last executing test programs:

21.957865359s ago: executing program 2 (id=4268):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe800000000000000000970000000000aa000000000000000008001200000000000000000000000000e00000bb8ece8ec14d91c70000000000fc01000000000000000000000000000005000600000000000a00"/144], 0xa0}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0100000000000000000002"], 0x1c}}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={<r6=>r1})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r7)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r12=>0x0})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe62}, 0x15)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r13, 0xfffff002, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x26c2}, 0x28)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r13, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0], <r14=>0x0, 0x64, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0xf4, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000dc0)=r14, 0x4)
sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r10, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r12, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r15=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40210020}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1a495ef400"/18, @ANYRES16=r10, @ANYBLOB="00022cbd7000fddbdf256400000008000300", @ANYRES32=r15, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB="34006cc49a49f71a9ef1173eb16ec7880545e8712f7b004b693c98030000", @ANYRES16=r8, @ANYBLOB="09080000000000000000010000001c0002800c00018008000100070000000c000180080001000600000004000180"], 0x34}}, 0x0)

21.477550662s ago: executing program 2 (id=4274):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @broadcast}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a3842b97289b711b905000000000000000000070000000900010073797a30000000003c000000090abaf3d7173efcac010400000000000000000700000008000a40000000000900020073797a31ffdd00000900010073797a300000000008000540000000216c0000001e0a01030000000000000000070000000900020073797a31000000000900010073797a30000000038010000080080003400000000230000b80030001800a00010071756f74610000001c0002800c00044000000000000000000c000140000000000000000014000000100001000000000000"], 0xf0}}, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x8001000d}, 0x90)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x24, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xac}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan1\x00', <r3=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7a}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000180)='GPL\x00'}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x40, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
sendmmsg$inet6(r4, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_opts(r5, 0x29, 0x36, 0xfffffffffffffffe, &(0x7f00000001c0))
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48)
r6 = socket$kcm(0x29, 0x2, 0x0)
write$binfmt_script(r6, &(0x7f0000003300)={'#! ', './bus'}, 0xff1d)
recvmmsg(r6, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x5e, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/121, 0x79}], 0x1}}], 0x400000000000260, 0x0, 0x0)
readv(r6, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/193, 0xc1}], 0x1)

20.408517626s ago: executing program 2 (id=4282):
socket$kcm(0x10, 0x0, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x3}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48)
sendto$isdn(r1, &(0x7f0000000480)={0x101, 0x0, "20eb0efe02a0d5bac1b6b8cba9a0d87fd14910fdb73da1492794cd554909a0b2fd471150"}, 0x2c, 0xc0c0, &(0x7f00000004c0)={0x22, 0xc, 0xe, 0x6}, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x5, &(0x7f0000000740)=@framed={{}, [@map_fd={0x18, 0x0, 0x1, 0x0, r3}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000003c0)={'filter\x00', 0x0, 0x0, 0x0, [0x70c, 0x7, 0x80000001, 0x5e8, 0x727, 0x4], 0x3, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}]}, 0xa8)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x18001, 0x9, 0x1}, 0x48)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'ipvlan1\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="4c240500000000001c0012800b0001006d616373656300000c000280060002400000000008000500", @ANYRES32=r6], 0x44}}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000240)='illinois\x00', 0x9)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000200)=0x5, 0x4)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r2, &(0x7f0000000180)='{', 0x1, 0x0, 0x0, 0x0)
sendmmsg$inet(r2, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000940)="014bb6a68759182ab7e144f718ee0b9d487461d1891d71f57a540210b1b32e260da68c9e5042f43d8e39a995d58933e84e8f3166bcc26b57e038599805becad925bd3f30fe3ab8f293da067003b56ad9b156551c", 0x54}, {&(0x7f0000000a00)="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", 0x45a}], 0x2}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)="76896548e84ce2b140d8522fbdfe832e8d71513e3aa66675e037213753148d489bf0596f3bda75a58fb72bdad6fde4d2c403e3ea514388a562e9d593976eee139a450bb8ad", 0x45}, {&(0x7f0000000300)="f0fa7f9fdb6b5b2bcf3b9726fde35d7fddb7f048579a78bfea7c69f25c7761a8b2f46c598c3335d55333355234b6ca56afb9d929d6a2a9c8212eeaa5a4218c268263663a71b06d6fb8dadfe3e6c0b69c374e3e7bd2df0eb19678eab74b0d1235894d2ad54a6bf7771d39142867c39bd1fad299d2b62cd296c293a32536d6b8d8b49df5c6f0c8a9baeb708a45088e68d55975b33f806d5e", 0x97}], 0x2}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000009c0)="1e", 0x1}], 0x1}}], 0x3, 0x0)

20.022154716s ago: executing program 2 (id=4287):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00'}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2}, 0x10)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@cgroup=r4, 0xffffffffffffffff, 0x2, 0x2}, 0x20)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000002c0)=0x5, 0x4)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x13, &(0x7f0000000500)=@framed={{}, [@printk={@x}, @printk={@lli}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r5, 0x2, 0x1, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)
unshare(0x20000400)
r7 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r8 = openat$cgroup_ro(r7, &(0x7f0000000180)='cpu.stat\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x44, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}]}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x44}}, 0x0)
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r9, &(0x7f0000000380)=ANY=[@ANYBLOB="034886dd05000a000000000000006000000001002100fe880001000000000000060000007d01ff0200000000000000000000000000010000eca140"], 0xfdef)
accept$inet6(r8, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000005c0)=0x1c)
getpeername$packet(r8, &(0x7f0000000740)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @multicast}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x5, &(0x7f00000006c0)=@raw=[@generic={0x0, 0x0, 0x3, 0xadb, 0xfff}, @map_fd={0x18, 0x0, 0x1, 0x0, r8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x8}], &(0x7f0000000700)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', r11, 0x0, r8, 0x8, &(0x7f00000007c0)={0x7}, 0x8, 0x10, &(0x7f0000000800)={0x3, 0x5, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff8c}, 0x90)

19.31595324s ago: executing program 2 (id=4293):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f0001000000000000000000020100800c0001000000000000000000140000002001000000000000000000000000000250bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778b5afefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2326237dd5b37f5ae655b1086cda40e00aec58754734be7a495be81dc076eb43d9621dc08c029d1608a487f26fbe810100000001000000430c82565856555ee923c603668fe2db430365c0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac6b337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdce0000"], 0x114}], 0x1, 0x0, 0x0, 0x40}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x2da1, @private0, 0x2623}, @in6={0xa, 0x4e23, 0xffff, @local, 0x4}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e23, 0x8, @private0, 0x1000}], 0x64)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.numa_stat\x00', 0x275a, 0x0)
bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0x4, 0x4}, 0x6)
write$binfmt_script(r1, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="00002dbd7000080000000000000000060000000a0000b86e7fbc31bcd4edba3d7cdb6afa2a894c6a029fc277e82f459b53313562e7ed1b6a3ca069796cba006ad5a72377fb717f868a4b0d7058d4d37af311f07a51"], 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000010)

17.365683944s ago: executing program 2 (id=4314):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt(r0, 0x0, 0x8, &(0x7f0000000100)="cc3ab524", 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0xfecc)
r2 = socket$kcm(0x10, 0x2, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000000)={0xb0, 0x41, 0x0, 0x0, 0x0, {0x1}, [@typed={0x99, 0x3, 0x0, 0x0, @binary="2aef9c300fecc0c9e1ab3ae60fe8e8a0d8b899bcd2a84337491b63f637996474777a550a45360a556748e62b1e9ec85e7e67bfb05b0226cae167b1a0fdb9eab31f66d4da31699976efcbbda6533cc9c0bd6b2829d93ad6a98c85be5d0cd2fbd13920a3e49b9e5108b3290482b091fb81e57d9fb375113c09e4b94b56b0ae46f87583010a6fcd10615efa17c65d8d18e66d306ccb76"}]}, 0xb0}}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x4000890)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
socket(0x80000000000000a, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8}, 0x48)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r6)
sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x24, r7, 0x50b, 0x0, 0x0, {0xd}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x24}}, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001ac0)={@cgroup, 0xffffffffffffffff, 0x15, 0x20, 0xffffffffffffffff, @prog_id}, 0x20)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYRES16=r9, @ANYBLOB="010000000000000000000100000000000000014100000014001700000000000000007564703a73797a3200000000"], 0x30}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r10 = socket(0x0, 0x0, 0x0)
connect$tipc(r10, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
recvmmsg(r10, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000540)=""/228, 0xe4}, {0x0}], 0x2, &(0x7f0000000680)=""/3, 0x3}}], 0x1, 0x0, 0x0)
sendmmsg$inet(r10, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000140)='s', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000018c0)}}], 0x2, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='workqueue_queue_work\x00', r11}, 0x10)

5.572639243s ago: executing program 1 (id=4391):
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
accept4$phonet_pipe(r2, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x800)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000e8a43dab0014001a80100004800c00", @ANYRES8=r2], 0x34}}, 0x0)
accept$alg(r2, 0x0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x2, 0x9, 0x0, 0x2, 0x2}, 0x10}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, 0x0, 0x0) (async)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async)
socket(0x10, 0x80002, 0x0) (async)
accept4$phonet_pipe(r2, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x800) (async)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000e8a43dab0014001a80100004800c00", @ANYRES8=r2], 0x34}}, 0x0) (async)
accept$alg(r2, 0x0, 0x0) (async)
socket$key(0xf, 0x3, 0x2) (async)
sendmsg$key(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x2, 0x9, 0x0, 0x2, 0x2}, 0x10}}, 0x0) (async)

5.180916074s ago: executing program 1 (id=4394):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f00000008c0), 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
socket$unix(0x1, 0x2, 0x0)

5.014394216s ago: executing program 3 (id=4395):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000d80), r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
close(0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
getsockname(0xffffffffffffffff, &(0x7f00000014c0)=@ll={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @link_local}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000001180)={<r3=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x15, &(0x7f00000011c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @jmp={0x5, 0x0, 0x9, 0x9, 0xa, 0x0, 0x8}, @jmp={0x5, 0x0, 0x0, 0x0, 0x6, 0x18, 0xfffffffffffffff0}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0xa}, 0x20)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0)

4.947607273s ago: executing program 1 (id=4396):
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@broadcast, @broadcast, @val, {@ipv4}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
socket$packet(0x11, 0x3, 0x300) (async)
r1 = socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300) (async)
socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x21}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r4 = socket$packet(0x11, 0x2, 0x300)
getsockname$packet(r1, 0x0, &(0x7f0000000680))
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x48)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000080)={r5, 0x3, 0x6, @broadcast}, 0x10)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x8}, 0x8) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x8, <r6=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xf, 0x1, &(0x7f00000003c0)=@raw=[@alu={0x4, 0x1, 0x4, 0x9, 0x0, 0xffffffffffffffff}], &(0x7f0000000440)='GPL\x00', 0x6, 0x1000, &(0x7f0000000bc0)=""/4096, 0x41000, 0x20, '\x00', r5, 0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0xa, 0x0, 0x4}, 0x10, r6, r3, 0x0, &(0x7f0000000540)=[r2, r2, r2, r2, 0xffffffffffffffff, r2, r2, r2], 0x0, 0x10, 0x10000}, 0x90)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x0}, 0x90)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300))
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2b, 0x4, 0x2}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r8, &(0x7f0000000240), 0x20000000}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r8, &(0x7f0000000100)}, 0x20)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "b1d65ab71f5ef2fe", "9e8ecc7bb5352776725e1047711330ff2bb17b550800", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38)
syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd602e5cea00403c0020010000000000000000000000000000ff0200000000000000000000000000010004001400000000c910fe"], 0x0) (async)
syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd602e5cea00403c0020010000000000000000000000000000ff0200000000000000000000000000010004001400000000c910fe"], 0x0)

4.796229324s ago: executing program 3 (id=4397):
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000200)={&(0x7f0000000180)="00b4", 0x0, 0x0, 0x0}, 0x38)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'})
write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[], 0xffdd)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="e6", 0x1}], 0x1}, 0x2404c001)
recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2)
sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000008c0)="17", 0x1}], 0x1}, 0x0)
close(r3)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r6 = socket(0xa, 0x3, 0x4)
getsockopt$nfc_llcp(r6, 0x29, 0x24, 0x0, 0x20000000)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={<r7=>0x0, 0x36, 0x9, 0x3, 0x1, 0x7}, &(0x7f0000000280)=0x14)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000300)={r7, 0x4}, 0x8)
openat$cgroup_freezer_state(r5, &(0x7f00000002c0), 0x2, 0x0)

4.701591697s ago: executing program 1 (id=4398):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpu.idle\x00', 0x2, 0x0)
preadv(r1, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/186, 0xba}], 0x1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
unshare(0x22020400)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00'}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup, r3, 0x0, 0x0, 0x4000}, 0x10)
write$cgroup_type(r2, &(0x7f0000000140), 0x9)
ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x15, 0x2, 0x2}]})

4.206118035s ago: executing program 1 (id=4401):
socket$xdp(0x2c, 0x3, 0x0)
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
unshare(0x80)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x0, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r2, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c076f2c6014f5d219221d80481aed108a2cb749a807133ed7a80ffe0090f000060000000a2bcb503ca00000f7f8900000020000000", 0x48}], 0x1)

4.10815013s ago: executing program 0 (id=4402):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r2, &(0x7f0000000300), 0x20000000}, 0x20)
recvmsg$unix(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/186, 0xba}], 0x1}, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r2, &(0x7f00000000c0)}, 0x20)
close(r1)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x1, 0xb, 0x0}, {0x6, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x17, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

3.830517579s ago: executing program 0 (id=4405):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lli, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc7}}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000280), 0x4)
listen(r2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r3)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240))
ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async)
ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001a00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000000140003000700000000000000000000000000000014000100fe80"], 0x44}}, 0x0) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r4, &(0x7f00000002c0), &(0x7f00000002c0)=""/157}, 0x20) (async, rerun: 32)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r4, &(0x7f0000000000), &(0x7f00000002c0)=""/255}, 0x20) (async, rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) (async)
ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000540)) (async, rerun: 64)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) (async, rerun: 32)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) (async, rerun: 32)
r7 = socket(0x10, 0x803, 0x0)
recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x7d}, {&(0x7f00000007c0)=""/154, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) (async, rerun: 32)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$NBD_CMD_CONNECT(r8, &(0x7f00000008c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)={0x5c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r7}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x53}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
socket$inet6(0xa, 0x2, 0x0)

3.152297256s ago: executing program 4 (id=4409):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='mm_page_alloc\x00', r1}, 0x10) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040)=0x18, &(0x7f0000000140)}, 0x20) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffeca50000007d000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x10001}, 0x48) (async)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYRESHEX=r4], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r7 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r7, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) (async)
bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) (async)
sendmsg$alg(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@iv={0x18}, @op={0x18, 0x114}], 0x30}, 0x0) (async)
ppoll(&(0x7f0000000200)=[{r5, 0x4000}, {r6, 0x20}], 0x2, 0x0, 0xfffffffffffffffe, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x604, 0x20000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SEQ_NR={0x6, 0x5, 0xb}, @IFLA_HSR_VERSION={0x5, 0x6, 0x2}]}}}]}, 0x40}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
socket$nl_route(0x10, 0x3, 0x0)

2.969437377s ago: executing program 4 (id=4410):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x0, 0xfffffffc, @loopback}], 0x2c)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r2, 0x0, 0x12, &(0x7f00000000c0), &(0x7f0000000140)=0x3)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_dccp(0xa, 0x6, 0x0)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
unshare(0x20000400)
r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00')
ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0)
bind$l2tp6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x20)
bind$l2tp6(r3, &(0x7f0000000100)={0xa, 0x0, 0x4, @loopback, 0x0, 0x5}, 0x20)
connect$l2tp6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x20)
socket$inet6(0xa, 0x3, 0x1)
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x12, 0x600, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0)
socket$rxrpc(0x21, 0x2, 0x2)
sendto$inet(0xffffffffffffffff, &(0x7f0000000180)="a7", 0x1, 0x0, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200000000000000000001600000024000180150001006574683a626f6e645f736c6176655f3100000000080003004058dc4a"], 0x38}}, 0x0)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002dbd7000fddbdf250900000028000280040004000c00038008000200090000000400040004000400040004000800020005000000300007800c00030002000000000000000c000400080000000000000008000200ff0100000c0003002a970000000000000400038004000180"], 0x74}, 0x1, 0x0, 0x0, 0x4081}, 0x4000800)
socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))

1.049835033s ago: executing program 0 (id=4411):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d00)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0xc00d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.002038031s ago: executing program 4 (id=4412):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$tipc(r0, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0)

839.97802ms ago: executing program 3 (id=4413):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20)
bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000200)={r0, 0x0, 0x20000000}, 0x20)

839.675443ms ago: executing program 4 (id=4414):
r0 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006800)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

702.160016ms ago: executing program 3 (id=4415):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x800, 0x4)

498.411514ms ago: executing program 3 (id=4416):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a310000000014000780050015000200000008001240f5100000050005000a000000050001000600000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0)

443.960809ms ago: executing program 4 (id=4417):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x0, 0x0, @prog_id}, 0x20)
socket$inet6_dccp(0xa, 0x6, 0x0)

440.001061ms ago: executing program 0 (id=4418):
syz_emit_ethernet(0x3e, &(0x7f0000000380)={@local, @random="0074d47f4800", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @broadcast}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @multicast1}}}}}}, 0x0)

270.501518ms ago: executing program 4 (id=4419):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@private2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0xe8)
syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0)

191.902254ms ago: executing program 3 (id=4420):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106}, 0x18)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r3, @ANYBLOB="08001b"], 0x34}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

191.682147ms ago: executing program 0 (id=4421):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockname(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f00000000c0)=0x80)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0x5450, 0x0)

52.063796ms ago: executing program 0 (id=4422):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [<r1=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x5451, 0x0)

0s ago: executing program 1 (id=4423):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x5452, &(0x7f0000000040))

kernel console output (not intermixed with test programs):

x10
[  419.650815][T17747]  ? ref_tracker_free+0x643/0x7e0
[  419.655925][T17747]  netlink_rcv_skb+0x1e3/0x430
[  419.660766][T17747]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  419.666289][T17747]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  419.671636][T17747]  ? netlink_deliver_tap+0x2e/0x1b0
[  419.676883][T17747]  netlink_unicast+0x7f0/0x990
[  419.681695][T17747]  ? __pfx_netlink_unicast+0x10/0x10
[  419.687014][T17747]  ? __virt_addr_valid+0x183/0x530
[  419.692170][T17747]  ? __check_object_size+0x49c/0x900
[  419.697520][T17747]  ? bpf_lsm_netlink_send+0x9/0x10
[  419.702674][T17747]  netlink_sendmsg+0x8e4/0xcb0
[  419.707496][T17747]  ? __pfx_netlink_sendmsg+0x10/0x10
[  419.712824][T17747]  ? __import_iovec+0x536/0x820
[  419.717712][T17747]  ? aa_sock_msg_perm+0x91/0x160
[  419.722689][T17747]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  419.728015][T17747]  ? security_socket_sendmsg+0x87/0xb0
[  419.733520][T17747]  ? __pfx_netlink_sendmsg+0x10/0x10
[  419.738850][T17747]  __sock_sendmsg+0x221/0x270
[  419.743575][T17747]  ____sys_sendmsg+0x525/0x7d0
[  419.748393][T17747]  ? __pfx_____sys_sendmsg+0x10/0x10
[  419.753784][T17747]  __sys_sendmsg+0x2b0/0x3a0
[  419.758472][T17747]  ? __pfx___sys_sendmsg+0x10/0x10
[  419.763673][T17747]  ? vfs_write+0x7c4/0xc90
[  419.768186][T17747]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  419.774572][T17747]  ? do_syscall_64+0x100/0x230
[  419.779389][T17747]  ? do_syscall_64+0xb6/0x230
[  419.784105][T17747]  do_syscall_64+0xf3/0x230
[  419.788649][T17747]  ? clear_bhb_loop+0x35/0x90
[  419.793376][T17747]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.799315][T17747] RIP: 0033:0x7f23c5f77299
[  419.803771][T17747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  419.823418][T17747] RSP: 002b:00007f23c6cc3048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  419.831901][T17747] RAX: ffffffffffffffda RBX: 00007f23c6106058 RCX: 00007f23c5f77299
[  419.839913][T17747] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000005
[  419.847920][T17747] RBP: 00007f23c6cc30a0 R08: 0000000000000000 R09: 0000000000000000
[  419.855937][T17747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  419.863965][T17747] R13: 000000000000006e R14: 00007f23c6106058 R15: 00007ffe68307ac8
[  419.871993][T17747]  </TASK>
[  419.889839][T17749] netlink: 'syz.1.3183': attribute type 10 has an invalid length.
[  419.898354][T17749] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3183'.
[  419.936826][T17749] team0: entered promiscuous mode
[  419.941937][T17749] team_slave_0: entered promiscuous mode
[  419.956768][T17749] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  419.964422][T17749] bond0: entered promiscuous mode
[  419.970797][T17749] bond_slave_0: entered promiscuous mode
[  419.978042][T17749] bond_slave_1: entered promiscuous mode
[  419.984826][T17749] bridge0: port 3(team0) entered blocking state
[  419.991591][T17749] bridge0: port 3(team0) entered disabled state
[  420.000383][T17749] team0: entered allmulticast mode
[  420.005967][T17749] team_slave_0: entered allmulticast mode
[  420.011803][T17749] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  420.024315][T17749] bond0: entered allmulticast mode
[  420.032281][T17749] bond_slave_0: entered allmulticast mode
[  420.038569][T17749] bond_slave_1: entered allmulticast mode
[  420.049223][T17749] bridge0: port 3(team0) entered blocking state
[  420.055733][T17749] bridge0: port 3(team0) entered forwarding state
[  420.068717][T17602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  420.087270][T17754] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3184'.
[  420.140129][T17757] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3185'.
[  420.224277][T17761] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app
[  420.238286][T17602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  420.266648][T17762] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app
[  420.492046][T17602] team0: Port device team_slave_0 added
[  420.532200][T17602] team0: Port device team_slave_1 added
[  420.612995][T17775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3189'.
[  420.631630][T17775] netlink: 'syz.0.3189': attribute type 11 has an invalid length.
[  420.666908][T17773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3190'.
[  420.780316][T17602] batman_adv: batadv0: Adding interface: batadv_slave_0
[  420.805946][T17602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  420.857998][T17602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  420.892750][T17602] batman_adv: batadv0: Adding interface: batadv_slave_1
[  420.910688][T17602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  420.957686][T17792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  420.975509][T17602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  421.004453][T17792] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3194'.
[  421.171941][T17798] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3193'.
[  421.198168][T17602] hsr_slave_0: entered promiscuous mode
[  421.208637][T17602] hsr_slave_1: entered promiscuous mode
[  421.218784][T17602] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  421.234833][T17602] Cannot create hsr debugfs directory
[  421.502779][T17801] netlink: 'syz.0.3195': attribute type 10 has an invalid length.
[  421.516650][T17801] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  421.533428][T17801] bond9: (slave netdevsim0): Releasing active interface
[  421.569905][T17801] bond0: (slave netdevsim0): Enslaving as an active interface with a down link
[  421.580769][T17513] Bluetooth: hci3: command tx timeout
[  421.712590][T17804] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3196'.
[  421.811632][T17809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3197'.
[  422.297417][T17835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  422.308314][    C1] eth0: bad gso: type: 1, size: 1408
[  422.334882][T17835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  422.357885][T17835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  422.382177][T17835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  422.395892][T17835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  422.406770][T17835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  422.418466][T17835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  422.449919][T17835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  422.605435][T17854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  422.678755][T17602] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  422.749112][T17602] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  422.787919][T17602] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  422.812234][T17602] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  423.152477][T17602] 8021q: adding VLAN 0 to HW filter on device bond0
[  423.204684][T17602] 8021q: adding VLAN 0 to HW filter on device team0
[  423.228268][ T5346] bridge0: port 1(bridge_slave_0) entered blocking state
[  423.235555][ T5346] bridge0: port 1(bridge_slave_0) entered forwarding state
[  423.269794][ T5346] bridge0: port 2(bridge_slave_1) entered blocking state
[  423.277044][ T5346] bridge0: port 2(bridge_slave_1) entered forwarding state
[  423.326778][T17602] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  423.337643][T17602] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  423.737493][T17886] xt_CT: You must specify a L4 protocol and not use inversions on it
[  423.870855][T17602] 8021q: adding VLAN 0 to HW filter on device batadv0
[  424.114770][    C1] eth0: bad gso: type: 1, size: 1408
[  424.123985][    C1] eth0: bad gso: type: 1, size: 1408
[  424.129929][T17602] veth0_vlan: entered promiscuous mode
[  424.159705][T17602] veth1_vlan: entered promiscuous mode
[  424.218465][T17901] netlink: 'syz.4.3221': attribute type 5 has an invalid length.
[  424.377721][T17602] veth0_macvtap: entered promiscuous mode
[  424.409773][T17602] veth1_macvtap: entered promiscuous mode
[  424.463172][T17602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  424.507561][T17602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  424.529463][T17602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  424.555589][T17602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  424.575507][T17602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  424.595789][T17602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  424.616713][T17602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  424.644746][T17602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  424.669282][T17602] batman_adv: batadv0: Interface activated: batadv_slave_0
[  424.692804][T17916] __nla_validate_parse: 12 callbacks suppressed
[  424.692845][T17916] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3226'.
[  424.880956][T17922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3227'.
[  424.917624][T17602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  424.965850][T17602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  424.986581][T17602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  425.007657][T17602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.028029][T17602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  425.054919][T17602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.088802][T17602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  425.111063][T17602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.135845][T17602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  425.159398][T17602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.187032][T17602] batman_adv: batadv0: Interface activated: batadv_slave_1
[  425.221798][T17602] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  425.256006][T17602] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  425.265135][T17602] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  425.315881][T17602] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  425.433945][T17941] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3230'.
[  425.728833][T17239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  425.766183][T17239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  425.777078][T17962] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3234'.
[  425.848869][T17962] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3234'.
[  425.893074][T17964] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3235'.
[  425.969215][T13887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  425.995861][T17955] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3234'.
[  426.005023][T17955] tipc: Started in network mode
[  426.011512][T17969] xt_HMARK: proto mask must be zero with L3 mode
[  426.012025][T13887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  426.036149][T17955] tipc: Node identity aaaaaaaaaa0c, cluster identity 4711
[  426.045157][T17955] tipc: Enabled bearer <eth:bridge0>, priority 16
[  426.061962][T17969] xt_HMARK: proto mask must be zero with L3 mode
[  426.199149][T17979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3144'.
[  426.201012][    C1] eth0: bad gso: type: 1, size: 1408
[  426.268848][T17986] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3239'.
[  426.323316][T17986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3239'.
[  426.505549][T17995] netlink: 'syz.3.3242': attribute type 1 has an invalid length.
[  426.513580][T17995] netlink: 'syz.3.3242': attribute type 1 has an invalid length.
[  426.521920][T17995] netlink: 'syz.3.3242': attribute type 2 has an invalid length.
[  426.728046][T18009] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  426.769414][T18010] netlink: 'syz.2.3246': attribute type 21 has an invalid length.
[  427.172195][    T8] tipc: Node number set to 10922666
[  428.266937][T18092] team_slave_1: entered promiscuous mode
[  428.275072][T18092] team_slave_1: entered allmulticast mode
[  428.326777][T18092] team0: Port device team_slave_1 removed
[  428.476983][    C1] eth0: bad gso: type: 1, size: 1408
[  428.643141][T18101] tipc: Started in network mode
[  428.662452][T18101] tipc: Node identity 9ea75c9069d5, cluster identity 4711
[  428.690284][T18101] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  428.761150][T18108] openvswitch: netlink: IP tunnel dst address not specified
[  428.853670][T18100] tipc: Disabling bearer <eth:syzkaller0>
[  428.887395][T18109] lo: Caught tx_queue_len zero misconfig
[  428.937268][T18109] netlink: 'syz.1.3273': attribute type 2 has an invalid length.
[  429.109177][T18118] netlink: 'syz.0.3276': attribute type 16 has an invalid length.
[  429.156698][T18121] netlink: 'syz.0.3276': attribute type 2 has an invalid length.
[  429.179629][T18121] netlink: 'syz.0.3276': attribute type 2 has an invalid length.
[  429.206337][T18121] netlink: 'syz.0.3276': attribute type 2 has an invalid length.
[  429.214353][T18121] netlink: 'syz.0.3276': attribute type 2 has an invalid length.
[  429.727805][T18144] __nla_validate_parse: 149 callbacks suppressed
[  429.727829][T18144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3283'.
[  430.599663][T18181] netlink: 180656 bytes leftover after parsing attributes in process `syz.1.3294'.
[  431.539140][T18195] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3298'.
[  431.689995][T18203] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3301'.
[  432.452909][ T5230] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  432.470897][ T5230] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  432.495794][ T5230] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  432.506967][ T5230] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  432.519457][ T5230] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  432.527491][ T5230] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  432.602467][T18219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3303'.
[  432.725111][T18223] IPv6: Can't replace route, no match found
[  432.762861][T18225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3304'.
[  433.113437][T13887] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.208806][T18245] validate_nla: 66 callbacks suppressed
[  433.208830][T18245] netlink: 'syz.1.3307': attribute type 10 has an invalid length.
[  433.302386][T18245] mac80211_hwsim hwsim37 wlan1: entered promiscuous mode
[  433.315917][T18245] mac80211_hwsim hwsim37 wlan1: entered allmulticast mode
[  433.325027][T18245] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  433.440055][T13887] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.502052][T18254] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3313'.
[  433.666255][T13887] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.821722][T13887] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.267833][T13887] bridge_slave_1: left allmulticast mode
[  434.286784][T13887] bridge_slave_1: left promiscuous mode
[  434.292711][T13887] bridge0: port 2(bridge_slave_1) entered disabled state
[  434.395261][T13887] bridge_slave_0: left allmulticast mode
[  434.408172][T13887] bridge_slave_0: left promiscuous mode
[  434.428676][T13887] bridge0: port 1(bridge_slave_0) entered disabled state
[  434.616041][ T5230] Bluetooth: hci3: command tx timeout
[  435.392726][T13887] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  435.413624][T13887] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  435.426739][T13887] bond0 (unregistering): Released all slaves
[  435.470334][T18305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3323'.
[  435.589696][T18228] chnl_net:caif_netlink_parms(): no params data found
[  435.653903][T18308] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3324'.
[  435.797288][T18310] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3325'.
[  435.936730][T18317] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3328'.
[  435.996219][T18317] netlink: 'syz.4.3328': attribute type 1 has an invalid length.
[  436.026639][T18317] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3328'.
[  436.187355][T18326] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3329'.
[  436.277429][T18228] bridge0: port 1(bridge_slave_0) entered blocking state
[  436.300474][T18228] bridge0: port 1(bridge_slave_0) entered disabled state
[  436.335855][T18228] bridge_slave_0: entered allmulticast mode
[  436.368751][T18228] bridge_slave_0: entered promiscuous mode
[  436.377895][T18339] netlink: 'syz.1.3331': attribute type 1 has an invalid length.
[  436.403028][T18228] bridge0: port 2(bridge_slave_1) entered blocking state
[  436.415545][T18339] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3331'.
[  436.458613][T18228] bridge0: port 2(bridge_slave_1) entered disabled state
[  436.467350][T18339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3331'.
[  436.485784][T18228] bridge_slave_1: entered allmulticast mode
[  436.553561][T18228] bridge_slave_1: entered promiscuous mode
[  436.695775][ T5230] Bluetooth: hci3: command tx timeout
[  436.743456][T13887] hsr_slave_0: left promiscuous mode
[  436.788745][T13887] hsr_slave_1: left promiscuous mode
[  436.829554][T13887] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  436.845668][T13887] batman_adv: batadv0: Removing interface: batadv_slave_0
[  436.886308][T13887] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  436.915639][T13887] batman_adv: batadv0: Removing interface: batadv_slave_1
[  437.091673][T13887] veth1_macvtap: left promiscuous mode
[  437.103389][T13887] veth0_macvtap: left promiscuous mode
[  437.116154][T13887] veth1_vlan: left promiscuous mode
[  437.128091][T13887] veth0_vlan: left promiscuous mode
[  438.475220][T13887] team0 (unregistering): Port device team_slave_0 removed
[  438.775629][ T5230] Bluetooth: hci3: command tx timeout
[  439.123371][T18228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  439.138979][T18351] team0: Caught tx_queue_len zero misconfig
[  439.216916][T18228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  439.307965][T18370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3340'.
[  439.402520][T18374] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3341'.
[  439.504763][T18390] netlink: 'syz.0.3344': attribute type 9 has an invalid length.
[  439.525732][T18380] can: request_module (can-proto-3) failed.
[  439.554448][T18228] team0: Port device team_slave_0 added
[  439.611685][T18228] team0: Port device team_slave_1 added
[  439.903286][T18228] batman_adv: batadv0: Adding interface: batadv_slave_0
[  439.933053][T18228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  440.019033][    C1] eth0: bad gso: type: 1, size: 1408
[  440.024964][    C1] eth0: bad gso: type: 1, size: 1408
[  440.038132][T18228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  440.113994][T18228] batman_adv: batadv0: Adding interface: batadv_slave_1
[  440.141274][T18228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  440.214357][T18228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  440.252390][T18416] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  440.339118][T18422] netlink: 'syz.3.3351': attribute type 4 has an invalid length.
[  440.446750][T18425] netlink: 'syz.1.3352': attribute type 10 has an invalid length.
[  440.502449][T18426] __nla_validate_parse: 5 callbacks suppressed
[  440.502469][T18426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3352'.
[  440.556001][T18426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3352'.
[  440.631236][T18228] hsr_slave_0: entered promiscuous mode
[  440.642351][T18432] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  440.674553][T18228] hsr_slave_1: entered promiscuous mode
[  440.715975][T18228] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  440.732322][T18228] Cannot create hsr debugfs directory
[  440.749844][T18431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3354'.
[  440.855967][ T5230] Bluetooth: hci3: command tx timeout
[  441.214246][T18441] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3358'.
[  441.281770][T17513] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  441.290146][T18446] netlink: set zone limit has 8 unknown bytes
[  441.295675][T17513] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  441.305074][T17513] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  441.317310][T18449] netlink: 'syz.0.3357': attribute type 27 has an invalid length.
[  441.327603][T17513] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  441.337197][T17513] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  441.355622][T17513] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  442.014809][T17248] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  442.065943][T17248] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.157318][T18460] netlink: 'syz.0.3363': attribute type 10 has an invalid length.
[  442.183828][T18460] hsr0: left promiscuous mode
[  442.191577][T18460] hsr0: entered promiscuous mode
[  442.219778][T18460] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  442.251967][T18460] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  442.275738][T18460] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  442.288393][T18460] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  442.339630][T17248] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  442.363641][T17248] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.393943][T18471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3366'.
[  442.539548][T17248] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  442.580472][T17248] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.623720][T18476] netlink: 45 bytes leftover after parsing attributes in process `syz.0.3367'.
[  442.742269][T17248] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  442.776567][T17248] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.005971][T18489] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3371'.
[  443.075814][T18228] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  443.101518][T18228] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  443.200170][T18228] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  443.273080][T18228] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  443.371003][T17248] bridge_slave_1: left allmulticast mode
[  443.386605][T17248] bridge_slave_1: left promiscuous mode
[  443.412991][T17248] bridge0: port 2(bridge_slave_1) entered disabled state
[  443.416444][T17513] Bluetooth: hci5: command tx timeout
[  443.468768][T17248] bridge_slave_0: left allmulticast mode
[  443.474488][T17248] bridge_slave_0: left promiscuous mode
[  443.489643][T17248] bridge0: port 1(bridge_slave_0) entered disabled state
[  443.504846][T18502] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3374'.
[  443.509781][T17248] tipc: Resetting bearer <eth:bridge0>
[  443.594222][T18504] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3374'.
[  443.950666][T17248] tipc: Disabling bearer <eth:bridge0>
[  444.270871][T17248] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  444.280250][T17248] bond_slave_0: left promiscuous mode
[  444.300611][T17248] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  444.314640][T17248] bond_slave_1: left promiscuous mode
[  444.323890][T17248] bond0 (unregistering): (slave team0): Releasing backup interface
[  444.333509][T17248] team0: left promiscuous mode
[  444.339148][T17248] team_slave_0: left promiscuous mode
[  444.352177][T17248] bond0 (unregistering): Released all slaves
[  444.367571][T17248] bond1 (unregistering): Released all slaves
[  444.384030][T17248] bond2 (unregistering): Released all slaves
[  444.400140][T17248] bond3 (unregistering): Released all slaves
[  444.419840][T17248] bond4 (unregistering): Released all slaves
[  444.452740][T17248] bond5 (unregistering): Released all slaves
[  444.468500][T17248] bond6 (unregistering): Released all slaves
[  444.494274][T17248] bond7 (unregistering): Released all slaves
[  444.509788][T17248] bond8 (unregistering): Released all slaves
[  444.532842][T17248] bond9 (unregistering): Released all slaves
[  444.567854][T17248] bond10 (unregistering): Released all slaves
[  444.586430][T17248] bond11 (unregistering): Released all slaves
[  444.616609][T18445] chnl_net:caif_netlink_parms(): no params data found
[  444.827660][T17248] tipc: Left network mode
[  444.873973][T18525] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3377'.
[  445.020111][T18519] netlink: 'syz.1.3377': attribute type 4 has an invalid length.
[  445.112098][T18519] netlink: 'syz.1.3377': attribute type 4 has an invalid length.
[  445.177123][T18445] bridge0: port 1(bridge_slave_0) entered blocking state
[  445.184453][T18445] bridge0: port 1(bridge_slave_0) entered disabled state
[  445.207067][T18445] bridge_slave_0: entered allmulticast mode
[  445.225852][T18445] bridge_slave_0: entered promiscuous mode
[  445.243785][T18445] bridge0: port 2(bridge_slave_1) entered blocking state
[  445.256027][T18445] bridge0: port 2(bridge_slave_1) entered disabled state
[  445.269541][T18445] bridge_slave_1: entered allmulticast mode
[  445.287109][T18445] bridge_slave_1: entered promiscuous mode
[  445.495631][T17513] Bluetooth: hci5: command tx timeout
[  445.540021][T18445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  445.599911][T18541] netlink: 'syz.0.3382': attribute type 1 has an invalid length.
[  445.771679][T18445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  445.849955][T18544] bond24: (slave gre1): The slave device specified does not support setting the MAC address
[  445.881912][T18544] bond24: (slave gre1): Setting fail_over_mac to active for active-backup mode
[  445.911369][T18544] bond24: (slave gre1): making interface the new active one
[  445.934756][T18544] bond24: (slave gre1): Enslaving as an active interface with an up link
[  445.951652][T18545] __nla_validate_parse: 2 callbacks suppressed
[  445.951676][T18545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3382'.
[  446.000133][T17248] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  446.026843][T17248] batman_adv: batadv0: Removing interface: batadv_slave_0
[  446.057215][T17248] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  446.064716][T17248] batman_adv: batadv0: Removing interface: batadv_slave_1
[  446.116117][T17248] veth1_macvtap: left promiscuous mode
[  446.121827][T17248] veth0_macvtap: left promiscuous mode
[  446.149113][T18552] xt_l2tp: wrong L2TP version: 0
[  446.156234][T17248] veth1_vlan: left promiscuous mode
[  446.164466][T17248] veth0_vlan: left promiscuous mode
[  446.570122][T17248] pim6reg527 (unregistering): left allmulticast mode
[  447.126537][T17248] team0 (unregistering): Port device team_slave_0 removed
[  447.576058][T17513] Bluetooth: hci5: command tx timeout
[  447.665216][T18564] smc: net device batadv_slave_1 applied user defined pnetid SYZ0
[  447.724417][T18445] team0: Port device team_slave_0 added
[  447.761141][T18445] team0: Port device team_slave_1 added
[  447.836414][T18574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3389'.
[  447.959544][T18445] batman_adv: batadv0: Adding interface: batadv_slave_0
[  447.970163][T18445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  447.997747][T18445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  448.022829][T18228] 8021q: adding VLAN 0 to HW filter on device bond0
[  448.039959][T18576] netlink: 'syz.0.3388': attribute type 21 has an invalid length.
[  448.056581][T18576] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3388'.
[  448.077389][T18445] batman_adv: batadv0: Adding interface: batadv_slave_1
[  448.103670][T18445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  448.158064][T18445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  448.249408][T18228] 8021q: adding VLAN 0 to HW filter on device team0
[  448.279635][T18588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  448.382857][T18445] hsr_slave_0: entered promiscuous mode
[  448.403052][T18445] hsr_slave_1: entered promiscuous mode
[  448.414680][T18445] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  448.425816][T18445] Cannot create hsr debugfs directory
[  448.439725][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[  448.446978][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[  448.488163][ T5281] bridge0: port 2(bridge_slave_1) entered blocking state
[  448.495351][ T5281] bridge0: port 2(bridge_slave_1) entered forwarding state
[  448.828839][T18601] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3396'.
[  448.846958][T18602] netlink: 'syz.3.3395': attribute type 3 has an invalid length.
[  448.854748][T18602] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3395'.
[  448.931963][T18602] netlink: 'syz.3.3395': attribute type 3 has an invalid length.
[  448.989336][T18602] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3395'.
[  449.209696][T18228] 8021q: adding VLAN 0 to HW filter on device batadv0
[  449.421508][T18228] veth0_vlan: entered promiscuous mode
[  449.478699][T18228] veth1_vlan: entered promiscuous mode
[  449.551534][T18445] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  449.583384][T18445] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  449.621341][T18445] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  449.659246][T17513] Bluetooth: hci5: command tx timeout
[  449.669746][T18228] veth0_macvtap: entered promiscuous mode
[  449.686827][T18445] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  449.732916][T18228] veth1_macvtap: entered promiscuous mode
[  449.791840][T18620] netlink: 'syz.1.3398': attribute type 1 has an invalid length.
[  449.816285][T18620] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  449.820187][T18622] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3398'.
[  449.954890][T18634] Bluetooth: MGMT ver 1.23
[  450.012530][T18228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  450.035736][T18228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  450.059464][T18228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  450.080619][T18228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  450.101192][T18228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  450.125745][T18228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  450.142841][T18228] batman_adv: batadv0: Interface activated: batadv_slave_0
[  450.221887][T18228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  450.253281][T18228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  450.281206][T18228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  450.302183][T18228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  450.320799][T18228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  450.345576][T18228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  450.366338][T18228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  450.389732][T18228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  450.415171][T18228] batman_adv: batadv0: Interface activated: batadv_slave_1
[  450.452629][T18228] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  450.495683][T18228] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  450.524838][T18228] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  450.554094][T18228] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  450.858599][T18445] 8021q: adding VLAN 0 to HW filter on device bond0
[  451.162435][T18445] 8021q: adding VLAN 0 to HW filter on device team0
[  451.209660][T17248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  451.236978][T17248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  451.328609][  T942] bridge0: port 1(bridge_slave_0) entered blocking state
[  451.336036][  T942] bridge0: port 1(bridge_slave_0) entered forwarding state
[  451.377768][  T942] bridge0: port 2(bridge_slave_1) entered blocking state
[  451.385015][  T942] bridge0: port 2(bridge_slave_1) entered forwarding state
[  451.566553][T13887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  451.574431][T13887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  451.940584][T18669] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3297'.
[  451.968326][T18674] x_tables: duplicate underflow at hook 3
[  452.008606][T18669] team_slave_1: entered promiscuous mode
[  452.014429][T18669] team_slave_1: entered allmulticast mode
[  452.139528][T18669] team0: Port device team_slave_1 removed
[  452.158272][T18673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3297'.
[  452.249416][T18445] 8021q: adding VLAN 0 to HW filter on device batadv0
[  453.029460][T18723] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3419'.
[  453.431864][T18737] x_tables: ip_tables: TCPMSS target: only valid for protocol 6
[  453.467372][T18730] rdma_op ffff88802f7ec9f0 conn xmit_rdma 0000000000000000
[  453.560915][T18735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3421'.
[  453.585724][T18735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3421'.
[  453.610031][T18735] netlink: 'syz.1.3421': attribute type 6 has an invalid length.
[  453.726638][T18730] bond0: (slave wlan1): Releasing backup interface
[  453.769888][T18730] mac80211_hwsim hwsim37 wlan1 (unregistering): left promiscuous mode
[  453.787027][T18730] mac80211_hwsim hwsim37 wlan1 (unregistering): left allmulticast mode
[  455.924469][T18741] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3422'.
[  455.955030][T18746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3422'.
[  456.015745][T18749] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3425'.
[  456.254350][T18445] veth0_vlan: entered promiscuous mode
[  456.312616][T18445] veth1_vlan: entered promiscuous mode
[  456.347690][T18773] netlink: 'syz.3.3430': attribute type 21 has an invalid length.
[  456.370783][T18773] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3430'.
[  456.416005][T18773] netlink: 'syz.3.3430': attribute type 5 has an invalid length.
[  456.423809][T18773] netlink: 'syz.3.3430': attribute type 6 has an invalid length.
[  456.449736][T18773] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3430'.
[  456.537882][T18445] veth0_macvtap: entered promiscuous mode
[  456.579533][T18445] veth1_macvtap: entered promiscuous mode
[  456.649215][T18445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  456.680296][T18445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.700698][T18445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  456.731644][T18445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.755337][T18445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  456.776588][T18445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.806813][T18445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  456.829096][T18445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.858633][T18445] batman_adv: batadv0: Interface activated: batadv_slave_0
[  456.962470][T18790] x_tables: ip_tables: TCPMSS target: only valid for protocol 6
[  456.998900][T18796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3434'.
[  457.011125][T18790] rdma_op ffff888074f9b9f0 conn xmit_rdma 0000000000000000
[  457.045135][T18796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3434'.
[  457.086231][T18796] netlink: 'syz.3.3434': attribute type 6 has an invalid length.
[  457.098545][T18445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  457.112567][T18445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  457.124930][T18445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  457.142118][T18445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  457.153232][T18445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  457.164338][T18445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  457.174651][T18445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  457.187795][T18445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  457.204872][T18445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  457.223495][T18445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  457.239781][T18445] batman_adv: batadv0: Interface activated: batadv_slave_1
[  457.274507][T18790] bond0: (slave wlan1): Releasing backup interface
[  457.282632][T18790] mac80211_hwsim hwsim3 wlan1 (unregistering): left promiscuous mode
[  457.308963][T18800] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3437'.
[  457.319485][T18802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3437'.
[  457.363284][T18445] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  457.403415][T18445] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  457.433134][T18445] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  457.460257][T18445] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  457.666856][T18812] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3439'.
[  457.703283][T18813] ɶƣ0GCTw
�: entered promiscuous mode
[  457.703912][T18818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3443'.
[  457.738619][T18818] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  457.745956][T18818] IPv6: NLM_F_CREATE should be set when creating new route
[  457.753257][T18818] IPv6: NLM_F_CREATE should be set when creating new route
[  457.802620][T17239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  457.823502][T17239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  457.901227][T13887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  457.931793][T13887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  458.149335][T18827] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3445'.
[  458.493120][T18856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3452'.
[  458.608197][T18860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3452'.
[  458.717546][T18859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3451'.
[  458.736545][T18859] netlink: 'syz.4.3451': attribute type 6 has an invalid length.
[  458.768068][T18854] x_tables: ip_tables: TCPMSS target: only valid for protocol 6
[  458.816584][T18854] rdma_op ffff88805ef391f0 conn xmit_rdma 0000000000000000
[  459.452738][T18885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  459.519612][T18885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  459.710310][T18895] can: request_module (can-proto-0) failed.
[  459.911692][T18904] team_slave_1: entered promiscuous mode
[  459.923703][T18904] team_slave_1: entered allmulticast mode
[  459.957486][T18904] team0: Port device team_slave_1 removed
[  460.337941][T18926] netlink: 'syz.2.3468': attribute type 6 has an invalid length.
[  460.368247][T18926] x_tables: ip_tables: TCPMSS target: only valid for protocol 6
[  460.421200][T18919] rdma_op ffff88805cd589f0 conn xmit_rdma 0000000000000000
[  460.591131][    C1] eth0: bad gso: type: 1, size: 1408
[  460.629425][T18939] netlink: 'syz.4.3473': attribute type 7 has an invalid length.
[  460.648292][T18939] netlink: 'syz.4.3473': attribute type 8 has an invalid length.
[  460.658972][T18935] delete_channel: no stack
[  460.669722][T18941] syz.4.3473[18941] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  460.669967][T18941] syz.4.3473[18941] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  460.693276][T18939] syz.4.3473[18939] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  460.746214][T18939] syz.4.3473[18939] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  460.885820][T18948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  460.941603][T18952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  460.978647][T18938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  461.058354][T18952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  461.125123][T18952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  461.170158][T18952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  461.736230][T17513] Bluetooth: hci5: command tx timeout
[  461.856631][T18982] tipc: Failed to obtain node identity
[  461.862196][T18982] tipc: Enabling of bearer <ib:gre0> rejected, failed to enable media
[  462.019987][T18985] netlink: 'syz.2.3486': attribute type 10 has an invalid length.
[  462.154949][T19004] __nla_validate_parse: 15 callbacks suppressed
[  462.154974][T19004] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3485'.
[  462.218617][T18985] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  462.237807][T19004] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes.
[  462.482850][T19008] bond32: entered promiscuous mode
[  462.502591][T19011] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3491'.
[  462.580593][T19012] bond32: (slave team_slave_1): Enslaving as an active interface with an up link
[  462.606261][T19016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3490'.
[  462.626897][T19016] bond32: left promiscuous mode
[  462.701406][    C1] eth0: bad gso: type: 1, size: 1408
[  462.824704][T19023] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3494'.
[  462.876861][T19026] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3496'.
[  462.920535][T19026] netlink: 'syz.2.3496': attribute type 8 has an invalid length.
[  463.457605][T19050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3499'.
[  463.679817][T19059] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3504'.
[  463.794439][T19063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3506'.
[  463.864869][T19067] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3505'.
[  463.930846][T19067] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes.
[  464.229940][    C1] eth0: bad gso: type: 1, size: 1408
[  464.632150][T19099] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[  464.667820][T19100] netlink: 'syz.2.3516': attribute type 12 has an invalid length.
[  464.697240][T19100] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3516'.
[  465.053628][T19112] netlink: 'syz.2.3518': attribute type 7 has an invalid length.
[  465.108245][T19116] syz.2.3518[19116] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  465.108508][T19116] syz.2.3518[19116] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  465.115834][T19112] netlink: 'syz.2.3518': attribute type 8 has an invalid length.
[  465.247389][T19111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  465.421170][T19126] bond25: entered promiscuous mode
[  465.441568][T19126] bond25: (slave team_slave_1): Enslaving as an active interface with an up link
[  465.457242][T19126] bond25: left promiscuous mode
[  465.544696][T19135] openvswitch: netlink: Multiple metadata blocks provided
[  465.689860][T19140] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes.
[  465.742303][T19143] bond0: (slave netdevsim0): Releasing backup interface
[  465.788036][T19143] batman_adv: batadv1: Adding interface: netdevsim0
[  465.796051][T19143] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  465.830496][T19143] batman_adv: batadv1: Not using interface netdevsim0 (retrying later): interface not active
[  465.925451][    C1] eth0: bad gso: type: 1, size: 1408
[  465.988528][T19150] block nbd0: must specify backend
[  466.274793][T19158] IPVS: length: 206 != 24
[  466.482158][    C1] eth0: bad gso: type: 1, size: 1408
[  466.687028][T19172] bond26: entered promiscuous mode
[  466.836768][T19176] bond25: (slave team_slave_1): Releasing backup interface
[  466.890005][T19176] bond26: (slave team_slave_1): Enslaving as an active interface with an up link
[  466.927808][T19179] bond26: left promiscuous mode
[  467.175790][T19188] __nla_validate_parse: 10 callbacks suppressed
[  467.175812][T19188] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3537'.
[  467.196435][T19191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3539'.
[  467.228003][T19188] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes.
[  467.271094][T19196] xt_bpf: check failed: parse error
[  467.315750][T19191] batman_adv: batadv1: Removing interface: netdevsim0
[  467.378766][T19191] batman_adv: batadv2: Adding interface: netdevsim0
[  467.416609][T19191] batman_adv: batadv2: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  467.498194][T19191] batman_adv: batadv2: Not using interface netdevsim0 (retrying later): interface not active
[  467.590118][T19200] syzkaller0: entered allmulticast mode
[  467.639192][T19210] xt_ecn: cannot match TCP bits for non-tcp packets
[  467.676463][T19190] syzkaller0: left allmulticast mode
[  467.727104][T19214] netlink: 'syz.1.3541': attribute type 11 has an invalid length.
[  467.817745][T19212] netlink: 'syz.1.3541': attribute type 11 has an invalid length.
[  467.831725][T19217] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3546'.
[  467.906870][T19212] debugfs: Directory 'netdev:' with parent 'phy37' already present!
[  468.448181][T19249] netlink: 'syz.3.3545': attribute type 10 has an invalid length.
[  468.593938][T19253] bond1: entered promiscuous mode
[  468.629877][T19260] bond1: (slave team_slave_1): Enslaving as an active interface with an up link
[  468.656978][T19264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3550'.
[  468.705743][T19264] bond1: left promiscuous mode
[  469.046631][T19284] netlink: 'syz.4.3553': attribute type 1 has an invalid length.
[  469.121709][T19290] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3552'.
[  469.314080][T19295] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  469.571753][T19306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3558'.
[  469.638451][T19314] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3561'.
[  469.732023][T19312] bridge0: port 4(vlan1) entered blocking state
[  469.746165][T19312] bridge0: port 4(vlan1) entered disabled state
[  469.752835][T19312] vlan1: entered allmulticast mode
[  469.802537][T19312] vlan1: left allmulticast mode
[  469.876721][T19306] batman_adv: batadv1: Adding interface: netdevsim0
[  469.896103][T19306] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  469.939093][T19306] batman_adv: batadv1: Interface activated: netdevsim0
[  470.334581][T19338] netlink: 'syz.0.3563': attribute type 1 has an invalid length.
[  470.388953][T19338] bond27: entered promiscuous mode
[  470.511094][T19353] bond26: (slave team_slave_1): Releasing backup interface
[  470.590287][T19353] bond27: (slave team_slave_1): Enslaving as an active interface with an up link
[  470.643328][T19354] bridge0: port 3(geneve1) entered blocking state
[  470.665842][T19354] bridge0: port 3(geneve1) entered disabled state
[  470.685336][T19354] geneve1: entered allmulticast mode
[  470.714141][T19354] geneve1: entered promiscuous mode
[  470.733849][T19354] bridge0: port 3(geneve1) entered blocking state
[  470.740559][T19354] bridge0: port 3(geneve1) entered forwarding state
[  470.816849][T19357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3563'.
[  470.844943][T19357] bond27: left promiscuous mode
[  470.866977][T19358] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  471.293236][    C1] eth0: bad gso: type: 1, size: 1408
[  471.849879][T19403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3578'.
[  471.965599][T19403] batman_adv: batadv2: Removing interface: netdevsim0
[  472.037053][T19403] batman_adv: batadv3: Adding interface: netdevsim0
[  472.085910][T19403] batman_adv: batadv3: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  472.190455][T19403] batman_adv: batadv3: Not using interface netdevsim0 (retrying later): interface not active
[  472.278533][T19414] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  472.717868][ T5230] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  472.730344][ T5230] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  472.740881][ T5230] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  472.759673][ T5230] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  472.777885][ T5230] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  472.787781][ T5230] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  472.906004][T19441] netlink: 'syz.4.3582': attribute type 1 has an invalid length.
[  473.053043][T19441] bond1: entered promiscuous mode
[  473.122081][T19444] bond1: (slave team_slave_1): Enslaving as an active interface with an up link
[  473.143256][T19447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3582'.
[  473.154249][T19447] bond1: left promiscuous mode
[  473.171164][T19450] netlink: 19 bytes leftover after parsing attributes in process `syz.1.3586'.
[  473.197223][T19450] caif0: entered allmulticast mode
[  473.203931][T19454] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3587'.
[  473.214980][T19453] netlink: 'syz.1.3586': attribute type 2 has an invalid length.
[  473.236330][T19453] netlink: 'syz.1.3586': attribute type 2 has an invalid length.
[  473.251258][T19452] pimreg: entered allmulticast mode
[  473.270628][T19454] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3587'.
[  473.327127][T19452] pimreg: left allmulticast mode
[  474.320537][T19429] chnl_net:caif_netlink_parms(): no params data found
[  474.383241][T19499] netlink: 'syz.1.3598': attribute type 20 has an invalid length.
[  474.594980][T19508] bridge0: port 2(bridge_slave_1) entered listening state
[  474.624708][T19515] syz.2.3597[19515] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  474.624877][T19515] syz.2.3597[19515] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  474.751739][T19429] bridge0: port 1(bridge_slave_0) entered blocking state
[  474.792054][T19429] bridge0: port 1(bridge_slave_0) entered disabled state
[  474.815778][T19429] bridge_slave_0: entered allmulticast mode
[  474.840280][T19429] bridge_slave_0: entered promiscuous mode
[  474.856728][ T5230] Bluetooth: hci2: command tx timeout
[  474.863959][T19429] bridge0: port 2(bridge_slave_1) entered blocking state
[  474.915569][T19429] bridge0: port 2(bridge_slave_1) entered disabled state
[  474.938128][T19429] bridge_slave_1: entered allmulticast mode
[  474.951802][T19429] bridge_slave_1: entered promiscuous mode
[  474.990374][T19532] netlink: 'syz.3.3604': attribute type 1 has an invalid length.
[  475.023653][T19532] bond33: entered promiscuous mode
[  475.051394][T19535] bond32: (slave team_slave_1): Releasing backup interface
[  475.190142][T19535] bond33: (slave team_slave_1): making interface the new active one
[  475.224444][T19535] bond33: (slave team_slave_1): Enslaving as an active interface with an up link
[  475.294484][T19544] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3608'.
[  475.302293][T19429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  475.304944][T19547] netlink: 'syz.1.3609': attribute type 1 has an invalid length.
[  475.334703][T19532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3604'.
[  475.341755][T19547] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.3609'.
[  475.355555][T19532] bond33: left promiscuous mode
[  475.360886][T19547] netlink: 'syz.1.3609': attribute type 1 has an invalid length.
[  475.394830][T19429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  475.585642][T19429] team0: Port device team_slave_0 added
[  475.599492][T19429] team0: Port device team_slave_1 added
[  475.635942][T19550] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3610'.
[  475.669489][T19552] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3611'.
[  475.699247][T19429] batman_adv: batadv0: Adding interface: batadv_slave_0
[  475.706816][T19552] delete_channel: no stack
[  475.721229][T19429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  475.790808][T19429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  475.853671][T19429] batman_adv: batadv0: Adding interface: batadv_slave_1
[  475.873284][T19429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  475.922376][T19559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  475.954988][T19429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  475.983567][T19560] netlink: 'syz.3.3614': attribute type 1 has an invalid length.
[  476.049073][T19560] bond34: entered promiscuous mode
[  476.088601][T19559] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3612'.
[  476.149317][T19564] bond33: (slave team_slave_1): Releasing active interface
[  476.158458][T19556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  476.180097][T19562] netlink: 'syz.1.3613': attribute type 10 has an invalid length.
[  476.202802][T19564] bond34: (slave team_slave_1): Enslaving as an active interface with an up link
[  476.235160][T19567] bond34: left promiscuous mode
[  476.310385][T19429] hsr_slave_0: entered promiscuous mode
[  476.324223][T19429] hsr_slave_1: entered promiscuous mode
[  476.335572][T19429] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  476.347066][T19429] Cannot create hsr debugfs directory
[  476.626621][T19578] macsec2: entered promiscuous mode
[  476.633170][T19578] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  476.647887][T19578] macsec2: entered allmulticast mode
[  476.653412][T19578] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  476.668456][T19578] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[  476.676176][T19578] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  476.792186][T19429] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  476.804363][T19429] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  476.936635][ T5230] Bluetooth: hci2: command tx timeout
[  477.003989][T19429] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  477.036919][T19429] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  477.060034][T19586] netlink: 'syz.1.3620': attribute type 1 has an invalid length.
[  477.145873][T19586] bond10: entered promiscuous mode
[  477.227089][T19589] bond10: (slave team_slave_1): making interface the new active one
[  477.252940][T19589] bond10: (slave team_slave_1): Enslaving as an active interface with an up link
[  477.308417][T19593] bond10: left promiscuous mode
[  477.459088][T19429] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  477.505567][T19429] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  477.538541][T19603] netlink: 'syz.1.3625': attribute type 1 has an invalid length.
[  477.614306][T19611] dccp_invalid_packet: P.Data Offset(0) too small
[  477.624550][T19603] bond11: entered promiscuous mode
[  477.707203][T19606] bond10: (slave team_slave_1): Releasing active interface
[  477.751620][T19606] bond11: (slave team_slave_1): Enslaving as an active interface with an up link
[  477.836194][T19429] batman_adv: batadv2: Removing interface: netdevsim0
[  477.868351][T19429] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  477.889627][T19429] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  477.951994][T19610] bond11: left promiscuous mode
[  478.294931][T19429] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  478.377958][T19627] vlan6: entered promiscuous mode
[  478.383075][T19627] vlan6: entered allmulticast mode
[  478.443661][T19632] __nla_validate_parse: 6 callbacks suppressed
[  478.443682][T19632] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3630'.
[  478.463439][T19630] debugfs: Directory 'netdev:nicvf0' with parent 'phy51' already present!
[  478.486413][T19429] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  478.514417][T19429] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  478.562225][T19631] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  478.588706][T19631] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  478.598211][T19631] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  478.608618][T19631] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  478.619934][T19631] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  478.631748][T19631] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  478.650434][T19631] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  478.661224][T19631] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  478.674569][T19631] geneve2: entered promiscuous mode
[  478.680509][T19631] geneve2: entered allmulticast mode
[  478.706561][T19639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3632'.
[  478.728155][T19429] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  478.769551][T19637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3632'.
[  479.018081][ T5230] Bluetooth: hci2: command tx timeout
[  479.027139][T19650] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3635'.
[  479.046257][T19650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3635'.
[  479.227723][T19429] 8021q: adding VLAN 0 to HW filter on device bond0
[  479.294342][T19429] 8021q: adding VLAN 0 to HW filter on device team0
[  479.320588][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  479.327883][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  479.367333][T19660] netlink: 'syz.4.3637': attribute type 1 has an invalid length.
[  479.426058][T19660] bond2: entered promiscuous mode
[  479.438354][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  479.445612][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  479.499160][T19660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3637'.
[  479.525771][T19660] bond2: left promiscuous mode
[  479.561242][T19667] bond1: (slave team_slave_1): Releasing backup interface
[  479.609937][T19667] bond2: (slave team_slave_1): Enslaving as an active interface with an up link
[  479.795288][T19672] netlink: 'syz.4.3640': attribute type 2 has an invalid length.
[  479.814758][T19672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3640'.
[  480.163826][T19429] 8021q: adding VLAN 0 to HW filter on device batadv0
[  480.312587][T19429] veth0_vlan: entered promiscuous mode
[  480.354925][T19429] veth1_vlan: entered promiscuous mode
[  480.478498][T19429] veth0_macvtap: entered promiscuous mode
[  480.505069][T19429] veth1_macvtap: entered promiscuous mode
[  480.595284][T19429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  480.635410][T19429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  480.665625][T19429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  480.685515][T19429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  480.705887][T19429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  480.728027][T19429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  480.748859][T19429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  480.775152][T19429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  480.799273][T19429] batman_adv: batadv0: Interface activated: batadv_slave_0
[  480.854209][T19704] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3646'.
[  480.961228][T19429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  481.004122][T19429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  481.034737][T19429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  481.065458][T19429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  481.077334][T19429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  481.090878][T19429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  481.096305][ T5230] Bluetooth: hci2: command tx timeout
[  481.110605][T19429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  481.151961][T19429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  481.181952][T19429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  481.199642][T19429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  481.213494][T19429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  481.224297][T19429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  481.237774][T19429] batman_adv: batadv0: Interface activated: batadv_slave_1
[  481.250131][T19712] netlink: 'syz.4.3648': attribute type 5 has an invalid length.
[  481.290115][T19429] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  481.299627][T19429] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  481.313356][T19429] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  481.324195][T19721] xt_bpf: check failed: parse error
[  481.331515][T19429] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  481.753739][T19484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  481.774873][T19484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  481.813906][T19730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3651'.
[  481.894720][T19730] bond34: (slave team_slave_1): Releasing backup interface
[  481.958065][T19731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3651'.
[  481.992026][T19484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  482.021118][T19484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  482.266326][T19735] netlink: 'syz.2.3652': attribute type 1 has an invalid length.
[  482.357363][T19735] bond2: entered promiscuous mode
[  482.446673][T19740] bond1: (slave team_slave_1): Releasing backup interface
[  482.469585][T19740] bond2: (slave team_slave_1): Enslaving as an active interface with an up link
[  482.539855][T19735] bond2: left promiscuous mode
[  482.790273][T19752] x_tables: duplicate underflow at hook 1
[  483.164906][T19771] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  483.268089][T19775] netlink: 'syz.4.3662': attribute type 28 has an invalid length.
[  483.299607][T19775] netlink: 'syz.4.3662': attribute type 29 has an invalid length.
[  483.501196][T19781] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  483.575305][T19785] __nla_validate_parse: 5 callbacks suppressed
[  483.575329][T19785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3667'.
[  483.647845][T19781] netlink: 'syz.0.3663': attribute type 4 has an invalid length.
[  483.926407][T19799] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3669'.
[  483.997379][T19794] xt_CT: You must specify a L4 protocol and not use inversions on it
[  484.032067][T19794] netlink: 'syz.0.3669': attribute type 30 has an invalid length.
[  484.132253][T19804] x_tables: duplicate underflow at hook 1
[  484.259539][T19813] netlink: zone id is out of range
[  484.270051][T19813] netlink: zone id is out of range
[  484.276002][T19813] netlink: zone id is out of range
[  484.293588][T19813] netlink: set zone limit has 4 unknown bytes
[  485.547362][T19843] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3683'.
[  485.571052][T19843] netlink: 'syz.3.3683': attribute type 1 has an invalid length.
[  485.895445][T19847] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3684'.
[  487.837643][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880252f9800: rx timeout, send abort
[  487.846094][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880252f9c00: rx timeout, send abort
[  487.854778][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880252f9800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  487.869258][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880252f9c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  488.872182][T19834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3680'.
[  488.926319][T19841] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3682'.
[  488.947740][T19848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3684'.
[  488.957248][T19848] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3684'.
[  488.970925][    C1] eth0: bad gso: type: 1, size: 1408
[  488.990497][T19848] vlan6: entered allmulticast mode
[  489.187450][T19854] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3687'.
[  489.306921][T19864] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3689'.
[  489.526611][T19867] bond11: (slave team_slave_1): Releasing backup interface
[  489.571993][T19872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3690'.
[  489.610682][T19875] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3692'.
[  490.648365][T19929] bond2: (slave team_slave_1): Releasing backup interface
[  490.658497][T19933] netlink: 'syz.1.3703': attribute type 1 has an invalid length.
[  490.687251][T19928] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3700'.
[  490.767905][T19929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3704'.
[  490.811671][T19935] �eth0_vlan: renamed from bridge_slave_1 (while UP)
[  491.360046][T19966] IPv6: Can't replace route, no match found
[  491.505242][T19972] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  492.224257][T19988] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-xor(2)
[  493.148370][T20030] tun0: tun_chr_ioctl cmd 1074025692
[  493.237357][T20039] netlink: zone id is out of range
[  493.273660][T20039] netlink: zone id is out of range
[  493.305944][T20039] netlink: zone id is out of range
[  493.774295][T20067] ip6tnl0: Caught tx_queue_len zero misconfig
[  494.305663][T20090] __nla_validate_parse: 9 callbacks suppressed
[  494.305686][T20090] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3745'.
[  494.640868][T20106] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3747'.
[  494.989890][T20119] Cannot find del_set index 4 as target
[  495.201800][T20125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3753'.
[  495.242008][T20130] IPv6: addrconf: prefix option has invalid lifetime
[  495.245701][T20129] IPv6: addrconf: prefix option has invalid lifetime
[  495.612573][T20144] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3758'.
[  495.789111][T20151] tipc: Started in network mode
[  495.799592][T20151] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[  495.829984][T20151] tipc: Enabled bearer <udp:syz0>, priority 10
[  495.978055][T20158] netlink: 'syz.1.3761': attribute type 10 has an invalid length.
[  496.251058][T20173] smc: adding net device pimreg with user defined pnetid SYZ1
[  496.279836][T20175] atomic_op ffff888032cc0198 conn xmit_atomic 0000000000000000
[  496.298272][T20173] pimreg: entered allmulticast mode
[  496.314669][T20179] wg2: entered promiscuous mode
[  496.324829][T20179] wg2: entered allmulticast mode
[  496.357430][T20178] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3767'.
[  496.415541][T20184] netlink: 'syz.1.3767': attribute type 1 has an invalid length.
[  496.435023][    C1] eth0: bad gso: type: 1, size: 1408
[  496.442045][T20184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3767'.
[  496.689725][T20203] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3774'.
[  496.715629][T20203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3774'.
[  496.758104][T20203] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3774'.
[  496.779422][T20207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3775'.
[  496.795891][T20203] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8
[  496.918676][T20213] delete_channel: no stack
[  496.945602][   T25] tipc: Node number set to 4269801488
[  497.152738][T20222] xt_CT: No such helper "netbios-ns"
[  497.209818][T20230] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[  497.667004][T20261] netlink: 'syz.2.3788': attribute type 10 has an invalid length.
[  497.843016][T20261] bond0: (slave netdevsim0): Releasing backup interface
[  497.891969][T20261] team0: Port device netdevsim0 added
[  497.936136][T20267] netlink: 'syz.2.3788': attribute type 10 has an invalid length.
[  497.987717][T20267] team0: Port device netdevsim0 removed
[  498.018394][T20267] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  498.428699][T20301] bond3: entered allmulticast mode
[  498.522707][T20310] netlink: 'syz.1.3797': attribute type 1 has an invalid length.
[  498.543453][T20301] 8021q: adding VLAN 0 to HW filter on device batadv2
[  498.597167][T20301] batadv2: entered allmulticast mode
[  498.603171][T20301] bond3: (slave batadv2): Enslaving as an active interface with an up link
[  498.669632][T20315] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  498.678504][T20314] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  498.717977][T20308] bond3 (unregistering): (slave batadv2): Releasing backup interface
[  498.735949][T20308] batadv2: left allmulticast mode
[  498.764722][T20308] bond3 (unregistering): Released all slaves
[  498.797968][T20314] syzkaller0: entered promiscuous mode
[  498.803552][T20314] syzkaller0: entered allmulticast mode
[  498.877916][T20315] netlink: 'syz.3.3798': attribute type 6 has an invalid length.
[  499.082812][T20331] netlink: 'syz.4.3802': attribute type 12 has an invalid length.
[  499.121697][T20331] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  499.130999][T20331] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  499.139848][T20331] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  499.148688][T20331] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  499.226012][T20331] vxlan0: entered promiscuous mode
[  499.243141][T20335] netlink: 'syz.0.3806': attribute type 5 has an invalid length.
[  499.383343][T20346] __nla_validate_parse: 12 callbacks suppressed
[  499.383367][T20346] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3808'.
[  499.429578][T20350] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0
[  499.448553][T20346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3808'.
[  499.732077][T20364] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3812'.
[  501.089950][T20416] sctp: [Deprecated]: syz.1.3827 (pid 20416) Use of int in max_burst socket option deprecated.
[  501.089950][T20416] Use struct sctp_assoc_value instead
[  501.427602][T20431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3830'.
[  501.879442][T20453] netlink: 404 bytes leftover after parsing attributes in process `syz.1.3838'.
[  501.899916][T20454] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3838'.
[  501.909502][T20453] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3838'.
[  501.941275][T20453] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3838'.
[  502.005850][T20460] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3839'.
[  502.041280][T20460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3839'.
[  502.257411][T20455] gretap0: refused to change device tx_queue_len
[  502.272764][T20455] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  502.542996][T20484] netlink: 'syz.0.3847': attribute type 3 has an invalid length.
[  502.556336][T20484] netlink: 'syz.0.3847': attribute type 3 has an invalid length.
[  502.767864][T20490] Bluetooth: hci3: unsupported parameter 64512
[  502.798325][T20490] Bluetooth: hci3: invalid length 0, exp 2 for type 7
[  503.019934][T20501] team_slave_1: entered promiscuous mode
[  503.036558][T20501] team_slave_1: entered allmulticast mode
[  503.114062][T20501] team0: Port device team_slave_1 removed
[  503.405201][T20512] tun0: tun_chr_ioctl cmd 1074812118
[  503.446935][T20512] pimreg: entered allmulticast mode
[  503.458427][T20517] netlink: 'syz.3.3857': attribute type 1 has an invalid length.
[  503.507205][T20512] dvmrp5: entered allmulticast mode
[  503.538562][T20512] pimreg: left allmulticast mode
[  503.543689][T20512] dvmrp5: left allmulticast mode
[  504.327442][T20558] bridge0: port 2(�eth0_vlan) entered disabled state
[  504.335000][T20558] bridge0: port 1(bridge_slave_0) entered disabled state
[  504.787427][T20568] netlink: 'syz.0.3873': attribute type 4 has an invalid length.
[  504.806153][T20569] netlink: 'syz.0.3873': attribute type 4 has an invalid length.
[  504.858509][T20568] netlink: 'syz.0.3873': attribute type 10 has an invalid length.
[  504.952334][T20568] team0: Port device netdevsim0 added
[  504.986703][T20569] netlink: 'syz.0.3873': attribute type 10 has an invalid length.
[  505.046789][T20577] netlink: 'syz.0.3873': attribute type 10 has an invalid length.
[  505.047106][T20583] netlink: 'syz.2.3876': attribute type 1 has an invalid length.
[  505.103847][T20577] team0: Port device netdevsim0 removed
[  505.146725][T20577] bond0: (slave netdevsim0): Enslaving as an active interface with a down link
[  505.191337][T20584] __nla_validate_parse: 11 callbacks suppressed
[  505.191358][T20584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3876'.
[  505.231045][T20584] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3876'.
[  505.429914][T20591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3877'.
[  505.592939][T20607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3879'.
[  505.613319][T20595] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3878'.
[  505.648578][T20602] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check.
[  505.716012][T20608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3878'.
[  505.740497][T20611] netlink: 'syz.2.3882': attribute type 2 has an invalid length.
[  505.868160][T20617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  505.908339][T20620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  505.990891][T20617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  506.033769][T20620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  506.095286][T20617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  506.510793][T20643] syzkaller0: entered allmulticast mode
[  506.557797][T20643] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3889'.
[  506.642096][    C1] eth0: bad gso: type: 1, size: 1408
[  506.792285][T20661] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3895'.
[  506.825678][T20661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3895'.
[  507.116278][T20682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3900'.
[  507.279237][T20687] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  507.567317][T20671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  507.653084][T20702] netlink: 'syz.2.3908': attribute type 15 has an invalid length.
[  508.362534][T20743] netlink: 'syz.1.3915': attribute type 16 has an invalid length.
[  508.482835][T20759] netlink: 'syz.4.3919': attribute type 1 has an invalid length.
[  508.502882][T20759] NCSI netlink: No device for ifindex 0
[  508.564163][T20761] bond2: (slave team_slave_1): Releasing backup interface
[  508.575205][T20764] netlink: 'syz.0.3922': attribute type 3 has an invalid length.
[  508.811749][T20774] netlink: 'syz.1.3924': attribute type 10 has an invalid length.
[  509.034029][T20797] delete_channel: no stack
[  509.156697][T20805] ebt_among: wrong size: 2080 against expected 2280, rounded to 2280
[  509.180672][T20806] ebt_among: wrong size: 2080 against expected 2280, rounded to 2280
[  509.754076][T20840] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  510.436264][T20868] batadv0: entered promiscuous mode
[  510.570105][T20875] team0: Device batadv0 is up. Set it down before adding it as a team port
[  511.456234][T20900] Bluetooth: MGMT ver 1.23
[  511.516252][T20904] netlink: 'syz.4.3952': attribute type 1 has an invalid length.
[  511.524432][T20904] __nla_validate_parse: 12 callbacks suppressed
[  511.524446][T20904] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3952'.
[  511.893732][T20916] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3955'.
[  511.980961][T20905] netlink: 'syz.3.3954': attribute type 16 has an invalid length.
[  512.020341][T20914] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  512.029373][T20914] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  512.038224][T20914] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  512.047544][T20914] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  512.115549][T20914] vxlan0: entered promiscuous mode
[  512.120753][T20914] vxlan0: entered allmulticast mode
[  512.466974][T20935] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3961'.
[  512.513331][T20935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3961'.
[  512.516188][T20934] netlink: 504 bytes leftover after parsing attributes in process `syz.2.3960'.
[  512.705981][T20937] netlink: 'syz.0.3962': attribute type 12 has an invalid length.
[  512.736087][T20937] netlink: 'syz.0.3962': attribute type 10 has an invalid length.
[  512.753831][T20934] tipc: Started in network mode
[  512.772147][T20934] tipc: Node identity 7ff, cluster identity 2
[  512.788950][T20934] tipc: Node number set to 2047
[  512.986849][T20944] netlink: 'syz.4.3964': attribute type 8 has an invalid length.
[  513.116918][T20950] macvlan2: entered promiscuous mode
[  513.156622][T20950] vlan0: entered promiscuous mode
[  513.206652][T20950] vlan0: left promiscuous mode
[  513.326412][T20960] netlink: 'syz.4.3970': attribute type 7 has an invalid length.
[  513.334207][T20960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3970'.
[  513.439400][T20965] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3971'.
[  513.467568][T20965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3971'.
[  513.557932][T20965] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3971'.
[  513.689841][T20976] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3974'.
[  513.891516][T20984] netlink: 'syz.4.3977': attribute type 12 has an invalid length.
[  514.127438][    C1] eth0: bad gso: type: 1, size: 1408
[  514.388860][T21004] pim6reg1: entered promiscuous mode
[  514.394468][T21004] pim6reg1: entered allmulticast mode
[  514.724850][T21018] bond3: (slave bridge2): Enslaving as an active interface with an up link
[  514.736430][T21022] bridge0: port 3(bond3) entered blocking state
[  514.742828][T21022] bridge0: port 3(bond3) entered disabled state
[  514.836693][T21022] bond3: entered allmulticast mode
[  514.876158][T21022] bridge2: entered allmulticast mode
[  514.901376][T21022] bond3: entered promiscuous mode
[  514.918856][T21022] bridge2: entered promiscuous mode
[  515.093350][T21042] SET target dimension over the limit!
[  515.651802][T21061] netlink: 'syz.2.3998': attribute type 3 has an invalid length.
[  516.218623][T21086] netlink: 'syz.0.4005': attribute type 3 has an invalid length.
[  516.238983][T21086] netlink: 'syz.0.4005': attribute type 3 has an invalid length.
[  516.588420][T21094] __nla_validate_parse: 8 callbacks suppressed
[  516.588441][T21094] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4007'.
[  516.870292][T21119] xt_ipcomp: unknown flags B
[  517.106289][T21131] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4015'.
[  517.160325][T21131] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4015'.
[  517.176096][T21131] netlink: 73 bytes leftover after parsing attributes in process `syz.2.4015'.
[  517.291882][T21148] dummy0: entered promiscuous mode
[  517.298321][T21148] dummy0: left promiscuous mode
[  517.443306][T21154] x_tables: unsorted underflow at hook 3
[  517.671678][T21164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4023'.
[  518.030291][T21177] Cannot find add_set index 0 as target
[  518.117876][T21181] netlink: 'syz.0.4027': attribute type 49 has an invalid length.
[  518.141462][T21177] netlink: 'syz.0.4027': attribute type 49 has an invalid length.
[  518.174456][T21184] dccp_invalid_packet: P.Data Offset(100) too large
[  518.438566][T21193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4031'.
[  518.781095][T21204] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4033'.
[  518.849403][T21210] netlink: 'syz.2.4035': attribute type 4 has an invalid length.
[  518.875209][T21203] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled
[  519.475679][T21230] netlink: 'syz.0.4042': attribute type 4 has an invalid length.
[  519.504525][T21230] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.4042'.
[  519.532634][T21242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4044'.
[  519.559026][T21230] netlink: 'syz.0.4042': attribute type 1 has an invalid length.
[  519.576056][T21230] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4042'.
[  519.599576][T21238] tipc: Started in network mode
[  519.620647][T21238] tipc: Node identity 7ff, cluster identity 2
[  519.638049][T21238] tipc: Node number set to 2047
[  532.596957][T21276] __nla_validate_parse: 2 callbacks suppressed
[  532.596981][T21276] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4053'.
[  532.647332][T21276] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  532.834498][T21283] sctp: [Deprecated]: syz.0.4055 (pid 21283) Use of int in maxseg socket option.
[  532.834498][T21283] Use struct sctp_assoc_value instead
[  533.507738][T21304] syzkaller0: left promiscuous mode
[  533.518817][T21304] syzkaller0: left allmulticast mode
[  533.757044][T21323] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4065'.
[  533.867216][T21270] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4051'.
[  533.901247][T21270] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4051'.
[  533.986021][T21333] netlink: 'syz.1.4069': attribute type 1 has an invalid length.
[  534.166457][T21338] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4069'.
[  534.923659][T21362] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4075'.
[  535.051815][T21366] xt_CT: You must specify a L4 protocol and not use inversions on it
[  535.627995][T21381] xt_CT: No such helper "netbios-ns"
[  536.153494][T21395] bridge0: port 3(geneve1) entered blocking state
[  536.186251][T21395] bridge0: port 3(geneve1) entered disabled state
[  536.202131][T21395] geneve1: entered allmulticast mode
[  536.229440][T21395] geneve1: entered promiscuous mode
[  536.260482][T21397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4085'.
[  536.379600][    C1] eth0: bad gso: type: 1, size: 1408
[  538.527720][T21460] netlink: 'syz.1.4099': attribute type 1 has an invalid length.
[  538.596830][T21460] bond13: entered promiscuous mode
[  538.646190][T21460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4099'.
[  538.676309][T21460] bond13: left promiscuous mode
[  539.225149][T21490] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd
[  539.252849][T21490] vlan2: entered allmulticast mode
[  539.309713][T21490] mac80211_hwsim hwsim55 wlan1: entered allmulticast mode
[  539.317449][T21495] syz.2.4108[21495] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  539.317701][T21495] syz.2.4108[21495] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  539.330417][T21495] syz.2.4108[21495] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  539.344595][T21495] syz.2.4108[21495] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  539.386994][T21495] syz.2.4108[21495] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  539.402397][T21490] mac80211_hwsim hwsim55 wlan1: left allmulticast mode
[  539.411789][T21495] syz.2.4108[21495] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  539.436882][T21495] syz.2.4108[21495] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  539.451038][T21495] syz.2.4108[21495] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  539.464641][T21495] syz.2.4108[21495] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  539.481031][T21495] syz.2.4108[21495] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  539.943162][T21518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4110'.
[  540.326201][T21534] netlink: 'syz.1.4113': attribute type 1 has an invalid length.
[  540.391341][T21534] bond14: entered promiscuous mode
[  540.439315][T21534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4113'.
[  540.485902][T21534] bond14: left promiscuous mode
[  540.621870][T21547] can: request_module (can-proto-0) failed.
[  540.676770][T21547] syzkaller0: entered allmulticast mode
[  540.741380][T21547] syzkaller0 (unregistering): left allmulticast mode
[  540.957109][T21557] netlink: 596 bytes leftover after parsing attributes in process `syz.0.4117'.
[  541.044026][T21542] syzkaller0: entered promiscuous mode
[  541.545891][T21580] xt_CT: You must specify a L4 protocol and not use inversions on it
[  541.762867][T21582] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  541.884646][T21587] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4127'.
[  542.216587][T21593] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4128'.
[  542.236112][T21593] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4128'.
[  542.260720][T21593] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4128'.
[  542.268917][    C1] eth0: bad gso: type: 1, size: 1408
[  542.277826][T21593] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4128'.
[  542.308674][T21593] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4128'.
[  542.357246][T21602] hsr0: entered promiscuous mode
[  542.363632][T21602] macvlan3: entered allmulticast mode
[  542.381599][T21602] hsr0: entered allmulticast mode
[  542.394366][T21602] hsr_slave_0: entered allmulticast mode
[  542.430438][T21602] hsr_slave_1: entered allmulticast mode
[  542.458436][T21602] hsr0: left allmulticast mode
[  542.463600][T21602] hsr_slave_0: left allmulticast mode
[  542.478010][T21602] hsr_slave_1: left allmulticast mode
[  542.591461][    C1] eth0: bad gso: type: 1, size: 1408
[  543.546631][T21648] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd
[  543.699357][T21654] __nla_validate_parse: 125 callbacks suppressed
[  543.699383][T21654] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4143'.
[  544.395684][T17513] Bluetooth: hci2: command 0x0405 tx timeout
[  544.914439][T21656] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4144'.
[  544.956336][T21695] netlink: 'syz.2.4153': attribute type 12 has an invalid length.
[  544.996429][T21695] sctp: [Deprecated]: syz.2.4153 (pid 21695) Use of int in maxseg socket option.
[  544.996429][T21695] Use struct sctp_assoc_value instead
[  545.624453][T21721] openvswitch: netlink: IP tunnel attribute has 2 unknown bytes.
[  545.655557][T21720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4159'.
[  545.948337][T21729] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4164'.
[  546.086867][    C1] eth0: bad gso: type: 1, size: 1408
[  546.160293][T21738] netlink: 'syz.0.4166': attribute type 1 has an invalid length.
[  546.268779][T21738] bond1: entered promiscuous mode
[  546.323171][T21743] bond1: (slave team_slave_1): making interface the new active one
[  546.333760][T21743] bond1: (slave team_slave_1): Enslaving as an active interface with an up link
[  546.343873][T21747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4166'.
[  546.353088][T21747] bond1: left promiscuous mode
[  546.459119][T17513] Bluetooth: hci2: command 0x0405 tx timeout
[  547.131982][T21770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4176'.
[  547.356962][T21775] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.4177'.
[  547.386598][T17513] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  547.399294][T21775] netlink: 'syz.2.4177': attribute type 2 has an invalid length.
[  547.412784][T17513] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  547.416872][T21757] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4170'.
[  547.446192][T17513] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  547.468803][T17513] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  547.478788][T17513] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  547.488334][T17513] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  547.700331][T21745] syzkaller0: entered promiscuous mode
[  547.717754][T21745] syzkaller0: entered allmulticast mode
[  547.873053][T21794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  548.453193][    C1] eth0: bad gso: type: 1, size: 1408
[  549.576422][ T5230] Bluetooth: hci4: command tx timeout
[  549.801959][T21777] chnl_net:caif_netlink_parms(): no params data found
[  549.892225][T21851] netlink: 'syz.1.4197': attribute type 28 has an invalid length.
[  550.062063][T21856] macvlan3: entered allmulticast mode
[  550.071636][T21856] hsr0: entered allmulticast mode
[  550.084701][T21856] hsr_slave_0: entered allmulticast mode
[  550.100891][T21859] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4198'.
[  550.116174][T21856] hsr_slave_1: entered allmulticast mode
[  550.130456][T21859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4198'.
[  550.156284][T21856] hsr0: left allmulticast mode
[  550.162430][T21856] hsr_slave_0: left allmulticast mode
[  550.165859][T21859] netlink: 31 bytes leftover after parsing attributes in process `syz.1.4198'.
[  550.181478][T21856] hsr_slave_1: left allmulticast mode
[  550.205987][T21859] netlink: 'syz.1.4198': attribute type 3 has an invalid length.
[  550.224355][T21859] netlink: 31 bytes leftover after parsing attributes in process `syz.1.4198'.
[  550.284152][T21777] bridge0: port 1(bridge_slave_0) entered blocking state
[  550.295031][T21777] bridge0: port 1(bridge_slave_0) entered disabled state
[  550.308162][T21777] bridge_slave_0: entered allmulticast mode
[  550.316591][T21777] bridge_slave_0: entered promiscuous mode
[  550.346742][T21777] bridge0: port 2(bridge_slave_1) entered blocking state
[  550.354529][T21777] bridge0: port 2(bridge_slave_1) entered disabled state
[  550.362588][T21777] bridge_slave_1: entered allmulticast mode
[  550.373723][T21777] bridge_slave_1: entered promiscuous mode
[  550.489794][T21777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  550.517856][T21777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  550.661038][T21777] team0: Port device team_slave_0 added
[  550.690995][T21777] team0: Port device team_slave_1 added
[  550.779212][T21868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  550.835273][T21868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  550.879990][T21777] batman_adv: batadv0: Adding interface: batadv_slave_0
[  550.911816][T21777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  550.939592][T21868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  551.007983][T21777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  551.042970][T21777] batman_adv: batadv0: Adding interface: batadv_slave_1
[  551.051222][T21777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  551.079839][T21777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  551.240506][T21878] xt_policy: neither incoming nor outgoing policy selected
[  551.252460][T21878] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4203'.
[  551.284725][T21777] hsr_slave_0: entered promiscuous mode
[  551.317738][T21777] hsr_slave_1: entered promiscuous mode
[  551.368704][T21777] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  551.396346][T21777] Cannot create hsr debugfs directory
[  551.666337][ T5230] Bluetooth: hci4: command tx timeout
[  551.816956][T21889] netlink: 'syz.2.4204': attribute type 1 has an invalid length.
[  551.832586][T21889] netlink: 240 bytes leftover after parsing attributes in process `syz.2.4204'.
[  551.914484][T21891] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  552.342375][T21777] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  552.353784][T21777] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  552.364606][T21777] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  552.493583][T21916] netlink: 'syz.0.4211': attribute type 11 has an invalid length.
[  552.519956][T21777] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  552.530923][T21777] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  552.555083][T21777] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  552.704814][T21777] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  552.730644][T21777] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  552.741985][T21777] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  552.899623][T21777] batman_adv: batadv3: Removing interface: netdevsim0
[  552.938749][T21777] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  552.965962][T21777] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  552.985823][T21777] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  553.302929][T21777] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  553.314039][T21947] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4219'.
[  553.331626][T21777] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  553.338771][T21947] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4219'.
[  553.338806][T21947] netlink: 'syz.0.4219': attribute type 6 has an invalid length.
[  553.338824][T21947] netlink: 'syz.0.4219': attribute type 5 has an invalid length.
[  553.338840][T21947] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4219'.
[  553.441096][T21947] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4219'.
[  553.472447][T21777] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  553.578095][T21777] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  553.711401][T21953] netlink: 'syz.0.4220': attribute type 6 has an invalid length.
[  553.747079][ T5230] Bluetooth: hci4: command tx timeout
[  553.840952][T21777] 8021q: adding VLAN 0 to HW filter on device bond0
[  553.888801][T21777] 8021q: adding VLAN 0 to HW filter on device team0
[  553.931570][  T942] bridge0: port 1(bridge_slave_0) entered blocking state
[  553.938864][  T942] bridge0: port 1(bridge_slave_0) entered forwarding state
[  554.006182][  T942] bridge0: port 2(bridge_slave_1) entered blocking state
[  554.013420][  T942] bridge0: port 2(bridge_slave_1) entered forwarding state
[  554.062629][T21957] netlink: 'syz.0.4222': attribute type 11 has an invalid length.
[  554.204132][T21777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  554.943373][T21777] 8021q: adding VLAN 0 to HW filter on device batadv0
[  555.211010][T21777] veth0_vlan: entered promiscuous mode
[  555.241695][T21981] __nla_validate_parse: 2 callbacks suppressed
[  555.241718][T21981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4226'.
[  555.314111][T21777] veth1_vlan: entered promiscuous mode
[  555.384960][T21777] veth0_macvtap: entered promiscuous mode
[  555.458167][T21777] veth1_macvtap: entered promiscuous mode
[  555.553179][T21777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  555.585029][T21777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  555.606801][T21777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  555.638535][T21777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  555.655602][T21777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  555.677197][T21777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  555.692593][T21988] sctp: [Deprecated]: syz.2.4227 (pid 21988) Use of struct sctp_assoc_value in delayed_ack socket option.
[  555.692593][T21988] Use struct sctp_sack_info instead
[  555.705441][T21777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  555.731609][T21777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  555.746828][T21988] sctp: [Deprecated]: syz.2.4227 (pid 21988) Use of struct sctp_assoc_value in delayed_ack socket option.
[  555.746828][T21988] Use struct sctp_sack_info instead
[  555.780863][T21777] batman_adv: batadv0: Interface activated: batadv_slave_0
[  555.818595][T21777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  555.833201][ T5230] Bluetooth: hci4: command tx timeout
[  555.852973][T21777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  555.873851][T21777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  555.901092][T21777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  555.932985][T21777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  555.958762][T21777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  555.981814][T21777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  556.005845][T21777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  556.039304][T21777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  556.065126][T21777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  556.085990][T21777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  556.106950][T21777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  556.133332][T21777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  556.167885][T21777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  556.215994][T21777] batman_adv: batadv0: Interface activated: batadv_slave_1
[  556.252814][T21777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  556.279022][T21777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  556.309082][T21777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  556.334492][T21777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  556.404445][T22006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4232'.
[  556.686659][T22017] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4235'.
[  556.758963][T20724] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  556.777960][T20724] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  556.971014][T21504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  556.998768][T21504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  557.207611][T22036] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4238'.
[  558.409289][T22057] sctp: [Deprecated]: syz.3.4243 (pid 22057) Use of struct sctp_assoc_value in delayed_ack socket option.
[  558.409289][T22057] Use struct sctp_sack_info instead
[  558.447177][T22057] sctp: [Deprecated]: syz.3.4243 (pid 22057) Use of struct sctp_assoc_value in delayed_ack socket option.
[  558.447177][T22057] Use struct sctp_sack_info instead
[  559.209701][T22077] x_tables: duplicate entry at hook 2
[  559.446270][T22082] syzkaller0: entered allmulticast mode
[  559.474829][T22082] syzkaller0 (unregistering): left allmulticast mode
[  560.094632][T22107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4256'.
[  560.236238][    C1] eth0: bad gso: type: 1, size: 1408
[  560.359418][T22118] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4261'.
[  560.377972][T22119] netlink: 'syz.4.4260': attribute type 1 has an invalid length.
[  560.461911][T22127] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4260'.
[  560.692073][T22134] team_slave_0: Caught tx_queue_len zero misconfig
[  561.085973][T22148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4268'.
[  561.195985][T22153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4270'.
[  561.248215][T22155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4268'.
[  561.940697][T22187] team0: Device sit1 is of different type
[  563.310270][T22233] netlink: 'syz.4.4288': attribute type 5 has an invalid length.
[  563.327810][T22233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4288'.
[  563.879892][T22259] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4295'.
[  563.890640][T22259] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4295'.
[  563.935718][T22260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4295'.
[  563.945005][T22260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4295'.
[  563.975877][T22259] ipt_REJECT: TCP_RESET invalid for non-tcp
[  564.089302][T22269] ax25_connect(): syz.1.4298 uses autobind, please contact jreuter@yaina.de
[  564.669863][T22295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  564.821665][T22303] sctp: [Deprecated]: syz.0.4306 (pid 22303) Use of int in maxseg socket option.
[  564.821665][T22303] Use struct sctp_assoc_value instead
[  565.181226][T22300] Bluetooth: hci3: command 0x0406 tx timeout
[  566.049323][T22340] syzkaller0: tun_chr_ioctl cmd 2147767506
[  566.507195][T22300] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  566.526406][T22300] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  566.544850][T22300] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  566.556285][T22300] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  566.566550][T22300] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  566.575966][T22300] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  566.860471][T17513] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  568.629492][T17513] Bluetooth: hci3: command tx timeout
[  569.161839][T22364] bridge0: port 2(bridge_slave_1) entered listening state
[  569.181806][T22372] netlink: 'syz.1.4321': attribute type 1 has an invalid length.
[  569.199688][T22372] netlink: 'syz.1.4321': attribute type 2 has an invalid length.
[  569.218458][T22372] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check.
[  569.260444][T22373] dvmrp0: entered allmulticast mode
[  569.310886][T22376] No such timeout policy "syz0"
[  570.090335][T22415] __nla_validate_parse: 2 callbacks suppressed
[  570.090356][T22415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4332'.
[  570.411532][T22352] chnl_net:caif_netlink_parms(): no params data found
[  570.419190][T22431] IPv6: addrconf: prefix option has invalid lifetime
[  570.673543][T22441] netlink: 'syz.1.4337': attribute type 1 has an invalid length.
[  570.696460][T17513] Bluetooth: hci3: command tx timeout
[  570.816310][T22441] bond16: entered promiscuous mode
[  570.832136][T22352] bridge0: port 1(bridge_slave_0) entered blocking state
[  570.844661][T22352] bridge0: port 1(bridge_slave_0) entered disabled state
[  570.852849][T22352] bridge_slave_0: entered allmulticast mode
[  570.862395][T22352] bridge_slave_0: entered promiscuous mode
[  570.873626][T22352] bridge0: port 2(bridge_slave_1) entered blocking state
[  570.882574][T22352] bridge0: port 2(bridge_slave_1) entered disabled state
[  570.890478][T22352] bridge_slave_1: entered allmulticast mode
[  570.901506][T22352] bridge_slave_1: entered promiscuous mode
[  570.946363][T22443] bond16: (slave team_slave_1): making interface the new active one
[  570.990601][T22443] bond16: (slave team_slave_1): Enslaving as an active interface with an up link
[  571.099723][T22352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  571.130516][T22352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  571.296897][T22352] team0: Port device team_slave_0 added
[  571.310163][T22352] team0: Port device team_slave_1 added
[  571.490600][T22352] batman_adv: batadv0: Adding interface: batadv_slave_0
[  571.499760][T22352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  571.586191][T22352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  571.624363][T22352] batman_adv: batadv0: Adding interface: batadv_slave_1
[  571.642185][T22479] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4347'.
[  571.653412][T22352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  571.731701][T22352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  571.909697][T22492] netlink: 'syz.1.4349': attribute type 1 has an invalid length.
[  571.978400][T22492] bond17: entered promiscuous mode
[  572.000370][T22352] hsr_slave_0: entered promiscuous mode
[  572.040049][T22352] hsr_slave_1: entered promiscuous mode
[  572.054114][T22352] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  572.070111][T22501] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4352'.
[  572.088445][T22352] Cannot create hsr debugfs directory
[  572.097795][T22498] bond16: (slave team_slave_1): Releasing active interface
[  572.136541][T22502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4352'.
[  572.138260][T22498] bond17: (slave team_slave_1): making interface the new active one
[  572.158781][T22498] bond17: (slave team_slave_1): Enslaving as an active interface with an up link
[  572.303228][T22501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4352'.
[  572.357042][T22504] x_tables: duplicate underflow at hook 1
[  572.438983][T22506] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.4354'.
[  572.786798][T17513] Bluetooth: hci3: command tx timeout
[  572.972016][T22352] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  573.061880][T22534] syzkaller0: left promiscuous mode
[  573.080112][T22534] syzkaller0: left allmulticast mode
[  573.213199][T22352] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  573.571828][T22352] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  573.661486][T22550] netlink: 'syz.1.4364': attribute type 1 has an invalid length.
[  573.823916][T22550] bond18: entered promiscuous mode
[  573.897527][T22552] bond17: (slave team_slave_1): Releasing active interface
[  573.957562][T22552] bond18: (slave team_slave_1): making interface the new active one
[  573.979535][T22552] bond18: (slave team_slave_1): Enslaving as an active interface with an up link
[  574.012613][T22554] netlink: 340 bytes leftover after parsing attributes in process `syz.4.4365'.
[  574.049442][T22558] netlink: 'syz.0.4366': attribute type 9 has an invalid length.
[  574.116149][T22560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4366'.
[  574.269778][T22565] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4368'.
[  574.556584][T22352] bond0: (slave netdevsim0): Releasing backup interface
[  574.609254][T22570] netlink: 'syz.4.4370': attribute type 1 has an invalid length.
[  574.616265][T22352] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  574.727461][T22572] netlink: 'syz.1.4371': attribute type 10 has an invalid length.
[  574.796841][T22575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4370'.
[  574.869568][T17513] Bluetooth: hci3: command tx timeout
[  575.210057][T22352] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  575.239839][T22589] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4376'.
[  575.254179][T22352] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  575.267847][T22588] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4375'.
[  575.327930][T22352] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  575.407955][T22352] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  575.596186][T22603] netlink: 'syz.1.4377': attribute type 1 has an invalid length.
[  575.763347][T22603] bond19: entered promiscuous mode
[  575.846046][T22601] netlink: 'syz.0.4369': attribute type 30 has an invalid length.
[  575.853964][T22601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4369'.
[  575.900817][T22601] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[  575.914911][T22611] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4369'.
[  575.924552][T22611] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4369'.
[  575.956024][T22610] bond18: (slave team_slave_1): Releasing active interface
[  576.036478][T22610] bond19: (slave team_slave_1): making interface the new active one
[  576.048786][T22621] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4380'.
[  576.060812][T22610] bond19: (slave team_slave_1): Enslaving as an active interface with an up link
[  576.209843][T22352] 8021q: adding VLAN 0 to HW filter on device bond0
[  576.287686][T22352] 8021q: adding VLAN 0 to HW filter on device team0
[  576.321105][ T5281] bridge0: port 1(bridge_slave_0) entered blocking state
[  576.328388][ T5281] bridge0: port 1(bridge_slave_0) entered forwarding state
[  576.378297][ T5281] bridge0: port 2(bridge_slave_1) entered blocking state
[  576.385555][ T5281] bridge0: port 2(bridge_slave_1) entered forwarding state
[  576.541471][T22627] netlink: 'syz.1.4383': attribute type 10 has an invalid length.
[  576.924332][T22352] 8021q: adding VLAN 0 to HW filter on device batadv0
[  577.124107][T22352] veth0_vlan: entered promiscuous mode
[  577.171730][T22352] veth1_vlan: entered promiscuous mode
[  577.208494][T22648] netlink: 'syz.3.4389': attribute type 1 has an invalid length.
[  577.403476][T22648] bond1: entered promiscuous mode
[  577.500749][T22665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  577.525804][T22654] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  577.563448][T22654] bond1: (slave netdevsim0): Enslaving as an active interface with a down link
[  577.830210][T22352] veth0_macvtap: entered promiscuous mode
[  577.862347][T22352] veth1_macvtap: entered promiscuous mode
[  577.945224][T22352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  577.974967][T22673] netlink: 'syz.3.4395': attribute type 1 has an invalid length.
[  577.996003][T22352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  578.007983][T22352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  578.019646][T22352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  578.033272][T22352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  578.045289][T22352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  578.057384][T22352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  578.068169][T22300] Bluetooth: hci3: command 0x0405 tx timeout
[  578.068406][T22352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  578.094702][T22352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  578.138275][T22352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  578.163078][T22352] batman_adv: batadv0: Interface activated: batadv_slave_0
[  578.249827][T22352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  578.305481][T22352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  578.337081][T22352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  578.365712][T22352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  578.385876][T22352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  578.405704][T22352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  578.425639][T22352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  578.445752][T22352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  578.495496][T22352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  578.515541][T22352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  578.535084][T22352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  578.565723][T22352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  578.592065][T22352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  578.616452][T22352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  578.635722][T22352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  578.655456][T22352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  578.702025][T22352] batman_adv: batadv0: Interface activated: batadv_slave_1
[  579.038695][T22681] syzkaller0: entered promiscuous mode
[  579.044281][T22681] syzkaller0: entered allmulticast mode
[  579.097234][T22352] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  579.135683][T22352] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  579.144465][T22352] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  579.187399][T22352] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  579.256943][T22707] netlink: 'syz.0.4405': attribute type 3 has an invalid length.
[  579.919330][T22731] xt_NFQUEUE: number of total queues is 0
[  582.547215][T13890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  582.575808][T13890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  582.722063][T21504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  582.746266][T21504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  582.868647][T22749] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  582.969016][  T942] ==================================================================
[  582.977135][  T942] BUG: KASAN: slab-use-after-free in sco_sock_timeout+0x8b/0x270
[  582.984903][  T942] Write of size 4 at addr ffff88802be63080 by task kworker/1:2/942
[  582.992819][  T942] 
[  582.995163][  T942] CPU: 1 UID: 0 PID: 942 Comm: kworker/1:2 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0
[  583.005523][  T942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  583.015703][  T942] Workqueue: events sco_sock_timeout
[  583.021048][  T942] Call Trace:
[  583.024348][  T942]  <TASK>
[  583.027302][  T942]  dump_stack_lvl+0x241/0x360
[  583.032242][  T942]  ? __pfx_dump_stack_lvl+0x10/0x10
[  583.037482][  T942]  ? __pfx__printk+0x10/0x10
[  583.042103][  T942]  ? _printk+0xd5/0x120
[  583.046289][  T942]  ? __virt_addr_valid+0x183/0x530
[  583.051427][  T942]  ? __virt_addr_valid+0x183/0x530
[  583.056576][  T942]  print_report+0x169/0x550
[  583.061124][  T942]  ? __virt_addr_valid+0x183/0x530
[  583.066266][  T942]  ? __virt_addr_valid+0x183/0x530
[  583.071408][  T942]  ? __virt_addr_valid+0x45f/0x530
[  583.076551][  T942]  ? __phys_addr+0xba/0x170
[  583.081087][  T942]  ? sco_sock_timeout+0x8b/0x270
[  583.086071][  T942]  kasan_report+0x143/0x180
[  583.090619][  T942]  ? __pfx_lock_acquire+0x10/0x10
[  583.095685][  T942]  ? sco_sock_timeout+0x8b/0x270
[  583.100671][  T942]  kasan_check_range+0x282/0x290
[  583.105661][  T942]  sco_sock_timeout+0x8b/0x270
[  583.110464][  T942]  ? process_scheduled_works+0x945/0x1830
[  583.116220][  T942]  process_scheduled_works+0xa2c/0x1830
[  583.121822][  T942]  ? __pfx_process_scheduled_works+0x10/0x10
[  583.127847][  T942]  ? assign_work+0x364/0x3d0
[  583.132476][  T942]  worker_thread+0x86d/0xd40
[  583.137114][  T942]  ? __kthread_parkme+0x169/0x1d0
[  583.142178][  T942]  ? __pfx_worker_thread+0x10/0x10
[  583.147325][  T942]  kthread+0x2f0/0x390
[  583.151422][  T942]  ? __pfx_worker_thread+0x10/0x10
[  583.156576][  T942]  ? __pfx_kthread+0x10/0x10
[  583.161191][  T942]  ret_from_fork+0x4b/0x80
[  583.165642][  T942]  ? __pfx_kthread+0x10/0x10
[  583.170257][  T942]  ret_from_fork_asm+0x1a/0x30
[  583.175073][  T942]  </TASK>
[  583.178113][  T942] 
[  583.180466][  T942] Allocated by task 22587:
[  583.184892][  T942]  kasan_save_track+0x3f/0x80
[  583.189606][  T942]  __kasan_kmalloc+0x98/0xb0
[  583.194235][  T942]  __kmalloc_noprof+0x1fc/0x400
[  583.199117][  T942]  sk_prot_alloc+0xe0/0x210
[  583.203651][  T942]  sk_alloc+0x38/0x370
[  583.207750][  T942]  __netlink_create+0x65/0x260
[  583.212538][  T942]  netlink_create+0x3ab/0x560
[  583.217248][  T942]  __sock_create+0x490/0x920
[  583.221879][  T942]  __sys_socket+0x150/0x3c0
[  583.226413][  T942]  __x64_sys_socket+0x7a/0x90
[  583.231115][  T942]  do_syscall_64+0xf3/0x230
[  583.235642][  T942]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  583.241566][  T942] 
[  583.243911][  T942] Freed by task 16:
[  583.247734][  T942]  kasan_save_track+0x3f/0x80
[  583.252444][  T942]  kasan_save_free_info+0x40/0x50
[  583.257497][  T942]  poison_slab_object+0xe0/0x150
[  583.262470][  T942]  __kasan_slab_free+0x37/0x60
[  583.267266][  T942]  kfree+0x149/0x360
[  583.271192][  T942]  __sk_destruct+0x476/0x5f0
[  583.275816][  T942]  rcu_core+0xafd/0x1830
[  583.280090][  T942]  handle_softirqs+0x2c4/0x970
[  583.284886][  T942]  run_ksoftirqd+0xca/0x130
[  583.289429][  T942]  smpboot_thread_fn+0x544/0xa30
[  583.294401][  T942]  kthread+0x2f0/0x390
[  583.298491][  T942]  ret_from_fork+0x4b/0x80
[  583.302960][  T942]  ret_from_fork_asm+0x1a/0x30
[  583.307757][  T942] 
[  583.310095][  T942] Last potentially related work creation:
[  583.315821][  T942]  kasan_save_stack+0x3f/0x60
[  583.320531][  T942]  __kasan_record_aux_stack+0xac/0xc0
[  583.325936][  T942]  call_rcu+0x167/0xa70
[  583.330128][  T942]  netlink_release+0x1638/0x1b10
[  583.335088][  T942]  sock_close+0xbc/0x240
[  583.339354][  T942]  __fput+0x24a/0x8a0
[  583.343369][  T942]  task_work_run+0x24f/0x310
[  583.347987][  T942]  syscall_exit_to_user_mode+0x168/0x370
[  583.353651][  T942]  do_syscall_64+0x100/0x230
[  583.358271][  T942]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  583.364194][  T942] 
[  583.366532][  T942] The buggy address belongs to the object at ffff88802be63000
[  583.366532][  T942]  which belongs to the cache kmalloc-2k of size 2048
[  583.380612][  T942] The buggy address is located 128 bytes inside of
[  583.380612][  T942]  freed 2048-byte region [ffff88802be63000, ffff88802be63800)
[  583.394703][  T942] 
[  583.397046][  T942] The buggy address belongs to the physical page:
[  583.403486][  T942] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2be60
[  583.412285][  T942] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  583.420810][  T942] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  583.428827][  T942] page_type: 0xfdffffff(slab)
[  583.433539][  T942] raw: 00fff00000000040 ffff888015442000 0000000000000000 dead000000000001
[  583.442156][  T942] raw: 0000000000000000 0000000000080008 00000001fdffffff 0000000000000000
[  583.450776][  T942] head: 00fff00000000040 ffff888015442000 0000000000000000 dead000000000001
[  583.459476][  T942] head: 0000000000000000 0000000000080008 00000001fdffffff 0000000000000000
[  583.468178][  T942] head: 00fff00000000003 ffffea0000af9801 ffffffffffffffff 0000000000000000
[  583.476876][  T942] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[  583.485565][  T942] page dumped because: kasan: bad access detected
[  583.492014][  T942] page_owner tracks the page as allocated
[  583.497749][  T942] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6232, tgid 6230 (syz.2.253), ts 104659889280, free_ts 104399946917
[  583.520448][  T942]  post_alloc_hook+0x1f3/0x230
[  583.525247][  T942]  get_page_from_freelist+0x2e4c/0x2f10
[  583.530832][  T942]  __alloc_pages_noprof+0x256/0x6c0
[  583.536068][  T942]  alloc_slab_page+0x5f/0x120
[  583.540777][  T942]  allocate_slab+0x5a/0x2f0
[  583.545305][  T942]  ___slab_alloc+0xcd1/0x14b0
[  583.550010][  T942]  __slab_alloc+0x58/0xa0
[  583.554382][  T942]  __kmalloc_noprof+0x25a/0x400
[  583.559267][  T942]  sk_prot_alloc+0xe0/0x210
[  583.563801][  T942]  sk_alloc+0x38/0x370
[  583.567901][  T942]  __netlink_create+0x65/0x260
[  583.572690][  T942]  __netlink_kernel_create+0x174/0x6f0
[  583.578177][  T942]  nfnetlink_net_init+0xba/0x140
[  583.583149][  T942]  ops_init+0x359/0x610
[  583.587341][  T942]  setup_net+0x515/0xca0
[  583.591621][  T942]  copy_net_ns+0x4e2/0x7b0
[  583.596065][  T942] page last free pid 6221 tgid 6220 stack trace:
[  583.602411][  T942]  free_unref_page+0xd22/0xea0
[  583.607210][  T942]  __put_partials+0xeb/0x130
[  583.611825][  T942]  put_cpu_partial+0x17c/0x250
[  583.616635][  T942]  __slab_free+0x2ea/0x3d0
[  583.621082][  T942]  qlist_free_all+0x9e/0x140
[  583.625703][  T942]  kasan_quarantine_reduce+0x14f/0x170
[  583.631193][  T942]  __kasan_slab_alloc+0x23/0x80
[  583.636083][  T942]  kmem_cache_alloc_noprof+0x135/0x2a0
[  583.641575][  T942]  security_inode_alloc+0x28/0x120
[  583.646718][  T942]  inode_init_always+0x966/0xc90
[  583.651695][  T942]  new_inode_pseudo+0x9e/0x1a0
[  583.656504][  T942]  __sock_create+0x123/0x920
[  583.661122][  T942]  __sys_socket+0x150/0x3c0
[  583.665654][  T942]  __x64_sys_socket+0x7a/0x90
[  583.670362][  T942]  do_syscall_64+0xf3/0x230
[  583.674909][  T942]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  583.680841][  T942] 
[  583.683179][  T942] Memory state around the buggy address:
[  583.688824][  T942]  ffff88802be62f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  583.696910][  T942]  ffff88802be63000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  583.704996][  T942] >ffff88802be63080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  583.713076][  T942]                    ^
[  583.717163][  T942]  ffff88802be63100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  583.725247][  T942]  ffff88802be63180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  583.733337][  T942] ==================================================================
[  583.748214][  T942] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  583.755463][  T942] CPU: 1 UID: 0 PID: 942 Comm: kworker/1:2 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0
[  583.765912][  T942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  583.776004][  T942] Workqueue: events sco_sock_timeout
[  583.781348][  T942] Call Trace:
[  583.784660][  T942]  <TASK>
[  583.787619][  T942]  dump_stack_lvl+0x241/0x360
[  583.792341][  T942]  ? __pfx_dump_stack_lvl+0x10/0x10
[  583.797585][  T942]  ? __pfx__printk+0x10/0x10
[  583.802293][  T942]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  583.808323][  T942]  ? vscnprintf+0x5d/0x90
[  583.812697][  T942]  panic+0x349/0x860
[  583.816713][  T942]  ? check_panic_on_warn+0x21/0xb0
[  583.821858][  T942]  ? __pfx_panic+0x10/0x10
[  583.826309][  T942]  ? _raw_spin_unlock_irqrestore+0xd8/0x140
[  583.832237][  T942]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  583.838165][  T942]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  583.844529][  T942]  check_panic_on_warn+0x86/0xb0
[  583.849499][  T942]  ? sco_sock_timeout+0x8b/0x270
[  583.854458][  T942]  end_report+0x77/0x160
[  583.858728][  T942]  kasan_report+0x154/0x180
[  583.863248][  T942]  ? __pfx_lock_acquire+0x10/0x10
[  583.868294][  T942]  ? sco_sock_timeout+0x8b/0x270
[  583.873257][  T942]  kasan_check_range+0x282/0x290
[  583.878216][  T942]  sco_sock_timeout+0x8b/0x270
[  583.883002][  T942]  ? process_scheduled_works+0x945/0x1830
[  583.888739][  T942]  process_scheduled_works+0xa2c/0x1830
[  583.894318][  T942]  ? __pfx_process_scheduled_works+0x10/0x10
[  583.900324][  T942]  ? assign_work+0x364/0x3d0
[  583.904953][  T942]  worker_thread+0x86d/0xd40
[  583.909569][  T942]  ? __kthread_parkme+0x169/0x1d0
[  583.914614][  T942]  ? __pfx_worker_thread+0x10/0x10
[  583.919737][  T942]  kthread+0x2f0/0x390
[  583.923814][  T942]  ? __pfx_worker_thread+0x10/0x10
[  583.928938][  T942]  ? __pfx_kthread+0x10/0x10
[  583.933531][  T942]  ret_from_fork+0x4b/0x80
[  583.937961][  T942]  ? __pfx_kthread+0x10/0x10
[  583.942558][  T942]  ret_from_fork_asm+0x1a/0x30
[  583.947349][  T942]  </TASK>
[  583.950616][  T942] Kernel Offset: disabled
[  583.954947][  T942] Rebooting in 86400 seconds..