last executing test programs: 47.893256457s ago: executing program 0 (id=3161): syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000002f40)=""/145, 0x91}, {&(0x7f0000000040)=""/209, 0xd1}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000500)=""/167, 0xa7}, {&(0x7f0000001640)=""/4067, 0xfe3}], 0x6}, 0x2}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x2003}], 0x7, 0x100, 0x0) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f00000094c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100}, 0x4) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @empty, 0x0, 0x8, 0x80000001}}) r2 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001000000", @ANYRES32, @ANYBLOB="008a00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f0000000080)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) socket(0x15, 0x2, 0x0) close(0x4) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc, 0x12, 0xffffffffffffffff, 0xeea6d000) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23}, 0x38) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r3) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448df, &(0x7f0000000280)="4e56f02171d526fd63a66ea3eb2c6dc7396c0ad97fb11e5a0dfc36a98930a8ef2e3a33c8b66d199751e165662d64566247d648a538a9f584d17c1d8599103a40adf59b3ea224aa428172cf2c5fc32e3652712f0f") ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0xf, 0x4, 0x0, @dev, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x10, 0x10}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x16, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="187700000000000000187a010020207b1ae2ff00000000bfa100000100000007010000f8ffffffb702000008000000b703000400000000850000008c00000070ba983f069500"/83], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 40.64381618s ago: executing program 0 (id=3166): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xffffffffffffff0c) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0xf, 0x0, 0x0, 0x2}, 0x10}}, 0x44000) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0efb89cabebe9b76ed453a5dfaf9420cfe78d46c9356eb018e177fab88341113961a7f5190fce2d8ab2b9a8560a6b9c32594a3c93ab83553fe11d2b90ad03fe2d08699da", 0x44, 0x10, &(0x7f0000000200)={0x11, 0xf7, r2, 0x1, 0x6}, 0x14) 39.060968858s ago: executing program 0 (id=3169): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x4c) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async, rerun: 64) recvmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0xfd}, 0x2062) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x3}, 0x50) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 37.853807842s ago: executing program 0 (id=3172): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c0001800600060080"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000280060001"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0x800442d2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000790001040200000000000000070000006400000014000180080003006400000008000200c8"], 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010001fff0d00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c000014000280050009002900000008000100", @ANYRES32, @ANYBLOB="080004"], 0x4c}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) read$nci(r7, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x4008054) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0x302}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @loopback}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041891}, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0xd0f, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000020000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) 34.177227738s ago: executing program 0 (id=3180): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4008840) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ec200010f14dec27bab18f5ac6c6041d5d4d4e2a15cdc957a7112fc4c0c04d0a42b04ff35091541ecd70b4bb6b52bc40fae8671c2ef4f85abac503f5042998746fd8f70e4cc2dacce8dca3b477ce1080e14cb2e37797ec7341528213f6a28430b4a0803cd22814e0fd1b562c81baebc63d05aee29287f9ea38581552ef88d8c87db79f54bd9478cca0d88723e0725db59ffaba6a63f0cd8e1855c7619d5749472f9baf715a39461762c0d0c039dc8e", @ANYRES16=0x0, @ANYBLOB="02052abd7000ffdbdf2542000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f70730000000005008300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500830000000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f70730000000005008300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500830001000000"], 0xec}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, 0x0, 0x0) (async) setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000480)=0xffff, 0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r6 = socket$kcm(0x2, 0x3, 0x2) (rerun: 64) sendmsg$inet(r6, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x0) recvmsg(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x40010040) (async, rerun: 32) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async, rerun: 32) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0xff01, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000001308000340000000046c0001800a0001006c696d69740000001c0002800c00014000000000000000640c00024000000000000000010900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) 32.950967813s ago: executing program 0 (id=3184): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7a7289590b36af5}, 0x48) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x1, 0x7, [@multicast, @multicast, @remote, @empty, @local, @broadcast, @multicast]}) socket$nl_route(0x10, 0x3, 0x0) 13.433954259s ago: executing program 4 (id=3223): pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0x1, 0x5, 0x0, 0x70, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x8000, 0x1, 0x1}}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getnexthop={0x28, 0x6a, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NHA_OIF={0x8, 0x5, r1}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x28}}, 0x4400) 12.922263382s ago: executing program 4 (id=3226): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000009c0), r1) (async) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40011}, 0x4054) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}}, [@tmpl={0x144, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@local, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3, 0x0, 0x0, 0x81}, {{@in6=@mcast1, 0x0, 0x6d}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x2}]}]}, 0x1fc}}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) (async) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f00000001c0)=0x51) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2402000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@ipv4_getroute={0x1c, 0x1a, 0x1, 0x70bd2a, 0x25dfdbfb, {0x2, 0x80, 0x34, 0x8c, 0x0, 0x2, 0xfd, 0x4, 0x800}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000045}, 0x4000000) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000200)="80fd020000400a9eb2020b8e17db1e6e6d2195f77c9a7fb556d8a445d9716fdc85b71be1719c926bab75ed78f8e8d39eba3994dd63ecf313c0fc4fcc05565e5b4af9", 0x42}], 0x1, 0x0, 0x0) (async) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r3, 0x1}, 0x14}}, 0x0) 12.770207045s ago: executing program 2 (id=3227): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000000c0)=0x3, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0xfffffffa, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000100)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x90) 11.914743703s ago: executing program 2 (id=3228): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) unshare(0x26020480) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x4000040) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="58000000100003052abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000006380000300012800b00010069703667726500002000028008000c000004000014000600fc01000000000000000000000000000008000a00", @ANYRES32=r3], 0x58}}, 0x0) 10.305429655s ago: executing program 4 (id=3231): r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x1, 0x4) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000000c0)="240000005f005f03a9f9f4ba0a1f0000000000000000ecffffffffffffff000000000000", 0x24) clock_gettime(0xfffffffffffffffc, &(0x7f0000003a40)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth0_to_batadv\x00', &(0x7f0000000100)=@ethtool_sfeatures}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x1852, r2, 0xffffe000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, 0x0, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r6, {0xffff, 0xfff2}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0xc096}, 0x20000050) bind$packet(r1, &(0x7f0000000080)={0x11, 0xf8, r6, 0x1, 0x6, 0x6, @broadcast}, 0x14) 9.535888722s ago: executing program 1 (id=3232): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x22, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) 9.102512418s ago: executing program 3 (id=3233): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x8000, 0x20, 0x1, 0x8eb4, {{0x5, 0x4, 0x1, 0x20, 0x14, 0x64, 0x0, 0x10, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @loopback}}}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x23, &(0x7f0000000000)=""/48, &(0x7f0000000040)=0x30) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x0, 0x0, 0x5}}}}, 0x30}}, 0x0) 8.560139126s ago: executing program 2 (id=3234): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01000000000000007c9a460400000800040000000000"], 0x1c}}, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0xed27c9fa5277b9b7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x10001}]}}]}, 0x3c}}, 0x20008000) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000000440)=@dellink={0x28, 0x11, 0x90d, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x20020, 0x20001}, [@IFLA_GROUP={0x8, 0x1b, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002dbd7000fbdbdf250100000008000100", @ANYRES32=r10, @ANYBLOB="44000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000002008000600", @ANYRES32=r7], 0x60}, 0x1, 0x400000000000000, 0x0, 0x10}, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002dbd7000fbdbdf250100000008000100", @ANYRES32=r10, @ANYBLOB="44000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000002008000600", @ANYRES32=r7], 0x60}, 0x1, 0x400000000000000, 0x0, 0x10}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r12, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r15, r4, 0x25, 0x8}, 0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r14, 0x25, 0x2}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x29, 0xf1, 0x5, 0xfffffffb, 0x28, @dev={0xfe, 0x80, '\x00', 0x22}, @loopback, 0x7800, 0x7, 0x7, 0x87}}) socket$nl_route(0x10, 0x3, 0x0) (async) r16 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r17, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) (async) getsockname$packet(r17, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r16, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r18}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) 7.679918073s ago: executing program 1 (id=3235): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 7.661877968s ago: executing program 4 (id=3236): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x2, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x6, 0xfe}]}}}}}}}, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000040)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) 7.42820534s ago: executing program 3 (id=3237): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='pids.events\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000180)='%\x00', 0x10800, &(0x7f00000001c0)={@align=0x4, {0x285f, 0x4, 0x7, 0xc3dd}}, 0x100, &(0x7f0000000200), &(0x7f0000000240)}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f00000002c0)='\x00', 0x663c0, &(0x7f0000000300)={@align=0x6, {0x5, 0x5, 0xfff, 0x10000}}, 0x5, &(0x7f0000000340), &(0x7f0000000380)=0x5c0000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x90, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x58, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7ff}]}, 0x90}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000081) getpeername$netlink(r8, &(0x7f0000000580), &(0x7f00000005c0)=0xc) sendmsg$NFT_MSG_GETSET(r8, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000006}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, 0xa, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x44c51}, 0x4080) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r9) sendmsg$NL80211_CMD_UPDATE_FT_IES(r8, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x78, r12, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x5c}}}}, [@NL80211_ATTR_IE={0x10, 0x2a, [@ibss={0x6, 0x2, 0x200}, @mesh_chsw={0x76, 0x6, {0x81, 0x7, 0x14, 0x5}}]}, @NL80211_ATTR_IE={0x8, 0x2a, [@ibss={0x6, 0x2, 0x4}]}, @NL80211_ATTR_IE={0xc, 0x2a, [@mesh_id={0x72, 0x6}]}, @NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xd}, @NL80211_ATTR_IE={0x24, 0x2a, [@mic={0x8c, 0x18, {0xc1, "d77a5a5effd1", @long="940991ea84b5211479d857a2104ab72b"}}, @sec_chan_ofs={0x3e, 0x1}, @erp={0x2a, 0x1, {0x0, 0x1}}]}]}, 0x78}}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x89e1, &(0x7f0000000880)={r11}) ioctl$XFS_IOC_START_COMMIT(r7, 0x80585882, &(0x7f0000000940)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x6, 0x7, 0x7558, 0x12247, r8, 0xa5a, '\x00', 0x0, r8, 0x5, 0x4, 0x5, 0xb, @void, @value, @value=r13}, 0x50) r14 = accept(r7, &(0x7f00000009c0)=@generic, &(0x7f0000000a40)=0x80) ioctl$FITHAW(r14, 0xc0045878) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000c00)={&(0x7f0000000a80)="ee65c134", &(0x7f0000000ac0)=""/18, &(0x7f0000000b00)="7af65bde8b67dbd1e4d3554c7e9c03e533c11513e372c456ff260e33781120", &(0x7f0000000b40)="ddb018e2da887b6c4ce380fad637c2ae49e4bd6a1057e5253488af8ef1da7bf4dd07badf872cbaaa56f38ae42abb546f9a9fe85b354a083234b56f5ffae5b7a11545c180e69bfeae245b01af60fdd2e3a2b7121464debac27028ba778d5084891551b06b8c326cc782d0546db65ea1cc1c0d0ae8b15fb5dfd07b750c328813564a8c9c5a17c4707d1c1993c37e0d88c3e9b542862937f97574a89425916d6164834a293c86dcc8707a284e66", 0x0, r13}, 0x38) ioctl$BTRFS_IOC_SNAP_CREATE(r4, 0x50009401, &(0x7f0000000c40)={{r14}, "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"}) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0x9) r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000001c80), r0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000001cc0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000001d00)=0x0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000001dc0)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x34, r15, 0x400, 0x1, 0x25dfdbfb, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_TM_PROTOCOLS={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}]}, 0x34}}, 0x840) getsockopt$inet_mreqsrc(r14, 0x0, 0x28, &(0x7f0000001e00)={@remote, @rand_addr, @local}, &(0x7f0000001e40)=0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r13, &(0x7f0000001f40)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x14, 0x4, 0x1, 0x900, 0x0, 0x0, {0x7, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x20040044) sendmsg$NL80211_CMD_ABORT_SCAN(r7, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x14, r12, 0x0, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, ["", "", ""]}, 0x14}}, 0x8000) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r11, 0x8983, &(0x7f0000002080)={0x1, 'sit0\x00', {}, 0x8000}) 7.06353265s ago: executing program 1 (id=3238): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x58, 0x2c, 0xd2b, 0x70bd2b, 0xfffeffff, {0x0, 0x0, 0x0, r4, {0xfff1}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x2c, 0x2, [@TCA_U32_ACT={0x4}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x4, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x58}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x4}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xc, 0x6, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x4, 0x206, 0x4}]}}]}}]}, 0x54}}, 0x24040084) sendmsg$inet(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="d9fd3c845642d3bafe74edbca8104f4870ed01c57fa7ef822572dbc8aa044a42fd5a1e5f9dd70d3382de824d30bd5da68d5dcdd39cca8f0f647e0442d928c0e9f244f6a6b94dd19f87f305405990095a8e7697859be8a5d425757f3c73b2f570e99f6eed5e4eac7d3444f809e5b6473091b370931d597556812071d2748e9cae50ab281e6789163c82f2a994e5d4b41c1dfce377091c4166b08c89218aea67bb3ad8c71e3c00f156aa6eea7344abe3ace52c046dd2ad8a892ad27f7637f7e82a84d29b0880d8b622953e6bc948509c55fcb05d886f86e290b5649b6dfdcf80f8a8aca948820c46df8aa37aeba7d512795a74", 0xf2}, {&(0x7f0000000300)="5ba69104be0f6b70a32a5810ddddc2bf93458ce1478c91d67a562c00755e5e455533799edb30799fa5618a59187067a973479cb9e58ed31d669baf6b2a69", 0x3e}, {&(0x7f0000000340)="503c196457b559a168fabc9bfd33bb671799f79d4b689c8c9961fc14b80722bc2ac99635541ddfbe32fd5dff4fd10b0225e68d422f0785d3552656e4672d1c9cdfcf8ffb93aa70fe048279567eb4390fa3cc1415dde9caaffe17aa371c9157206fb9bfa8224c7529eecc6a23a7bb9e289bfef11b407bac1842b7", 0x7a}, {&(0x7f00000003c0)="093ccf46f38b7a66055810720ad85ad2aa26be480190cd4b44f49889998172abffef6cb99d10d4aa004bcaefedc9", 0x2e}, {&(0x7f0000000480)="b0578774c6a06a", 0x7}, {&(0x7f00000004c0)="ed7e6b717627438501ff", 0xa}], 0x6, &(0x7f0000000600)=[@ip_retopts={{0x50, 0x0, 0x7, {[@timestamp={0x44, 0x24, 0xe7, 0x0, 0x6, [0x81, 0x1, 0x4, 0xa3, 0x6, 0xffffffee, 0x8001, 0xffffffff]}, @noop, @timestamp_addr={0x44, 0x14, 0xb5, 0x1, 0x6, [{@rand_addr=0x64010102, 0x2}, {@broadcast, 0x6}]}, @ssrr={0x89, 0x7, 0xef, [@private=0xa010101]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast2, @dev={0xac, 0x14, 0x14, 0x1f}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xa}}, @ip_retopts={{0x44, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0xe0, 0x0, 0x2, [0x7fffffff, 0x8]}, @ssrr={0x89, 0x7, 0xd3, [@private=0xa010100]}, @lsrr={0x83, 0x1f, 0x5f, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @private=0xa010102, @broadcast, @dev={0xac, 0x14, 0x14, 0x31}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @rand_addr=0x64010101, @private=0xa010100}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x32000000}}], 0x120}, 0x1) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000015000100000000ec001fb6330d70000008000100", @ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r6, &(0x7f0000008800)=[{&(0x7f0000000080)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000400)=[{&(0x7f00000002c0)="776b08de", 0x4}], 0x1, &(0x7f0000000440)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x8, 0x8, 0xf}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x81}}], 0x38, 0x4040000}], 0x1, 0x0) 4.32347522s ago: executing program 3 (id=3239): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079b008000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf03000000000000850000006b000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)={0x5c, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x3c, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb86dd2c00001c0000000001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e1167"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x5c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x94}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000035000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, 0x1, 0x8, 0x401, 0x0, 0x0, {0x4, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6e8}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfc}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x10b}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000011) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000002000010300000000fbdbdf25022000000000000000000000080001000000000008001b"], 0x2c}}, 0x0) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r1) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xfffffffffffffe4e, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x10, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c4}, 0x4000) 3.894404395s ago: executing program 4 (id=3240): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) (async, rerun: 64) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r1) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x44, r3, 0x1, 0x70b92a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffe27, 0xb, 0x9}, {0x6, 0x11, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000040}, 0x200c0850) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x50) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23, 0x3f, 0x0, 0xfd}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x2c}}, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffd, @empty}, 0x1c) (async) listen(r6, 0x0) (async, rerun: 32) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000280)={@void, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xad, 0x0, 0x4000, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0x0, 0x17c1, 0x99, 0x0, @gue={{0x2, 0x1, 0x0, 0x4, 0x100}, "e3455ac18b20b0adbe9c7dd070ccd15ffff485c03692847259c3772d2bd4fb3bcf8fedd98737dc336dbcce4bab064d673cd4b53cbf440bf66f0396fd38b07665548f792587a0bb248b017b1f981bfc8ecd90ec00cae640636c6ce89c1077bc2d5195364a80016ac94440356db9edb84a23d603cba7181088a0c9b8f1afb6c0b9f1acc3515f2d485914"}}}}}}}, 0xbf) shutdown(r6, 0x0) (async) r10 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r10, &(0x7f0000000080)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x2, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xfff1, 0xb}}]}}]}, 0x3c}}, 0x0) 3.767856966s ago: executing program 1 (id=3241): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f0000000140)={0x2, &(0x7f0000000300)=[{0x0, 0x0, 0x0, @remote}, {}]}) (async) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x1401, 0x101, 0xf0bd2b, 0x25dfdbfe}, 0x10}}, 0x40004) r5 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000022c0)=[{{&(0x7f0000000140)=@isdn, 0x80, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/34, 0x22}, {&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f0000000380)=""/2, 0x2}], 0x3, &(0x7f0000000480)=""/159, 0x9f}, 0x5}, {{&(0x7f0000000540)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000a00), 0x0, &(0x7f0000000a80)=""/250, 0xfa}, 0x4}, {{&(0x7f0000000b80)=@caif, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000cc0)=""/167, 0xa7}, {&(0x7f0000000d80)=""/152, 0x98}], 0x2, &(0x7f0000000e80)=""/156, 0x9c}, 0x6}, {{0x0, 0x0, &(0x7f0000001240), 0x0, &(0x7f00000023c0)=""/4107, 0x100b}, 0x5}], 0x4, 0x40000000, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x1, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 3.76732813s ago: executing program 2 (id=3242): r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x1, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) (async) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r3) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r3) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r4, 0xb15}, 0x14}}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_newaddr={0x2c, 0x14, 0x2, 0x70bd26, 0x25dfdbfd, {0xa, 0x1f, 0x0, 0xfd, r1}, [@IFA_LOCAL={0x14, 0x2, @private0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10081}, 0x40000) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r2) 2.579707698s ago: executing program 3 (id=3243): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x0, 'syz_tun\x00', {0x1}}) syz_emit_ethernet(0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000021001122334455000a424203ff00", @ANYBLOB], 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000000000000000000000000000000be2dc03882702b5aab876010b12e390d00", @ANYRES32=r3, @ANYBLOB="08002500f5ffffff"], 0x24}}, 0x800) 2.090514525s ago: executing program 2 (id=3244): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) (async) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) (async) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001d80)="16", 0x1}], 0x1}}], 0x1, 0x24008094) (async) close(0x3) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, 0x0, &(0x7f0000000180)) (async) close(0x4) 1.989341646s ago: executing program 1 (id=3245): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002100010000000000fcdbdf2502000000000000000000000006001d"], 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0x400, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xad, 0x10000000, 0x6, 0x6}, 0x4, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 972.143449ms ago: executing program 3 (id=3246): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a4fdd7a6ccb2535880a0d"], 0x26}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311390000c4000085100000eaff000085000000760000009500fcffffff00009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 547.802462ms ago: executing program 4 (id=3247): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e0000000400000047a300000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, &(0x7f0000000080), &(0x7f00000000c0)=""/102}, 0x20) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xffffffff}]}) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) close(0x3) 361.387882ms ago: executing program 1 (id=3248): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x8901, &(0x7f0000000040)={r1}) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES8=r0, @ANYRES8=r1, @ANYRESDEC=r0], 0xa0}, 0x1, 0x0, 0x0, 0x40408d5}, 0x20000000) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @private=0xa010100, '\x00'}}}}}, 0x0) (async, rerun: 64) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000001c0)={r0, &(0x7f00000000c0)='\x9f![\\]?\x00', 0x2802c0, &(0x7f0000000100)={@_ha_fsid={[0x5a8, 0xe]}, {0x2, 0x4, 0x10000, 0x8}}, 0x6, &(0x7f0000000140), &(0x7f0000000180)=0x5}) (async, rerun: 64) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x0, 0x2, 0x6, {0x3, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010101, 0x0, 0x5}, {0x0, @empty, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}}}) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r3}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x64, r5, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "3139ea37de"}, @NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "61209ec021b64d049ec69a103c"}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "b46275fdf4"}]}, 0x64}, 0x1, 0x0, 0x0, 0x40080d0}, 0x40) 248.081563ms ago: executing program 2 (id=3249): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004590001c03363b3c87e9f835efd142f085fafa000000029078fffffffee00000011200907800000009"], 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 0s ago: executing program 3 (id=3250): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f00000007c0)=0x2) writev(r0, &(0x7f0000000000), 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) kernel console output (not intermixed with test programs): 50] tipc: Resetting bearer [ 257.784881][T11950] tipc: Disabling bearer [ 258.055252][T11965] openvswitch: netlink: Duplicate key (type 6). [ 258.083379][ T6399] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.086023][ T6402] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.086119][ T6402] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.086188][ T6402] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.149774][T11974] __nla_validate_parse: 9 callbacks suppressed [ 258.149856][T11974] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1567'. [ 258.310132][T11980] bond6: option min_links: invalid value (18446744073709551614) [ 258.318017][T11980] bond6: option min_links: allowed values 0 - 2147483647 [ 258.327252][T11980] bond6 (unregistering): Released all slaves [ 258.480143][T11956] syzkaller1: entered promiscuous mode [ 258.489229][T11956] syzkaller1: entered allmulticast mode [ 258.545052][T11987] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1569'. [ 258.755094][T11991] macsec0: entered promiscuous mode [ 258.901548][T12005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.938543][T12003] netlink: 'syz.0.1571': attribute type 1 has an invalid length. [ 259.144432][T12003] 8021q: adding VLAN 0 to HW filter on device bond2 [ 259.160896][T12010] bond2: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 259.175102][T12010] bond2: entered allmulticast mode [ 259.284502][T12013] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 259.317660][T12018] syzkaller0: entered promiscuous mode [ 259.324067][T12018] syzkaller0: entered allmulticast mode [ 259.335539][T12018] tipc: Enabled bearer , priority 0 [ 259.366709][T12017] tipc: Resetting bearer [ 259.410117][T12017] tipc: Disabling bearer [ 259.564614][T12008] syz.4.1574 (12008) used greatest stack depth: 17384 bytes left [ 259.680760][T12024] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1578'. [ 259.780891][T12032] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1578'. [ 259.848180][T12037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1580'. [ 259.848339][T12037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1580'. [ 259.848478][T12037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1580'. [ 259.848609][T12037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1580'. [ 259.848730][T12037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1580'. [ 259.898782][T12037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1580'. [ 260.078072][T12048] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 262.542751][ T5622] block nbd1: Receive control failed (result -32) [ 263.465799][T12165] __nla_validate_parse: 37 callbacks suppressed [ 263.465962][T12165] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1617'. [ 263.754202][T12169] vxcan1: Caught tx_queue_len zero misconfig [ 264.303148][T12182] netlink: zone id is out of range [ 264.303184][T12182] netlink: set zone limit has 4 unknown bytes [ 264.305806][T12184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1622'. [ 264.306041][T12187] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1623'. [ 265.213972][T12215] netlink: 'syz.0.1629': attribute type 1 has an invalid length. [ 265.505203][T12215] 8021q: adding VLAN 0 to HW filter on device bond3 [ 267.277942][T12268] netlink: zone id is out of range [ 267.277987][T12268] netlink: zone id is out of range [ 267.280984][T12268] netlink: zone id is out of range [ 267.280998][T12268] netlink: zone id is out of range [ 267.281006][T12268] netlink: zone id is out of range [ 267.281013][T12268] netlink: zone id is out of range [ 267.282267][T12268] netlink: zone id is out of range [ 267.282279][T12268] netlink: zone id is out of range [ 268.025739][T12275] hsr0 speed is unknown, defaulting to 1000 [ 268.044723][T12275] hsr0 speed is unknown, defaulting to 1000 [ 268.045495][T12275] hsr0 speed is unknown, defaulting to 1000 [ 268.105057][T12275] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 268.105155][T12275] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 268.105212][T12275] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 268.364174][T12275] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 268.447536][T12289] veth1_macvtap: left promiscuous mode [ 268.447597][T12289] macsec0: entered promiscuous mode [ 268.502694][T12275] hsr0 speed is unknown, defaulting to 1000 [ 268.523672][T12275] hsr0 speed is unknown, defaulting to 1000 [ 268.533477][T12275] hsr0 speed is unknown, defaulting to 1000 [ 268.543147][T12275] hsr0 speed is unknown, defaulting to 1000 [ 268.559097][T12275] hsr0 speed is unknown, defaulting to 1000 [ 268.868073][T12299] netlink: 'syz.1.1651': attribute type 13 has an invalid length. [ 270.305128][T12334] net_ratelimit: 25 callbacks suppressed [ 270.305242][T12334] openvswitch: netlink: EtherType 300 is less than min 600 [ 270.308573][T12332] netlink: 'syz.1.1658': attribute type 1 has an invalid length. [ 270.608831][T12340] 8021q: adding VLAN 0 to HW filter on device bond8 [ 270.617712][T12340] bond0: (slave bond8): making interface the new active one [ 270.628186][T12340] bond0: (slave bond8): Enslaving as an active interface with an up link [ 270.715032][T12343] bond0: (slave gretap1): Enslaving as a backup interface with an up link [ 270.742091][T12343] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1658'. [ 270.894209][T12343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.158855][T12356] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 271.159027][T12356] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.338863][T12363] bond0: entered promiscuous mode [ 271.338914][T12363] bond8: entered promiscuous mode [ 271.359375][T12363] batadv0: entered promiscuous mode [ 271.376620][T12363] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 272.068913][T12374] netlink: 'syz.0.1667': attribute type 1 has an invalid length. [ 272.155928][T12374] bond4: entered promiscuous mode [ 272.156398][T12374] 8021q: adding VLAN 0 to HW filter on device bond4 [ 272.170760][T12380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1669'. [ 272.170791][T12380] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1669'. [ 272.283660][T12374] 8021q: adding VLAN 0 to HW filter on device bond4 [ 272.284136][T12374] bond4: (slave xfrm1): The slave device specified does not support setting the MAC address [ 272.284156][T12374] bond4: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 272.307618][T12374] bond4: (slave xfrm1): making interface the new active one [ 272.307644][T12374] xfrm1: entered promiscuous mode [ 272.337012][T12374] xfrm1: left promiscuous mode [ 272.560217][T12387] syzkaller0: entered promiscuous mode [ 272.560275][T12387] syzkaller0: entered allmulticast mode [ 272.637860][T12387] tipc: Enabled bearer , priority 0 [ 272.646293][T12384] tipc: Resetting bearer [ 272.786470][T12384] tipc: Disabling bearer [ 274.032001][T12431] team_slave_1: Caught tx_queue_len zero misconfig [ 274.148045][T12431] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 274.923308][T12460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1686'. [ 274.926066][T12461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1686'. [ 274.966499][T12459] netlink: 'syz.3.1686': attribute type 11 has an invalid length. [ 274.976027][T12458] netlink: 'syz.3.1686': attribute type 11 has an invalid length. [ 275.184561][T12464] syzkaller0: entered promiscuous mode [ 275.191350][T12464] syzkaller0: entered allmulticast mode [ 275.218482][T12464] tipc: Enabled bearer , priority 0 [ 275.710206][T12475] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1691'. [ 276.172309][T12490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1695'. [ 276.199045][T12490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1695'. [ 276.374854][T10925] tipc: Node number set to 3943042553 [ 276.377527][T12492] netlink: 'syz.3.1693': attribute type 1 has an invalid length. [ 276.377549][T12492] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1693'. [ 276.377564][T12492] netlink: 'syz.3.1693': attribute type 1 has an invalid length. [ 276.377576][T12492] netlink: 2016 bytes leftover after parsing attributes in process `syz.3.1693'. [ 276.386729][ T5622] block nbd2: Receive control failed (result -32) [ 276.387212][ T52] block nbd2: Receive control failed (result -32) [ 276.556492][T12495] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 276.632810][T12495] SET target dimension over the limit! [ 276.692561][T12495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1696'. [ 276.692975][T12499] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 277.576596][T12516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1703'. [ 278.161929][T12526] netlink: ct family unspecified [ 278.162271][T12526] netlink: ct family unspecified [ 278.162592][T12526] netlink: ct family unspecified [ 278.162913][T12526] netlink: ct family unspecified [ 278.170934][T12526] netlink: ct family unspecified [ 278.171219][T12526] netlink: ct family unspecified [ 278.171494][T12526] netlink: ct family unspecified [ 278.171761][T12526] netlink: ct family unspecified [ 278.178925][T12526] netlink: ct family unspecified [ 278.665390][T12532] tipc: Enabled bearer , priority 0 [ 278.751393][T12533] syzkaller0: entered promiscuous mode [ 278.751476][T12533] syzkaller0: entered allmulticast mode [ 278.765100][T12529] tipc: Resetting bearer [ 278.857565][T12529] tipc: Disabling bearer [ 279.377644][T12546] wg0 speed is unknown, defaulting to 1000 [ 279.414375][T12546] hsr0 speed is unknown, defaulting to 1000 [ 279.570672][T12562] netlink: 'syz.1.1711': attribute type 83 has an invalid length. [ 279.787251][T12569] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1716'. [ 279.997082][T12574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1717'. [ 280.050821][T12575] netlink: 'syz.2.1719': attribute type 23 has an invalid length. [ 280.212912][T12578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1719'. [ 280.645046][T12588] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1721'. [ 281.017298][T12595] nbd: nbd64 already in use [ 281.305969][T12607] __nla_validate_parse: 3 callbacks suppressed [ 281.306018][T12607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1725'. [ 281.920217][ T5632] udevd[5632]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 282.132857][T12637] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1731'. [ 282.518582][T12645] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1734'. [ 282.829333][T12648] syzkaller0: entered promiscuous mode [ 282.829461][T12648] syzkaller0: entered allmulticast mode [ 282.907626][T12648] tipc: Enabled bearer , priority 0 [ 282.948083][T12647] tipc: Resetting bearer [ 283.058253][T12666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1737'. [ 283.156693][T12647] tipc: Disabling bearer [ 283.224878][T12670] xt_recent: Unsupported userspace flags (000000b1) [ 283.764433][T12677] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1740'. [ 283.830133][T12681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1741'. [ 283.957498][T12680] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1739'. [ 283.988470][T12681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.096059][T12690] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1742'. [ 284.106075][T12680] veth0_to_team: Caught tx_queue_len zero misconfig [ 284.519052][T12694] bridge_slave_1: left allmulticast mode [ 284.519098][T12694] bridge_slave_1: left promiscuous mode [ 284.519425][T12694] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.548152][T12694] bridge_slave_0: left allmulticast mode [ 284.563400][T12694] bridge_slave_0: left promiscuous mode [ 284.569665][T12694] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.140659][T12714] net_ratelimit: 58 callbacks suppressed [ 285.141603][T12714] netlink: Unknown nat attribute (0) [ 285.141676][T12714] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.340851][T12718] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 285.632349][T12725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1751'. [ 285.831955][T12728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1752'. [ 286.074768][T12735] A link change request failed with some changes committed already. Interface 04±ÿª¨úrBº“€ may have been left with an inconsistent configuration, please check. [ 286.290848][T12742] netlink: 'syz.0.1758': attribute type 3 has an invalid length. [ 286.299908][T12742] netlink: 'syz.0.1758': attribute type 1 has an invalid length. [ 286.310283][T12742] netlink: Conntrack attr has 4 unknown bytes [ 286.317957][T12742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.415688][T12747] netlink: 'syz.1.1757': attribute type 10 has an invalid length. [ 286.434065][T12747] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.477950][T12747] : (slave team0): Enslaving as an active interface with an up link [ 286.624751][T12753] __nla_validate_parse: 3 callbacks suppressed [ 286.631074][T12753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1761'. [ 286.640771][T12753] gre0: Master is either lo or non-ether device [ 286.671702][T12757] netlink: 'syz.1.1757': attribute type 10 has an invalid length. [ 286.889940][T12758] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1759'. [ 286.998306][T12775] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1763'. [ 286.998352][T12775] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1763'. [ 287.035974][T12776] netlink: 'syz.1.1764': attribute type 1 has an invalid length. [ 287.064732][T12777] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1765'. [ 287.184459][T12776] bond9: entered promiscuous mode [ 287.184525][T12776] bond9: entered allmulticast mode [ 287.184975][T12776] 8021q: adding VLAN 0 to HW filter on device bond9 [ 287.266937][T12780] erspan2: entered allmulticast mode [ 287.284051][T12780] bond9: (slave erspan2): making interface the new active one [ 287.291837][T12780] erspan2: entered promiscuous mode [ 287.305955][T12780] bond9: (slave erspan2): Enslaving as an active interface with an up link [ 287.750707][T12800] batman_adv: batadv0: Adding interface: veth0 [ 287.750745][T12800] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.750810][T12801] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1770'. [ 287.751253][T12800] batman_adv: batadv0: Interface activated: veth0 [ 287.890478][T12801] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1770'. [ 287.965886][T12811] ip_tables: iptables: counters copy to user failed while replacing table [ 288.047177][T12814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1776'. [ 288.119402][T12814] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1776'. [ 288.161515][T12816] x_tables: duplicate underflow at hook 1 [ 288.286369][T12814] dummy0: entered allmulticast mode [ 288.559460][T12833] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1781'. [ 291.610279][T12843] netlink: 'syz.3.1786': attribute type 1 has an invalid length. [ 291.726379][T12843] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1786'. [ 291.744979][T12843] team0: entered promiscuous mode [ 291.745035][T12843] team_slave_0: entered promiscuous mode [ 291.745318][T12843] team_slave_1: entered promiscuous mode [ 292.117513][T12859] wg2: Caught tx_queue_len zero misconfig [ 292.253923][T12865] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 292.262473][T12867] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1793'. [ 292.460010][T12874] ipt_ECN: cannot use operation on non-tcp rule [ 292.624831][T12881] ipt_ah: unknown flags FF [ 292.878513][T12883] openvswitch: netlink: IP tunnel dst address not specified [ 293.041262][T12892] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1802'. [ 293.058701][T12892] netlink: 420 bytes leftover after parsing attributes in process `syz.0.1802'. [ 293.179652][T12894] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1801'. [ 293.235214][T12897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1801'. [ 293.246145][T12894] bond6 (unregistering): Released all slaves [ 293.295369][T12897] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 293.333989][T12900] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 293.476206][T12903] block nbd0: reconnected socket [ 293.559385][T12914] netlink: 'syz.4.1809': attribute type 1 has an invalid length. [ 293.675315][T12920] IPv6: NLM_F_CREATE should be specified when creating new route [ 293.850650][T12920] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1807'. [ 293.854910][T12914] bridge7: entered promiscuous mode [ 293.872091][T12914] bond6: (slave bridge7): making interface the new active one [ 293.885490][T12914] bond6: (slave bridge7): Enslaving as an active interface with an up link [ 293.886374][T12917] sit0: Caught tx_queue_len zero misconfig [ 293.886728][T12930] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1807'. [ 293.886763][T12930] tipc: Invalid UDP bearer configuration [ 293.886862][T12930] tipc: Enabling of bearer rejected, failed to enable media [ 293.958203][T12931] bridge8: entered promiscuous mode [ 293.993585][T12931] bond6: (slave bridge8): Enslaving as a backup interface with an up link [ 294.166150][ T52] block nbd0: Receive control failed (result -32) [ 294.275699][T12950] netlink: 'syz.3.1811': attribute type 11 has an invalid length. [ 294.275832][T12950] netlink: 'syz.3.1811': attribute type 11 has an invalid length. [ 294.275866][T12950] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1811'. [ 294.433351][T12948] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1812'. [ 295.299212][T12986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.371860][T12991] ip_tables: iptables: counters copy to user failed while replacing table [ 295.385501][T12991] netlink: 'syz.0.1822': attribute type 12 has an invalid length. [ 295.476834][T12994] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.732240][T13001] syzkaller0: entered promiscuous mode [ 295.732294][T13001] syzkaller0: entered allmulticast mode [ 295.812797][T13006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.845627][T13001] tipc: Enabled bearer , priority 0 [ 295.857467][T12999] tipc: Resetting bearer [ 295.971616][T12999] tipc: Disabling bearer [ 296.132876][T13026] syzkaller0: entered promiscuous mode [ 296.151094][T13026] syzkaller0: entered allmulticast mode [ 296.664522][T13051] netlink: 'syz.4.1840': attribute type 5 has an invalid length. [ 296.790223][T13063] netlink: 'syz.4.1840': attribute type 5 has an invalid length. [ 296.860806][T13068] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.905279][T13068] : (slave team0): Releasing backup interface [ 296.946175][T13068] team0: Cannot enslave team device to itself [ 297.038458][T13071] netlink: 'syz.1.1845': attribute type 1 has an invalid length. [ 297.047194][T13071] __nla_validate_parse: 3 callbacks suppressed [ 297.053616][T13071] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1845'. [ 297.179203][T13074] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1844'. [ 297.312396][T13082] tipc: Enabling of bearer rejected, already enabled [ 297.824602][T13094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1854'. [ 297.842948][T13095] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 298.013733][T13094] 8021q: adding VLAN 0 to HW filter on device bond10 [ 298.078863][T13094] netlink: 'syz.3.1854': attribute type 9 has an invalid length. [ 298.079137][T13110] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 298.088307][T13095] veth0: Caught tx_queue_len zero misconfig [ 298.198738][T13104] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 298.398273][T13107] veth1_macvtap: left promiscuous mode [ 298.477996][T13119] syz_tun: entered allmulticast mode [ 298.529413][T13128] syzkaller0: entered promiscuous mode [ 298.535622][T13128] syzkaller0: entered allmulticast mode [ 298.545648][T13128] tipc: Enabled bearer , priority 0 [ 298.581248][T13127] tipc: Resetting bearer [ 298.612837][T13127] tipc: Disabling bearer [ 298.728106][T13132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1862'. [ 298.759859][T13132] bond0 (unregistering): left promiscuous mode [ 298.764197][T13132] bond8: left promiscuous mode [ 298.800049][T13132] bond0 (unregistering): (slave bond8): Releasing backup interface [ 298.888620][T13132] bond0 (unregistering): (slave gretap1): Releasing backup interface [ 298.926080][T13132] bond0 (unregistering): Released all slaves [ 298.958254][T13106] syz_tun: left allmulticast mode [ 299.089101][T13142] lo: Caught tx_queue_len zero misconfig [ 299.394354][T13152] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1867'. [ 299.498036][T13148] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1868'. [ 299.534443][T13148] netlink: 'syz.2.1868': attribute type 10 has an invalid length. [ 299.716692][T13169] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1874'. [ 299.758757][T13169] syzkaller1: entered promiscuous mode [ 299.758799][T13169] syzkaller1: entered allmulticast mode [ 300.158715][T13188] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1879'. [ 300.224908][T13182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1876'. [ 300.246152][T13182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1876'. [ 300.563892][T13182] 8021q: adding VLAN 0 to HW filter on device bond6 [ 301.240707][T13217] Bluetooth: hci0: unsupported parameter 5161 [ 301.240750][T13217] Bluetooth: hci0: unsupported parameter 8192 [ 301.240785][T13217] Bluetooth: hci0: unsupported parameter 5161 [ 301.240804][T13217] Bluetooth: hci0: unsupported parameter 8192 [ 301.356896][T13219] syzkaller0: entered promiscuous mode [ 301.362996][T13219] syzkaller0: entered allmulticast mode [ 301.374733][T13219] tipc: Enabled bearer , priority 0 [ 301.392212][T13218] tipc: Resetting bearer [ 301.440296][T13218] tipc: Disabling bearer [ 301.811618][T13234] lo: left allmulticast mode [ 302.375648][T13253] __nla_validate_parse: 5 callbacks suppressed [ 302.378226][T13253] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1897'. [ 302.411686][T13253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1897'. [ 302.427186][T13253] bridge0: port 1(veth0) entered blocking state [ 302.427640][T13253] bridge0: port 1(veth0) entered disabled state [ 302.429736][T13253] veth0: entered allmulticast mode [ 302.485377][T13253] veth0: entered promiscuous mode [ 302.592992][T13253] netlink: 'syz.3.1897': attribute type 1 has an invalid length. [ 303.191297][T13286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1904'. [ 303.207167][T13275] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1901'. [ 303.726205][T13304] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.760946][T13304] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.940808][T13312] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.009075][T13310] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1910'. [ 304.009122][T13310] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1910'. [ 304.302338][T13328] batman_adv: batadv0: Adding interface: veth0 [ 304.311351][T13328] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.337664][T13328] batman_adv: batadv0: Interface activated: veth0 [ 304.403305][T13328] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1913'. [ 304.414109][T13328] batman_adv: batadv0: Interface deactivated: veth0 [ 304.420878][T13328] batman_adv: batadv0: Removing interface: veth0 [ 304.792564][T13345] netlink: 'syz.0.1919': attribute type 9 has an invalid length. [ 304.835198][T13342] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 304.835308][T13342] gretap2: entered promiscuous mode [ 304.835343][T13342] gretap2: entered allmulticast mode [ 304.865041][T13345] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1919'. [ 304.865445][T13345] gretap0: entered promiscuous mode [ 304.880341][T13345] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1919'. [ 304.891739][T13345] 0ªî{X¹¦: renamed from gretap0 [ 304.915556][T13345] 0ªî{X¹¦: left promiscuous mode [ 304.920936][T13345] 0ªî{X¹¦: entered allmulticast mode [ 304.928545][T13345] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 305.199355][T13360] netlink: 'syz.3.1922': attribute type 1 has an invalid length. [ 305.379121][T13355] netlink: 'syz.1.1923': attribute type 1 has an invalid length. [ 305.379167][T13355] netlink: 'syz.1.1923': attribute type 2 has an invalid length. [ 305.379212][T13355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1923'. [ 306.541575][T13395] syzkaller0: entered promiscuous mode [ 306.541625][T13395] syzkaller0: entered allmulticast mode [ 306.619486][T13395] tipc: Enabled bearer , priority 0 [ 306.858628][T13392] tipc: Resetting bearer [ 307.028524][T13392] tipc: Disabling bearer [ 307.351286][T13429] netlink: Unknown nat attribute (0) [ 307.358350][T13429] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.427957][T13431] veth1_to_hsr: mtu less than device minimum [ 308.000856][T13460] netlink: 'syz.3.1952': attribute type 3 has an invalid length. [ 308.299921][T13468] __nla_validate_parse: 2 callbacks suppressed [ 308.313413][T13468] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1956'. [ 308.710996][T13481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1959'. [ 308.935533][T13488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1961'. [ 309.400126][T13510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1966'. [ 309.832945][T13524] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 309.852505][T13524] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 310.337681][T13539] openvswitch: netlink: Duplicate key (type 0). [ 310.404236][T13539] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 310.446089][T13542] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 310.789649][T13549] bond5: Unable to set peer notification delay as MII monitoring is disabled [ 310.807459][T13549] bond5 (unregistering): Released all slaves [ 310.932160][T13552] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 311.182038][T13566] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1982'. [ 311.182091][T13566] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1982'. [ 311.182635][T13569] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1982'. [ 311.182654][T13569] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1982'. [ 311.241801][T13558] wg0 speed is unknown, defaulting to 1000 [ 311.247074][T13558] hsr0 speed is unknown, defaulting to 1000 [ 311.495732][T13582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1986'. [ 311.506586][T13582] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1986'. [ 311.841777][T13595] netlink: 'syz.2.1988': attribute type 2 has an invalid length. [ 312.937351][T13630] syzkaller0: entered promiscuous mode [ 312.937408][T13630] syzkaller0: entered allmulticast mode [ 312.941136][T13630] tipc: Enabled bearer , priority 0 [ 313.230242][T13636] netlink: 'syz.1.2003': attribute type 1 has an invalid length. [ 313.352220][T13636] __nla_validate_parse: 2 callbacks suppressed [ 313.352300][T13636] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2003'. [ 313.362602][T13638] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2003'. [ 313.472164][T13636] team0: Port device team_slave_0 removed [ 313.490943][T13643] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.492183][T13643] team0: Cannot enslave team device to itself [ 313.862424][T13655] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2010'. [ 314.054167][ T8812] tipc: Node number set to 3012865344 [ 314.222849][T13672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2013'. [ 314.318004][T13672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2013'. [ 314.329573][ T6411] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.344315][ T6411] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.344391][ T6411] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.344432][ T6411] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.387147][T13677] syzkaller1: entered promiscuous mode [ 314.392930][T13677] syzkaller1: entered allmulticast mode [ 314.401571][T13671] tipc: Enabling of bearer rejected, already enabled [ 314.832549][T13688] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2017'. [ 314.832605][T13688] netlink: 'syz.4.2017': attribute type 7 has an invalid length. [ 314.832637][T13688] netlink: 'syz.4.2017': attribute type 8 has an invalid length. [ 314.832655][T13688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2017'. [ 314.989584][T13688] erspan0: entered promiscuous mode [ 314.997725][T13688] 0ªî{X¹¦: entered promiscuous mode [ 315.007129][T13688] 0ªî{X¹¦: left promiscuous mode [ 315.019950][T13688] erspan0: left promiscuous mode [ 315.025837][T13696] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2020'. [ 315.722217][T13691] syzkaller0: entered promiscuous mode [ 315.722347][T13691] syzkaller0: entered allmulticast mode [ 315.919831][T13735] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2026'. [ 315.929059][T13735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2026'. [ 316.580906][T13748] xt_hl: Unknown Hop Limit match mode: 206 [ 317.259522][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.565520][T13776] netlink: 'syz.0.2032': attribute type 61 has an invalid length. [ 320.148746][T13802] netlink: 'syz.2.2039': attribute type 13 has an invalid length. [ 320.222387][T13807] IPVS: set_ctl: invalid protocol: 131 255.255.255.255:20000 [ 320.231337][T13802] macsec0: entered allmulticast mode [ 320.443963][T13814] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2044'. [ 320.637470][T13828] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2045'. [ 320.949066][T13844] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2048'. [ 321.600343][T13861] netlink: 'syz.2.2053': attribute type 1 has an invalid length. [ 321.602434][T13861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2053'. [ 321.712413][T13861] 8021q: adding VLAN 0 to HW filter on device team2 [ 322.121327][T13881] netlink: 'syz.4.2057': attribute type 1 has an invalid length. [ 322.196879][T13884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2057'. [ 322.258540][T13886] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2057'. [ 322.302152][T13881] 8021q: adding VLAN 0 to HW filter on device bond8 [ 322.730608][T13895] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2061'. [ 322.936848][T13907] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2063'. [ 323.066504][T13913] netlink: 'syz.4.2066': attribute type 21 has an invalid length. [ 323.066636][T13913] IPv6: NLM_F_CREATE should be specified when creating new route [ 323.067016][T13913] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 323.067061][T13913] IPv6: NLM_F_CREATE should be set when creating new route [ 323.068885][T13913] IPv6: NLM_F_CREATE should be set when creating new route [ 323.069772][T13913] IPv6: NLM_F_CREATE should be set when creating new route [ 323.470902][T13924] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2069'. [ 323.476418][T13928] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2070'. [ 325.459475][T13942] __nla_validate_parse: 3 callbacks suppressed [ 325.459538][T13942] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2073'. [ 325.528710][T13941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.589000][T13996] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2084'. [ 326.102225][T14006] geneve5: entered promiscuous mode [ 326.109516][T14009] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2087'. [ 326.121207][T14009] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2087'. [ 326.121270][T14009] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2087'. [ 326.808028][T14038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2096'. [ 326.858622][T14043] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2098'. [ 327.789962][T14081] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2105'. [ 328.527522][T14103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2110'. [ 328.538874][T14113] netlink: 'syz.3.2113': attribute type 4 has an invalid length. [ 328.828781][T14103] bond9: option xmit_hash_policy: invalid value (64) [ 328.848916][T14103] bond9 (unregistering): Released all slaves [ 328.854406][T14119] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2114'. [ 329.471898][T14134] ip6tnl0: Caught tx_queue_len zero misconfig [ 329.729974][T14137] netlink: 'syz.0.2122': attribute type 1 has an invalid length. [ 329.812390][T14143] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 330.032454][T14151] netlink: 'syz.3.2125': attribute type 1 has an invalid length. [ 330.044380][T14148] syzkaller0: left promiscuous mode [ 330.044403][T14148] syzkaller0: left allmulticast mode [ 331.456380][T14195] __nla_validate_parse: 1 callbacks suppressed [ 331.463838][T14195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2134'. [ 331.981707][T14214] syzkaller1: entered promiscuous mode [ 331.981762][T14214] syzkaller1: entered allmulticast mode [ 332.131804][T14216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2139'. [ 332.501653][T14234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2144'. [ 332.615263][T14233] openvswitch: netlink: VXLAN extension message has 5413 unknown bytes. [ 333.045711][T14243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2147'. [ 333.215058][T14243] ipvlan1: entered allmulticast mode [ 333.221513][T14243] virt_wifi0: entered allmulticast mode [ 333.444226][T14262] syzkaller0: entered promiscuous mode [ 333.444268][T14262] syzkaller0: entered allmulticast mode [ 333.772912][T14267] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2152'. [ 334.068183][T14276] Bluetooth: hci0: unsupported parameter 5135 [ 334.068236][T14276] Bluetooth: hci0: unsupported parameter 8192 [ 334.068268][T14276] Bluetooth: hci0: unsupported parameter 5135 [ 334.068285][T14276] Bluetooth: hci0: unsupported parameter 8192 [ 334.092129][T14279] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 334.092147][T14279] IPv6: NLM_F_CREATE should be set when creating new route [ 334.105045][T14279] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2155'. [ 334.568314][T14287] netlink: 'syz.0.2157': attribute type 39 has an invalid length. [ 334.953748][T14302] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2162'. [ 334.953875][T14302] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2162'. [ 335.049536][T14302] netlink: 'syz.4.2162': attribute type 39 has an invalid length. [ 335.134257][T14307] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2163'. [ 335.134326][T14307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2163'. [ 335.223749][T14313] tipc: Enabling of bearer rejected, already enabled [ 336.688900][T14359] __nla_validate_parse: 3 callbacks suppressed [ 336.688992][T14359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2176'. [ 336.789990][T14365] netlink: 'syz.3.2178': attribute type 10 has an invalid length. [ 336.790116][T14365] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2178'. [ 336.869081][T14365] dummy0: entered promiscuous mode [ 336.869136][T14365] dummy0: entered allmulticast mode [ 336.880923][T14365] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 336.909428][T14363] netlink: 33 bytes leftover after parsing attributes in process `syz.3.2178'. [ 336.909486][T14363] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2178'. [ 336.909527][T14363] netlink: 33 bytes leftover after parsing attributes in process `syz.3.2178'. [ 337.209495][T14377] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 337.227460][T14377] openvswitch: netlink: VXLAN extension 317 out of range max 1 [ 337.238048][T14375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2181'. [ 337.264488][T14380] netlink: 'syz.4.2184': attribute type 5 has an invalid length. [ 337.264535][T14380] netlink: 'syz.4.2184': attribute type 9 has an invalid length. [ 337.264565][T14380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2184'. [ 337.718446][T14388] tipc: Resetting bearer [ 337.718762][T14388] tipc: Resetting bearer [ 337.753166][ T25] hsr0 speed is unknown, defaulting to 1000 [ 337.754911][ T25] syz1: Port: 1 Link DOWN [ 338.444663][T14411] netlink: 'syz.2.2192': attribute type 4 has an invalid length. [ 338.461347][T14411] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2192'. [ 338.527868][T14411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2192'. [ 338.527919][T14411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2192'. [ 338.977186][T14423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.461914][T14438] gretap0: entered promiscuous mode [ 340.585623][T14468] SET target dimension over the limit! [ 340.780977][T14473] xt_l2tp: invalid flags combination: 8 [ 340.822857][T14472] 8021q: adding VLAN 0 to HW filter on device bond8 [ 341.405382][T14489] openvswitch: netlink: Duplicate or invalid key (type 0). [ 341.436136][T14487] netlink: 'syz.4.2213': attribute type 2 has an invalid length. [ 341.436271][T14487] netlink: 'syz.4.2213': attribute type 2 has an invalid length. [ 342.394682][ T6400] tipc: Resetting bearer [ 342.915370][T14519] openvswitch: netlink: Unknown key attributes 20 [ 343.072218][T14527] ip_tables: iptables: counters copy to user failed while replacing table [ 343.251398][T14534] __nla_validate_parse: 8 callbacks suppressed [ 343.259821][T14534] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2228'. [ 343.356755][T14538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2231'. [ 344.039951][T14568] netlink: 'syz.0.2238': attribute type 1 has an invalid length. [ 344.081440][T14570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2239'. [ 344.394256][ T31] audit: type=1800 audit(1788564691.260:6): pid=14580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2240" name="memory.events" dev="tmpfs" ino=2194 res=0 errno=0 [ 344.408580][ T31] audit: type=1804 audit(1788564691.270:7): pid=14580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2240" name="/newroot/425/memory.events" dev="tmpfs" ino=2194 res=1 errno=0 [ 344.427712][T14572] netlink: 'syz.0.2238': attribute type 1 has an invalid length. [ 344.788157][T14573] bond6 (unregistering): Released all slaves [ 344.805759][T14589] netlink: 'syz.3.2242': attribute type 83 has an invalid length. [ 344.836627][T14595] netlink: 'syz.3.2242': attribute type 83 has an invalid length. [ 345.284426][T14604] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 345.411046][T14613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.240013][T14642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2256'. [ 346.419730][T14645] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2254'. [ 346.568711][T14645] bond_slave_0: entered promiscuous mode [ 346.568756][T14645] bond_slave_0: entered allmulticast mode [ 347.624106][T14680] ip_tables: iptables: counters copy to user failed while replacing table [ 349.305918][T14719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2275'. [ 349.415140][T14726] netlink: 'syz.0.2277': attribute type 5 has an invalid length. [ 349.424375][T14726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2277'. [ 349.976836][T14742] netlink: 'syz.0.2280': attribute type 2 has an invalid length. [ 350.151429][T14744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2282'. [ 350.178435][T14744] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 350.350625][T14747] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2283'. [ 350.804732][T14767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2285'. [ 351.188192][T14764] IPVS: Scheduler module ip_vs_sip not found [ 351.435535][T14781] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2290'. [ 351.788413][T14798] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2293'. [ 351.788520][T14798] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2293'. [ 352.824799][T14829] netlink: 'syz.3.2304': attribute type 1 has an invalid length. [ 352.923762][T14830] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2303'. [ 353.016734][T14837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.086950][T14829] 8021q: adding VLAN 0 to HW filter on device bond12 [ 353.321865][T14850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2307'. [ 354.503489][T14870] macsec3: entered promiscuous mode [ 354.506632][T14870] macsec3: entered allmulticast mode [ 354.539704][T14870] bridge0: port 2(macsec3) entered blocking state [ 354.540026][T14870] bridge0: port 2(macsec3) entered disabled state [ 354.660856][T14881] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 354.860512][T14884] __nla_validate_parse: 6 callbacks suppressed [ 354.867609][T14884] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2313'. [ 355.432465][T14897] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2321'. [ 355.624490][T14904] vlan0: entered allmulticast mode [ 355.624618][T14904] bond0: entered allmulticast mode [ 355.903924][T14886] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2318'. [ 355.962904][T14886] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 355.963110][T14886] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 355.963265][T14886] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 355.963411][T14886] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 355.963565][T14886] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 355.963712][T14886] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 355.963857][T14886] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 355.964001][T14886] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 355.964147][T14886] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 356.174884][T14915] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2328'. [ 356.427220][T14917] block nbd0: reconnected socket [ 356.472526][ T52] block nbd0: Receive control failed (result -32) [ 356.653435][T14925] xt_hashlimit: size too large, truncated to 1048576 [ 357.465408][T14939] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2335'. [ 357.465456][T14939] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2335'. [ 358.335819][T14966] netlink: 'syz.3.2344': attribute type 7 has an invalid length. [ 358.377727][T14966] netlink: 'syz.3.2344': attribute type 7 has an invalid length. [ 358.377898][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.403529][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.403725][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.403818][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.864422][T14977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2347'. [ 358.964972][T14983] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 359.071829][T14984] IPVS: Unknown mcast interface: macvlan0 [ 359.588005][T14995] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2351'. [ 359.704703][T15002] netlink: 'syz.4.2352': attribute type 1 has an invalid length. [ 359.796879][T15004] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2352'. [ 361.275959][T15056] xt_MASQUERADE: bad MAP_IPS. [ 361.645813][T15062] bridge0: port 1(syz_tun) entered blocking state [ 361.650732][T15062] bridge0: port 1(syz_tun) entered disabled state [ 361.650941][T15062] syz_tun: entered allmulticast mode [ 361.661684][T15063] net_ratelimit: 47 callbacks suppressed [ 361.661743][T15063] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 362.187812][T15078] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2371'. [ 362.245745][T15077] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.282917][T15077] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2371'. [ 362.302484][T15077] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2371'. [ 362.302610][T15077] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2371'. [ 362.309551][T15082] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2370'. [ 362.309617][T15082] netlink: 35 bytes leftover after parsing attributes in process `syz.2.2370'. [ 362.309652][T15082] netlink: 'syz.2.2370': attribute type 5 has an invalid length. [ 362.309684][T15082] netlink: 'syz.2.2370': attribute type 6 has an invalid length. [ 362.309716][T15082] netlink: 35 bytes leftover after parsing attributes in process `syz.2.2370'. [ 362.516232][T15090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2373'. [ 362.531019][T15090] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2373'. [ 362.957385][T15109] IPVS: set_ctl: invalid protocol: 0 172.20.20.62:20002 [ 363.333750][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 363.562882][T15130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2383'. [ 363.620156][T15130] x_tables: duplicate underflow at hook 2 [ 364.232674][T15159] xt_MASQUERADE: bad MAP_IPS. [ 364.249639][T15159] netlink: 'syz.3.2390': attribute type 32 has an invalid length. [ 364.571220][T15159] bond13: Setting coupled_control to off (0) [ 364.599593][T15161] syzkaller0: left promiscuous mode [ 364.605174][T15161] syzkaller0: left allmulticast mode [ 364.887687][T15180] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 365.019069][T15144] ip_tables: iptables: counters copy to user failed while replacing table [ 365.267647][T15185] pimreg3: entered allmulticast mode [ 365.841997][T15203] 0ªî{X¹¦: entered promiscuous mode [ 365.852644][T15203] tipc: New replicast peer: 172.20.20.187 [ 365.859585][T15203] tipc: Enabled bearer , priority 10 [ 367.303238][T15236] xt_hashlimit: max too large, truncated to 1048576 [ 367.606042][T15246] __nla_validate_parse: 13 callbacks suppressed [ 367.613445][T15246] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2407'. [ 367.772799][T15236] xt_CT: No such helper "pptp" [ 368.222983][T15259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2411'. [ 368.361502][T15262] netlink: 'syz.0.2410': attribute type 61 has an invalid length. [ 368.655356][T15263] syzkaller0: entered promiscuous mode [ 368.661462][T15263] syzkaller0: entered allmulticast mode [ 369.109326][T15289] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2415'. [ 372.293583][T15292] tipc: Enabled bearer , priority 0 [ 372.306402][T15286] syzkaller0: entered promiscuous mode [ 372.306446][T15286] syzkaller0: entered allmulticast mode [ 372.346729][T15290] tipc: Resetting bearer [ 372.414170][T15305] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2419'. [ 372.508286][T15290] tipc: Disabling bearer [ 373.118463][T15335] vlan0: left promiscuous mode [ 373.126771][T15335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2423'. [ 373.141708][T15327] tipc: Enabling of bearer rejected, already enabled [ 373.153552][T15329] tipc: Enabling of bearer rejected, already enabled [ 373.251830][T15339] openvswitch: netlink: IP tunnel dst address not specified [ 373.640650][T15355] ip6t_rpfilter: unknown options [ 373.657420][T15355] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2427'. [ 373.658108][T15355] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2427'. [ 373.822898][T15357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2431'. [ 374.035614][T15359] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2430'. [ 374.225691][T15367] bond9: option resend_igmp: invalid value (32767) [ 374.232935][T15367] bond9: option resend_igmp: allowed values 0 - 255 [ 374.248994][T15367] bond9 (unregistering): Released all slaves [ 374.424884][T15368] bond9: option resend_igmp: invalid value (32767) [ 374.437488][T15368] bond9: option resend_igmp: allowed values 0 - 255 [ 374.455789][T15368] bond9 (unregistering): Released all slaves [ 374.738313][T15375] tipc: Enabled bearer , priority 0 [ 375.112907][T15381] syzkaller0: entered promiscuous mode [ 375.112952][T15381] syzkaller0: entered allmulticast mode [ 375.147162][T15374] tipc: Resetting bearer [ 375.299744][T15374] tipc: Disabling bearer [ 375.501920][T15403] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.693418][T15416] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2449'. [ 376.301243][T15429] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2448'. [ 376.553713][T15443] netlink: 'syz.0.2453': attribute type 39 has an invalid length. [ 376.830630][T15449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2457'. [ 376.830684][T15449] netlink: 'syz.4.2457': attribute type 30 has an invalid length. [ 376.830725][T15449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2457'. [ 376.881964][T15449] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2457'. [ 377.208530][T15459] syzkaller0: entered promiscuous mode [ 377.208575][T15459] syzkaller0: entered allmulticast mode [ 377.225202][T15459] tipc: Enabling of bearer rejected, already enabled [ 377.354550][T15466] netlink: 'syz.2.2460': attribute type 1 has an invalid length. [ 377.437459][T15466] bond9: option mode: invalid value (7) [ 377.458291][T15466] bond9 (unregistering): Released all slaves [ 377.502625][T15444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.542477][T15483] netlink: 'syz.2.2460': attribute type 10 has an invalid length. [ 377.860829][T15474] dummy0: left allmulticast mode [ 377.867137][T15483] dummy0: entered promiscuous mode [ 378.556130][T15512] netlink: 'syz.0.2470': attribute type 13 has an invalid length. [ 378.700010][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.850552][T15525] syzkaller0: entered promiscuous mode [ 378.850605][T15525] syzkaller0: entered allmulticast mode [ 378.862965][T15525] tipc: Enabled bearer , priority 0 [ 378.875488][T15523] tipc: Resetting bearer [ 378.946728][T15523] tipc: Disabling bearer [ 378.960855][T15531] netlink: 'syz.0.2474': attribute type 1 has an invalid length. [ 378.960899][T15531] __nla_validate_parse: 3 callbacks suppressed [ 378.960930][T15531] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2474'. [ 379.666933][T15554] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2479'. [ 379.667013][T15554] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2479'. [ 379.859317][T15566] pim6reg: entered allmulticast mode [ 380.299626][T15584] tipc: Trying to set illegal importance in message [ 380.445855][T15587] tipc: Enabling of bearer rejected, already enabled [ 380.962188][T15599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2491'. [ 381.364107][T15620] netlink: del zone limit has 8 unknown bytes [ 381.718298][T15633] netlink: zone id is out of range [ 381.750654][T15633] netlink: zone id is out of range [ 381.750725][T15633] netlink: zone id is out of range [ 381.750750][T15633] netlink: zone id is out of range [ 381.750758][T15633] netlink: zone id is out of range [ 381.750766][T15633] netlink: zone id is out of range [ 381.750790][T15633] netlink: zone id is out of range [ 381.750798][T15633] netlink: zone id is out of range [ 381.750804][T15633] netlink: zone id is out of range [ 381.835834][T15635] tipc: Enabling of bearer rejected, already enabled [ 381.962236][T15637] tipc: Enabling of bearer rejected, failed to enable media [ 382.453766][T15653] netlink: 'syz.0.2508': attribute type 12 has an invalid length. [ 382.537256][T15656] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2507'. [ 382.546821][T15655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2507'. [ 383.227146][T15680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2512'. [ 383.563806][T15691] bridge0: port 3(veth0) entered blocking state [ 383.563941][T15691] bridge0: port 3(veth0) entered disabled state [ 383.564139][T15691] veth0: entered allmulticast mode [ 383.582105][T15691] veth0: entered promiscuous mode [ 383.644197][T15682] wg0 speed is unknown, defaulting to 1000 [ 383.677766][T15682] hsr0 speed is unknown, defaulting to 1000 [ 384.320400][T15704] netlink: 'syz.1.2517': attribute type 2 has an invalid length. [ 384.554072][T15716] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2522'. [ 384.597913][T15718] netlink: 'syz.0.2523': attribute type 3 has an invalid length. [ 384.657750][T15719] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2522'. [ 385.799921][T15754] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2530'. [ 385.799974][T15754] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2530'. [ 385.816190][T15754] gretap2: entered promiscuous mode [ 385.816216][T15754] gretap2: entered allmulticast mode [ 386.151616][T15766] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2532'. [ 386.433769][T15773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2536'. [ 386.450155][T15776] netlink: 'syz.0.2535': attribute type 1 has an invalid length. [ 386.569185][T15776] 8021q: adding VLAN 0 to HW filter on device bond6 [ 386.702498][T15776] bond6: (slave geneve3): making interface the new active one [ 386.722316][T15784] netlink: 'syz.3.2538': attribute type 3 has an invalid length. [ 386.736066][T15776] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 386.875419][ T6411] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.875497][ T6411] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.875553][ T6411] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.875591][ T6411] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.075075][T15792] No such timeout policy "syz0" [ 387.366665][T15768] netlink: 'syz.1.2534': attribute type 1 has an invalid length. [ 387.450617][T15803] ip6gre3: entered allmulticast mode [ 387.658953][T15811] netlink: 364 bytes leftover after parsing attributes in process `syz.4.2549'. [ 387.741837][T15815] netlink: 'syz.0.2551': attribute type 2 has an invalid length. [ 387.798652][T15819] TCP: TCP_TX_DELAY enabled [ 388.103892][T15815] : entered promiscuous mode [ 388.150470][T15821] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2550'. [ 388.166432][T15824] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2553'. [ 388.338620][T15833] veth0: Caught tx_queue_len zero misconfig [ 388.532315][T15840] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 389.012221][T15853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2559'. [ 389.031385][T15853] bridge: RTM_NEWNEIGH with invalid ether address [ 389.434993][T15863] sctp: [Deprecated]: syz.1.2564 (pid 15863) Use of int in max_burst socket option deprecated. [ 389.434993][T15863] Use struct sctp_assoc_value instead [ 389.655312][T15870] __nla_validate_parse: 4 callbacks suppressed [ 389.655368][T15870] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2566'. [ 389.766068][T15875] xt_IDLETIMER: timeout value is too big [ 389.974287][T15878] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2569'. [ 390.024973][T15878] veth0_macvtap: Caught tx_queue_len zero misconfig [ 390.094863][T15883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2570'. [ 390.106108][T15884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2570'. [ 390.735568][T15897] vlan0: Caught tx_queue_len zero misconfig [ 391.470586][T15920] net_ratelimit: 1 callbacks suppressed [ 391.470658][T15920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.511330][T15922] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2583'. [ 391.511787][T15922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2583'. [ 392.253866][T15943] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2592'. [ 392.833895][T15968] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2598'. [ 392.833938][T15968] openvswitch: netlink: Flow key attr not present in new flow. [ 394.399073][T16028] ipt_REJECT: ECHOREPLY no longer supported. [ 394.578714][T16035] xt_REDIRECT: bad MAP_IPS. [ 394.657101][T16043] ip_tables: iptables: counters copy to user failed while replacing table [ 394.658410][T16036] syzkaller0: entered promiscuous mode [ 394.658431][T16036] syzkaller0: entered allmulticast mode [ 394.677391][T16046] batadv_slave_1: entered allmulticast mode [ 395.051677][T16052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2615'. [ 395.051723][T16052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2615'. [ 395.312050][T16056] netlink: Failed to add ¦â—k\ helper -22 [ 395.312130][T16056] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.506014][T16067] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2621'. [ 395.516505][T16067] A link change request failed with some changes committed already. Interface 04±ÿª¨úrBº“€ may have been left with an inconsistent configuration, please check. [ 396.013867][T16078] netlink: 'syz.0.2625': attribute type 1 has an invalid length. [ 396.013998][T16078] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2625'. [ 396.190305][T16078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2625'. [ 396.552534][T16101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2631'. [ 396.710033][T16104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.831989][T16108] netlink: 208 bytes leftover after parsing attributes in process `syz.3.2632'. [ 397.142333][T16118] wg1: entered promiscuous mode [ 397.142372][T16118] wg1: entered allmulticast mode [ 397.319651][T16125] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2640'. [ 397.356177][T16126] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2641'. [ 397.500728][T16133] netlink: 'syz.1.2642': attribute type 2 has an invalid length. [ 397.627701][T16135] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.627844][T16135] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.730659][T16137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2644'. [ 397.752362][T16135] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.752419][T16135] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.847124][T16135] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.858930][T16135] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.967130][T16135] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.967188][T16135] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.204997][ T6417] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.205052][ T6417] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.205153][ T6417] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.205183][ T6417] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.395081][T16164] tipc: Resetting bearer [ 398.438478][T16164] tipc: Disabling bearer [ 398.452882][T16174] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 398.537338][ T6417] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.537413][ T6417] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.603400][ T6417] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.603535][ T6417] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.667637][T16143] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.667709][T16143] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.918147][T16143] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.918203][T16143] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.089664][T16143] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.089736][T16143] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.143899][T16191] ipt_ECN: cannot use operation on non-tcp rule [ 399.258078][T16143] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.272049][T16143] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.619570][T16214] veth1_to_bond: Caught tx_queue_len zero misconfig [ 399.795151][T16218] netlink: 'syz.2.2662': attribute type 1 has an invalid length. [ 399.795196][T16218] netlink: 'syz.2.2662': attribute type 268 has an invalid length. [ 399.941461][ T6400] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.941590][ T6400] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.018237][ T6411] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.018368][ T6411] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.021577][ T6400] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.021644][ T6400] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.021717][ T6400] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.021775][ T6400] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.517477][T16236] __nla_validate_parse: 9 callbacks suppressed [ 400.517571][T16236] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2665'. [ 400.607532][T16235] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2666'. [ 400.675064][T16248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2673'. [ 400.678629][T16243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2671'. [ 400.678723][T16243] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 400.704341][T16248] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2673'. [ 400.995094][T16253] ip6gre0: Caught tx_queue_len zero misconfig [ 400.995232][T16253] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2670'. [ 401.346823][T16264] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2677'. [ 401.841603][T16275] Bluetooth: hci0: unsupported parameter 5134 [ 401.855942][T16275] Bluetooth: hci0: unsupported parameter 8192 [ 401.855995][T16275] Bluetooth: hci0: unsupported parameter 5134 [ 401.856012][T16275] Bluetooth: hci0: unsupported parameter 8192 [ 401.885121][T16276] Bluetooth: hci0: unsupported parameter 5134 [ 401.885163][T16276] Bluetooth: hci0: unsupported parameter 8192 [ 401.885198][T16276] Bluetooth: hci0: unsupported parameter 5134 [ 401.885215][T16276] Bluetooth: hci0: unsupported parameter 8192 [ 402.171897][T16280] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2687'. [ 402.332815][T16293] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2685'. [ 402.394015][T16296] sctp: [Deprecated]: syz.4.2690 (pid 16296) Use of int in maxseg socket option. [ 402.394015][T16296] Use struct sctp_assoc_value instead [ 402.416222][T16297] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2689'. [ 402.872598][T16313] syzkaller0: left promiscuous mode [ 402.872641][T16313] syzkaller0: left allmulticast mode [ 402.873046][T16313] tipc: Resetting bearer [ 403.272792][T16317] x_tables: duplicate underflow at hook 1 [ 403.603877][T16330] macvtap1: entered promiscuous mode [ 403.603925][T16330] vlan0: entered promiscuous mode [ 403.618549][T16330] macvtap1: entered allmulticast mode [ 403.618574][T16330] vlan0: entered allmulticast mode [ 403.618586][T16330] veth0_vlan: entered allmulticast mode [ 403.857575][T16347] ipt_REJECT: ECHOREPLY no longer supported. [ 403.876619][T16337] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 403.897396][T16349] syzkaller0: entered promiscuous mode [ 403.897453][T16349] syzkaller0: entered allmulticast mode [ 404.041194][T16358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.563799][T16373] ±ÿª¨úrBº“€: Caught tx_queue_len zero misconfig [ 404.650897][T16373] openvswitch: netlink: IPv4 tunnel dst address is zero [ 404.703610][T16379] ip_tables: iptables: counters copy to user failed while replacing table [ 404.711039][T16379] netlink: 'syz.4.2713': attribute type 1 has an invalid length. [ 405.157586][T16373] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.157659][T16373] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.157721][T16373] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 405.228403][T16395] x_tables: unsorted underflow at hook 2 [ 405.244224][T16395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 405.292517][T16388] wg0 speed is unknown, defaulting to 1000 [ 405.301747][T16388] hsr0 speed is unknown, defaulting to 1000 [ 405.529207][T16373] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.529271][T16373] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.530165][T16373] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 405.725645][T16373] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.726244][T16373] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.726689][T16373] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 405.941630][T16373] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.955751][T16373] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.955819][T16373] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 406.116975][T16418] __nla_validate_parse: 9 callbacks suppressed [ 406.117065][T16418] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2723'. [ 406.507464][T16425] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2725'. [ 406.633238][ T6400] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.633313][ T6400] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 406.633357][ T6400] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 406.733276][ T6400] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.733331][ T6400] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 406.733375][ T6400] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 406.801943][T16430] veth0: left allmulticast mode [ 406.802013][T16430] veth0: left promiscuous mode [ 406.804072][T16430] bridge0: port 1(veth0) entered disabled state [ 406.860992][T16430] batman_adv: batadv0: Adding interface: veth0 [ 406.861035][T16430] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.861475][T16430] batman_adv: batadv0: Interface activated: veth0 [ 406.902248][T16432] batman_adv: batadv0: Interface deactivated: veth0 [ 406.967581][T16432] bond5: (slave veth1): Releasing active interface [ 406.967628][T16432] bond5: (slave veth1): the permanent HWaddr of slave - 76:b8:d3:b3:e8:ee - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 407.010174][T16432] batman_adv: batadv0: Removing interface: veth0 [ 407.043390][ T6400] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.043450][ T6400] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 407.043493][ T6400] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 407.045124][ T6417] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.045149][ T6417] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 407.045172][ T6417] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 407.300241][T16442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2730'. [ 407.300301][T16442] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2730'. [ 407.300341][T16442] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2730'. [ 407.533931][T16447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2731'. [ 407.572408][T16450] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2734'. [ 407.926562][T16468] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2738'. [ 408.441549][T16481] netlink: 'syz.3.2742': attribute type 10 has an invalid length. [ 408.445868][T16483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2743'. [ 408.634864][T16463] tipc: Enabling of bearer rejected, already enabled [ 409.567320][T16516] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2749'. [ 409.911857][T16532] batman_adv: batadv0: Interface deactivated: veth0 [ 409.911903][T16532] batman_adv: batadv0: Removing interface: veth0 [ 409.936212][T16532] bridge0: port 2(veth0) entered blocking state [ 409.938009][T16532] bridge0: port 2(veth0) entered disabled state [ 409.938200][T16532] veth0: entered allmulticast mode [ 409.975783][T16532] veth0: entered promiscuous mode [ 410.707292][T16558] netlink: 'syz.2.2765': attribute type 3 has an invalid length. [ 410.906434][T16566] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 411.206906][T16573] ip_tables: iptables: counters copy to user failed while replacing table [ 411.304851][T16573] __nla_validate_parse: 6 callbacks suppressed [ 411.313592][T16573] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2768'. [ 411.490790][T16580] netlink: 'syz.1.2770': attribute type 27 has an invalid length. [ 411.791410][T16584] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 411.814282][T16586] sctp: [Deprecated]: syz.3.2772 (pid 16586) Use of int in maxseg socket option. [ 411.814282][T16586] Use struct sctp_assoc_value instead [ 412.684178][T16605] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2781'. [ 412.833960][T16614] netlink: 'syz.4.2780': attribute type 39 has an invalid length. [ 413.067507][T16612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2783'. [ 415.212594][T16655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2790'. [ 417.546013][T16690] bond14: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 417.627626][T16690] bond14 (unregistering): Released all slaves [ 417.631598][T16702] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2803'. [ 417.665714][T16696] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2802'. [ 418.308246][T16710] netlink: 'syz.1.2804': attribute type 23 has an invalid length. [ 418.448486][T16695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2801'. [ 418.457053][T16713] netlink: NAT attribute has 5 unknown bytes [ 418.457148][T16713] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 419.127285][T16724] tipc: Enabling of bearer rejected, failed to enable media [ 419.382725][T16727] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2807'. [ 419.787798][T16728] vlan1: entered promiscuous mode [ 419.969227][T16734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2810'. [ 420.662731][T16739] netlink: 'syz.1.2811': attribute type 2 has an invalid length. [ 420.662836][T16739] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2811'. [ 420.817011][T16749] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2813'. [ 420.903659][T16750] netlink: 'syz.1.2811': attribute type 2 has an invalid length. [ 420.903780][T16750] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2811'. [ 420.914732][T16754] ip_tables: iptables: counters copy to user failed while replacing table [ 421.466908][T16765] ip_tables: iptables: counters copy to user failed while replacing table [ 422.432191][T16778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2823'. [ 422.432463][T16778] netlink: 'syz.4.2823': attribute type 10 has an invalid length. [ 422.432706][T16778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2823'. [ 423.727508][T16797] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2829'. [ 424.415244][ T5616] bridge0: port 1(syz_tun) entered disabled state [ 424.529406][ T5616] syz_tun (unregistering): left allmulticast mode [ 424.538232][ T5616] bridge0: port 1(syz_tun) entered disabled state [ 424.675240][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 424.697425][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 424.707708][ T5622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 424.725404][ T5622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 424.738075][ T5622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 424.792651][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 424.801310][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 424.809240][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 424.820889][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 424.833664][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 425.109384][T16809] openvswitch: netlink: ct_state flags ffffffff unsupported [ 425.620492][T16817] team_slave_1: Caught tx_queue_len zero misconfig [ 425.842671][T16823] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2834'. [ 426.934002][ T52] Bluetooth: hci3: command tx timeout [ 427.811775][T16805] wg0 speed is unknown, defaulting to 1000 [ 427.850119][T16805] hsr0 speed is unknown, defaulting to 1000 [ 427.992691][T16854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2845'. [ 428.297316][T16860] netlink: 'syz.4.2847': attribute type 12 has an invalid length. [ 428.309467][T16860] netlink: 'syz.4.2847': attribute type 29 has an invalid length. [ 428.317681][T16860] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2847'. [ 428.327897][T16860] netlink: 59 bytes leftover after parsing attributes in process `syz.4.2847'. [ 429.023877][ T52] Bluetooth: hci3: command tx timeout [ 429.551194][T16892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2854'. [ 429.551352][T16892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2854'. [ 429.551388][T16892] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2854'. [ 429.651041][T16893] vlan0: Device is already in use. [ 430.425025][T16913] netlink: 'syz.1.2857': attribute type 11 has an invalid length. [ 430.436163][T16913] netlink: 4320 bytes leftover after parsing attributes in process `syz.1.2857'. [ 430.653302][T16805] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.654980][T16805] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.655400][T16805] bridge_slave_0: entered allmulticast mode [ 430.669854][T16805] bridge_slave_0: entered promiscuous mode [ 430.679396][T16805] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.679721][T16805] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.680048][T16805] bridge_slave_1: entered allmulticast mode [ 430.687088][T16805] bridge_slave_1: entered promiscuous mode [ 431.104358][ T52] Bluetooth: hci3: command tx timeout [ 431.223055][T16805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.254299][T16805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.850993][T16937] openvswitch: netlink: Duplicate or invalid key (type 0). [ 431.852760][T16805] team0: Port device team_slave_0 added [ 431.875155][T16805] team0: Port device team_slave_1 added [ 432.116256][T16805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.123488][T16805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.123613][T16805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.152685][T16805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.152721][T16805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.152780][T16805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.689050][T16805] hsr_slave_0: entered promiscuous mode [ 432.708938][T16805] hsr_slave_1: entered promiscuous mode [ 432.722476][T16805] debugfs: 'hsr0' already exists in 'hsr' [ 432.722602][T16805] Cannot create hsr debugfs directory [ 433.175409][ T52] Bluetooth: hci3: command tx timeout [ 433.236155][T16955] macsec3: entered promiscuous mode [ 433.236259][T16955] batadv0: entered promiscuous mode [ 433.261396][T16955] 8021q: adding VLAN 0 to HW filter on device macsec3 [ 433.267485][T16963] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2866'. [ 433.290814][T16955] batadv0: left promiscuous mode [ 435.912274][T16805] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.925945][T16805] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.121319][T16805] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.133033][T16805] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.329162][T16805] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.329443][T16805] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.662625][T17006] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2875'. [ 436.818273][T17001] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.834422][T17001] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.303675][T17006] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2875'. [ 437.735867][T16976] wg0 speed is unknown, defaulting to 1000 [ 437.849308][T16805] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.861082][T16805] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.864493][T17022] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2877'. [ 437.907278][T16976] hsr0 speed is unknown, defaulting to 1000 [ 437.907507][T17019] netlink: 'syz.3.2876': attribute type 4 has an invalid length. [ 438.478381][T17030] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2880'. [ 438.478514][T17030] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2880'. [ 438.540084][T17030] gretap4: entered promiscuous mode [ 438.546899][T17030] gretap4: entered allmulticast mode [ 438.740792][T17037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2881'. [ 439.361501][T17050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2882'. [ 440.055554][T17050] netlink: 'syz.0.2882': attribute type 15 has an invalid length. [ 440.141311][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.220849][T16805] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 441.296156][T16805] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 441.302913][T16805] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 441.373575][T16805] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 441.399547][T16805] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 441.515573][T17067] IPv6: Can't replace route, no match found [ 441.654483][T16805] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 441.728666][T17070] netlink: 'syz.3.2889': attribute type 14 has an invalid length. [ 442.341673][T16805] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 442.537933][T16805] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 442.920075][T17081] wg0 speed is unknown, defaulting to 1000 [ 442.928957][T17081] hsr0 speed is unknown, defaulting to 1000 [ 444.159696][T16805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.330495][T16805] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.443126][ T6400] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.443260][ T6400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.520598][ T5278] netdevsim netdevsim4 netdevsim3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 444.525684][ T5278] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 444.769202][ T6418] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.771887][ T6418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.994392][T17111] x_tables: duplicate underflow at hook 3 [ 445.854022][T17099] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 446.561837][T17135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2900'. [ 448.267298][T17150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2901'. [ 448.267544][T17150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2901'. [ 448.402166][T17155] netlink: 'syz.4.2902': attribute type 1 has an invalid length. [ 448.637251][T17158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2903'. [ 448.664645][T17160] xt_hashlimit: size too large, truncated to 1048576 [ 448.819219][T17167] netlink: 'syz.4.2905': attribute type 1 has an invalid length. [ 449.706052][T17180] xt_LOG: prefix is not null-terminated [ 449.886964][T17181] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2909'. [ 450.662937][T16805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.138356][T16805] veth0_vlan: entered promiscuous mode [ 451.236094][T16805] veth1_vlan: entered promiscuous mode [ 451.638351][T16805] veth0_macvtap: entered promiscuous mode [ 451.726946][T16805] veth1_macvtap: entered promiscuous mode [ 452.092951][T16805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.361545][T16805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.444158][ T6400] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.547837][ T6400] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.714170][ T6418] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.732524][ T6418] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.993642][ T6410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.993743][ T6410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.029852][T17234] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 454.270286][ T6400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.270406][ T6400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.305812][T17239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2934'. [ 454.993403][T17260] xt_hashlimit: size too large, truncated to 1048576 [ 455.177507][T17264] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2939'. [ 455.577465][T17275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2941'. [ 455.577723][T17275] netlink: 'syz.2.2941': attribute type 30 has an invalid length. [ 455.764338][ T6417] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.764628][ T6417] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.764918][ T6417] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.765170][ T6417] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.104759][ T5622] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 457.120228][ T5622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 457.131263][ T5622] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 457.142670][ T5622] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 457.158046][ T5622] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 457.309316][T17291] team0: left promiscuous mode [ 457.309580][T17291] team_slave_0: left promiscuous mode [ 457.310964][T17291] team_slave_1: left promiscuous mode [ 457.469025][T17291] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.492322][T17291] team0: Cannot enslave team device to itself [ 458.282560][T17298] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2948'. [ 458.879261][T17305] netlink: 'syz.0.2952': attribute type 16 has an invalid length. [ 459.254896][ T52] Bluetooth: hci5: command tx timeout [ 459.417418][T17313] sctp: [Deprecated]: syz.0.2953 (pid 17313) Use of int in maxseg socket option. [ 459.417418][T17313] Use struct sctp_assoc_value instead [ 459.611070][T17324] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2955'. [ 459.624464][T17324] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2955'. [ 459.647965][T17324] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2955'. [ 459.660998][T17324] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2955'. [ 459.661318][T17324] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2955'. [ 459.661616][T17324] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2955'. [ 459.661857][T17324] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2955'. [ 459.662146][T17324] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2955'. [ 459.728316][T17324] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2955'. [ 459.740798][T17324] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2955'. [ 460.704139][T17288] wg0 speed is unknown, defaulting to 1000 [ 460.707042][T17288] hsr0 speed is unknown, defaulting to 1000 [ 461.340054][ T52] Bluetooth: hci5: command tx timeout [ 462.431061][T17363] netlink: 'syz.2.2968': attribute type 1 has an invalid length. [ 463.413310][ T52] Bluetooth: hci5: command tx timeout [ 465.001627][T17393] __nla_validate_parse: 27 callbacks suppressed [ 465.001914][T17393] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2972'. [ 465.494151][ T52] Bluetooth: hci5: command tx timeout [ 466.088669][T17288] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.112196][T17288] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.119995][T17288] bridge_slave_0: entered allmulticast mode [ 466.193598][T17288] bridge_slave_0: entered promiscuous mode [ 466.278276][T17288] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.278670][T17288] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.319760][T17288] bridge_slave_1: entered allmulticast mode [ 466.420071][T17288] bridge_slave_1: entered promiscuous mode [ 466.811829][T17414] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2978'. [ 466.922081][T17288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.944339][T17288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.178636][T17288] team0: Port device team_slave_0 added [ 467.220977][T17288] team0: Port device team_slave_1 added [ 467.411620][T17288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.422661][T17288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.452379][T17288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.454928][T17288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.454945][T17288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.454970][T17288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.579369][T17430] netlink: 'syz.1.2981': attribute type 13 has an invalid length. [ 467.593557][T17430] netlink: 'syz.1.2981': attribute type 58 has an invalid length. [ 467.607487][T17430] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2981'. [ 468.091451][T17288] hsr_slave_0: entered promiscuous mode [ 468.098427][T17288] hsr_slave_1: entered promiscuous mode [ 468.108344][T17288] debugfs: 'hsr0' already exists in 'hsr' [ 468.108586][T17288] Cannot create hsr debugfs directory [ 468.110373][T17443] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 469.719016][ T6404] IPVS: starting estimator thread 0... [ 469.823387][T17459] IPVS: using max 27 ests per chain, 64800 per kthread [ 471.625291][T17470] netlink: 'syz.1.2991': attribute type 9 has an invalid length. [ 472.571186][T17492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2996'. [ 473.097332][T17288] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.113457][T17288] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.469628][T17288] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.496991][T17288] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.717298][T17509] tipc: Enabling of bearer rejected, already enabled [ 473.719826][T17508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2999'. [ 473.719846][T17508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2999'. [ 474.057665][T17288] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.073522][T17288] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.107532][T17518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2999'. [ 474.206540][T17521] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2999'. [ 477.110587][T17288] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 477.284916][T17288] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 477.314132][T17288] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 477.394251][T17288] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 477.396768][T17288] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 477.461061][T17288] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 477.472186][T17288] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 477.579059][T17288] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 477.882620][T17570] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3008'. [ 478.036831][T17568] netlink: 'syz.2.3009': attribute type 20 has an invalid length. [ 478.050997][T17568] IPv6: NLM_F_CREATE should be specified when creating new route [ 478.124959][T17574] tipc: Enabling of bearer rejected, media not registered [ 478.761329][T17288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.770962][T17581] syzkaller0: entered promiscuous mode [ 478.771175][T17581] syzkaller0: entered allmulticast mode [ 478.897263][T17581] tipc: Enabled bearer , priority 0 [ 478.995366][T17579] tipc: Resetting bearer [ 479.257150][T17579] tipc: Disabling bearer [ 479.317874][T17593] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3013'. [ 479.408775][T17288] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.419974][T17582] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 479.529133][ T6417] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.529269][ T6417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.692692][ T6417] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.694354][ T6417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.793742][T17598] netlink: 'syz.1.3016': attribute type 23 has an invalid length. [ 479.886610][T17600] x_tables: unsorted underflow at hook 1 [ 479.916363][T17600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3018'. [ 479.959824][T17600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3018'. [ 480.097222][T17600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3018'. [ 480.119963][T17600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3018'. [ 480.148239][T17600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3018'. [ 480.171736][T17600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3018'. [ 480.202212][T17600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3018'. [ 480.274663][T17600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3018'. [ 480.615950][ T52] Bluetooth: hci3: command 0x0401 tx timeout [ 481.933823][T17617] vlan0: entered promiscuous mode [ 481.934543][T17617] vlan0: entered allmulticast mode [ 481.934637][T17617] veth0_vlan: entered allmulticast mode [ 483.575168][T17635] __nla_validate_parse: 20 callbacks suppressed [ 483.575440][T17635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3026'. [ 483.575678][T17635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3026'. [ 483.575992][T17635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3026'. [ 483.869876][T17636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3025'. [ 483.892555][T17640] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3025'. [ 484.355423][T17654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 485.103634][T17668] bond14: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 485.117368][T17668] bond14 (unregistering): Released all slaves [ 486.479466][T17691] netlink: 'syz.0.3038': attribute type 142 has an invalid length. [ 487.571787][T17288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.159374][T17711] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3040'. [ 488.187257][T17711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3040'. [ 488.240968][T17718] bond0: option miimon: invalid value (18446744071829782528) [ 488.251031][T17718] bond0: option miimon: allowed values 0 - 2147483647 [ 488.323120][T17711] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3040'. [ 488.323400][T17711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3040'. [ 490.319945][T17728] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3044'. [ 491.317411][T17753] openvswitch: netlink: Duplicate or invalid key (type 0). [ 492.111612][T17759] IPVS: ip_vs_edit_dest(): server weight less than zero [ 492.151860][T17760] IPVS: ip_vs_edit_dest(): server weight less than zero [ 492.224926][T17757] netlink: 'syz.3.3050': attribute type 2 has an invalid length. [ 492.387912][T17288] veth0_vlan: entered promiscuous mode [ 492.652526][T17770] netlink: set zone limit has 4 unknown bytes [ 492.742084][T17288] veth1_vlan: entered promiscuous mode [ 493.686217][T17288] veth0_macvtap: entered promiscuous mode [ 493.730229][T17288] veth1_macvtap: entered promiscuous mode [ 494.077349][T17288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.338264][T17288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.676272][ T6417] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.690654][ T6417] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.724669][ T6397] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.725521][ T6397] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.097574][T17794] atomic_op ffff8880672de1e0 conn xmit_atomic 0000000000000000 [ 495.763580][ T6418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.776393][ T6418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.994825][T17807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3059'. [ 496.009479][ T5278] veth1_vlan: left promiscuous mode [ 496.200977][T17814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3060'. [ 496.352989][ T6409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.354054][ T6409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.213498][T17841] xt_policy: output policy not valid in PREROUTING and INPUT [ 499.837291][T17849] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3069'. [ 501.080353][ T5622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 501.096959][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 501.107123][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 501.115285][ T5622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 501.120972][ T5622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 501.405053][T17868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3072'. [ 501.581284][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.754403][T17879] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3072'. [ 501.942235][T17886] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3072'. [ 502.311215][T17885] netlink: zone id is out of range [ 502.318950][T17885] netlink: zone id is out of range [ 502.325645][T17885] netlink: zone id is out of range [ 502.325686][T17885] netlink: zone id is out of range [ 502.326069][T17885] netlink: zone id is out of range [ 502.326229][T17885] netlink: zone id is out of range [ 502.326237][T17885] netlink: zone id is out of range [ 502.326314][T17885] netlink: zone id is out of range [ 502.326443][T17885] netlink: zone id is out of range [ 502.326508][T17885] netlink: zone id is out of range [ 503.174226][ T5622] Bluetooth: hci0: command tx timeout [ 503.535186][T17898] sctp: [Deprecated]: syz.0.3077 (pid 17898) Use of struct sctp_assoc_value in delayed_ack socket option. [ 503.535186][T17898] Use struct sctp_sack_info instead [ 504.882632][T17910] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3080'. [ 504.882764][T17910] netlink: 'syz.1.3080': attribute type 2 has an invalid length. [ 505.253056][ T5622] Bluetooth: hci0: command tx timeout [ 505.652347][T17924] syzkaller1: entered promiscuous mode [ 505.652796][T17924] syzkaller1: entered allmulticast mode [ 505.829267][T17928] netlink: 'syz.1.3086': attribute type 21 has an invalid length. [ 505.829391][T17928] IPv6: NLM_F_CREATE should be specified when creating new route [ 506.182352][ T31] audit: type=1800 audit(1788564853.040:8): pid=17928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3086" name=0A dev="tmpfs" ino=3025 res=0 errno=0 [ 506.661892][T17863] wg0 speed is unknown, defaulting to 1000 [ 506.747605][T17863] hsr0 speed is unknown, defaulting to 1000 [ 506.956313][T17944] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3089'. [ 507.285154][T17953] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3092'. [ 507.334391][ T5622] Bluetooth: hci0: command tx timeout [ 507.672447][T17957] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 507.677862][T17957] net_ratelimit: 5 callbacks suppressed [ 507.677880][T17957] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 509.418447][ T5622] Bluetooth: hci0: command tx timeout [ 509.512433][T17981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3097'. [ 509.512555][T17981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3097'. [ 509.512658][T17981] netlink: 'syz.2.3097': attribute type 14 has an invalid length. [ 509.512719][T17981] netlink: 'syz.2.3097': attribute type 13 has an invalid length. [ 512.275055][T18006] vcan0: tx address claim with broadcast sa [ 512.340780][T18009] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3101'. [ 512.527665][T18002] bond7: Unable to set up delay as MII monitoring is disabled [ 512.640974][T18002] bond7 (unregistering): Released all slaves [ 513.447637][T17863] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.458244][T17863] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.458602][T17863] bridge_slave_0: entered allmulticast mode [ 513.470405][T17863] bridge_slave_0: entered promiscuous mode [ 513.515676][T17863] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.523528][T17863] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.523886][T17863] bridge_slave_1: entered allmulticast mode [ 513.551329][T17863] bridge_slave_1: entered promiscuous mode [ 513.704100][T18019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3104'. [ 513.704354][T18019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3104'. [ 514.142655][T18035] netlink: 'syz.2.3106': attribute type 8 has an invalid length. [ 514.166417][T18035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3106'. [ 514.934409][T18035] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.936652][T18035] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.105839][T17863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.140630][T17863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.397395][T17863] team0: Port device team_slave_0 added [ 515.586787][T17863] team0: Port device team_slave_1 added [ 515.725130][T18047] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 515.797563][T18049] netlink: 272 bytes leftover after parsing attributes in process `syz.2.3112'. [ 516.099291][T18053] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3112'. [ 516.284128][T18058] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3111'. [ 516.525455][T17863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.534072][T17863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.534198][T17863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.631753][T17863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.644347][T17863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.676291][T17863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.115124][T17863] hsr_slave_0: entered promiscuous mode [ 518.121805][T17863] hsr_slave_1: entered promiscuous mode [ 518.128985][T17863] debugfs: 'hsr0' already exists in 'hsr' [ 518.129010][T17863] Cannot create hsr debugfs directory [ 519.852582][T18103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3118'. [ 519.868613][T18103] block nbd3: Unsupported socket: should be TCP or UNIX. [ 519.909736][T18103] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3118'. [ 519.909930][T18103] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3118'. [ 520.490759][T18106] openvswitch: netlink: VLAN attribute unexpected. [ 522.010192][T17863] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.427554][T18140] syz.2.3126 (18140) used obsolete PPPIOCDETACH ioctl [ 526.086095][T17863] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.378082][T17863] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.609291][T18156] netlink: 'syz.2.3130': attribute type 1 has an invalid length. [ 527.054228][T18156] 8021q: adding VLAN 0 to HW filter on device bond1 [ 527.239070][T18158] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 527.383727][T17863] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.872104][T18164] netlink: zone id is out of range [ 527.872203][T18164] netlink: zone id is out of range [ 527.872269][T18164] netlink: zone id is out of range [ 527.872303][T18164] netlink: zone id is out of range [ 527.872337][T18164] netlink: zone id is out of range [ 527.872397][T18164] netlink: zone id is out of range [ 527.872431][T18164] netlink: zone id is out of range [ 527.872464][T18164] netlink: zone id is out of range [ 527.872497][T18164] netlink: zone id is out of range [ 527.872530][T18164] netlink: zone id is out of range [ 528.118375][T18166] netlink: 'syz.2.3132': attribute type 12 has an invalid length. [ 528.816946][T18166] bond2: option primary_reselect: invalid value (255) [ 528.916818][T18166] bond2 (unregistering): Released all slaves [ 529.244974][T18178] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3136'. [ 530.331616][T18187] IPVS: set_ctl: invalid protocol: 75 224.0.0.2:20002 [ 530.910378][T17863] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 530.984018][T17863] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 530.987549][T18190] netlink: 592 bytes leftover after parsing attributes in process `syz.4.3140'. [ 531.036180][T17863] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 531.106897][T17863] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 531.123640][T17863] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 531.162767][T18192] netlink: 'syz.1.3139': attribute type 58 has an invalid length. [ 531.174803][T18192] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3139'. [ 531.436950][T17863] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 531.916883][T17863] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 532.078731][T17863] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 533.038640][T17863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.194960][T17863] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.276836][ T6412] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.277117][ T6412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.357274][ T6412] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.357503][ T6412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.384524][T18212] sctp: [Deprecated]: syz.4.3145 (pid 18212) Use of struct sctp_assoc_value in delayed_ack socket option. [ 533.384524][T18212] Use struct sctp_sack_info instead [ 533.554487][T18215] sctp: [Deprecated]: syz.4.3145 (pid 18215) Use of int in maxseg socket option. [ 533.554487][T18215] Use struct sctp_assoc_value instead [ 535.130306][T18232] macvlan2: entered promiscuous mode [ 535.138403][T18232] macvlan2: entered allmulticast mode [ 535.151144][T18232] : (slave macvlan2): Error -98 calling set_mac_address [ 537.040341][T18251] syzkaller0: entered promiscuous mode [ 537.050897][T18251] syzkaller0: entered allmulticast mode [ 539.682111][T18292] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3162'. [ 539.682241][T18292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3162'. [ 546.500755][T18304] netlink: 'syz.4.3165': attribute type 9 has an invalid length. [ 546.514049][T18304] netlink: 'syz.4.3165': attribute type 4 has an invalid length. [ 546.690000][T18307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3166'. [ 546.690249][T18307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3166'. [ 546.833477][T18308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3164'. [ 547.399681][T18308] net_ratelimit: 2 callbacks suppressed [ 547.399770][T18308] netlink: Failed to add  helper -22 [ 547.399929][T18308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 547.529668][T17863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 547.906669][T18330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3168'. [ 548.074644][T18319] xt_nat: multiple ranges no longer supported [ 548.152418][T17863] veth0_vlan: entered promiscuous mode [ 548.281892][T17863] veth1_vlan: entered promiscuous mode [ 549.191474][T17863] veth0_macvtap: entered promiscuous mode [ 549.341070][T17863] veth1_macvtap: entered promiscuous mode [ 549.738261][T18320] Bluetooth: hci3: command 0x0401 tx timeout [ 549.831096][T18340] wg2: Caught tx_queue_len zero misconfig [ 549.910733][T17863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.920489][T18350] netlink: 'syz.0.3172': attribute type 10 has an invalid length. [ 549.920752][T18350] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3172'. [ 550.079277][T18350] team0: entered allmulticast mode [ 550.079530][T18350] xfrm0: entered allmulticast mode [ 550.083435][T18350] tipc: Resetting bearer [ 550.084420][T18350] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 550.168458][T17863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 550.324136][ T6417] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.325137][ T6417] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.415648][ T6400] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.415810][ T6400] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.935359][T18364] Bluetooth: MGMT ver 1.23 [ 551.963772][T18348] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 552.837874][T18384] netlink: 'syz.2.3179': attribute type 1 has an invalid length. [ 552.838117][T18384] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3179'. [ 553.222947][ T6410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.223485][ T6410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.567120][ T6418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.567224][ T6418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.685601][T18408] tipc: Started in network mode [ 554.685855][T18408] tipc: Node identity 8f54000000000000ff, cluster identity 3 [ 556.428972][T18320] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 556.442250][T18320] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 556.459185][T18320] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 556.477954][T18320] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 556.495517][T18320] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 556.572952][T18437] syzkaller0: entered promiscuous mode [ 556.574284][T18437] syzkaller0: entered allmulticast mode [ 558.054508][ T6404] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xb9 [ 558.061248][ T6397] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.061286][ T6397] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.247525][T18456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3195'. [ 558.389227][T18464] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3197'. [ 558.464374][T18452] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 558.623504][ T5622] Bluetooth: hci1: command tx timeout [ 558.648448][ T6397] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.648738][ T6397] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.689043][T18473] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3199'. [ 558.703658][T18473] openvswitch: netlink: Missing key (keys=40, expected=100) [ 559.416446][ T6397] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.535273][ T6397] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.703919][ T5622] Bluetooth: hci1: command tx timeout [ 560.711358][T18495] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3201'. [ 560.712048][T18495] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 560.712072][T18495] IPv6: NLM_F_CREATE should be set when creating new route [ 560.830275][ T6397] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.830532][ T6397] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.331058][T18439] wg0 speed is unknown, defaulting to 1000 [ 561.339019][T18439] hsr0 speed is unknown, defaulting to 1000 [ 561.356547][T18501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3203'. [ 561.586074][T18506] netlink: 'syz.3.3204': attribute type 9 has an invalid length. [ 561.586116][T18506] netlink: 'syz.3.3204': attribute type 4 has an invalid length. [ 561.854037][T18507] netlink: 'syz.2.3203': attribute type 1 has an invalid length. [ 562.775106][ T5622] Bluetooth: hci1: command tx timeout [ 563.038739][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.621453][ T6397] veth0: left allmulticast mode [ 563.622122][ T6397] veth0: left promiscuous mode [ 563.626838][ T6397] bridge0: port 2(veth0) entered disabled state [ 563.684579][T18529] netlink: 'syz.3.3209': attribute type 1 has an invalid length. [ 563.914330][ T6397] bridge0: port 1(dummy0) entered disabled state [ 564.188075][T18535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3210'. [ 564.280420][ T6397] pim6reg: left allmulticast mode [ 564.396907][T18545] netlink: 'syz.3.3209': attribute type 1 has an invalid length. [ 564.855023][ T5622] Bluetooth: hci1: command tx timeout [ 566.090208][ T6397] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 566.997131][ T6397] xfrm0 (unregistering): left allmulticast mode [ 567.030096][ T6397] team0: Port device xfrm0 removed [ 567.782573][ T6397] bond6 (unregistering): (slave geneve3): Releasing active interface [ 568.180058][ T6397] bond1 (unregistering): (slave veth3): Releasing active interface [ 568.205251][ T6397] bond1 (unregistering): Released all slaves [ 568.339325][ T6397] bond0 (unregistering): Released all slaves [ 568.399613][ T6397] bond2 (unregistering): Released all slaves [ 568.460691][ T6397] bond3 (unregistering): Released all slaves [ 568.558279][ T6397] bond4 (unregistering): Released all slaves [ 568.624792][ T6397] bond5 (unregistering): Released all slaves [ 568.689192][ T6397] bond6 (unregistering): Released all slaves [ 569.466670][ T6397] : left promiscuous mode [ 569.786306][T18559] ip_tables: iptables: counters copy to user failed while replacing table [ 569.937428][T18560] IPVS: set_ctl: invalid protocol: 47 172.20.20.29:20003 [ 570.270493][ T6397] tipc: Disabling bearer [ 570.329606][ T6397] tipc: Disabling bearer [ 570.371086][ T6397] tipc: Left network mode [ 571.206090][T18572] netlink: 'syz.3.3214': attribute type 1 has an invalid length. [ 572.363380][T18597] xt_nfacct: accounting object `syz0' does not exist [ 574.126297][T18634] netlink: 3080 bytes leftover after parsing attributes in process `syz.3.3224'. [ 574.126573][T18634] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.3224'. [ 574.974532][T18439] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.975150][T18439] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.975500][T18439] bridge_slave_0: entered allmulticast mode [ 575.102148][T18439] bridge_slave_0: entered promiscuous mode [ 575.571464][T18640] netlink: 'syz.2.3228': attribute type 1 has an invalid length. [ 575.823288][T18439] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.836070][T18439] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.846231][T18439] bridge_slave_1: entered allmulticast mode [ 575.864805][T18439] bridge_slave_1: entered promiscuous mode [ 576.486964][T18640] bond2: entered promiscuous mode [ 576.507640][T18640] 8021q: adding VLAN 0 to HW filter on device bond2 [ 576.989542][T18642] 8021q: adding VLAN 0 to HW filter on device bond2 [ 576.990756][T18642] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 577.023294][T18642] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 577.166726][T18642] bond2: (slave ip6gre1): making interface the new active one [ 577.177662][T18642] ip6gre1: entered promiscuous mode [ 577.230787][T18642] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 577.428277][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 578.921592][ T6397] hsr_slave_0: left promiscuous mode [ 578.956809][ T6397] hsr_slave_1: left promiscuous mode [ 579.186958][T18674] netlink: 'syz.4.3236': attribute type 58 has an invalid length. [ 579.187062][T18674] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3236'. [ 580.454629][T18320] Bluetooth: hci5: command 0x0406 tx timeout [ 581.348304][ T6404] smbdirect: ib_dev[syz0] removed [ 581.819684][T18439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.869921][T18439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 582.275958][T18678] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 583.052817][T18696] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3240'. [ 583.192783][T18696] netlink: 'syz.4.3240': attribute type 2 has an invalid length. [ 583.532551][T18439] team0: Port device team_slave_0 added [ 583.578722][T18439] team0: Port device team_slave_1 added [ 584.872187][T18439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.887291][T18439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.917743][T18439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.920003][T18439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.920020][T18439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.920045][T18439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.583754][T18717] team0 (unregistering): Port device team_slave_1 removed [ 585.704935][T18439] hsr_slave_0: entered promiscuous mode [ 585.722807][T18439] hsr_slave_1: entered promiscuous mode [ 585.728579][T18439] debugfs: 'hsr0' already exists in 'hsr' [ 585.728601][T18439] Cannot create hsr debugfs directory [ 585.826387][ T6397] IPVS: stop unused estimator thread 0... [ 586.334042][ T6397] veth0: left allmulticast mode [ 586.334766][ T6397] veth0: left promiscuous mode [ 586.336001][ T6397] bridge0: port 3(veth0) entered disabled state [ 586.392701][ T6397] bridge_slave_1: left promiscuous mode [ 586.397287][ T6397] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.473187][ T6397] bridge_slave_0: left allmulticast mode [ 586.482947][ ** replaying previous printk message ** [ 586.482947][ T6397] bridge_slave_0: left promiscuous mode [ 586.486749][ T6397] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.487280][ T6397] Oops: general protection fault, probably for non-canonical address 0xfbd59c0000000024: 0000 [#1] SMP KASAN PTI [ 586.516612][ T6397] KASAN: maybe wild-memory-access in range [0xdead000000000120-0xdead000000000127] [ 586.525954][ T6397] CPU: 1 UID: 0 PID: 6397 Comm: kworker/u8:42 Not tainted syzkaller #0 PREEMPT(full) [ 586.535526][ T6397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 586.545602][ T6397] Workqueue: netns cleanup_net [ 586.550569][ T6397] RIP: 0010:br_del_frame+0xd1/0x160 [ 586.556017][ T6397] Code: f7 4c 8b 73 10 48 83 c3 18 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 b9 37 84 f7 4c 8b 3b 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 90 38 84 f7 4d 89 37 4d 85 f6 74 [ 586.575727][ T6397] RSP: 0018:ffffc9000d6977c0 EFLAGS: 00010a06 [ 586.581856][ T6397] RAX: 1bd5a00000000024 RBX: ffffffff907bdc58 RCX: ffff88802cf23e80 [ 586.589848][ T6397] RDX: 0000000000000000 RSI: ffffffff907bdc40 RDI: ffffffff907bdc50 [ 586.597844][ T6397] RBP: 000000000000001c R08: aa00000000000000 R09: 0000000000000000 [ 586.605829][ T6397] R10: 0000000000008000 R11: ffff8880b873ff28 R12: dffffc0000000000 [ 586.613815][ T6397] R13: 1ffffffff20f7b8b R14: 0000000000000000 R15: dead000000000122 [ 586.621799][ T6397] FS: 0000000000000000(0000) GS:ffff888124dd9000(0000) knlGS:0000000000000000 [ 586.630736][ T6397] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 586.637421][ T6397] CR2: 00007feeacdef2f8 CR3: 000000001ce9a000 CR4: 00000000003526f0 [ 586.645422][ T6397] Call Trace: [ 586.648778][ T6397] [ 586.651789][ T6397] br_cfm_port_del+0x106/0x1a0 [ 586.656679][ T6397] del_nbp+0x178/0x9f0 [ 586.660772][ T6397] br_dev_delete+0x6e/0x130 [ 586.665292][ T6397] br_net_exit_rtnl+0xb1/0x120 [ 586.670070][ T6397] ? __pfx_br_net_exit_rtnl+0x10/0x10 [ 586.675509][ T6397] ops_undo_list+0x319/0x8d0 [ 586.680118][ T6397] ? __pfx_ops_undo_list+0x10/0x10 [ 586.685267][ T6397] ? idr_destroy+0x227/0x290 [ 586.689964][ T6397] cleanup_net+0x572/0x810 [ 586.694488][ T6397] ? __pfx_cleanup_net+0x10/0x10 [ 586.699457][ T6397] ? rcu_is_watching+0x16/0xb0 [ 586.704322][ T6397] ? process_scheduled_works+0x97a/0x1630 [ 586.710101][ T6397] process_scheduled_works+0xc3d/0x1630 [ 586.715676][ T6397] ? __pfx_process_scheduled_works+0x10/0x10 [ 586.721672][ T6397] ? assign_work+0x3cf/0x5d0 [ 586.726277][ T6397] worker_thread+0xa47/0xfb0 [ 586.730893][ T6397] kthread+0x38b/0x480 [ 586.734971][ T6397] ? __pfx_worker_thread+0x10/0x10 [ 586.740099][ T6397] ? __pfx_kthread+0x10/0x10 [ 586.744695][ T6397] ret_from_fork+0x514/0xb70 [ 586.749331][ T6397] ? __pfx_ret_from_fork+0x10/0x10 [ 586.754466][ T6397] ? __switch_to+0xc89/0x1420 [ 586.759156][ T6397] ? __pfx_kthread+0x10/0x10 [ 586.763758][ T6397] ret_from_fork_asm+0x1a/0x30 [ 586.768573][ T6397] [ 586.771600][ T6397] Modules linked in: [ 586.776486][ T6397] ---[ end trace 0000000000000000 ]--- [ 586.787925][ T6397] RIP: 0010:br_del_frame+0xd1/0x160 [ 586.796703][ T6397] Code: f7 4c 8b 73 10 48 83 c3 18 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 b9 37 84 f7 4c 8b 3b 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 90 38 84 f7 4d 89 37 4d 85 f6 74 [ 586.818695][ T6397] RSP: 0018:ffffc9000d6977c0 EFLAGS: 00010a06 [ 586.830590][ T6397] RAX: 1bd5a00000000024 RBX: ffffffff907bdc58 RCX: ffff88802cf23e80 [ 586.839530][ T6397] RDX: 0000000000000000 RSI: ffffffff907bdc40 RDI: ffffffff907bdc50 [ 586.848714][ T6397] RBP: 000000000000001c R08: aa00000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 587.210546][ T6397] R10: 0000000000008000 R11: ffff8880b873ff28 R12: dffffc0000000000 [ 587.210641][ T6397] R13: 1ffffffff20f7b8b R14: 0000000000000000 R15: dead000000000122 [ 587.210677][ T6397] FS: 0000000000000000(0000) GS:ffff888124cd9000(0000) knlGS:0000000000000000 [ 587.210713][ T6397] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 587.210748][ T6397] CR2: 00007ffc2f71de00 CR3: 000000007e15e000 CR4: 00000000003526f0 [ 587.210877][ T6397] Kernel panic - not syncing: Fatal exception [ 587.256740][ T6397] Kernel Offset: disabled [ 587.261070][ T6397] Rebooting in 86400 seconds..