0_to_bond: left allmulticast mode [ 1036.663374][ T7879] veth0_to_bond: left promiscuous mode [ 1036.670677][ T5780] x_tables: unsorted underflow at hook 3 [ 1036.677187][ T7879] bridge4: port 2(veth0_to_bond) entered disabled state [ 1036.690740][ T7879] veth7: left allmulticast mode [ 1036.695754][ T7879] veth7: left promiscuous mode [ 1036.701319][ T7879] bridge4: port 1(veth7) entered disabled state [ 1037.014256][ T5798] __nla_validate_parse: 4 callbacks suppressed [ 1037.014279][ T5798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8634'. [ 1037.519659][ T7879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1037.531026][ T7879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1037.548221][ T7879] bond0 (unregistering): Released all slaves [ 1037.560346][ T7879] bond1 (unregistering): Released all slaves [ 1037.575506][ T7879] bond2 (unregistering): (slave veth11): Releasing active interface [ 1037.588704][ T7879] bond2 (unregistering): (slave veth13): Releasing active interface [ 1037.602094][ T7879] bond2 (unregistering): Released all slaves [ 1037.736695][ T7879] bond3 (unregistering): (slave veth3): Releasing active interface [ 1037.746400][ T7879] bond3 (unregistering): Released all slaves [ 1037.759512][ T7879] bond4 (unregistering): Released all slaves [ 1037.773499][ T7879] bond5 (unregistering): Released all slaves [ 1037.928921][ T7879] bond6 (unregistering): Released all slaves [ 1038.189531][ T7879] : left promiscuous mode [ 1038.214792][T14998] lec:lec_start_xmit: lec0:No lecd attached [ 1038.247146][ T5813] netlink: 'syz.4.8635': attribute type 1 has an invalid length. [ 1038.299161][ T7879] tipc: Disabling bearer [ 1038.329904][ T7879] tipc: Left network mode [ 1038.682271][ T5839] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1038.692423][ T5839] netlink: 'syz.2.8647': attribute type 15 has an invalid length. [ 1038.734669][ T5840] netlink: 80 bytes leftover after parsing attributes in process `syz.4.8646'. [ 1038.786974][ T5846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8646'. [ 1038.888048][ T5845] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8649'. [ 1038.903339][ T5849] netlink: 'syz.2.8650': attribute type 18 has an invalid length. [ 1038.999979][ T5854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8652'. [ 1039.015207][ T5854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8652'. [ 1039.265526][ T5872] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8656'. [ 1039.466602][ T5881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8660'. [ 1039.524630][ T5883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8661'. [ 1039.617457][ T5887] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8662'. [ 1039.769354][ T5893] nbd7: detected capacity change from 0 to 127 [ 1039.777386][ T52] block nbd7: Receive control failed (result -32) [ 1039.783988][ T5834] block nbd7: Send control failed (result -32) [ 1039.822368][ T5834] block nbd7: Request send failed, requeueing [ 1039.854845][ T25] block nbd7: Dead connection, failed to find a fallback [ 1039.862991][ T25] block nbd7: shutting down sockets [ 1039.868368][ T25] blk_print_req_error: 138 callbacks suppressed [ 1039.868388][ T25] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1039.884751][ T25] buffer_io_error: 138 callbacks suppressed [ 1039.884772][ T25] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1039.899193][ T5834] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1039.908699][ T5834] Buffer I/O error on dev nbd7, logical block 1, async page read [ 1039.917071][ T5834] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1039.919927][ T5911] netlink: 'syz.0.8666': attribute type 1 has an invalid length. [ 1039.968427][ T5834] Buffer I/O error on dev nbd7, logical block 2, async page read [ 1039.973098][ T5911] netlink: 'syz.0.8666': attribute type 4 has an invalid length. [ 1040.015093][ T5834] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1040.060764][ T5834] Buffer I/O error on dev nbd7, logical block 3, async page read [ 1040.068751][ T5834] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1040.114660][ T5834] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1040.140658][ T5834] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1040.197162][ T5834] Buffer I/O error on dev nbd7, logical block 1, async page read [ 1040.249570][ T5834] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1040.294991][ T5834] Buffer I/O error on dev nbd7, logical block 2, async page read [ 1040.319222][ T5834] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1040.350198][ T5834] Buffer I/O error on dev nbd7, logical block 3, async page read [ 1040.362575][ T5834] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1040.383605][ T5834] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1040.407197][ T5834] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1040.443636][ T5834] Buffer I/O error on dev nbd7, logical block 1, async page read [ 1040.479872][ T5834] ldm_validate_partition_table(): Disk read failed. [ 1040.487120][ T5834] Dev nbd7: unable to read RDB block 0 [ 1040.520184][ T5834] nbd7: unable to read partition table [ 1040.572439][ T5834] ldm_validate_partition_table(): Disk read failed. [ 1040.582020][ T5834] Dev nbd7: unable to read RDB block 0 [ 1040.588181][ T5834] nbd7: unable to read partition table [ 1040.692556][ T5947] s5ÿÿø: renamed from vlan1 [ 1040.774555][ T7879] hsr_slave_1: left promiscuous mode [ 1040.787300][ T7879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1040.798777][ T7879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1040.820894][ T7879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1040.838666][ T7879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1040.893583][ T7879] veth1_macvtap: left promiscuous mode [ 1040.905200][ T7879] veth0_macvtap: left promiscuous mode [ 1040.918378][ T7879] veth1_vlan: left promiscuous mode [ 1040.923992][ T5965] netlink: 'syz.1.8680': attribute type 1 has an invalid length. [ 1040.924030][ T7879] veth0_vlan: left promiscuous mode [ 1040.932217][ T5965] netlink: 'syz.1.8680': attribute type 1 has an invalid length. [ 1040.947616][ T5965] atomic_op ffff8880576a7998 conn xmit_atomic 0000000000000000 [ 1042.079812][ T50] smc: removing ib device syz0 [ 1042.654387][ T5992] __nla_validate_parse: 4 callbacks suppressed [ 1042.654409][ T5992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8689'. [ 1042.785124][ T5998] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8691'. [ 1042.816457][ T5998] nbd: couldn't find a device at index 0 [ 1043.097310][ T6017] netlink: 'syz.2.8697': attribute type 17 has an invalid length. [ 1043.128944][ T6023] gre2: entered promiscuous mode [ 1043.134263][ T6017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8697'. [ 1043.153174][ T6017] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8697'. [ 1043.165745][ T6023] gre2: entered allmulticast mode [ 1043.229819][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1043.231422][ T6025] netlink: 'syz.3.8699': attribute type 25 has an invalid length. [ 1043.237961][ C0] lec:lec_tx_timeout: lec0 [ 1043.268791][ T6025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8699'. [ 1043.299476][ T6025] netlink: 'syz.3.8699': attribute type 25 has an invalid length. [ 1043.345660][ T6025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8699'. [ 1043.389943][ T6030] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1043.427690][ T6039] x_tables: unsorted underflow at hook 1 [ 1044.272479][ T6071] netlink: 'syz.4.8709': attribute type 1 has an invalid length. [ 1044.280897][ T6071] netlink: 'syz.4.8709': attribute type 1 has an invalid length. [ 1044.288656][ T6071] netlink: 9172 bytes leftover after parsing attributes in process `syz.4.8709'. [ 1044.322126][ T6069] netlink: 'syz.4.8709': attribute type 21 has an invalid length. [ 1044.354055][ T6069] netlink: 'syz.4.8709': attribute type 22 has an invalid length. [ 1044.373604][ T6069] netlink: 'syz.4.8709': attribute type 23 has an invalid length. [ 1044.392461][ T6069] netlink: 'syz.4.8709': attribute type 25 has an invalid length. [ 1044.409490][ T6069] netlink: 'syz.4.8709': attribute type 26 has an invalid length. [ 1044.417458][ T6069] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8709'. [ 1046.414534][ T6068] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1046.592306][ T6083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8714'. [ 1046.625868][ T6084] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1046.660847][ T6083] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1046.678579][ T6087] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1046.721041][ T6092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8717'. [ 1046.832010][ T7879] IPVS: stop unused estimator thread 0... [ 1047.136351][ T6117] batadv1: entered allmulticast mode [ 1047.241901][ T6120] syzkaller0: entered promiscuous mode [ 1047.254103][ T6120] syzkaller0: entered allmulticast mode [ 1047.287919][ T6120] tipc: Enabled bearer , priority 0 [ 1047.376413][ T6125] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1047.403027][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1047.421710][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1047.436049][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1047.444894][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1047.458493][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1047.510795][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1047.559397][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1047.566877][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1047.575483][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1047.588336][ T6119] tipc: Resetting bearer [ 1047.597375][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1047.772599][ T6119] tipc: Disabling bearer [ 1047.803766][ T6136] __nla_validate_parse: 3 callbacks suppressed [ 1047.803788][ T6136] netlink: 116 bytes leftover after parsing attributes in process `syz.3.8729'. [ 1047.877062][ T6130] ip6_vti0 speed is unknown, defaulting to 1000 [ 1047.959190][ T6154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8734'. [ 1048.007436][ T6159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8736'. [ 1048.074004][ T6159] SET target dimension over the limit! [ 1048.085104][ T6163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8736'. [ 1048.130459][ T6162] bridge8: entered allmulticast mode [ 1048.411792][ T6174] netlink: 'syz.3.8741': attribute type 1 has an invalid length. [ 1048.435496][ T6174] netlink: 228 bytes leftover after parsing attributes in process `syz.3.8741'. [ 1048.727586][ T6193] sctp: [Deprecated]: syz.0.8748 (pid 6193) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1048.727586][ T6193] Use struct sctp_sack_info instead [ 1048.744828][ T6191] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8747'. [ 1048.774846][ T6195] sctp: [Deprecated]: syz.0.8748 (pid 6195) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1048.774846][ T6195] Use struct sctp_sack_info instead [ 1048.932375][ T6201] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 1049.197319][ T6215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8753'. [ 1049.254791][ T6217] netlink: 9 bytes leftover after parsing attributes in process `syz.3.8752'. [ 1049.394105][ T6130] chnl_net:caif_netlink_parms(): no params data found [ 1049.547152][ T6235] netlink: 'syz.1.8759': attribute type 1 has an invalid length. [ 1049.603711][ T6238] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1049.619556][ T6238] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1049.636141][ T52] Bluetooth: hci0: command tx timeout [ 1049.666085][ T6235] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1049.711676][ T6234] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1049.718853][ T6234] bond9: (slave vxcan7): The slave device specified does not support setting the MAC address [ 1049.730801][ T6234] bond9: (slave vxcan7): Error -95 calling set_mac_address [ 1049.851458][ T6130] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.860361][ T6130] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.867649][ T6130] bridge_slave_0: entered allmulticast mode [ 1049.877112][ T6130] bridge_slave_0: entered promiscuous mode [ 1049.920679][ T6130] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.929990][ T6130] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.935965][ T6262] netlink: 240 bytes leftover after parsing attributes in process `syz.1.8765'. [ 1049.937777][ T6130] bridge_slave_1: entered allmulticast mode [ 1049.957260][ T6130] bridge_slave_1: entered promiscuous mode [ 1050.004537][ T6265] IPv6: NLM_F_CREATE should be specified when creating new route [ 1050.050028][ T6130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1050.070461][ T6130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1050.118275][ T6273] netlink: 'syz.0.8767': attribute type 10 has an invalid length. [ 1050.127388][ T6273] netlink: 228 bytes leftover after parsing attributes in process `syz.0.8767'. [ 1050.140162][ T6130] team0: Port device team_slave_0 added [ 1050.149793][ T6130] team0: Port device team_slave_1 added [ 1050.180522][ T6277] netlink: 'syz.3.8769': attribute type 8 has an invalid length. [ 1050.197906][ T6130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1050.230625][ T6130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1050.287747][ T6130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1050.307160][ T6130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1050.315442][ T6130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1050.344889][ T6130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1050.469108][ T6130] hsr_slave_0: entered promiscuous mode [ 1050.489943][ T6130] hsr_slave_1: entered promiscuous mode [ 1050.510593][ T6130] debugfs: 'hsr0' already exists in 'hsr' [ 1050.516393][ T6130] Cannot create hsr debugfs directory [ 1050.611859][ T6296] º: renamed from veth1_vlan (while UP) [ 1050.660079][ T6290] netlink: 'syz.3.8773': attribute type 8 has an invalid length. [ 1050.803755][ T6130] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1050.840599][ T6130] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.927515][ T6130] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1050.940499][T18745] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1050.942721][ T6310] netlink: 'syz.1.8778': attribute type 1 has an invalid length. [ 1050.948443][ T6307] netlink: 'syz.1.8778': attribute type 1 has an invalid length. [ 1050.957558][ T6130] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.966051][ T6307] netlink: 'syz.1.8778': attribute type 3 has an invalid length. [ 1050.975115][ T6310] netlink: 'syz.1.8778': attribute type 3 has an invalid length. [ 1051.052035][ T6130] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1051.075897][ T6130] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.122103][ T6317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1051.157210][ T6130] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1051.167584][ T6130] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.426392][ T6130] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1051.451007][ T6130] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1051.480197][ T6130] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1051.504021][ T6130] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1051.565630][ T6338] netlink: 'syz.3.8789': attribute type 58 has an invalid length. [ 1051.708501][ T6130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1051.715740][ T5891] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1051.723811][ T52] Bluetooth: hci0: command tx timeout [ 1051.751172][ T6130] 8021q: adding VLAN 0 to HW filter on device team0 [ 1051.796526][ T7879] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.803770][ T7879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1051.846213][ T7879] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.853464][ T7879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1051.935118][ T6356] vcan1: entered promiscuous mode [ 1051.959097][ T6356] vcan1: entered allmulticast mode [ 1052.020454][ T6363] netlink: 'syz.3.8794': attribute type 11 has an invalid length. [ 1052.036846][ T6361] sctp: [Deprecated]: syz.1.8795 (pid 6361) Use of int in max_burst socket option. [ 1052.036846][ T6361] Use struct sctp_assoc_value instead [ 1052.177326][ T6130] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1052.648407][ T6130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1052.691849][ T6394] wlan1: mtu less than device minimum [ 1052.710668][ T6394] `: (slave wlan1): Error -22 calling dev_set_mtu [ 1053.240876][ T6426] __nla_validate_parse: 14 callbacks suppressed [ 1053.240898][ T6426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8812'. [ 1053.336057][ T6431] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8811'. [ 1053.358042][ T6130] veth0_vlan: entered promiscuous mode [ 1053.384160][ T6130] veth1_vlan: entered promiscuous mode [ 1053.460308][ T6130] veth0_macvtap: entered promiscuous mode [ 1053.473564][ T6130] veth1_macvtap: entered promiscuous mode [ 1053.503072][ T6437] syzkaller0: entered promiscuous mode [ 1053.511249][ T6437] syzkaller0: entered allmulticast mode [ 1053.527144][ T6130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1053.583145][ T6130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1053.598281][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.609042][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.629657][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.638930][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.789628][ T52] Bluetooth: hci0: command tx timeout [ 1054.677151][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 1055.880401][ T52] Bluetooth: hci0: command tx timeout [ 1056.222981][ T6425] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1056.321368][T26432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1056.354790][T26432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1056.438535][ T6470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8821'. [ 1056.475472][T26432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1056.504475][T26432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1056.545978][ T6482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8823'. [ 1056.562685][ T6482] batadv0 (unregistering): left allmulticast mode [ 1056.578230][ T6482] batadv0 (unregistering): left promiscuous mode [ 1056.591413][ T6482] bridge0: port 2(batadv0) entered disabled state [ 1056.667332][ T6485] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8825'. [ 1056.828370][ T6496] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8829'. [ 1057.137829][ T6514] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 1057.321723][ T6521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8833'. [ 1057.338951][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8834'. [ 1057.364645][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8834'. [ 1057.458940][ T6528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8835'. [ 1057.584443][ T6528] bond10: entered promiscuous mode [ 1057.647206][ T6528] bond10: entered allmulticast mode [ 1057.659528][ T6528] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1057.754953][ T6528] macvlan3: entered promiscuous mode [ 1057.768934][ T6528] macvlan3: entered allmulticast mode [ 1057.784300][ T6528] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1058.066204][ T6559] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1058.999641][ T6619] macsec1: entered promiscuous mode [ 1059.228791][ T6627] xt_bpf: check failed: parse error [ 1059.327066][ T6632] tipc: Bearer : already 2 bearers with priority 10 [ 1059.336954][ T6633] __nla_validate_parse: 2 callbacks suppressed [ 1059.336977][ T6633] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8862'. [ 1059.362509][ T6632] tipc: Bearer : trying with adjusted priority [ 1059.410728][ T6632] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1059.429677][ T6632] tipc: Enabled bearer , priority 9 [ 1059.470080][ T6634] tipc: Enabling of bearer rejected, already enabled [ 1059.524841][ T6640] syzkaller0: entered promiscuous mode [ 1059.551272][ T6640] syzkaller0: entered allmulticast mode [ 1059.647398][ T6654] netlink: 168 bytes leftover after parsing attributes in process `syz.2.8867'. [ 1059.726190][ T6656] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8868'. [ 1059.753696][ T6655] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8868'. [ 1059.786573][ T6655] netlink: 21 bytes leftover after parsing attributes in process `syz.0.8868'. [ 1059.832267][ T6655] netlink: 21 bytes leftover after parsing attributes in process `syz.0.8868'. [ 1060.109252][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5430 ms [ 1060.117419][ C0] lec:lec_tx_timeout: lec0 [ 1060.218733][ T6673] syzkaller0: entered promiscuous mode [ 1060.228306][ T6673] syzkaller0: entered allmulticast mode [ 1060.564627][ T6685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8876'. [ 1060.784129][ T6700] syzkaller0: entered promiscuous mode [ 1060.814925][ T6700] syzkaller0: entered allmulticast mode [ 1060.854993][ T6704] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8881'. [ 1061.031959][ T6721] syzkaller0: entered promiscuous mode [ 1061.051916][ T6721] syzkaller0: entered allmulticast mode [ 1061.069322][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1061.092513][ T6724] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8888'. [ 1061.268857][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8887'. [ 1061.708207][ T6747] vlan2: entered promiscuous mode [ 1061.779855][ T6747] vlan2: entered allmulticast mode [ 1061.787264][ T6747] hsr_slave_1: entered allmulticast mode [ 1061.878346][ T6747] syzkaller0: entered promiscuous mode [ 1061.896451][ T6764] xt_TCPMSS: Only works on TCP SYN packets [ 1061.907854][ T6747] syzkaller0: entered allmulticast mode [ 1062.198953][ T6780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1062.449528][ T6794] xt_TCPMSS: Only works on TCP SYN packets [ 1062.967130][ T6831] validate_nla: 1 callbacks suppressed [ 1062.967151][ T6831] netlink: 'syz.1.8915': attribute type 10 has an invalid length. [ 1063.189234][ T6841] Bluetooth: MGMT ver 1.23 [ 1063.407791][ T6862] netlink: 'syz.2.8924': attribute type 1 has an invalid length. [ 1063.515929][ T6862] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1063.558768][ T6867] bond7: (slave geneve2): making interface the new active one [ 1063.610493][ T6867] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 1063.654518][ T7903] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.662590][ T6874] netlink: 'syz.3.8925': attribute type 1 has an invalid length. [ 1063.690253][ T7903] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.711509][ T7903] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.726896][ T7903] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.867705][ T6880] openvswitch: netlink: IP tunnel dst address not specified [ 1064.307092][ T6909] IPVS: Scheduler module ip_vs_sip not found [ 1064.413949][ T6917] xt_socket: unknown flags 0x50 [ 1064.686437][ T6937] __nla_validate_parse: 24 callbacks suppressed [ 1064.686461][ T6937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8948'. [ 1064.716696][ T6938] netlink: 'syz.2.8946': attribute type 1 has an invalid length. [ 1064.770793][ T6938] bond8: entered promiscuous mode [ 1064.778180][ T6938] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1064.838282][ T6933] bond8: (slave bridge9): making interface the new active one [ 1064.870384][ T6933] bridge9: entered promiscuous mode [ 1064.877302][ T6933] bond8: (slave bridge9): Enslaving as an active interface with an up link [ 1064.923220][ T6949] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8951'. [ 1064.977949][ T6949] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8951'. [ 1065.153767][ T6133] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1065.164350][ T6133] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1065.175765][ T6133] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1065.189647][ T6133] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1065.197916][ T6133] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1065.230992][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 1065.232018][ T52] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1065.335490][ T6954] ip6_vti0 speed is unknown, defaulting to 1000 [ 1065.843170][ T6985] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 1065.885366][ T6985] netlink: 256 bytes leftover after parsing attributes in process `syz.4.8962'. [ 1065.939252][ T6987] : entered promiscuous mode [ 1065.959347][ T6987] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8963'. [ 1066.132425][ T6998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8966'. [ 1066.211443][ T6998] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.8966'. [ 1066.320777][ T7002] netlink: 'syz.4.8968': attribute type 10 has an invalid length. [ 1066.337989][ T7011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8969'. [ 1066.694421][ T7029] netlink: 300 bytes leftover after parsing attributes in process `syz.0.8974'. [ 1066.891206][ T7041] syzkaller0: entered promiscuous mode [ 1066.900715][ T7041] syzkaller0: entered allmulticast mode [ 1066.996780][ T6954] chnl_net:caif_netlink_parms(): no params data found [ 1067.194591][ T6954] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.202584][ T6954] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.211014][ T6954] bridge_slave_0: entered allmulticast mode [ 1067.220031][ T6954] bridge_slave_0: entered promiscuous mode [ 1067.229994][ T52] Bluetooth: hci3: command tx timeout [ 1067.239120][ T6954] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.247109][ T6954] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.255339][ T6954] bridge_slave_1: entered allmulticast mode [ 1067.264923][ T6954] bridge_slave_1: entered promiscuous mode [ 1067.313578][ T6954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1067.329276][ T6954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1067.379487][ T6954] team0: Port device team_slave_0 added [ 1067.388246][ T6954] team0: Port device team_slave_1 added [ 1067.401479][ T7060] xt_limit: Overflow, try lower: 271964/0 [ 1067.427398][ T6954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1067.434906][ T6954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1067.461802][ T6954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1067.483431][ T6954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1067.490937][ T6954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1067.518225][ T6954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1067.598291][ T6954] hsr_slave_0: entered promiscuous mode [ 1067.606429][ T6954] hsr_slave_1: entered promiscuous mode [ 1067.613472][ T6954] debugfs: 'hsr0' already exists in 'hsr' [ 1067.620094][ T6954] Cannot create hsr debugfs directory [ 1067.827608][ T7070] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8988'. [ 1067.941525][ T7074] Unsupported ieee802154 address type: 0 [ 1067.957446][ T6954] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1067.969531][ T7075] Unsupported ieee802154 address type: 0 [ 1067.972483][ T6954] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.986196][ T6954] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 46225 - 0 [ 1068.132653][ T6954] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1068.151084][ T6954] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.172020][ T6954] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 46225 - 0 [ 1068.313361][ T6954] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1068.324838][ T6954] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.338748][ T6954] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 46225 - 0 [ 1068.354224][ T7095] SET target dimension over the limit! [ 1068.446069][ T6954] bond0: (slave netdevsim0): Releasing backup interface [ 1068.464151][ T6954] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1068.475330][ T6954] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.486436][ T6954] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 46225 - 0 [ 1068.831980][ T6954] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1068.863285][ T6954] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1068.894499][ T6954] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1068.921205][ T6954] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1068.931910][ T7126] netlink: zone id is out of range [ 1068.937878][ T7126] netlink: zone id is out of range [ 1068.946622][ T7126] netlink: zone id is out of range [ 1068.961613][ T7126] netlink: zone id is out of range [ 1068.967910][ T7126] netlink: zone id is out of range [ 1068.976128][ T7126] netlink: zone id is out of range [ 1068.982421][ T7126] netlink: zone id is out of range [ 1068.991037][ T7126] netlink: set zone limit has 4 unknown bytes [ 1069.151130][ T6954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1069.198624][ T6954] 8021q: adding VLAN 0 to HW filter on device team0 [ 1069.255112][ T7900] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.262309][ T7900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1069.296822][ T7900] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.304226][ T7900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1069.322420][ T52] Bluetooth: hci3: command tx timeout [ 1069.450434][ T7154] Bluetooth: MGMT ver 1.23 [ 1069.502873][ T7152] ip6_vti0 speed is unknown, defaulting to 1000 [ 1070.066106][ T6954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1070.396094][ T7189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9019'. [ 1070.469180][ T7194] netlink: 'syz.1.9020': attribute type 2 has an invalid length. [ 1070.530200][ T7197] xt_ecn: cannot match TCP bits for non-tcp packets [ 1070.708443][ T7190] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 1070.722234][ T7190] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.730149][ T7190] bridge0: port 1(1¾x9ÿ) entered disabled state [ 1070.756460][ T7194] : entered promiscuous mode [ 1070.823598][ T6954] veth0_vlan: entered promiscuous mode [ 1070.948884][ T6954] veth1_vlan: entered promiscuous mode [ 1071.125139][ T7210] syz.4.9025: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1071.183055][ T6954] veth0_macvtap: entered promiscuous mode [ 1071.193139][ T7210] CPU: 0 UID: 0 PID: 7210 Comm: syz.4.9025 Not tainted syzkaller #0 PREEMPT(full) [ 1071.193172][ T7210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1071.193186][ T7210] Call Trace: [ 1071.193196][ T7210] [ 1071.193206][ T7210] dump_stack_lvl+0xe8/0x150 [ 1071.193241][ T7210] warn_alloc+0x249/0x340 [ 1071.193265][ T7210] ? stack_trace_save+0xa9/0x100 [ 1071.193296][ T7210] ? __pfx_warn_alloc+0x10/0x10 [ 1071.193326][ T7210] ? kasan_save_track+0x4f/0x80 [ 1071.193345][ T7210] ? kasan_save_track+0x3e/0x80 [ 1071.193361][ T7210] ? __kasan_kmalloc+0x93/0xb0 [ 1071.193380][ T7210] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 1071.193398][ T7210] ? xskq_create+0x56/0x170 [ 1071.193418][ T7210] ? xsk_setsockopt+0x54c/0x990 [ 1071.193446][ T7210] ? do_sock_setsockopt+0x17c/0x1b0 [ 1071.193469][ T7210] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1071.193493][ T7210] ? do_syscall_64+0xe2/0xf80 [ 1071.193521][ T7210] __vmalloc_node_range_noprof+0x132/0x1730 [ 1071.193580][ T7210] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1071.193610][ T7210] ? __kasan_kmalloc+0x93/0xb0 [ 1071.193638][ T7210] vmalloc_user_noprof+0xad/0xe0 [ 1071.193681][ T7210] ? xskq_create+0xbf/0x170 [ 1071.193702][ T7210] xskq_create+0xbf/0x170 [ 1071.193726][ T7210] xsk_init_queue+0xad/0x110 [ 1071.193759][ T7210] xsk_setsockopt+0x54c/0x990 [ 1071.193793][ T7210] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1071.193823][ T7210] ? __pfx_aa_sk_perm+0x10/0x10 [ 1071.193851][ T7210] ? aa_sock_opt_perm+0xff/0x1a0 [ 1071.193888][ T7210] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1071.193910][ T7210] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1071.193943][ T7210] do_sock_setsockopt+0x17c/0x1b0 [ 1071.193975][ T7210] __x64_sys_setsockopt+0x13d/0x1b0 [ 1071.194009][ T7210] do_syscall_64+0xe2/0xf80 [ 1071.194030][ T7210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.194049][ T7210] ? trace_irq_disable+0x37/0x100 [ 1071.194069][ T7210] ? clear_bhb_loop+0x60/0xb0 [ 1071.194095][ T7210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.194115][ T7210] RIP: 0033:0x7f945bd9aeb9 [ 1071.194135][ T7210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1071.194153][ T7210] RSP: 002b:00007f945cbfa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1071.194176][ T7210] RAX: ffffffffffffffda RBX: 00007f945c015fa0 RCX: 00007f945bd9aeb9 [ 1071.194191][ T7210] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 1071.194204][ T7210] RBP: 00007f945be08c1f R08: 0000000000000004 R09: 0000000000000000 [ 1071.194217][ T7210] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1071.194230][ T7210] R13: 00007f945c016038 R14: 00007f945c015fa0 R15: 00007ffcdd859938 [ 1071.194267][ T7210] [ 1071.194275][ T7210] Mem-Info: [ 1071.406518][ T52] Bluetooth: hci3: command tx timeout [ 1071.456923][ T7216] gtp1: entered promiscuous mode [ 1071.491533][ T7210] active_anon:12930 inactive_anon:0 isolated_anon:0 [ 1071.491533][ T7210] active_file:3215 inactive_file:40258 isolated_file:0 [ 1071.491533][ T7210] unevictable:768 dirty:109 writeback:0 [ 1071.491533][ T7210] slab_reclaimable:13200 slab_unreclaimable:121902 [ 1071.491533][ T7210] mapped:31363 shmem:1384 pagetables:1285 [ 1071.491533][ T7210] sec_pagetables:0 bounce:0 [ 1071.491533][ T7210] kernel_misc_reclaimable:0 [ 1071.491533][ T7210] free:1292562 free_pcp:9579 free_cma:0 [ 1071.582806][ T7210] Node 0 active_anon:51720kB inactive_anon:0kB active_file:12860kB inactive_file:160832kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125452kB dirty:436kB writeback:0kB shmem:4000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14192kB pagetables:4992kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1071.624461][ T7210] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1071.648755][ T7216] gtp1: entered allmulticast mode [ 1071.662856][ T7210] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1071.729983][ T6954] veth1_macvtap: entered promiscuous mode [ 1071.737322][ T7210] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 1071.763991][ T7210] Node 0 DMA32 free:1254712kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:51920kB inactive_anon:0kB active_file:12860kB inactive_file:160832kB unevictable:1536kB writepending:436kB zspages:0kB present:3129332kB managed:2554124kB mlocked:0kB bounce:0kB free_pcp:31276kB local_pcp:17320kB free_cma:0kB [ 1071.833589][ T6954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1071.852695][ T7210] lowmem_reserve[]: 0 0 1 1 1 [ 1071.857502][ T7210] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1071.874257][ T6954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1071.933006][ T7210] lowmem_reserve[]: 0 0 0 0 0 [ 1071.937809][ T7210] Node 1 Normal free:3900304kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:5828kB local_pcp:2752kB free_cma:0kB [ 1071.989206][ T7210] lowmem_reserve[]: 0 0 0 0 0 [ 1072.000767][ T7210] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1072.040258][ T7210] Node 0 DMA32: 7978*4kB (UM) 7190*8kB (UM) 4448*16kB (UM) 202*32kB (UME) 133*64kB (UME) 475*128kB (UM) 524*256kB (UME) 355*512kB (UE) 264*1024kB (UM) 133*2048kB (UME) 39*4096kB (UM) = 1254744kB [ 1072.069811][ T7210] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1072.081638][ T7210] Node 1 Normal: 192*4kB (UM) 58*8kB (UME) 48*16kB (UME) 256*32kB (UME) 97*64kB (UME) 25*128kB (UME) 9*256kB (UM) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 945*4096kB (M) = 3900304kB [ 1072.179293][ T7210] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1072.234176][ T7210] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1072.263750][ T7210] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1072.292565][ T7210] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1072.343846][ T7210] 44853 total pagecache pages [ 1072.348594][ T7210] 0 pages in swap cache [ 1072.354111][ T7210] Free swap = 124996kB [ 1072.365930][ T7210] Total swap = 124996kB [ 1072.396745][ T7230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1072.407470][ T7210] 2097051 pages RAM [ 1072.431155][ T7210] 0 pages HighMem/MovableOnly [ 1072.444705][ T7210] 426622 pages reserved [ 1072.453618][ T7210] 0 pages cma reserved [ 1072.486800][ T7912] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.502448][ T7227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9027'. [ 1072.579072][ T7912] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.588216][ T7912] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.635337][ T7912] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.818511][ T7250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9032'. [ 1072.952657][ T7248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1072.967891][ T7248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1073.156340][T26432] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.189743][T26432] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.257803][ T7262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9035'. [ 1073.271377][ T7258] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 1073.284769][ T7258] bond1 (unregistering): Released all slaves [ 1073.315414][T26432] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.326516][T26432] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.371809][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1073.410154][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1073.469670][ T52] Bluetooth: hci3: command tx timeout [ 1073.516295][ T7271] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9037'. [ 1073.516792][T26432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1073.576978][T26432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1073.616053][ T7274] veth0_to_bridge: entered promiscuous mode [ 1073.633328][ T7273] veth0_to_bridge: left promiscuous mode [ 1074.078822][ T7294] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9043'. [ 1074.418442][ T7315] netlink: 'syz.0.9050': attribute type 3 has an invalid length. [ 1074.468580][ T7315] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9050'. [ 1074.676466][ T7322] syzkaller0: entered promiscuous mode [ 1074.701252][ T7322] syzkaller0: entered allmulticast mode [ 1074.946749][ T7341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9057'. [ 1075.027195][ T7346] netlink: 80 bytes leftover after parsing attributes in process `syz.4.9059'. [ 1075.092683][ T7350] macsec1: entered promiscuous mode [ 1075.161257][ T7351] netlink: 112 bytes leftover after parsing attributes in process `syz.1.9061'. [ 1075.597001][ T7385] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9071'. [ 1075.606678][ T7385] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9071'. [ 1075.671855][ T7390] netlink: 'syz.2.9070': attribute type 11 has an invalid length. [ 1075.745199][ T7393] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1076.102225][ T7405] ip6_vti0 speed is unknown, defaulting to 1000 [ 1076.160241][ T7415] netlink: 'syz.1.9077': attribute type 9 has an invalid length. [ 1076.168314][ T7415] netlink: 'syz.1.9077': attribute type 11 has an invalid length. [ 1076.200474][ T7415] netlink: 'syz.1.9077': attribute type 12 has an invalid length. [ 1076.209338][ T7415] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.9077'. [ 1076.652119][ T7431] syzkaller0: entered promiscuous mode [ 1076.657871][ T7431] syzkaller0: entered allmulticast mode [ 1076.876220][ T7447] netlink: 'syz.1.9087': attribute type 10 has an invalid length. [ 1076.889192][ T7448] netlink: 'syz.2.9088': attribute type 1 has an invalid length. [ 1076.924997][ T7448] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1076.981798][ T7448] bond9: (slave veth19): Enslaving as an active interface with a down link [ 1077.036845][ T7448] veth0_to_bond: left allmulticast mode [ 1077.042872][ T7448] veth0_to_bond: left promiscuous mode [ 1077.049385][ T7448] bridge8: port 2(veth0_to_bond) entered disabled state [ 1077.056862][ T7452] netlink: 'syz.2.9088': attribute type 1 has an invalid length. [ 1077.066328][ T7452] netlink: 'syz.2.9088': attribute type 2 has an invalid length. [ 1077.088108][ T7448] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1077.354685][ T7462] xt_limit: Overflow, try lower: 271964/0 [ 1077.375827][ T7459] netlink: 'syz.1.9091': attribute type 1 has an invalid length. [ 1077.384634][ T7456] netlink: 'syz.1.9091': attribute type 1 has an invalid length. [ 1077.426478][ T7457] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9091'. [ 1077.542676][ T7456] bond11: entered promiscuous mode [ 1077.548597][ T7456] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1078.008049][ T7492] veth0_virt_wifi: default FDB implementation only supports local addresses [ 1078.052262][ T7496] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9104'. [ 1078.110914][ T7491] bond12: entered promiscuous mode [ 1078.161798][ T7499] macvlan3: entered promiscuous mode [ 1078.167509][ T7499] macvlan3: entered allmulticast mode [ 1078.175326][ T7499] bond12: (slave macvlan3): Opening slave failed [ 1078.212535][ T7507] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1078.271323][ T7504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9107'. [ 1078.301501][ T7504] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9107'. [ 1078.581528][ T7530] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.9112'. [ 1078.595826][ T7530] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 1078.731038][ T7532] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1078.866800][ T7547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9117'. [ 1078.964419][ T7539] bond9: (slave veth5): Enslaving as an active interface with a down link [ 1079.008592][ T7532] bond9: (slave veth0_to_bond): making interface the new active one [ 1079.030771][ T7532] veth0_to_bond: entered promiscuous mode [ 1079.041920][ T7532] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1079.059711][ T7547] hsr_slave_0: left promiscuous mode [ 1079.066414][ T7547] hsr_slave_1: left promiscuous mode [ 1079.304609][ T7563] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1079.312868][ T7563] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1079.665654][ T7577] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9126'. [ 1079.760459][ T7581] IPv6: NLM_F_CREATE should be specified when creating new route [ 1079.768428][ T7581] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1079.776153][ T7581] IPv6: NLM_F_CREATE should be set when creating new route [ 1079.783557][ T7581] IPv6: NLM_F_CREATE should be set when creating new route [ 1079.791110][ T7581] IPv6: NLM_F_CREATE should be set when creating new route [ 1080.138108][ T7586] vlan1: entered promiscuous mode [ 1080.179100][ T7586] geneve1: entered promiscuous mode [ 1080.199707][ T7586] vlan1: entered allmulticast mode [ 1080.204978][ T7586] geneve1: entered allmulticast mode [ 1080.408332][ T7601] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1080.602326][ T7611] __nla_validate_parse: 1 callbacks suppressed [ 1080.602349][ T7611] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9137'. [ 1080.651117][ T7619] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9139'. [ 1081.015476][ T7641] lo: left allmulticast mode [ 1081.062253][ T7644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9147'. [ 1081.217748][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1081.235748][ T7655] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9150'. [ 1081.237266][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1081.260603][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1081.271175][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1081.281936][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1081.459956][ T7654] ip6_vti0 speed is unknown, defaulting to 1000 [ 1081.492549][ T7662] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9151'. [ 1081.504068][ T7662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9151'. [ 1081.515859][ T7662] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.523924][ T7662] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.565454][ T7664] netlink: 140 bytes leftover after parsing attributes in process `syz.3.9151'. [ 1081.677356][ T7668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9153'. [ 1081.846858][ T7672] sctp: [Deprecated]: syz.3.9155 (pid 7672) Use of int in max_burst socket option. [ 1081.846858][ T7672] Use struct sctp_assoc_value instead [ 1081.940669][ T7681] netlink: 5496 bytes leftover after parsing attributes in process `syz.2.9157'. [ 1082.093130][ T7687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9159'. [ 1082.183487][ T7687] xt_HMARK: spi-set and port-set can't be combined [ 1082.235722][ T7698] nbd: must specify at least one socket [ 1082.242309][ T7697] nbd: must specify at least one socket [ 1082.955017][ T7654] chnl_net:caif_netlink_parms(): no params data found [ 1083.053257][ T7654] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.061638][ T7654] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.069166][ T7654] bridge_slave_0: entered allmulticast mode [ 1083.076351][ T7654] bridge_slave_0: entered promiscuous mode [ 1083.084689][ T7654] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.092641][ T7654] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.100564][ T7654] bridge_slave_1: entered allmulticast mode [ 1083.107642][ T7654] bridge_slave_1: entered promiscuous mode [ 1083.135129][ T7654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1083.147174][ T7654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1083.179471][ T7654] team0: Port device team_slave_0 added [ 1083.187780][ T7654] team0: Port device team_slave_1 added [ 1083.212496][ T7654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1083.219591][ T7654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1083.246630][ T7654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1083.259309][ T7654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1083.266451][ T7654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1083.293853][ T7654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1083.334454][ T7654] hsr_slave_0: entered promiscuous mode [ 1083.341045][ T7654] hsr_slave_1: entered promiscuous mode [ 1083.347622][ T7654] debugfs: 'hsr0' already exists in 'hsr' [ 1083.354122][ T7654] Cannot create hsr debugfs directory [ 1083.390386][ T5833] Bluetooth: hci5: command tx timeout [ 1083.480810][ T7654] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1083.549712][ T7654] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1083.608030][ T7654] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1083.654766][ T7654] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1083.774579][ T7654] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1083.784596][ T7654] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1083.795620][ T7654] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1083.806485][ T7654] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1083.876498][ T7654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1083.895723][ T7654] 8021q: adding VLAN 0 to HW filter on device team0 [ 1083.911477][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.918588][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1083.934304][T26432] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.941445][T26432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1084.114232][ T7654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1084.156289][ T7654] veth0_vlan: entered promiscuous mode [ 1084.168333][ T7654] veth1_vlan: entered promiscuous mode [ 1084.205124][ T7654] veth0_macvtap: entered promiscuous mode [ 1084.215969][ T7654] veth1_macvtap: entered promiscuous mode [ 1084.234167][ T7654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1084.251211][ T7654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1084.265826][T26432] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.275548][T26432] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.285948][T26432] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.295980][T26432] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.375703][ T7912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.391010][ T7912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.421854][T26432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.430819][T26432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1085.469372][ T5833] Bluetooth: hci5: command tx timeout [ 1087.549277][ T5833] Bluetooth: hci5: command tx timeout [ 1089.630208][ T5833] Bluetooth: hci5: command tx timeout [ 1090.020279][ T50] veth0_to_bond: left promiscuous mode [ 1090.509587][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1102.049855][T14998] lec:lec_start_xmit: lec0:No lecd attached [ 1106.772907][ T7775] __nla_validate_parse: 2 callbacks suppressed [ 1106.772930][ T7775] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9180'. [ 1106.926543][ T7787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9181'. [ 1106.935691][ T7787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9181'. [ 1106.956530][ T7786] syzkaller0: entered promiscuous mode [ 1106.962285][ T7786] syzkaller0: entered allmulticast mode [ 1107.149590][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5100 ms [ 1107.157824][ C0] lec:lec_tx_timeout: lec0 [ 1107.163633][ T7797] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9188'. [ 1107.197078][ T7797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1107.225821][ T7801] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9190'. [ 1107.277421][ T7802] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9190'. [ 1107.439683][ T7811] validate_nla: 4 callbacks suppressed [ 1107.439706][ T7811] netlink: 'syz.4.9192': attribute type 9 has an invalid length. [ 1107.451109][ T7812] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9193'. [ 1107.459878][ T7811] netlink: 'syz.4.9192': attribute type 11 has an invalid length. [ 1107.503768][ T7811] netlink: 'syz.4.9192': attribute type 12 has an invalid length. [ 1107.528220][ T7811] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.9192'. [ 1107.543891][ T7811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9192'. [ 1107.548151][ T7819] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9195'. [ 1107.588832][ T7819] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1107.602602][ T7819] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1107.746138][ T7829] netlink: 'syz.3.9197': attribute type 9 has an invalid length. [ 1107.786849][ T7829] netlink: 'syz.3.9197': attribute type 11 has an invalid length. [ 1107.812112][ T7829] netlink: 'syz.3.9197': attribute type 12 has an invalid length. [ 1107.972211][ T7844] netlink: 'syz.0.9202': attribute type 10 has an invalid length. [ 1107.988331][ T7844] bridge0: port 3(team0) entered blocking state [ 1107.996320][ T7844] bridge0: port 3(team0) entered disabled state [ 1108.004084][ T7844] team0: entered allmulticast mode [ 1108.010712][ T7844] team_slave_0: entered allmulticast mode [ 1108.016479][ T7844] team_slave_1: entered allmulticast mode [ 1108.053452][ T7844] batadv1: entered allmulticast mode [ 1108.082278][ T7844] team0: entered promiscuous mode [ 1108.091239][ T7844] team_slave_0: entered promiscuous mode [ 1108.107007][ T7844] team_slave_1: entered promiscuous mode [ 1108.124878][ T7844] batadv1: entered promiscuous mode [ 1108.135887][ T7856] tipc: Enabling of bearer rejected, already enabled [ 1108.144436][ T50] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1108.153827][ T50] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1108.505494][ T7876] netlink: 'syz.1.9212': attribute type 3 has an invalid length. [ 1108.738435][ T7904] netlink: 'syz.0.9214': attribute type 16 has an invalid length. [ 1108.763132][ T7906] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1108.770436][ T7906] IPv6: NLM_F_CREATE should be set when creating new route [ 1108.777863][ T7906] IPv6: NLM_F_CREATE should be set when creating new route [ 1108.801662][ T7906] netlink: 'syz.3.9218': attribute type 1 has an invalid length. [ 1109.255091][ T7935] syz_tun: entered allmulticast mode [ 1109.320077][ T7935] dvmrp8: entered allmulticast mode [ 1109.336852][ T7935] 8021q: VLANs not supported on xfrm0 [ 1109.356482][ T7935] dvmrp8: left allmulticast mode [ 1109.395730][ T7941] x_tables: unsorted underflow at hook 2 [ 1109.469935][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1109.481790][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1109.490932][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1109.502882][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1109.511703][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1109.522519][ T7932] syz_tun: left allmulticast mode [ 1109.648621][ T7945] ip6_vti0 speed is unknown, defaulting to 1000 [ 1109.682085][ T7951] IPv6: sit1: Disabled Multicast RS [ 1109.700863][ T7951] sit1: entered allmulticast mode [ 1109.887238][ T7954] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1109.910059][ T7954] syzkaller1: Refused to change device type [ 1110.041488][ T7912] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1110.069454][ T7912] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1110.096870][ T7912] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1110.139160][ T7903] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1110.391530][ T7973] bond10: Unable to set peer notification delay as MII monitoring is disabled [ 1110.437436][ T7973] bond10 (unregistering): Released all slaves [ 1110.535739][ T7986] : entered promiscuous mode [ 1110.847395][ T8011] xt_ecn: cannot match TCP bits for non-tcp packets [ 1110.876104][ T8002] nbd: couldn't find a device at index 4 [ 1111.037307][ T7945] chnl_net:caif_netlink_parms(): no params data found [ 1111.103510][ T8019] bond1: Removing last arp target with arp_interval on [ 1111.361141][ T7945] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.368750][ T7945] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.376158][ T7945] bridge_slave_0: entered allmulticast mode [ 1111.401453][ T7945] bridge_slave_0: entered promiscuous mode [ 1111.419870][ T8039] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.427909][ T8039] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.437252][ T8039] bridge0: entered allmulticast mode [ 1111.468319][ T7945] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.476193][ T7945] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.483957][ T7945] bridge_slave_1: entered allmulticast mode [ 1111.492434][ T7945] bridge_slave_1: entered promiscuous mode [ 1111.570712][ T7945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1111.585000][ T8057] A link change request failed with some changes committed already. Interface vlan3 may have been left with an inconsistent configuration, please check. [ 1111.612685][ T7945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1111.629744][ T52] Bluetooth: hci2: command tx timeout [ 1111.683979][ T7945] team0: Port device team_slave_0 added [ 1111.693505][ T7945] team0: Port device team_slave_1 added [ 1111.736420][ T7945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1111.744426][ T7945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1111.772072][ T7945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1111.787005][ T7945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1111.794284][ T7945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1111.820943][ T7945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1111.884232][ T7945] hsr_slave_0: entered promiscuous mode [ 1111.910465][ T7945] hsr_slave_1: entered promiscuous mode [ 1111.917084][ T7945] debugfs: 'hsr0' already exists in 'hsr' [ 1111.930891][ T7945] Cannot create hsr debugfs directory [ 1112.228476][ T7945] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1112.258614][ T7945] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.271829][ T7945] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 40291 - 0 [ 1112.375380][ T7945] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1112.395916][ T8078] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1112.399037][ T7945] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.418891][ T7945] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 40291 - 0 [ 1112.492239][ T8087] validate_nla: 9 callbacks suppressed [ 1112.492263][ T8087] netlink: 'syz.2.9269': attribute type 10 has an invalid length. [ 1112.506952][ T8087] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1112.601777][ T7945] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1112.617211][ T7945] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.633554][ T7945] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 40291 - 0 [ 1112.815947][ T8098] __nla_validate_parse: 26 callbacks suppressed [ 1112.815968][ T8098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9272'. [ 1112.835076][ T7945] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1112.849456][ T7945] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.863629][ T7945] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 40291 - 0 [ 1112.988884][ T8103] tipc: Failed to remove unknown binding: 66,0,0/2886997007:999396892/999396893 [ 1113.003182][ T8103] tipc: Failed to remove unknown binding: 66,0,0/2886997007:999396892/999396893 [ 1113.038653][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9275'. [ 1113.048630][ T8108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9275'. [ 1113.130422][T22682] IPVS: starting estimator thread 0... [ 1113.245793][ T8111] IPVS: using max 36 ests per chain, 86400 per kthread [ 1113.714665][ T52] Bluetooth: hci2: command 0x041b tx timeout [ 1113.942234][T29760] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1113.967024][T29760] CPU: 0 UID: 0 PID: 29760 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1113.967055][T29760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1113.967068][T29760] Call Trace: [ 1113.967077][T29760] [ 1113.967087][T29760] dump_stack_lvl+0xe8/0x150 [ 1113.967120][T29760] dump_header+0xd3/0x4c0 [ 1113.967145][T29760] oom_kill_process+0x3ab/0x970 [ 1113.967171][T29760] out_of_memory+0x106c/0x1410 [ 1113.967189][T29760] ? percpu_ref_put+0x19/0x180 [ 1113.967211][T29760] ? __pfx___mutex_lock+0x10/0x10 [ 1113.967251][T29760] ? __pfx_out_of_memory+0x10/0x10 [ 1113.967266][T29760] ? do_raw_spin_unlock+0xf5/0x210 [ 1113.967300][T29760] try_charge_memcg+0xc53/0x1560 [ 1113.967342][T29760] ? __pfx_try_charge_memcg+0x10/0x10 [ 1113.967358][T29760] ? percpu_ref_tryget+0x15/0x180 [ 1113.967384][T29760] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1113.967414][T29760] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1113.967437][T29760] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1113.967461][T29760] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 1113.967487][T29760] __mem_cgroup_charge+0xab/0x1e0 [ 1113.967517][T29760] filemap_add_folio+0x152/0x530 [ 1113.967551][T29760] __filemap_get_folio_mpol+0x500/0xb00 [ 1113.967582][T29760] filemap_fault+0x968/0x12e0 [ 1113.967614][T29760] ? __pfx_filemap_fault+0x10/0x10 [ 1113.967638][T29760] ? __pfx_filemap_map_pages+0x10/0x10 [ 1113.967672][T29760] __do_fault+0x138/0x390 [ 1113.967695][T29760] do_pte_missing+0x21a2/0x37a0 [ 1113.967713][T29760] ? do_pte_missing+0x1258/0x37a0 [ 1113.967745][T29760] ? handle_mm_fault+0xee/0x32a0 [ 1113.967775][T29760] handle_mm_fault+0x1b8c/0x32a0 [ 1113.967817][T29760] ? handle_mm_fault+0xee/0x32a0 [ 1113.967851][T29760] ? __pfx_handle_mm_fault+0x10/0x10 [ 1113.967873][T29760] ? lock_vma_under_rcu+0x45a/0x500 [ 1113.967924][T29760] do_user_addr_fault+0xa73/0x1360 [ 1113.967960][T29760] ? rcu_is_watching+0x15/0xb0 [ 1113.967979][T29760] ? trace_page_fault_user+0x84/0x1c0 [ 1113.968009][T29760] exc_page_fault+0x6a/0xc0 [ 1113.968030][T29760] asm_exc_page_fault+0x26/0x30 [ 1113.968047][T29760] RIP: 0033:0x7f9e54868fb4 [ 1113.968067][T29760] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 c8 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 c6 ed 00 48 01 d1 [ 1113.968083][T29760] RSP: 002b:00007ffe4eb902c0 EFLAGS: 00010202 [ 1113.968100][T29760] RAX: 0000001b2f824000 RBX: 00000000000006b6 RCX: 000000000010fba8 [ 1113.968114][T29760] RDX: 000000000d2e0c8b RSI: 00007ffe4eb90350 RDI: 000000003246f9bc [ 1113.968127][T29760] RBP: 00007ffe4eb902fc R08: 7fffffffffffffff R09: 3fffffffffffffff [ 1113.968141][T29760] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 1113.968154][T29760] R13: 00000000000927c0 R14: 000000000010fd6a R15: 00007ffe4eb90350 [ 1113.968189][T29760] [ 1114.251921][T29760] memory: usage 307200kB, limit 307200kB, failcnt 471 [ 1114.258750][T29760] memory+swap: usage 306368kB, limit 9007199254740988kB, failcnt 0 [ 1114.267418][T29760] kmem: usage 304052kB, limit 9007199254740988kB, failcnt 0 [ 1114.275072][T29760] Memory cgroup stats for /syz2: [ 1114.275412][T29760] cache 0 [ 1114.283770][T29760] rss 0 [ 1114.286638][T29760] rss_huge 0 [ 1114.290070][T29760] shmem 0 [ 1114.293021][T29760] mapped_file 0 [ 1114.296600][T29760] dirty 0 [ 1114.299642][T29760] writeback 0 [ 1114.302945][T29760] workingset_refault_anon 0 [ 1114.307460][T29760] workingset_refault_file 0 [ 1114.312278][T29760] swap 212992 [ 1114.315579][T29760] swapcached 0 [ 1114.319712][T29760] pgpgin 118524 [ 1114.323192][T29760] pgpgout 118524 [ 1114.326751][T29760] pgfault 271815 [ 1114.330362][T29760] pgmajfault 4 [ 1114.333751][T29760] inactive_anon 0 [ 1114.337831][T29760] active_anon 0 [ 1114.341779][T29760] inactive_file 0 [ 1114.345476][T29760] active_file 0 [ 1114.349624][T29760] unevictable 0 [ 1114.353102][T29760] hierarchical_memory_limit 314572800 [ 1114.358512][T29760] hierarchical_memsw_limit 9223372036854771712 [ 1114.366378][T29760] total_cache 0 [ 1114.370034][T29760] total_rss 0 [ 1114.373345][T29760] total_rss_huge 0 [ 1114.377094][T29760] total_shmem 0 [ 1114.381325][T29760] total_mapped_file 0 [ 1114.385414][T29760] total_dirty 0 [ 1114.388925][T29760] total_writeback 0 [ 1114.392909][T29760] total_workingset_refault_anon 0 [ 1114.398032][T29760] total_workingset_refault_file 0 [ 1114.403285][T29760] total_swap 212992 [ 1114.407114][T29760] total_swapcached 0 [ 1114.411096][T29760] total_pgpgin 118524 [ 1114.416052][T29760] total_pgpgout 118524 [ 1114.421290][T29760] total_pgfault 271815 [ 1114.425418][T29760] total_pgmajfault 4 [ 1114.429430][T29760] total_inactive_anon 0 [ 1114.433612][T29760] total_active_anon 0 [ 1114.437621][T29760] total_inactive_file 0 [ 1114.442592][T29760] total_active_file 0 [ 1114.446694][T29760] total_unevictable 0 [ 1114.450978][T29760] anon_cost 0 [ 1114.454504][T29760] file_cost 0 [ 1114.457982][T29760] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.9271,pid=8089,uid=0 [ 1114.474952][T29760] Memory cgroup out of memory: Killed process 8089 (syz.2.9271) total-vm:102392kB, anon-rss:1340kB, file-rss:23264kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1115.789666][ T5833] Bluetooth: hci2: command 0x041b tx timeout [ 1116.117155][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 1116.208058][ T8105] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.9274'. [ 1116.535958][ T7945] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1116.537274][ T8123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9280'. [ 1116.565716][ T7945] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1116.597221][ T7945] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1116.631890][ T7945] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1116.731639][ T8128] netlink: 'syz.1.9282': attribute type 13 has an invalid length. [ 1116.871041][ T8145] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.9284'. [ 1116.881630][ T8145] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1116.947277][ T8152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9286'. [ 1116.975369][ T7945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1117.048087][ T7945] 8021q: adding VLAN 0 to HW filter on device team0 [ 1117.071379][ T7912] bridge0: port 1(bridge_slave_0) entered blocking state [ 1117.079032][ T7912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1117.117270][ T8160] netlink: 'syz.4.9288': attribute type 2 has an invalid length. [ 1117.148227][ T7903] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.155535][ T7903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1117.258724][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9290'. [ 1117.496687][ T8178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9293'. [ 1117.770196][ T7945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1117.786856][ T8194] syzkaller0: entered promiscuous mode [ 1117.797935][ T8194] syzkaller0: entered allmulticast mode [ 1117.821519][ T8194] tipc: Started in network mode [ 1117.826461][ T8194] tipc: Node identity 6a00cf9c35c8, cluster identity 4711 [ 1117.860661][ T8194] tipc: Enabled bearer , priority 0 [ 1117.870172][ T52] Bluetooth: hci2: command 0x041b tx timeout [ 1117.943434][ T7945] veth0_vlan: entered promiscuous mode [ 1117.961524][ T8194] tipc: Resetting bearer [ 1118.015471][ T8194] tipc: Disabling bearer [ 1118.068864][ T8205] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9298'. [ 1118.090427][ T7945] veth1_vlan: entered promiscuous mode [ 1118.152276][ T7945] veth0_macvtap: entered promiscuous mode [ 1118.167816][ T7945] veth1_macvtap: entered promiscuous mode [ 1118.201887][ T7945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1118.226076][ T7945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1118.254713][ T7900] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.277677][ T7900] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.305284][ T7900] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.335027][ T7900] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.400870][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9300'. [ 1118.471785][ T7912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1118.496874][ T7912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1118.582145][ T7912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1118.603819][ T7912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1118.859707][ T8234] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9302'. [ 1119.198874][ T8254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1119.217876][ T8256] IPVS: set_ctl: invalid protocol: 36 224.0.0.1:20000 [ 1119.268321][ T8259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9309'. [ 1119.361228][ T8272] netlink: 88 bytes leftover after parsing attributes in process `syz.2.9308'. [ 1119.382512][ T8259] bond1 (unregistering): Released all slaves [ 1119.662313][ T8284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9314'. [ 1119.962422][ T5833] Bluetooth: hci2: command 0x041b tx timeout [ 1120.211706][ T8313] netlink: 'syz.0.9322': attribute type 1 has an invalid length. [ 1120.229944][ T8313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9322'. [ 1120.242147][ T8315] netlink: 'syz.0.9322': attribute type 1 has an invalid length. [ 1120.248706][ T8319] geneve2: entered promiscuous mode [ 1120.262483][ T8315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9322'. [ 1120.273174][ T8313] netlink: 'syz.0.9322': attribute type 1 has an invalid length. [ 1120.282801][ T8313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9322'. [ 1120.296485][ T8313] netlink: 'syz.0.9322': attribute type 1 has an invalid length. [ 1120.307060][ T7912] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.319469][ T8313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9322'. [ 1120.326829][ T7912] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.339550][ T8313] netlink: 'syz.0.9322': attribute type 1 has an invalid length. [ 1120.366983][ T8313] netlink: 'syz.0.9322': attribute type 1 has an invalid length. [ 1120.391176][ T8313] netlink: 'syz.0.9322': attribute type 1 has an invalid length. [ 1120.399883][ T8313] netlink: 'syz.0.9322': attribute type 1 has an invalid length. [ 1120.409635][ T7912] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.419854][ T7912] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.430325][ T8313] netlink: 'syz.0.9322': attribute type 1 has an invalid length. [ 1120.438444][ T8313] netlink: 'syz.0.9322': attribute type 1 has an invalid length. [ 1120.545593][ T8336] gre0: entered promiscuous mode [ 1120.572411][ T8336] gre0: entered allmulticast mode [ 1120.810099][ T8351] syzkaller0: entered promiscuous mode [ 1120.815653][ T8351] syzkaller0: entered allmulticast mode [ 1120.826106][ T8351] tipc: Started in network mode [ 1120.831858][ T8351] tipc: Node identity 728df7e0b19d, cluster identity 4711 [ 1120.839761][ T8351] tipc: Enabled bearer , priority 0 [ 1120.857713][ T8355] openvswitch: netlink: Message has 584 unknown bytes. [ 1120.865287][ T8348] tipc: Resetting bearer [ 1120.877774][ T8355] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1120.920695][ T8348] tipc: Disabling bearer [ 1120.970555][ T8350] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1121.771691][ T8412] bridge1: entered promiscuous mode [ 1121.784910][ T8412] bridge1: entered allmulticast mode [ 1122.033641][ T5833] Bluetooth: hci2: command 0x041b tx timeout [ 1122.509522][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5600 ms [ 1122.517823][ C0] lec:lec_tx_timeout: lec0 [ 1122.524088][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1122.708329][ T8472] tipc: Started in network mode [ 1122.730044][ T8472] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1122.757746][ T8472] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1122.791491][ T8472] tipc: Enabled bearer , priority 10 [ 1123.025680][ T8499] pim6reg1: entered promiscuous mode [ 1123.068896][ T8499] pim6reg1: entered allmulticast mode [ 1123.174482][ T8503] __nla_validate_parse: 55 callbacks suppressed [ 1123.174503][ T8503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9382'. [ 1123.591785][ T8533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9389'. [ 1123.646856][ T8541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9392'. [ 1123.658487][ T8541] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9392'. [ 1123.716219][ T8542] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9392'. [ 1123.832857][ T8551] ip6gre1: entered allmulticast mode [ 1123.885487][ T8551] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9396'. [ 1123.911530][ T1209] tipc: Node number set to 1 [ 1124.033150][ T8566] bridge10: entered promiscuous mode [ 1124.038606][ T8566] bridge10: entered allmulticast mode [ 1124.090560][ T8577] netlink: 'syz.0.9402': attribute type 11 has an invalid length. [ 1124.318876][ T8586] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9404'. [ 1124.335231][ T8585] syzkaller0: entered promiscuous mode [ 1124.341789][ T8585] syzkaller0: entered allmulticast mode [ 1124.361958][ T8585] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9403'. [ 1124.371555][ T8585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9403'. [ 1124.383255][ T8586] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 1124.591945][ T8602] netlink: 1 bytes leftover after parsing attributes in process `syz.2.9408'. [ 1124.627988][ T8602] xt_policy: neither incoming nor outgoing policy selected [ 1125.295201][ T8648] validate_nla: 34 callbacks suppressed [ 1125.295222][ T8648] netlink: 'syz.1.9423': attribute type 3 has an invalid length. [ 1125.349789][ T8646] netlink: 'syz.1.9423': attribute type 3 has an invalid length. [ 1125.611505][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1125.632956][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1125.645019][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1125.654058][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1125.662913][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1125.735281][ T8663] ip6_vti0 speed is unknown, defaulting to 1000 [ 1125.904208][ T8674] netlink: 'syz.1.9432': attribute type 1 has an invalid length. [ 1126.046541][ T8678] bond1: (slave gretap1): making interface the new active one [ 1126.064010][ T8678] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1126.241724][ T8684] sctp: [Deprecated]: syz.0.9436 (pid 8684) Use of int in max_burst socket option. [ 1126.241724][ T8684] Use struct sctp_assoc_value instead [ 1126.694942][ T8709] netlink: 'syz.1.9442': attribute type 27 has an invalid length. [ 1127.059939][ T8663] chnl_net:caif_netlink_parms(): no params data found [ 1127.191030][ T8663] bridge0: port 1(bridge_slave_0) entered blocking state [ 1127.198546][ T8663] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.206366][ T8663] bridge_slave_0: entered allmulticast mode [ 1127.216344][ T8663] bridge_slave_0: entered promiscuous mode [ 1127.227128][ T8663] bridge0: port 2(bridge_slave_1) entered blocking state [ 1127.236771][ T8663] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.250491][ T8663] bridge_slave_1: entered allmulticast mode [ 1127.258581][ T8663] bridge_slave_1: entered promiscuous mode [ 1127.303555][ T8663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1127.317794][ T8663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1127.369639][ T8663] team0: Port device team_slave_0 added [ 1127.381795][ T8663] team0: Port device team_slave_1 added [ 1127.422974][ T8663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1127.449020][ T8663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1127.487766][ T8663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1127.503861][ T8663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1127.513843][ T8663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1127.543849][ T8663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1127.649703][ T8663] hsr_slave_0: entered promiscuous mode [ 1127.656910][ T8663] hsr_slave_1: entered promiscuous mode [ 1127.664298][ T8663] debugfs: 'hsr0' already exists in 'hsr' [ 1127.671557][ T8663] Cannot create hsr debugfs directory [ 1127.709978][ T52] Bluetooth: hci4: command tx timeout [ 1127.854937][ T8760] [ 1127.857330][ T8760] ====================================================== [ 1127.864373][ T8760] WARNING: possible circular locking dependency detected [ 1127.871592][ T8760] syzkaller #0 Not tainted [ 1127.876038][ T8760] ------------------------------------------------------ [ 1127.883255][ T8760] syz.1.9461/8760 is trying to acquire lock: [ 1127.889439][ T8760] ffffffff8fb28418 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x40c/0xf90 [ 1127.898794][ T8760] [ 1127.898794][ T8760] but task is already holding lock: [ 1127.906278][ T8760] ffff88807797f870 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 1127.915786][ T8760] [ 1127.915786][ T8760] which lock already depends on the new lock. [ 1127.915786][ T8760] [ 1127.926274][ T8760] [ 1127.926274][ T8760] the existing dependency chain (in reverse order) is: [ 1127.935284][ T8760] [ 1127.935284][ T8760] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 1127.943285][ T8760] _raw_spin_lock_bh+0x36/0x50 [ 1127.948581][ T8760] nr_rt_ioctl+0x215/0xf90 [ 1127.953530][ T8760] sock_do_ioctl+0x101/0x320 [ 1127.958642][ T8760] sock_ioctl+0x5c6/0x7f0 [ 1127.963582][ T8760] __se_sys_ioctl+0xfc/0x170 [ 1127.968968][ T8760] do_syscall_64+0xe2/0xf80 [ 1127.974009][ T8760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1127.980682][ T8760] [ 1127.980682][ T8760] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 1127.988505][ T8760] _raw_spin_lock_bh+0x36/0x50 [ 1127.993798][ T8760] nr_rt_device_down+0xbe/0x860 [ 1127.999175][ T8760] nr_device_event+0x137/0x150 [ 1128.004560][ T8760] notifier_call_chain+0x19d/0x3a0 [ 1128.010198][ T8760] __dev_notify_flags+0x16d/0x310 [ 1128.015747][ T8760] netif_change_flags+0xe8/0x1a0 [ 1128.021209][ T8760] dev_change_flags+0x130/0x260 [ 1128.026586][ T8760] dev_ioctl+0x7b4/0x1150 [ 1128.031448][ T8760] sock_do_ioctl+0x23e/0x320 [ 1128.036568][ T8760] sock_ioctl+0x5c6/0x7f0 [ 1128.041423][ T8760] __se_sys_ioctl+0xfc/0x170 [ 1128.046557][ T8760] do_syscall_64+0xe2/0xf80 [ 1128.051847][ T8760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.058268][ T8760] [ 1128.058268][ T8760] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 1128.066183][ T8760] __lock_acquire+0x15a5/0x2cf0 [ 1128.071562][ T8760] lock_acquire+0x106/0x330 [ 1128.076588][ T8760] _raw_spin_lock_bh+0x36/0x50 [ 1128.081878][ T8760] nr_rt_ioctl+0x40c/0xf90 [ 1128.086822][ T8760] sock_do_ioctl+0x101/0x320 [ 1128.091934][ T8760] sock_ioctl+0x5c6/0x7f0 [ 1128.096793][ T8760] __se_sys_ioctl+0xfc/0x170 [ 1128.101929][ T8760] do_syscall_64+0xe2/0xf80 [ 1128.106958][ T8760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.113406][ T8760] [ 1128.113406][ T8760] other info that might help us debug this: [ 1128.113406][ T8760] [ 1128.123655][ T8760] Chain exists of: [ 1128.123655][ T8760] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 1128.123655][ T8760] [ 1128.137478][ T8760] Possible unsafe locking scenario: [ 1128.137478][ T8760] [ 1128.144927][ T8760] CPU0 CPU1 [ 1128.150294][ T8760] ---- ---- [ 1128.155746][ T8760] lock(&nr_node->node_lock); [ 1128.160511][ T8760] lock(nr_node_list_lock); [ 1128.167627][ T8760] lock(&nr_node->node_lock); [ 1128.174911][ T8760] lock(nr_neigh_list_lock); [ 1128.179592][ T8760] [ 1128.179592][ T8760] *** DEADLOCK *** [ 1128.179592][ T8760] [ 1128.187734][ T8760] 2 locks held by syz.1.9461/8760: [ 1128.192841][ T8760] #0: ffffffff8fb28478 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x15f/0xf90 [ 1128.202355][ T8760] #1: ffff88807797f870 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 1128.212023][ T8760] [ 1128.212023][ T8760] stack backtrace: [ 1128.217916][ T8760] CPU: 0 UID: 0 PID: 8760 Comm: syz.1.9461 Not tainted syzkaller #0 PREEMPT(full) [ 1128.217936][ T8760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1128.217946][ T8760] Call Trace: [ 1128.217954][ T8760] [ 1128.217961][ T8760] dump_stack_lvl+0xe8/0x150 [ 1128.217988][ T8760] print_circular_bug+0x2e1/0x300 [ 1128.218006][ T8760] check_noncircular+0x12e/0x150 [ 1128.218023][ T8760] __lock_acquire+0x15a5/0x2cf0 [ 1128.218046][ T8760] ? kasan_save_track+0x4f/0x80 [ 1128.218060][ T8760] ? kasan_save_track+0x3e/0x80 [ 1128.218072][ T8760] ? kasan_save_free_info+0x46/0x50 [ 1128.218090][ T8760] ? __kasan_slab_free+0x5c/0x80 [ 1128.218103][ T8760] ? kfree+0x1be/0x650 [ 1128.218121][ T8760] ? tomoyo_path_number_perm+0x501/0x630 [ 1128.218138][ T8760] ? security_file_ioctl+0xc3/0x2a0 [ 1128.218151][ T8760] ? __se_sys_ioctl+0x47/0x170 [ 1128.218170][ T8760] ? do_syscall_64+0xe2/0xf80 [ 1128.218185][ T8760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.218201][ T8760] ? nr_rt_ioctl+0x40c/0xf90 [ 1128.218218][ T8760] lock_acquire+0x106/0x330 [ 1128.218237][ T8760] ? nr_rt_ioctl+0x40c/0xf90 [ 1128.218256][ T8760] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1128.218274][ T8760] ? nr_rt_ioctl+0x40c/0xf90 [ 1128.218292][ T8760] _raw_spin_lock_bh+0x36/0x50 [ 1128.218313][ T8760] ? nr_rt_ioctl+0x40c/0xf90 [ 1128.218331][ T8760] nr_rt_ioctl+0x40c/0xf90 [ 1128.218353][ T8760] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 1128.218375][ T8760] ? apparmor_capable+0x137/0x1a0 [ 1128.218399][ T8760] ? capable+0x88/0xe0 [ 1128.218412][ T8760] ? nr_ioctl+0x1b1/0x3b0 [ 1128.218429][ T8760] sock_do_ioctl+0x101/0x320 [ 1128.218444][ T8760] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1128.218455][ T8760] ? do_futex+0x395/0x420 [ 1128.218480][ T8760] sock_ioctl+0x5c6/0x7f0 [ 1128.218501][ T8760] ? __pfx_sock_ioctl+0x10/0x10 [ 1128.218521][ T8760] ? __fget_files+0x2a/0x420 [ 1128.218536][ T8760] ? __fget_files+0x3a0/0x420 [ 1128.218551][ T8760] ? __fget_files+0x2a/0x420 [ 1128.218567][ T8760] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1128.218585][ T8760] ? __pfx_sock_ioctl+0x10/0x10 [ 1128.218604][ T8760] __se_sys_ioctl+0xfc/0x170 [ 1128.218624][ T8760] do_syscall_64+0xe2/0xf80 [ 1128.218639][ T8760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.218652][ T8760] ? trace_irq_disable+0x37/0x100 [ 1128.218666][ T8760] ? clear_bhb_loop+0x60/0xb0 [ 1128.218682][ T8760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.218697][ T8760] RIP: 0033:0x7f220079aeb9 [ 1128.218711][ T8760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1128.218725][ T8760] RSP: 002b:00007f22016f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1128.218741][ T8760] RAX: ffffffffffffffda RBX: 00007f2200a15fa0 RCX: 00007f220079aeb9 [ 1128.218752][ T8760] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 1128.218762][ T8760] RBP: 00007f2200808c1f R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1128.218771][ T8760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1128.218780][ T8760] R13: 00007f2200a16038 R14: 00007f2200a15fa0 R15: 00007ffeb6788d98 [ 1128.218797][ T8760] [ 1128.526251][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5990 ms [ 1128.534331][ C0] lec:lec_tx_timeout: lec0 [ 1128.558500][ T8663] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.627393][ T8663] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.832819][ T8663] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.971176][ T8663] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.272750][ T7912] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.346054][ T7912] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.422587][ T7912] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.464234][ T7912] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.555088][ T7912] bridge_slave_1: left allmulticast mode [ 1129.561018][ T7912] bridge_slave_1: left promiscuous mode [ 1129.566838][ T7912] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.577121][ T7912] bridge_slave_0: left allmulticast mode [ 1129.583039][ T7912] bridge_slave_0: left promiscuous mode [ 1129.588811][ T7912] bridge0: port 1(bridge_slave_0) entered disabled state [ 1129.764696][ T7912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1129.777366][ T7912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1129.790038][ T7912] bond0 (unregistering): Released all slaves [ 1129.848824][ T7912] tipc: Left network mode [ 1130.214287][ T7912] hsr_slave_0: left promiscuous mode [ 1130.220572][ T7912] hsr_slave_1: left promiscuous mode [ 1130.226778][ T7912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1130.243961][ T7912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1130.251964][ T7912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1130.260207][ T7912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1130.271961][ T7912] veth1_macvtap: left promiscuous mode [ 1130.277467][ T7912] veth0_macvtap: left promiscuous mode [ 1130.284126][ T7912] veth1_vlan: left promiscuous mode [ 1130.289659][ T7912] veth0_vlan: left promiscuous mode [ 1130.457005][ T7912] team0 (unregistering): Port device team_slave_1 removed [ 1130.487333][ T7912] team0 (unregistering): Port device team_slave_0 removed [ 1130.832885][ T7912] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.887023][ T7912] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.954802][ T7912] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.996044][ T7912] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.120501][ T7912] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.173680][ T7912] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.235337][ T7912] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.308642][ T7912] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.412419][ T7912] bridge_slave_1: left allmulticast mode [ 1131.422663][ T7912] bridge_slave_1: left promiscuous mode [ 1131.428792][ T7912] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.440734][ T7912] bridge_slave_0: left allmulticast mode [ 1131.446388][ T7912] bridge_slave_0: left promiscuous mode [ 1131.458086][ T7912] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.469687][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1131.489595][ T7912] bridge_slave_1: left allmulticast mode [ 1131.495291][ T7912] bridge_slave_1: left promiscuous mode [ 1131.517159][ T7912] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.530194][ T7912] bridge_slave_0: left allmulticast mode [ 1131.535885][ T7912] bridge_slave_0: left promiscuous mode [ 1131.546395][ T7912] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.568334][ T7912] bridge_slave_1: left allmulticast mode [ 1131.589132][ T7912] bridge_slave_1: left promiscuous mode [ 1131.594992][ T7912] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.605020][ T7912] ¾x9ÿ: left allmulticast mode [ 1131.610382][ T7912] ¾x9ÿ: left promiscuous mode [ 1131.615244][ T7912] bridge0: port 1(1¾x9ÿ) entered disabled state [ 1131.762540][ T7912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1131.774198][ T7912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1131.784548][ T7912] bond0 (unregistering): Released all slaves [ 1131.892157][ T7912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1131.903009][ T7912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1131.913897][ T7912] bond0 (unregistering): Released all slaves [ 1131.922046][ T7912] bond1 (unregistering): Released all slaves [ 1132.029817][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1132.148559][ T7912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1132.158618][ T7912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1132.168219][ T7912] bond0 (unregistering): Released all slaves [ 1132.176207][ T7912] bond1 (unregistering): Released all slaves [ 1132.295763][ T7912] bond2 (unregistering): Released all slaves [ 1132.387763][ T7912] : left promiscuous mode [ 1132.457477][ T7912] tipc: Disabling bearer [ 1132.463515][ T7912] tipc: Left network mode [ 1133.298582][ T7912] hsr_slave_0: left promiscuous mode [ 1133.305298][ T7912] hsr_slave_1: left promiscuous mode [ 1133.329679][ T7912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1133.359210][ T7912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1133.386426][ T7912] hsr_slave_0: left promiscuous mode [ 1133.392928][ T7912] hsr_slave_1: left promiscuous mode [ 1133.399349][ T7912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1133.406900][ T7912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1133.416765][ T7912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1133.424665][ T7912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1133.435902][ T7912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1133.444405][ T7912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1133.457652][ T7912] veth1_macvtap: left promiscuous mode [ 1133.464735][ T7912] veth0_macvtap: left promiscuous mode [ 1133.471382][ T7912] veth1_vlan: left promiscuous mode [ 1133.476695][ T7912] veth0_vlan: left promiscuous mode [ 1133.647505][ T7912] team0 (unregistering): Port device team_slave_1 removed [ 1133.680773][ T7912] team0 (unregistering): Port device team_slave_0 removed [ 1133.893949][ T7912] team0 (unregistering): Port device team_slave_1 removed [ 1133.921397][ T7912] team0 (unregistering): Port device team_slave_0 removed [ 1134.406405][ T7912] team0 (unregistering): Port device team_slave_1 removed [ 1134.446541][ T7912] team0 (unregistering): Port device team_slave_0 removed [ 1137.149810][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5120 ms [ 1137.157865][ C0] lec:lec_tx_timeout: lec0 [ 1137.162701][ C0] lec:lec_start_xmit: lec0:No lecd attached