last executing test programs: 2.418986119s ago: executing program 3 (id=2625): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000040)=0x6, 0x4) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="bcada46f555abe1ec801fa5991926e94727a26a16c15ba3ab12ffbc19024e3685847f725f61c"], &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, r1}, 0x94) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r3, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x803}, 0xc0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x25dfdbfb, {{@in6=@dev, @in=@remote}, {@in=@private=0xa010100, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {0x0, 0x400, 0x0, 0x0, 0x0, 0x40000000000000}, {0x0, 0xb, 0x0, 0x8000}, {}, 0x0, 0x1000000, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106-gcm-aesni\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x4000080) (async) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r5, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1802}, 0x4944) 2.330744295s ago: executing program 4 (id=2626): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06fffd00000000bf610000000000000701000004000000850000005d000000bf610000000000000701000004000000850000005d000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.1769266s ago: executing program 3 (id=2628): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070070000000bf06000000000000bf610000000000000701000004000000850000005d000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.065975137s ago: executing program 4 (id=2629): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@sco, &(0x7f0000000080)=0x80) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000000c0)={0x101, 0x8000, 0x6, 0x5, 0x8, 0x0, [{0xa6, 0x100000000000, 0x8, '\x00', 0x80}, {0x451, 0x3, 0x735, '\x00', 0xc}, {0x0, 0x5, 0x4b, '\x00', 0x2}, {0x7, 0x8, 0x9, '\x00', 0x8}, {0xffff, 0xbea, 0x7, '\x00', 0x1102}, {0x9, 0x6, 0xb, '\x00', 0x200}, {0xf6, 0xfffffffffffffff4, 0x1, '\x00', 0xc}, {0x0, 0x7, 0x0, '\x00', 0x2}]}) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000002c0)) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, r1, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x7fff}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x9}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x9}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x6167}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x7f}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x90) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000480)='virt_wifi0\x00') ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000004c0)={0x2, 'netpci0\x00', {0x5}, 0x4ab}) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000540)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000580)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0x1, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000780)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@dev}}, &(0x7f0000000880)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000980)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)=@delpolicy={0x6c, 0x14, 0x1, 0x70bd2b, 0x25dfdbff, {{@in=@multicast1, @in6=@remote, 0x4e22, 0x82f, 0x4e24, 0x9, 0xa, 0xc0, 0x80, 0x3a, r4, r5}, 0x6e6bb3, 0x1}, [@encap={0x1c, 0x4, {0xfffffffffffffffd, 0x1, 0x4e20, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x52295353ca1f5bc3}, 0x20000090) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f00000009c0)) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000a00)=@routing={0x2f, 0x14, 0x0, 0xf, 0x0, [@empty, @private2, @remote, @empty, @loopback, @rand_addr=' \x01\x00', @mcast2, @ipv4={'\x00', '\xff\xff', @local}, @loopback, @dev={0xfe, 0x80, '\x00', 0x2d}]}, 0xa8) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b00)={0xcc, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5e}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000010) getsockname$packet(r0, &(0x7f0000000c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000cc0)=0x14) ioctl$XFS_IOC_SCRUBV_METADATA(r3, 0xc0285840, &(0x7f0000000d80)={0xc, 0x4, 0x6, 0x0, 0x9, 0x6, 0x0, &(0x7f0000000d00)=[{0x0, 0x1ff, 0x2}, {0x4, 0x1ff, 0xffff8000}, {0x8, 0x101, 0x5}, {0x16, 0xfe}, {0x15, 0x101, 0x9}, {0x8, 0x1ff, 0x2}]}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000001400)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000013c0)={&(0x7f0000000e80)={0x51c, r7, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x4e7, 0x33, @mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x2}, @device_b, @broadcast, @from_mac, {0x2}, @value=@ver_80211n={0x0, 0x80, 0x0, 0x2, 0x0, 0x2}}, 0x0, 0x1, 0x6a, @void, [{0xdd, 0xcd, "f2d681d119a95565ec822d73dbcabf10288e63dd9d31cd0ff57fb6c431f0d48151efb021b7710d047915f5c2fbd73934f79726643647f4b2848499ef1110e1f5270903d4cad7176dafe4a80e9338419d2f4d65592dca401910e842b46ec8e25a860e49ee625bbefb3554d1a603c03339ec54400fe8892298cffb4c6ba0818e4922f9a441192739a93eead2efe4f5a2fb40886f68119e48dc320850299039be69db54c27f99046988c17d8b968a20bb2a489028c2ed8245a10f3423f5be2f704265fa94ef690b190009ba50958b"}, {0xdd, 0x71, "569c35d67212a8d0e714629f5a96843b469a203417e2d75429b524c748821b0066d9e021df03efcc415d36bfbcf292de079e67593cec30c6f8a79975298c2b159fc878251e5663654b7176f8275a5fc8d6ea0a20e749644a9e6d20d2a9d2e6b1438eee004e7c4273850b6346d29aa2fdc0"}, {0xdd, 0xa0, "8efd1b951ad100d39a9d20b76187b298241e59aa747e199277f78a9b0dd466493297e2210a365bd666fa5bcd8e5b0ad018a58da3543c1a8c6444e0d97d963ae692e2633d0c7279ce7771e43b317bc7f1da12d59fc69fb317c61141129384e99ec267c61cc2a11eeb60763212a76255114f479dc14eef901896bee9ccdafcb75621b77d6dcf8219932eacb859b6089cfc197d69d337f9d502e1b8e5df940bd81c"}, {0xdd, 0xfb, "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"}, {0xdd, 0xa2, "5226a8be0ae9baf883b325680373eabb9050cc3ad305e05505749aa6f22dd58f8f9afe3090d14c9d0d135decef098d3a4f0850c92d5417f1634609b19045249a5ff81d2da88d52377a13fe5a5b1f5032313122cfbdc4c29218b24dc2dcb43786bf76d19f07e110b58166c0df26777a8273abd916d96990d4a8adf5ebb2de5d21c18fbfae983a84652f11aadb06087822a4e0cfb7a29a194fbcfede9d3491994ede4a"}, {0xdd, 0xfa, "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"}, {0xdd, 0x3e, "3af31e9e2e9057e3bb5fbed87abbf7c92d5f0cf3f90ab9b23116d52ac4abd63e3dd9e6fea69e9f52e6bf2153c15236501c75159b7cf833129faaedc30fee"}]}}]}, 0x51c}, 0x1, 0x0, 0x0, 0x4c840}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001480)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x98, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x10) socket$unix(0x1, 0x2, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001640), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x1c, r10, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f00000017c0)=[0x0], &(0x7f0000001800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9e, &(0x7f0000001840)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x4f, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001b40)={'sit0\x00', &(0x7f0000001a80)={'erspan0\x00', r2, 0x80, 0x80, 0xca, 0x3, {{0x19, 0x4, 0x1, 0x16, 0x64, 0x65, 0x0, 0xc5, 0x4, 0x0, @multicast2, @multicast2, {[@lsrr={0x83, 0x17, 0x1d, [@loopback, @loopback, @rand_addr=0x64010100, @multicast2, @dev={0xac, 0x14, 0x14, 0x40}]}, @noop, @timestamp_addr={0x44, 0xc, 0x5d, 0x1, 0xc, [{@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @cipso={0x86, 0x2a, 0x2, [{0x6, 0x12, "2e72afb54521fd1a58f33c2b079a1ae0"}, {0x7, 0x2}, {0x0, 0x6, "dfa6ad97"}, {0x1, 0x3, ':'}, {0x6, 0x7, "681b4eda60"}]}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000001c80)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001b80)={0xc0, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0xc0}}, 0x10) 2.049895198s ago: executing program 1 (id=2630): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x2c8, 0x370, 0xffffffff, 0x0, 0x2c8, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x0, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e23}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) (async) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="8aa66cb3c4f6cf82ef5a7fff86000000004b7157c6eccb7e93bb929788764b8fa5eca94fc09f30cd0000000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000100ac14144100000000000000001400020002000000e000000200000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f00000002c0)={0x3, 0xd5, "1ab95f63a31c08d8d97b43fcef230792d7f05cfc56d5edb8210650f29273236944462b33b58eb53c8f903a51df9a0a0bbc5da6b8da73db27f7012f41d463c359ece002f87c659d2907c51a6b0a9e6ca7b29500396edc08cd0840a3aea3a21cfbdc5433f1e1bd7690f28d4c1bbd0ce2e54dca7ee690c6f63b56623504531ef4d39ddffb763668d102bb5111bd4db2c895485b1111ecb0f8acb0b28c0001f50b3f548c020b6e40581050553f24094b55165f13052225d0c081a5cf9c29a39487899b1782f258901f1dc897af94c439dc7aa7da628083"}) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f7879000014000280080001400000000208000340000000100900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x40880) (async) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000000)=0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0xfdcd, 0x0, @wg=@data}}}}}, 0x0) 2.038701998s ago: executing program 2 (id=2631): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'wg1\x00', 0x2000}) r0 = socket$unix(0x1, 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000080)=0x613b) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) write$cgroup_subtree(r2, &(0x7f0000000100)={[{0x2d, 'net_prio'}, {0x2d, 'net_prio'}, {0x2d, 'freezer'}, {0x2b, 'memory'}, {0x2b, 'blkio'}, {0x2b, 'net_cls'}]}, 0x35) (async) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000140)=""/4096) (async, rerun: 32) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000001140)={'vxcan1\x00', 0x2}) (async, rerun: 32) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001180)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0xfffffffe, '\x00', 0x0, r2, 0x3, 0x3, 0x6}, 0x50) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000001340)={&(0x7f0000001200), 0xc, &(0x7f0000001300)={&(0x7f0000001240)={0x90, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x8010) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000001380)={0x0, 0x6c, "8f7283cd83624eb99104de2b9a5f21ca96d6c73508532a467a394d78e10e5ad5ffdb73c9a1b0b2255ea5eb0bda8bb91005d8401adae145bba77dfd592f087f8fee8481a632b8284e6d848d848f247f6918696e521f82f3125e9e5a55a4dc95359b83f70bfb5c83eb31d8d3a0"}, &(0x7f0000001400)=0x74) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000001440)={r3, @in6={{0xa, 0x4e24, 0x400, @empty, 0x1329c410}}, 0x0, 0x5}, &(0x7f0000001500)=0x90) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001540)={'batadv_slave_1\x00', 0x0}) (async, rerun: 64) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000001580)={'pimreg1\x00', 0x1}) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001680)={'gre0\x00', &(0x7f00000015c0)={'gretap0\x00', r4, 0x7800, 0x47, 0x0, 0x942f, {{0x28, 0x4, 0x0, 0x8, 0xa0, 0xfe, 0x0, 0x2b, 0x4, 0x0, @multicast2, @private=0xa010100, {[@timestamp_prespec={0x44, 0x54, 0xe5, 0x3, 0x7, [{@private=0xa010101, 0xfff}, {@remote, 0x9}, {@local, 0x9}, {@rand_addr=0x64010102, 0x10000}, {@empty, 0x3}, {@multicast2, 0x10}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf}, {@dev={0xac, 0x14, 0x14, 0x1a}}, {@multicast1, 0x8f27}, {@rand_addr=0x64010102, 0x80}]}, @ssrr={0x89, 0xb, 0x66, [@rand_addr=0x64010100, @rand_addr=0x64010100]}, @end, @timestamp_addr={0x44, 0x24, 0xb8, 0x1, 0x4, [{@local, 0x9}, {@multicast2}, {@empty, 0xfffeffff}, {@private=0xa010100, 0xff}]}, @ssrr={0x89, 0x7, 0xf1, [@multicast2]}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000016c0)={@local, 0x36, r5}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000001700), 0x40840, 0x0) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000001740)) (async) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000001780)=[@in6={0xa, 0x4e20, 0x7, @local, 0x6}, @in6={0xa, 0x4e21, 0x80000000, @remote, 0x2}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}, @in6={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, @in6={0xa, 0x4e21, 0xb, @loopback, 0x5}, @in={0x2, 0x4e21, @multicast2}], 0x90) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000018c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001980)={&(0x7f0000001900)={0x4c, r7, 0x0, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xa2, 0x36}}}}, [@NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x8}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}]}, 0x4c}}, 0x10) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000001a00)={0x0, 0x2, [0xfff, 0x6, 0x7c, 0x2, 0x21c0, 0x2]}) (async) recvmmsg$unix(r0, &(0x7f0000001cc0)=[{{&(0x7f0000001a40), 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001ac0)=""/214, 0xd6}, {&(0x7f0000001bc0)=""/124, 0x7c}], 0x2, &(0x7f0000001c80)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x1, &(0x7f0000001d00)) (async) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000001d80), r2) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000001f80)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f40)={&(0x7f0000001dc0)={0x154, r9, 0x400, 0x70bd26, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x65}, {0x5}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x94}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0xdf}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xee}, {0x8, 0xb, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x1}, {0x5}, {0x6, 0x11, 0xe}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x10000}, {0x6, 0x16, 0x7}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x9}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8010}, 0x80) (async, rerun: 32) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000001fc0)={@private0, 0x35, r4}) (async, rerun: 32) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000002000), 0x20000, 0x0) ioctl$TUNSETFILTEREBPF(r10, 0x800454e1, &(0x7f0000002040)=r2) 1.857450818s ago: executing program 3 (id=2632): syz_emit_ethernet(0x4e, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x10, 0x5, 0x3, 0x0, [0x0, 0x0, 0xfffffffe]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 1.846874445s ago: executing program 2 (id=2633): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, r4, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000d40)={&(0x7f0000000c80), 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x28, r4, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x29}, @void, @val={0xc, 0x99, {0xfffffffd, 0x4f}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000801}, 0x48000) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, r1, 0x0, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4a}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1c}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7ff}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1f}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="a0000000420001000000000000000000030100000f0000007d00010000112233445566778899aabb86dd2c00001c00ff840001110000010101010253aa58fe6cbdf035bc6eae44132403b1fd606412c3258e6248ffa62e9e156d23cfd72ddb80723d4613dc929cbc86ba94e0cd05c4a639eee919c4b391a38f086b58225d45c1b4106bb4754aebb15e0feff76718ef7ff9be52ec9c00000004000280040003"], 0xa0}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000c40)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c00)={&(0x7f0000000300)={0x8c4, r1, 0x8, 0x70bd28, 0x10001, {{}, {@void, @val={0xc, 0x99, {0xc, 0x38}}}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x1d4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x12, 0x3, "152d0c132a980cb5e05b8925a981"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xcc, 0x3, "d1147d1cb8a510456e9c7555cf3d8dd57a870fe79a97abf9c305bef84c2cc3ea13024d0bbb950cf7e18683c4feebe7e7c335a496b22c56f9a2559ac1c792faa8e1aff5d1d5fcddf6e4c910d00a6e6f263d32390a6b08c926eb6dde5a66a5889e1f1b7110bede03ca86cb4bc7c709edcf9c84453c9eb34d38badb1a65c9ca4ee426cc51749ce16b3577a53317b1f1c49b544a0833149fc7a7fa069bd83688ff48a306054eccb7918210d60cf5072b86ff4293e84a5f12f4218db573b0af89ee49df944cba31d3f293"}, @NL80211_FTM_RESP_ATTR_LCI={0x2f, 0x2, "67e2aa5a549c6d3c83a8a5a4fe7c7f2b0f0e48efce632cb36443078603090e311d63ec34b3671992a382eb"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x37, 0x3, "7a7471daa9aafd0e06d82aed3203780f74d740475c3d181a5085d7ffbabf4cfc797c4621baaab90f138ad039c48f20504f5080"}, @NL80211_FTM_RESP_ATTR_LCI={0x85, 0x2, "21e3e7cb255511dffd8501952e325733c8c9b5f2a6eec87ac5f6c77f582c721c939e9bc030658fad0e07af43fdeb1122f5ef40e2256b99442b00e1f2a6e9b41e1a19c11632697749fe800a74a17a35bf3c86f01d07ce65608d14d60d0ccd2b6f9f6c9d984f5f571221f5b3af0624eeb8ea95091a1ad205dc42d2deac40f69136f9"}]}, @NL80211_ATTR_BEACON_HEAD={0x621, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x7fff}, @device_a, @device_b, @from_mac, {0x9, 0x7}}, 0x2, @random=0x8000, 0x100, @void, @void, @val={0x3, 0x1, 0x30}, @void, @val={0x6, 0x2, 0xfff7}, @val={0x5, 0x97, {0x0, 0xa5, 0x2, "1babef04a9bcf4c701f9ac6153e199b1ef3b6822cc0c83caff29e8af89790c02f1fcf931693c78093be1f0b85700b423292f5dacb79a8e431380246972e0b808f46bfdbe3b0a341eef49dba9e4d527b3e88c0fe855ac47790b9d88b2e196a49eddc0021a503a7fa217bca1f774d815d647b7af0276470f83e6ac09eac41039af3ca807bf8595445aff1eb8cf4ada25c8f070c0a2"}}, @val={0x25, 0x3, {0x1, 0xb9, 0xdb}}, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x0, 0x6}}, @void, [{0xdd, 0x74, "5e4801a9a2fa0d5ac714bc00fd0c1170a99826e061b51e756e33c21361e6c243d5464ca1796471b68cbc9bd7ff13f1acc22b2ead10a55a679dbbfe6d8685b841373219bc8b3174c38194ecb32cabddae52b2e6deffbe302ba1552ca76d208edad59f50983fb9f7b8b7c3b3b7fa37b85055d89a02"}, {0xdd, 0x87, "a5617877ad6038a52d13f0089e4c3402798c69021614f94dc0803846eff82b3da1cbc9eea6787c3c3ed7023ed97b0657aed4706d0e976c949df39efc09c9f140c965ab15db59e79c25d9a789874063da31c25b657a1777ac4ff83529f544009219f180adc175291df6086f6e1f7476c2334b7d9de964c7a9b006e9c7f5fef9f1693cac3f0be765"}, {0xdd, 0xe7, "0eaca4ac0933ede2ce893b6737b41e04ba3b1e81c8434d830c8e68bc631dfd26103314306967544e8923ae796b1750ff46c1ac7ba55abdb8e546414c366f0e8d266ce61fd2d0adbea60337fd1bfab6e3cee0f13c3085d8d1f8a3b0e50908bba2602108be94456e968a5030bf56a138b93a960d64514737d463b3b860b62c7f524f85fc56cd5520949de199796cbc702d3dd9b827c540046a8962347f507256fb6129fe47f8e061cafa279a5d120a7f515727a84b5cbe60a23f6e2b49a1a0b38c3d7aa5ee9e19f4b1f2bbfe31062f153176303c68d608790f835e7fcb52f64e67b4d6216a1c1669"}, {0xdd, 0xf1, "b038bd39a1ddb47958e385af726ff3855d6ffa0c04af25a1973fd91fba59ac6ce27c0c5de5cdb99af064c40a781ff36eb7e9362575a67fc97c7514c9a6f4761c57f89f95805f78593936f7174ca2d996d83534be5111d05603b34ed8ebe2f1c8d02f6373d17a3c42401fa26a07f51cdbd270cf4359fee57883ec498a4ced8df9a0bcf679b153c84083bddd0ab4a1589db217829a777f06dc0f72d607d3f46f3bb2cc5162eeaa81fc95a1b135f3dc930a671f32aef3a246fa65e99b89c199573d8fdf5dfec509e24028bc772481b7f7a294baecede01fa2ef66614314762356f7686201f2f68c274065615d447a6c299f1b"}, {0xdd, 0xdb, "430639157c706b4f94e21199727919127686ada4cf4ca7bee1334f4fa72c74fb10a41b8df45e3a3384e2dc011cc9049700a2ab2e6b8880a285666f88c6c91832378d5640da543ff5cdd3846e852f95861daad0740e7d072dbb27a238928016969ef0cd97cdb0f92b63ca40c3fba0dee4c53ad8c555fda5b7149822fcb036604d8fe026e1ef49538f4dd67f58430a25ed48133a03fa4c2f970e587cf6b604daf49fc286dd70ed2432593dc506171d2fd299bd41b257b5cc94c0b93bb187e93b60f01517671c68715ff39adfca07821ae891c2833837956e745aba3c"}, {0xdd, 0x28, "e818a1252aeaffbd02e6ba0b082862eb5c25a61bb5af54b8a87ae8dad60e571f8e80444511239632"}, {0xdd, 0x2e, "174ec31988f2486081dff13c41b170ba1e454619c2eb700ed8afacecc72c0988db5ae9adba37f34d67cbc3d9511d"}, {0xdd, 0xbe, "51084bbd6ab7243d1d511d0aa2745478226dbaccf92e63aebd93a9b15cb8045032033ad826e3eed281f1de2b93708e645652704fb9b7735269257a52606b9a564f9d32f5ace293eadc6f052e1d5f11c1040479bd93461a497a1746b354cbaf414436417a2f9a94c7dcb7780f16d68c8575d3ee559a5b54181bc014680471d533d49e3c4bdc80e46a144465a68db876b2820be0eb5d0dda2d585887bfd379551075b23bd7c673e7763a07248020ba61e8b3ddc41912996c6a65aea8ddc8b6"}, {0xdd, 0x6f, "ba3fe485d4a5acf7c5222ac07c6f581689daa9827d2bc642a7c54868aa5a6b22b5e24b37e6eba77c45dbd7cb7209125bd52576c1b079f119d86964ecaec0807defa49aa71712ef5732251c6694be2dbbb96a4cb060434b7e83b37b4e1ce17e183da491003c349dc339041401f19b16"}]}}, @NL80211_ATTR_FTM_RESPONDER={0xa4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x9f, 0x3, "77503e86e974a4deb4fe7ee44bca5b8fe05e84b586e44e77586c67378dad853f1948f885d1a2c68149cace91f0cbd3718a556b85a9219e33afca66d6014d45643beb35803dd1fd2ebd085404ec384b21afe8710d93683b16f6cf3e1b2fa1bbbc306a410a5ea25098af33414138eced010e47a1da4e204fd468b9bc60c40e87227a355354182f13ddde69e29e0eb25cf347d69bcc1021f44c19c0d8"}]}], @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7}]}, 0x8c4}, 0x1, 0x0, 0x0, 0x4001}, 0x2000008) 1.750319106s ago: executing program 2 (id=2634): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x10}) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000240)={"a593c1bdd74dc6c36f38252fc37b550b", 0x0, 0x0, {0x5, 0x1000}, {0x0, 0xffffffff}, 0xffffffff00000001, [0x9, 0x3, 0x9, 0x2, 0x8000, 0x9, 0x0, 0x1, 0x8, 0x4, 0x3ff, 0x7f, 0x1, 0x489e96e9, 0x8, 0x4]}) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000340)=r3) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r4, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) (async) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8946, &(0x7f0000000000)="8d557fd094c38f748ec33512ef3a") getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f0000001ac0)=0xe8) (async) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000001b00)=0x0) (async) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001b40)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@dev}}, &(0x7f0000001c40)=0xe8) (async) r8 = getgid() (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001c80)=0x0) r10 = getgid() (async) r11 = gettid() (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001cc0)={{{@in6=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@initdev}}, &(0x7f0000001dc0)=0xe8) r13 = getpid() getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001e00)={0x0, 0x0}, &(0x7f0000001e40)=0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001f80)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001980)=[{&(0x7f0000000380)={0x15c4, 0x2c, 0x300, 0x70bd2c, 0x25dfdbfb, "", [@nested={0x21d, 0xd8, 0x0, 0x1, [@nested={0x4, 0x156}, @generic="261f3638a2d66fd6398349f8c8bcbbe75c9be767d7dec111ab042c4d5f8e696cef1d0b5fb18719773f2b9ee06b6d5648003076ce360f8b6962a1fd20b6e7d1a88b6d70633b0a98f4cb9dba476a2621793ebfb09bb0cab8b92aeefef0c9b4367fefaaf77a022c5ac4922ddbee0cdfd1257933820a9f49e596a53b88e98843468ec0a8449798b9da6951fe5d0ef6771f01b31a8591b2e7107d8940de660d6b47cd383e", @generic="e81e65ecff1734177600e9c467e80ac86c783714c92adeb889c4055f8dec5d454eb786a792f8904eb9d1da992d69249a3833a2f5793ad901a0e9a7fb989908ec25a2b2ba945212a199acc3c907a8e27897801ab4ce68ed664717a41bf5989d034006d3d18071a96179b267b2f6ed16ffe50ec0febfd628d4", @generic="31daa1ac642119c631201b11ceac28fd8b6750c651d87f3b43", @nested={0x4, 0xa4}, @typed={0xc, 0x110, 0x0, 0x0, @u64=0xfffffffffffffffa}, @generic="aeb9baf16c725c28919cda803cec534e79378f763bfd1be609", @generic="0544823c02c3d6471e713fc7bdd08da0763a5280556f6619ff363c81f63847946c185fac13a9bd037c0014547ce8acdf0dc4db6c156f885e7729aacf8ae958f5e11f71e374dcfa7c47dd5cd903c36590036e5a43e21b41b61ec43a03ed699d4463ec3b371021c586457b6101efca3a02023f681ba9d0964dfd37ec28427b42e25f9627bceaa4ba763188b59ad33e6f8ad78d60146be01c6d9bc3fac9d72ca27c354adcb93f43f6590e5d9da306955f2d94d7c6170d", @nested={0x4, 0x140}]}, @typed={0x8, 0x68, 0x0, 0x0, @u32=0x5}, @generic="2b34dad8f13c3a39a29bb64dad1875d6d3d0ef944211fd9f1eb1098b9cf7b182ae2859b8c47903b25efefdfe52a685ef04a56a0b041441f23c1fbbc267a1a342b575ba40f8349fc3b002a4b42253901d00d1dec8ee669b829e050d2a49cef028299d7a52142c845da9c67d065a135f5113ada89a7982635a223be303104fcb065c1803d60c85ce05d9e804007f6b05c9fa6553faac320136fe3d568c356e2fbbfd647c141b755cecea12bdf25c8736a4b944042467204bbbca7efb13bc02d9d1ed31727902bb4838f650c474dd95bfd4f760c95a57c389e7caedd1844b38d34513df3836d06fb9f966c87abb9148fa3e6fdf306bbc62a20a83033a7f0a934b275bbbb4d5bbbdd3bd5bad8a30152bf7625542d8f5ce89da3e7aa86e88ce1ec1d6508537a18b3027fd842c71084b7320865076418b92662668d477c52e1f6eb7539b2da3f57254da92cabb5affd3dc29676a8f839dfb10b338f2cef5c434306ad2696ff5b98ceaaeddb5f01ebbe403c05d9a86c60beeeeacc14afc14f73dea8a9b4f2f93b17cba37699fa477e6c6e797ea789be0c0a7992645402c685a6fe584040036e64932f3c66e4f5dea6936f271acbc11b9f9fdc8546ab0c57ed261e4e6adcd63148f0ebf152ddb3b6170f0b67f20af490b753d674b4ba65193a7901f4cdd993164b7c4f507edd40524e2a510be18c074e028010b71bb39cfe3238c2795f8765c0873e7ff4402a0aac02424c4097caf105587132a47ab4abbc2f611319993264f0cb02270050f885662aecbc478cf34ed283d36eb5ebcd44b447f298842150fc09a0a25b0c487ef99ec0667a530c644a8e1b8e6b718070346011e09cfe9559c446775d9364a55d3a81ca2dcaa063ea2580338ca8a8acc8ebf7cbbb395866e86f43e8b84f2a00abf47fb679dc2da8e41b93a97c5bdad73885a67df876a2a4c6032dcd8f5465dd647e4e08badff0285d6defed5b0ce7665735c883337271a9b493664ce258226fe302ecbd9e6c136fa5b75fe8d1271193868be3f71bfbcbddb38b32017fa0b6c2533ab51131295e84643ec2b10e9c52b062b2a925a50d5cbbc7d3d89fc9d5df75ccdf6c140abc3cb4f3c7b816f9332ba0f809bbe7c27fd96f7ae228957435c633efb0f30a08cd00590f4efaa6374ab58d0fd5adaade69e098bae6c24f9adefe4c4844e06d6c723c7b2f43f2c566cc8bb488b2919f699b2cc8c81f87d9c75ba7574b58d77174a00323e97743a36feb374c4fe4131ebc19d8057c3daf98f68f2870ef800c7c82ed31bd7e4c87fd1f2aa5a758185761ad5541676bce4afacec9f50782ee25a3abcb0d294dbe3cfd7e9a87e4fa53da815bb17d26cf4cb988bc05eab2b5691186c37f785b521104152bcd24370fb452509c4705d8529ef267b4849dbb8dce0a4065957a635761973c7b12050ac519c05c1f9979ae97d29365e04b0337b631594c84cc18187cd373687c4f2c7a8214cc92324917098b3510a8f2ea95f954be10bae32a61d4540b997c6bf8fa7098f8fb7c1bfd8ae9fc158a76e587c992cd5213c80bea5b7caff8f9525041eab1e93687292fd5d1b3d0ffcb31355b1ca5bf34b4e3dbaa22e7c9cd78091c7bd65c03078848848e394588ea3255ca604c3fc1b60effcaf396db544ec17307ac6ae5b593d7ff05071e92b987ed2a481b632490e6e8bddbf061b5a1e9e9c966405a753bf30006309a5056ed94359a90d33fd51f8c1e085bfc25574c5f80362154a2a3aead24dcb01be660ba95f9cc6455ddc03b8f6acc2cb9efe9e3f6387ec39f5bc631343c02b7083a3076852f2690d0ef797913228b2c1fb1c71c77bffe62c7a15a7d7eb49cbef675dcbbe32055c09eaf1f8d6ed26afe45a8ccc0eb1df1d0148e1c8548a53cb6af08156f861d191d12bb5dab5e0a2c956a81ef18ced6990338482c456677b8d5589613507898b3282fc7a781555a81d56c9ac58b8906c464610c04af7b1c7753a519add9e262fc3ed2bfb60cf611810584e74884838079908fed4c057f60ed69bb9c51c2268e6c41f5e8a33aa601346141824de6ac5d53e6d3dffbe73276424908c929c529c3a1250d9795ce136474a643be49de3137a575c81f8fc9329aca2224019194ebe876c549c59233ab29b7b9f1d964ad328318e719fd25e882e118217e115bb82ee10738c896eeb466e7e7cdc43177feb382adb118b5e9cd53a47e3ca9368113d6006bf44d8a66b39ef5780c3741d7edbff84c22e4d5bec3dfcf6ea1f41e0b5bb352d2766dc00bea9f991ad221126f86f6c2882b222d80777baa19b60f1919b1bc24c6d4167ffe5d9ea2fc84fd6112f6c3e1050254aa59cc5de78cdafc7625fa9c31f9aefa6a60c2c0360fa1b5897da9635edee5295348aef8622d8e806ed36e0efa65f15a12aaae19476cc7b5284c5abb78deae3cb7d1e9b1cf311a3305533db1dd92bef3798f209c1641fc7bf082f74d32e02d0b599aad465be8f2ef8937241086f205c207e135d83255cdb90f55d0666ee013203f8b360b9a3ecec89482ec9a5cdb345a3e9e1cd140cd189323c33591f84747933dd2d1c47d18722e1b1f0c344e1370f0fdd565eb5bf06a620082d0941c21c096f12913e86bb593f297fc6de77c6ca1f0b5113e3eabfc1881edf1f184221661d234014026a250130c6188e4b61d53591aaba69399f6d62977d6259171aa879e8570ed6d022b61f30aca1d061719a1a3a16427b89eb8e5d283b93701188e021e2d16ffb9780cfcaea9cae903c67c7be1a0770ea6b9250798007f879244a7fdae3976581125d21cb56dd878b4e37ea10e75e449373443949da50890dc347641f3cb08290a3d1369f70619ca755a3961c2dcb16690bed7517dea381dcaa48a1771f31e0d60a6b59c016a1ac17c6ec2b0e60bd37a3137400b8041167b3f39fe43af044615c0831389c5d1bcf8fd09432d44ef28fbf63649236c3077e95043d9c3eb9070b707f0b58e247bf3a57ec90ad17b963924d43d9015b76d57453ee0f06376af26ada42f56dd6a39dda620e29b6adf08b0f868280e70144484603c7753ce7c1ef478fa4808337f6ff8e9fb91ed9ed518ec347c628a37a934d2a7dd0e633c867960380787fd5ad9f08f04ea53eb047fde38f18f4282df2dc11941efc64ea7ae0f30ee7a40d2db16b12a3133b70b7c142e37c3f6b412670a1680cf4c95f870f5b8cfa0971ec12e9103caf33d1e3e254c6e2bcaf9403cb51f7073c32dd4292e9b1625606f02dc55e1ecbd961cb51a7b7194adbc26a8037d5139a6658cf54d70fd9dddcd3c00786a4e9594443d0cccad47289366b1d6d51ff5b664a4462fe97028ae89d642422f4c02e5779bf9d735ef85e381b68f3a56733723c1d40bddb91df1bb216f307e7c5eee4bf033df9bcc24bdb53d437ee4ec6f609dfd13381939d2fe0cdb92bcd540809e3f6390948a9ad4cf69e46a54563872958fe2d98e07c3be35c641f01ce8281e2a4131309f596b053d4b9a9e76a37415ecc7e280991c6a4cd6a3ef8918319295eb8f59fe07fd2997b249b5d4887126fc52fcd6cba2de4e99f1851ba4d622160561c43386e656379c2269d0884f500493a24a4adc0bcb105c42535dd543063ceb6eea697789aa401acf1214cc19840a746651744fdab4b2b8b4e7ecced208b4b8db29b26b58fb964be6d1e705017f95161f47367088a35ec0685f419d93d540dc161f70da0e7f81ac4cea051a8529a3ad263af3324083feb7e2a3f0e25d44d667ed51f54e32ce9eaf29d52552a6808a0ca004b72f7dcddf7b28f3db0dc6927ea2312d96ea2c8b368ec22708d1c8f5f8acb11618b3d47e4e76753010fc5b19d46cee9925519288e94f446efb163dbd0ddf7b818660218fbce1a463e93ecdcd80ee5fca6e137324774945979c47b126a1b6ea6fff96755bcb95b6b6c2a01c80a4965c5bd6d26d907d13b2edb998175069bf4a447c00854992ce158291e8004caaee84314f352fe6df802a8b54dd27c5d55aac783c594dc841fe29f0008f1cec6f21259092a806e630c6d6fcbbe372f46fcedf6be8fef1417c9c04b6827e23c29e2629ea4a638eb6c89b2e942a4addc09a605c99d2aeae279e2cc2724a742d617f8599d3d11fe75b0f604c9060178a60b2279183c77233803f8c4d079251531eeac8923448e43c4a7b1693bc5a9ce4aba2645895d1dd1a05fb6f2d4bfd5b13f8320b9228a2129b0a5dc469f6f6a036b19d1b90b06d213f4ba6eafa65ce3b94aa1bec1b7bc565fbedb46a96e1a75813aa2cf17c5ceda63cad076556212a592cf1a74fe65e00941100308b0fab11170655033a164f2554ea314ea2e9f4ddd6703f6e94007b850b59e05ed009a021189b846297a676b1e8419a23b6341a046d1eba6bc0ea0676344677600447dfc488f033e8b21e0c5c45764570325bf29182059909d18302e2df5538dd9ef5e53ed1ce2866307064b6463eaf131aee8c696d411aabf94ab6115c48fe326d3ed73e63f827d5e5e70e23bbd49a13b448395f42204f199d4153ff106dd9dc265e240ca3d0f834fa1fc8b4c1978b1ae375d559ee622577c883d97fd05cabb2484932667274c7a55846955ae2a689c240685ad953e50d297a6d85feafffcdeac0b02fc874bc1ea6bbe0d29b3333cb58ed5e71ff7dea825c6e2f13470a21633bc98c5ef2f35f15ae58560f11d5025f86a5cb10977c30dab1e1c34b90c7edc3708311d51b0b937e0eea1586dba69b06d20333e2deeed61c62b262149a350cb8e3794dd051c583b0715630d99ceb90121d16cb0a7fe11994da451de4dec9d5f3692310058aa8e27f5854160f036818f806e31197cd4f1e7916fa71cf99e63d0e3f3da63369812326655871770f6f249aec6c6d3f665b505758fb7679a62a921550fab1041cc236800de8f93a42e051da65d0dce09230767f2e5ee46a3c438860164977901037befc95c45256781e07fac874ba93a683d3f44d3f3c17b5324da5ea0ed0c87253b4a724cb0e24f832203f4a27c852812b93a6e748f039c6c78daee1fca9a90ee4199cf6b503f0e051001cc2590579ba16fb912140710821acef6023e09cc1c0ce3dcdf64292307cc00384be7af8e010afb5af6a2a55daecd7945f6178f4eb4af299031def1f4fbac6d2042e399a78297eb72af057a4317dadfbc0ad1cb1ec2176361cdef0843349c8fb14964327fddbfad8410358cf9b0a5d5867c8008332a058c37110bd7123a7eb8060b46357baa0784b8ee75f5ee7bb55e684af243c31b8568f491966f7d2bf2c701257aced4286226b405190fbec0998293f695bb61bb26068dcbf9ec39ab06af29b7b04c5d0fd61426af5d08a73b2b10c4a57f75bf907aebbb9da343d5fd399cc516a3248201a9292ce44761efd45660bfc55a84bd5065213c8a0f711a50b5e52988257d20397710991557a8e73d13cfcc2651b9b6bfc2ede90f967e5cbeac836a1a09c4b6615b5cb573853d890d06c9dfe556e9ac154dcce6c6b5afcf11e20a2fd3ccfeae4593584e5613cf25649dc3a0dcdaa989d7b889465735666c606700d7266783d59585250f80ea23c24fb379c6ba7b82843096f68e73b18dfab41a5642a7b0bf362118675363372c20b58b49463d9f243a9703428bcd52838fbd34b77f3ab6a3ebc12d1fb699e275bd69c951fd94577b267eb7891b3a4779fff54229030228af3735ac0e97fc7216e5d70ed7921d921482f621087b7c3675799e2d75bf8a6c536b244580604a540bde38a65af2d5c1b3664f24122a0b74db051eda73071cd3288ee157cd1422785515df893b", @generic="9e7e23b466d9f65b7d10691d937b5471faf41efd0132bd0258f9b0e387e20b", @nested={0x152, 0x126, 0x0, 0x1, [@generic="0d3009bd8162dc11bece873a5b55b84b3c89bdf84e9e678e9c872c27baa752de2a759f90c66d32442a46719b5a5f45e9872e5e02163033a0e179610474aa0d2a8f50ebc4ad6a09838f2bf1ed30190f3cc72d5f4d5936fe74e54ba89831542c27cc23ab8c29d747a6d28375f29148959a6a9df0c25106d46503258eeda5a226aa5af87a9b62c6d659e62c3c99", @generic="2aa5cac9a5830b5cd93dc2e41fa3d38550638f14e2d9520dbf897ad9f6f17125f02ffc96bfb2cd2f6ff18d3a11f6bad136d000a8806da395dcc875d918431a329c", @generic="6a9dd834e4b4e8e4980e0eb2001b8eb2f398da7dad5538db1537ff03b83b7ae138fbc9308a6e09b89ed500d855324ca99d862f8a17f606c98a1662133de26df0cf18061f2c77e00b124acc70080121b2451ecbbea006ad21427f628e90f2fa42c5e18023f10717308132d8bb04", @typed={0x14, 0xd5, 0x0, 0x0, @ipv6=@remote}]}, @nested={0xe1, 0x151, 0x0, 0x1, [@nested={0x4, 0x23}, @typed={0x8, 0x37, 0x0, 0x0, @fd=r1}, @nested={0x4, 0xa}, @nested={0x4, 0x158}, @generic="64765dd3be3516e54b07f0ddbaaf4bdec1f544fb0d705643417df2a4154857d0f33adbadd65282fd8da4c2cc06a7487401e324e67cd07655b8f19c1043d3f46b773a0022fe3cd7e9ca14935290135fbc1a27dec8a470934c0f6a90c37fe10a24f48a0ff320d085ac5c73cf5db4574bac78a1e5b1396ba54f3455d0ee6a03f3e0df11fc8d3f7e5e3995d93c0930d5fef268311756750ca34095018344f52d8ba0e14f913d094065bd4ae2556c87179efc72f8ad85769637db7442ee084aed838ad26be71ceda4802228"]}, @nested={0x129, 0x15d, 0x0, 0x1, [@generic="d5ed58956d0d5b2c25a9dccaabd280e781cc356553a7fee0a506651f8bf599168b65d0f7242d6de13c24606d8c475d75bce34d2da9b9e5f3f3c648986c9f1f68da33e2caebc95a1b8923a44867a655b827c89a3c479c83f8c05e8739ff2ac9a45f2738be98f0de0e6b8015a8cdd64bbbbc172afee9761b16d1337abd6003ad42b041cfece1daa1e6bff2a86e287bef264c2c75e223b58f74581924d5fa23936ce5eea953a5c9719da7", @generic="ec39d5be25e20b0060bdc417b011a40dad22f4165e4e162173f0318e07d285c112e5d7254ae968dd033c3da0fddd4431a11ae36b9f1b3081be17a1b5ae728fbe72606766e34ca7a71fee5cdf05b891ba73d30b391fcafb2c24920c3020af3c0a2db8532420b5f86bdf397d642d475c22", @nested={0x4, 0xd8}, @generic, @nested={0x4, 0x106}, @nested={0x4, 0x44}]}, @typed={0x8, 0xd5, 0x0, 0x0, @fd=r0}]}, 0x15c4}], 0x1, &(0x7f0000001e80)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r5, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @rights={{0x28, 0x1, 0x1, [r1, r4, r4, r2, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r13, r14}}}, @rights={{0x18, 0x1, 0x1, [r4, r2]}}], 0xe0}, 0x20000000) listen(r4, 0x5) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0x1e, 0x1}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) (async) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000580080008"], 0x4a) 1.699057273s ago: executing program 1 (id=2635): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) (async) r2 = accept(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002440), 0x0, 0x10142, 0x0) 1.677615152s ago: executing program 3 (id=2636): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000f400000000000000f462013c000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003480)=@ipv4_getaddr={0x60, 0x16, 0x200, 0x70bd2b, 0x25dfdbfd, {0x2, 0x9f, 0x1, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010100}, @IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_LABEL={0x14, 0x3, 'veth1_to_team\x00'}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0xffffff92, 0x0, 0x8}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x240008d4}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x60}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0xa, 0x801, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x300000c, 0x3032, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000040)={0x5, 0x800007, 0x2, 0x6, 0x8, 0x8, 0x7, 0x4}, &(0x7f0000000080)={0x97, 0x8, 0x0, 0x1, 0x5, 0x4, 0x3, 0x4}, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000001ad4a90a5f000100000000000a000000000000000080160008000400", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x2c}}, 0x0) recvmmsg(r4, &(0x7f0000004800)=[{{&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/239, 0xef}, {&(0x7f0000000300)=""/126, 0x7e}, {&(0x7f0000000380)=""/225, 0xe1}, {&(0x7f0000000480)}], 0x4, &(0x7f0000000500)=""/65, 0x41}, 0x6}, {{&(0x7f0000000580)=@nfc, 0xfffffffffffffe62, &(0x7f00000018c0)=[{&(0x7f0000000600)=""/68, 0x44}, {&(0x7f00000006c0)=""/102, 0x66}, {&(0x7f0000000740)=""/196, 0xc4}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/84, 0x54}], 0x5, &(0x7f0000001940)=""/24, 0x18}, 0x3}, {{&(0x7f0000001980)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001a00)=""/186, 0xba}], 0x1, &(0x7f0000001b00)=""/129, 0x81}, 0xe8}, {{&(0x7f0000001bc0)=@ax25={{0x3, @bcast}, [@bcast, @remote, @default, @bcast, @default, @bcast, @default, @netrom]}, 0x80, &(0x7f0000003000)=[{&(0x7f0000001c40)=""/87, 0x57}, {&(0x7f0000001cc0)=""/154, 0x9a}, {&(0x7f0000001d80)=""/12, 0xc}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/72, 0x48}, {&(0x7f0000002e40)=""/162, 0xa2}, {&(0x7f0000002f00)=""/208, 0xd0}], 0x7, &(0x7f0000003080)=""/3, 0x3}, 0x10}, {{&(0x7f00000030c0)=@x25={0x9, @remote}, 0x80, &(0x7f00000032c0)=[{&(0x7f0000003140)=""/70, 0x46}, {&(0x7f00000031c0)=""/251, 0xfb}], 0x2, &(0x7f0000003300)=""/212, 0xd4}, 0x7}, {{&(0x7f0000003400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000004780)=[{&(0x7f0000000140)=""/104, 0x5f}, {&(0x7f0000003500)=""/166, 0xa6}, {&(0x7f00000035c0)=""/66, 0x42}, {&(0x7f0000003640)=""/39, 0x27}, {&(0x7f0000000000)=""/38, 0x26}, {&(0x7f00000036c0)=""/4096, 0x1000}, {&(0x7f00000046c0)=""/144, 0x90}], 0x7}, 0x69b4}], 0x6, 0x100, &(0x7f0000004980)) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000004ac0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004a80)={&(0x7f00000049c0)={0x9c, 0x2, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_TUPLE_ORIG={0x64, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_STATUS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0xc004) 1.593921024s ago: executing program 4 (id=2637): r0 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r3, 0xd8, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0xffffffffffffff0e, 0x0}}, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r4, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xd0}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080021"], 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000001600deaee270529bda7f3373220f75073f9b7fcc20dd88bc90d211126503cfb6198e8972fd656f5e60859dd4781dbd89d5d12c9ebd3f5b6a887d291d35edd8bc48d0ad92f4f51fda26f3d6325958b847dd8a1f4de1d6c90c2ce72c69a93eada790bf70e81ac9e6791eef3876836f7a282234fe9f362120f02da8bbe0e8079617acf0acc0cefdd450fe7830eaceaaa028818d7bcb7255918ec33f10d9b172b8849c144bd7ea5b815824f43c5326f9471e007c5372", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fbdbdf250a000000080001007063690011000200303030303a30303a31302e300000000008000300020000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000080001007063690011000200303030303a30303a31302e30000000000800030003000000"], 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r6 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r6, &(0x7f0000000640)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000140)="a0002883591ecc0e", 0x8}], 0x1}}], 0x1, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x7bdf0106f140a72c) sendmsg$netlink(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 1.551107533s ago: executing program 0 (id=2638): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000200007020000fcffffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf6100000000000007010000043f000085000000aa000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.529422109s ago: executing program 2 (id=2639): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) r3 = accept4$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14, 0x80800) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000080)={r2, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={@private=0xa010101, 0x1}}) syz_emit_ethernet(0x131, &(0x7f0000000300)={@link_local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x123, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @dev={0xac, 0x14, 0x14, 0xff}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xcb, 0x0, [], "663c7fb2078fb15a46a8cdd0f1615c8a1bad2af1bf317ad8b4aef874dec927c321dd2c96d04637b7f101f92cf5fdf888a7da6691e78834caf4fbde4186ccf32f35cb219020fab4b5079e5cdde4c78c7a3b5baaa90b2c98377aaebd90c8a7e2906e82d1426aa76337600587b6bcbb19bb417e743698a21524d728dc05f1ea9e00da812cc34b86e5a1e9d46831b4bab82a4c5e9f4cf356e86d26d57a46ddcf9e27f8cdf20fabc491c6c0f3c7648b2c07c609c9868ba4d5fb0ee4eef9ab0ca7ebf11eb89868d83adfe9c976c6"}}}}}}, 0x0) sendmmsg(r0, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="7334ca", 0x3}], 0x1}}, {{&(0x7f0000000840)=@phonet={0x23, 0xfd, 0xc0, 0x80}, 0x80, &(0x7f0000000d40)=[{&(0x7f00000008c0)="2705d5", 0x3}], 0x1, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x12a0}}], 0x2, 0x4000041) 1.517350347s ago: executing program 1 (id=2640): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x6, 0x0, 0x2, 0x2, 0x5775d27c, 0x158, 0x100}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00040006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) 1.434360553s ago: executing program 0 (id=2641): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000400007070000000000000000037c000004009c80060001"], 0x20}, 0x1, 0x0, 0x0, 0x4048090}, 0xc000) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000000000000000000000000e5ff00000000", @ANYRES32=0x0, @ANYBLOB="01980000000000001800128008000100677265000c00028008000700ac1414aa0800040001010000"], 0x40}, 0x1, 0x0, 0x0, 0x2000c801}, 0x4) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000004000000020000000000000c03000000000000000000000604000000000000000200000d020000001000000000000000000000000000000000005f00d88fccabf9c6367f4477c3ac37cf1fd33a6b3e2c15aa91159f9a4f4fac00b0e3"], 0x0, 0x50}, 0x20) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000006c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x6, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xba}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a300000000014000780080008400000000008001240200000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) unshare(0x28000600) (rerun: 64) r5 = epoll_create1(0x0) close(r5) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r6) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000008001b00000000000898170091118100000000f094000000000000004684fb9fc11373878c77de0a8d7d6b53400ed8f101b3a41a26871e0f4effb48c2bb04ddd04d7204f8d22b887f1aa879d4008edbcd86f2d9894155f010d3bdd3ff1b348270dd335ccb26c2b16fb6982949b127043b8320b4b7dfe18a74a162a569b3866e205f64740278c71d25531f8c95ec4eace8dbe"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100040000002c0004800500030080ff00000500030080ffffff05000300016900000500030080ffffff0500030004e300000800020003"], 0x50}}, 0x0) 1.286278082s ago: executing program 4 (id=2642): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="00000000000000008500000001000000150007007b000000bf06000000000000bf610000000000000701000004000000850000005d000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.269101562s ago: executing program 1 (id=2643): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0) 1.067122061s ago: executing program 2 (id=2644): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000cdda3c5b9501fc1e0f32f233000206050000000000000000000000000005000100070000000900020073797a30000000000c00078008001240ffffffff12000300686173683a6e65742c706f727400000005000500020000000500040000000000"], 0x58}}, 0x0) 1.066333312s ago: executing program 3 (id=2645): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000004d40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0x2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e23, 0x4, @private2, 0x58}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000380)="998165", 0x3}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x64, 0x6, [0x100, 0x6, 0x101, 0x0, 0x2, 0x8001]}, &(0x7f0000000140)=0x14) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100fcffffff000000002f000000100003800400040008000200fd7f000318000180140002006d61637674617030"], 0x3c}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0x9}, 0x19, 0x3, 'sh\x00', 0x29, 0x10000, 0x10800008}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0xfffffffd, 0x3, {0x0, 0x0, 0x0, 0x0, 0xd126a8577c57125b, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x9, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0xfc56}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) (async) sendmmsg$inet6(r0, &(0x7f0000004d40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0x2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e23, 0x4, @private2, 0x58}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000380)="998165", 0x3}], 0x1}}], 0x2, 0x0) (async) shutdown(r0, 0x1) (async) setsockopt(r0, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x64, 0x6, [0x100, 0x6, 0x101, 0x0, 0x2, 0x8001]}, &(0x7f0000000140)=0x14) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100fcffffff000000002f000000100003800400040008000200fd7f000318000180140002006d61637674617030"], 0x3c}}, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0x9}, 0x19, 0x3, 'sh\x00', 0x29, 0x10000, 0x10800008}, 0x2c) (async) socket$kcm(0xa, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0xfffffffd, 0x3, {0x0, 0x0, 0x0, 0x0, 0xd126a8577c57125b, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x9, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0xfc56}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) (async) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) 1.044224158s ago: executing program 4 (id=2646): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket(0xa, 0x801, 0x0) getsockopt(r1, 0x0, 0x40, &(0x7f0000000000)=""/84, &(0x7f00000000c0)=0x54) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000100)={'pimreg1\x00'}) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000080)=0xffff, 0x4) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x10102, 0x0) 948.25935ms ago: executing program 1 (id=2647): socket(0x1, 0x1, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000bc0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r4, {0x9, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000068000104000000000000000002000000000000000800010001a3acd1af670142", @ANYRES32=0x1, @ANYBLOB], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x48, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x1}, {0x2, 0xfe}]}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x4004}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x64}]}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000000)=0x4, 0x4) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x80000c, 0x11, r5, 0x100000000) 813.918679ms ago: executing program 2 (id=2648): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x4c23, 0x800e5, @ipv4={'\x00', '\xff\xff', @local}, 0xffefffff}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x7) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710ffffefffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) recvmmsg(r0, &(0x7f00000084c0)=[{{&(0x7f0000000100), 0x80, &(0x7f0000003440)=[{&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/17, 0x11}, {&(0x7f0000002280)=""/163, 0xa3}, {&(0x7f0000002340)}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000003380)=""/113, 0x71}, {&(0x7f0000003400)=""/51, 0x33}], 0x7, &(0x7f00000034c0)=""/135, 0x87}}, {{&(0x7f0000003580)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000003780)=[{&(0x7f0000003600)=""/186, 0xba}, {&(0x7f00000036c0)=""/83, 0x53}, {&(0x7f0000003740)=""/24, 0x18}], 0x3}, 0x1}, {{&(0x7f00000037c0)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003840)=""/4096, 0x1000}, {&(0x7f0000004840)=""/46, 0x2e}, {&(0x7f0000004880)=""/33, 0x21}, {&(0x7f00000048c0)=""/88, 0x58}, {&(0x7f0000004940)=""/76, 0x4c}], 0x5, &(0x7f0000004a40)=""/168, 0xa8}}, {{&(0x7f0000004b00)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000005e00)=[{&(0x7f0000004b80)=""/187, 0xbb}, {&(0x7f0000004c40)=""/31, 0x1f}, {&(0x7f0000004c80)=""/4096, 0x1000}, {&(0x7f0000005c80)=""/71, 0x47}, {&(0x7f0000005d00)=""/243, 0xf3}], 0x5, &(0x7f0000005e80)=""/40, 0x28}, 0x8}, {{&(0x7f0000005ec0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f00000081c0)=[{&(0x7f0000005f40)=""/62, 0x3e}, {&(0x7f0000005f80)=""/4096, 0x1000}, {&(0x7f0000006f80)=""/30, 0x1e}, {&(0x7f0000006fc0)=""/233, 0xe9}, {&(0x7f00000070c0)=""/131, 0x83}, {&(0x7f0000007180)=""/4096, 0x1000}, {&(0x7f0000008180)}], 0x7, &(0x7f0000008240)=""/147, 0x93}, 0x80}, {{&(0x7f0000008300)=@ax25={{0x3, @default}, [@rose, @bcast, @remote, @bcast, @bcast, @netrom, @default, @netrom]}, 0x80, &(0x7f00000083c0)=[{&(0x7f0000008380)=""/38, 0x26}], 0x1, &(0x7f0000008400)=""/158, 0x9e}, 0x60000}], 0x6, 0x40000100, &(0x7f0000008640)={0x0, 0x989680}) close(0x4) 681.571878ms ago: executing program 3 (id=2649): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, 0x0, 0x24040001) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r1, @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf258100000008000300", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x4008001}, 0x200048c0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) (async) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async, rerun: 64) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) (async, rerun: 64) r7 = socket(0x28, 0x5, 0x0) (rerun: 64) bind$vsock_stream(r7, &(0x7f0000000040), 0x10) (async) listen(r7, 0x0) (async) r8 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r8, &(0x7f0000000080), 0x10) r9 = accept4$unix(r7, 0x0, 0x0, 0x0) recvfrom$unix(r9, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ad}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r11, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r12, 0x2000000, 0xe, 0xffffffffffffff94, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async, rerun: 32) ioctl$sock_inet_tcp_SIOCINQ(r6, 0xff02, 0x0) (async, rerun: 32) ioctl$SIOCX25GCAUSEDIAG(r3, 0x89ec, 0x0) 662.08358ms ago: executing program 0 (id=2650): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000010000000800000008"], 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x4c0, 0x290, 0x0, 0xffffffff, 0x0, 0x290, 0x428, 0x428, 0xffffffff, 0x428, 0x428, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x168, 0x1a0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0xa, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x6, {0x1}}}, @common=@unspec=@devgroup={{0x38}, {0x3, 0x79e8ccad, 0x3, 0x3, 0x81}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @multicast1, @broadcast, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc0, 0xf0, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x2, 0x1, [0x4e22, 0x4e21, 0x4e23, 0x4e22, 0x4e24, 0x4e22, 0x4e23, 0x4e23, 0x4e22, 0x4e20, 0x4e22, 0x4e21, 0x4e24, 0x4e22, 0x4e22], [0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, 0x1], 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffd, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x11, @ipv4=@rand_addr=0x64010102, @ipv4=@private=0xa010101, @icmp_id=0x68, @icmp_id=0x64}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, '\\Q', 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x4, @ipv6=@local, @ipv4=@rand_addr=0x64010101, @icmp_id=0x67, @port=0x4e22}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x520) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000000)=0x9, 0x4) 574.263231ms ago: executing program 1 (id=2651): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000200)="18", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f00000001c0), 0x12) writev(r3, &(0x7f0000005a80)=[{&(0x7f0000003880)='5', 0x1}], 0x1) shutdown(r2, 0x16d77ad31ffa8d3a) setsockopt(r2, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @mcast1, 0x2}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000640)=ANY=[@ANYBLOB="0180d5000000aaaaaaaaaaaa86dd600107000000000000000000000000000000000000ff02000000000000000000000000000100000e22fd189078000000"], 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000003c0)={r5, 0xcb}, 0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x1000, 0x6, [0xea, 0x200, 0x2, 0xff9a, 0x3, 0x4]}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000380)={r5, 0x10000000, 0x12, 0x7, 0x9, 0xfd2f, 0x40, 0x7fffffff, {r6, @in6={{0xa, 0x4e22, 0x4, @private1, 0x100}}, 0x9, 0x4, 0x800, 0x3, 0x2}}, &(0x7f0000000440)=0xb0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r8 = socket$pppoe(0x18, 0x1, 0x0) sendmmsg(r8, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000007c0)="0281", 0x2}], 0x1}}], 0x1, 0x24005805) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000ffff2cbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="291101008180040008000a00", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="0001040020020000"], 0x50}, 0x1, 0x600, 0x0, 0x4c004}, 0x40040) 546.687577ms ago: executing program 0 (id=2652): r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r0, 0x110, 0x7, 0x0, 0x0) syz_emit_ethernet(0xce, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x98, 0x0, 0x0, @local, @private2, {[@dstopts={0x73, 0x12, '\x00', [@ra, @generic={0x4, 0x8a, "6244f310334754495074f61468df6520abb269fdee081a88b5d252cd32a24c248a43374bd1c43161c63ab28dcd602c5eb4021a60e268fead7ad72ae44df9822716c9ca0c6c3b0a5a0ed349d3a795dbd46b5ab101ac246c588883a901d9b55aa2ac9c61d4721b936da0aa1e44401c0e6b871be991218bc88114af10dc00850bf40852e3dcfa981da4f96d"}]}]}}}}}, 0x0) 419.334037ms ago: executing program 0 (id=2653): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1, 0x40, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x1, 0x0, {0x7, 0x4, 0x0, 0x0, 0xfffc, 0x1, 0x0, 0x0, 0x1, 0x8, @loopback, @remote, {[@cipso={0x86, 0x6}]}}, "1af57f0645aca055"}}}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3fb, 0x100, 0x70bd29, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x20000801}, 0x800) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r7, &(0x7f00000001c0)={&(0x7f0000000100)={0x1d, r6, 0x0, {0x2, 0x0, 0x1}}, 0x18, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) r8 = socket$inet(0x2, 0x2, 0x1) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="50e9ff006434ca0d1da0ea0e0122c297c6be52edfaf2ba0c1e6a027d62b5e6ebdd7876b9bc06576b3ef846b576fb8f7bac050f13b1f76169b015540852b1fd65254d8be2bf49aed69073e166a97bdd3bca2812e56ce0fa7a5c5a4585618b9bfc90d5fd2fdba159b26d38d95630", @ANYRES16=r9, @ANYBLOB="010025bd7000fbdbdf253b00000008000300", @ANYRES32=r10, @ANYBLOB="34003300a0b00000080211000000080211000000ffffffffffff0400feff8f010c008c10a5058929dd6474e22b00000000000000"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlinkprop={0x3c, 0x6c, 0x200, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x48, 0x8}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x3}, @IFLA_ALT_IFNAME={0x14, 0x35, 'geneve1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8058}, 0x10) 242.440172ms ago: executing program 0 (id=2654): r0 = socket$inet6(0xa, 0x3, 0x1) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x8}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a110400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c000080280001802300"], 0xe8}}, 0x0) (async) r3 = socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001100)={'bridge_slave_0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000600)="21db", 0x2, 0x20008801, &(0x7f0000000200)={0x11, 0x88a8, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$nl_rdma(0x10, 0x3, 0x14) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 0s ago: executing program 4 (id=2655): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000015c0)={{0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x1, &(0x7f0000000040)={@_ha_fsid={[0x1, 0xcf]}, {0x8, 0x100, 0x2, 0xffff}}, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0xffff}, 0x6, &(0x7f0000001500)=[{0x99b7e6c20a77c51c, 0x1, &(0x7f0000000100)='\'/%(\x00', &(0x7f0000000140)="2be1a56de155340c67d6cbb135aaef9c94dea928d296041e006dc29eaf50c14e67c2e24405ba9e2dee60398796709285636ee9cacf6373530a2e72321ea59976505abdf96112da0480d5e689f9e35c36ef06e8c78623247e1928372829b3295312abb7777bb81a051785a1d84811d85f3a00f02b9700cfbf61d212d9ce4e13d4336bdcb54ffea2b5733a53aa19d2ee1becbaacee157f0dea68e197034b1af42461d55544d707d6a230795d789188545d2ba894ba287f1e6790f9647d421468ba9f5574821e765d3c3ccca9c8f9de8d2ee020f8e32d7dfab65944f4137cdc2e73896eaf16f440030a0ea55086b0f18fe87aa0ec148c869b8cba537832f6307412e4078b6cea452d02636247846d3090497d8581bfa473e209b7d3b0c859eab7d8b74ac48b03edb28101003bf1e42b1897232f3126cf854421390411323a4144c81c340e23727266b5901c3c6aff0bcbb80bf50cb6e29c58cf9a82bea3c91c076600ba7de73abafa9f858f91341d8090ae25b47f3d094ee7a7c7453767ab868595c370913883cb11891d6b20dc139983b532d5a6e9d0904e362d9c7a71a6f9cc242f169609f670fc736b92fc7ec3876f70d17dd75a2f53b62db71f4a789e5f8b28ce5f51f9caa20e35a16b6bf3fceebd06b18867b5a3a3581cced8f24e25a42cbc281434f37c8e4fc5a559f0783dd48118bcb4177ed986b5465385cd4386e92912578db1e5fcf04f4a83cb6d28216d101d9ff3fac27ee34c9be925b2fc59dd58576158bdc5288216677c028ba16190a622fb918f18320b8bec2166747ded8bc834b4ef02f8a9cdbe0642a17c69a541591bd71f0637c91356c12d902f2bfb721bf699b062ed0b17a9c0a66534f44db8b99c45a9e24f7e3ed9fb0c472e4184dfcff77008f884f8a87cd60801ccced83e0ce904ad3a609cf71e1cb88f9e3e82ad10d410f0ce07fcab94ce0b132574550330bb2a18de1c2c1bef159ca3bb2631eddb811b88f552124a58ceb259f7938a76bfc629bf8be9f99a626f07b3453a4210c3f1718d3db7b34559cb5721830c2014bf1977d50249738a78b8a73c5d3c9332f9e3ed11f8ef85af29e5c0b1fd5fccdb4654bbeb48da641a57e044e748af3d8a28af7314751938dc1f886892edabdae70c39785a3cea42233970ab7016077d8f032f90aba7835935169a9271ed256e7d7342d4a0038f7f445a785abad4729919533e22638bf17df616b92475159d5c8cbb987b1a6f0761ed206094572d8dde059171e60935e53d30c0dbfc4839126c9d76f226a12ec70a3dcab5db193307101c06281e12d0acd202acaf38f5fa9d4a4d651bc91ca6b1a4547b2e51cab6ef905c693075a8ff18d726bb74a52ed7d9a6c29c00369bc6ffa1faf21f13eac1a219100c8336baf70eb50b2480db279058d4c6c6f6c618770e47017b8667d1932905ed39ef2f0ddef9ba6ffee44ba4bb21c402a3cb61c56b28423cdce0050b2a9cbf570314b40de4137d7250f94bb0db459efa91d938dac918bc91f9ed615be0135006a4354dac4eb87991e9dfc99ce954dcffa8bfe3a82980090e7c691f60b5740e9790cad08686007fce8fdd43c8e3f6e0aa37f3311d250ad4c992ffded6716f7ab5e41df139df988977549c631ff88f1e84278c02752168f1c81de14270c6279e34d12be1299ad795c8440c575883d9486a37dd47244a99bf28c4da406821f60f6544ffcb2c0ab1c84d15219385be04a84af8afda58f87d57b021c8bcd3705cb875b90c082f1fbfa71dd1fa21e0b999e026f91030701a9405d327dd0f79661305e49ad6e6941f73b9dcd087998d45e82c36a963070e290b15a9859a8706caec0e9f84bf5456187e729b0a8f3afc9eb4127f1e2cd33ff6deade0e258ac91ea1d5562ec026775927d5e165c500fe4670127101f1c0a50f6c143f14a911c27d97c86d6e295d1dc97ae3032f43d1b1dbf814f55ec4bb61860eb1bd7afd3c48c782080085aaa07a7365ee6f452fb92cc824b5787ee5c782d2422bcc3e7000d7926761f22b3b837aaf97b9d0763b053309534a41177a6cbe5b8191cef409ec72bcb1cf29ca85a40d316c790d5e2e84f55057d82cbfec01a3b336b9fe8aea979c1139d0939bbdeb9103e35ae178c1e10f5e6dcfa2f68e0ae37f729fc72d3ad1354e7c9b6e74e1823011cec97b1825fd20a16b0616bff64f38c45c4c8340a2152507dd64496661f0c06260132d01e2bc95fdf71aeaaa0ba5a1a55b97965bb1e7afc9fb8c51f0254e6cb4dabe9d260bd803de9bee41c58b21bde83d97eda9cc422a20e6def60ff4f29e949b13141d59535d7489d7e2aa1445b3d04daeb0d13f94845b97ed9536aa0589a2bde5d6bd0fb84a0d2161b11e19285d1bff3efe0e1b35673dfd352fbbc3b09c6e69db4a5a2b19df6cd0275c7e29760612a03891a71831008a5a4cc34dc472c52e638e8accc8467aa21abc72a8fd97766deeb9122d5c0bfc1c5803266e9f0f9fad3bde3f48512c87150312231c6be54da782ffeccf9ce8ed61c8411cc5a4a0a480f8cf1407e2b05962d2f33edc5963d6d9bdc155b8cc2c8f3002616a56acb90fd3e0e12dd569ea7115425203c46417705847db25498daff39bb97e768b7a8ea79d9fdd74a5fdcfe339580debf2f33c50160537f10af7037e650efa37ef33e463b523db54f613552678b3ba398c4065d53f45e5ab7dc5d9b00c3573c03e9f59a73bb7776f59c4ef6e6f9ccfdf77f3ddf4e78d9be40c37d8c6ebe287807144807174e1e094c30f198be7406e37217c68c0088298ffe36bed8767254d8585db373f80f5b367d578ca0cf8af5fab87f92608d3d010f977f9111dfcba2b421d49680adc4c5dfe31d678d410d1c0721c3621e1e1c8f80cbf4928beee77054d6eafe694e551637617c4cff240bc19689722630c3612b7b32df4657d0b320cbdc47066a53352cb2f743db18cd7083f215658406c369def6c086cf60baae5e5fdc1bff51b63a33953e72a9cfe516b6c6504965e0e1a3d66fabf87331e5fd4b682cd75235e2edf7050170817a4e97b25aa3e2e7cb8cff1a71c070b486cf3ed0d10ab7d00d8454262f79e3a5bc7b717202dcbd4310f02d35dc3114174a959fbfeb004c66092dfa62ab1ffe44ba752da244d0ba2f278bf1cdf8a5115294a62b6467e3c141b0d6b1ba6a64936c952113f17e799cb8f078d3fb684a77a0d1594e63486458d82d8c6b9b6ddf920431e3f6e7b396b3596840a0b3a5c19774da6d145f18c35dcd2804bcd135237c928859f05d37366e4b5f9351df30a8e48c55a4c9d7f673d09e7816fb4ad748b646f0787c7a4a5ab6be6c483ec74e87b8029dde4ea3eadc055f7eda814cd27bd34e40b0ecd18f259b6fd9c9e639ff8e0d0080ec6a2882219a53aeef6d9416eed6fd0a5e1531392dc214c0d1be035291c438747b74ae57c56e73e50a9a11f7c85f18c5daf55f0c184c2fd59202067ac753e2df781359dbb985a8bdeaed05803c0d124be0167d7e1b341167698079725b8f352a0b64d020370f006b79c8a71c5adb63ba1fe1cffc2be91e94a4350c7147c12f6d597850f4676f372cacf049f105986d86cb254c5ac8a23826a6652adb315c1e72ef0b6eeec8debb71b65faa00d5b22f334f74f8d1308ae9cdb12e4bcf6ce15508faaec9b594eae1436fee875d8835855cdf99c3907605302bb6180ae157d9c726bc1b309c1ff1376c300d1eaa6cee4644aafa55c4ad3e247e9b6a0217c70d5f3d282140a8792304bd2fdf1d9a7bdb0c258cad01b1f447cb16101be9c7f6342dcebe7fe00d81332d68f5fd71fa966ddd06e5fe67c3bd4975374ee891d27e97bfd27338543c28179de510c59745ec7123c8f52edaa9241f658960c05db078af3ff7482b7eaa556e6af45560857be2dc0a83c2bdbf73031fdb8d6a943a678d0e6233f8efb3dab4fcf7a2e9ca648555ec7daadecc7b2cb2ab7f2759e1cc7b051ce303258a114da62eab652108114ad97517949f924f3fa8f8064662835750112847d65fb3dbdb92723abf7e6b99b063d877771ceb2d43524ddb5a176a56d2d42806dfab43e227e94e33bc975185ea745b0bab1ca3cfc64f795a780de4b3df42e1c9b3590a1319217a67283a6c9f25935996b82e85587616c482980f0f10c67f0831b1ee63a4748192c0e2125af3317d3d25a64a39ca3bc33f9f75a6bc4cf8b3990abb5589e844c91dc84fb89abb0da5ccd870be45c87ad798f167cb49c52652edf10f331eb0fb4378cd55f7f5d74b8675b99d0d7965ab6c6a2e3bb358b3173f1b5185f8701584e17604e5287c8b02c7a5d33c2957fccb26e3d28aa4f0452cd837ccf6bd38a834b25a6869155e6209891767c319a3082c82b89515e59b7b6cda0f9f22f970b2874fa963800f09a0b22c75e267b82eb007c5b107dff48adde0719246d1f06cdf95b28979874a615b5b6a41afd204f79daac92175d922c12cb64793cefbb68b9297a50bea10d7b7e489927214182751db44a40a471856853c0c06e9629067f73bed60f708f187976c98fb0564114ab1f31a7ab2be76fa1d3c4b0b4563e2c17bd5ea2dfbacd083c567b9e7f9ddb5b6aa4d9583ed9b64babab1821b040a0191feed429ddc562047e8e440015e127dbd34cfa5430f8fdd70e1bccd80b444781ded87e6df99d2243824534a841d2237836034d2ce57ad52ceb94e099a867847757d9425e2c3c9e3503c35319dfb00c12498e1cd5418e4c82a730fdab8c80fafef984d5e9becacea766b165e49e49262e0b8e3b6a62a37ce1449712dc08ea9db566b086404bd54f0a9580f32cdef3d259d6b99924032b0d26916dc60784e45d55c164544d8758696e2340b062b5e286e8d06cb3b90ab524d942f07f5b1d94873cc022c6eb6dfcac583f0359fe57e607e7c943a8d3b3c52205cde6941c101e410542cd8dd68ad6f55c77f07b1a716f17f85904125638773b9b436a4aa9bb1ac36bfc9c46f10ea16d5d05adf45dbb1bd3887ea7503072075653057af6448331001e161a9513703f1a23863123a0ba65a8eb1e7294b267e0f79e1851d06e38fd877c06ba4feef96a766ec89c6f4d672f6368d3ef76cbdd32b942d1562871f8f0b33dfd5932545226ddbbe01bf965072651c295444bac8c9275f43298256799b6a8ad3f53dc52daa105f4aa04c38d394cbd23353372e48d747f9e0ef84e76a99e5fb5d46a04ceca99cc631cb206577df115e786543c7fd6d8a6c315da1e515cb8121de408e1ae5f32c615735e1336b944000a27c0af120bdbebe5061d0a7322b4f50eb5c29ed16b4c39c81b73ad48270d3e908f2d6a2fede879216f4354e447512a70b1728e7304e984a7099c0371cafc9d3889a0d697a57036d5b0c66e62f3e42252fc2d7d6fb1012fcfc9cf0aa69ad445ab2d57c2303f57aebbf75ae1e806e881c0986d15646d24e923e493e0500c0448e220e0127ec8bfa61209e0be2f9e07388357a81954813f4727d115664e6310dc868af7ad734d500ddbc7acf3f4a94ea830ab13a23549aee6083967307739cd2edea07c80b1cdafdde1999aae6bf4bdc4050c77919f211ba9835162122e36a5b0a933e13f464d071c63940a6d82d878f01f7c5c4deb3a95800d848bceacaa72d61dac2f635451cc240abc863a2c21470976cabe10eae74ad68175f939d976f50edbc85ee6a1fc7872db35d17b222c84530ff4d37ae1785746ac622fb60ad6ce49faed652b893829b2d7a788f7211652396d6b409c349441d875d91ac4b648fbcbeb96a5012124d306eda65deb1ac4ebd99878bb2e4d1734b", 0x1000, 0x10}, {0x2, 0x20000, &(0x7f0000001140)='&]\x00', &(0x7f0000001180)="11120361cbbb00e3e793b718fb72ab7e88b5be7825ca2c769f97f632ee2a1100b1db25773841cfb4dae6a5239b6a33fc61a26313cfe5a19d57974b1393598f06b8a1c440e967e08e8159b582697f483336ed1da6e7ad989e40b1ee9e3bdf27635816d1ac2fc8f8d6f64b93a3b9553b808da8da099b2a5b9e368634320056", 0x7e, 0x2}, {0x1, 0x0, &(0x7f0000001200)='\x00', &(0x7f0000001240)="2ae5f66d8e589c47fd367c6aad335cd1db13bc8eb9f9d3c28f923426be964314341ca2f2a6c76808102b2e8ec3df3cf137acbfe3f2625bacfa075165c512e0a6298008036de82e38de76b3e0a81be35867c7d6eab225143a61228037c58c5e2eb0c259056236a0166acb4719f925d632dc837704fc9c8a1a0f8980807f9e6550f8691570bcd722e61325d5dc48bd4a817a99c7ba75c2bad7e04cdc51e5c4a63503a7551136adf0ee35496ec22d223c8a4233f1f6521923a69d17dbda35a15bb6f3439c25618873c28761cd3eb8e400dd7c4ae28f24f903fd84", 0xd9, 0x38}, {0x3, 0x30de, &(0x7f0000001340)='\'%/-{{*\\\x00', &(0x7f0000001380)="64bdcc3ca08ea3a479be2a679287feeb465136ac8582c8f9a0abf01621351e845a21c8de75a2caee8353d2b8598f6985d67136546e008ebbc5fe6e0e77e9d271f4ef559d2e711bcd7bcbcf4ec6a19c2e094d782e4e049d0f3dc65c2967b13713c30d453637c3cc843201c3", 0x6b, 0x10}, {0x2, 0x2, &(0x7f0000001400), &(0x7f0000001440)="9a3d879cce4d846d4ba2e29496b30e5d94c8ca3694dba06c842e0a76d871768b0777f3987cfed44623", 0x29, 0x32}, {0x1, 0xaa, &(0x7f0000001480)='*!#\x00', &(0x7f00000014c0)="c30759516fa3947ba5ade118ea0bd9bda54ff1395f721ec7aed181e166f100383b66202ed0f5fa5de5eb7cac0ed6c4693fc79c76330c3776057d", 0x3a}]}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001640)=0x0) bind$nfc_llcp(r0, &(0x7f0000001680)={0x27, r1, 0x0, 0x4, 0x8, 0xee, "a3e811cd268db9d907eb59e6810dfa518cd07be186bdfc35fbf51ad5754a1ed44c0bbdc9b71478024cb873d4f900e56034bc07fd70d2cd59905026477a28f8", 0x29}, 0x60) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000001700)={0x7ff, {{0xa, 0x4e23, 0x100, @dev={0xfe, 0x80, '\x00', 0x25}, 0x9}}, {{0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}}}, 0x108) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), r0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000029c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002980)={&(0x7f00000018c0)={0x1084, r2, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x29, 0x5b, "f12e8d7f43d56e0dd5371b8dd762021a618fa04f1038bb6e05b4be624d5c1ce58d79068140"}, @NL80211_ATTR_FRAME_MATCH={0x10, 0x5b, "b8bf23e7cd7fb7c25fe2f9f1"}, @NL80211_ATTR_FRAME_MATCH={0x1f, 0x5b, "b8d80f60de75436c899e8c3129086205a4b2f82fc166216d647d7e"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "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"}]}, 0x1084}, 0x1, 0x0, 0x0, 0x10}, 0x20044880) r3 = socket$igmp6(0xa, 0x3, 0x2) getsockopt(r3, 0x5b56, 0x1, &(0x7f0000002a00)=""/22, &(0x7f0000002a40)=0x16) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000002a80), 0x4) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000002ac0)={0x0, 0xe, '\x00', [@hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @calipso={0x7, 0x48, {0x1, 0x10, 0x81, 0x7, [0x5, 0x7ff000000000000, 0x6, 0x480000000000000, 0x7fffffff, 0x2, 0x4, 0x9]}}, @enc_lim={0x4, 0x1, 0x6}]}, 0x80) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000002b40)={0x0, 0x9}, &(0x7f0000002b80)=0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002c00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000002d40)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002d00)={&(0x7f0000002c40)={0xbc, r2, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x9f, 0x5b, "c3aa9c97cc7d371f6b700f6b774a61d6de228a4fed544b236c16decec533cbf298bf82dce03b3dc28f9ba093bb4e5ea96f209b38cd2b58baaea8f5c262a67ea5ad2a51987eda16a864a77e35b3567f10a72cf748e9d31697aacfce4360b58ef3cf2161484df605238a8f6fcb7d4c49c7fd07fa704160e234cf154a33be140fd5d14b0e3c5ee5e5692d7fadfdd4ddd02bab5b71568abd87a01d0761"}]}, 0xbc}, 0x1, 0x0, 0x0, 0x95}, 0x8000) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000002d80)={0x0, 0x8, 0x800, 0x1, 0x7}) vmsplice(r3, &(0x7f0000002e00)=[{&(0x7f0000002dc0)}], 0x1, 0x1) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000002e40), 0x400000, 0x0) write$tun(r6, &(0x7f0000002e80)={@val={0x0, 0x88b5}, @void, @mpls={[{0x10, 0x0, 0x1}, {0x5}, {0x8}, {0x80}, {0x7, 0x0, 0x1}, {0x81}], @llc={@llc={0xe, 0xfe, "b8", "c11b0ef3d197036a916732fdb756a2fb5ad2a22ec7c10b76bcc7973d0b09d098e777fcd49dcdbedd1dd0d7f0395be54724fbed083277ffd5c911ec86fe3f5aaf9dff37b26391a7ad4ac867e01375544dc0269afc7f3a5f4fdbb4e7742fe66a0aeed95322b2a82ea36566341c14a7b4bf"}}}}, 0x8f) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000002f40)={'xfrm0\x00', @broadcast}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f00000030c0)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003080)={&(0x7f0000002fc0)={0x88, r2, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xf, 0x2a, [@erp={0x2a, 0x1}, @mesh_chsw={0x76, 0x6, {0xbc, 0xa5, 0x40, 0x2}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x5}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8}, @NL80211_ATTR_IE={0x51, 0x2a, [@ssid={0x0, 0x1e, @random="bba7326ed5f822d2d9c140963af30cad942d31edc296cacf5c2927b5d997"}, @preq={0x82, 0x2b, {{0x0, 0x0, 0x1, 0x0, 0x1}, 0x2, 0xfd, 0x1f95, @device_a, 0x1, @value=@broadcast, 0x2, 0x5, 0x1, [{{}, @broadcast, 0xffff}]}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x8000) sendto$inet6(r5, &(0x7f0000003100)="04d254a7586077a45e672e04a0bbbbe7d1ccbff6b6ba1207fb6b4fba098871dec09831131f6e171dbe4a1218cfe1ee818d4b53d7986c69a044d54e5a3dcf324675b2dc818c9a90928ae2c37a164b9dc9458dd9b9b41b1ece65fde0088282b341e8d81aa906672cf61e3af75e8b6b84bec6699c5cacf6a00aa14d952f", 0x7c, 0x4080, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000031c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000003280)={&(0x7f0000003180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x0, 0x39}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4c040) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000033c0)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003380)={&(0x7f0000003300)={0x5c, r2, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x200, 0x6f}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f638b08480"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "4e951bb3275ec6"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "fd2c94106e"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008020}, 0x24000850) openat$cgroup(r0, &(0x7f0000003400)='syz0\x00', 0x200002, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000003440)) kernel console output (not intermixed with test programs): rsing attributes in process `syz.3.748'. [ 149.224177][ T8340] bond6: entered promiscuous mode [ 149.224222][ T8340] veth0_to_bond: entered promiscuous mode [ 149.224490][ T8340] bond6: entered allmulticast mode [ 149.224510][ T8340] veth0_to_bond: entered allmulticast mode [ 149.378053][ T8348] netlink: Conntrack attr has 12 unknown bytes [ 149.384613][ T8348] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.622690][ T8370] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 150.100895][ T8389] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 150.173769][ T8397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.766'. [ 150.185183][ T8397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.766'. [ 150.210931][ T8401] netlink: 'syz.0.765': attribute type 4 has an invalid length. [ 150.219052][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.765'. [ 150.248152][ T8400] netlink: 20 bytes leftover after parsing attributes in process `syz.3.769'. [ 150.363709][ T8406] netlink: 'syz.1.770': attribute type 58 has an invalid length. [ 150.372300][ T8406] netlink: 20 bytes leftover after parsing attributes in process `syz.1.770'. [ 150.775362][ T6052] udevd[6052]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 150.795141][ T6052] udevd[6052]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 150.887741][ T8431] netlink: 'syz.1.777': attribute type 1 has an invalid length. [ 151.108806][ T8431] 8021q: adding VLAN 0 to HW filter on device bond5 [ 151.154307][ T8432] bond4: (slave veth0_to_bond): Releasing active interface [ 151.154362][ T8432] veth0_to_bond: left promiscuous mode [ 151.156592][ T8432] veth0_to_bond: left allmulticast mode [ 151.159962][ T8443] IPv6: NLM_F_CREATE should be specified when creating new route [ 151.195272][ T8432] bond5: (slave veth0_to_bond): making interface the new active one [ 151.203586][ T8432] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 151.213362][ T8440] bond5: entered promiscuous mode [ 151.213388][ T8440] veth0_to_bond: entered promiscuous mode [ 151.213612][ T8440] bond5: entered allmulticast mode [ 151.213628][ T8440] veth0_to_bond: entered allmulticast mode [ 151.251995][ T8432] netlink: 'syz.1.777': attribute type 5 has an invalid length. [ 151.274007][ T8447] xt_CT: You must specify a L4 protocol and not use inversions on it [ 151.375218][ T8452] A link change request failed with some changes committed already. Interface 1¾x9ÿ may have been left with an inconsistent configuration, please check. [ 151.542089][ T8455] Bluetooth: MGMT ver 1.23 [ 152.170056][ T8482] x_tables: duplicate underflow at hook 1 [ 152.190912][ T8487] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 152.253767][ T8487] bridge_slave_0: left allmulticast mode [ 152.253824][ T8487] bridge_slave_0: left promiscuous mode [ 152.255431][ T8487] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.286274][ T8487] bridge_slave_1: left allmulticast mode [ 152.286339][ T8487] bridge_slave_1: left promiscuous mode [ 152.286565][ T8487] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.316526][ T8487] bond5: (slave veth0_to_bond): Releasing active interface [ 152.316579][ T8487] veth0_to_bond: left promiscuous mode [ 152.316820][ T8487] veth0_to_bond: left allmulticast mode [ 152.348435][ T8487] bond0: (slave bond_slave_0): Releasing backup interface [ 152.371899][ T8487] bond0: (slave bond_slave_1): Releasing backup interface [ 152.403644][ T8501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.798'. [ 152.436812][ T8487] team0: Port device team_slave_0 removed [ 152.487231][ T8487] team0: Port device team_slave_1 removed [ 152.488106][ T8487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.488124][ T8487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.500868][ T8508] netlink: 60 bytes leftover after parsing attributes in process `syz.4.793'. [ 152.526214][ T8487] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 152.564716][ T8494] team0: Port device xfrm0 added [ 152.621795][ T8492] gretap1: entered promiscuous mode [ 152.622748][ T8492] batman_adv: batadv0: Adding interface: gretap1 [ 152.622762][ T8492] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.622788][ T8492] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 152.665649][ T8497] tipc: Started in network mode [ 152.665678][ T8497] tipc: Node identity defed024f107, cluster identity 4711 [ 152.665914][ T8497] tipc: Enabled bearer , priority 0 [ 152.768539][ T8501] bond7: Invalid ad_actor_system MAC address. [ 152.768610][ T8501] bond7: option ad_actor_system: invalid value (1) [ 152.788833][ T8501] bond7 (unregistering): Released all slaves [ 153.091628][ T8532] netlink: 'syz.0.805': attribute type 1 has an invalid length. [ 153.224553][ T8532] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.285319][ T8534] bond1: (slave veth0_to_bond): making interface the new active one [ 153.295141][ T8534] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 153.316455][ T8536] bond1: entered promiscuous mode [ 153.321777][ T8536] veth0_to_bond: entered promiscuous mode [ 153.328123][ T8536] bond1: entered allmulticast mode [ 153.333591][ T8536] veth0_to_bond: entered allmulticast mode [ 153.638256][ T8555] netlink: 'syz.4.813': attribute type 1 has an invalid length. [ 153.779421][ T5811] tipc: Node number set to 804900900 [ 153.873109][ T8562] netlink: 64 bytes leftover after parsing attributes in process `syz.2.816'. [ 153.957253][ T8562] syzkaller1: entered promiscuous mode [ 153.957309][ T8562] syzkaller1: entered allmulticast mode [ 154.093219][ T8572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.817'. [ 154.472724][ T8585] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 154.472777][ T8585] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 154.547797][ T8585] netlink: 68 bytes leftover after parsing attributes in process `syz.0.824'. [ 154.583033][ T8585] tipc: Started in network mode [ 154.583098][ T8585] tipc: Node identity 080211000001, cluster identity 4711 [ 154.594390][ T8585] tipc: Enabled bearer , priority 0 [ 154.798942][ T8566] syzkaller1: entered promiscuous mode [ 154.798988][ T8566] syzkaller1: entered allmulticast mode [ 154.905082][ T8606] netlink: 'syz.1.829': attribute type 2 has an invalid length. [ 155.127407][ T8614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.833'. [ 155.127463][ T8614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.833'. [ 155.142784][ T8617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.833'. [ 155.142807][ T8617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.833'. [ 155.142854][ T8617] netlink: 'syz.3.833': attribute type 11 has an invalid length. [ 155.158669][ T8619] netlink: 'syz.2.834': attribute type 1 has an invalid length. [ 155.333464][ T8619] 8021q: adding VLAN 0 to HW filter on device bond6 [ 155.401716][ T8622] bond5: (slave veth0_to_bond): Releasing active interface [ 155.433779][ T8622] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 155.452655][ T8626] bond6: entered promiscuous mode [ 155.458007][ T8626] bond6: entered allmulticast mode [ 155.584078][ T8645] team0 (unregistering): Port device team_slave_0 removed [ 155.605351][ T8645] team0 (unregistering): Port device team_slave_1 removed [ 155.701486][ T5730] tipc: Node number set to 134418688 [ 155.866987][ T8651] x_tables: duplicate underflow at hook 2 [ 156.337919][ T8668] netlink: 'syz.2.849': attribute type 39 has an invalid length. [ 158.288648][ T8629] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 158.585991][ T8697] netlink: 'syz.4.858': attribute type 4 has an invalid length. [ 158.586047][ T8697] netlink: 17 bytes leftover after parsing attributes in process `syz.4.858'. [ 158.605464][ T8697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.858'. [ 158.676218][ T8704] netlink: 24 bytes leftover after parsing attributes in process `syz.2.861'. [ 158.778867][ T8708] netlink: 'syz.2.861': attribute type 2 has an invalid length. [ 158.789585][ T8700] bond7: invalid ARP target 0.0.0.0 specified for addition [ 158.796921][ T8700] bond7: option arp_ip_target: invalid value (0) [ 158.816554][ T8700] bond7 (unregistering): Released all slaves [ 159.071641][ T8728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.871'. [ 159.157629][ T8732] IPVS: set_ctl: invalid protocol: 41 255.255.255.255:20003 [ 159.441904][ T8741] netlink: 'syz.2.873': attribute type 4 has an invalid length. [ 159.441937][ T8741] netlink: 17 bytes leftover after parsing attributes in process `syz.2.873'. [ 159.958130][ T8748] netlink: 'syz.1.876': attribute type 9 has an invalid length. [ 160.186563][ T5632] Bluetooth: hci4: link tx timeout [ 160.200807][ T5632] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 160.246410][ T8756] __nla_validate_parse: 1 callbacks suppressed [ 160.254835][ T8756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.878'. [ 160.470857][ T8770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.883'. [ 161.901717][ T8715] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 161.992645][ T8779] netlink: 'syz.3.884': attribute type 4 has an invalid length. [ 162.002382][ T8779] netlink: 17 bytes leftover after parsing attributes in process `syz.3.884'. [ 162.015597][ T8779] netlink: 12 bytes leftover after parsing attributes in process `syz.3.884'. [ 162.241808][ T5632] Bluetooth: hci4: command 0x0406 tx timeout [ 162.792599][ T8825] netlink: 12 bytes leftover after parsing attributes in process `syz.1.896'. [ 162.962849][ T8832] netlink: 'syz.0.900': attribute type 6 has an invalid length. [ 163.197422][ T8847] x_tables: duplicate underflow at hook 1 [ 163.355768][ T8856] syz_tun: entered allmulticast mode [ 163.492794][ T8863] netlink: 288 bytes leftover after parsing attributes in process `syz.0.908'. [ 163.541193][ T8828] netlink: 40 bytes leftover after parsing attributes in process `syz.4.898'. [ 163.783922][ T8872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.911'. [ 163.945475][ T8875] syzkaller1: entered promiscuous mode [ 163.952213][ T8875] syzkaller1: entered allmulticast mode [ 164.026221][ T8882] netlink: 'syz.3.915': attribute type 1 has an invalid length. [ 164.106359][ T8882] block nbd296: server does not support multiple connections per device. [ 164.178613][ T8853] syz_tun: left allmulticast mode [ 164.192645][ T6526] block nbd296: shutting down sockets [ 164.419017][ T8901] netlink: 24 bytes leftover after parsing attributes in process `syz.1.918'. [ 164.429641][ T8905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.922'. [ 164.950719][ T8925] netlink: 'syz.2.931': attribute type 1 has an invalid length. [ 165.328613][ T8935] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 165.506557][ T6476] IPVS: starting estimator thread 0... [ 165.600079][ T8952] IPVS: using max 31 ests per chain, 74400 per kthread [ 165.671612][ T8960] netlink: 'syz.3.944': attribute type 1 has an invalid length. [ 165.739707][ T8962] __nla_validate_parse: 6 callbacks suppressed [ 165.746199][ T8962] netlink: 12 bytes leftover after parsing attributes in process `syz.3.946'. [ 165.975398][ T8964] bond6 (unregistering): Released all slaves [ 166.219118][ T8997] xt_ecn: cannot match TCP bits for non-tcp packets [ 166.231453][ T8977] bond6 (unregistering): Released all slaves [ 166.318864][ T9000] netlink: 'syz.2.955': attribute type 21 has an invalid length. [ 166.328007][ T8985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.951'. [ 166.328127][ T8985] netlink: 2 bytes leftover after parsing attributes in process `syz.0.951'. [ 166.357859][ T9000] netlink: 156 bytes leftover after parsing attributes in process `syz.2.955'. [ 166.546396][ T9007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.958'. [ 167.137748][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.970'. [ 167.151667][ T9046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.971'. [ 167.166923][ T9047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.970'. [ 167.321764][ T9058] IPVS: sh: FWM 3 0x00000003 - no destination available [ 167.374601][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.974'. [ 167.385731][ T9063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.974'. [ 167.432967][ T6476] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.433279][ T6476] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.448030][ T8366] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.456304][ T8366] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.832025][ T9080] netlink: 'syz.4.981': attribute type 1 has an invalid length. [ 167.996179][ T9080] 8021q: adding VLAN 0 to HW filter on device bond2 [ 168.062381][ T9084] bond2: (slave veth0_to_bond): making interface the new active one [ 168.078519][ T9084] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 168.111808][ T9084] netlink: 'syz.4.981': attribute type 5 has an invalid length. [ 168.126424][ T9086] bond2: entered promiscuous mode [ 168.126455][ T9086] veth0_to_bond: entered promiscuous mode [ 168.126689][ T9086] bond2: entered allmulticast mode [ 168.126704][ T9086] veth0_to_bond: entered allmulticast mode [ 168.135091][ T9092] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 168.201144][ T9084] macvlan2: entered promiscuous mode [ 168.201198][ T9084] macvlan2: entered allmulticast mode [ 169.727605][ T9160] netlink: 'syz.3.1007': attribute type 1 has an invalid length. [ 169.772208][ T9160] 8021q: adding VLAN 0 to HW filter on device bond7 [ 169.794427][ T9160] bond6: (slave veth0_to_bond): Releasing active interface [ 169.803205][ T9160] veth0_to_bond: left promiscuous mode [ 169.803445][ T9160] veth0_to_bond: left allmulticast mode [ 169.828013][ T9160] bond7: (slave veth0_to_bond): making interface the new active one [ 169.839881][ T9160] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 169.869693][ T9169] bond7: entered promiscuous mode [ 169.869737][ T9169] veth0_to_bond: entered promiscuous mode [ 169.869992][ T9169] bond7: entered allmulticast mode [ 169.870013][ T9169] veth0_to_bond: entered allmulticast mode [ 170.752643][ T9198] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 170.973487][ T9206] mac80211_hwsim hwsim3 ÿ: renamed from wlan1 [ 171.052869][ T9208] ip_tunnel: non-ECT from 172.30.1.1 with TOS=0x3 [ 171.116540][ T9213] __nla_validate_parse: 10 callbacks suppressed [ 171.117023][ T9213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1024'. [ 171.348391][ T9220] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1026'. [ 171.373728][ T9224] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1027'. [ 171.374566][ T9224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1027'. [ 171.391824][ T9224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1027'. [ 171.411728][ T50] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.411811][ T50] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.411847][ T50] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.411878][ T50] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.448052][ T9225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1025'. [ 171.655780][ T9233] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 171.665588][ T9233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1030'. [ 171.817557][ T9238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1035'. [ 171.978760][ T9242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1034'. [ 172.383245][ T9268] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1044'. [ 173.113717][ T9294] Bluetooth: hci0: unsupported parameter 5135 [ 173.123395][ T9294] Bluetooth: hci0: unsupported parameter 8192 [ 173.130353][ T9294] Bluetooth: hci0: unsupported parameter 5135 [ 173.136871][ T9294] Bluetooth: hci0: unsupported parameter 8192 [ 173.303756][ T9297] macvtap1: entered promiscuous mode [ 173.309750][ T9297] macvtap1: entered allmulticast mode [ 173.317102][ T9297] veth1_vlan: entered allmulticast mode [ 174.115129][ T9344] IPVS: length: 66 != 8 [ 174.241677][ T9349] netlink: 'syz.4.1071': attribute type 1 has an invalid length. [ 174.305138][ T9349] bond3: entered promiscuous mode [ 174.306639][ T9349] 8021q: adding VLAN 0 to HW filter on device bond3 [ 174.326121][ T9350] 8021q: adding VLAN 0 to HW filter on device bond3 [ 174.328240][ T9350] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 174.328262][ T9350] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 174.344328][ T9350] bond3: (slave ip6gre1): making interface the new active one [ 174.344357][ T9350] ip6gre1: entered promiscuous mode [ 174.354790][ T9350] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 174.691875][ T5617] Bluetooth: hci4: unexpected cc 0x2003 length: 0 < 9 [ 174.691936][ T5617] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 174.693501][ T9374] netlink: 'syz.4.1080': attribute type 1 has an invalid length. [ 174.729022][ T9374] 8021q: adding VLAN 0 to HW filter on device bond4 [ 175.273794][ T9406] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 175.632097][ T9423] netlink: 'syz.0.1098': attribute type 2 has an invalid length. [ 176.427226][ T9467] netlink: 'syz.3.1112': attribute type 3 has an invalid length. [ 176.436043][ T9467] __nla_validate_parse: 13 callbacks suppressed [ 176.443976][ T9467] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1112'. [ 176.635917][ T9478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1114'. [ 176.664986][ T6362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.851498][ T9485] syzkaller1: entered promiscuous mode [ 176.851540][ T9485] syzkaller1: entered allmulticast mode [ 177.185561][ T9504] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1124'. [ 177.271462][ T9507] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 177.281177][ T9511] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 177.340805][ T9513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1129'. [ 177.685738][ T5630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.695337][ T9521] netlink: 1204 bytes leftover after parsing attributes in process `syz.1.1131'. [ 177.974890][ T9546] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1140'. [ 178.007738][ T9546] netlink: 'syz.3.1140': attribute type 9 has an invalid length. [ 178.061398][ T9549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1141'. [ 178.160074][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.220969][ T9546] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1140'. [ 178.221043][ T9546] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1140'. [ 178.246343][ T9546] gretap0: entered promiscuous mode [ 178.257992][ T9546] gretap0: left promiscuous mode [ 178.314654][ T9559] netlink: 'syz.1.1143': attribute type 29 has an invalid length. [ 178.314714][ T9559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1143'. [ 178.318186][ T9562] syzkaller0: entered promiscuous mode [ 178.318207][ T9562] syzkaller0: entered allmulticast mode [ 178.361533][ T9564] netlink: 'syz.4.1147': attribute type 6 has an invalid length. [ 178.388003][ T9564] netlink: 'syz.4.1147': attribute type 6 has an invalid length. [ 178.726515][ T5630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.892118][ T9585] bond8: option packets_per_slave: invalid value (18446744073709551615) [ 178.900741][ T9585] bond8: option packets_per_slave: allowed values 0 - 65535 [ 178.911012][ T9585] bond8 (unregistering): Released all slaves [ 178.963502][ T5630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.058991][ T9592] bond8: option packets_per_slave: invalid value (18446744073709551615) [ 179.059045][ T9592] bond8: option packets_per_slave: allowed values 0 - 65535 [ 179.115446][ T9592] bond8 (unregistering): Released all slaves [ 179.144899][ T9604] netlink: 'syz.4.1158': attribute type 4 has an invalid length. [ 179.792330][ T9632] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 179.819208][ T9632] tipc: Resetting bearer [ 179.951105][ T9635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.163263][ T9652] x_tables: duplicate underflow at hook 3 [ 180.226376][ T9659] netlink: 'syz.3.1179': attribute type 1 has an invalid length. [ 180.226433][ T9659] netlink: 'syz.3.1179': attribute type 2 has an invalid length. [ 180.409070][ T9670] ip6gre1: entered promiscuous mode [ 180.420783][ T9670] ip6gre1: entered allmulticast mode [ 180.433119][ T50] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 180.433396][ T50] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 180.459864][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 180.521110][ T9676] netlink: 'syz.2.1182': attribute type 14 has an invalid length. [ 181.040101][ T5811] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 181.047408][ T9706] netlink: 'syz.4.1193': attribute type 1 has an invalid length. [ 181.079137][ T9706] 8021q: adding VLAN 0 to HW filter on device bond6 [ 181.096683][ T9706] bond2: (slave veth0_to_bond): Releasing active interface [ 181.096721][ T9706] veth0_to_bond: left promiscuous mode [ 181.097930][ T9706] veth0_to_bond: left allmulticast mode [ 181.111719][ T9706] bond6: (slave veth0_to_bond): making interface the new active one [ 181.117536][ T9706] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 181.135309][ T9706] bond6: entered promiscuous mode [ 181.135339][ T9706] veth0_to_bond: entered promiscuous mode [ 181.135543][ T9706] bond6: entered allmulticast mode [ 181.135557][ T9706] veth0_to_bond: entered allmulticast mode [ 181.362272][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 181.521428][ T9719] __nla_validate_parse: 12 callbacks suppressed [ 181.521480][ T9719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1197'. [ 181.858247][ T9738] netlink: 'syz.4.1205': attribute type 1 has an invalid length. [ 181.858278][ T9738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1205'. [ 181.858339][ T9738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1205'. [ 181.987177][ T9743] netlink: 'syz.4.1207': attribute type 1 has an invalid length. [ 182.013801][ T9743] 8021q: adding VLAN 0 to HW filter on device bond7 [ 182.028710][ T9743] bond6: (slave veth0_to_bond): Releasing active interface [ 182.028770][ T9743] veth0_to_bond: left promiscuous mode [ 182.028957][ T9743] veth0_to_bond: left allmulticast mode [ 182.050395][ T9743] bond7: (slave veth0_to_bond): making interface the new active one [ 182.058966][ T9743] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 182.068836][ T9743] bond7: entered promiscuous mode [ 182.068866][ T9743] veth0_to_bond: entered promiscuous mode [ 182.069802][ T9743] bond7: entered allmulticast mode [ 182.069820][ T9743] veth0_to_bond: entered allmulticast mode [ 182.202326][ T9745] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1207'. [ 182.300505][ T9747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1208'. [ 182.533187][ T9758] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1213'. [ 182.682937][ T9768] netlink: 'syz.4.1217': attribute type 3 has an invalid length. [ 182.757165][ T9772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1219'. [ 182.804299][ T9774] netdevsim netdevsim4: Direct firmware load for 1 failed with error -2 [ 182.804336][ T9774] netdevsim netdevsim4: Falling back to sysfs fallback for: 1 [ 183.117642][ T9661] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 183.384922][ T9781] netlink: 'syz.0.1221': attribute type 1 has an invalid length. [ 183.472684][ T9789] Bluetooth: hci0: unsupported parameter 5135 [ 183.496443][ T9789] Bluetooth: hci0: unsupported parameter 8192 [ 183.496498][ T9789] Bluetooth: hci0: unsupported parameter 5135 [ 183.496517][ T9789] Bluetooth: hci0: unsupported parameter 8192 [ 183.566897][ T9781] 8021q: adding VLAN 0 to HW filter on device bond2 [ 183.594832][ T9788] bond1: (slave veth0_to_bond): Releasing active interface [ 183.594882][ T9788] veth0_to_bond: left promiscuous mode [ 183.608559][ T9788] veth0_to_bond: left allmulticast mode [ 183.687832][ T9797] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1221'. [ 183.701318][ T9788] bond2: (slave veth0_to_bond): making interface the new active one [ 183.709506][ T9788] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 183.755662][ T9792] bond2: entered promiscuous mode [ 183.756572][ T9792] veth0_to_bond: entered promiscuous mode [ 183.757521][ T9792] bond2: entered allmulticast mode [ 183.757538][ T9792] veth0_to_bond: entered allmulticast mode [ 183.761691][ T9799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1230'. [ 183.926269][ T9803] veth1_to_bond: entered allmulticast mode [ 183.939036][ T9803] veth1_to_bond: left allmulticast mode [ 184.159473][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 184.344641][ T9814] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1235'. [ 184.966187][ T9852] netlink: 'syz.0.1250': attribute type 1 has an invalid length. [ 185.029075][ T9852] 8021q: adding VLAN 0 to HW filter on device bond3 [ 185.067176][ T9857] bond2: (slave veth0_to_bond): Releasing active interface [ 185.067235][ T9857] veth0_to_bond: left promiscuous mode [ 185.067404][ T9857] veth0_to_bond: left allmulticast mode [ 185.114736][ T9857] bond3: (slave veth0_to_bond): making interface the new active one [ 185.123027][ T9857] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 185.138496][ T9852] bond3: entered promiscuous mode [ 185.145533][ T9852] veth0_to_bond: entered promiscuous mode [ 185.152010][ T9852] bond3: entered allmulticast mode [ 185.157416][ T9852] veth0_to_bond: entered allmulticast mode [ 185.326462][ T9870] netlink: 'syz.2.1255': attribute type 14 has an invalid length. [ 185.409592][ T6476] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.413055][ T9870] netlink: 'syz.2.1255': attribute type 14 has an invalid length. [ 185.431535][ T6476] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.459551][ T6476] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.468693][ T6476] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.011925][ T9888] xt_limit: Overflow, try lower: 536871034/127 [ 186.047432][ T9895] xt_limit: Overflow, try lower: 536871034/127 [ 186.425618][ T9906] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 186.909430][ T9932] netlink: 'syz.2.1279': attribute type 1 has an invalid length. [ 187.040224][ T9932] 8021q: adding VLAN 0 to HW filter on device bond7 [ 187.071729][ T9938] bond6: (slave veth0_to_bond): Releasing active interface [ 187.087793][ T9944] __nla_validate_parse: 8 callbacks suppressed [ 187.087854][ T9944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1283'. [ 187.169183][ T9938] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 187.217721][ T9942] bond7: entered promiscuous mode [ 187.217772][ T9942] bond7: entered allmulticast mode [ 187.314766][ T9946] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1284'. [ 187.316013][ T9948] netlink: 'syz.0.1284': attribute type 58 has an invalid length. [ 187.316031][ T9948] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1284'. [ 187.412029][ T9953] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1279'. [ 187.455012][ T9951] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1285'. [ 187.455052][ T9951] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1285'. [ 187.866290][ T9972] geneve2: entered promiscuous mode [ 187.866342][ T9972] geneve2: entered allmulticast mode [ 187.991786][ T9978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1295'. [ 188.066599][ T9982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1297'. [ 188.123493][ T9982] hsr_slave_0: left promiscuous mode [ 188.146301][ T9982] hsr_slave_1: left promiscuous mode [ 188.338385][ T9996] netlink: 'syz.1.1302': attribute type 1 has an invalid length. [ 188.488790][ T9996] 8021q: adding VLAN 0 to HW filter on device bond6 [ 188.544784][T10000] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 188.580468][T10002] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1304'. [ 188.608104][T10000] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1302'. [ 188.633456][T10003] bond6: entered promiscuous mode [ 188.633512][T10003] bond6: entered allmulticast mode [ 189.481110][T10038] netlink: 'syz.2.1317': attribute type 11 has an invalid length. [ 189.508416][T10039] openvswitch: netlink: IPv4 tunnel dst address is zero [ 189.508466][T10039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.800226][T10051] netlink: 'syz.0.1320': attribute type 4 has an invalid length. [ 189.803647][T10052] syzkaller0: entered promiscuous mode [ 189.803670][T10052] syzkaller0: entered allmulticast mode [ 190.231092][T10072] netlink: 'syz.3.1329': attribute type 1 has an invalid length. [ 190.337362][T10072] 8021q: adding VLAN 0 to HW filter on device bond8 [ 190.373742][T10081] bond7: (slave veth0_to_bond): Releasing active interface [ 190.384044][T10081] veth0_to_bond: left promiscuous mode [ 190.391156][T10081] veth0_to_bond: left allmulticast mode [ 190.445235][T10081] bond8: (slave veth0_to_bond): making interface the new active one [ 190.470688][T10081] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 190.517731][T10072] bond8: entered promiscuous mode [ 190.517781][T10072] veth0_to_bond: entered promiscuous mode [ 190.518014][T10072] bond8: entered allmulticast mode [ 190.518028][T10072] veth0_to_bond: entered allmulticast mode [ 190.677502][T10092] netlink: 'syz.0.1335': attribute type 4 has an invalid length. [ 191.574444][T10135] netlink: 'syz.1.1348': attribute type 4 has an invalid length. [ 191.759563][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 192.434006][T10157] netlink: 'syz.1.1356': attribute type 1 has an invalid length. [ 192.487048][T10157] 8021q: adding VLAN 0 to HW filter on device bond7 [ 192.524172][T10157] bond6: (slave veth0_to_bond): Releasing active interface [ 192.557678][T10157] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 192.608581][T10157] bond7: entered promiscuous mode [ 192.608639][T10157] bond7: entered allmulticast mode [ 192.707085][T10157] __nla_validate_parse: 10 callbacks suppressed [ 192.707149][T10157] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1356'. [ 192.742997][T10169] netlink: 'syz.0.1362': attribute type 4 has an invalid length. [ 192.751117][T10169] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1362'. [ 193.071717][T10184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1365'. [ 193.318413][T10190] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 193.318460][T10190] IPv6: NLM_F_CREATE should be set when creating new route [ 193.484967][T10198] netlink: 'syz.4.1371': attribute type 58 has an invalid length. [ 193.485009][T10198] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1371'. [ 193.577188][T10204] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1371'. [ 193.652615][T10214] netlink: 'syz.1.1373': attribute type 4 has an invalid length. [ 193.652747][T10214] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1373'. [ 193.744901][T10190] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.746644][T10190] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.185439][T10190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.211190][T10190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.334295][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.489469][ T6477] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.489533][ T6477] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.489571][ T6477] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.489594][ T6477] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.489624][ T6477] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.489647][ T6477] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.489677][ T6477] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.489700][ T6477] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.654872][T10239] netlink: 'syz.3.1377': attribute type 32 has an invalid length. [ 194.654923][T10239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1377'. [ 194.707979][T10239] bond9: option coupled_control: invalid value (76) [ 194.719822][T10239] bond9 (unregistering): Released all slaves [ 194.753074][T10246] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1377'. [ 194.753153][T10246] tipc: Invalid UDP bearer configuration [ 194.753197][T10246] tipc: Enabling of bearer rejected, failed to enable media [ 194.919013][T10253] netlink: 'syz.4.1385': attribute type 1 has an invalid length. [ 195.038081][T10253] 8021q: adding VLAN 0 to HW filter on device bond8 [ 195.040848][T10260] netlink: 'syz.0.1384': attribute type 4 has an invalid length. [ 195.040869][T10260] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1384'. [ 195.078941][T10257] bond7: (slave veth0_to_bond): Releasing active interface [ 195.078992][T10257] veth0_to_bond: left promiscuous mode [ 195.079200][T10257] veth0_to_bond: left allmulticast mode [ 195.095569][T10266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1383'. [ 195.095593][T10266] openvswitch: netlink: Flow key attr not present in new flow. [ 195.194467][T10257] bond8: (slave veth0_to_bond): making interface the new active one [ 195.214004][T10257] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 195.276036][T10253] bond8: entered promiscuous mode [ 195.284028][T10253] veth0_to_bond: entered promiscuous mode [ 195.285855][T10253] bond8: entered allmulticast mode [ 195.285880][T10253] veth0_to_bond: entered allmulticast mode [ 195.895472][T10296] gretap0: entered promiscuous mode [ 195.917083][T10296] 0ªî{X¹¦: renamed from gretap0 [ 195.968287][T10296] 0ªî{X¹¦: left promiscuous mode [ 195.968336][T10296] 0ªî{X¹¦: entered allmulticast mode [ 195.994355][T10296] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 196.287824][T10317] netlink: 'syz.3.1398': attribute type 4 has an invalid length. [ 196.474009][T10324] pim6reg: entered allmulticast mode [ 196.511801][T10324] pim6reg: left allmulticast mode [ 196.557768][T10333] netlink: zone id is out of range [ 196.568854][T10333] netlink: zone id is out of range [ 196.574153][T10333] netlink: zone id is out of range [ 196.579472][T10333] netlink: zone id is out of range [ 196.579488][T10333] netlink: zone id is out of range [ 196.579497][T10333] netlink: zone id is out of range [ 196.579505][T10333] netlink: zone id is out of range [ 196.579514][T10333] netlink: zone id is out of range [ 197.039591][T10351] netlink: 'syz.0.1413': attribute type 4 has an invalid length. [ 197.130287][T10354] netlink: 'syz.4.1414': attribute type 1 has an invalid length. [ 197.249512][T10354] 8021q: adding VLAN 0 to HW filter on device bond9 [ 197.268432][T10358] bond8: (slave veth0_to_bond): Releasing active interface [ 197.268718][T10358] veth0_to_bond: left promiscuous mode [ 197.268904][T10358] veth0_to_bond: left allmulticast mode [ 197.292073][T10358] bond9: (slave veth0_to_bond): making interface the new active one [ 197.302666][T10358] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 197.372405][T10362] bond9: entered promiscuous mode [ 197.372462][T10362] veth0_to_bond: entered promiscuous mode [ 197.382276][T10362] bond9: entered allmulticast mode [ 197.382299][T10362] veth0_to_bond: entered allmulticast mode [ 197.948591][T10375] __nla_validate_parse: 5 callbacks suppressed [ 197.948652][T10375] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1422'. [ 198.213646][T10391] validate_nla: 1 callbacks suppressed [ 198.213696][T10391] netlink: 'syz.2.1426': attribute type 4 has an invalid length. [ 198.213716][T10391] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1426'. [ 198.377252][T10397] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 199.215422][T10438] netlink: 'syz.1.1437': attribute type 1 has an invalid length. [ 199.393729][T10438] 8021q: adding VLAN 0 to HW filter on device bond8 [ 199.437170][T10440] bond7: (slave veth0_to_bond): Releasing active interface [ 199.517206][T10440] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 199.573692][T10441] bond8: entered promiscuous mode [ 199.573747][T10441] bond8: entered allmulticast mode [ 199.644112][T10455] netlink: 'syz.2.1442': attribute type 4 has an invalid length. [ 199.644168][T10455] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1442'. [ 199.890532][T10462] netlink: 'syz.1.1437': attribute type 17 has an invalid length. [ 200.452082][T10491] netlink: 'syz.1.1456': attribute type 4 has an invalid length. [ 200.462158][T10491] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1456'. [ 200.780573][T10498] vlan2: entered allmulticast mode [ 200.780622][T10498] bond0: entered allmulticast mode [ 200.780636][T10498] bond3: entered allmulticast mode [ 200.991984][T10507] xt_LOG: prefix is not null-terminated [ 201.119626][T10510] netlink: 'syz.1.1462': attribute type 1 has an invalid length. [ 201.147691][T10510] 8021q: adding VLAN 0 to HW filter on device bond9 [ 201.172500][T10510] bond8: (slave veth0_to_bond): Releasing active interface [ 201.197527][T10510] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 201.220037][T10510] bond9: entered promiscuous mode [ 201.220081][T10510] bond9: entered allmulticast mode [ 201.527695][ T5638] Bluetooth: hci3: command 0x0406 tx timeout [ 201.527754][ T5638] Bluetooth: hci2: command 0x0406 tx timeout [ 201.528554][ T5617] Bluetooth: hci1: command 0x0406 tx timeout [ 201.766108][T10530] netlink: 'syz.0.1467': attribute type 10 has an invalid length. [ 201.808588][T10530] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.848324][T10530] bond0: (slave team0): Enslaving as an active interface with an up link [ 202.031207][T10538] xt_hl: Unknown TTL match mode: 255 [ 202.072259][T10540] netlink: 'syz.3.1468': attribute type 4 has an invalid length. [ 202.072314][T10540] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1468'. [ 202.454572][T10561] : renamed from bond0 (while UP) [ 202.545238][T10564] netlink: 'syz.1.1481': attribute type 1 has an invalid length. [ 202.645927][T10572] netlink: 'syz.3.1483': attribute type 4 has an invalid length. [ 202.645978][T10572] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1483'. [ 202.657583][T10564] 8021q: adding VLAN 0 to HW filter on device bond10 [ 202.663318][T10567] ipvlan1: entered allmulticast mode [ 202.663342][T10567] veth0_vlan: entered allmulticast mode [ 202.698401][T10569] bond9: (slave veth0_to_bond): Releasing active interface [ 202.715452][T10575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1484'. [ 202.732785][T10569] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 202.743784][T10564] bond10: entered promiscuous mode [ 202.743860][T10564] bond10: entered allmulticast mode [ 203.442178][T10602] netlink: 'syz.4.1496': attribute type 4 has an invalid length. [ 203.450991][T10602] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1496'. [ 203.728116][T10623] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1504'. [ 203.990049][T10632] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1506'. [ 204.052882][T10635] netlink: 'syz.4.1508': attribute type 4 has an invalid length. [ 204.052925][T10635] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1508'. [ 204.118210][T10632] 8021q: adding VLAN 0 to HW filter on device bond9 [ 204.168261][T10632] macvlan2: entered promiscuous mode [ 204.173871][T10632] macvlan2: entered allmulticast mode [ 204.250896][T10632] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 204.286005][T10646] netlink: 'syz.1.1514': attribute type 1 has an invalid length. [ 204.348489][T10650] netlink: 'syz.4.1513': attribute type 2 has an invalid length. [ 204.489013][T10646] 8021q: adding VLAN 0 to HW filter on device bond11 [ 204.557402][T10651] bond10: (slave veth0_to_bond): Releasing active interface [ 204.652894][T10651] bond11: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 204.688045][T10653] bond11: entered promiscuous mode [ 204.688095][T10653] bond11: entered allmulticast mode [ 204.976904][T10667] bond8: option all_slaves_active: invalid value (222) [ 204.987592][T10667] bond8 (unregistering): Released all slaves [ 205.212910][T10677] netlink: 'syz.3.1523': attribute type 4 has an invalid length. [ 205.222314][T10677] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1523'. [ 205.447029][T10689] netlink: 'syz.0.1527': attribute type 1 has an invalid length. [ 205.447074][T10689] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1527'. [ 205.643405][T10695] netlink: 'syz.4.1529': attribute type 32 has an invalid length. [ 205.895491][T10712] netlink: 'syz.4.1536': attribute type 4 has an invalid length. [ 205.905985][T10712] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1536'. [ 206.045636][T10718] x_tables: duplicate underflow at hook 1 [ 206.254783][T10731] netlink: 'syz.2.1541': attribute type 1 has an invalid length. [ 206.291182][T10731] 8021q: adding VLAN 0 to HW filter on device bond8 [ 206.301904][T10731] bond7: (slave veth0_to_bond): Releasing active interface [ 206.336020][T10731] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 206.354619][T10731] bond8: entered promiscuous mode [ 206.354684][T10731] bond8: entered allmulticast mode [ 206.479428][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 206.757737][T10750] netlink: 'syz.1.1549': attribute type 4 has an invalid length. [ 206.757780][T10750] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1549'. [ 207.016695][T10759] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1552'. [ 207.308419][T10770] vlan0: entered promiscuous mode [ 207.715091][T10784] bridge_slave_1: entered promiscuous mode [ 207.715136][T10784] bridge_slave_1: entered allmulticast mode [ 207.735798][T10784] tipc: Enabling of bearer rejected, failed to enable media [ 207.787685][T10788] xt_TPROXY: Can be used only with -p tcp or -p udp [ 208.050163][T10805] net_ratelimit: 4 callbacks suppressed [ 208.050215][T10805] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 208.412763][T10819] 8021q: adding VLAN 0 to HW filter on device bond12 [ 208.442110][T10819] bond11: (slave veth0_to_bond): Releasing active interface [ 208.459152][T10819] bond12: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 208.491803][T10819] bond12: entered promiscuous mode [ 208.491853][T10819] bond12: entered allmulticast mode [ 208.706671][T10829] xt_TCPMSS: Only works on TCP SYN packets [ 208.750930][T10834] FAULT_INJECTION: forcing a failure. [ 208.750930][T10834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.774793][T10834] CPU: 1 UID: 0 PID: 10834 Comm: syz.3.1576 Not tainted syzkaller #0 PREEMPT(full) [ 208.774826][T10834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 208.774839][T10834] Call Trace: [ 208.774848][T10834] [ 208.774858][T10834] dump_stack_lvl+0xe8/0x150 [ 208.774894][T10834] should_fail_ex+0x410/0x560 [ 208.774933][T10834] _copy_from_user+0x2d/0xb0 [ 208.774957][T10834] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 208.775003][T10834] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 208.775034][T10834] ? rcu_is_watching+0x16/0xb0 [ 208.775060][T10834] ? trace_kmalloc+0x2a/0xf0 [ 208.775097][T10834] ip_generic_getfrag+0x149/0x2d0 [ 208.775123][T10834] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 208.775159][T10834] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 208.775184][T10834] ? raw6_getfrag+0x116/0x3a0 [ 208.775210][T10834] ? __alloc_skb+0x4d0/0x7a0 [ 208.775236][T10834] ? skb_put+0x112/0x210 [ 208.775260][T10834] __ip6_append_data+0x3b26/0x40c0 [ 208.775314][T10834] ? __pfx_raw6_getfrag+0x10/0x10 [ 208.775371][T10834] ? __pfx___ip6_append_data+0x10/0x10 [ 208.775405][T10834] ? ip6_setup_cork+0x547/0xf60 [ 208.775436][T10834] ? ip6_append_data+0x1a6/0x270 [ 208.775471][T10834] ip6_append_data+0x108/0x270 [ 208.775505][T10834] ? __pfx_raw6_getfrag+0x10/0x10 [ 208.775532][T10834] rawv6_sendmsg+0x1298/0x18c0 [ 208.775571][T10834] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 208.775619][T10834] ? __lock_acquire+0x6df/0x2e50 [ 208.775649][T10834] ? aa_sock_msg_perm+0xf5/0x210 [ 208.775671][T10834] ? sock_rps_record_flow+0x19/0x350 [ 208.775701][T10834] ? inet_sendmsg+0x298/0x320 [ 208.775724][T10834] ? apparmor_socket_sendmsg+0x98/0x360 [ 208.775767][T10834] ? __pfx_inet_sendmsg+0x10/0x10 [ 208.775793][T10834] sock_sendmsg_nosec+0x10e/0x180 [ 208.775825][T10834] ____sys_sendmsg+0x54e/0x850 [ 208.775855][T10834] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.775888][T10834] ? import_iovec+0x73/0xa0 [ 208.775916][T10834] ___sys_sendmsg+0x2a5/0x360 [ 208.775938][T10834] ? __lock_acquire+0x6df/0x2e50 [ 208.775963][T10834] ? __pfx____sys_sendmsg+0x10/0x10 [ 208.776022][T10834] ? __fget_files+0x2a/0x420 [ 208.776047][T10834] ? __fget_files+0x3a2/0x420 [ 208.776086][T10834] __x64_sys_sendmsg+0x1b1/0x290 [ 208.776113][T10834] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 208.776161][T10834] do_syscall_64+0x166/0x520 [ 208.776190][T10834] ? trace_irq_disable+0x3b/0x140 [ 208.776210][T10834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.776231][T10834] ? clear_bhb_loop+0x70/0xc0 [ 208.776263][T10834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.776284][T10834] RIP: 0033:0x7f14f4d9e159 [ 208.776305][T10834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.776323][T10834] RSP: 002b:00007f14f5c3d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.776347][T10834] RAX: ffffffffffffffda RBX: 00007f14f5025fa0 RCX: 00007f14f4d9e159 [ 208.776362][T10834] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 208.776375][T10834] RBP: 00007f14f5c3d090 R08: 0000000000000000 R09: 0000000000000000 [ 208.776388][T10834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.776401][T10834] R13: 00007f14f5026038 R14: 00007f14f5025fa0 R15: 00007ffd3cd24b08 [ 208.776436][T10834] [ 209.244819][T10846] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 209.319951][T10853] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1582'. [ 209.622095][T10870] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1584'. [ 209.686598][T10872] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1584'. [ 209.877870][T10887] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1594'. [ 210.053491][T10900] validate_nla: 2 callbacks suppressed [ 210.059318][T10900] netlink: 'syz.1.1597': attribute type 1 has an invalid length. [ 210.136398][T10900] 8021q: adding VLAN 0 to HW filter on device bond13 [ 210.152141][T10903] bond12: (slave veth0_to_bond): Releasing active interface [ 210.165383][T10903] bond13: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 210.177083][T10900] bond13: entered promiscuous mode [ 210.177129][T10900] bond13: entered allmulticast mode [ 210.539494][T10917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1603'. [ 210.549116][T10917] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1603'. [ 210.549395][T10917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1603'. [ 210.549417][T10917] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1603'. [ 210.623829][T10919] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1603'. [ 210.623870][T10919] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1603'. [ 210.688145][T10920] netlink: 'syz.2.1603': attribute type 5 has an invalid length. [ 211.073508][T10955] bridge3: entered promiscuous mode [ 211.073601][T10955] bridge3: entered allmulticast mode [ 213.688671][T10929] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 213.948213][T10982] netlink: 'syz.4.1620': attribute type 1 has an invalid length. [ 214.040947][T10982] 8021q: adding VLAN 0 to HW filter on device bond11 [ 214.105597][T10987] bond9: (slave veth0_to_bond): Releasing active interface [ 214.105653][T10987] veth0_to_bond: left promiscuous mode [ 214.105844][T10987] veth0_to_bond: left allmulticast mode [ 214.184982][T10987] bond11: (slave veth0_to_bond): making interface the new active one [ 214.200744][T10987] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 214.216938][T10982] bond11: entered promiscuous mode [ 214.216982][T10982] veth0_to_bond: entered promiscuous mode [ 214.217235][T10982] bond11: entered allmulticast mode [ 214.217255][T10982] veth0_to_bond: entered allmulticast mode [ 214.545627][T11006] __nla_validate_parse: 2 callbacks suppressed [ 214.545683][T11006] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1626'. [ 214.577446][T11007] macvlan3: entered promiscuous mode [ 214.583305][T11007] macvlan3: entered allmulticast mode [ 214.592406][T11007] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 214.606569][T11007] bond11: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 214.616669][T11013] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1628'. [ 214.708524][T11017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1629'. [ 214.718491][T11017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1629'. [ 214.904297][T11024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1633'. [ 214.904343][T11024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1633'. [ 214.904403][T11024] netlink: 'syz.0.1633': attribute type 3 has an invalid length. [ 215.106096][T11034] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1632'. [ 215.136441][ T8364] IPVS: starting estimator thread 0... [ 215.192035][T11048] ieee802154 phy1 wpan1: encryption failed: -22 [ 215.223092][T11036] IPVS: using max 29 ests per chain, 69600 per kthread [ 215.297450][T11054] netlink: 'syz.4.1640': attribute type 1 has an invalid length. [ 215.344936][T11056] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1641'. [ 215.346423][T11057] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1641'. [ 215.488042][T11068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1644'. [ 217.567380][T11009] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 217.832508][T11086] netlink: 'syz.4.1649': attribute type 1 has an invalid length. [ 217.898039][T11086] 8021q: adding VLAN 0 to HW filter on device bond12 [ 217.933286][T11095] bond11: (slave veth0_to_bond): Releasing active interface [ 217.941905][T11095] veth0_to_bond: left promiscuous mode [ 217.947723][T11095] veth0_to_bond: left allmulticast mode [ 217.965004][T11095] bond12: (slave veth0_to_bond): making interface the new active one [ 217.976034][T11095] bond12: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 218.020431][T11086] bond12: entered promiscuous mode [ 218.020475][T11086] veth0_to_bond: entered promiscuous mode [ 218.021339][T11086] bond12: entered allmulticast mode [ 218.021355][T11086] veth0_to_bond: entered allmulticast mode [ 218.476389][T11119] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 218.476445][T11119] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 218.792324][T11135] netlink: 'syz.4.1663': attribute type 4 has an invalid length. [ 218.916954][T11138] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 218.941741][T11139] netlink: 'syz.4.1665': attribute type 4 has an invalid length. [ 218.968648][T11147] xt_nat: multiple ranges no longer supported [ 219.123930][T11160] IPVS: set_ctl: invalid protocol: 47 172.30.1.5:20004 [ 219.292616][T11170] netlink: 'syz.4.1673': attribute type 1 has an invalid length. [ 219.317184][T11170] 8021q: adding VLAN 0 to HW filter on device bond13 [ 219.325364][T11170] bond12: (slave veth0_to_bond): Releasing active interface [ 219.325420][T11170] veth0_to_bond: left promiscuous mode [ 219.325592][T11170] veth0_to_bond: left allmulticast mode [ 219.338855][T11170] bond13: (slave veth0_to_bond): making interface the new active one [ 219.346025][T11170] bond13: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 219.363798][T11170] bond13: entered promiscuous mode [ 219.363827][T11170] veth0_to_bond: entered promiscuous mode [ 219.364517][T11170] bond13: entered allmulticast mode [ 219.364533][T11170] veth0_to_bond: entered allmulticast mode [ 219.504443][T11172] macvlan3: entered promiscuous mode [ 219.504482][T11172] macvlan3: entered allmulticast mode [ 219.507310][T11172] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 219.516697][T11172] bond13: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 221.668718][T11126] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 221.672521][T11147] __nla_validate_parse: 7 callbacks suppressed [ 221.672539][T11147] netlink: 198796 bytes leftover after parsing attributes in process `syz.1.1666'. [ 221.672554][T11147] netlink: 'syz.1.1666': attribute type 2 has an invalid length. [ 221.977891][T11186] x_tables: unsorted underflow at hook 4 [ 222.015632][T11187] dvmrp8: entered allmulticast mode [ 222.021259][T11185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1678'. [ 222.021282][T11185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1678'. [ 222.080408][ T8366] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x6c [ 222.097435][T11185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1678'. [ 222.449841][T11204] netlink: 'syz.0.1685': attribute type 1 has an invalid length. [ 222.620449][T11210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1686'. [ 222.629851][T11210] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1686'. [ 222.734015][T11204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.748520][T11205] bond3: (slave veth0_to_bond): Releasing active interface [ 222.748569][T11205] veth0_to_bond: left promiscuous mode [ 222.751067][T11205] veth0_to_bond: left allmulticast mode [ 222.791819][T11205] bond0: (slave veth0_to_bond): making interface the new active one [ 222.803476][T11205] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 222.815971][T11209] bond0: entered promiscuous mode [ 222.816018][T11209] veth0_to_bond: entered promiscuous mode [ 222.816218][T11209] bond0: entered allmulticast mode [ 222.816233][T11209] veth0_to_bond: entered allmulticast mode [ 223.012321][T11223] macvlan2: entered promiscuous mode [ 223.017833][T11223] macvlan2: entered allmulticast mode [ 223.025118][T11223] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 223.036859][T11223] bond0: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 224.961969][T11186] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 224.976742][T11231] netlink: 'syz.1.1688': attribute type 1 has an invalid length. [ 224.976782][T11231] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1688'. [ 224.995558][T11228] netlink: 'syz.1.1688': attribute type 2 has an invalid length. [ 225.187186][T11248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1692'. [ 225.187251][T11248] netlink: 'syz.3.1692': attribute type 10 has an invalid length. [ 225.187299][T11248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1692'. [ 225.267026][T11248] geneve4: entered promiscuous mode [ 225.273064][T11248] geneve4: entered allmulticast mode [ 225.550807][T11274] netlink: 'syz.3.1698': attribute type 4 has an invalid length. [ 225.559795][T11274] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1698'. [ 225.810407][ T59] IPVS: starting estimator thread 0... [ 225.812567][T11286] netlink: 'syz.3.1703': attribute type 1 has an invalid length. [ 225.899316][T11287] IPVS: using max 27 ests per chain, 64800 per kthread [ 226.473061][T11306] netlink: 'syz.1.1711': attribute type 4 has an invalid length. [ 226.504599][T11309] netlink: 'syz.3.1713': attribute type 10 has an invalid length. [ 226.763799][T11315] xt_CT: No such helper "snmp_trap" [ 227.132479][T11337] __nla_validate_parse: 7 callbacks suppressed [ 227.133968][T11336] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1723'. [ 227.134127][T11337] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1723'. [ 227.214090][T11340] netlink: 'syz.4.1726': attribute type 4 has an invalid length. [ 227.214141][T11340] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1726'. [ 227.221321][T11340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1726'. [ 227.419301][T11349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1728'. [ 227.676732][T11349] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 227.682539][T11349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1728'. [ 227.814242][T11357] openvswitch: netlink: Duplicate or invalid key (type 0). [ 228.200957][T11379] netlink: 'syz.4.1739': attribute type 4 has an invalid length. [ 228.201008][T11379] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1739'. [ 228.221656][T11378] netlink: 'syz.2.1738': attribute type 4 has an invalid length. [ 228.221712][T11378] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1738'. [ 228.227342][T11378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1738'. [ 228.262893][T11382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1739'. [ 228.634126][T11405] netlink: 'syz.3.1741': attribute type 1 has an invalid length. [ 228.713735][T11405] pimreg: entered allmulticast mode [ 228.866589][T11389] pimreg3: entered allmulticast mode [ 229.196652][T11431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.216221][T11431] veth1_macvtap: entered promiscuous mode [ 229.221526][T11431] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 229.370035][T11431] 8021q: adding VLAN 0 to HW filter on device bond2 [ 229.396425][T11431] 8021q: adding VLAN 0 to HW filter on device bond3 [ 229.420808][T11431] 8021q: adding VLAN 0 to HW filter on device bond4 [ 229.425989][T11431] 8021q: adding VLAN 0 to HW filter on device bond5 [ 229.435253][T11431] 8021q: adding VLAN 0 to HW filter on device bond6 [ 229.443421][T11431] 8021q: adding VLAN 0 to HW filter on device bond7 [ 229.497369][T11431] 8021q: adding VLAN 0 to HW filter on device bond8 [ 229.513525][T11431] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 229.822477][T11447] netlink: 'syz.4.1757': attribute type 4 has an invalid length. [ 230.213679][T11467] tipc: Failed to remove unknown binding: 66,0,0/134418688:1935195691/1935195693 [ 230.226810][T11467] tipc: Failed to remove unknown binding: 66,0,0/134418688:1935195691/1935195692 [ 230.244229][T11467] tipc: Failed to remove unknown binding: 66,0,0/134418688:1935195691/1935195693 [ 230.244283][T11467] tipc: Failed to remove unknown binding: 66,0,0/134418688:1935195691/1935195692 [ 230.350504][T11473] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 230.650225][T11487] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.468237][T11572] netlink: 'syz.4.1793': attribute type 2 has an invalid length. [ 232.468291][T11572] __nla_validate_parse: 52 callbacks suppressed [ 232.468333][T11572] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1793'. [ 232.473417][T11574] netlink: 'syz.4.1793': attribute type 2 has an invalid length. [ 232.473438][T11574] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1793'. [ 232.601935][T11572] : entered promiscuous mode [ 232.725313][T11572] ipvlan0: entered allmulticast mode [ 232.732202][T11572] virt_wifi0: entered allmulticast mode [ 232.800036][T11579] pim6reg: entered allmulticast mode [ 232.878604][T11580] pim6reg: left allmulticast mode [ 233.396037][T11611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1804'. [ 234.161720][T11646] batadv0: entered promiscuous mode [ 234.171774][T11646] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 234.192911][T11646] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 234.238122][T11646] batadv0: left promiscuous mode [ 234.275985][T11649] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1813'. [ 234.348001][T11649] 0·: renamed from hsr0 (while UP) [ 234.359801][T11649] 0·: entered allmulticast mode [ 234.366623][T11649] hsr_slave_0: entered allmulticast mode [ 234.379517][T11649] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 234.639487][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 234.710314][T11669] ip6t_REJECT: ECHOREPLY is not supported [ 234.914719][T11675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1822'. [ 234.917299][T11675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1822'. [ 235.207582][T11689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1829'. [ 235.217961][T11690] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1828'. [ 235.724833][T11710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1834'. [ 235.737401][T11711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1834'. [ 235.872803][T11709] tipc: Resetting bearer [ 236.335499][T11726] netlink: 'syz.4.1840': attribute type 1 has an invalid length. [ 236.613200][T11749] IPVS: length: 8 != 1152 [ 237.073259][T11775] tipc: Started in network mode [ 237.073333][T11775] tipc: Node identity ac1414aa, cluster identity 4711 [ 237.073595][T11775] tipc: New replicast peer: 172.20.20.187 [ 237.080487][T11775] tipc: Enabled bearer , priority 10 [ 237.490440][T11794] __nla_validate_parse: 5 callbacks suppressed [ 237.490494][T11794] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1858'. [ 237.889460][T11799] batman_adv: batadv0: Adding interface: veth0 [ 237.889497][T11799] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.889551][T11799] batman_adv: batadv0: Interface activated: veth0 [ 237.892820][T11801] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1860'. [ 237.892842][T11801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.926587][T11801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.928354][T11806] syz.1.1861: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 237.928458][T11806] CPU: 1 UID: 0 PID: 11806 Comm: syz.1.1861 Not tainted syzkaller #0 PREEMPT(full) [ 237.928480][T11806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 237.928492][T11806] Call Trace: [ 237.928499][T11806] [ 237.928508][T11806] dump_stack_lvl+0xe8/0x150 [ 237.928543][T11806] warn_alloc+0x24d/0x270 [ 237.928571][T11806] ? kasan_save_track+0x4f/0x80 [ 237.928589][T11806] ? kasan_save_track+0x3e/0x80 [ 237.928609][T11806] ? __pfx_warn_alloc+0x10/0x10 [ 237.928633][T11806] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 237.928653][T11806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.928691][T11806] __vmalloc_node_range_noprof+0x127/0x1540 [ 237.928740][T11806] ? rcu_is_watching+0x16/0xb0 [ 237.928767][T11806] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 237.928793][T11806] ? __kmalloc_cache_noprof+0x321/0x600 [ 237.928820][T11806] ? __kmalloc_cache_noprof+0x14d/0x600 [ 237.928847][T11806] ? xskq_create+0x56/0x220 [ 237.928876][T11806] xskq_create+0x148/0x220 [ 237.928900][T11806] ? xsk_init_queue+0x8a/0xe0 [ 237.928927][T11806] xsk_init_queue+0x8a/0xe0 [ 237.928957][T11806] xsk_setsockopt+0x52a/0x960 [ 237.928983][T11806] ? __pfx_xsk_setsockopt+0x10/0x10 [ 237.929007][T11806] ? __pfx_aa_sk_perm+0x10/0x10 [ 237.929036][T11806] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 237.929060][T11806] ? __pfx_xsk_setsockopt+0x10/0x10 [ 237.929085][T11806] do_sock_setsockopt+0x17c/0x1b0 [ 237.929109][T11806] __x64_sys_setsockopt+0x13d/0x1b0 [ 237.929134][T11806] do_syscall_64+0x166/0x520 [ 237.929160][T11806] ? trace_irq_disable+0x3b/0x140 [ 237.929178][T11806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.929196][T11806] ? clear_bhb_loop+0x70/0xc0 [ 237.929229][T11806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.929248][T11806] RIP: 0033:0x7f240a19e159 [ 237.929266][T11806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.929282][T11806] RSP: 002b:00007f24083f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 237.929302][T11806] RAX: ffffffffffffffda RBX: 00007f240a425fa0 RCX: 00007f240a19e159 [ 237.929316][T11806] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 237.929328][T11806] RBP: 00007f240a235024 R08: 0000000000000004 R09: 0000000000000000 [ 237.929340][T11806] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.929353][T11806] R13: 00007f240a426038 R14: 00007f240a425fa0 R15: 00007fff95e4d2c8 [ 237.929385][T11806] [ 237.946007][T11806] Mem-Info: [ 237.947489][T11806] active_anon:5834 inactive_anon:0 isolated_anon:0 [ 237.947489][T11806] active_file:0 inactive_file:43836 isolated_file:0 [ 237.947489][T11806] unevictable:0 dirty:71 writeback:0 [ 237.947489][T11806] slab_reclaimable:11067 slab_unreclaimable:100123 [ 237.947489][T11806] mapped:29558 shmem:520 pagetables:1220 [ 237.947489][T11806] sec_pagetables:0 bounce:0 [ 237.947489][T11806] kernel_misc_reclaimable:0 [ 237.947489][T11806] free:1326816 free_pcp:10695 free_cma:0 [ 237.947566][T11806] Node 0 active_anon:23336kB inactive_anon:0kB active_file:0kB inactive_file:175136kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118232kB dirty:280kB writeback:0kB shmem:2080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14432kB pagetables:4764kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 237.947625][T11806] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 237.947679][T11806] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 237.947742][T11806] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 237.947783][T11806] Node 0 DMA32 free:1350184kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23336kB inactive_anon:0kB active_file:0kB inactive_file:175136kB unevictable:0kB writepending:280kB zspages:0kB present:3129332kB managed:2546704kB mlocked:0kB bounce:0kB free_pcp:41760kB local_pcp:21076kB free_cma:0kB [ 237.947845][T11806] lowmem_reserve[]: 0 0 0 0 0 [ 237.947883][T11806] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 237.947940][T11806] lowmem_reserve[]: 0 0 0 0 0 [ 237.947978][T11806] Node 1 Normal free:3941720kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:1004kB local_pcp:1004kB free_cma:0kB [ 237.948040][T11806] lowmem_reserve[]: 0 0 0 0 0 [ 237.948078][T11806] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 237.948213][T11806] Node 0 DMA32: 560*4kB (UM) 561*8kB (UM) 332*16kB (UM) 220*32kB (UME) 13*64kB (UE) 37*128kB (UM) 14*256kB (UME) 6*512kB (UME) 8*1024kB (UME) 8*2048kB (UME) 316*4096kB (M) = 1350216kB [ 237.948388][T11806] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 237.948495][T11806] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 2*16kB (UM) 1*32kB (M) 2*64kB (UM) 1*128kB (M) 4*256kB (UM) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 961*4096kB (UM) = 3941720kB [ 237.948668][T11806] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 237.948685][T11806] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 237.948702][T11806] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 237.948718][T11806] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 237.948736][T11806] 44352 total pagecache pages [ 237.948745][T11806] 0 pages in swap cache [ 237.948752][T11806] Free swap = 124996kB [ 237.948761][T11806] Total swap = 124996kB [ 237.948770][T11806] 2097051 pages RAM [ 237.948778][T11806] 0 pages HighMem/MovableOnly [ 237.948786][T11806] 428759 pages reserved [ 237.948794][T11806] 0 pages cma reserved [ 237.963805][T11801] batman_adv: batadv0: Removing interface: gretap1 [ 237.991077][T11801] batman_adv: batadv0: Interface deactivated: veth0 [ 237.991101][T11801] batman_adv: batadv0: Removing interface: veth0 [ 238.079788][ T6363] tipc: Node number set to 2886997162 [ 238.099178][T11811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1863'. [ 238.976213][T11823] mac80211_hwsim hwsim10 syzkaller0: Caught tx_queue_len zero misconfig [ 239.417843][T11843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1873'. [ 239.472425][T11834] bond4: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 239.506437][T11834] bond4 (unregistering): Released all slaves [ 239.736027][T11857] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1877'. [ 239.757494][T11857] netlink: 'syz.4.1877': attribute type 1 has an invalid length. [ 240.038871][T11855] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1877'. [ 240.058573][T11880] Bluetooth: hci0: unsupported parameter 5135 [ 240.058632][T11880] Bluetooth: hci0: unsupported parameter 8192 [ 240.059090][T11880] Bluetooth: hci0: unsupported parameter 5135 [ 240.059114][T11880] Bluetooth: hci0: unsupported parameter 8192 [ 240.265242][T11867] 8021q: adding VLAN 0 to HW filter on device bond15 [ 240.338886][T11867] bond14: (slave bond15): making interface the new active one [ 240.349709][T11867] bond14: (slave bond15): Enslaving as an active interface with an up link [ 240.405543][T11876] bond14: (slave gretap1): Enslaving as a backup interface with an up link [ 240.418417][T11868] syzkaller0: entered promiscuous mode [ 240.418481][T11868] syzkaller0: entered allmulticast mode [ 240.455384][T11855] 8021q: adding VLAN 0 to HW filter on device bond14 [ 240.489664][T11893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1886'. [ 240.915370][T11909] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1888'. [ 240.947145][T11915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1890'. [ 241.611730][T11941] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1900'. [ 241.623657][T11940] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 241.759986][T11953] ip6gre0: Master is either lo or non-ether device [ 242.769387][T11992] __nla_validate_parse: 1 callbacks suppressed [ 242.769438][T11992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1914'. [ 243.078467][T12014] x_tables: unsorted entry at hook 2 [ 243.196447][T12025] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 243.201361][T12025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.219852][T12019] veth0: entered promiscuous mode [ 243.975949][T12018] veth0: left promiscuous mode [ 245.738412][T11994] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 246.042386][T12044] netlink: 'syz.0.1922': attribute type 1 has an invalid length. [ 246.151219][T12044] 8021q: adding VLAN 0 to HW filter on device bond4 [ 246.172303][T12045] netlink: 'syz.3.1926': attribute type 3 has an invalid length. [ 246.195812][T12048] bond0: (slave veth0_to_bond): Releasing active interface [ 246.203821][T12048] veth0_to_bond: left promiscuous mode [ 246.210219][T12048] veth0_to_bond: left allmulticast mode [ 246.239733][T12048] bond4: (slave veth0_to_bond): making interface the new active one [ 246.252517][T12048] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 246.321594][T12044] bond4: entered promiscuous mode [ 246.321639][T12044] veth0_to_bond: entered promiscuous mode [ 246.321869][T12044] bond4: entered allmulticast mode [ 246.321890][T12044] veth0_to_bond: entered allmulticast mode [ 246.430786][T12055] dvmrp8: entered allmulticast mode [ 246.438413][T12062] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1930'. [ 246.444001][T12052] dvmrp8: left allmulticast mode [ 247.038660][T12088] x_tables: duplicate underflow at hook 1 [ 247.466194][T12109] tipc: New replicast peer: 172.20.20.187 [ 247.472920][T12109] tipc: Enabled bearer , priority 10 [ 247.794679][T12115] netlink: 'syz.3.1940': attribute type 1 has an invalid length. [ 247.982487][T12122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1943'. [ 248.008717][T12122] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1943'. [ 248.030288][T12115] bond10: entered promiscuous mode [ 248.037451][T12115] 8021q: adding VLAN 0 to HW filter on device bond10 [ 248.203406][T12133] netlink: 'syz.4.1946': attribute type 1 has an invalid length. [ 248.361335][T12133] 8021q: adding VLAN 0 to HW filter on device bond16 [ 248.385674][T12136] bond13: (slave veth0_to_bond): Releasing active interface [ 248.393531][T12136] veth0_to_bond: left promiscuous mode [ 248.400135][T12136] veth0_to_bond: left allmulticast mode [ 248.421836][T12136] bond16: (slave veth0_to_bond): making interface the new active one [ 248.436529][T12136] bond16: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 248.481881][T12146] bond16: entered promiscuous mode [ 248.481961][T12146] veth0_to_bond: entered promiscuous mode [ 248.482166][T12146] bond16: entered allmulticast mode [ 248.482180][T12146] veth0_to_bond: entered allmulticast mode [ 248.933066][T12165] netlink: 'syz.0.1952': attribute type 1 has an invalid length. [ 248.938265][T12167] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1953'. [ 249.019961][T12169] netlink: 1204 bytes leftover after parsing attributes in process `syz.3.1954'. [ 249.031869][T12171] netlink: 'syz.0.1952': attribute type 1 has an invalid length. [ 249.501834][T12188] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1960'. [ 249.516379][T12188] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 249.532022][T12191] netlink: 'syz.1.1962': attribute type 10 has an invalid length. [ 249.579146][T12191] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1962'. [ 249.629879][T12195] syzkaller1: entered promiscuous mode [ 249.629922][T12195] syzkaller1: entered allmulticast mode [ 249.847193][T12203] ip6gre0: Master is either lo or non-ether device [ 250.223088][T12215] netlink: 'syz.4.1970': attribute type 1 has an invalid length. [ 250.258549][T12219] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1973'. [ 250.268018][T12219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1973'. [ 250.378016][T12215] 8021q: adding VLAN 0 to HW filter on device bond17 [ 250.452350][T12223] bond16: (slave veth0_to_bond): Releasing active interface [ 250.452407][T12223] veth0_to_bond: left promiscuous mode [ 250.457471][T12223] veth0_to_bond: left allmulticast mode [ 250.513206][T12234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1976'. [ 250.543507][T12223] bond17: (slave veth0_to_bond): making interface the new active one [ 250.564515][T12223] bond17: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 250.626239][T12227] bond17: entered promiscuous mode [ 250.626296][T12227] veth0_to_bond: entered promiscuous mode [ 250.626506][T12227] bond17: entered allmulticast mode [ 250.626520][T12227] veth0_to_bond: entered allmulticast mode [ 250.641761][T12231] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 250.641788][T12231] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 250.834662][T12238] macvlan0: entered promiscuous mode [ 250.834709][T12238] macvlan0: entered allmulticast mode [ 250.849030][T12238] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 250.872800][T12238] bond17: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 250.980936][T12237] IPVS: set_ctl: invalid protocol: 51 172.20.20.40:20003 [ 251.064528][T12246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1980'. [ 251.099732][T12246] netlink: 'syz.2.1980': attribute type 21 has an invalid length. [ 251.596702][T12272] netlink: 'syz.4.1987': attribute type 1 has an invalid length. [ 251.596749][T12272] netlink: 'syz.4.1987': attribute type 1 has an invalid length. [ 251.828807][T12281] sctp: [Deprecated]: syz.2.1990 (pid 12281) Use of int in max_burst socket option deprecated. [ 251.828807][T12281] Use struct sctp_assoc_value instead [ 251.850727][T12282] sctp: [Deprecated]: syz.2.1990 (pid 12282) Use of int in max_burst socket option deprecated. [ 251.850727][T12282] Use struct sctp_assoc_value instead [ 251.904111][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803675a800: rx timeout, send abort [ 251.924020][T12285] xt_hashlimit: size too large, truncated to 1048576 [ 251.951028][T12282] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.404316][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803675a800: abort rx timeout. Force session deactivation [ 252.515585][T12298] xt_CT: No such helper "pptp" [ 252.516165][T12295] batadv_slave_0: left promiscuous mode [ 252.524178][T12295] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 252.566851][T12303] netlink: 'syz.0.1995': attribute type 1 has an invalid length. [ 252.601849][ T31] audit: type=1804 audit(1788592653.310:6): pid=12301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1994" name="/newroot/393/cgroup.controllers" dev="tmpfs" ino=2010 res=1 errno=0 [ 252.624681][ T31] audit: type=1800 audit(1788592653.310:7): pid=12301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1994" name="cgroup.controllers" dev="tmpfs" ino=2010 res=0 errno=0 [ 252.631109][T12303] 8021q: adding VLAN 0 to HW filter on device bond5 [ 252.662742][T12303] bond4: (slave veth0_to_bond): Releasing active interface [ 252.662799][T12303] veth0_to_bond: left promiscuous mode [ 252.662981][T12303] veth0_to_bond: left allmulticast mode [ 252.703796][T12303] bond5: (slave veth0_to_bond): making interface the new active one [ 252.718781][T12303] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 252.728451][T12305] bond5: entered promiscuous mode [ 252.728476][T12305] veth0_to_bond: entered promiscuous mode [ 252.728855][T12305] bond5: entered allmulticast mode [ 252.728871][T12305] veth0_to_bond: entered allmulticast mode [ 253.371472][T12315] __nla_validate_parse: 4 callbacks suppressed [ 253.371520][T12315] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1999'. [ 253.387795][T12317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1999'. [ 253.437006][T12320] netlink: 'syz.3.2001': attribute type 1 has an invalid length. [ 253.633165][T12321] bond11: (slave geneve4): making interface the new active one [ 253.647199][T12321] bond11: (slave geneve4): Enslaving as an active interface with an up link [ 253.800518][ T8364] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 253.802218][ T60] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 253.802400][ T60] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 253.802445][ T60] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 253.953757][T12329] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2003'. [ 253.962392][T12345] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2007'. [ 254.187234][T12352] ipt_REJECT: TCP_RESET invalid for non-tcp [ 254.205625][T12355] ipt_REJECT: TCP_RESET invalid for non-tcp [ 254.453080][T12367] vti0: entered promiscuous mode [ 254.790505][T12382] netlink: 'syz.1.2014': attribute type 1 has an invalid length. [ 254.835286][T12382] 8021q: adding VLAN 0 to HW filter on device bond14 [ 254.855920][T12382] bond13: (slave veth0_to_bond): Releasing active interface [ 254.872104][T12382] bond14: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 254.885162][T12382] bond14: entered promiscuous mode [ 254.885204][T12382] bond14: entered allmulticast mode [ 255.115631][T12388] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2017'. [ 255.608068][T12405] netlink: 'syz.1.2022': attribute type 39 has an invalid length. [ 255.656215][T12398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2020'. [ 255.828169][T12407] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2023'. [ 255.830344][T12407] netlink: 'syz.4.2023': attribute type 1 has an invalid length. [ 255.857835][T12407] 8021q: adding VLAN 0 to HW filter on device bond18 [ 255.885935][T12407] bond18: (slave geneve3): making interface the new active one [ 255.893755][T12407] bond18: (slave geneve3): Enslaving as an active interface with an up link [ 256.892913][T12340] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 257.375298][T12435] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2029'. [ 257.798494][T12449] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2032'. [ 257.805240][T12450] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2032'. [ 257.868975][T12449] block nbd0: not configured, cannot reconfigure [ 257.881258][T12450] block nbd0: not configured, cannot reconfigure [ 258.477987][T12480] netlink: 'syz.2.2040': attribute type 1 has an invalid length. [ 258.598985][T12486] xt_TPROXY: Can be used only with -p tcp or -p udp [ 258.712228][ T5280] veth0_vlan: left promiscuous mode [ 258.792904][ T5790] veth0_vlan: entered promiscuous mode [ 258.943038][T12499] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 259.025317][T12502] veth1_macvtap: left promiscuous mode [ 261.153675][T12464] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 261.501295][T12524] __nla_validate_parse: 4 callbacks suppressed [ 261.501347][T12524] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2051'. [ 261.711002][T12529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2051'. [ 262.158236][T12549] syzkaller1: entered promiscuous mode [ 262.158289][T12549] syzkaller1: entered allmulticast mode [ 262.313576][T12553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2058'. [ 262.719727][T12574] vxcan0: tx address claim with dest, not broadcast [ 263.832982][T12574] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2061'. [ 263.847348][T12574] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2061'. [ 265.642694][T12575] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 265.798546][T12648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2074'. [ 265.798598][T12648] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 265.798844][T12648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2074'. [ 265.798865][T12648] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 265.799077][T12648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2074'. [ 265.799100][T12648] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 265.864046][T12648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2074'. [ 265.864096][T12648] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 265.864361][T12648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2074'. [ 265.864383][T12648] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 265.864626][T12648] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 265.864855][T12648] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 265.865083][T12648] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 265.865310][T12648] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 265.931798][T12648] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 265.971680][T12653] x_tables: duplicate underflow at hook 2 [ 266.401139][T12673] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 266.401242][T12673] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 266.704461][T12686] geneve4: entered promiscuous mode [ 266.712518][T12686] geneve4: entered allmulticast mode [ 266.739775][ T6475] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 266.739962][ T6475] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 266.740007][ T6475] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 266.740038][ T6475] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 266.860647][T12690] syzkaller0: entered promiscuous mode [ 266.866274][T12690] syzkaller0: entered allmulticast mode [ 266.937502][T12693] __nla_validate_parse: 33 callbacks suppressed [ 266.944086][T12693] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2087'. [ 267.263747][ T8367] IPVS: starting estimator thread 0... [ 267.349431][T12712] IPVS: using max 32 ests per chain, 76800 per kthread [ 267.638999][T12732] netlink: 193 bytes leftover after parsing attributes in process `syz.0.2096'. [ 267.835448][T12742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2098'. [ 268.251251][T12742] 8021q: adding VLAN 0 to HW filter on device bond9 [ 268.278883][T12742] bond0: (slave bond9): Enslaving as an active interface with an up link [ 269.316447][T12794] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2108'. [ 269.558736][T12801] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2109'. [ 269.756480][T12817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2113'. [ 270.526957][T12842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2123'. [ 270.527013][T12842] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2123'. [ 270.560777][T12847] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2123'. [ 270.560829][T12847] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2123'. [ 270.605459][T12851] netlink: 'syz.3.2124': attribute type 5 has an invalid length. [ 271.146741][T12871] netlink: 'syz.2.2131': attribute type 10 has an invalid length. [ 271.193199][T12871] team0: Port device dummy0 added [ 271.531701][T12891] erspan1: entered allmulticast mode [ 271.911415][T12897] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 271.926627][T12897] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 271.934513][T12897] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 271.947183][T12906] __nla_validate_parse: 4 callbacks suppressed [ 271.947230][T12906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2140'. [ 271.958155][T12906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2140'. [ 271.958181][T12906] block nbd1: Unsupported socket: should be TCP or UNIX. [ 271.960060][T12906] netlink: 1204 bytes leftover after parsing attributes in process `syz.4.2140'. [ 271.989872][T12897] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 272.001553][T12897] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 272.002108][T12911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2140'. [ 272.007293][T12911] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2140'. [ 272.007317][T12911] block nbd1: Unsupported socket: should be TCP or UNIX. [ 272.011875][T12897] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 272.012260][T12897] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 272.012827][T12897] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 272.013616][T12897] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 272.014788][T12897] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 272.021886][T12897] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 272.022253][T12897] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 272.022840][T12897] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 272.024164][T12897] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 272.026392][T12914] netlink: 1204 bytes leftover after parsing attributes in process `syz.4.2140'. [ 272.026538][T12897] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 272.028328][T12897] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 272.029126][T12897] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 272.030734][T12897] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 272.031649][T12897] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 272.033051][T12897] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 272.034199][T12897] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 272.035772][T12897] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 272.036007][T12897] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 272.036281][T12897] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 272.036618][T12897] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 272.036829][T12897] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 272.037033][T12897] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 272.038426][T12897] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 272.038673][T12897] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 272.038882][T12897] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 272.039096][T12897] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 272.042851][T12897] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 272.047205][T12897] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 272.280103][T12923] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2145'. [ 272.295845][T12925] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2145'. [ 272.613547][T12934] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2147'. [ 273.355400][T12962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2152'. [ 273.420128][T12966] net_ratelimit: 23 callbacks suppressed [ 273.420189][T12966] openvswitch: netlink: Multiple metadata blocks provided [ 273.913277][T12983] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 274.143274][T12991] netlink: 'syz.3.2159': attribute type 2 has an invalid length. [ 274.143323][T12991] netlink: 'syz.3.2159': attribute type 1 has an invalid length. [ 274.964639][T13022] xt_limit: Overflow, try lower: 536871034/0 [ 277.082801][T13122] __nla_validate_parse: 7 callbacks suppressed [ 277.083147][T13122] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2186'. [ 277.115355][T13122] smc: adding net device ip6gretap0 with user defined pnetid SYZ0 [ 277.285752][T13129] netlink: 'syz.4.2188': attribute type 1 has an invalid length. [ 277.730789][T13154] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2192'. [ 277.875765][T13162] netlink: 'syz.4.2194': attribute type 29 has an invalid length. [ 277.886014][T13162] netlink: 'syz.4.2194': attribute type 29 has an invalid length. [ 277.902422][T13162] netlink: 'syz.4.2194': attribute type 29 has an invalid length. [ 277.947641][T13159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2193'. [ 278.387976][T13178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2198'. [ 278.528788][T13187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2198'. [ 278.563022][T13187] netlink: 'syz.3.2198': attribute type 1 has an invalid length. [ 278.563076][T13187] netlink: 'syz.3.2198': attribute type 2 has an invalid length. [ 278.807539][T13156] syzkaller1: entered promiscuous mode [ 278.807613][T13156] syzkaller1: entered allmulticast mode [ 278.841115][T13203] netlink: 'syz.1.2202': attribute type 10 has an invalid length. [ 278.843579][T13204] netlink: 'syz.1.2202': attribute type 7 has an invalid length. [ 278.946756][T13203] bond14: (slave veth0_to_bond): Releasing active interface [ 278.978629][T13203] veth0_to_bond: entered allmulticast mode [ 278.983703][T13203] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 279.317549][T13216] netlink: 'syz.2.2206': attribute type 1 has an invalid length. [ 279.435637][T13232] netlink: 'syz.3.2209': attribute type 1 has an invalid length. [ 279.446493][T13233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2210'. [ 279.468104][T13233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2210'. [ 279.468156][T13233] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2210'. [ 279.561083][T13216] bond11: entered promiscuous mode [ 279.563099][T13216] 8021q: adding VLAN 0 to HW filter on device bond11 [ 279.626941][T13239] netlink: Conntrack attr type has unexpected length (type=0, length=5, expected=0) [ 279.636709][T13239] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.658639][T13219] 8021q: adding VLAN 0 to HW filter on device bond11 [ 279.670116][T13219] bond11: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 279.680840][T13219] bond11: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 279.694467][T13219] bond11: (slave ip6gre1): making interface the new active one [ 279.702291][T13219] ip6gre1: entered promiscuous mode [ 279.709766][T13219] bond11: (slave ip6gre1): Enslaving as an active interface with an up link [ 279.823733][T13232] bond14: entered promiscuous mode [ 279.831339][T13232] 8021q: adding VLAN 0 to HW filter on device bond14 [ 279.926108][T13237] 8021q: adding VLAN 0 to HW filter on device bond14 [ 279.929976][T13237] bond14: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 279.930001][T13237] bond14: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 279.955738][T13237] bond14: (slave ip6gre1): making interface the new active one [ 279.955789][T13237] ip6gre1: entered promiscuous mode [ 279.974995][T13237] bond14: (slave ip6gre1): Enslaving as an active interface with an up link [ 280.169280][T13252] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2217'. [ 280.225496][T13257] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2216'. [ 283.205634][T13261] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 283.214914][T13268] validate_nla: 1 callbacks suppressed [ 283.215381][T13268] netlink: 'syz.2.2216': attribute type 3 has an invalid length. [ 283.215405][T13268] __nla_validate_parse: 1 callbacks suppressed [ 283.215438][T13268] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2216'. [ 283.505853][T13296] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2225'. [ 283.645778][T13298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2226'. [ 283.724782][T13299] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 283.822967][T13301] wg1: left allmulticast mode [ 283.902743][T13301] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 283.944066][T13319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2231'. [ 284.209975][T13316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2227'. [ 284.316521][T13320] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2231'. [ 284.643728][T13340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2235'. [ 284.662692][T13340] SET target dimension over the limit! [ 284.930308][T13355] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2240'. [ 285.019073][T13368] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2240'. [ 285.036429][T13358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2241'. [ 285.162187][T13375] netlink: 'syz.0.2242': attribute type 12 has an invalid length. [ 285.172183][T13375] netlink: 'syz.0.2242': attribute type 29 has an invalid length. [ 285.172234][T13375] netlink: 'syz.0.2242': attribute type 2 has an invalid length. [ 285.740457][T13382] openvswitch: netlink: Flow actions attr not present in new flow. [ 285.949061][T13391] lo: entered promiscuous mode [ 285.950091][T13391] netlink: 'syz.1.2245': attribute type 2 has an invalid length. [ 285.950110][T13391] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 286.104125][T13399] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 286.109152][T13400] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 287.713080][T13348] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 288.237650][T13449] __nla_validate_parse: 4 callbacks suppressed [ 288.237704][T13449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2265'. [ 288.312394][T13459] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2270'. [ 288.543718][T13460] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 288.715220][T13475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2274'. [ 288.764106][T13480] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2275'. [ 288.765095][T13480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2275'. [ 288.765537][T13480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2275'. [ 288.879990][T13484] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2272'. [ 289.590591][ T43] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 289.598649][ T43] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 289.620391][ T5790] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 289.667127][T13511] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2281'. [ 289.956501][T13527] netlink: 8928 bytes leftover after parsing attributes in process `syz.3.2285'. [ 290.105644][T13532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2287'. [ 290.117937][T13533] netlink: 'syz.3.2287': attribute type 2 has an invalid length. [ 290.420266][T13544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.480540][ T5790] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 290.500206][T13544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.566642][T13546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.641643][ T5790] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 290.807769][T13561] bridge0: port 1(1¾x9ÿ) entered disabled state [ 290.834774][T13561] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.883277][T13564] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.915217][T13561] netlink: 'syz.4.2293': attribute type 16 has an invalid length. [ 290.915293][T13561] netlink: 'syz.4.2293': attribute type 17 has an invalid length. [ 291.114124][T13583] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 291.291857][T13561] wg1: left promiscuous mode [ 291.327010][T13592] IPVS: set_ctl: invalid protocol: 29 172.20.20.170:20004 [ 291.392204][T13561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.425033][T13561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.540749][T13561] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 291.599466][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 291.675110][T13561] gre1: left promiscuous mode [ 291.680181][T13561] gre1: left allmulticast mode [ 291.749401][T13561] bond2: left promiscuous mode [ 291.754446][T13561] bond2: left allmulticast mode [ 291.760104][T13561] macvlan2: left promiscuous mode [ 291.765249][T13561] macvlan2: left allmulticast mode [ 291.778794][T13561] bond3: left promiscuous mode [ 291.778834][T13561] ip6gre1: left promiscuous mode [ 291.837548][T13561] bond6: left promiscuous mode [ 291.845285][T13561] bond6: left allmulticast mode [ 291.851028][T13561] bond7: left promiscuous mode [ 291.855920][T13561] bond7: left allmulticast mode [ 291.862870][T13604] netlink: 'syz.2.2307': attribute type 11 has an invalid length. [ 291.863004][T13605] netlink: 'syz.2.2307': attribute type 11 has an invalid length. [ 291.882283][T13561] bond8: left promiscuous mode [ 291.887194][T13561] bond8: left allmulticast mode [ 291.894404][T13561] bond9: left promiscuous mode [ 291.894453][T13561] bond9: left allmulticast mode [ 291.894717][T13561] bond11: left promiscuous mode [ 291.894739][T13561] bond11: left allmulticast mode [ 291.894878][T13561] bond12: left promiscuous mode [ 291.894898][T13561] bond12: left allmulticast mode [ 291.895144][T13561] bond13: left promiscuous mode [ 291.895163][T13561] bond13: left allmulticast mode [ 291.955173][T13561] bond16: left promiscuous mode [ 291.955228][T13561] bond16: left allmulticast mode [ 291.955393][T13561] bond17: left promiscuous mode [ 291.955407][T13561] veth0_to_bond: left promiscuous mode [ 291.955606][T13561] bond17: left allmulticast mode [ 291.955619][T13561] veth0_to_bond: left allmulticast mode [ 291.967768][T13561] geneve4: left promiscuous mode [ 291.967790][T13561] geneve4: left allmulticast mode [ 291.989813][ T6477] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.989848][ T6477] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.989871][ T6477] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 292.010115][ T6477] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.010148][ T6477] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.010171][ T6477] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 292.012038][ T6477] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.012065][ T6477] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.012087][ T6477] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 292.012122][ T6477] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.012145][ T6477] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.012167][ T6477] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 292.402033][T13626] syzkaller0: entered promiscuous mode [ 292.402077][T13626] syzkaller0: entered allmulticast mode [ 292.986560][T13662] netlink: 'syz.3.2321': attribute type 1 has an invalid length. [ 292.986644][T13662] netlink: 'syz.3.2321': attribute type 3 has an invalid length. [ 292.986678][T13662] NCSI netlink: No device for ifindex 813332851 [ 293.232502][T13671] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 293.553367][T13681] netlink: 'syz.4.2328': attribute type 30 has an invalid length. [ 293.562464][T13681] __nla_validate_parse: 7 callbacks suppressed [ 293.562484][T13681] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2328'. [ 293.714224][T13693] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2330'. [ 293.723804][T13693] nbd: couldn't find a device at index 0 [ 293.755587][T13660] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 293.755635][T13660] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 293.765660][T12785] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.771574][T13660] tipc: Enabling of bearer rejected, already enabled [ 293.772018][T12790] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.772059][T12790] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.772091][T12790] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.846187][T13660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2320'. [ 293.975081][T13704] netlink: 'syz.3.2331': attribute type 1 has an invalid length. [ 293.999863][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 294.544146][T13719] openvswitch: netlink: Unknown key attributes 1 [ 294.907149][T13722] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 294.927704][T13713] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 295.160044][T13722] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2335'. [ 295.518888][T13757] netlink: 'syz.0.2343': attribute type 34 has an invalid length. [ 295.518937][T13757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2343'. [ 295.548092][T13750] team_slave_1: mtu less than device minimum [ 295.626637][T13755] tipc: Resetting bearer [ 295.975271][T13767] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2344'. [ 296.143928][T13774] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2346'. [ 296.302991][T13774] netlink: 'syz.1.2346': attribute type 3 has an invalid length. [ 296.311945][T13774] netlink: 'syz.1.2346': attribute type 4 has an invalid length. [ 296.311999][T13774] netlink: 11575 bytes leftover after parsing attributes in process `syz.1.2346'. [ 296.477797][T13786] : (slave syz_tun): Releasing backup interface [ 296.537645][T13786] bridge0: port 3(syz_tun) entered blocking state [ 296.537789][T13786] bridge0: port 3(syz_tun) entered disabled state [ 296.537929][T13786] syz_tun: entered allmulticast mode [ 296.935922][T13807] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2356'. [ 297.885918][T12784] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 297.923472][T13859] syzkaller1: entered allmulticast mode [ 298.070861][T13863] netlink: 'syz.4.2368': attribute type 2 has an invalid length. [ 298.070905][T13863] netlink: 'syz.4.2368': attribute type 11 has an invalid length. [ 298.070940][T13863] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2368'. [ 298.305634][T13871] bond16: option arp_all_targets: invalid value (18446744073709551613) [ 298.342537][T13871] bond16 (unregistering): Released all slaves [ 298.470988][T13853] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 298.841741][T13897] netlink: 'syz.0.2378': attribute type 15 has an invalid length. [ 298.841786][T13897] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2378'. [ 299.272206][T13892] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2377'. [ 299.561565][T13912] xt_l2tp: invalid flags combination: 8 [ 300.014528][T13930] openvswitch: netlink: Missing key (keys=40, expected=100) [ 300.042737][T13929] tipc: Enabled bearer , priority 10 [ 300.148526][T13938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2391'. [ 300.838623][T13929] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 300.838669][T13929] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 300.856615][T13966] netlink: 'syz.4.2399': attribute type 29 has an invalid length. [ 300.856660][T13966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2399'. [ 300.856910][T13966] netlink: 'syz.4.2399': attribute type 29 has an invalid length. [ 300.856924][T13966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2399'. [ 300.869088][T13969] netlink: 'syz.4.2399': attribute type 29 has an invalid length. [ 300.869110][T13969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2399'. [ 300.884550][T13966] netlink: 'syz.4.2399': attribute type 29 has an invalid length. [ 300.884600][T13966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2399'. [ 301.043946][T13929] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 301.043998][T13929] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 301.096671][T13929] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 301.096729][T13929] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 301.139432][T13929] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 301.150299][T13929] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 301.330999][T13979] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2404'. [ 301.345685][T13979] gretap0: entered promiscuous mode [ 301.368491][T13983] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2403'. [ 301.368693][T13983] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2403'. [ 301.385831][T13979] 0ªî{X¹¦: renamed from gretap0 [ 301.419636][T13979] 0ªî{X¹¦: left promiscuous mode [ 301.419669][T13979] 0ªî{X¹¦: entered allmulticast mode [ 301.445713][T13979] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 301.675056][T13989] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 302.193126][T14018] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 302.503471][T14038] netlink: 'syz.4.2419': attribute type 23 has an invalid length. [ 302.820562][ T31] audit: type=1800 audit(1788592703.520:8): pid=14049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2420" name="memory.events" dev="tmpfs" ino=2359 res=0 errno=0 [ 302.844977][ T31] audit: type=1804 audit(1788592703.530:9): pid=14049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2420" name="/newroot/460/memory.events" dev="tmpfs" ino=2359 res=1 errno=0 [ 303.119456][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 303.217625][T14068] syzkaller1: entered promiscuous mode [ 303.223842][T14068] syzkaller1: entered allmulticast mode [ 303.618605][T14090] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 304.482054][T14123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.731647][T14140] netlink: 'syz.1.2441': attribute type 1 has an invalid length. [ 304.741551][T14140] __nla_validate_parse: 9 callbacks suppressed [ 304.747902][T14140] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2441'. [ 304.758532][T14140] netlink: 'syz.1.2441': attribute type 2 has an invalid length. [ 304.766606][T14140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2441'. [ 304.782658][T14140] netlink: 496 bytes leftover after parsing attributes in process `syz.1.2441'. [ 304.833902][T14140] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2441'. [ 304.939095][T14146] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 304.981373][T14153] netlink: 'syz.1.2444': attribute type 2 has an invalid length. [ 305.094370][T14159] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 305.398017][T14173] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 305.418930][T14174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2447'. [ 305.418982][T14174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2447'. [ 305.430089][T14174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2447'. [ 305.430118][T14174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2447'. [ 305.468117][T14178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2448'. [ 305.488999][T14178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2448'. [ 305.520636][T14178] netlink: 'syz.2.2448': attribute type 2 has an invalid length. [ 305.777648][T14182] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 305.802451][T14182] vlan2: entered allmulticast mode [ 306.814709][T14216] bridge_slave_1: default FDB implementation only supports local addresses [ 307.333023][T14253] tls_set_device_offload: netdev not found [ 307.614883][T14256] netlink: 'syz.0.2466': attribute type 1 has an invalid length. [ 308.475085][T14284] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 308.475135][T14284] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 309.136253][T14307] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 309.136291][T14307] IPv6: NLM_F_CREATE should be set when creating new route [ 309.136363][T14307] IPv6: NLM_F_CREATE should be set when creating new route [ 309.136394][T14307] IPv6: NLM_F_CREATE should be set when creating new route [ 309.702357][T14333] ip6tnl0: Caught tx_queue_len zero misconfig [ 310.262582][T14360] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 310.699453][T14368] veth0: Caught tx_queue_len zero misconfig [ 311.164045][T14391] __nla_validate_parse: 9 callbacks suppressed [ 311.164096][T14391] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2508'. [ 311.260631][T14397] netlink: 'syz.4.2509': attribute type 1 has an invalid length. [ 311.309437][T14401] batadv_slave_1: entered promiscuous mode [ 311.321117][T14395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2508'. [ 311.368583][T14395] batadv_slave_1 (unregistering): left promiscuous mode [ 311.563899][T14415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2509'. [ 311.598022][T14390] veth5: entered allmulticast mode [ 311.622659][T14390] bond19: (slave veth5): Enslaving as an active interface with a down link [ 311.652649][T14397] bond17: (slave veth0_to_bond): Releasing active interface [ 311.678815][T14397] bond19: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 311.698449][T14407] macvlan0: entered promiscuous mode [ 311.704156][T14407] macvlan0: entered allmulticast mode [ 311.710579][T14407] bond19: entered promiscuous mode [ 311.716864][T14407] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 311.725025][T14407] bond19: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 311.748115][T14407] bond19: left promiscuous mode [ 312.970594][T14466] netlink: 'syz.3.2528': attribute type 10 has an invalid length. [ 312.986041][T14466] syz_tun: entered promiscuous mode [ 313.068218][T14466] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 313.149760][T14470] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2530'. [ 313.323646][T14475] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.357824][T14470] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2530'. [ 313.389545][T14484] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2530'. [ 313.411970][T14475] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2529'. [ 313.415947][T14487] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2530'. [ 313.794978][T14496] openvswitch: netlink: IP tunnel attribute has 5385 unknown bytes. [ 313.832159][T14500] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 314.067848][T14513] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 314.389481][T14523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2542'. [ 314.615448][T14538] team0: Device xfrm0 is of different type [ 314.648968][T14539] tipc: Enabled bearer , priority 0 [ 314.990563][T14555] syzkaller1: entered promiscuous mode [ 314.996266][T14555] syzkaller1: entered allmulticast mode [ 315.123302][T14558] vti1: entered allmulticast mode [ 315.274141][T14561] vti1: entered allmulticast mode [ 315.415954][T14573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2553'. [ 315.936314][T14588] batman_adv: batadv0: Adding interface: veth0 [ 315.936353][T14588] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.943200][T14588] batman_adv: batadv0: Interface activated: veth0 [ 316.159134][T14598] netlink: 'syz.3.2565': attribute type 7 has an invalid length. [ 316.241053][T14596] bond18: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 316.264791][T14596] bond18 (unregistering): Released all slaves [ 316.403326][T14606] bond0: (slave veth0_to_bond): Releasing backup interface [ 316.413803][T14606] veth0_to_bond: left allmulticast mode [ 316.453774][T14606] team0: Port device xfrm0 removed [ 316.460468][T14606] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 316.506227][T14612] team0: Port device xfrm0 added [ 316.577485][T14613] tipc: Enabling of bearer rejected, already enabled [ 316.655351][T14608] Cannot find add_set index 4 as target [ 316.704147][T14625] __nla_validate_parse: 3 callbacks suppressed [ 316.714206][T14625] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2571'. [ 316.955060][T14629] Bluetooth: hci0: unsupported parameter 5135 [ 316.955107][T14629] Bluetooth: hci0: unsupported parameter 8192 [ 316.955139][T14629] Bluetooth: hci0: unsupported parameter 5135 [ 316.955157][T14629] Bluetooth: hci0: unsupported parameter 8192 [ 317.073880][T14628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2572'. [ 317.123349][T14641] netlink: 'syz.3.2577': attribute type 29 has an invalid length. [ 317.138876][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 317.145374][T14628] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 317.167687][ T30] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 317.176153][ T30] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 317.251809][ T30] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 317.345706][T14640] netlink: 'syz.3.2577': attribute type 29 has an invalid length. [ 317.364537][T14640] netlink: 'syz.3.2577': attribute type 29 has an invalid length. [ 317.426858][T14649] xt_CT: You must specify a L4 protocol and not use inversions on it [ 317.479493][ T30] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 317.531068][T14657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2579'. [ 317.830281][T14669] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2584'. [ 317.841820][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 317.863542][T14665] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 318.018083][T14678] bridge_slave_1: default FDB implementation only supports local addresses [ 318.049979][T14682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2587'. [ 318.063192][T14682] netlink: 'syz.4.2587': attribute type 2 has an invalid length. [ 318.063375][T14682] netlink: 'syz.4.2587': attribute type 2 has an invalid length. [ 318.063508][T14682] netlink: 'syz.4.2587': attribute type 2 has an invalid length. [ 318.063672][T14682] netlink: 'syz.4.2587': attribute type 2 has an invalid length. [ 318.063801][T14682] netlink: 'syz.4.2587': attribute type 2 has an invalid length. [ 318.063929][T14682] netlink: 'syz.4.2587': attribute type 2 has an invalid length. [ 318.071446][T14682] netlink: 'syz.4.2587': attribute type 2 has an invalid length. [ 318.071634][T14682] netlink: 'syz.4.2587': attribute type 2 has an invalid length. [ 318.073444][T14684] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2587'. [ 318.073630][T14684] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2587'. [ 318.073821][T14684] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2587'. [ 318.073995][T14684] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2587'. [ 318.074166][T14684] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2587'. [ 318.076805][T14682] netlink: 'syz.4.2587': attribute type 2 has an invalid length. [ 318.089799][T14682] netlink: 'syz.4.2587': attribute type 2 has an invalid length. [ 318.374420][T14692] tipc: Enabling of bearer rejected, already enabled [ 318.874557][T14710] 0: reclassify loop, rule prio 0, protocol 03 [ 319.887613][T14769] xt_TPROXY: Can be used only with -p tcp or -p udp [ 319.940418][T14771] netdevsim netdevsim4 : renamed from netdevsim0 [ 320.399373][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 321.277424][T14833] Cannot find add_set index 65532 as target [ 321.766199][T14858] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 321.766257][T14858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.345006][T14874] IPVS: sed: FWM 3 0x00000003 - no destination available [ 322.365472][T14885] IPVS: set_ctl: invalid protocol: 20 16.0.1.0:0 [ 322.376186][T14874] IPVS: sed: FWM 3 0x00000003 - no destination available [ 322.410368][T14886] __nla_validate_parse: 42 callbacks suppressed [ 322.410901][T14886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2647'. [ 322.996418][T14910] xt_hashlimit: size too large, truncated to 1048576 [ 323.028086][T14909] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.103135][T14909] bridge_slave_0 (unregistering): left allmulticast mode [ 323.115403][T14909] bridge_slave_0 (unregistering): left promiscuous mode [ 323.115541][T14909] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.115736][T14909] Oops: general protection fault, probably for non-canonical address 0xfbd59c0000000024: 0000 [#1] SMP KASAN PTI [ 323.141707][T14909] KASAN: maybe wild-memory-access in range [0xdead000000000120-0xdead000000000127] [ 323.151019][T14909] CPU: 1 UID: 0 PID: 14909 Comm: syz.0.2654 Not tainted syzkaller #0 PREEMPT(full) [ 323.160421][T14909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 323.170512][T14909] RIP: 0010:br_del_frame+0xd1/0x160 [ 323.175754][T14909] Code: f7 4c 8b 73 10 48 83 c3 18 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 69 34 84 f7 4c 8b 3b 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 40 35 84 f7 4d 89 37 4d 85 f6 74 [ 323.195402][T14909] RSP: 0018:ffffc9001a5c6d80 EFLAGS: 00010a06 [ 323.201504][T14909] RAX: 1bd5a00000000024 RBX: ffffffff907bdd58 RCX: ffff88807207ddc0 [ 323.209485][T14909] RDX: 0000000000000000 RSI: ffffffff907bdd40 RDI: ffffffff907bdd50 [ 323.217471][T14909] RBP: 000000000000001c R08: ef00000000000000 R09: 0000000000000000 [ 323.225468][T14909] R10: 0000000000008000 R11: ffff8880b873ff28 R12: dffffc0000000000 [ 323.233460][T14909] R13: 1ffffffff20f7bab R14: 0000000000000000 R15: dead000000000122 [ 323.241446][T14909] FS: 00007fe907d236c0(0000) GS:ffff888124dd9000(0000) knlGS:0000000000000000 [ 323.250383][T14909] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 323.256971][T14909] CR2: 00007fe906deb840 CR3: 000000007d180000 CR4: 00000000003526f0 [ 323.264948][T14909] Call Trace: [ 323.268233][T14909] [ 323.271182][T14909] br_cfm_port_del+0x106/0x1a0 [ 323.275961][T14909] del_nbp+0x178/0x9f0 [ 323.280041][T14909] br_del_if+0x143/0x1e0 [ 323.284288][T14909] br_device_event+0x5aa/0x9c0 [ 323.289062][T14909] ? __pfx_br_device_event+0x10/0x10 [ 323.294354][T14909] ? lockdep_rtnl_is_held+0x26/0x40 [ 323.299561][T14909] notifier_call_chain+0x1a5/0x3d0 [ 323.304692][T14909] unregister_netdevice_many_notify+0x17f9/0x2140 [ 323.311124][T14909] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 323.317894][T14909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.323968][T14909] ? __dev_queue_xmit+0x14c0/0x3820 [ 323.329180][T14909] ? __pfx_veth_dellink+0x10/0x10 [ 323.334223][T14909] ? __pfx_veth_dellink+0x10/0x10 [ 323.339254][T14909] rtnl_dellink+0x5be/0x810 [ 323.343761][T14909] ? __pfx_rtnl_dellink+0x10/0x10 [ 323.348811][T14909] ? lock_acquire+0x115/0x350 [ 323.353491][T14909] ? __pfx_rtnl_dellink+0x10/0x10 [ 323.358523][T14909] ? __pfx_rtnl_dellink+0x10/0x10 [ 323.363552][T14909] rtnetlink_rcv_msg+0x802/0xc00 [ 323.368506][T14909] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 323.373627][T14909] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 323.379105][T14909] ? ref_tracker_free+0x689/0x830 [ 323.384153][T14909] ? __pfx_ref_tracker_free+0x10/0x10 [ 323.389531][T14909] netlink_rcv_skb+0x226/0x4a0 [ 323.394304][T14909] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 323.399776][T14909] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 323.405071][T14909] ? netlink_deliver_tap+0x2e/0x1b0 [ 323.410274][T14909] ? netlink_deliver_tap+0x2e/0x1b0 [ 323.415478][T14909] netlink_unicast+0x7bd/0x940 [ 323.420344][T14909] netlink_sendmsg+0x813/0xb40 [ 323.425123][T14909] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.430680][T14909] ? apparmor_socket_sendmsg+0x98/0x360 [ 323.436243][T14909] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.441540][T14909] sock_sendmsg_nosec+0x13a/0x180 [ 323.446580][T14909] ____sys_sendmsg+0x54e/0x850 [ 323.451356][T14909] ? __pfx_____sys_sendmsg+0x10/0x10 [ 323.456654][T14909] ? import_iovec+0x73/0xa0 [ 323.461167][T14909] ___sys_sendmsg+0x2a5/0x360 [ 323.465847][T14909] ? __lock_acquire+0x6df/0x2e50 [ 323.470789][T14909] ? __pfx____sys_sendmsg+0x10/0x10 [ 323.475991][T14909] ? futex_wait+0x2a2/0x390 [ 323.480512][T14909] ? __fget_files+0x2a/0x420 [ 323.485109][T14909] ? __fget_files+0x3a2/0x420 [ 323.489795][T14909] __x64_sys_sendmsg+0x1b1/0x290 [ 323.494739][T14909] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 323.500205][T14909] do_syscall_64+0x166/0x520 [ 323.504807][T14909] ? trace_irq_disable+0x3b/0x140 [ 323.509837][T14909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.515909][T14909] ? clear_bhb_loop+0x70/0xc0 [ 323.520594][T14909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.526495][T14909] RIP: 0033:0x7fe906d9e159 [ 323.530914][T14909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.550525][T14909] RSP: 002b:00007fe907d23028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.558951][T14909] RAX: ffffffffffffffda RBX: 00007fe907025fa0 RCX: 00007fe906d9e159 [ 323.566927][T14909] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 323.574904][T14909] RBP: 00007fe906e35024 R08: 0000000000000000 R09: 0000000000000000 [ 323.582885][T14909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.590861][T14909] R13: 00007fe907026038 R14: 00007fe907025fa0 R15: 00007ffc5499e588 [ 323.598842][T14909] [ 323.601863][T14909] Modules linked in: [ 323.607120][T14909] ---[ end trace 0000000000000000 ]--- [ 323.645840][T14909] RIP: 0010:br_del_frame+0xd1/0x160 [ 323.645890][T14909] Code: f7 4c 8b 73 10 48 83 c3 18 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 69 34 84 f7 4c 8b 3b 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 40 35 84 f7 4d 89 37 4d 85 f6 74 [ 323.645912][T14909] RSP: 0018:ffffc9001a5c6d80 EFLAGS: 00010a06 [ 323.645939][T14909] RAX: 1bd5a00000000024 RBX: ffffffff907bdd58 RCX: ffff88807207ddc0 [ 323.645957][T14909] RDX: 0000000000000000 RSI: ffffffff907bdd40 RDI: ffffffff907bdd50 [ 323.645975][T14909] RBP: 000000000000001c R08: ef00000000000000 R09: 0000000000000000 [ 323.645991][T14909] R10: 0000000000008000 R11: ffff8880b873ff28 R12: dffffc0000000000 [ 323.646009][T14909] R13: 1ffffffff20f7bab R14: 0000000000000000 R15: dead000000000122 [ 323.646026][T14909] FS: 00007fe907d236c0(0000) GS:ffff888124dd9000(0000) knlGS:0000000000000000 [ 323.646046][T14909] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 323.646063][T14909] CR2: 00007fe906deb840 CR3: 000000007d180000 CR4: 00000000003526f0 [ 323.646089][T14909] Kernel panic - not syncing: Fatal exception [ 323.746675][T14909] Kernel Offset: disabled [ 323.751026][T14909] Rebooting in 86400 seconds..