last executing test programs: 4.424178094s ago: executing program 0 (id=7198): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x818) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100040000002c00048018000300010000000500030080ffffff05000000016900000500030080ffffff05000300050000000800020003"], 0x50}}, 0x0) 4.324026368s ago: executing program 0 (id=7200): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000002000000000000000000000000000010000180f70002800500010000000000300003801700018014000300fc00000000000000000000001100000014000400fe8000000000000000000000000000bb040002"], 0x58}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x28, 0x107, 0x0, 0x0, {0xa, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}]}, 0x20}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000040)=0x100000, 0x4) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x18) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r2, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a40)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fca", 0x85}, {&(0x7f0000000d40)="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", 0x177}, {&(0x7f0000000f00)="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", 0x14b}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000340)="63c3b174ab06077f6ee67ac1310d86586b13d2c9e203a9da866b81e20e9fe5c43219396d489c1459ce9cd14fa3b43a0b9b6004118a35444790d70af5c873561ac1ad55af7f9f8551103f694e2a22346ca675898ce02a665ecc07e153e3949b954c1d74b105c14411925a8ae24778d4111d2d9743b682d653bcf35d53fd33489a3a405042c0de5ec2cb4b991a31e1d76db8609d0bf66d8d723a6c28a50d42ab169de383345fbee97bea33e8bfb5d705852d360ab703fc956c1ea86157aedcff1782c784e074", 0xc5}, {&(0x7f0000000440)}], 0x2}}], 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100000008000000000085b4000a20000000000a01030000000000000000010000000900010073797a30000000002c000400030a01020000000000000000010000000900030073797a08000000000900010073797a300000000050000000060a01040000fe93fe0000000000000100000008000b40000000000900002800eb84240001800b000100736f636b6574000014000280080002400000000008000140000000031400000011000100"/196], 0xc4}}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000007"], 0x24d8}], 0x1}, 0x0) 4.180330732s ago: executing program 2 (id=7201): syz_emit_ethernet(0x3b6, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce5400659808028000037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x0, "b8a3e100908f6164000000ffffff3f00000000000000000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 4.016483475s ago: executing program 2 (id=7204): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@private1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e23, 0x80000, @empty}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="280000000000000029000000020000000001000000000000c2040000000004010000009f"], 0x28, 0x4000000}, 0x0) 3.616253896s ago: executing program 2 (id=7207): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth1_virt_wifi\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x3, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0xf85, 0x4) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000880), 0x12) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x0, 0x0, 0x1}}}}]}, 0x78}}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = accept(r2, &(0x7f00000000c0), &(0x7f00000001c0)=0x80) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r2) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0xf0, r7, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffe14}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffdbe}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff8c}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb252}]}]}, 0xf0}}, 0x1) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000001c0005000000000800040001000000", 0x24) 3.13347715s ago: executing program 2 (id=7212): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000000000000000000a00000008000300", @ANYRES32=r3, @ANYBLOB="1400508005000900027a00000500020008"], 0x3c}}, 0x0) 2.715052117s ago: executing program 2 (id=7218): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000c40)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @device_b}, @ext_ch_sw={0xf, 0x4, {{}, @void}}}}]}, 0x40}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000800ffff0000000000000000850000004100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000000000000000000000000000085b1551db8000000a90000009500d04858e52e850000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x90) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) pipe(&(0x7f0000000080)) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r6}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001300290a000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0600000000000000"], 0x20}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r10, {0xb, 0xfff0}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) unshare(0x20000400) r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r11, &(0x7f0000000040)={0x24, @long={0x2}}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r3, 0x58, &(0x7f0000000380)}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r3, 0x58, &(0x7f0000000400)}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x6f}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.158179916s ago: executing program 0 (id=7226): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="b400000000000000791097000000000062000000000000009508100000000000f42f9c31907ae9d028cc75e61c7db26519a29dc2b33043b3ce1030f95253523819600952532ad7c4604f25e5c2543ac6bce5e6f98728be9c7bb2cc7a54207d268d3dedde707e17cdf77b17dbf58a6d959826b7a4d74e7fec21e721fa0a815d02"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x4e, 0x0, 0xffffffffffffffff, 0x3000000}, 0x48) 1.820328951s ago: executing program 3 (id=7231): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 32) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c000006000000000000000067656e65766531000000006e00000063a393db67ea2170a5b4290a3c49217859874171cc79540b57314b363ae07a8a16352922ac7a3f7f14289a42cd7dd1f7374dfb0143c48a8d55db0668a6ca0029edd17578b7e263eecd85162f3f4a2a7bf7d6f59bab28cad0a425a3c9205be26def02ad0292ec5ce12e6da4c21e754fba400cedfa1ea1506c45550cfaa516e92ab58e1f0d808f68fbd6fc75c598a6f86a785d77cce810cf19edab859eb1d766d7b8e7a8237095924389790912b25106c4da82fe33de8b6ab9b06485333f47c19acf47"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8006e1, 0x10001, 0xa6, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000003082404ba850ccd02ac63610cb64d0500000000f526860798717cce24"], 0x14}}, 0x0) (async) sendmsg$alg(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000200)="9ea1d22beec57739045e5b3dcf80dd4c6d38abeaf39882b0d4d5d2d80cc0c4a0602cfd7486df970666bf29711eae5b29f73f03d537dffe13c0915d64ea332c572ee28acd22746846a009b955bc63764be75506d48da4e3e4e063acb22417fc5af78104c7afd5258b02732818af1e08a5b2e4815157c588a4", 0x78}, {&(0x7f0000000040)="2d27474a15aa010110020e3ad575", 0xe}, {&(0x7f0000000280)="a0d86e5c5fd0ccc848f08e47a58cf599f334fa6f824498fb350dc9fe7a12f1f91eb66808e0f6c66151548dfb3f6c989cc88e113aa4ff12447ac46be3df0b4f23d55c6216757a738b14df18939761204d2f605f5b5ecbfca0822337d57e7fd3c18d6622095006cd0a133bb35f2fe6cc61e1763754aadbb4783695cb258748ce484e44a36220b4b043b9ba4bc03f7df08f58425bf76f498a7c067f07bb17a049eeb3a7a8c5b231abcd7062a95c7fb940df04b2ec4d4c8370224286838f56019aee39cf44f35ef3119bc213228b00c7f6ec83e7aab22b8973bd99587672d499aeff55d2", 0xe2}, {&(0x7f0000000380)="28eafede27729921680cc789a5f1018caf97b0c4374e896fd7adb1120564865e38ba15672d611333410cdc9c0b3f2fbb20a134f5336893dde34a99a67213d8f89293b5254683c252b1122e489e8e774e7fd19a1799f6241400e93b6d26849904abce7e84c075ff5fef12dbd555ffe71ea3a53027ea1a622b4088f49609a93e8b03746fba96cbd4bef8609cf3c439fe792b71eada11f3b06001631d83bb11f5951f4d036eff45c6a4e65385b866e8fbd5a28ad276e668a4ae671f49efba230f70ca21b78c6a90c1", 0xc7}, {&(0x7f0000000740)="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", 0x115}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000002bc0)="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", 0x1051}, {&(0x7f0000000580)="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", 0xfc}], 0x8, 0x0, 0x0, 0x4800}, 0x110) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000100)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r8 = openat$cgroup_int(r6, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) sendfile(r8, r7, 0x0, 0x100000001) (async, rerun: 64) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r9, &(0x7f0000000100), 0xfecc) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r9, 0x0) (async) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async) r11 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r12 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close(r12) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x66, &(0x7f0000000440)={r13}, &(0x7f0000000480)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000001a40)={r13, @in={{0x2, 0x4e02, @private=0xa010100}}, 0xfffd, 0xa}, 0x90) (async, rerun: 32) r14 = socket$key(0xf, 0x3, 0x2) (rerun: 32) write$binfmt_script(r14, &(0x7f0000000a40)={'#! ', './file0'}, 0xb) (async, rerun: 32) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (rerun: 32) 1.606344581s ago: executing program 3 (id=7234): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) listen(r0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000480)="d9528045f36c8bc63d0cf1816223719e08bcc17afc4305ff9cd6f2faefadb093eddd250e51f2f4d23508ba33e22a033c0569fc2fbe22f3e4de8cb9928ec94f71f655fdf671ce6b055b3e203dddc2135aaea3b2a8593faf4f3da4fb285dbb0a393064cea2d4992ce208168d1950042e8b0b4e54fc83f2edf2a4e857e7ec0267677e04", 0x82}, {&(0x7f0000000240)="08d454c29d26d0a61af3a67f7eab818c299618e46659b00e45a7aa79806e24e7aba03be198322b9e10b1fabcc3feb13cbac7c5ba4d0be2374551a7f9fb0d11a13893419a4f56b683f8a1c1072888d2778cb024bf0b8d0f17b539b4d64701be37d3a40b7c0bb7b9264b17", 0x6a}, {&(0x7f0000000600)="c887ebaabea682ca6ba4db45b5f1fbd0091cd6bdc79ddb69636e45dd4b95327d40f550be8f319aaf16b6ec2e048e986e03c70c291ebaf625d3e83dc0f7062d21df335c8e928aad690b658a0f146a28e6fef8a3813b855cede44e5bcda6d6f33e2f1710c39c6b38b1f1cff95e08ba64c86550009db7b3e2330198bdad5bec119a8a4c2005aa71f0081f23b2a72dc723ddcc2276b9eaf8e7dd82c4eaef699153b982a4c35a8ef1068ef20e42947080a8e39d1fa0b5c4ca82e90862d4375071314ab8e0ee59a18b36db6dd70b6fb9bae13c614324076f15bde02eabf782ca3132d75da1a5e532f7d826f8edf7607d7c89ea7f349876826b", 0xf6}, {&(0x7f0000000300)="abbedf3cb733800186f077a07d6bd5b0309caadb4cabf13e9b735e29a8e7bb2f449d2e7d8cdc", 0x26}, {&(0x7f0000000f80)="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", 0x1000}, {&(0x7f00000003c0)="0bdfaf777afda5ceb32f", 0xa}, {&(0x7f0000000700)="688497d06c3dbacbf9795372cafa56640cc582453438ae7e698d0f288d89b23b1c8c1de612e907c3bd3205b5b67542f07ab367652838a9abb6b57e858f41f6f79342bda1b74b736153621b79c73eb2682de29a2aee5da2bd35ac04d2a83bea35ae55d6fc912581daaf036d3cc171c479ab6a29f34c81b56744085ccb1eea006488aa820ecb60eb38a66b26b445053c2e06e18ac2558031602e85a599de55f4dc5bdce7e486fcbb7b25e187692182", 0xae}], 0x7) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000feffff020000004c0001"], 0x60}}, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r5}) sendmsg$kcm(r4, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, &(0x7f0000000140)={0x1ff, 0xfb90}, 0x0, 0x0) clock_gettime(0x0, 0x0) ppoll(&(0x7f0000000180)=[{r7}, {r1}], 0x2, &(0x7f0000000100), 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010067656e657665000014000280f201c2a4d6fb76b4c410f2dce80004000000000005000c0000000000"], 0x44}}, 0x0) 1.4604022s ago: executing program 4 (id=7236): socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="ba8cbc78609c"}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x3c}}, 0xf0ff) 1.376034608s ago: executing program 4 (id=7238): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000300), 0x5dc, 0x6000000000000000, 0x0, 0xfffffffffffffdfd) 1.197857713s ago: executing program 4 (id=7240): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'veth1_to_batadv\x00', &(0x7f0000000280)=@ethtool_cmd={0x18}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900010073797a30000000000900020073797a3200000000400004803c0001800b00010065787468647200002c0002801500064000000001080003400000450c0800074000000002080004"], 0x94}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'veth1_to_batadv\x00', &(0x7f0000000280)=@ethtool_cmd={0x18}}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900010073797a30000000000900020073797a3200000000400004803c0001800b00010065787468647200002c0002801500064000000001080003400000450c0800074000000002080004"], 0x94}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) 1.197755725s ago: executing program 0 (id=7241): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0xfffffffa}}]}]}, @IFLA_IFALIASn={0x4}]}, 0x38}, 0x1, 0x0, 0xc00000000000000}, 0x0) 1.104753126s ago: executing program 0 (id=7242): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000001000370400"/20, @ANYRES32=r3, @ANYBLOB="0002"], 0x20}}, 0x0) 879.861647ms ago: executing program 4 (id=7243): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xc}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x4}]}, 0x3c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000008c0)=r3, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.swap.current\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000006d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r4}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, 0x0, 0x5000) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000140)={r0, 0x7, 0x5, 0x1}) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) bind$l2tp(r6, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) connect$l2tp(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a30000000001c000000020a01020014d9000000000000000000080002400000000130000000160a0300000000000000000007000000040003800900020073797a30000000000900010073797a30"], 0x94}}, 0x0) sendmmsg$inet(r6, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffffa1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r8, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r9, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xfffffffffffffcee}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 784.079524ms ago: executing program 1 (id=7244): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0xd00000000000000) 727.988496ms ago: executing program 2 (id=7245): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000380)="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", &(0x7f0000000680)=""/102, 0x4}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000540)={'wg1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYRES16=r3, @ANYRES64=r1, @ANYRES32=r2, @ANYBLOB="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"], 0xcc}, 0x1, 0xba01}, 0x4000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000000100), &(0x7f0000000480)}, 0x20) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x1}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f0300000400003a000000006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket(0x2, 0x80805, 0x0) socket$inet(0x2, 0x80001, 0x84) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xf}, 0x10}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000aaaaaaaaaabb8100000008004500005800000000c42f907800000000000000000420881b0000000000000800000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r4}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xe, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4) socket$key(0xf, 0x3, 0x2) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000030601030000000000000000020000020900020073797a300000c54e0500010007000000ff02671d91b4f582c9d84f8432b64366e6f85aa6b4176ca2aeeb7ade8b076172273820876f98b88a603bbfa980865e0714"], 0x28}, 0x1, 0x0, 0x0, 0xb778283ac433d7b0}, 0x10) 713.524996ms ago: executing program 1 (id=7246): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) unshare(0x480) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r4, 0x89e8) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r5, 0x8010661b, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r7 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000000)=0x655e, 0x4) sendto$inet6(r7, &(0x7f0000000ac0)="a6b891f3c4663190f426b305994870ed537be6f57f56fa7f70", 0x19, 0x0, 0x0, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4a, &(0x7f0000000140)=0x89, 0x4) recvmmsg(r7, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2100, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6", 0x10) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="3521fc540d1b4dc1e61b202d07dee58f", 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb) setsockopt$sock_int(r3, 0x1, 0xc, &(0x7f0000000200), 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000180)=ANY=[@ANYRES8, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x8, 0x8, &(0x7f00000002c0)='\x00\x00\x00/\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_opts(r9, 0x0, 0x4, &(0x7f0000000100)="00f5", 0x2) 599.399576ms ago: executing program 3 (id=7247): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@remote, @in6=@mcast2}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f0000000200)=0xe8) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x3a9, 0x0, 0x0, {{}, {@val={0x8, 0x140}, @void}}}, 0x1c}}, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'team_slave_1\x00'}}, 0x1e) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'veth1_to_batadv\x00'}}, 0x1e) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'veth1_to_batadv\x00'}}, 0x1e) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) r9 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffd000/0x1000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee6}, &(0x7f0000000000)=0x1d) close(r7) close(r6) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r10, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x24004815}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r13, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)={0x20, r14, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x20}}, 0x0) 456.53737ms ago: executing program 3 (id=7248): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r2, @ANYBLOB="38003080340001800800010005"], 0x54}, 0x1, 0x0, 0xc000000}, 0x0) 332.763463ms ago: executing program 0 (id=7249): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x10, 0x10}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x7) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)={0x1d0, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x1b4, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x27, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x2c}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x632e04fdbe715652}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0xc040}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x10, &(0x7f0000000080)=@framed={{0x18, 0xa}, [@func, @map_fd, @initr0, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x2}}]}, 0x0}, 0x90) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r5, &(0x7f00000000c0)=ANY=[], 0xffe) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffff963}, [@call={0x85, 0x0, 0x0, 0x41}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_VERSION(r9, 0x0, 0x480, &(0x7f0000000080), &(0x7f0000001440)=0x40) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f0000000200)={0x8, 0x3, 0x5, 0x0, 0x0, [{{r8}, 0xc9}, {{r9}, 0xa}, {{r8}, 0x7}, {{r7}, 0x100000001}, {{r8}, 0x3}]}) 252.414672ms ago: executing program 1 (id=7250): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000090000001300000008000300", @ANYRES32=r2, @ANYBLOB="38003080340001800800"], 0x54}}, 0x0) 252.066201ms ago: executing program 3 (id=7251): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_FLOW={0x8, 0xb, 0xf000000}]}, 0x24}}, 0x0) 208.724232ms ago: executing program 4 (id=7252): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01030000000000f0fffffffd0000060006000000040008000100", @ANYRES32=r2], 0x24}}, 0x0) 187.477103ms ago: executing program 1 (id=7253): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x98) 80.16674ms ago: executing program 3 (id=7254): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}, @IFLA_BOND_FAIL_OVER_MAC={0x5}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'netpci0\x00', 0x1000}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r3, &(0x7f0000000c40)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000040)=0x13, 0x4) close(r2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000200)=ANY=[@ANYRES32=r6], 0xf) socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002600)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) shutdown(r1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000300)={0x1100, 0x0, 0x0, 0x10000}) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x170, 0x1170, 0x1398, 0x0, 0x1170, 0x2b0, 0x1398, 0x1398, 0x2b0, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x108, 0x170, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x4, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, [], [], 'geneve1\x00', 'veth1_vlan\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0}, 0x90) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r9, &(0x7f00000006c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x0, [@null, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) 79.777261ms ago: executing program 4 (id=7255): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e23, 0x7, @empty, 0x81}, {0xa, 0x4e24, 0xfffffbff, @mcast1}, 0x0, {[0xd, 0x5, 0x8, 0x100, 0x0, 0x5364, 0x2, 0x8]}}, 0x5c) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000100)={0x7c, "71812ac9e35f02dd93f698ac97b81a9620033d28130937b7e6f6af5fb6ece1e5925c3b54bd884f21ad1ac079c6235b95687c390b8a19048eaff011c81d1da38f4b1f5ca4688565d95fc564532878fd688d23b616c365d62184efb0d4e4393811a0ad737c670f6c8570a5e3fb262bd3f4852d1f4aeb6b4f5dc8630efba1851f0f"}) r4 = accept4$packet(r1, 0x0, &(0x7f00000001c0), 0x0) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000240)={0x6, &(0x7f0000000200)=[{0x0, 0x9, 0x9, 0xa}, {0x0, 0xf9, 0x7, 0x2}, {0x4, 0x8, 0x0, 0x1}, {0x101, 0x72, 0x2, 0xe}, {0x1, 0x7, 0x2, 0x6a8}, {0x6, 0x8, 0x7, 0xeb}]}, 0x10) ioctl$SIOCX25GFACILITIES(r3, 0x89e2, &(0x7f0000000280)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x2, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x9, 0x6}, {0x10, 0x10}, {0xe, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44040}, 0x20000000) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt(r6, 0x80000000, 0xf51f, &(0x7f00000003c0)="9a55f6afc8197ca9e37f51c9d574767f191eb9c8b5a098dfd3af8e2bff484df40aa671681f3a59818082aa5225506049b42aed926c6dcaf16b8f31407d0b47dcd075e7069a4430a5c3490a98f28869e843052578811aa07f43d276ee496da1ffbd1b5d2ac8e2c9bf001405b6d0b5d2f31eb0738a42e77c5abea498969f8618f5a0975b846b265a2c80624d28cd1ef163ac3067165d908257f7c657740c96b1e6b6f704cfb84898bab2e2801a6ac4e3d58756880a2680666e3a7a60f9", 0xbc) r7 = openat$cgroup(r6, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r7, &(0x7f00000004c0), 0x2, 0x0) socketpair(0x2a, 0x3, 0x200, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_mptcp(0x2, 0x1, 0x106) r10 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg(r10, &(0x7f0000003c80)={&(0x7f0000000540)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x1, 0x0, 0x1, {0xa, 0x4e20, 0x0, @local, 0x19e4efaf}}}, 0x80, &(0x7f00000017c0)=[{&(0x7f00000005c0)="21e58e7e4cd8445fb98fd7bf8054d6117f322687087962b9dab76eaf779ba16f08850f216d5ca25cd135953df0d781bda8dd68e001c8b69af68f860f138419efc330af8a1d1d64bd87aae4e285dab2cac6e3eb97a48b601ac573c0ed870cde5a7c5de52a8eecffcec7028836759b081517d373f967daf0f8061a36e6f0284372ad971b0793df751ac129633e0e8a9b5552c8ed82475fc4", 0x97}, {&(0x7f0000000680)="974f82d96293330e11a33b44b5be9f00d85fbee725131b03c299163bcee6d93e93", 0x21}, {&(0x7f00000006c0)="c8b84338a8fb62197b0f4c71b5f8371ced935d1baf2f2142e3ecbd400eac1cf198d907be1be77a010a59e38ef3065a4754140139e88c77bb8b97bdd67a365baeeaace44a8bbc36b223bca521b5f04c985084c12c08bc4087c7e978af2b257f611523bf6a7d7007b1811e5330ae1d7791174a5288d6d9f6e2d32175f0ee5ef2906f6091586b94e04915aaa59d01ee2f4ddd9a6f45db02af6d7eae72b197764ff3a5a33656142c15afd33dea3b5ac687cb3d831dc5687d1d1756e712cd2800b8903b8758ea496242d57cf0b6227761aed2", 0xd0}, {&(0x7f00000007c0)="c19cd2d748b16939729cee80f507f613f6608322ce77baf5b57c1bbba9348e14955b39705a36186ad067efbc4e697c0ae15a37a5acecb49cd142622c7d69826a25b8c26627fc5196a3fabf1fb8835cced87ca8eae71becf4da0e3a42a0baf084ee08bd74d0267438f2af1bc5808d7b8177d1ee717d27a67d30eb86696a5da952620658e41c455821477ad3cfab627c89fd004907a55103aeee4a31f9a51b3534d2a9ef3284c316fea39c683116cc18e3e5db0bdc0368ea4f028b0f3714b778e6480320ebb486e8cdd08e5dc29ee5fe7ffec328daf4cc373d497118cb260425d65dde1da57868adf559ead262293b45092de6d5dac073271da70a19d8394ee465c1cb4a2af87073803c328ae5c7c1b534234cb9ef3c0638131d5522c933c0ced9ff8e050f83e93d2db6a204289903b0ecfac0ea267028fd1bf306dd8bc564814f7edbc21295a5f3ced3b8328a6fef171a852d4ba1db41be7afae2084abb0dd525bb5ac308ae3d3a0d8c2a9114a434edfe969143012a8ec67411516d02ea93a87e4411e729406300e510a41f563123a1e1fa5d69715f2c92cad640b2f0bd3fbf97392c218cea910e43bc9a6622917e23f450ba23f13ddda6a5f2a9f7b0862bce51cb7253c7679a25c1c939e6bd21c19cc3710439d20e712b0982c0dbf51323a72a88ba04afa2de45e7696ff179e049c48f53cde6cf2696bbdea37662637a738ecddf06dcb7ade2e9180c05fdaa489adf3cd156ab9440a31610812b62d7c36231fb0f25fc276dea78eaab93a4166ed6f624ee2ba4b4e3c0d478877c2ad0651d20765478de017d573acb44f4bf6dc74cbc6b98e01d988e865c15453467057c7363d9b657049453447b3017e862fe52b121cc863f7c92806832ef8aa8e63a483349835ad0029e3842f996dc010ebc6b679e8ad97bb69416f4ffd22772d09cc0b48ec799bdc4906eb1c236c496606a73190d9714e21709a7d786e952f7dc07dc820312fc0d2ff317b21699540d6e773d01ac4622b9e4d1ee0d1856ac50a2511bca13fec9cae8561866927384569086588faca42ad2c2a901a58c33319a689695167e973843006b923d955f7a0ba87930925673a9ebe3e01f9731eca31b3c1261c0812840f141601a2971e69fdeee01bdc1e130bf38fff0f4a528c25cc35eca1a93ad53030bd01c1d90b52d6359de530cab274d5d2a529e75a474e2d65dccf9bbabb27e36e30b160802069947d01a2ec732a786257047419a8b5798863ab195be208a205b8b4fff7cbe96e8928ed0803df91f434344f672c6365eec9db98dd320edb61c659c8d4c3a09c2d38a5afd408cd7ce13f4e55f9fd22c2bbd18cce11b78483ec9f2d7eac646e1e41214e30b813cca8199a3400f5982dd2628eac210590be680f1570ae32435eff328facba6d374bdab0e5c323c4882aa3169b437464dc61727e6d14c5ead3b10e949ce97bdfa15b80ace515b343e4838e2870872bc2ea4fee322e6fdb34a7b4559fb2589d95dd3fe83f22c79c34fd14632f3a77ad4022464ec6aeac3e8a2ce398c92314d3d3f13df230021eadaf6b3d96f58a4c6bd58c79a7906543ae2ff805fbd81e7d30714939be883d4e2784cba1e1287c4a9a8dd91f82db7ab2197b52c1376032b2a50206cb445784bff4032c050361d65bd5f369e5e6f74bc214673ca0101a3e15c265420dd584ffd82351cd3961e0807f1607ab3efb1856bf979b2e44d5d43a57aca33cd9915c4096e6a6a2f79d16fbbfa1d54b4854ddb69a6de479c7b730229f97e7cc0a9705a6c0e9ff91835c11a9bca686787028445cc20c3aaf945e0f5ff15a1ba67d4af3bc8e8550684c2fa3b40aa9f9a7c18ca07dc814f4cf05fd1369477eafa30514406dccacfa158939b054bc7dbf528e7fd4dbd15d0dbb664bab74a37012c91d009163cad6de9485b6cbd2d9ae4d25592765b4322556d344838ea644c3feeeb1e0e23f2371a0297b14b609c24e569d514c42874154293752b05b166b3aa659e7328edefab128c5a54d5d2c78af46bb4190849841c1c5dc3767d9a7744106be2c5accd9e0ec0bb183fe3d701ae56e200d25b8e3308983d1ed92f66d9212027ac5a75d6f5b33a143e3be5e37e5710885357ba7050586ee628c56263fe8c7b5b4ed4c991206019a57dfb6811bbb6cd9f6977c5d5f7fa5ada02db084b75980af43f5616782a2bc095d72502f8c1e0301a03a59ea113b2ae9ce869d50f1f4c2cdc64feb16e47ecdad1291787bcf8a5d1f5e0b0429c11bfef04914bbc96d1f29b50b2d3f65980f95e5386e7cd6fee9085c844b9b7da639a5ba9fa31a43a55ea94f98a6061c8b778619ea516cf405c217ae4eccf41f421a5829647f0ac70ea7682b9675807f1a2386514d9a81fac2b3ab5ceca8add13b0d74de1c5e6e7061f04ca084bd71a2a335f12d03632cf2161359dd8055ccc0107810e401ad6c0cbab09c3e97ee8552f70ab54525c3160f41081feb11fda1221f88d686627b43f110dcf787d3d99d00670908a2e365fe3c7205dc319babe4885b367d4e4a67f9e496ee20bed7dc1c6c2582c172d7021e40f3dd512bee4f0db8271a4dea4e23469a8738c13feb3186aa7107e1ddd15b9d8900a3da1e061b2da1b152634774d9d19b1b67721919e510bafaab1b8073952665761395923533619c27a43a4589966dccc84904bec9cf4f57fc2b9a1df6bf56de5e5f484111155683d4906c451fd774d64b8461baa3631d61dbff047da29e3f5f738c56baaa164a6c50772141b78945f69e42d67479fd3a119c11ec1953c32a414a003d6209ac1335e4c88cc47196f1c336ea12388f71380be392283a5f265365def917298fe4210ca44b33ec97e62e2c7a8bae79d2447c701cc0b19c3bbfc86069c023b2c9746e255228cee4ea4b4fa5a0b31c9a5de668be7947322ec238956a0f7c4c40bc0d850f9cbf16a3507a088bd315dfdbf1959c7d135acb91ce0c818e700841567566e88baff7e6446a2771dd61c8598efb42b43fa7b2ecbb172b6afd56883178b09642702a9058cbbe3429edcf06c2e99796aaf44ee3ad87b7e9b5f9eadb5aa4e923a9609327156894841048c3211d0e90fc3c4af2923d8ee688534460a893bfc5b78cde8dcaef5d826e57ac7e9d3161e7e98be26bf65c59a0345034efa69f5ac0156ae05b41cc7bcc7e16df9fe35fd6180fb89ead6ad26725de9b07854e98510573808a163bbb8cb959fd621d3714adaf10633b202aac818729d0e0e025d89b228025b78d91aecdeaaa203a60a660b8604b17015b4355c248074d65b90a90ace02aa689268a2b43dc2e45402a9bbae42f41508c1a51f44c6666795983e300f1c9a2b7bc05e9e12e1d11fda26b6780253012674f84a8aad9ba6853f3e34df9e53adfdb1f7614f13713111001db87371944dcf277f2ec032fcddc751dbb2032a128955ec20e8cddfbbb0e744d32bc1b35e66fce2a6874f4f6b4321d10ec9d3f2329be9ded9d65e9a268b8236eabd2c1bd94d6627789994b62f2b8c3ddb0143f66954975b396963be5f01e01287de455692a0f6d671be56fb32b134c653ee82460fb7e939d2f19aff24e9ab4d68bf7093bb412d55c792ab96e1af8b960ee73f1cec3f97cc3a2516c540acd106f33b69a52986c91b1c969ab029114eb6a4aae186a6473710bd9d817c75949ca745fdb43101e28269a1b4ec48a7a3f94144931c53ad8504e04d75e3e9c229492f3d5326cd3364622c48cb7761cede58257628f1a59999e37c968538d85250a1e04b70fd857dba39e5456b843c36fb87b1f8e17c7f316d9dc9f27198f63a9d65848339afc2436c512622cda2e9bf84c8cf4458412809ccefb7e125ec96f1e360f8ee9362c3a75edfe35908a10f0ddd3a589e6ed5b7243e7469d07d25509971ca692e472fdc70d303db497442df3cfa617fbf3d8993e8cc370008e214df4473b6c1f864bf6b55d37b9963f6ca8868a91ef158f2fa6cef340f1531768884bdc7295380e2fd5d9a84febd8ba0ebb0c986af20005c3116a68034cfd0385e56780a7e47b5d9a74207a2d121e66bc4f3da5e4415fc2e82c4893aea23cd5d6db7de46791a15b6ddf744b3b8b7e2f73dfb5b5f3758319adcd8f535bfda0562b7560b70e1fe30dd3478a94b0af930cbe15d58c627fc71f47acc872822cc4ee81fc1fe1a50895bb38fbf7347755e6e12b55f5da132fdc3b348cb5d6ee81184c1e083bbdf5eee85bd5a94293041e8016cd2873d77239e2ccd32b671a40fd645a81b13401edd571012df6904f465f49791b0222d61c3a61b31714266c5c024c41653fe90243f34ab80f0e7fae5afdd87573180226645c58acc57f1073eb1546fc191f014ebe008af840dd4ba565b87afc62cb7af49050454c4d867b232df3827ef5e4ab2a99837ff46b3c3b69d56a58d26349108add0d136371fb7faf0dba413816be8dc85acadd46dc23e06b78fb1b678f34e676add880255d2ca36db80f3ddf8bd7da72d662b949a40065ebf51dc71a013e0685a2786a81163dac0e05bc896b14857f1f56e6cf925267cae0991c4803a31c764f85c941c77063c457827c2d351fb7888a6d16f50ea817c30bf9b30dcfc22ae611305d4177762f32e0dacd86d3a4425d8de586e0f2953b070aa8a5541cae4520fc8cfd5398d9110d7a2be57653087eac092e546dfcaf4b5afb7ebe3f16600138259f3838deca9fab4ea9c900373ee2364835e3359ed8ffe50e6220b5c11d19ecd4f447f76843b32122ebf2c04d517c6297ab3334b84a0493ab60d29ac6ace9b451329577488d99b90ee9d5e88a2067905bf6ec836f5a3758a75893e9bdd09d491fb76049fcfd9b17316cdc1273efcb01690bd5e6affb26d4f35990b93c8a98603574d6687c5b0e686938e2214cff78bebe7a1dc5f50546b7c910242345ba422b6360b6b9a7ce9afb6982d5f21edf20f0dde13724bfa6e4bf0fe3009ba114d56d8c0fe020a2dc276b2ef9aa19394532e1f431135b24bef0b3f3806dda44f989debffdac96389f5dbd89376d83e608be36d5f522a89c84d04584d012d691b8fe48cf390a9f92896512497c870a4d2eabbf2e1487940e780d22af6d29efdd5fb2b9b87228a018ba300a25fbc68b4782512bdaba7549156ee4027772357beb5f74427ec20ce65bdc6070efbdad24000685fbf8448d4d86570d4813fcb24b5ba2229df4a84f9958de7aab33bc9f9002dce1ebf72032689ada39407cf9d7c8754f5acfa1c951122436664a02e6dc0faf2125c309c8f4cad3b886783dc381c4948600039bbb9d8147f074e5c573615c39f4381a763e3e0d85cbbf066454ae3d7153c5979eb6615c71ec5a52670f10d02778ef4843eeb929c4a33213603cc0b42a675bb8847c9ba471526b0eb9a019d8eeca78a935a6cd4ef8906a4e46a57f7136f28f0dcc9f46fa29005927c7f10d47f6594188b5d63e1937ba4c610c0c7a56cc7804ccef7b660f1a2daaee0d6ce3fd941fad409f3f531b4543c13ab2db5fd3299ca34db8c81e0e22267c5e2e5cf8987459fb8d70c320099597276befadecc394113ebb8b307d5c0815f24be1dd0ce98a4dd86ac3d7edde6248b3791d647260ad1cb9b6d03f17aaac5dfb6c2c7fba2519e1a1e26ad50e195c38ca11bae581a2ac98e576f59f304d487d61955203ac1be4fc265bfa784efcdb8f491c4e596d1f3cd73d57d1e6883afb20e2e0633077122d3c553ea3649d015798b14dac07c85d5acfe924cd1a573584d31bab4c526e0db393260a32a23290a9c81a241eedc36f8330e5dc09fc50651d938bd3c12c978e5", 0x1000}], 0x4, &(0x7f0000001800)=[{0xf8, 0x117, 0xfffffffd, "ccbc6cd9895f6d0f55f256b6aa615b3ac0f6a090e02d68abe1ad1ae7e6b3738e71dfe6d4e4bd58bbaa3014a72105f45ebe7d37942db70aa82f27bf12e31239a5172a2bab68b52c292faa970d866a829f24fd06cd002c48bc4153891a90bccda494cf780ecec87f698a252e964d3efb9e2fe38946145882d19805072ee61eba5849e3410b477cb59e5cca9a9df580981a93294ddcb82ecb69445b58582145f07be178a1b043a0197db462a8cd8ede97ffc1eb33478044f130534616fda4b08ec5177fc0707f486b147cde2c4348807778e8082e2edb1d52aee1b5b596ede16f293c396c1c5c"}, {0x1010, 0x115, 0x7, "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"}, {0xe0, 0x103, 0x8, "e52426cbf13fdf3e1a7a1b4c59fa9387f83c9ed5f03512063f11f0e574bc906c79fe15d62c4bfcf79710f6deccc79f0bba637ab9f87370db207958c350825539044e499f60bb0151d7e36c4cd5d40ab31ee09adb10a0f30028169462152733374a29e49cbc216aabc34795ecc7d37e29931bb2eea5e0e19b6263b07dadd5c73d3f0b478961859ab1b37075eca986c68d1f7792bc7132a290bf5a8be817fa923e85297b4d283f7cf1d2a9cb6308e9baedc43e12412f2d9b3f529c78aa1bb86ddf90ed59bf58792ca88db8badd"}, {0x90, 0x0, 0x2b80000, "4289d0435c4932ca6d31cfc15a887e4180aca784c5e215a7134c6a7260b084969ff30af60e3a54c23a10ded77d7787d2b92f8b5979583d96872274b846b01381f176ad3dc360be314bf02a7d2dfd88ad1bcbfee83274020b7760affb20e8fbe9a2a330398c182f4f1a3a2cbf52242401fc28fe7705d3e875e88165"}, {0xe8, 0x116, 0x6, "ea75a9381cd013f3aa64f6c750534e09dd8e00e6a784b19d191b9db548d1e3c39a975206e419ca39b07e16253fdee58da3af0bb44aa49c9316bf4596f7889eef8aca73378dbf3fa9ae07b6f8a1e900d4d13ef2334351d7f86a1bb53a4fc538930744051447d8fff5735987d3f8ab6ecc526858a781203f13c020858dcbe01c2cf7847e6d69d85684864857272c0ae59190f6421e15385ec88d8eef041b11d8caec2b6066f449e821dd0c3a123ca2dab9ef455c8104936d875eb29372a59f72bd0660c7a567c04afbee26bc3e8aaa831b34c2fdca3a"}, {0x1010, 0x102, 0x0, "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"}, {0x108, 0x115, 0x7, "a3b85dcdf196366a2da419018e6dbc62c81142f86ac0b5b720712ef1f3d0c7e93b9e63b320972607afe63144782971b89423f8cd118069d48d62f9d7eb7316870f6b7738b489533bd6fccebf3632083396f128715a3c17c10039859246dfb80c53e3329f493c60c3774602b601fdb2e71d94711b32e07d833ed597dbdf703d991bdad4b7f478158f943d8e29bcf793f03bddddeaf44926b6e554e4154240ec6c2d9ff70d96c3a3f6913bddca21e343f2f59a453f11cd43c94e7f46acd8b4aec20e63671595720cfeda4c04feb2863b1fb9a38f9d46cef6f25e2a4881c95d06beb3d99ccbc576730628306cf84f289b7786f243c8d626"}], 0x2478}, 0x44840) setsockopt$inet_opts(r9, 0x0, 0x9, &(0x7f0000003cc0)="0a40ba128f689c5067199bd8057cbea969453c523757ff1211ffbb09844cc63f3294708240689a1090", 0x29) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r11, 0x8982, &(0x7f0000003d00)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003d40)) socket$netlink(0x10, 0x3, 0x4) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r8, 0x110, 0x3) setsockopt$WPAN_SECURITY(r8, 0x0, 0x1, &(0x7f0000003d80)=0x39d7f5afbf05ba78, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000003dc0)={'vxcan1\x00'}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003e40), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r12, &(0x7f0000003f00)={&(0x7f0000003e00)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000003ec0)={&(0x7f0000003e80)={0x40, r13, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 78.554304ms ago: executing program 1 (id=7256): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001980)=@newtaction={0x5c, 0x30, 0x109, 0x88470000, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) 0s ago: executing program 1 (id=7257): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000001c0)={0x6c, 0x2, 0x6, 0x1, 0x6000006, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x88a8, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) kernel console output (not intermixed with test programs): me changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 466.786253][T19737] netlink: 'syz.1.5160': attribute type 11 has an invalid length. [ 467.318246][T19763] netlink: 'syz.1.5165': attribute type 22 has an invalid length. [ 467.812761][T19789] tc_dump_action: action bad kind [ 467.997128][T19800] netlink: 'syz.3.5182': attribute type 1 has an invalid length. [ 468.017054][T19800] netlink: 'syz.3.5182': attribute type 1 has an invalid length. [ 468.317274][T19818] nbd0: detected capacity change from 100663296 to 0 [ 468.337228][T19818] nbd: socks must be embedded in a SOCK_ITEM attr [ 468.454851][T19827] nbd: socks must be embedded in a SOCK_ITEM attr [ 469.245688][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 469.785217][T19879] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 470.341476][T19894] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 470.634016][T19899] netlink: 'syz.3.5219': attribute type 1 has an invalid length. [ 470.665718][T19899] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 470.979473][T19906] netlink: 'syz.4.5222': attribute type 2 has an invalid length. [ 471.408924][T19917] team0: Port device macvlan2 added [ 471.717200][T19925] netlink: 'syz.2.5227': attribute type 4 has an invalid length. [ 471.859807][T19944] __nla_validate_parse: 17 callbacks suppressed [ 471.859831][T19944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5233'. [ 471.940443][T19944] nbd0: detected capacity change from 0 to 109051904 [ 471.981398][T19944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5233'. [ 472.116568][ C1] vcan0: j1939_tp_rxtimer: 0xffff888024142400: rx timeout, send abort [ 472.167624][T19955] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5240'. [ 472.288678][T19962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5241'. [ 472.315873][T19962] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5241'. [ 472.353234][T19962] Êü: entered promiscuous mode [ 472.507677][T19976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5248'. [ 472.548953][T19976] 8021q: adding VLAN 0 to HW filter on device bond3 [ 472.559557][T19976] bond0: (slave bond3): Enslaving as an active interface with an up link [ 472.624989][ C1] vcan0: j1939_tp_rxtimer: 0xffff888024142400: abort rx timeout. Force session deactivation [ 472.724228][T19987] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.748109][T19987] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5250'. [ 472.862410][T19991] ɶƣ0GCTw: entered promiscuous mode [ 472.885080][T19991] ɶƣ0GC¦: entered promiscuous mode [ 472.903978][T19991] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.5253'. [ 472.930119][T19996] netlink: 'syz.3.5255': attribute type 2 has an invalid length. [ 472.954886][T19996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5255'. [ 473.199393][T20008] netlink: 'syz.3.5260': attribute type 22 has an invalid length. [ 474.509439][T20025] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5261'. [ 475.433212][T20085] netlink: 'syz.1.5292': attribute type 1 has an invalid length. [ 475.453365][T20085] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 475.518633][T20077] nbd0: detected capacity change from 109051904 to 0 [ 475.610826][T20077] nbd: socks must be embedded in a SOCK_ITEM attr [ 476.114673][T20110] sctp: [Deprecated]: syz.3.5303 (pid 20110) Use of int in maxseg socket option. [ 476.114673][T20110] Use struct sctp_assoc_value instead [ 477.096808][T20147] openvswitch: netlink: Missing key (keys=40, expected=100) [ 477.111462][T20145] __nla_validate_parse: 5 callbacks suppressed [ 477.111486][T20145] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5315'. [ 477.140029][T20145] xt_bpf: check failed: parse error [ 477.193049][T20151] netlink: 'syz.3.5318': attribute type 1 has an invalid length. [ 477.222716][T20151] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 477.365853][T20162] IPv6: Can't replace route, no match found [ 477.414859][T20166] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5324'. [ 477.579818][T20173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5327'. [ 477.794977][T20188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5329'. [ 477.838350][T20191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5332'. [ 478.202546][T20202] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5338'. [ 478.670687][T20216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5336'. [ 478.688843][T20216] nbd: nbd0 already in use [ 479.511122][T20256] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 479.725187][T20260] netlink: 'syz.1.5358': attribute type 1 has an invalid length. [ 479.741608][T20260] netlink: 9352 bytes leftover after parsing attributes in process `syz.1.5358'. [ 479.754221][T20260] netlink: 'syz.1.5358': attribute type 1 has an invalid length. [ 479.768958][T20260] netlink: 'syz.1.5358': attribute type 2 has an invalid length. [ 480.257633][T20271] netlink: 'syz.3.5363': attribute type 22 has an invalid length. [ 480.302886][T20273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5362'. [ 480.351769][T20275] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 480.534365][T20280] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5366'. [ 480.609417][T20287] netlink: 'syz.1.5369': attribute type 1 has an invalid length. [ 480.703830][T20289] netlink: 'syz.4.5370': attribute type 11 has an invalid length. [ 481.939784][T20317] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 482.194353][T20330] xt_CT: You must specify a L4 protocol and not use inversions on it [ 482.894003][T20371] __nla_validate_parse: 2 callbacks suppressed [ 482.894026][T20371] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5404'. [ 483.086162][T20379] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5406'. [ 483.142923][T20379] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 483.204646][T20388] IPv6: Can't replace route, no match found [ 483.333906][T20396] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5415'. [ 483.565124][T20408] team0: Port device macvlan2 added [ 483.686838][T20413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5421'. [ 483.810441][T20417] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.836163][T20417] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.992827][T20424] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.000312][T20424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.021019][T20424] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.028355][T20424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.359487][T20445] netlink: 'syz.4.5433': attribute type 5 has an invalid length. [ 484.383109][T20449] No such timeout policy "syz0" [ 484.841508][T20466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5440'. [ 484.855034][T20466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5440'. [ 484.875048][T20466] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 485.021960][T20470] netlink: 'syz.1.5442': attribute type 3 has an invalid length. [ 485.057204][T20470] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5442'. [ 485.095486][ T4491] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 485.111083][ T4491] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 485.120484][ T4491] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 485.130148][ T4491] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 485.140937][ T4491] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 485.148757][ T4491] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 485.224269][T20476] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5445'. [ 485.332754][T20481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5444'. [ 485.481051][T20486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5448'. [ 485.530602][T20486] block nbd0: reconnected socket [ 485.536161][ T4491] block nbd0: Receive control failed (result -107) [ 485.844702][T20498] vlan2: entered promiscuous mode [ 485.975499][T20472] chnl_net:caif_netlink_parms(): no params data found [ 486.113319][T20519] netlink: 'syz.1.5457': attribute type 22 has an invalid length. [ 486.211014][T20472] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.218602][T20472] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.225936][T20472] bridge_slave_0: entered allmulticast mode [ 486.256323][T20472] bridge_slave_0: entered promiscuous mode [ 486.278165][T20472] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.285377][T20472] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.333851][T20472] bridge_slave_1: entered allmulticast mode [ 486.346391][T20472] bridge_slave_1: entered promiscuous mode [ 486.460995][T20472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.474694][T20472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.594123][T20472] team0: Port device team_slave_0 added [ 486.638755][T20472] team0: Port device team_slave_1 added [ 486.815983][T14936] bond1: left allmulticast mode [ 486.833663][T14936] bridge2: left allmulticast mode [ 486.844425][T14936] bond1: left promiscuous mode [ 486.865718][T14936] bridge2: left promiscuous mode [ 486.871643][T14936] bridge0: port 3(bond1) entered disabled state [ 486.878979][T20559] netlink: 'syz.1.5470': attribute type 1 has an invalid length. [ 486.888870][T14936] bridge_slave_1: left allmulticast mode [ 486.905058][T14936] bridge_slave_1: left promiscuous mode [ 486.911105][T14936] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.936005][T14936] bridge_slave_0: left allmulticast mode [ 486.942508][T14936] bridge_slave_0: left promiscuous mode [ 486.949168][T14936] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.252694][ T4491] Bluetooth: hci1: command tx timeout [ 487.482019][T14936] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 487.740605][T14936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 487.755370][T14936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 487.771567][T14936] bond0 (unregistering): Released all slaves [ 487.785879][T14936] bond1 (unregistering): Released all slaves [ 487.800602][T20472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.808318][T20472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.844337][T20472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.934055][T20558] __nla_validate_parse: 8 callbacks suppressed [ 487.934082][T20558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5468'. [ 488.016164][T20558] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5468'. [ 488.025728][T20558] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 488.047659][T20472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.068706][T20472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.097900][T20472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.443057][T20472] hsr_slave_0: entered promiscuous mode [ 488.461779][T20472] hsr_slave_1: entered promiscuous mode [ 488.470612][T20472] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 488.473893][T20576] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5477'. [ 488.487167][T20472] Cannot create hsr debugfs directory [ 488.525618][T20581] netlink: 'syz.4.5478': attribute type 5 has an invalid length. [ 488.623138][T14936] hsr_slave_0: left promiscuous mode [ 488.648356][T14936] hsr_slave_1: left promiscuous mode [ 488.669690][T14936] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.682043][T20589] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5479'. [ 488.686660][T14936] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.794873][T14936] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.803757][T14936] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.891348][T14936] veth1_macvtap: left promiscuous mode [ 488.897135][T14936] veth0_macvtap: left promiscuous mode [ 488.903055][T14936] veth1_vlan: left promiscuous mode [ 488.913114][T14936] veth0_vlan: left promiscuous mode [ 489.203941][T14936] team0 (unregistering): Port device macvlan2 removed [ 489.327245][ T4491] Bluetooth: hci1: command tx timeout [ 489.785998][T14936] team0 (unregistering): Port device team_slave_1 removed [ 489.860250][T14936] team0 (unregistering): Port device team_slave_0 removed [ 490.506332][T20605] netlink: 'syz.1.5487': attribute type 1 has an invalid length. [ 490.518926][T20605] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 491.302537][T20472] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.418290][ T4491] Bluetooth: hci1: command tx timeout [ 491.521580][T20472] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.764304][T20472] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.813669][T20665] netlink: 'syz.0.5504': attribute type 2 has an invalid length. [ 491.828808][T20665] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5504'. [ 491.872572][T20665] nbd: must specify a device to reconfigure [ 491.892705][T20669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5507'. [ 491.902709][T20669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5507'. [ 491.916354][T20472] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.934581][T20668] netlink: 248 bytes leftover after parsing attributes in process `syz.1.5505'. [ 492.183792][T20677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5511'. [ 492.199336][T20472] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 492.213489][T20676] netlink: 'syz.1.5510': attribute type 4 has an invalid length. [ 492.250493][T20472] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 492.270910][T20472] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 492.322061][T20472] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 492.539615][T20472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.612695][T20472] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.622523][T20693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5517'. [ 492.637364][T20693] block nbd0: reconnected socket [ 492.642402][ T4491] block nbd0: Receive control failed (result -107) [ 492.646222][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.656216][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.723031][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.730286][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.866424][T20472] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 492.937504][T20706] nbd0: detected capacity change from 0 to 2021654527 [ 492.946949][T20706] __nla_validate_parse: 3 callbacks suppressed [ 492.946969][T20706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5519'. [ 493.092348][T20714] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5522'. [ 493.114525][T20714] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5522'. [ 493.163267][T20472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.203946][T20709] netlink: 'syz.0.5513': attribute type 1 has an invalid length. [ 493.214625][T20714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5522'. [ 493.262079][T20717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5522'. [ 493.342698][T20709] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5513'. [ 493.351956][T20472] veth0_vlan: entered promiscuous mode [ 493.381869][T20725] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5526'. [ 493.394203][T20725] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 493.405959][T20472] veth1_vlan: entered promiscuous mode [ 493.482435][T20727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5527'. [ 493.493122][ T4491] Bluetooth: hci1: command tx timeout [ 493.500920][T20727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5527'. [ 493.532303][T20472] veth0_macvtap: entered promiscuous mode [ 493.586148][T20472] veth1_macvtap: entered promiscuous mode [ 493.594532][T20723] netlink: 'syz.2.5523': attribute type 1 has an invalid length. [ 493.643407][T20472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.655000][T20472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.674191][T20472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.688307][T20472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.699394][T20472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.711018][T20472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.721350][T20472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.734477][T20472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.750903][T20472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.854308][T20472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.870648][T20472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.896988][T20472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.916936][T20472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.940455][T20472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.955739][T20472] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.965068][T20472] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.978021][T20472] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.998134][T20472] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.193371][T14935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.210993][T20749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5537'. [ 494.220507][T14935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.239763][T20747] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 494.250479][T20747] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 494.340496][T14935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.358702][T14935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.378982][T20751] netlink: 'syz.4.5539': attribute type 1 has an invalid length. [ 494.588885][T20763] nbd: nbd0 already in use [ 494.759808][T20767] nbd0: detected capacity change from 2021654527 to 0 [ 494.778703][T20767] nbd: socks must be embedded in a SOCK_ITEM attr [ 494.940286][T20781] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 494.980983][T20786] delete_channel: no stack [ 495.051996][T20789] netlink: 'syz.1.5550': attribute type 7 has an invalid length. [ 495.064320][T20789] netlink: 'syz.1.5550': attribute type 39 has an invalid length. [ 495.134727][T20788] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 495.155668][T20794] x_tables: duplicate underflow at hook 1 [ 495.403808][T20806] netlink: 'syz.3.5558': attribute type 64 has an invalid length. [ 495.544494][T20814] No such timeout policy "syz0" [ 495.912486][T20829] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.970327][T20834] netlink: 'syz.1.5568': attribute type 1 has an invalid length. [ 496.327956][T20845] sch_tbf: burst 65535 is lower than device lo mtu (11337746) ! [ 497.291416][T20891] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 497.541305][T20908] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 497.828943][T20897] IPv6: NLM_F_CREATE should be specified when creating new route [ 497.986218][T20897] __nla_validate_parse: 16 callbacks suppressed [ 497.986245][T20897] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5586'. [ 498.217988][T20946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5603'. [ 498.248986][T20945] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5605'. [ 498.269377][T20945] vlan2: entered promiscuous mode [ 498.274657][T20945] bridge0: entered promiscuous mode [ 498.445297][T20950] netlink: 'syz.3.5607': attribute type 3 has an invalid length. [ 498.540681][T20954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5609'. [ 498.715706][T20963] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5613'. [ 498.736469][T20960] can: request_module (can-proto-0) failed. [ 498.903186][T20969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5611'. [ 498.927252][T20969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5611'. [ 498.965657][T20979] netlink: 'syz.1.5617': attribute type 1 has an invalid length. [ 499.085829][T20981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5619'. [ 499.100611][T20981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5619'. [ 499.113899][ T4491] block nbd0: Receive control failed (result -107) [ 499.121707][T20981] block nbd0: reconnected socket [ 499.390928][T20996] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 499.536439][T21004] debugfs: Directory 'netdev:nicvf0' with parent 'phy28' already present! [ 499.557772][T21004] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5629'. [ 499.691909][T21010] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 500.219135][T21033] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 500.246658][T21033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.268018][T21033] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 500.282225][T21033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.293167][T21033] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 500.305262][T21033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.318964][T21033] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 500.330453][T21033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.340809][T14936] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 500.704791][T21065] nbd: nbd0 already in use [ 500.989366][T21075] 8021q: adding VLAN 0 to HW filter on device bond1 [ 500.999275][T21075] bond0: (slave bond1): Enslaving as an active interface with an up link [ 501.515424][T21120] netlink: 'syz.1.5675': attribute type 1 has an invalid length. [ 501.640191][T21116] netlink: 'syz.2.5671': attribute type 1 has an invalid length. [ 502.043760][T21144] netlink: 'syz.4.5685': attribute type 13 has an invalid length. [ 503.173108][T21198] netlink: 'syz.4.5706': attribute type 50 has an invalid length. [ 503.398218][T21207] Cannot find add_set index 0 as target [ 503.462417][T21211] __nla_validate_parse: 14 callbacks suppressed [ 503.462448][T21211] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5711'. [ 503.849600][T21230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5716'. [ 503.876785][T21230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5716'. [ 504.016302][T21237] netlink: 'syz.0.5720': attribute type 2 has an invalid length. [ 504.043764][T21243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5719'. [ 504.365077][T21257] netlink: 'syz.3.5727': attribute type 1 has an invalid length. [ 504.377814][T21257] netlink: 9384 bytes leftover after parsing attributes in process `syz.3.5727'. [ 504.390008][T21257] netlink: 'syz.3.5727': attribute type 1 has an invalid length. [ 504.401010][T21257] netlink: 9384 bytes leftover after parsing attributes in process `syz.3.5727'. [ 504.412275][T21258] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5726'. [ 504.579278][T21265] x_tables: unsorted entry at hook 2 [ 505.004083][T21285] netlink: 'syz.3.5737': attribute type 5 has an invalid length. [ 505.027387][T21285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5737'. [ 505.045832][T21285] netlink: 252 bytes leftover after parsing attributes in process `syz.3.5737'. [ 505.060600][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 505.060961][T21289] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5739'. [ 505.441816][T21310] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 505.481107][T21314] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 505.506845][T21314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.525991][T21314] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 505.544733][T21314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.557000][T21314] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 505.577118][T21314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.600026][T21314] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 505.625554][T21314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.647894][T21314] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 505.659342][T21314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.707498][T21317] nbd0: detected capacity change from 0 to 2147483640 [ 505.834809][T21327] netlink: 'syz.3.5753': attribute type 22 has an invalid length. [ 506.141490][T21342] netlink: 'syz.0.5758': attribute type 3 has an invalid length. [ 506.305827][T21347] nbd: nbd0 already in use [ 506.755448][T21367] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 507.008263][T21370] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 507.019596][T21370] team0: Port device batadv1 added [ 507.218800][T21381] nbd: nbd0 already in use [ 507.606119][T21401] validate_nla: 1 callbacks suppressed [ 507.606144][T21401] netlink: 'syz.4.5778': attribute type 14 has an invalid length. [ 507.880372][T21413] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 507.900181][T21413] batadv_slave_0: entered allmulticast mode [ 508.265285][T21430] netlink: 'syz.4.5790': attribute type 14 has an invalid length. [ 508.455094][T21434] netlink: 'syz.1.5791': attribute type 10 has an invalid length. [ 508.534299][T21434] team0: Port device team_slave_0 removed [ 508.544624][T21435] netlink: 'syz.1.5791': attribute type 10 has an invalid length. [ 508.607004][T21449] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 508.853173][T21459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.923896][T21459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.945687][T21465] team0: Port device macvlan2 added [ 509.337773][T21483] __nla_validate_parse: 18 callbacks suppressed [ 509.337798][T21483] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5809'. [ 509.405851][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.431736][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.680855][T21494] sctp: [Deprecated]: syz.1.5815 (pid 21494) Use of int in max_burst socket option. [ 509.680855][T21494] Use struct sctp_assoc_value instead [ 509.777058][T21496] netlink: 'syz.4.5816': attribute type 14 has an invalid length. [ 509.924572][T21507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5812'. [ 509.973523][T21510] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5819'. [ 510.003201][T21507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5812'. [ 510.186034][T21522] netlink: 6 bytes leftover after parsing attributes in process `syz.4.5823'. [ 510.314312][T21534] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 510.327537][T21534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.338704][T21534] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 510.371500][T21534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.408213][T21534] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 510.430900][T21534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.442014][T21534] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 510.457836][T21534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.470360][T21534] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 510.488931][T21534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.725982][T21548] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5834'. [ 510.922774][T21559] netlink: 'syz.1.5839': attribute type 3 has an invalid length. [ 510.935695][T21559] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5839'. [ 510.974690][T21556] A link change request failed with some changes committed already. Interface veth0_to_hsr may have been left with an inconsistent configuration, please check. [ 511.004849][T21562] FAULT_INJECTION: forcing a failure. [ 511.004849][T21562] name failslab, interval 1, probability 0, space 0, times 0 [ 511.021699][T21560] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5838'. [ 511.045413][T21562] CPU: 1 PID: 21562 Comm: syz.1.5840 Not tainted 6.10.0-rc7-syzkaller-02016-g77ae5e5b0072 #0 [ 511.055643][T21562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 511.065725][T21562] Call Trace: [ 511.069018][T21562] [ 511.071957][T21562] dump_stack_lvl+0x241/0x360 [ 511.076660][T21562] ? __pfx_dump_stack_lvl+0x10/0x10 [ 511.081878][T21562] ? __pfx__printk+0x10/0x10 [ 511.086582][T21562] ? __pfx___might_resched+0x10/0x10 [ 511.091910][T21562] should_fail_ex+0x3b0/0x4e0 [ 511.096625][T21562] ? skb_clone+0x20c/0x390 [ 511.101088][T21562] should_failslab+0x9/0x20 [ 511.105604][T21562] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 511.111007][T21562] skb_clone+0x20c/0x390 [ 511.115262][T21562] nfnetlink_rcv+0x575/0x2a90 [ 511.119985][T21562] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 511.125813][T21562] ? __dev_queue_xmit+0x1763/0x3e90 [ 511.131030][T21562] ? kasan_save_track+0x51/0x80 [ 511.135909][T21562] ? do_syscall_64+0xf3/0x230 [ 511.140605][T21562] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 511.145762][T21562] ? ref_tracker_free+0x643/0x7e0 [ 511.150801][T21562] ? __asan_memcpy+0x40/0x70 [ 511.155493][T21562] ? __pfx_ref_tracker_free+0x10/0x10 [ 511.160893][T21562] ? netlink_deliver_tap+0x2e/0x1b0 [ 511.166110][T21562] ? skb_clone+0x240/0x390 [ 511.170543][T21562] ? __pfx_lock_release+0x10/0x10 [ 511.175581][T21562] ? __netlink_deliver_tap+0x77e/0x7c0 [ 511.181065][T21562] ? netlink_deliver_tap+0x2e/0x1b0 [ 511.186281][T21562] netlink_unicast+0x7f0/0x990 [ 511.191082][T21562] ? __pfx_netlink_unicast+0x10/0x10 [ 511.196381][T21562] ? __virt_addr_valid+0x183/0x530 [ 511.201528][T21562] ? __check_object_size+0x49c/0x900 [ 511.206869][T21562] ? bpf_lsm_netlink_send+0x9/0x10 [ 511.212001][T21562] netlink_sendmsg+0x8e4/0xcb0 [ 511.216798][T21562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 511.222101][T21562] ? __import_iovec+0x536/0x820 [ 511.227053][T21562] ? aa_sock_msg_perm+0x91/0x160 [ 511.232006][T21562] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 511.237302][T21562] ? security_socket_sendmsg+0x87/0xb0 [ 511.242777][T21562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 511.248076][T21562] __sock_sendmsg+0x221/0x270 [ 511.252774][T21562] ____sys_sendmsg+0x525/0x7d0 [ 511.257556][T21562] ? __pfx_____sys_sendmsg+0x10/0x10 [ 511.262863][T21562] __sys_sendmsg+0x2b0/0x3a0 [ 511.267470][T21562] ? __pfx___sys_sendmsg+0x10/0x10 [ 511.272592][T21562] ? vfs_write+0x7c4/0xc90 [ 511.277058][T21562] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 511.283398][T21562] ? do_syscall_64+0x100/0x230 [ 511.288180][T21562] ? do_syscall_64+0xb6/0x230 [ 511.292873][T21562] do_syscall_64+0xf3/0x230 [ 511.297402][T21562] ? clear_bhb_loop+0x35/0x90 [ 511.302106][T21562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.308025][T21562] RIP: 0033:0x7f80d7b75a19 [ 511.312460][T21562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.332082][T21562] RSP: 002b:00007f80d8a22048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 511.340513][T21562] RAX: ffffffffffffffda RBX: 00007f80d7d03f60 RCX: 00007f80d7b75a19 [ 511.348502][T21562] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 511.356527][T21562] RBP: 00007f80d8a220a0 R08: 0000000000000000 R09: 0000000000000000 [ 511.364517][T21562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.372500][T21562] R13: 000000000000004d R14: 00007f80d7d03f60 R15: 00007ffde489a5f8 [ 511.380526][T21562] [ 511.630407][T21576] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 511.775543][T21580] –eth0_vlan: renamed from bridge_slave_1 [ 511.858752][T21584] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5846'. [ 511.876189][T21584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5846'. [ 512.331005][T21609] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 38779 - 0 [ 512.352373][T21609] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 38779 - 0 [ 512.375603][T21609] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 38779 - 0 [ 512.395106][T21609] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 38779 - 0 [ 512.418729][T21609] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 35619 - 0 [ 512.437775][T21609] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 35619 - 0 [ 512.467178][T21609] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 35619 - 0 [ 512.497830][T21609] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 35619 - 0 [ 512.978511][T21629] netlink: 'syz.0.5847': attribute type 64 has an invalid length. [ 513.397260][T21655] netlink: 'syz.4.5873': attribute type 2 has an invalid length. [ 513.988994][T21682] nbd0: detected capacity change from 2147483640 to 0 [ 513.996229][ T4491] block nbd0: Receive control failed (result -107) [ 514.007883][T21682] block nbd0: reconnected socket [ 514.377772][T21712] __nla_validate_parse: 7 callbacks suppressed [ 514.377803][T21712] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5897'. [ 514.398659][T21713] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5897'. [ 514.781046][T21734] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5905'. [ 514.988254][T21744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5909'. [ 515.126395][T21750] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5911'. [ 515.169504][T21751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5912'. [ 515.506115][T21759] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5914'. [ 516.001715][T21781] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5924'. [ 516.447823][T21805] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5933'. [ 516.458079][T21805] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 517.012822][T21836] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 517.223024][T21847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5949'. [ 518.510565][T21858] netlink: 'syz.4.5955': attribute type 5 has an invalid length. [ 519.082555][T21871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.124496][T21864] tipc: Enabling of bearer rejected, failed to enable media [ 519.551304][T21877] __nla_validate_parse: 2 callbacks suppressed [ 519.551328][T21877] netlink: 766 bytes leftover after parsing attributes in process `syz.0.5959'. [ 519.703328][T21883] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5962'. [ 519.835657][T21889] netlink: 'syz.3.5966': attribute type 64 has an invalid length. [ 519.845772][T21889] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 519.952168][T21894] x_tables: unsorted entry at hook 2 [ 520.202839][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802ea6d000: rx timeout, send abort [ 520.404145][T21923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5979'. [ 520.418149][T21923] nbd: nbd0 already in use [ 520.515499][T21929] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5981'. [ 520.529220][T21929] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5981'. [ 520.664269][T21939] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5984'. [ 520.711198][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802ea6d000: abort rx timeout. Force session deactivation [ 521.030478][T21960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5991'. [ 521.101464][T21960] netlink: 'syz.1.5991': attribute type 14 has an invalid length. [ 521.110320][T21964] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5992'. [ 521.202427][T21963] pimreg: entered allmulticast mode [ 521.260130][ T5106] Bluetooth: hci1: command 0x0405 tx timeout [ 521.265712][T21968] netlink: 'syz.3.5994': attribute type 29 has an invalid length. [ 521.299790][T21968] netlink: 'syz.3.5994': attribute type 29 has an invalid length. [ 521.325144][T21975] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5993'. [ 521.365401][T21968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5994'. [ 521.647991][T21988] netlink: 'syz.1.6002': attribute type 4 has an invalid length. [ 521.887596][T22003] nbd: must specify a device to reconfigure [ 522.089586][T22010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.121740][T22010] batadv_slave_0: entered allmulticast mode [ 522.526440][T22021] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 53086 - 0 [ 522.561165][T22021] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 53086 - 0 [ 522.577088][T22021] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 53086 - 0 [ 522.602761][T22021] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 53086 - 0 [ 522.618190][T22021] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 37218 - 0 [ 522.639718][T22021] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 37218 - 0 [ 522.656921][T22021] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 37218 - 0 [ 522.679279][T22021] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 37218 - 0 [ 523.069383][T22038] "syz.0.6012" (22038) uses obsolete ecb(arc4) skcipher [ 524.030808][T22058] team0 (unregistering): Port device team_slave_1 removed [ 524.521445][ T5101] block nbd0: Receive control failed (result -107) [ 524.529805][T22098] block nbd0: reconnected socket [ 524.609068][ T5101] Bluetooth: hci2: command 0x0405 tx timeout [ 524.873701][T22106] __nla_validate_parse: 11 callbacks suppressed [ 524.873725][T22106] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6043'. [ 524.935821][T22120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6048'. [ 525.100348][T22128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6050'. [ 525.112489][T22129] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6052'. [ 525.139593][T22128] wg1 speed is unknown, defaulting to 1000 [ 525.152808][T22128] wg1 speed is unknown, defaulting to 1000 [ 525.182540][T22131] netlink: 'syz.1.6051': attribute type 1 has an invalid length. [ 525.195868][T22128] wg1 speed is unknown, defaulting to 1000 [ 525.210825][T22131] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.6051'. [ 525.261516][T22136] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6052'. [ 525.505463][T22128] infiniband syz1: set active [ 525.515874][ T5152] wg1 speed is unknown, defaulting to 1000 [ 525.535127][T22128] infiniband syz1: added wg1 [ 525.752146][T22128] RDS/IB: syz1: added [ 525.780798][T22128] smc: adding ib device syz1 with port count 1 [ 525.799519][T22128] smc: ib device syz1 port 1 has pnetid [ 525.819070][ T25] wg1 speed is unknown, defaulting to 1000 [ 525.868413][T22128] wg1 speed is unknown, defaulting to 1000 [ 526.126236][T22158] tunl0: entered promiscuous mode [ 526.160576][T22158] netlink: 'syz.3.6059': attribute type 1 has an invalid length. [ 526.187614][T22158] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6059'. [ 526.214346][T22128] wg1 speed is unknown, defaulting to 1000 [ 526.221849][T22161] netlink: 'syz.1.6060': attribute type 11 has an invalid length. [ 526.301066][T22158] can: request_module (can-proto-0) failed. [ 526.329395][T22165] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6061'. [ 526.454364][T22169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6063'. [ 526.594573][T22171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6064'. [ 526.650074][T22128] wg1 speed is unknown, defaulting to 1000 [ 526.669685][ T4491] block nbd3: Receive control failed (result -107) [ 527.071169][T22188] ÿÿÿ: renamed from vlan1 (while UP) [ 527.106278][T22128] wg1 speed is unknown, defaulting to 1000 [ 527.325687][T22192] netlink: 'syz.1.6072': attribute type 5 has an invalid length. [ 527.377379][T22128] wg1 speed is unknown, defaulting to 1000 [ 527.674762][T22195] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.728955][T22128] wg1 speed is unknown, defaulting to 1000 [ 527.962562][T22208] macvlan3: entered allmulticast mode [ 528.009882][T22208] team_slave_0: entered promiscuous mode [ 528.016004][T22208] team_slave_1: entered promiscuous mode [ 528.057259][T22208] team0: entered allmulticast mode [ 528.072965][T22208] team_slave_0: entered allmulticast mode [ 528.085242][T22212] ip6t_REJECT: ECHOREPLY is not supported [ 528.101692][T22208] team_slave_1: entered allmulticast mode [ 528.108310][T22208] macvlan2: entered allmulticast mode [ 528.114117][T22208] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 528.124067][T22208] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 528.138575][T22208] bond0: (slave macvlan3): Enslaving as an active interface with an up link [ 528.152122][T22128] wg1 speed is unknown, defaulting to 1000 [ 528.280768][T22217] netlink: 'syz.3.6080': attribute type 22 has an invalid length. [ 529.205868][T22258] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.508059][T22265] netlink: 'syz.0.6097': attribute type 6 has an invalid length. [ 529.692223][T22272] block nbd0: reconnected socket [ 529.692268][ T5101] block nbd0: Receive control failed (result -107) [ 529.905755][T22280] No such timeout policy "syz0" [ 529.984648][T22283] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 530.010471][T22283] gretap1: entered promiscuous mode [ 530.022988][T22283] gretap1: entered allmulticast mode [ 530.130490][ T5101] Bluetooth: hci1: command 0x0405 tx timeout [ 530.251642][T22292] __nla_validate_parse: 7 callbacks suppressed [ 530.251671][T22292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6102'. [ 530.337792][T22292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6102'. [ 530.368848][ T4491] block nbd0: Receive control failed (result -107) [ 530.375677][T22292] block nbd0: reconnected socket [ 530.643586][T22321] pimreg: entered allmulticast mode [ 530.659363][T22320] netlink: 55 bytes leftover after parsing attributes in process `syz.1.6117'. [ 530.852725][T22331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6120'. [ 530.877811][T22331] nbd: socks must be embedded in a SOCK_ITEM attr [ 530.878296][T22327] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6118'. [ 531.306443][T22361] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6129'. [ 531.378711][T14936] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 531.430247][T22366] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6131'. [ 531.514840][T22372] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6133'. [ 531.929672][T22389] –eth0_vlan: renamed from bridge_slave_1 (while UP) [ 531.971452][T22389] bridge0: port 2(–eth0_vlan) entered disabled state [ 532.102013][T22369] IPVS: set_ctl: invalid protocol: 0 172.20.20.36:20001 [ 532.472354][T22412] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6145'. [ 532.483043][T22412] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 532.515138][T22412] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 532.629204][T22415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6146'. [ 532.662794][T22419] 8021q: adding VLAN 0 to HW filter on device bond1 [ 532.673699][T22419] bond0: (slave bond1): Enslaving as an active interface with an up link [ 533.131066][T22444] netlink: 'syz.3.6156': attribute type 64 has an invalid length. [ 533.514304][T22460] wg1 speed is unknown, defaulting to 1000 [ 535.320062][T22532] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 535.385009][T22532] __nla_validate_parse: 8 callbacks suppressed [ 535.385033][T22532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6190'. [ 535.456236][T22538] x_tables: unsorted entry at hook 2 [ 535.489055][T22537] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 536.060166][T22561] sctp: [Deprecated]: syz.3.6201 (pid 22561) Use of struct sctp_assoc_value in delayed_ack socket option. [ 536.060166][T22561] Use struct sctp_sack_info instead [ 536.233131][T22578] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6205'. [ 536.350379][T22581] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6206'. [ 536.557389][T22591] netlink: 105108 bytes leftover after parsing attributes in process `syz.4.6214'. [ 536.567666][T22591] netlink: 'syz.4.6214': attribute type 1 has an invalid length. [ 536.575447][T22591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6214'. [ 536.733797][T22599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6217'. [ 536.754828][T22601] netlink: 'syz.3.6215': attribute type 4 has an invalid length. [ 536.843637][T22606] netlink: 208 bytes leftover after parsing attributes in process `syz.0.6211'. [ 537.486012][T22642] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6226'. [ 537.643847][T22647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6228'. [ 538.031183][T22668] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 538.225195][T22675] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6242'. [ 538.327690][T22681] netlink: 'syz.4.6244': attribute type 2 has an invalid length. [ 538.558805][T22695] netlink: 'syz.1.6248': attribute type 22 has an invalid length. [ 539.100473][T22728] netlink: 'syz.3.6263': attribute type 4 has an invalid length. [ 539.861107][T22767] netlink: 'syz.3.6282': attribute type 13 has an invalid length. [ 540.351643][T22800] nbd: must specify a device to reconfigure [ 540.385008][T22801] netlink: 'syz.1.6295': attribute type 1 has an invalid length. [ 540.409006][T22801] __nla_validate_parse: 9 callbacks suppressed [ 540.409029][T22801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6295'. [ 540.646315][T22810] netlink: 184 bytes leftover after parsing attributes in process `syz.1.6299'. [ 540.668951][T22810] netlink: 'syz.1.6299': attribute type 1 has an invalid length. [ 540.729063][T22824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.750029][T22824] batadv_slave_0: entered allmulticast mode [ 541.017372][T22839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6307'. [ 541.074248][T22839] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6307'. [ 541.106425][T22839] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 541.132483][T22846] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6309'. [ 541.254197][T22850] xt_recent: hitcount (2147483648) is larger than allowed maximum (65535) [ 541.280127][T22855] netlink: 300 bytes leftover after parsing attributes in process `syz.1.6313'. [ 541.591043][T22874] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6321'. [ 541.619658][T22878] netlink: 212 bytes leftover after parsing attributes in process `syz.3.6324'. [ 541.622260][T22874] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6321'. [ 541.900648][T22883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6315'. [ 542.384133][ T5101] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 542.401931][ T5101] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 542.414915][ T5101] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 542.439228][ T5101] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 542.449829][ T5101] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 542.459660][ T5101] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 542.550407][T22910] syz.1.6336 (22910) used greatest stack depth: 16952 bytes left [ 542.582849][T22920] netlink: 'syz.0.6339': attribute type 10 has an invalid length. [ 542.592468][T22920] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 542.797144][T22912] wg1 speed is unknown, defaulting to 1000 [ 543.019487][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.045599][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 38779 - 0 [ 543.071690][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 35619 - 0 [ 543.321529][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.342751][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 38779 - 0 [ 543.364920][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 35619 - 0 [ 543.648509][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.661483][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 38779 - 0 [ 543.689817][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 35619 - 0 [ 543.819537][ T11] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.837468][ T11] netdevsim netdevsim3  (unregistering): unset [1, 1] type 2 family 0 port 38779 - 0 [ 543.857113][ T11] netdevsim netdevsim3  (unregistering): unset [1, 2] type 2 family 0 port 35619 - 0 [ 543.944716][T22967] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 544.307248][T22989] x_tables: unsorted entry at hook 2 [ 544.387036][T22912] chnl_net:caif_netlink_parms(): no params data found [ 544.430625][ T29] audit: type=1107 audit(1721200117.087:3): pid=22992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='­:ä˜åØÔY$øÉǿnJđ5…£ ƠƯ9Iàcc}·Ö¨“ Vä}L(‡¿Î¤Oé*?Sư\H¤SsdÄȈùLâ©YÛ‚ÓD|·ỤªsH;‰Éó=' [ 544.523715][ T11] –eth0_vlan: left allmulticast mode [ 544.530539][ T11] –eth0_vlan: left promiscuous mode [ 544.536157][ T11] bridge0: port 2(–eth0_vlan) entered disabled state [ 544.536927][ T4491] Bluetooth: hci4: command tx timeout [ 544.551220][T22998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 544.557232][T23000] netlink: 'syz.4.6371': attribute type 1 has an invalid length. [ 544.572612][ T11] bridge_slave_0: left allmulticast mode [ 544.581668][ T11] bridge_slave_0: left promiscuous mode [ 544.588182][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.548325][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 545.577390][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 545.595430][ T11] bond0 (unregistering): (slave macvlan3): Releasing backup interface [ 545.613729][ T11] team0: left allmulticast mode [ 545.619377][ T11] team_slave_0: left allmulticast mode [ 545.625612][ T11] team_slave_1: left allmulticast mode [ 545.633516][ T11] macvlan2: left allmulticast mode [ 545.640729][ T11] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 545.648928][ T11] team_slave_0: left promiscuous mode [ 545.654946][ T11] team_slave_1: left promiscuous mode [ 545.669957][ T11] bond0 (unregistering): (slave bond1): Releasing backup interface [ 545.680177][ T11] bond0 (unregistering): Released all slaves [ 545.865134][ T11] bond1 (unregistering): Released all slaves [ 545.881506][T22995] bridge0: entered promiscuous mode [ 545.888637][T22995] bridge0: entered allmulticast mode [ 546.038895][T23005] __nla_validate_parse: 13 callbacks suppressed [ 546.038918][T23005] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6372'. [ 546.181317][T23023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6376'. [ 546.320060][T23027] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6378'. [ 546.596977][T22912] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.604221][T22912] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.616174][ T4491] Bluetooth: hci4: command tx timeout [ 546.653340][T22912] bridge_slave_0: entered allmulticast mode [ 546.669641][T22912] bridge_slave_0: entered promiscuous mode [ 546.703405][T22912] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.711449][T22912] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.719025][T22912] bridge_slave_1: entered allmulticast mode [ 546.729225][T22912] bridge_slave_1: entered promiscuous mode [ 546.875040][T23045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6383'. [ 546.885648][T23045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6383'. [ 547.006956][T22912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.038204][T23050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6385'. [ 547.055633][T23055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6387'. [ 547.066012][T23050] netlink: 'syz.1.6385': attribute type 19 has an invalid length. [ 547.087620][T23055] nbd: nbd0 already in use [ 547.257243][T23053] vlan1: entered allmulticast mode [ 547.262463][T23053] macvlan0: entered allmulticast mode [ 547.334921][T23053] macvlan0: left allmulticast mode [ 547.417219][T22912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.452829][ T11] hsr_slave_0: left promiscuous mode [ 547.465560][ T11] hsr_slave_1: left promiscuous mode [ 547.473438][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.492691][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 547.509638][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 547.564986][ T11] veth1_macvtap: left promiscuous mode [ 547.571901][ T11] veth0_macvtap: left promiscuous mode [ 547.578345][ T11] veth1_vlan: left promiscuous mode [ 547.583821][ T11] veth0_vlan: left promiscuous mode [ 547.923183][ T11] team0 (unregistering): Port device macvlan2 removed [ 547.980208][T23084] netlink: 172 bytes leftover after parsing attributes in process `syz.1.6394'. [ 548.566241][ T11] team0 (unregistering): Port device team_slave_1 removed [ 548.652289][ T11] team0 (unregistering): Port device team_slave_0 removed [ 548.694609][ T4491] Bluetooth: hci4: command tx timeout [ 549.302316][T23069] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6391'. [ 549.317455][T23069] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 549.386709][T23085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6392'. [ 549.481985][T23087] bond3: (slave vcan0): The slave device specified does not support setting the MAC address [ 549.497028][T23087] bond3: (slave vcan0): Error -95 calling set_mac_address [ 549.518145][T22912] team0: Port device team_slave_0 added [ 549.563976][T23096] team0: Port device macvlan3 added [ 549.602741][T22912] team0: Port device team_slave_1 added [ 549.724014][T22912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.742684][T22912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.775530][T22912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.824860][T22912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.832567][T22912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.868706][T22912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.110586][T22912] hsr_slave_0: entered promiscuous mode [ 550.142015][T22912] hsr_slave_1: entered promiscuous mode [ 550.173642][T22912] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 550.192382][T22912] Cannot create hsr debugfs directory [ 550.293196][T23123] IPVS: length: 24 != 36888 [ 550.778309][ T4491] Bluetooth: hci4: command tx timeout [ 551.122177][T22912] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 551.174352][T22912] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 551.211131][T22912] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 551.227795][T22912] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 551.374278][T23172] netlink: 'syz.2.6420': attribute type 11 has an invalid length. [ 551.385918][T22912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.433407][T22912] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.470536][ T5183] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.477852][ T5183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.505268][ T5183] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.512539][ T5183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.654990][T22912] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 552.112430][T22912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.193082][T23202] C: renamed from lo (while UP) [ 552.202785][T23202] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 552.251073][T23206] __nla_validate_parse: 3 callbacks suppressed [ 552.251097][T23206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6431'. [ 552.293517][T23206] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.302610][T23206] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.311815][T23206] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.321056][T23206] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.334649][T23206] vxlan0: entered promiscuous mode [ 552.345368][T23200] netlink: 'syz.0.6432': attribute type 10 has an invalid length. [ 552.405850][T23200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.489284][T22912] veth0_vlan: entered promiscuous mode [ 552.517782][T22912] veth1_vlan: entered promiscuous mode [ 552.575721][T22912] veth0_macvtap: entered promiscuous mode [ 552.611298][T22912] veth1_macvtap: entered promiscuous mode [ 552.654898][T22912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.673678][T22912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.685669][T22912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.698618][T22912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.711918][T22912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 552.742446][T22912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.753537][T22912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.783070][T22912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 552.801228][T22912] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.811068][T22912] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.823510][T22912] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.829252][T23229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6441'. [ 552.851182][T23229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6441'. [ 552.859698][T22912] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.867883][T23229] block nbd0: reconnected socket [ 552.872633][ T4491] block nbd0: Receive control failed (result -107) [ 553.139775][T23239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6445'. [ 553.186691][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.194755][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.313473][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.349017][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.370320][T23248] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6449'. [ 553.417751][T23248] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6449'. [ 553.427520][T23248] netlink: 55 bytes leftover after parsing attributes in process `syz.4.6449'. [ 553.440570][T23248] netlink: 55 bytes leftover after parsing attributes in process `syz.4.6449'. [ 553.562226][T23254] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 553.584927][T23254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.597415][T23254] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 553.609350][T23254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.619685][T23254] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 553.637711][T23254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.670795][T23254] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 553.691006][T23254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.724304][T23262] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 553.906786][T23272] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6458'. [ 553.915807][T23272] nbd: must specify a device to reconfigure [ 554.437995][T23300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6466'. [ 554.796388][T23316] bond0: entered promiscuous mode [ 554.811036][T23316] bond_slave_0: entered promiscuous mode [ 554.828782][T23316] bond_slave_1: entered promiscuous mode [ 554.867420][T23321] netlink: 'syz.3.6473': attribute type 5 has an invalid length. [ 554.915054][T23323] x_tables: duplicate underflow at hook 3 [ 555.307289][T23346] openvswitch: netlink: Missing key (keys=40, expected=100) [ 555.336682][T23342] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 556.283190][T23390] netlink: 'syz.1.6501': attribute type 64 has an invalid length. [ 556.478002][T23395] ipip0: entered promiscuous mode [ 557.535657][T23435] __nla_validate_parse: 6 callbacks suppressed [ 557.535685][T23435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6520'. [ 558.023410][T23467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6525'. [ 558.360227][T23478] x_tables: unsorted entry at hook 2 [ 558.391752][T23475] netlink: 184 bytes leftover after parsing attributes in process `syz.4.6529'. [ 559.027806][T23497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 559.052630][T23500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6536'. [ 559.188081][T23505] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 559.657024][T23513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6542'. [ 559.885136][T23519] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 560.708347][T23539] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6551'. [ 560.945761][T23543] IPv6: Can't replace route, no match found [ 560.956927][T23544] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6554'. [ 561.381153][T23555] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6553'. [ 561.444529][T23555] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6553'. [ 562.297368][T23570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6561'. [ 562.438861][T23575] 8021q: adding VLAN 0 to HW filter on device bond2 [ 562.488975][T23575] bond0: (slave bond2): Enslaving as an active interface with an up link [ 562.501603][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 562.817433][T23588] __nla_validate_parse: 1 callbacks suppressed [ 562.817462][T23588] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6568'. [ 563.105748][T23595] netlink: 'syz.3.6572': attribute type 1 has an invalid length. [ 563.119030][T23595] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 563.173120][T23601] dccp_invalid_packet: P.Data Offset(172) too large [ 563.402449][T23616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 563.615977][T23628] netlink: 'syz.4.6583': attribute type 12 has an invalid length. [ 563.627038][T23628] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6583'. [ 563.731654][T23634] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6585'. [ 563.758479][T23634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6585'. [ 563.783342][T23634] netlink: 55 bytes leftover after parsing attributes in process `syz.0.6585'. [ 563.834750][T23634] netlink: 55 bytes leftover after parsing attributes in process `syz.0.6585'. [ 563.844137][T23638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6587'. [ 563.844178][T23638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6587'. [ 563.844381][ T4491] block nbd0: Receive control failed (result -107) [ 563.866877][T23638] block nbd0: reconnected socket [ 564.125136][T23649] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6591'. [ 564.169287][T23649] netlink: 'syz.4.6591': attribute type 6 has an invalid length. [ 564.183250][T23649] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6591'. [ 564.225620][T23649] wg1 speed is unknown, defaulting to 1000 [ 565.166977][T23676] netlink: 'syz.1.6602': attribute type 1 has an invalid length. [ 565.998559][T23714] Bluetooth: MGMT ver 1.23 [ 566.003382][T23714] Bluetooth: hci3: unsupported parameter 64512 [ 566.014143][T23714] Bluetooth: hci3: invalid length 0, exp 2 for type 4 [ 566.613897][T23749] netlink: 'syz.1.6630': attribute type 11 has an invalid length. [ 566.633794][T23750] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 566.641165][T23750] IPv6: NLM_F_CREATE should be set when creating new route [ 566.883228][T23762] netlink: 'syz.4.6634': attribute type 1 has an invalid length. [ 566.927080][T23766] netlink: 'syz.1.6636': attribute type 2 has an invalid length. [ 567.113746][T23762] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 567.162259][T23762] bond3: (slave batadv2): Enslaving as a backup interface with an up link [ 567.296208][T23787] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 568.073320][T23824] netlink: 'syz.1.6656': attribute type 8 has an invalid length. [ 568.117323][T23826] netlink: 'syz.4.6654': attribute type 5 has an invalid length. [ 568.165619][T23826] : entered promiscuous mode [ 568.192066][T23832] __nla_validate_parse: 6 callbacks suppressed [ 568.192091][T23832] netlink: 116 bytes leftover after parsing attributes in process `syz.4.6654'. [ 568.281222][T23832] tipc: Disabling bearer [ 568.424260][T23834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6651'. [ 568.447163][T23838] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6659'. [ 568.540454][T23842] dccp_xmit_packet: Payload too large (65475) for featneg. [ 568.690695][T23848] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6664'. [ 568.801525][T23846] netlink: 'syz.3.6663': attribute type 6 has an invalid length. [ 568.807055][T23857] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6663'. [ 568.812410][T23852] 8021q: adding VLAN 0 to HW filter on device bond2 [ 568.828130][T23852] bond0: (slave bond2): Enslaving as an active interface with an up link [ 569.030824][T23872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6670'. [ 569.252002][T23880] netlink: 'syz.3.6673': attribute type 1 has an invalid length. [ 569.259809][T23882] netlink: 'syz.1.6671': attribute type 5 has an invalid length. [ 569.370474][T23882] : entered promiscuous mode [ 569.408106][T23878] netlink: 116 bytes leftover after parsing attributes in process `syz.1.6671'. [ 569.456960][T23878] –eth0_vlan: left allmulticast mode [ 569.475819][T23878] –eth0_vlan: left promiscuous mode [ 569.484029][T23878] bridge0: port 2(–eth0_vlan) entered disabled state [ 569.518665][T23878] bridge_slave_0: left allmulticast mode [ 569.524459][T23878] bridge_slave_0: left promiscuous mode [ 569.531755][T23878] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.611119][T23887] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6675'. [ 569.670943][T23888] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 569.692453][T23888] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 570.089933][T23920] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6686'. [ 570.099560][T23920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6686'. [ 570.245032][T23925] netlink: 'syz.3.6688': attribute type 5 has an invalid length. [ 570.273663][T23925] : entered promiscuous mode [ 570.300520][T23925] bridge_slave_1: left allmulticast mode [ 570.316835][T23925] bridge_slave_1: left promiscuous mode [ 570.323074][T23925] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.337202][T23925] bridge_slave_0: left allmulticast mode [ 570.373072][T23925] bridge_slave_0: left promiscuous mode [ 570.392505][T23925] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.538690][T23983] netlink: 'syz.1.6704': attribute type 5 has an invalid length. [ 571.573173][T23983] openvswitch: : Dropping previously announced user features [ 572.035842][T24008] sctp: [Deprecated]: syz.1.6716 (pid 24008) Use of struct sctp_assoc_value in delayed_ack socket option. [ 572.035842][T24008] Use struct sctp_sack_info instead [ 572.062079][T24009] netlink: 'syz.1.6716': attribute type 21 has an invalid length. [ 572.239299][T24022] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 572.705787][T24041] netlink: 'syz.3.6728': attribute type 1 has an invalid length. [ 572.953189][T24052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 572.964475][T24056] dccp_xmit_packet: Payload too large (65475) for featneg. [ 573.260118][T24069] __nla_validate_parse: 11 callbacks suppressed [ 573.260143][T24069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6738'. [ 573.314301][T24074] FAULT_INJECTION: forcing a failure. [ 573.314301][T24074] name failslab, interval 1, probability 0, space 0, times 0 [ 573.342229][T24074] CPU: 1 PID: 24074 Comm: syz.2.6739 Not tainted 6.10.0-rc7-syzkaller-02016-g77ae5e5b0072 #0 [ 573.352470][T24074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 573.362569][T24074] Call Trace: [ 573.365904][T24074] [ 573.368958][T24074] dump_stack_lvl+0x241/0x360 [ 573.373716][T24074] ? __pfx_dump_stack_lvl+0x10/0x10 [ 573.378970][T24074] ? __pfx__printk+0x10/0x10 [ 573.383700][T24074] ? __pfx___might_resched+0x10/0x10 [ 573.389055][T24074] should_fail_ex+0x3b0/0x4e0 [ 573.393878][T24074] ? alloc_pipe_info+0x1ff/0x4d0 [ 573.398886][T24074] should_failslab+0x9/0x20 [ 573.403441][T24074] __kmalloc_noprof+0xd8/0x400 [ 573.408253][T24074] alloc_pipe_info+0x1ff/0x4d0 [ 573.413049][T24074] splice_direct_to_actor+0xaac/0xc90 [ 573.418437][T24074] ? aa_file_perm+0x3ef/0xf60 [ 573.423127][T24074] ? __pfx_lock_acquire+0x10/0x10 [ 573.428164][T24074] ? get_pid_task+0x23/0x1f0 [ 573.432772][T24074] ? __pfx_aa_file_perm+0x10/0x10 [ 573.437801][T24074] ? __pfx_direct_splice_actor+0x10/0x10 [ 573.443457][T24074] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 573.449372][T24074] do_splice_direct+0x28c/0x3e0 [ 573.454245][T24074] ? __pfx_do_splice_direct+0x10/0x10 [ 573.459657][T24074] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 573.465606][T24074] ? security_file_permission+0x7f/0xa0 [ 573.471189][T24074] ? rw_verify_area+0x1d2/0x6b0 [ 573.476058][T24074] do_sendfile+0x56d/0xe20 [ 573.480492][T24074] ? __pfx_do_sendfile+0x10/0x10 [ 573.485443][T24074] __se_sys_sendfile64+0x17c/0x1e0 [ 573.490574][T24074] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 573.496217][T24074] ? do_syscall_64+0x100/0x230 [ 573.501691][T24074] ? do_syscall_64+0xb6/0x230 [ 573.506383][T24074] do_syscall_64+0xf3/0x230 [ 573.510905][T24074] ? clear_bhb_loop+0x35/0x90 [ 573.515606][T24074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.521519][T24074] RIP: 0033:0x7f25d2575a19 [ 573.525938][T24074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.545637][T24074] RSP: 002b:00007f25d335a048 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 573.554071][T24074] RAX: ffffffffffffffda RBX: 00007f25d2703f60 RCX: 00007f25d2575a19 [ 573.562154][T24074] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 573.570138][T24074] RBP: 00007f25d335a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 573.578123][T24074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.586105][T24074] R13: 000000000000000b R14: 00007f25d2703f60 R15: 00007ffc08d57fd8 [ 573.594102][T24074] [ 573.622265][T24076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6740'. [ 573.915753][T24088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6744'. [ 574.439372][T24109] netlink: 'syz.4.6749': attribute type 10 has an invalid length. [ 574.464957][T24107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6751'. [ 576.142784][T24176] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 576.184588][T24176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.208224][T24176] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 576.236710][T24176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.265546][T24176] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 576.287238][T24176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.307818][T24176] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 576.333904][T24176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.488085][T24179] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6777'. [ 576.507018][T24179] netlink: 42480 bytes leftover after parsing attributes in process `syz.1.6777'. [ 577.070722][T24201] x_tables: duplicate underflow at hook 1 [ 577.415986][T24199] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6785'. [ 577.427442][T24218] netlink: 'syz.0.6779': attribute type 4 has an invalid length. [ 577.577490][T24220] vlan2: entered promiscuous mode [ 577.582894][T24224] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6792'. [ 577.642467][T24187] syz_tun: entered promiscuous mode [ 577.677124][T24187] syz_tun: left promiscuous mode [ 577.778598][T24232] netlink: 105108 bytes leftover after parsing attributes in process `syz.4.6796'. [ 577.804634][T24232] netlink: 'syz.4.6796': attribute type 1 has an invalid length. [ 577.815927][T24232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6796'. [ 578.046621][T24247] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 578.184519][T24252] netlink: 'syz.4.6805': attribute type 2 has an invalid length. [ 578.504120][T24273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6815'. [ 578.538488][T24280] FAULT_INJECTION: forcing a failure. [ 578.538488][T24280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 578.577781][T24280] CPU: 0 PID: 24280 Comm: syz.1.6816 Not tainted 6.10.0-rc7-syzkaller-02016-g77ae5e5b0072 #0 [ 578.588027][T24280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 578.598129][T24280] Call Trace: [ 578.599515][T24283] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6808'. [ 578.601510][T24280] [ 578.601525][T24280] dump_stack_lvl+0x241/0x360 [ 578.601565][T24280] ? __pfx_dump_stack_lvl+0x10/0x10 [ 578.621100][T24283] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6808'. [ 578.623335][T24280] ? __pfx__printk+0x10/0x10 [ 578.637002][T24280] ? snprintf+0xda/0x120 [ 578.641299][T24280] should_fail_ex+0x3b0/0x4e0 [ 578.646097][T24280] _copy_to_user+0x2f/0xb0 [ 578.650576][T24280] simple_read_from_buffer+0xca/0x150 [ 578.656015][T24280] proc_fail_nth_read+0x1e9/0x250 [ 578.661190][T24280] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 578.666796][T24280] ? rw_verify_area+0x520/0x6b0 [ 578.671701][T24280] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 578.677395][T24280] vfs_read+0x204/0xbc0 [ 578.681602][T24280] ? rw_verify_area+0x1d2/0x6b0 [ 578.686513][T24280] ? do_sendfile+0xc6d/0xe20 [ 578.691150][T24280] ? __pfx_vfs_read+0x10/0x10 [ 578.695972][T24280] ? __pfx_do_sendfile+0x10/0x10 [ 578.700944][T24280] ksys_read+0x1a0/0x2c0 [ 578.705210][T24280] ? __pfx_ksys_read+0x10/0x10 [ 578.709987][T24280] ? do_syscall_64+0x100/0x230 [ 578.714767][T24280] ? do_syscall_64+0xb6/0x230 [ 578.719458][T24280] do_syscall_64+0xf3/0x230 [ 578.723978][T24280] ? clear_bhb_loop+0x35/0x90 [ 578.728663][T24280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.734573][T24280] RIP: 0033:0x7f80d7b744fc [ 578.739003][T24280] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 578.758657][T24280] RSP: 002b:00007f80d8a22040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 578.767100][T24280] RAX: ffffffffffffffda RBX: 00007f80d7d03f60 RCX: 00007f80d7b744fc [ 578.775083][T24280] RDX: 000000000000000f RSI: 00007f80d8a220b0 RDI: 0000000000000007 [ 578.783113][T24280] RBP: 00007f80d8a220a0 R08: 0000000000000000 R09: 0000000000000000 [ 578.791107][T24280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.799277][T24280] R13: 000000000000004d R14: 00007f80d7d03f60 R15: 00007ffde489a5f8 [ 578.807298][T24280] [ 578.935658][T24294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6820'. [ 578.941593][T24289] netlink: 'syz.3.6818': attribute type 22 has an invalid length. [ 579.071626][T24301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6822'. [ 579.129064][T24303] netlink: 6 bytes leftover after parsing attributes in process `syz.4.6824'. [ 579.144484][T24306] netlink: 134720 bytes leftover after parsing attributes in process `syz.3.6825'. [ 579.170451][T24307] netlink: 134720 bytes leftover after parsing attributes in process `syz.3.6825'. [ 579.485628][T24329] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6831'. [ 579.504275][T24329] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6831'. [ 579.726465][T24334] wg1 speed is unknown, defaulting to 1000 [ 579.776833][T24337] netem: change failed [ 579.792238][T24338] netem: change failed [ 580.134865][T24355] No such timeout policy "syz0" [ 580.163718][T24355] No such timeout policy "syz0" [ 580.185964][T24355] No such timeout policy "syz0" [ 580.207172][T24355] No such timeout policy "syz0" [ 580.827450][T24376] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 581.107295][T24395] gretap0: entered promiscuous mode [ 581.353831][T24406] netlink: 'syz.3.6853': attribute type 7 has an invalid length. [ 581.367720][T24406] netlink: 'syz.3.6853': attribute type 8 has an invalid length. [ 581.378602][T24406] syz.3.6853[24406] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 581.378890][T24406] syz.3.6853[24406] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 581.918611][T24415] No such timeout policy "syz0" [ 582.742761][ T5101] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 582.755720][ T5101] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 582.776784][ T5101] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 582.788082][ T5101] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 582.796655][ T5101] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 582.809376][ T5101] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 583.000257][T24442] nbd: socks must be embedded in a SOCK_ITEM attr [ 583.112334][T24439] team0: Port device bond0 removed [ 583.138557][T24431] wg1 speed is unknown, defaulting to 1000 [ 583.312336][T24451] xt_NFQUEUE: number of total queues is 0 [ 583.464019][T24458] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 583.567514][T24462] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 583.584125][T24462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.608562][T24462] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 583.627605][T24462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.640827][T24462] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 583.652350][T24462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.664762][T24462] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 583.677381][T24462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.689101][T24462] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 583.701903][T24462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.838803][T24468] __nla_validate_parse: 12 callbacks suppressed [ 583.838827][T24468] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6876'. [ 583.993056][T24472] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6877'. [ 584.040484][T24431] chnl_net:caif_netlink_parms(): no params data found [ 584.162015][T24466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 584.184725][T24466] batadv_slave_0: entered allmulticast mode [ 584.224024][T24481] x_tables: unsorted entry at hook 2 [ 584.623022][T24487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6884'. [ 584.708122][T24431] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.737324][T24431] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.747178][T24431] bridge_slave_0: entered allmulticast mode [ 584.765606][T24431] bridge_slave_0: entered promiscuous mode [ 584.788454][T24431] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.795871][T24431] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.811782][T24431] bridge_slave_1: entered allmulticast mode [ 584.822547][T24431] bridge_slave_1: entered promiscuous mode [ 584.936203][T24508] team0: Port device macvlan2 added [ 584.981315][T24431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.133940][T24431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.184409][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 585.289570][T24431] team0: Port device team_slave_0 added [ 585.298921][T24518] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6895'. [ 585.323780][T24431] team0: Port device team_slave_1 added [ 585.447829][T24431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.454849][T24431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.482000][T24431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.496245][T24431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.503975][T24431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.533300][T24431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.681770][T24431] hsr_slave_0: entered promiscuous mode [ 585.693665][T24431] hsr_slave_1: entered promiscuous mode [ 585.701631][T24431] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 585.709714][T24431] Cannot create hsr debugfs directory [ 585.743044][T24530] netlink: 'syz.3.6900': attribute type 4 has an invalid length. [ 585.845251][T24534] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6902'. [ 585.871437][T24534] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4 [ 585.989055][T24541] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6904'. [ 586.009112][T24526] Bluetooth: MGMT ver 1.23 [ 586.140726][T24545] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 586.256234][T24549] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6907'. [ 586.303885][T24431] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.460253][T24431] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.604441][T24431] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.718574][T24431] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.801293][T24566] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 586.817460][T24567] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 587.182915][T24581] IPv6: NLM_F_CREATE should be specified when creating new route [ 587.218909][T24581] netlink: 'syz.3.6919': attribute type 1 has an invalid length. [ 587.240521][T24581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6919'. [ 587.270058][T24431] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 587.302450][T24431] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 587.423312][T24594] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6924'. [ 587.440601][T24431] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 587.460961][T24431] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 587.655985][T24601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 587.710680][T24431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.773398][T24431] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.805501][ T5156] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.812899][ T5156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.858807][ T5156] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.866048][ T5156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.244498][T24619] xt_l2tp: v2 tid > 0xffff: 150994944 [ 588.345684][T24431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.990093][T24431] veth0_vlan: entered promiscuous mode [ 589.031353][T24431] veth1_vlan: entered promiscuous mode [ 589.144695][T24431] veth0_macvtap: entered promiscuous mode [ 589.173710][T24431] veth1_macvtap: entered promiscuous mode [ 589.232647][T24431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.253136][T24431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.273722][T24431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.291606][T24431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.308271][T24431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.353940][T24431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.382099][T24431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.411286][T24431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.435987][T24431] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.445580][T24431] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.455336][T24431] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.467297][T24431] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.645187][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.655891][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.753050][T14938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.785012][T14938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.003023][T24651] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6862'. [ 590.287724][T24666] netlink: 'syz.1.6949': attribute type 6 has an invalid length. [ 590.298309][T24666] nbd: must specify a device to reconfigure [ 590.469263][T24675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6950'. [ 590.492221][T24673] team0: Port device macvlan3 added [ 590.499657][T24675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6950'. [ 590.522447][T24675] nbd: socks must be embedded in a SOCK_ITEM attr [ 590.624736][T24679] openvswitch: netlink: Missing key (keys=40, expected=100) [ 590.777539][T24688] sctp: [Deprecated]: syz.4.6958 (pid 24688) Use of struct sctp_assoc_value in delayed_ack socket option. [ 590.777539][T24688] Use struct sctp_sack_info instead [ 590.795352][T24688] sctp: [Deprecated]: syz.4.6958 (pid 24688) Use of struct sctp_assoc_value in delayed_ack socket option. [ 590.795352][T24688] Use struct sctp_sack_info instead [ 590.967872][T24695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6957'. [ 591.111509][T24705] netlink: 'syz.3.6961': attribute type 64 has an invalid length. [ 591.158647][T24706] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 591.377321][T24720] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6967'. [ 591.418170][T24721] FAULT_INJECTION: forcing a failure. [ 591.418170][T24721] name failslab, interval 1, probability 0, space 0, times 0 [ 591.451565][T24721] CPU: 0 PID: 24721 Comm: syz.1.6968 Not tainted 6.10.0-rc7-syzkaller-02016-g77ae5e5b0072 #0 [ 591.459227][T24723] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6966'. [ 591.461805][T24721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 591.476043][T24723] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 591.480967][T24721] Call Trace: [ 591.480988][T24721] [ 591.481000][T24721] dump_stack_lvl+0x241/0x360 [ 591.481042][T24721] ? __pfx_dump_stack_lvl+0x10/0x10 [ 591.505903][T24721] ? __pfx__printk+0x10/0x10 [ 591.510561][T24721] ? __pfx___might_resched+0x10/0x10 [ 591.515899][T24721] should_fail_ex+0x3b0/0x4e0 [ 591.520627][T24721] ? alloc_pipe_info+0x1ff/0x4d0 [ 591.525582][T24721] should_failslab+0x9/0x20 [ 591.530089][T24721] __kmalloc_noprof+0xd8/0x400 [ 591.534867][T24721] alloc_pipe_info+0x1ff/0x4d0 [ 591.539650][T24721] splice_direct_to_actor+0xaac/0xc90 [ 591.545047][T24721] ? aa_file_perm+0x3ef/0xf60 [ 591.549734][T24721] ? __pfx_lock_acquire+0x10/0x10 [ 591.554770][T24721] ? get_pid_task+0x23/0x1f0 [ 591.559381][T24721] ? __pfx_aa_file_perm+0x10/0x10 [ 591.564420][T24721] ? __pfx_direct_splice_actor+0x10/0x10 [ 591.570062][T24721] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 591.576004][T24721] do_splice_direct+0x28c/0x3e0 [ 591.580900][T24721] ? __pfx_do_splice_direct+0x10/0x10 [ 591.586282][T24721] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 591.592282][T24721] ? security_file_permission+0x7f/0xa0 [ 591.597854][T24721] ? rw_verify_area+0x1d2/0x6b0 [ 591.602725][T24721] do_sendfile+0x56d/0xe20 [ 591.607180][T24721] ? __pfx_do_sendfile+0x10/0x10 [ 591.612183][T24721] __se_sys_sendfile64+0x17c/0x1e0 [ 591.617338][T24721] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 591.622982][T24721] ? do_syscall_64+0x100/0x230 [ 591.627762][T24721] ? do_syscall_64+0xb6/0x230 [ 591.632478][T24721] do_syscall_64+0xf3/0x230 [ 591.637033][T24721] ? clear_bhb_loop+0x35/0x90 [ 591.641730][T24721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.647637][T24721] RIP: 0033:0x7f80d7b75a19 [ 591.652061][T24721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 591.671781][T24721] RSP: 002b:00007f80d8a01048 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 591.680253][T24721] RAX: ffffffffffffffda RBX: 00007f80d7d04038 RCX: 00007f80d7b75a19 [ 591.688246][T24721] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 591.696231][T24721] RBP: 00007f80d8a010a0 R08: 0000000000000000 R09: 0000000000000000 [ 591.704298][T24721] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 591.712282][T24721] R13: 000000000000006e R14: 00007f80d7d04038 R15: 00007ffde489a5f8 [ 591.720279][T24721] [ 591.897818][T24729] netlink: 'syz.2.6970': attribute type 1 has an invalid length. [ 591.933881][T24728] netlink: 'syz.2.6970': attribute type 1 has an invalid length. [ 591.963956][T24729] bond4: (slave gretap0): Enslaving as a backup interface with an up link [ 592.236904][T24747] netlink: 'syz.4.6975': attribute type 11 has an invalid length. [ 592.325713][T24749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6977'. [ 592.486227][T24753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6978'. [ 592.506994][T24753] nbd: nbd0 already in use [ 592.561320][T24758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6979'. [ 592.670408][T24760] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6980'. [ 592.799379][T24774] IPv6: NLM_F_CREATE should be specified when creating new route [ 592.817213][T24774] netlink: 'syz.4.6985': attribute type 1 has an invalid length. [ 592.954614][T24781] netlink: 'syz.4.6988': attribute type 11 has an invalid length. [ 593.022060][T24783] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 593.067390][T24783] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 593.301839][T24796] netlink: 'syz.1.6993': attribute type 13 has an invalid length. [ 593.550155][T24810] 8021q: adding VLAN 0 to HW filter on device bond2 [ 593.572784][T24810] bond2: entered promiscuous mode [ 593.582186][T24810] bond0: (slave bond2): Enslaving as an active interface with an up link [ 593.627542][T24819] nbd: nbd0 already in use [ 593.733054][T24823] netlink: 'syz.3.7002': attribute type 11 has an invalid length. [ 594.492134][T24859] nbd: socks must be embedded in a SOCK_ITEM attr [ 594.571199][T24861] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 50157 - 0 [ 594.593475][T24861] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 50157 - 0 [ 594.607222][T24861] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 50157 - 0 [ 594.617210][T24861] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 50157 - 0 [ 594.627238][T24861] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 50987 - 0 [ 594.642204][T24861] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 50987 - 0 [ 594.652965][T24861] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 50987 - 0 [ 594.662567][T24861] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 50987 - 0 [ 595.119918][T24889] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 595.424946][T24897] __nla_validate_parse: 12 callbacks suppressed [ 595.424971][T24897] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7028'. [ 595.793082][T24907] netlink: 184 bytes leftover after parsing attributes in process `syz.2.7027'. [ 595.845471][T24910] syz.4.7032[24910] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 595.845682][T24910] syz.4.7032[24910] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 595.888939][T24910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7032'. [ 595.946195][T24907] netlink: 'syz.2.7027': attribute type 1 has an invalid length. [ 595.976942][T24916] syz.4.7032[24916] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 596.001444][T24916] syz.4.7032[24916] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 596.239235][T24928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7036'. [ 596.287950][ T4491] Bluetooth: hci3: command 0x0406 tx timeout [ 596.357226][T24928] nbd0: detected capacity change from 0 to 163840 [ 596.364004][T24928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7036'. [ 596.418582][T24938] netlink: 'syz.4.7039': attribute type 9 has an invalid length. [ 596.426403][T24938] netlink: 'syz.4.7039': attribute type 7 has an invalid length. [ 596.492752][T24938] netlink: 'syz.4.7039': attribute type 8 has an invalid length. [ 596.764100][T24960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7049'. [ 596.807638][T24962] netlink: 'syz.4.7050': attribute type 1 has an invalid length. [ 597.280511][T24984] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 597.459474][T24989] xt_CT: You must specify a L4 protocol and not use inversions on it [ 597.570763][T24993] netlink: 'syz.3.7062': attribute type 1 has an invalid length. [ 598.250876][T25022] FAULT_INJECTION: forcing a failure. [ 598.250876][T25022] name failslab, interval 1, probability 0, space 0, times 0 [ 598.292844][T25022] CPU: 0 PID: 25022 Comm: syz.3.7071 Not tainted 6.10.0-rc7-syzkaller-02016-g77ae5e5b0072 #0 [ 598.303084][T25022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 598.313262][T25022] Call Trace: [ 598.316553][T25022] [ 598.319491][T25022] dump_stack_lvl+0x241/0x360 [ 598.324202][T25022] ? __pfx_dump_stack_lvl+0x10/0x10 [ 598.329419][T25022] ? __pfx__printk+0x10/0x10 [ 598.334030][T25022] ? __pfx___might_resched+0x10/0x10 [ 598.339355][T25022] should_fail_ex+0x3b0/0x4e0 [ 598.344068][T25022] ? sock_kmalloc+0xd7/0x160 [ 598.348718][T25022] should_failslab+0x9/0x20 [ 598.353243][T25022] __kmalloc_noprof+0xd8/0x400 [ 598.358046][T25022] ? do_raw_spin_unlock+0x13c/0x8b0 [ 598.363294][T25022] sock_kmalloc+0xd7/0x160 [ 598.367734][T25022] hash_sendmsg+0x80a/0x1110 [ 598.372363][T25022] ? __pfx_hash_sendmsg+0x10/0x10 [ 598.377404][T25022] __sock_sendmsg+0x221/0x270 [ 598.382125][T25022] sock_sendmsg+0x134/0x200 [ 598.386654][T25022] ? __pfx_sock_sendmsg+0x10/0x10 [ 598.391715][T25022] ? iov_iter_bvec+0x4e/0x180 [ 598.396417][T25022] splice_to_socket+0xa13/0x10b0 [ 598.401378][T25022] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 598.408008][T25022] ? __pfx_splice_to_socket+0x10/0x10 [ 598.413443][T25022] ? shmem_file_splice_read+0xbe8/0xd30 [ 598.419023][T25022] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 598.425041][T25022] ? __pfx_splice_to_socket+0x10/0x10 [ 598.430429][T25022] direct_splice_actor+0x11e/0x220 [ 598.435573][T25022] splice_direct_to_actor+0x58e/0xc90 [ 598.440979][T25022] ? __pfx_direct_splice_actor+0x10/0x10 [ 598.446638][T25022] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 598.452578][T25022] do_splice_direct+0x28c/0x3e0 [ 598.457458][T25022] ? __pfx_do_splice_direct+0x10/0x10 [ 598.462848][T25022] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 598.468764][T25022] ? security_file_permission+0x7f/0xa0 [ 598.474371][T25022] ? rw_verify_area+0x1d2/0x6b0 [ 598.479247][T25022] do_sendfile+0x56d/0xe20 [ 598.483807][T25022] ? __pfx_do_sendfile+0x10/0x10 [ 598.488785][T25022] __se_sys_sendfile64+0x17c/0x1e0 [ 598.493919][T25022] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 598.499567][T25022] ? do_syscall_64+0x100/0x230 [ 598.504358][T25022] ? do_syscall_64+0xb6/0x230 [ 598.509056][T25022] do_syscall_64+0xf3/0x230 [ 598.513581][T25022] ? clear_bhb_loop+0x35/0x90 [ 598.518268][T25022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.524185][T25022] RIP: 0033:0x7f30dbf75a19 [ 598.528614][T25022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.548247][T25022] RSP: 002b:00007f30dccac048 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 598.556711][T25022] RAX: ffffffffffffffda RBX: 00007f30dc104038 RCX: 00007f30dbf75a19 [ 598.564702][T25022] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 598.572690][T25022] RBP: 00007f30dccac0a0 R08: 0000000000000000 R09: 0000000000000000 [ 598.580678][T25022] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 598.588687][T25022] R13: 000000000000006e R14: 00007f30dc104038 R15: 00007fff569284c8 [ 598.596702][T25022] [ 599.134512][T25039] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7076'. [ 599.310559][T25042] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7078'. [ 599.329977][T25042] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7078'. [ 599.421307][T25044] netlink: 'syz.3.7077': attribute type 64 has an invalid length. [ 599.437765][T25044] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 599.624376][T25052] IPv6: NLM_F_CREATE should be specified when creating new route [ 599.647413][T25052] netlink: 'syz.3.7081': attribute type 1 has an invalid length. [ 599.655243][T25052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7081'. [ 600.735862][T25107] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 600.743569][T25106] –eth0_vlan: renamed from bridge_slave_1 (while UP) [ 600.884701][T25111] x_tables: unsorted entry at hook 2 [ 600.970481][T25115] __nla_validate_parse: 9 callbacks suppressed [ 600.970512][T25115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7107'. [ 601.271281][T25113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7096'. [ 601.350860][T25136] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 601.397050][T25136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.417313][T25136] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 601.456985][T25136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.488158][T25136] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 601.513740][T25136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.541596][T25136] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 601.564491][T25136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.590736][T25136] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 601.603783][T25136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.630815][T25112] syzkaller0: entered allmulticast mode [ 601.751787][ T4491] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 601.765480][ T4491] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 601.777638][ T4491] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 601.796886][ T4491] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 601.811428][ T4491] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 601.823071][ T4491] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 601.891184][T25147] tipc: Started in network mode [ 601.897709][T25147] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 601.907193][T25147] tipc: Enabling of bearer rejected, failed to enable media [ 601.985307][T25150] wg1 speed is unknown, defaulting to 1000 [ 602.323982][T25166] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7117'. [ 602.392360][T25159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7120'. [ 602.493556][T25170] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7122'. [ 602.494100][T25169] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7122'. [ 602.813573][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.937263][T25185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7126'. [ 602.999232][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.174035][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.341259][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.574264][T25150] chnl_net:caif_netlink_parms(): no params data found [ 603.654226][ T11] –eth0_vlan: left allmulticast mode [ 603.668290][ T11] –eth0_vlan: left promiscuous mode [ 603.679440][ T11] bridge0: port 2(–eth0_vlan) entered disabled state [ 603.704641][ T11] bridge_slave_0: left allmulticast mode [ 603.724463][T25219] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7134'. [ 603.724754][ T11] bridge_slave_0: left promiscuous mode [ 603.741605][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.888273][ T4491] Bluetooth: hci1: command tx timeout [ 604.678304][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 604.696063][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 604.721784][ T11] bond0 (unregistering): Released all slaves [ 604.734715][T25212] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 604.879946][T25226] netlink: 'syz.2.7136': attribute type 8 has an invalid length. [ 604.952598][T25228] pim6reg: entered allmulticast mode [ 604.958904][T25228] pim6reg: left allmulticast mode [ 605.054618][T25239] netlink: 'syz.3.7141': attribute type 2 has an invalid length. [ 605.227331][T25244] netlink: 'syz.1.7142': attribute type 22 has an invalid length. [ 605.309488][T25150] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.342888][T25150] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.379485][T25150] bridge_slave_0: entered allmulticast mode [ 605.403425][T25150] bridge_slave_0: entered promiscuous mode [ 605.598747][T25150] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.611278][T25150] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.631568][T25150] bridge_slave_1: entered allmulticast mode [ 605.641049][T25271] netlink: 'syz.1.7150': attribute type 13 has an invalid length. [ 605.658131][T25150] bridge_slave_1: entered promiscuous mode [ 605.977159][ T4491] Bluetooth: hci1: command tx timeout [ 606.030092][T25150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 606.094394][ T11] hsr_slave_0: left promiscuous mode [ 606.103199][ T11] hsr_slave_1: left promiscuous mode [ 606.142129][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 606.161269][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.180983][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.198950][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.282811][ T11] veth1_macvtap: left promiscuous mode [ 606.299458][ T11] veth0_macvtap: left promiscuous mode [ 606.305258][ T11] veth1_vlan: left promiscuous mode [ 606.327496][ T11] veth0_vlan: left promiscuous mode [ 606.572043][T25301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7154'. [ 607.460363][ T11] team0 (unregistering): Port device team_slave_1 removed [ 607.529114][ T11] team0 (unregistering): Port device team_slave_0 removed [ 608.052034][ T4491] Bluetooth: hci1: command tx timeout [ 608.219158][T25150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.229241][T25282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7153'. [ 608.293422][T25300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7152'. [ 608.386723][T25307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7152'. [ 608.914415][T25330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7158'. [ 608.924820][T25330] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7158'. [ 608.947729][T25330] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 608.975112][T25340] IPv6: NLM_F_CREATE should be specified when creating new route [ 609.007250][T25340] netlink: 'syz.3.7161': attribute type 1 has an invalid length. [ 609.019138][T25340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7161'. [ 609.143072][T25150] team0: Port device team_slave_0 added [ 609.178099][T25345] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7162'. [ 609.210924][T25150] team0: Port device team_slave_1 added [ 609.499177][T25150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 609.506200][T25150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.551526][T25150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.584867][T25150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.593742][T25150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.651866][T25150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.794731][T25150] hsr_slave_0: entered promiscuous mode [ 609.812305][T25150] hsr_slave_1: entered promiscuous mode [ 609.837146][T25150] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 609.844789][T25150] Cannot create hsr debugfs directory [ 609.984710][ T11] –eth0_vlan: left allmulticast mode [ 610.011728][ T11] –eth0_vlan: left promiscuous mode [ 610.028291][ T11] bridge0: port 2(–eth0_vlan) entered disabled state [ 610.067833][ T11] bridge_slave_0: left allmulticast mode [ 610.073566][ T11] bridge_slave_0: left promiscuous mode [ 610.081163][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.130208][ T4491] Bluetooth: hci1: command tx timeout [ 610.162378][T25380] x_tables: unsorted entry at hook 2 [ 611.224185][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 611.237818][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 611.251599][ T11] bond0 (unregistering): (slave bond2): Releasing backup interface [ 611.261566][ T11] bond0 (unregistering): (slave bond3): Releasing backup interface [ 611.273475][ T11] bond0 (unregistering): Released all slaves [ 611.453234][ T11] bond1 (unregistering): Released all slaves [ 611.643236][ T11] bond2 (unregistering): Released all slaves [ 611.805080][ T11] bond3 (unregistering): Released all slaves [ 611.837470][T25387] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7169'. [ 612.114660][T25415] netlink: 184 bytes leftover after parsing attributes in process `syz.1.7174'. [ 612.136255][T25415] netlink: 'syz.1.7174': attribute type 1 has an invalid length. [ 612.173805][T25418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7175'. [ 612.199594][ T11] tipc: Disabling bearer [ 612.208935][T25418] nbd0: detected capacity change from 163840 to 0 [ 612.215929][T25418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7175'. [ 612.225665][ T11] tipc: Left network mode [ 612.249347][T25418] nbd: socks must be embedded in a SOCK_ITEM attr [ 612.371052][T25421] macvlan2: entered promiscuous mode [ 612.381693][T25421] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 612.392590][T25421] macvlan2: entered allmulticast mode [ 612.399694][T25421] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 612.413902][T25421] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 612.421860][T25421] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 612.612098][T25435] netlink: 105108 bytes leftover after parsing attributes in process `syz.1.7180'. [ 612.615396][T25436] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7179'. [ 612.629948][T25435] netlink: 'syz.1.7180': attribute type 1 has an invalid length. [ 612.643103][T25433] pimreg: entered allmulticast mode [ 612.649822][T25434] pimreg: left allmulticast mode [ 612.659233][T25435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7180'. [ 612.909727][T25442] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7183'. [ 612.971667][T25448] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7185'. [ 613.022410][T25442] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7183'. [ 613.409105][ T51] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 613.525921][ T11] hsr_slave_0: left promiscuous mode [ 613.535231][ T11] hsr_slave_1: left promiscuous mode [ 613.544127][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 613.575799][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 613.603098][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 613.611527][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 613.656085][ T11] veth1_macvtap: left promiscuous mode [ 613.662177][ T11] veth0_macvtap: left promiscuous mode [ 613.668668][ T11] veth1_vlan: left promiscuous mode [ 613.674260][ T11] veth0_vlan: left promiscuous mode [ 613.911544][ T11] team0 (unregistering): Port device macvlan2 removed [ 614.532420][ T11] team0 (unregistering): Port device team_slave_1 removed [ 614.610375][ T11] team0 (unregistering): Port device team_slave_0 removed [ 615.406973][T25472] netlink: 'syz.0.7189': attribute type 1 has an invalid length. [ 615.578058][T25483] macvlan2: entered allmulticast mode [ 615.617691][T25485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.633305][T25485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.791136][T25492] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 616.020423][T25499] netlink: 'syz.0.7198': attribute type 3 has an invalid length. [ 616.021189][T25498] netlink: 'syz.2.7197': attribute type 1 has an invalid length. [ 616.063854][T25498] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 616.104804][ T11] IPVS: stop unused estimator thread 0... [ 616.170337][T25501] netlink: 'syz.1.7199': attribute type 22 has an invalid length. [ 616.228288][T25150] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 616.244312][T25150] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 616.274297][T25150] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 616.300591][T25503] netlink: 'syz.0.7200': attribute type 1 has an invalid length. [ 616.310703][T25150] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 616.591278][T25150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.673752][T25150] 8021q: adding VLAN 0 to HW filter on device team0 [ 616.703038][T25516] 8021q: adding VLAN 0 to HW filter on device bond3 [ 616.715143][T25516] bond0: (slave bond3): Enslaving as an active interface with an up link [ 616.785758][T25175] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.793031][T25175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 616.831475][T25127] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.838801][T25127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 616.915224][T25526] sctp: [Deprecated]: syz.1.7208 (pid 25526) Use of int in max_burst socket option deprecated. [ 616.915224][T25526] Use struct sctp_assoc_value instead [ 617.022385][T25531] __nla_validate_parse: 7 callbacks suppressed [ 617.022410][T25531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7208'. [ 617.042411][T25531] netlink: 'syz.1.7208': attribute type 6 has an invalid length. [ 617.070184][T25531] netlink: 'syz.1.7208': attribute type 5 has an invalid length. [ 617.377972][T25150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.525530][T25551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7212'. [ 617.677614][T25561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7217'. [ 617.851429][T25150] veth0_vlan: entered promiscuous mode [ 617.889546][T25150] veth1_vlan: entered promiscuous mode [ 617.958327][T25569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7221'. [ 617.969065][T25150] veth0_macvtap: entered promiscuous mode [ 617.978021][T25569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7221'. [ 617.994671][T25150] veth1_macvtap: entered promiscuous mode [ 618.066109][T25150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 618.092281][T25150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.122083][T25150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 618.174249][T25150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 618.188752][T25150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.205997][T25150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 618.232574][T25150] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.242221][T25150] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.254100][T25150] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.269684][T25150] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.409258][T25584] netlink: 'syz.3.7228': attribute type 30 has an invalid length. [ 618.458781][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.487273][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.539383][T25589] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 618.558881][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.571194][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.831964][T25605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7232'. [ 618.909587][T25610] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7234'. [ 619.075157][T25616] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7234'. [ 619.215350][T25579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7218'. [ 619.265350][T25579] –eth0_vlan: left allmulticast mode [ 619.279098][T25579] –eth0_vlan: left promiscuous mode [ 619.294871][T25579] bridge0: port 2(–eth0_vlan) entered disabled state [ 619.313478][T25579] bridge_slave_0: left allmulticast mode [ 619.322310][T25632] netlink: 'syz.4.7240': attribute type 6 has an invalid length. [ 619.333506][T25632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7240'. [ 619.359866][T25579] bridge_slave_0: left promiscuous mode [ 619.372816][T25579] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.426766][T25579] bridge0 (unregistering): left promiscuous mode [ 620.421086][T25674] ================================================================== [ 620.429232][T25674] BUG: KASAN: slab-use-after-free in rose_get_neigh+0x1b6/0x6f0 [ 620.436935][T25674] Read of size 1 at addr ffff888020258430 by task syz.3.7254/25674 [ 620.444871][T25674] [ 620.447245][T25674] CPU: 1 PID: 25674 Comm: syz.3.7254 Not tainted 6.10.0-rc7-syzkaller-02016-g77ae5e5b0072 #0 [ 620.457443][T25674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 620.467533][T25674] Call Trace: [ 620.470840][T25674] [ 620.473807][T25674] dump_stack_lvl+0x241/0x360 [ 620.478553][T25674] ? __pfx_dump_stack_lvl+0x10/0x10 [ 620.483816][T25674] ? __pfx__printk+0x10/0x10 [ 620.488461][T25674] ? _printk+0xd5/0x120 [ 620.492679][T25674] ? __virt_addr_valid+0x183/0x530 [ 620.497852][T25674] ? __virt_addr_valid+0x183/0x530 [ 620.503034][T25674] print_report+0x169/0x550 [ 620.507611][T25674] ? __virt_addr_valid+0x183/0x530 [ 620.512785][T25674] ? __virt_addr_valid+0x183/0x530 [ 620.517960][T25674] ? __virt_addr_valid+0x45f/0x530 [ 620.523133][T25674] ? __phys_addr+0xba/0x170 [ 620.527790][T25674] ? rose_get_neigh+0x1b6/0x6f0 [ 620.532763][T25674] kasan_report+0x143/0x180 [ 620.537377][T25674] ? rose_get_neigh+0x1b6/0x6f0 [ 620.542246][T25674] rose_get_neigh+0x1b6/0x6f0 [ 620.546935][T25674] rose_connect+0x45a/0x1170 [ 620.551683][T25674] ? aa_sk_perm+0x967/0xab0 [ 620.556208][T25674] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 620.562213][T25674] ? __pfx_rose_connect+0x10/0x10 [ 620.567311][T25674] ? aa_af_perm+0x3a0/0x3b0 [ 620.571837][T25674] ? __might_fault+0xaa/0x120 [ 620.576552][T25674] ? __might_fault+0xc6/0x120 [ 620.581236][T25674] ? bpf_lsm_socket_connect+0x9/0x10 [ 620.586530][T25674] ? security_socket_connect+0x87/0xb0 [ 620.592000][T25674] __sys_connect+0x2df/0x310 [ 620.596612][T25674] ? __pfx___sys_connect+0x10/0x10 [ 620.601741][T25674] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 620.608079][T25674] ? do_syscall_64+0x100/0x230 [ 620.612866][T25674] __x64_sys_connect+0x7a/0x90 [ 620.617683][T25674] do_syscall_64+0xf3/0x230 [ 620.622371][T25674] ? clear_bhb_loop+0x35/0x90 [ 620.627122][T25674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.633055][T25674] RIP: 0033:0x7f30dbf75a19 [ 620.637521][T25674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 620.657147][T25674] RSP: 002b:00007f30dccac048 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 620.665676][T25674] RAX: ffffffffffffffda RBX: 00007f30dc104038 RCX: 00007f30dbf75a19 [ 620.673669][T25674] RDX: 0000000000000040 RSI: 00000000200006c0 RDI: 000000000000000b [ 620.681745][T25674] RBP: 00007f30dbfe4e49 R08: 0000000000000000 R09: 0000000000000000 [ 620.689817][T25674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 620.697797][T25674] R13: 000000000000006e R14: 00007f30dc104038 R15: 00007fff569284c8 [ 620.705788][T25674] [ 620.708819][T25674] [ 620.711143][T25674] Allocated by task 21912: [ 620.715558][T25674] kasan_save_track+0x3f/0x80 [ 620.720253][T25674] __kasan_kmalloc+0x98/0xb0 [ 620.724873][T25674] kmalloc_trace_noprof+0x19c/0x2c0 [ 620.730110][T25674] rose_add_node+0x209/0xda0 [ 620.734711][T25674] rose_rt_ioctl+0xa6f/0xed0 [ 620.739310][T25674] rose_ioctl+0x3cb/0x9d0 [ 620.743660][T25674] sock_do_ioctl+0x158/0x460 [ 620.748266][T25674] sock_ioctl+0x629/0x8e0 [ 620.752615][T25674] __se_sys_ioctl+0xfc/0x170 [ 620.757219][T25674] do_syscall_64+0xf3/0x230 [ 620.761744][T25674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.767693][T25674] [ 620.770023][T25674] Freed by task 25273: [ 620.774099][T25674] kasan_save_track+0x3f/0x80 [ 620.778806][T25674] kasan_save_free_info+0x40/0x50 [ 620.783839][T25674] poison_slab_object+0xe0/0x150 [ 620.788797][T25674] __kasan_slab_free+0x37/0x60 [ 620.793580][T25674] kfree+0x149/0x360 [ 620.797485][T25674] rose_rt_device_down+0x6e5/0x740 [ 620.802653][T25674] rose_device_event+0x601/0x6a0 [ 620.807608][T25674] notifier_call_chain+0x19f/0x3e0 [ 620.812740][T25674] dev_close_many+0x33c/0x4c0 [ 620.817434][T25674] dev_close+0x1c0/0x2c0 [ 620.821720][T25674] bpq_device_event+0x372/0x8b0 [ 620.826589][T25674] notifier_call_chain+0x19f/0x3e0 [ 620.831724][T25674] __dev_notify_flags+0x207/0x400 [ 620.836769][T25674] dev_change_flags+0xf0/0x1a0 [ 620.841564][T25674] dev_ifsioc+0x7c8/0xe70 [ 620.845931][T25674] dev_ioctl+0x719/0x1340 [ 620.850279][T25674] sock_do_ioctl+0x240/0x460 [ 620.854893][T25674] sock_ioctl+0x629/0x8e0 [ 620.859238][T25674] __se_sys_ioctl+0xfc/0x170 [ 620.863843][T25674] do_syscall_64+0xf3/0x230 [ 620.868365][T25674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.874276][T25674] [ 620.876607][T25674] The buggy address belongs to the object at ffff888020258400 [ 620.876607][T25674] which belongs to the cache kmalloc-512 of size 512 [ 620.890690][T25674] The buggy address is located 48 bytes inside of [ 620.890690][T25674] freed 512-byte region [ffff888020258400, ffff888020258600) [ 620.904415][T25674] [ 620.906768][T25674] The buggy address belongs to the physical page: [ 620.913196][T25674] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888020258400 pfn:0x20258 [ 620.923280][T25674] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 620.931789][T25674] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 620.940300][T25674] page_type: 0xffffefff(slab) [ 620.944989][T25674] raw: 00fff00000000240 ffff888015041c80 ffffea0001fe6f10 ffffea0001679810 [ 620.953582][T25674] raw: ffff888020258400 000000000010000f 00000001ffffefff 0000000000000000 [ 620.962180][T25674] head: 00fff00000000240 ffff888015041c80 ffffea0001fe6f10 ffffea0001679810 [ 620.970868][T25674] head: ffff888020258400 000000000010000f 00000001ffffefff 0000000000000000 [ 620.979557][T25674] head: 00fff00000000002 ffffea0000809601 ffffffffffffffff 0000000000000000 [ 620.988237][T25674] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 620.996919][T25674] page dumped because: kasan: bad access detected [ 621.003341][T25674] page_owner tracks the page as allocated [ 621.009058][T25674] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 9765531243, free_ts 0 [ 621.028742][T25674] post_alloc_hook+0x1f3/0x230 [ 621.033556][T25674] get_page_from_freelist+0x2e4c/0x2f10 [ 621.039110][T25674] __alloc_pages_noprof+0x256/0x6c0 [ 621.044407][T25674] alloc_slab_page+0x5f/0x120 [ 621.049093][T25674] allocate_slab+0x5a/0x2f0 [ 621.053615][T25674] ___slab_alloc+0xcd1/0x14b0 [ 621.058354][T25674] __slab_alloc+0x58/0xa0 [ 621.062700][T25674] kmalloc_trace_noprof+0x1d5/0x2c0 [ 621.067919][T25674] device_add+0xc1/0xbf0 [ 621.072184][T25674] device_add_disk+0x46b/0xf90 [ 621.076972][T25674] nbd_dev_add+0x839/0xc80 [ 621.081417][T25674] nbd_init+0x210/0x2c0 [ 621.085588][T25674] do_one_initcall+0x248/0x880 [ 621.090369][T25674] do_initcall_level+0x157/0x210 [ 621.095357][T25674] do_initcalls+0x3f/0x80 [ 621.099704][T25674] kernel_init_freeable+0x435/0x5d0 [ 621.104921][T25674] page_owner free stack trace missing [ 621.110293][T25674] [ 621.112618][T25674] Memory state around the buggy address: [ 621.118260][T25674] ffff888020258300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 621.126341][T25674] ffff888020258380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 621.134418][T25674] >ffff888020258400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 621.142530][T25674] ^ [ 621.148263][T25674] ffff888020258480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 621.156333][T25674] ffff888020258500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 621.164401][T25674] ================================================================== [ 621.172607][T25674] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 621.179847][T25674] CPU: 1 PID: 25674 Comm: syz.3.7254 Not tainted 6.10.0-rc7-syzkaller-02016-g77ae5e5b0072 #0 [ 621.190072][T25674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 621.200269][T25674] Call Trace: [ 621.203583][T25674] [ 621.206534][T25674] dump_stack_lvl+0x241/0x360 [ 621.211266][T25674] ? __pfx_dump_stack_lvl+0x10/0x10 [ 621.216527][T25674] ? __pfx__printk+0x10/0x10 [ 621.221174][T25674] ? vscnprintf+0x5d/0x90 [ 621.225553][T25674] panic+0x349/0x860 [ 621.229506][T25674] ? check_panic_on_warn+0x21/0xb0 [ 621.234765][T25674] ? __pfx_panic+0x10/0x10 [ 621.239234][T25674] ? mark_lock+0x9a/0x350 [ 621.243605][T25674] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 621.249554][T25674] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 621.255509][T25674] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 621.261896][T25674] ? print_report+0x502/0x550 [ 621.266617][T25674] check_panic_on_warn+0x86/0xb0 [ 621.271589][T25674] ? rose_get_neigh+0x1b6/0x6f0 [ 621.276460][T25674] end_report+0x77/0x160 [ 621.281094][T25674] kasan_report+0x154/0x180 [ 621.285625][T25674] ? rose_get_neigh+0x1b6/0x6f0 [ 621.290497][T25674] rose_get_neigh+0x1b6/0x6f0 [ 621.295196][T25674] rose_connect+0x45a/0x1170 [ 621.299812][T25674] ? aa_sk_perm+0x967/0xab0 [ 621.304378][T25674] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 621.310301][T25674] ? __pfx_rose_connect+0x10/0x10 [ 621.315348][T25674] ? aa_af_perm+0x3a0/0x3b0 [ 621.319872][T25674] ? __might_fault+0xaa/0x120 [ 621.324589][T25674] ? __might_fault+0xc6/0x120 [ 621.329282][T25674] ? bpf_lsm_socket_connect+0x9/0x10 [ 621.334578][T25674] ? security_socket_connect+0x87/0xb0 [ 621.340064][T25674] __sys_connect+0x2df/0x310 [ 621.344689][T25674] ? __pfx___sys_connect+0x10/0x10 [ 621.349925][T25674] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 621.356276][T25674] ? do_syscall_64+0x100/0x230 [ 621.361067][T25674] __x64_sys_connect+0x7a/0x90 [ 621.365860][T25674] do_syscall_64+0xf3/0x230 [ 621.370388][T25674] ? clear_bhb_loop+0x35/0x90 [ 621.375083][T25674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.381010][T25674] RIP: 0033:0x7f30dbf75a19 [ 621.385442][T25674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 621.405150][T25674] RSP: 002b:00007f30dccac048 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 621.413674][T25674] RAX: ffffffffffffffda RBX: 00007f30dc104038 RCX: 00007f30dbf75a19 [ 621.421662][T25674] RDX: 0000000000000040 RSI: 00000000200006c0 RDI: 000000000000000b [ 621.429646][T25674] RBP: 00007f30dbfe4e49 R08: 0000000000000000 R09: 0000000000000000 [ 621.437632][T25674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 621.445615][T25674] R13: 000000000000006e R14: 00007f30dc104038 R15: 00007fff569284c8 [ 621.453611][T25674] [ 621.457157][T25674] Kernel Offset: disabled [ 621.461541][T25674] Rebooting in 86400 seconds..