last executing test programs: 21.957865359s ago: executing program 2 (id=4268): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe800000000000000000970000000000aa000000000000000008001200000000000000000000000000e00000bb8ece8ec14d91c70000000000fc01000000000000000000000000000005000600000000000a00"/144], 0xa0}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0100000000000000000002"], 0x1c}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r1}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r7) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe62}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r13, 0xfffff002, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x26c2}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r13, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0], 0x0, 0x64, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0xf4, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000dc0)=r14, 0x4) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r10, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r12, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40210020}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1a495ef400"/18, @ANYRES16=r10, @ANYBLOB="00022cbd7000fddbdf256400000008000300", @ANYRES32=r15, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB="34006cc49a49f71a9ef1173eb16ec7880545e8712f7b004b693c98030000", @ANYRES16=r8, @ANYBLOB="09080000000000000000010000001c0002800c00018008000100070000000c000180080001000600000004000180"], 0x34}}, 0x0) 21.477550662s ago: executing program 2 (id=4274): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @broadcast}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a3842b97289b711b905000000000000000000070000000900010073797a30000000003c000000090abaf3d7173efcac010400000000000000000700000008000a40000000000900020073797a31ffdd00000900010073797a300000000008000540000000216c0000001e0a01030000000000000000070000000900020073797a31000000000900010073797a30000000038010000080080003400000000230000b80030001800a00010071756f74610000001c0002800c00044000000000000000000c000140000000000000000014000000100001000000000000"], 0xf0}}, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x8001000d}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x24, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xac}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7a}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000180)='GPL\x00'}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x40, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) sendmmsg$inet6(r4, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_opts(r5, 0x29, 0x36, 0xfffffffffffffffe, &(0x7f00000001c0)) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r6 = socket$kcm(0x29, 0x2, 0x0) write$binfmt_script(r6, &(0x7f0000003300)={'#! ', './bus'}, 0xff1d) recvmmsg(r6, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x5e, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/121, 0x79}], 0x1}}], 0x400000000000260, 0x0, 0x0) readv(r6, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/193, 0xc1}], 0x1) 20.408517626s ago: executing program 2 (id=4282): socket$kcm(0x10, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x3}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) sendto$isdn(r1, &(0x7f0000000480)={0x101, 0x0, "20eb0efe02a0d5bac1b6b8cba9a0d87fd14910fdb73da1492794cd554909a0b2fd471150"}, 0x2c, 0xc0c0, &(0x7f00000004c0)={0x22, 0xc, 0xe, 0x6}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x5, &(0x7f0000000740)=@framed={{}, [@map_fd={0x18, 0x0, 0x1, 0x0, r3}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000003c0)={'filter\x00', 0x0, 0x0, 0x0, [0x70c, 0x7, 0x80000001, 0x5e8, 0x727, 0x4], 0x3, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}]}, 0xa8) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x18001, 0x9, 0x1}, 0x48) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'ipvlan1\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="4c240500000000001c0012800b0001006d616373656300000c000280060002400000000008000500", @ANYRES32=r6], 0x44}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000240)='illinois\x00', 0x9) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000200)=0x5, 0x4) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f0000000180)='{', 0x1, 0x0, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000940)="014bb6a68759182ab7e144f718ee0b9d487461d1891d71f57a540210b1b32e260da68c9e5042f43d8e39a995d58933e84e8f3166bcc26b57e038599805becad925bd3f30fe3ab8f293da067003b56ad9b156551c", 0x54}, {&(0x7f0000000a00)="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", 0x45a}], 0x2}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)="76896548e84ce2b140d8522fbdfe832e8d71513e3aa66675e037213753148d489bf0596f3bda75a58fb72bdad6fde4d2c403e3ea514388a562e9d593976eee139a450bb8ad", 0x45}, {&(0x7f0000000300)="f0fa7f9fdb6b5b2bcf3b9726fde35d7fddb7f048579a78bfea7c69f25c7761a8b2f46c598c3335d55333355234b6ca56afb9d929d6a2a9c8212eeaa5a4218c268263663a71b06d6fb8dadfe3e6c0b69c374e3e7bd2df0eb19678eab74b0d1235894d2ad54a6bf7771d39142867c39bd1fad299d2b62cd296c293a32536d6b8d8b49df5c6f0c8a9baeb708a45088e68d55975b33f806d5e", 0x97}], 0x2}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000009c0)="1e", 0x1}], 0x1}}], 0x3, 0x0) 20.022154716s ago: executing program 2 (id=4287): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@cgroup=r4, 0xffffffffffffffff, 0x2, 0x2}, 0x20) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000002c0)=0x5, 0x4) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x13, &(0x7f0000000500)=@framed={{}, [@printk={@x}, @printk={@lli}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r5, 0x2, 0x1, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) unshare(0x20000400) r7 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000180)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x44, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}]}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x44}}, 0x0) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r9, &(0x7f0000000380)=ANY=[@ANYBLOB="034886dd05000a000000000000006000000001002100fe880001000000000000060000007d01ff0200000000000000000000000000010000eca140"], 0xfdef) accept$inet6(r8, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000005c0)=0x1c) getpeername$packet(r8, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x5, &(0x7f00000006c0)=@raw=[@generic={0x0, 0x0, 0x3, 0xadb, 0xfff}, @map_fd={0x18, 0x0, 0x1, 0x0, r8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x8}], &(0x7f0000000700)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', r11, 0x0, r8, 0x8, &(0x7f00000007c0)={0x7}, 0x8, 0x10, &(0x7f0000000800)={0x3, 0x5, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff8c}, 0x90) 19.31595324s ago: executing program 2 (id=4293): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x2da1, @private0, 0x2623}, @in6={0xa, 0x4e23, 0xffff, @local, 0x4}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e23, 0x8, @private0, 0x1000}], 0x64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.numa_stat\x00', 0x275a, 0x0) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0x4, 0x4}, 0x6) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="00002dbd7000080000000000000000060000000a0000b86e7fbc31bcd4edba3d7cdb6afa2a894c6a029fc277e82f459b53313562e7ed1b6a3ca069796cba006ad5a72377fb717f868a4b0d7058d4d37af311f07a51"], 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000010) 17.365683944s ago: executing program 2 (id=4314): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt(r0, 0x0, 0x8, &(0x7f0000000100)="cc3ab524", 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000000)={0xb0, 0x41, 0x0, 0x0, 0x0, {0x1}, [@typed={0x99, 0x3, 0x0, 0x0, @binary="2aef9c300fecc0c9e1ab3ae60fe8e8a0d8b899bcd2a84337491b63f637996474777a550a45360a556748e62b1e9ec85e7e67bfb05b0226cae167b1a0fdb9eab31f66d4da31699976efcbbda6533cc9c0bd6b2829d93ad6a98c85be5d0cd2fbd13920a3e49b9e5108b3290482b091fb81e57d9fb375113c09e4b94b56b0ae46f87583010a6fcd10615efa17c65d8d18e66d306ccb76"}]}, 0xb0}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x4000890) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) socket(0x80000000000000a, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8}, 0x48) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r6) sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x24, r7, 0x50b, 0x0, 0x0, {0xd}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x24}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001ac0)={@cgroup, 0xffffffffffffffff, 0x15, 0x20, 0xffffffffffffffff, @prog_id}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYRES16=r9, @ANYBLOB="010000000000000000000100000000000000014100000014001700000000000000007564703a73797a3200000000"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = socket(0x0, 0x0, 0x0) connect$tipc(r10, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r10, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000540)=""/228, 0xe4}, {0x0}], 0x2, &(0x7f0000000680)=""/3, 0x3}}], 0x1, 0x0, 0x0) sendmmsg$inet(r10, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000140)='s', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000018c0)}}], 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='workqueue_queue_work\x00', r11}, 0x10) 5.572639243s ago: executing program 1 (id=4391): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) accept4$phonet_pipe(r2, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x800) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000e8a43dab0014001a80100004800c00", @ANYRES8=r2], 0x34}}, 0x0) accept$alg(r2, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x2, 0x9, 0x0, 0x2, 0x2}, 0x10}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) socket(0x10, 0x80002, 0x0) (async) accept4$phonet_pipe(r2, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x800) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000e8a43dab0014001a80100004800c00", @ANYRES8=r2], 0x34}}, 0x0) (async) accept$alg(r2, 0x0, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x2, 0x9, 0x0, 0x2, 0x2}, 0x10}}, 0x0) (async) 5.180916074s ago: executing program 1 (id=4394): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f00000008c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket$unix(0x1, 0x2, 0x0) 5.014394216s ago: executing program 3 (id=4395): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000d80), r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) getsockname(0xffffffffffffffff, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000001180)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x15, &(0x7f00000011c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @jmp={0x5, 0x0, 0x9, 0x9, 0xa, 0x0, 0x8}, @jmp={0x5, 0x0, 0x0, 0x0, 0x6, 0x18, 0xfffffffffffffff0}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0xa}, 0x20) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0) 4.947607273s ago: executing program 1 (id=4396): syz_emit_ethernet(0x3e, &(0x7f0000000180)={@broadcast, @broadcast, @val, {@ipv4}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x21}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r1, 0x0, &(0x7f0000000680)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x48) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000080)={r5, 0x3, 0x6, @broadcast}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x8}, 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xf, 0x1, &(0x7f00000003c0)=@raw=[@alu={0x4, 0x1, 0x4, 0x9, 0x0, 0xffffffffffffffff}], &(0x7f0000000440)='GPL\x00', 0x6, 0x1000, &(0x7f0000000bc0)=""/4096, 0x41000, 0x20, '\x00', r5, 0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0xa, 0x0, 0x4}, 0x10, r6, r3, 0x0, &(0x7f0000000540)=[r2, r2, r2, r2, 0xffffffffffffffff, r2, r2, r2], 0x0, 0x10, 0x10000}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2b, 0x4, 0x2}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r8, &(0x7f0000000240), 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r8, &(0x7f0000000100)}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "b1d65ab71f5ef2fe", "9e8ecc7bb5352776725e1047711330ff2bb17b550800", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38) syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd602e5cea00403c0020010000000000000000000000000000ff0200000000000000000000000000010004001400000000c910fe"], 0x0) (async) syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd602e5cea00403c0020010000000000000000000000000000ff0200000000000000000000000000010004001400000000c910fe"], 0x0) 4.796229324s ago: executing program 3 (id=4397): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000200)={&(0x7f0000000180)="00b4", 0x0, 0x0, 0x0}, 0x38) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'}) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[], 0xffdd) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="e6", 0x1}], 0x1}, 0x2404c001) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000008c0)="17", 0x1}], 0x1}, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r6 = socket(0xa, 0x3, 0x4) getsockopt$nfc_llcp(r6, 0x29, 0x24, 0x0, 0x20000000) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x36, 0x9, 0x3, 0x1, 0x7}, &(0x7f0000000280)=0x14) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000300)={r7, 0x4}, 0x8) openat$cgroup_freezer_state(r5, &(0x7f00000002c0), 0x2, 0x0) 4.701591697s ago: executing program 1 (id=4398): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpu.idle\x00', 0x2, 0x0) preadv(r1, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/186, 0xba}], 0x1, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) unshare(0x22020400) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup, r3, 0x0, 0x0, 0x4000}, 0x10) write$cgroup_type(r2, &(0x7f0000000140), 0x9) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x15, 0x2, 0x2}]}) 4.206118035s ago: executing program 1 (id=4401): socket$xdp(0x2c, 0x3, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) unshare(0x80) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x0, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r2, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c076f2c6014f5d219221d80481aed108a2cb749a807133ed7a80ffe0090f000060000000a2bcb503ca00000f7f8900000020000000", 0x48}], 0x1) 4.10815013s ago: executing program 0 (id=4402): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r2, &(0x7f0000000300), 0x20000000}, 0x20) recvmsg$unix(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/186, 0xba}], 0x1}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r2, &(0x7f00000000c0)}, 0x20) close(r1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x1, 0xb, 0x0}, {0x6, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x17, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.830517579s ago: executing program 0 (id=4405): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lli, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc7}}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000280), 0x4) listen(r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001a00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000000140003000700000000000000000000000000000014000100fe80"], 0x44}}, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r4, &(0x7f00000002c0), &(0x7f00000002c0)=""/157}, 0x20) (async, rerun: 32) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r4, &(0x7f0000000000), &(0x7f00000002c0)=""/255}, 0x20) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) (async) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000540)) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) (async, rerun: 32) r7 = socket(0x10, 0x803, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x7d}, {&(0x7f00000007c0)=""/154, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) (async, rerun: 32) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f00000008c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)={0x5c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r7}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x53}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$inet6(0xa, 0x2, 0x0) 3.152297256s ago: executing program 4 (id=4409): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='mm_page_alloc\x00', r1}, 0x10) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040)=0x18, &(0x7f0000000140)}, 0x20) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffeca50000007d000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x10001}, 0x48) (async) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYRESHEX=r4], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) (async) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) (async) sendmsg$alg(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@iv={0x18}, @op={0x18, 0x114}], 0x30}, 0x0) (async) ppoll(&(0x7f0000000200)=[{r5, 0x4000}, {r6, 0x20}], 0x2, 0x0, 0xfffffffffffffffe, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x604, 0x20000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SEQ_NR={0x6, 0x5, 0xb}, @IFLA_HSR_VERSION={0x5, 0x6, 0x2}]}}}]}, 0x40}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) 2.969437377s ago: executing program 4 (id=4410): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x0, 0xfffffffc, @loopback}], 0x2c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x0, 0x12, &(0x7f00000000c0), &(0x7f0000000140)=0x3) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$l2tp6(0xa, 0x2, 0x73) unshare(0x20000400) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) bind$l2tp6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x20) bind$l2tp6(r3, &(0x7f0000000100)={0xa, 0x0, 0x4, @loopback, 0x0, 0x5}, 0x20) connect$l2tp6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x20) socket$inet6(0xa, 0x3, 0x1) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x12, 0x600, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) socket$rxrpc(0x21, 0x2, 0x2) sendto$inet(0xffffffffffffffff, &(0x7f0000000180)="a7", 0x1, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200000000000000000001600000024000180150001006574683a626f6e645f736c6176655f3100000000080003004058dc4a"], 0x38}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002dbd7000fddbdf250900000028000280040004000c00038008000200090000000400040004000400040004000800020005000000300007800c00030002000000000000000c000400080000000000000008000200ff0100000c0003002a970000000000000400038004000180"], 0x74}, 0x1, 0x0, 0x0, 0x4081}, 0x4000800) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 1.049835033s ago: executing program 0 (id=4411): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d00)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0xc00d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.002038031s ago: executing program 4 (id=4412): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) 839.97802ms ago: executing program 3 (id=4413): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000200)={r0, 0x0, 0x20000000}, 0x20) 839.675443ms ago: executing program 4 (id=4414): r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006800)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 702.160016ms ago: executing program 3 (id=4415): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x800, 0x4) 498.411514ms ago: executing program 3 (id=4416): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a310000000014000780050015000200000008001240f5100000050005000a000000050001000600000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) 443.960809ms ago: executing program 4 (id=4417): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x0, 0x0, @prog_id}, 0x20) socket$inet6_dccp(0xa, 0x6, 0x0) 440.001061ms ago: executing program 0 (id=4418): syz_emit_ethernet(0x3e, &(0x7f0000000380)={@local, @random="0074d47f4800", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @broadcast}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @multicast1}}}}}}, 0x0) 270.501518ms ago: executing program 4 (id=4419): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@private2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) 191.902254ms ago: executing program 3 (id=4420): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106}, 0x18) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r3, @ANYBLOB="08001b"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 191.682147ms ago: executing program 0 (id=4421): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f00000000c0)=0x80) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0x5450, 0x0) 52.063796ms ago: executing program 0 (id=4422): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x5451, 0x0) 0s ago: executing program 1 (id=4423): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x5452, &(0x7f0000000040)) kernel console output (not intermixed with test programs): x10 [ 419.650815][T17747] ? ref_tracker_free+0x643/0x7e0 [ 419.655925][T17747] netlink_rcv_skb+0x1e3/0x430 [ 419.660766][T17747] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 419.666289][T17747] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 419.671636][T17747] ? netlink_deliver_tap+0x2e/0x1b0 [ 419.676883][T17747] netlink_unicast+0x7f0/0x990 [ 419.681695][T17747] ? __pfx_netlink_unicast+0x10/0x10 [ 419.687014][T17747] ? __virt_addr_valid+0x183/0x530 [ 419.692170][T17747] ? __check_object_size+0x49c/0x900 [ 419.697520][T17747] ? bpf_lsm_netlink_send+0x9/0x10 [ 419.702674][T17747] netlink_sendmsg+0x8e4/0xcb0 [ 419.707496][T17747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.712824][T17747] ? __import_iovec+0x536/0x820 [ 419.717712][T17747] ? aa_sock_msg_perm+0x91/0x160 [ 419.722689][T17747] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 419.728015][T17747] ? security_socket_sendmsg+0x87/0xb0 [ 419.733520][T17747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.738850][T17747] __sock_sendmsg+0x221/0x270 [ 419.743575][T17747] ____sys_sendmsg+0x525/0x7d0 [ 419.748393][T17747] ? __pfx_____sys_sendmsg+0x10/0x10 [ 419.753784][T17747] __sys_sendmsg+0x2b0/0x3a0 [ 419.758472][T17747] ? __pfx___sys_sendmsg+0x10/0x10 [ 419.763673][T17747] ? vfs_write+0x7c4/0xc90 [ 419.768186][T17747] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 419.774572][T17747] ? do_syscall_64+0x100/0x230 [ 419.779389][T17747] ? do_syscall_64+0xb6/0x230 [ 419.784105][T17747] do_syscall_64+0xf3/0x230 [ 419.788649][T17747] ? clear_bhb_loop+0x35/0x90 [ 419.793376][T17747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.799315][T17747] RIP: 0033:0x7f23c5f77299 [ 419.803771][T17747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.823418][T17747] RSP: 002b:00007f23c6cc3048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.831901][T17747] RAX: ffffffffffffffda RBX: 00007f23c6106058 RCX: 00007f23c5f77299 [ 419.839913][T17747] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000005 [ 419.847920][T17747] RBP: 00007f23c6cc30a0 R08: 0000000000000000 R09: 0000000000000000 [ 419.855937][T17747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 419.863965][T17747] R13: 000000000000006e R14: 00007f23c6106058 R15: 00007ffe68307ac8 [ 419.871993][T17747] [ 419.889839][T17749] netlink: 'syz.1.3183': attribute type 10 has an invalid length. [ 419.898354][T17749] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3183'. [ 419.936826][T17749] team0: entered promiscuous mode [ 419.941937][T17749] team_slave_0: entered promiscuous mode [ 419.956768][T17749] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 419.964422][T17749] bond0: entered promiscuous mode [ 419.970797][T17749] bond_slave_0: entered promiscuous mode [ 419.978042][T17749] bond_slave_1: entered promiscuous mode [ 419.984826][T17749] bridge0: port 3(team0) entered blocking state [ 419.991591][T17749] bridge0: port 3(team0) entered disabled state [ 420.000383][T17749] team0: entered allmulticast mode [ 420.005967][T17749] team_slave_0: entered allmulticast mode [ 420.011803][T17749] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 420.024315][T17749] bond0: entered allmulticast mode [ 420.032281][T17749] bond_slave_0: entered allmulticast mode [ 420.038569][T17749] bond_slave_1: entered allmulticast mode [ 420.049223][T17749] bridge0: port 3(team0) entered blocking state [ 420.055733][T17749] bridge0: port 3(team0) entered forwarding state [ 420.068717][T17602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.087270][T17754] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3184'. [ 420.140129][T17757] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3185'. [ 420.224277][T17761] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 420.238286][T17602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.266648][T17762] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 420.492046][T17602] team0: Port device team_slave_0 added [ 420.532200][T17602] team0: Port device team_slave_1 added [ 420.612995][T17775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3189'. [ 420.631630][T17775] netlink: 'syz.0.3189': attribute type 11 has an invalid length. [ 420.666908][T17773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3190'. [ 420.780316][T17602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.805946][T17602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.857998][T17602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.892750][T17602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.910688][T17602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.957686][T17792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.975509][T17602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.004453][T17792] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3194'. [ 421.171941][T17798] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3193'. [ 421.198168][T17602] hsr_slave_0: entered promiscuous mode [ 421.208637][T17602] hsr_slave_1: entered promiscuous mode [ 421.218784][T17602] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 421.234833][T17602] Cannot create hsr debugfs directory [ 421.502779][T17801] netlink: 'syz.0.3195': attribute type 10 has an invalid length. [ 421.516650][T17801] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 421.533428][T17801] bond9: (slave netdevsim0): Releasing active interface [ 421.569905][T17801] bond0: (slave netdevsim0): Enslaving as an active interface with a down link [ 421.580769][T17513] Bluetooth: hci3: command tx timeout [ 421.712590][T17804] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3196'. [ 421.811632][T17809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3197'. [ 422.297417][T17835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.308314][ C1] eth0: bad gso: type: 1, size: 1408 [ 422.334882][T17835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.357885][T17835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.382177][T17835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.395892][T17835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.406770][T17835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.418466][T17835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.449919][T17835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.605435][T17854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.678755][T17602] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 422.749112][T17602] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 422.787919][T17602] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 422.812234][T17602] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 423.152477][T17602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.204684][T17602] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.228268][ T5346] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.235555][ T5346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.269794][ T5346] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.277044][ T5346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.326778][T17602] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 423.337643][T17602] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 423.737493][T17886] xt_CT: You must specify a L4 protocol and not use inversions on it [ 423.870855][T17602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.114770][ C1] eth0: bad gso: type: 1, size: 1408 [ 424.123985][ C1] eth0: bad gso: type: 1, size: 1408 [ 424.129929][T17602] veth0_vlan: entered promiscuous mode [ 424.159705][T17602] veth1_vlan: entered promiscuous mode [ 424.218465][T17901] netlink: 'syz.4.3221': attribute type 5 has an invalid length. [ 424.377721][T17602] veth0_macvtap: entered promiscuous mode [ 424.409773][T17602] veth1_macvtap: entered promiscuous mode [ 424.463172][T17602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.507561][T17602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.529463][T17602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.555589][T17602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.575507][T17602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.595789][T17602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.616713][T17602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.644746][T17602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.669282][T17602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.692804][T17916] __nla_validate_parse: 12 callbacks suppressed [ 424.692845][T17916] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3226'. [ 424.880956][T17922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3227'. [ 424.917624][T17602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.965850][T17602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.986581][T17602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.007657][T17602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.028029][T17602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.054919][T17602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.088802][T17602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.111063][T17602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.135845][T17602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.159398][T17602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.187032][T17602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.221798][T17602] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.256006][T17602] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.265135][T17602] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.315881][T17602] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.433945][T17941] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3230'. [ 425.728833][T17239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.766183][T17239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.777078][T17962] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3234'. [ 425.848869][T17962] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3234'. [ 425.893074][T17964] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3235'. [ 425.969215][T13887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.995861][T17955] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3234'. [ 426.005023][T17955] tipc: Started in network mode [ 426.011512][T17969] xt_HMARK: proto mask must be zero with L3 mode [ 426.012025][T13887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.036149][T17955] tipc: Node identity aaaaaaaaaa0c, cluster identity 4711 [ 426.045157][T17955] tipc: Enabled bearer , priority 16 [ 426.061962][T17969] xt_HMARK: proto mask must be zero with L3 mode [ 426.199149][T17979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3144'. [ 426.201012][ C1] eth0: bad gso: type: 1, size: 1408 [ 426.268848][T17986] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3239'. [ 426.323316][T17986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3239'. [ 426.505549][T17995] netlink: 'syz.3.3242': attribute type 1 has an invalid length. [ 426.513580][T17995] netlink: 'syz.3.3242': attribute type 1 has an invalid length. [ 426.521920][T17995] netlink: 'syz.3.3242': attribute type 2 has an invalid length. [ 426.728046][T18009] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 426.769414][T18010] netlink: 'syz.2.3246': attribute type 21 has an invalid length. [ 427.172195][ T8] tipc: Node number set to 10922666 [ 428.266937][T18092] team_slave_1: entered promiscuous mode [ 428.275072][T18092] team_slave_1: entered allmulticast mode [ 428.326777][T18092] team0: Port device team_slave_1 removed [ 428.476983][ C1] eth0: bad gso: type: 1, size: 1408 [ 428.643141][T18101] tipc: Started in network mode [ 428.662452][T18101] tipc: Node identity 9ea75c9069d5, cluster identity 4711 [ 428.690284][T18101] tipc: Enabled bearer , priority 0 [ 428.761150][T18108] openvswitch: netlink: IP tunnel dst address not specified [ 428.853670][T18100] tipc: Disabling bearer [ 428.887395][T18109] lo: Caught tx_queue_len zero misconfig [ 428.937268][T18109] netlink: 'syz.1.3273': attribute type 2 has an invalid length. [ 429.109177][T18118] netlink: 'syz.0.3276': attribute type 16 has an invalid length. [ 429.156698][T18121] netlink: 'syz.0.3276': attribute type 2 has an invalid length. [ 429.179629][T18121] netlink: 'syz.0.3276': attribute type 2 has an invalid length. [ 429.206337][T18121] netlink: 'syz.0.3276': attribute type 2 has an invalid length. [ 429.214353][T18121] netlink: 'syz.0.3276': attribute type 2 has an invalid length. [ 429.727805][T18144] __nla_validate_parse: 149 callbacks suppressed [ 429.727829][T18144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3283'. [ 430.599663][T18181] netlink: 180656 bytes leftover after parsing attributes in process `syz.1.3294'. [ 431.539140][T18195] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3298'. [ 431.689995][T18203] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3301'. [ 432.452909][ T5230] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 432.470897][ T5230] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 432.495794][ T5230] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 432.506967][ T5230] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 432.519457][ T5230] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 432.527491][ T5230] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 432.602467][T18219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3303'. [ 432.725111][T18223] IPv6: Can't replace route, no match found [ 432.762861][T18225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3304'. [ 433.113437][T13887] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.208806][T18245] validate_nla: 66 callbacks suppressed [ 433.208830][T18245] netlink: 'syz.1.3307': attribute type 10 has an invalid length. [ 433.302386][T18245] mac80211_hwsim hwsim37 wlan1: entered promiscuous mode [ 433.315917][T18245] mac80211_hwsim hwsim37 wlan1: entered allmulticast mode [ 433.325027][T18245] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 433.440055][T13887] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.502052][T18254] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3313'. [ 433.666255][T13887] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.821722][T13887] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.267833][T13887] bridge_slave_1: left allmulticast mode [ 434.286784][T13887] bridge_slave_1: left promiscuous mode [ 434.292711][T13887] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.395261][T13887] bridge_slave_0: left allmulticast mode [ 434.408172][T13887] bridge_slave_0: left promiscuous mode [ 434.428676][T13887] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.616041][ T5230] Bluetooth: hci3: command tx timeout [ 435.392726][T13887] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.413624][T13887] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.426739][T13887] bond0 (unregistering): Released all slaves [ 435.470334][T18305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3323'. [ 435.589696][T18228] chnl_net:caif_netlink_parms(): no params data found [ 435.653903][T18308] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3324'. [ 435.797288][T18310] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3325'. [ 435.936730][T18317] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3328'. [ 435.996219][T18317] netlink: 'syz.4.3328': attribute type 1 has an invalid length. [ 436.026639][T18317] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3328'. [ 436.187355][T18326] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3329'. [ 436.277429][T18228] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.300474][T18228] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.335855][T18228] bridge_slave_0: entered allmulticast mode [ 436.368751][T18228] bridge_slave_0: entered promiscuous mode [ 436.377895][T18339] netlink: 'syz.1.3331': attribute type 1 has an invalid length. [ 436.403028][T18228] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.415545][T18339] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3331'. [ 436.458613][T18228] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.467350][T18339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3331'. [ 436.485784][T18228] bridge_slave_1: entered allmulticast mode [ 436.553561][T18228] bridge_slave_1: entered promiscuous mode [ 436.695775][ T5230] Bluetooth: hci3: command tx timeout [ 436.743456][T13887] hsr_slave_0: left promiscuous mode [ 436.788745][T13887] hsr_slave_1: left promiscuous mode [ 436.829554][T13887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.845668][T13887] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.886308][T13887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.915639][T13887] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.091673][T13887] veth1_macvtap: left promiscuous mode [ 437.103389][T13887] veth0_macvtap: left promiscuous mode [ 437.116154][T13887] veth1_vlan: left promiscuous mode [ 437.128091][T13887] veth0_vlan: left promiscuous mode [ 438.475220][T13887] team0 (unregistering): Port device team_slave_0 removed [ 438.775629][ T5230] Bluetooth: hci3: command tx timeout [ 439.123371][T18228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.138979][T18351] team0: Caught tx_queue_len zero misconfig [ 439.216916][T18228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.307965][T18370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3340'. [ 439.402520][T18374] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3341'. [ 439.504763][T18390] netlink: 'syz.0.3344': attribute type 9 has an invalid length. [ 439.525732][T18380] can: request_module (can-proto-3) failed. [ 439.554448][T18228] team0: Port device team_slave_0 added [ 439.611685][T18228] team0: Port device team_slave_1 added [ 439.903286][T18228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.933053][T18228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.019033][ C1] eth0: bad gso: type: 1, size: 1408 [ 440.024964][ C1] eth0: bad gso: type: 1, size: 1408 [ 440.038132][T18228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.113994][T18228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.141274][T18228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.214357][T18228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.252390][T18416] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 440.339118][T18422] netlink: 'syz.3.3351': attribute type 4 has an invalid length. [ 440.446750][T18425] netlink: 'syz.1.3352': attribute type 10 has an invalid length. [ 440.502449][T18426] __nla_validate_parse: 5 callbacks suppressed [ 440.502469][T18426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3352'. [ 440.556001][T18426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3352'. [ 440.631236][T18228] hsr_slave_0: entered promiscuous mode [ 440.642351][T18432] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 440.674553][T18228] hsr_slave_1: entered promiscuous mode [ 440.715975][T18228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 440.732322][T18228] Cannot create hsr debugfs directory [ 440.749844][T18431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3354'. [ 440.855967][ T5230] Bluetooth: hci3: command tx timeout [ 441.214246][T18441] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3358'. [ 441.281770][T17513] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 441.290146][T18446] netlink: set zone limit has 8 unknown bytes [ 441.295675][T17513] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 441.305074][T17513] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 441.317310][T18449] netlink: 'syz.0.3357': attribute type 27 has an invalid length. [ 441.327603][T17513] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 441.337197][T17513] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 441.355622][T17513] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 442.014809][T17248] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.065943][T17248] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.157318][T18460] netlink: 'syz.0.3363': attribute type 10 has an invalid length. [ 442.183828][T18460] hsr0: left promiscuous mode [ 442.191577][T18460] hsr0: entered promiscuous mode [ 442.219778][T18460] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 442.251967][T18460] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 442.275738][T18460] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 442.288393][T18460] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 442.339630][T17248] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.363641][T17248] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.393943][T18471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3366'. [ 442.539548][T17248] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.580472][T17248] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.623720][T18476] netlink: 45 bytes leftover after parsing attributes in process `syz.0.3367'. [ 442.742269][T17248] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.776567][T17248] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.005971][T18489] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3371'. [ 443.075814][T18228] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 443.101518][T18228] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 443.200170][T18228] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 443.273080][T18228] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 443.371003][T17248] bridge_slave_1: left allmulticast mode [ 443.386605][T17248] bridge_slave_1: left promiscuous mode [ 443.412991][T17248] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.416444][T17513] Bluetooth: hci5: command tx timeout [ 443.468768][T17248] bridge_slave_0: left allmulticast mode [ 443.474488][T17248] bridge_slave_0: left promiscuous mode [ 443.489643][T17248] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.504846][T18502] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3374'. [ 443.509781][T17248] tipc: Resetting bearer [ 443.594222][T18504] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3374'. [ 443.950666][T17248] tipc: Disabling bearer [ 444.270871][T17248] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.280250][T17248] bond_slave_0: left promiscuous mode [ 444.300611][T17248] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.314640][T17248] bond_slave_1: left promiscuous mode [ 444.323890][T17248] bond0 (unregistering): (slave team0): Releasing backup interface [ 444.333509][T17248] team0: left promiscuous mode [ 444.339148][T17248] team_slave_0: left promiscuous mode [ 444.352177][T17248] bond0 (unregistering): Released all slaves [ 444.367571][T17248] bond1 (unregistering): Released all slaves [ 444.384030][T17248] bond2 (unregistering): Released all slaves [ 444.400140][T17248] bond3 (unregistering): Released all slaves [ 444.419840][T17248] bond4 (unregistering): Released all slaves [ 444.452740][T17248] bond5 (unregistering): Released all slaves [ 444.468500][T17248] bond6 (unregistering): Released all slaves [ 444.494274][T17248] bond7 (unregistering): Released all slaves [ 444.509788][T17248] bond8 (unregistering): Released all slaves [ 444.532842][T17248] bond9 (unregistering): Released all slaves [ 444.567854][T17248] bond10 (unregistering): Released all slaves [ 444.586430][T17248] bond11 (unregistering): Released all slaves [ 444.616609][T18445] chnl_net:caif_netlink_parms(): no params data found [ 444.827660][T17248] tipc: Left network mode [ 444.873973][T18525] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3377'. [ 445.020111][T18519] netlink: 'syz.1.3377': attribute type 4 has an invalid length. [ 445.112098][T18519] netlink: 'syz.1.3377': attribute type 4 has an invalid length. [ 445.177123][T18445] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.184453][T18445] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.207067][T18445] bridge_slave_0: entered allmulticast mode [ 445.225852][T18445] bridge_slave_0: entered promiscuous mode [ 445.243785][T18445] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.256027][T18445] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.269541][T18445] bridge_slave_1: entered allmulticast mode [ 445.287109][T18445] bridge_slave_1: entered promiscuous mode [ 445.495631][T17513] Bluetooth: hci5: command tx timeout [ 445.540021][T18445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.599911][T18541] netlink: 'syz.0.3382': attribute type 1 has an invalid length. [ 445.771679][T18445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.849955][T18544] bond24: (slave gre1): The slave device specified does not support setting the MAC address [ 445.881912][T18544] bond24: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 445.911369][T18544] bond24: (slave gre1): making interface the new active one [ 445.934756][T18544] bond24: (slave gre1): Enslaving as an active interface with an up link [ 445.951652][T18545] __nla_validate_parse: 2 callbacks suppressed [ 445.951676][T18545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3382'. [ 446.000133][T17248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.026843][T17248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.057215][T17248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.064716][T17248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.116117][T17248] veth1_macvtap: left promiscuous mode [ 446.121827][T17248] veth0_macvtap: left promiscuous mode [ 446.149113][T18552] xt_l2tp: wrong L2TP version: 0 [ 446.156234][T17248] veth1_vlan: left promiscuous mode [ 446.164466][T17248] veth0_vlan: left promiscuous mode [ 446.570122][T17248] pim6reg527 (unregistering): left allmulticast mode [ 447.126537][T17248] team0 (unregistering): Port device team_slave_0 removed [ 447.576058][T17513] Bluetooth: hci5: command tx timeout [ 447.665216][T18564] smc: net device batadv_slave_1 applied user defined pnetid SYZ0 [ 447.724417][T18445] team0: Port device team_slave_0 added [ 447.761141][T18445] team0: Port device team_slave_1 added [ 447.836414][T18574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3389'. [ 447.959544][T18445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.970163][T18445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.997747][T18445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.022829][T18228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.039959][T18576] netlink: 'syz.0.3388': attribute type 21 has an invalid length. [ 448.056581][T18576] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3388'. [ 448.077389][T18445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.103670][T18445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.158064][T18445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.249408][T18228] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.279635][T18588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.382857][T18445] hsr_slave_0: entered promiscuous mode [ 448.403052][T18445] hsr_slave_1: entered promiscuous mode [ 448.414680][T18445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 448.425816][T18445] Cannot create hsr debugfs directory [ 448.439725][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.446978][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.488163][ T5281] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.495351][ T5281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.828839][T18601] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3396'. [ 448.846958][T18602] netlink: 'syz.3.3395': attribute type 3 has an invalid length. [ 448.854748][T18602] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3395'. [ 448.931963][T18602] netlink: 'syz.3.3395': attribute type 3 has an invalid length. [ 448.989336][T18602] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3395'. [ 449.209696][T18228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.421508][T18228] veth0_vlan: entered promiscuous mode [ 449.478699][T18228] veth1_vlan: entered promiscuous mode [ 449.551534][T18445] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 449.583384][T18445] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 449.621341][T18445] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 449.659246][T17513] Bluetooth: hci5: command tx timeout [ 449.669746][T18228] veth0_macvtap: entered promiscuous mode [ 449.686827][T18445] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 449.732916][T18228] veth1_macvtap: entered promiscuous mode [ 449.791840][T18620] netlink: 'syz.1.3398': attribute type 1 has an invalid length. [ 449.816285][T18620] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 449.820187][T18622] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3398'. [ 449.954890][T18634] Bluetooth: MGMT ver 1.23 [ 450.012530][T18228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.035736][T18228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.059464][T18228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.080619][T18228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.101192][T18228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.125745][T18228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.142841][T18228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.221887][T18228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.253281][T18228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.281206][T18228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.302183][T18228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.320799][T18228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.345576][T18228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.366338][T18228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.389732][T18228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.415171][T18228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.452629][T18228] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.495683][T18228] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.524838][T18228] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.554094][T18228] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.858599][T18445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.162435][T18445] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.209660][T17248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.236978][T17248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.328609][ T942] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.336036][ T942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.377768][ T942] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.385015][ T942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.566553][T13887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.574431][T13887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.940584][T18669] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3297'. [ 451.968326][T18674] x_tables: duplicate underflow at hook 3 [ 452.008606][T18669] team_slave_1: entered promiscuous mode [ 452.014429][T18669] team_slave_1: entered allmulticast mode [ 452.139528][T18669] team0: Port device team_slave_1 removed [ 452.158272][T18673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3297'. [ 452.249416][T18445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.029460][T18723] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3419'. [ 453.431864][T18737] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 453.467372][T18730] rdma_op ffff88802f7ec9f0 conn xmit_rdma 0000000000000000 [ 453.560915][T18735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3421'. [ 453.585724][T18735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3421'. [ 453.610031][T18735] netlink: 'syz.1.3421': attribute type 6 has an invalid length. [ 453.726638][T18730] bond0: (slave wlan1): Releasing backup interface [ 453.769888][T18730] mac80211_hwsim hwsim37 wlan1 (unregistering): left promiscuous mode [ 453.787027][T18730] mac80211_hwsim hwsim37 wlan1 (unregistering): left allmulticast mode [ 455.924469][T18741] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3422'. [ 455.955030][T18746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3422'. [ 456.015745][T18749] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3425'. [ 456.254350][T18445] veth0_vlan: entered promiscuous mode [ 456.312616][T18445] veth1_vlan: entered promiscuous mode [ 456.347690][T18773] netlink: 'syz.3.3430': attribute type 21 has an invalid length. [ 456.370783][T18773] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3430'. [ 456.416005][T18773] netlink: 'syz.3.3430': attribute type 5 has an invalid length. [ 456.423809][T18773] netlink: 'syz.3.3430': attribute type 6 has an invalid length. [ 456.449736][T18773] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3430'. [ 456.537882][T18445] veth0_macvtap: entered promiscuous mode [ 456.579533][T18445] veth1_macvtap: entered promiscuous mode [ 456.649215][T18445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.680296][T18445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.700698][T18445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.731644][T18445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.755337][T18445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.776588][T18445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.806813][T18445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.829096][T18445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.858633][T18445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.962470][T18790] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 456.998900][T18796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3434'. [ 457.011125][T18790] rdma_op ffff888074f9b9f0 conn xmit_rdma 0000000000000000 [ 457.045135][T18796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3434'. [ 457.086231][T18796] netlink: 'syz.3.3434': attribute type 6 has an invalid length. [ 457.098545][T18445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.112567][T18445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.124930][T18445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.142118][T18445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.153232][T18445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.164338][T18445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.174651][T18445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.187795][T18445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.204872][T18445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.223495][T18445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.239781][T18445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.274507][T18790] bond0: (slave wlan1): Releasing backup interface [ 457.282632][T18790] mac80211_hwsim hwsim3 wlan1 (unregistering): left promiscuous mode [ 457.308963][T18800] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3437'. [ 457.319485][T18802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3437'. [ 457.363284][T18445] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.403415][T18445] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.433134][T18445] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.460257][T18445] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.666856][T18812] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3439'. [ 457.703283][T18813] ɶƣ0GCTw: entered promiscuous mode [ 457.703912][T18818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3443'. [ 457.738619][T18818] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 457.745956][T18818] IPv6: NLM_F_CREATE should be set when creating new route [ 457.753257][T18818] IPv6: NLM_F_CREATE should be set when creating new route [ 457.802620][T17239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.823502][T17239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.901227][T13887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.931793][T13887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.149335][T18827] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3445'. [ 458.493120][T18856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3452'. [ 458.608197][T18860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3452'. [ 458.717546][T18859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3451'. [ 458.736545][T18859] netlink: 'syz.4.3451': attribute type 6 has an invalid length. [ 458.768068][T18854] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 458.816584][T18854] rdma_op ffff88805ef391f0 conn xmit_rdma 0000000000000000 [ 459.452738][T18885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.519612][T18885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.710310][T18895] can: request_module (can-proto-0) failed. [ 459.911692][T18904] team_slave_1: entered promiscuous mode [ 459.923703][T18904] team_slave_1: entered allmulticast mode [ 459.957486][T18904] team0: Port device team_slave_1 removed [ 460.337941][T18926] netlink: 'syz.2.3468': attribute type 6 has an invalid length. [ 460.368247][T18926] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 460.421200][T18919] rdma_op ffff88805cd589f0 conn xmit_rdma 0000000000000000 [ 460.591131][ C1] eth0: bad gso: type: 1, size: 1408 [ 460.629425][T18939] netlink: 'syz.4.3473': attribute type 7 has an invalid length. [ 460.648292][T18939] netlink: 'syz.4.3473': attribute type 8 has an invalid length. [ 460.658972][T18935] delete_channel: no stack [ 460.669722][T18941] syz.4.3473[18941] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 460.669967][T18941] syz.4.3473[18941] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 460.693276][T18939] syz.4.3473[18939] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 460.746214][T18939] syz.4.3473[18939] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 460.885820][T18948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.941603][T18952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.978647][T18938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.058354][T18952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.125123][T18952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.170158][T18952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.736230][T17513] Bluetooth: hci5: command tx timeout [ 461.856631][T18982] tipc: Failed to obtain node identity [ 461.862196][T18982] tipc: Enabling of bearer rejected, failed to enable media [ 462.019987][T18985] netlink: 'syz.2.3486': attribute type 10 has an invalid length. [ 462.154949][T19004] __nla_validate_parse: 15 callbacks suppressed [ 462.154974][T19004] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3485'. [ 462.218617][T18985] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 462.237807][T19004] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 462.482850][T19008] bond32: entered promiscuous mode [ 462.502591][T19011] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3491'. [ 462.580593][T19012] bond32: (slave team_slave_1): Enslaving as an active interface with an up link [ 462.606261][T19016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3490'. [ 462.626897][T19016] bond32: left promiscuous mode [ 462.701406][ C1] eth0: bad gso: type: 1, size: 1408 [ 462.824704][T19023] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3494'. [ 462.876861][T19026] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3496'. [ 462.920535][T19026] netlink: 'syz.2.3496': attribute type 8 has an invalid length. [ 463.457605][T19050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3499'. [ 463.679817][T19059] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3504'. [ 463.794439][T19063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3506'. [ 463.864869][T19067] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3505'. [ 463.930846][T19067] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 464.229940][ C1] eth0: bad gso: type: 1, size: 1408 [ 464.632150][T19099] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 464.667820][T19100] netlink: 'syz.2.3516': attribute type 12 has an invalid length. [ 464.697240][T19100] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3516'. [ 465.053628][T19112] netlink: 'syz.2.3518': attribute type 7 has an invalid length. [ 465.108245][T19116] syz.2.3518[19116] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 465.108508][T19116] syz.2.3518[19116] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 465.115834][T19112] netlink: 'syz.2.3518': attribute type 8 has an invalid length. [ 465.247389][T19111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.421170][T19126] bond25: entered promiscuous mode [ 465.441568][T19126] bond25: (slave team_slave_1): Enslaving as an active interface with an up link [ 465.457242][T19126] bond25: left promiscuous mode [ 465.544696][T19135] openvswitch: netlink: Multiple metadata blocks provided [ 465.689860][T19140] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 465.742303][T19143] bond0: (slave netdevsim0): Releasing backup interface [ 465.788036][T19143] batman_adv: batadv1: Adding interface: netdevsim0 [ 465.796051][T19143] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.830496][T19143] batman_adv: batadv1: Not using interface netdevsim0 (retrying later): interface not active [ 465.925451][ C1] eth0: bad gso: type: 1, size: 1408 [ 465.988528][T19150] block nbd0: must specify backend [ 466.274793][T19158] IPVS: length: 206 != 24 [ 466.482158][ C1] eth0: bad gso: type: 1, size: 1408 [ 466.687028][T19172] bond26: entered promiscuous mode [ 466.836768][T19176] bond25: (slave team_slave_1): Releasing backup interface [ 466.890005][T19176] bond26: (slave team_slave_1): Enslaving as an active interface with an up link [ 466.927808][T19179] bond26: left promiscuous mode [ 467.175790][T19188] __nla_validate_parse: 10 callbacks suppressed [ 467.175812][T19188] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3537'. [ 467.196435][T19191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3539'. [ 467.228003][T19188] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 467.271094][T19196] xt_bpf: check failed: parse error [ 467.315750][T19191] batman_adv: batadv1: Removing interface: netdevsim0 [ 467.378766][T19191] batman_adv: batadv2: Adding interface: netdevsim0 [ 467.416609][T19191] batman_adv: batadv2: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.498194][T19191] batman_adv: batadv2: Not using interface netdevsim0 (retrying later): interface not active [ 467.590118][T19200] syzkaller0: entered allmulticast mode [ 467.639192][T19210] xt_ecn: cannot match TCP bits for non-tcp packets [ 467.676463][T19190] syzkaller0: left allmulticast mode [ 467.727104][T19214] netlink: 'syz.1.3541': attribute type 11 has an invalid length. [ 467.817745][T19212] netlink: 'syz.1.3541': attribute type 11 has an invalid length. [ 467.831725][T19217] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3546'. [ 467.906870][T19212] debugfs: Directory 'netdev:' with parent 'phy37' already present! [ 468.448181][T19249] netlink: 'syz.3.3545': attribute type 10 has an invalid length. [ 468.593938][T19253] bond1: entered promiscuous mode [ 468.629877][T19260] bond1: (slave team_slave_1): Enslaving as an active interface with an up link [ 468.656978][T19264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3550'. [ 468.705743][T19264] bond1: left promiscuous mode [ 469.046631][T19284] netlink: 'syz.4.3553': attribute type 1 has an invalid length. [ 469.121709][T19290] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3552'. [ 469.314080][T19295] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 469.571753][T19306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3558'. [ 469.638451][T19314] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3561'. [ 469.732023][T19312] bridge0: port 4(vlan1) entered blocking state [ 469.746165][T19312] bridge0: port 4(vlan1) entered disabled state [ 469.752835][T19312] vlan1: entered allmulticast mode [ 469.802537][T19312] vlan1: left allmulticast mode [ 469.876721][T19306] batman_adv: batadv1: Adding interface: netdevsim0 [ 469.896103][T19306] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.939093][T19306] batman_adv: batadv1: Interface activated: netdevsim0 [ 470.334581][T19338] netlink: 'syz.0.3563': attribute type 1 has an invalid length. [ 470.388953][T19338] bond27: entered promiscuous mode [ 470.511094][T19353] bond26: (slave team_slave_1): Releasing backup interface [ 470.590287][T19353] bond27: (slave team_slave_1): Enslaving as an active interface with an up link [ 470.643328][T19354] bridge0: port 3(geneve1) entered blocking state [ 470.665842][T19354] bridge0: port 3(geneve1) entered disabled state [ 470.685336][T19354] geneve1: entered allmulticast mode [ 470.714141][T19354] geneve1: entered promiscuous mode [ 470.733849][T19354] bridge0: port 3(geneve1) entered blocking state [ 470.740559][T19354] bridge0: port 3(geneve1) entered forwarding state [ 470.816849][T19357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3563'. [ 470.844943][T19357] bond27: left promiscuous mode [ 470.866977][T19358] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 471.293236][ C1] eth0: bad gso: type: 1, size: 1408 [ 471.849879][T19403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3578'. [ 471.965599][T19403] batman_adv: batadv2: Removing interface: netdevsim0 [ 472.037053][T19403] batman_adv: batadv3: Adding interface: netdevsim0 [ 472.085910][T19403] batman_adv: batadv3: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.190455][T19403] batman_adv: batadv3: Not using interface netdevsim0 (retrying later): interface not active [ 472.278533][T19414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.717868][ T5230] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 472.730344][ T5230] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 472.740881][ T5230] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 472.759673][ T5230] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 472.777885][ T5230] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 472.787781][ T5230] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 472.906004][T19441] netlink: 'syz.4.3582': attribute type 1 has an invalid length. [ 473.053043][T19441] bond1: entered promiscuous mode [ 473.122081][T19444] bond1: (slave team_slave_1): Enslaving as an active interface with an up link [ 473.143256][T19447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3582'. [ 473.154249][T19447] bond1: left promiscuous mode [ 473.171164][T19450] netlink: 19 bytes leftover after parsing attributes in process `syz.1.3586'. [ 473.197223][T19450] caif0: entered allmulticast mode [ 473.203931][T19454] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3587'. [ 473.214980][T19453] netlink: 'syz.1.3586': attribute type 2 has an invalid length. [ 473.236330][T19453] netlink: 'syz.1.3586': attribute type 2 has an invalid length. [ 473.251258][T19452] pimreg: entered allmulticast mode [ 473.270628][T19454] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3587'. [ 473.327127][T19452] pimreg: left allmulticast mode [ 474.320537][T19429] chnl_net:caif_netlink_parms(): no params data found [ 474.383241][T19499] netlink: 'syz.1.3598': attribute type 20 has an invalid length. [ 474.594980][T19508] bridge0: port 2(bridge_slave_1) entered listening state [ 474.624708][T19515] syz.2.3597[19515] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 474.624877][T19515] syz.2.3597[19515] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 474.751739][T19429] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.792054][T19429] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.815778][T19429] bridge_slave_0: entered allmulticast mode [ 474.840280][T19429] bridge_slave_0: entered promiscuous mode [ 474.856728][ T5230] Bluetooth: hci2: command tx timeout [ 474.863959][T19429] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.915569][T19429] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.938128][T19429] bridge_slave_1: entered allmulticast mode [ 474.951802][T19429] bridge_slave_1: entered promiscuous mode [ 474.990374][T19532] netlink: 'syz.3.3604': attribute type 1 has an invalid length. [ 475.023653][T19532] bond33: entered promiscuous mode [ 475.051394][T19535] bond32: (slave team_slave_1): Releasing backup interface [ 475.190142][T19535] bond33: (slave team_slave_1): making interface the new active one [ 475.224444][T19535] bond33: (slave team_slave_1): Enslaving as an active interface with an up link [ 475.294484][T19544] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3608'. [ 475.302293][T19429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.304944][T19547] netlink: 'syz.1.3609': attribute type 1 has an invalid length. [ 475.334703][T19532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3604'. [ 475.341755][T19547] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.3609'. [ 475.355555][T19532] bond33: left promiscuous mode [ 475.360886][T19547] netlink: 'syz.1.3609': attribute type 1 has an invalid length. [ 475.394830][T19429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.585642][T19429] team0: Port device team_slave_0 added [ 475.599492][T19429] team0: Port device team_slave_1 added [ 475.635942][T19550] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3610'. [ 475.669489][T19552] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3611'. [ 475.699247][T19429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.706816][T19552] delete_channel: no stack [ 475.721229][T19429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.790808][T19429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.853671][T19429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.873284][T19429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.922376][T19559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.954988][T19429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.983567][T19560] netlink: 'syz.3.3614': attribute type 1 has an invalid length. [ 476.049073][T19560] bond34: entered promiscuous mode [ 476.088601][T19559] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3612'. [ 476.149317][T19564] bond33: (slave team_slave_1): Releasing active interface [ 476.158458][T19556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 476.180097][T19562] netlink: 'syz.1.3613': attribute type 10 has an invalid length. [ 476.202802][T19564] bond34: (slave team_slave_1): Enslaving as an active interface with an up link [ 476.235160][T19567] bond34: left promiscuous mode [ 476.310385][T19429] hsr_slave_0: entered promiscuous mode [ 476.324223][T19429] hsr_slave_1: entered promiscuous mode [ 476.335572][T19429] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 476.347066][T19429] Cannot create hsr debugfs directory [ 476.626621][T19578] macsec2: entered promiscuous mode [ 476.633170][T19578] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 476.647887][T19578] macsec2: entered allmulticast mode [ 476.653412][T19578] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 476.668456][T19578] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 476.676176][T19578] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 476.792186][T19429] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.804363][T19429] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.936635][ T5230] Bluetooth: hci2: command tx timeout [ 477.003989][T19429] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.036919][T19429] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.060034][T19586] netlink: 'syz.1.3620': attribute type 1 has an invalid length. [ 477.145873][T19586] bond10: entered promiscuous mode [ 477.227089][T19589] bond10: (slave team_slave_1): making interface the new active one [ 477.252940][T19589] bond10: (slave team_slave_1): Enslaving as an active interface with an up link [ 477.308417][T19593] bond10: left promiscuous mode [ 477.459088][T19429] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.505567][T19429] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.538541][T19603] netlink: 'syz.1.3625': attribute type 1 has an invalid length. [ 477.614306][T19611] dccp_invalid_packet: P.Data Offset(0) too small [ 477.624550][T19603] bond11: entered promiscuous mode [ 477.707203][T19606] bond10: (slave team_slave_1): Releasing active interface [ 477.751620][T19606] bond11: (slave team_slave_1): Enslaving as an active interface with an up link [ 477.836194][T19429] batman_adv: batadv2: Removing interface: netdevsim0 [ 477.868351][T19429] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.889627][T19429] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.951994][T19610] bond11: left promiscuous mode [ 478.294931][T19429] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 478.377958][T19627] vlan6: entered promiscuous mode [ 478.383075][T19627] vlan6: entered allmulticast mode [ 478.443661][T19632] __nla_validate_parse: 6 callbacks suppressed [ 478.443682][T19632] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3630'. [ 478.463439][T19630] debugfs: Directory 'netdev:nicvf0' with parent 'phy51' already present! [ 478.486413][T19429] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 478.514417][T19429] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 478.562225][T19631] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 478.588706][T19631] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 478.598211][T19631] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 478.608618][T19631] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 478.619934][T19631] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 478.631748][T19631] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 478.650434][T19631] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 478.661224][T19631] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 478.674569][T19631] geneve2: entered promiscuous mode [ 478.680509][T19631] geneve2: entered allmulticast mode [ 478.706561][T19639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3632'. [ 478.728155][T19429] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 478.769551][T19637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3632'. [ 479.018081][ T5230] Bluetooth: hci2: command tx timeout [ 479.027139][T19650] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3635'. [ 479.046257][T19650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3635'. [ 479.227723][T19429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.294342][T19429] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.320588][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.327883][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.367333][T19660] netlink: 'syz.4.3637': attribute type 1 has an invalid length. [ 479.426058][T19660] bond2: entered promiscuous mode [ 479.438354][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.445612][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.499160][T19660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3637'. [ 479.525771][T19660] bond2: left promiscuous mode [ 479.561242][T19667] bond1: (slave team_slave_1): Releasing backup interface [ 479.609937][T19667] bond2: (slave team_slave_1): Enslaving as an active interface with an up link [ 479.795288][T19672] netlink: 'syz.4.3640': attribute type 2 has an invalid length. [ 479.814758][T19672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3640'. [ 480.163826][T19429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.312587][T19429] veth0_vlan: entered promiscuous mode [ 480.354925][T19429] veth1_vlan: entered promiscuous mode [ 480.478498][T19429] veth0_macvtap: entered promiscuous mode [ 480.505069][T19429] veth1_macvtap: entered promiscuous mode [ 480.595284][T19429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.635410][T19429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.665625][T19429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.685515][T19429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.705887][T19429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.728027][T19429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.748859][T19429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.775152][T19429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.799273][T19429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.854209][T19704] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3646'. [ 480.961228][T19429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.004122][T19429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.034737][T19429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.065458][T19429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.077334][T19429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.090878][T19429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.096305][ T5230] Bluetooth: hci2: command tx timeout [ 481.110605][T19429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.151961][T19429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.181952][T19429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.199642][T19429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.213494][T19429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.224297][T19429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.237774][T19429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.250131][T19712] netlink: 'syz.4.3648': attribute type 5 has an invalid length. [ 481.290115][T19429] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.299627][T19429] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.313356][T19429] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.324195][T19721] xt_bpf: check failed: parse error [ 481.331515][T19429] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.753739][T19484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.774873][T19484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.813906][T19730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3651'. [ 481.894720][T19730] bond34: (slave team_slave_1): Releasing backup interface [ 481.958065][T19731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3651'. [ 481.992026][T19484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.021118][T19484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.266326][T19735] netlink: 'syz.2.3652': attribute type 1 has an invalid length. [ 482.357363][T19735] bond2: entered promiscuous mode [ 482.446673][T19740] bond1: (slave team_slave_1): Releasing backup interface [ 482.469585][T19740] bond2: (slave team_slave_1): Enslaving as an active interface with an up link [ 482.539855][T19735] bond2: left promiscuous mode [ 482.790273][T19752] x_tables: duplicate underflow at hook 1 [ 483.164906][T19771] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 483.268089][T19775] netlink: 'syz.4.3662': attribute type 28 has an invalid length. [ 483.299607][T19775] netlink: 'syz.4.3662': attribute type 29 has an invalid length. [ 483.501196][T19781] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.575305][T19785] __nla_validate_parse: 5 callbacks suppressed [ 483.575329][T19785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3667'. [ 483.647845][T19781] netlink: 'syz.0.3663': attribute type 4 has an invalid length. [ 483.926407][T19799] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3669'. [ 483.997379][T19794] xt_CT: You must specify a L4 protocol and not use inversions on it [ 484.032067][T19794] netlink: 'syz.0.3669': attribute type 30 has an invalid length. [ 484.132253][T19804] x_tables: duplicate underflow at hook 1 [ 484.259539][T19813] netlink: zone id is out of range [ 484.270051][T19813] netlink: zone id is out of range [ 484.276002][T19813] netlink: zone id is out of range [ 484.293588][T19813] netlink: set zone limit has 4 unknown bytes [ 485.547362][T19843] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3683'. [ 485.571052][T19843] netlink: 'syz.3.3683': attribute type 1 has an invalid length. [ 485.895445][T19847] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3684'. [ 487.837643][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880252f9800: rx timeout, send abort [ 487.846094][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880252f9c00: rx timeout, send abort [ 487.854778][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880252f9800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 487.869258][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880252f9c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 488.872182][T19834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3680'. [ 488.926319][T19841] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3682'. [ 488.947740][T19848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3684'. [ 488.957248][T19848] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3684'. [ 488.970925][ C1] eth0: bad gso: type: 1, size: 1408 [ 488.990497][T19848] vlan6: entered allmulticast mode [ 489.187450][T19854] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3687'. [ 489.306921][T19864] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3689'. [ 489.526611][T19867] bond11: (slave team_slave_1): Releasing backup interface [ 489.571993][T19872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3690'. [ 489.610682][T19875] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3692'. [ 490.648365][T19929] bond2: (slave team_slave_1): Releasing backup interface [ 490.658497][T19933] netlink: 'syz.1.3703': attribute type 1 has an invalid length. [ 490.687251][T19928] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3700'. [ 490.767905][T19929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3704'. [ 490.811671][T19935] –eth0_vlan: renamed from bridge_slave_1 (while UP) [ 491.360046][T19966] IPv6: Can't replace route, no match found [ 491.505242][T19972] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 492.224257][T19988] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-xor(2) [ 493.148370][T20030] tun0: tun_chr_ioctl cmd 1074025692 [ 493.237357][T20039] netlink: zone id is out of range [ 493.273660][T20039] netlink: zone id is out of range [ 493.305944][T20039] netlink: zone id is out of range [ 493.774295][T20067] ip6tnl0: Caught tx_queue_len zero misconfig [ 494.305663][T20090] __nla_validate_parse: 9 callbacks suppressed [ 494.305686][T20090] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3745'. [ 494.640868][T20106] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3747'. [ 494.989890][T20119] Cannot find del_set index 4 as target [ 495.201800][T20125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3753'. [ 495.242008][T20130] IPv6: addrconf: prefix option has invalid lifetime [ 495.245701][T20129] IPv6: addrconf: prefix option has invalid lifetime [ 495.612573][T20144] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3758'. [ 495.789111][T20151] tipc: Started in network mode [ 495.799592][T20151] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 495.829984][T20151] tipc: Enabled bearer , priority 10 [ 495.978055][T20158] netlink: 'syz.1.3761': attribute type 10 has an invalid length. [ 496.251058][T20173] smc: adding net device pimreg with user defined pnetid SYZ1 [ 496.279836][T20175] atomic_op ffff888032cc0198 conn xmit_atomic 0000000000000000 [ 496.298272][T20173] pimreg: entered allmulticast mode [ 496.314669][T20179] wg2: entered promiscuous mode [ 496.324829][T20179] wg2: entered allmulticast mode [ 496.357430][T20178] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3767'. [ 496.415541][T20184] netlink: 'syz.1.3767': attribute type 1 has an invalid length. [ 496.435023][ C1] eth0: bad gso: type: 1, size: 1408 [ 496.442045][T20184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3767'. [ 496.689725][T20203] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3774'. [ 496.715629][T20203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3774'. [ 496.758104][T20203] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3774'. [ 496.779422][T20207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3775'. [ 496.795891][T20203] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 496.918676][T20213] delete_channel: no stack [ 496.945602][ T25] tipc: Node number set to 4269801488 [ 497.152738][T20222] xt_CT: No such helper "netbios-ns" [ 497.209818][T20230] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 497.667004][T20261] netlink: 'syz.2.3788': attribute type 10 has an invalid length. [ 497.843016][T20261] bond0: (slave netdevsim0): Releasing backup interface [ 497.891969][T20261] team0: Port device netdevsim0 added [ 497.936136][T20267] netlink: 'syz.2.3788': attribute type 10 has an invalid length. [ 497.987717][T20267] team0: Port device netdevsim0 removed [ 498.018394][T20267] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 498.428699][T20301] bond3: entered allmulticast mode [ 498.522707][T20310] netlink: 'syz.1.3797': attribute type 1 has an invalid length. [ 498.543453][T20301] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 498.597167][T20301] batadv2: entered allmulticast mode [ 498.603171][T20301] bond3: (slave batadv2): Enslaving as an active interface with an up link [ 498.669632][T20315] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 498.678504][T20314] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 498.717977][T20308] bond3 (unregistering): (slave batadv2): Releasing backup interface [ 498.735949][T20308] batadv2: left allmulticast mode [ 498.764722][T20308] bond3 (unregistering): Released all slaves [ 498.797968][T20314] syzkaller0: entered promiscuous mode [ 498.803552][T20314] syzkaller0: entered allmulticast mode [ 498.877916][T20315] netlink: 'syz.3.3798': attribute type 6 has an invalid length. [ 499.082812][T20331] netlink: 'syz.4.3802': attribute type 12 has an invalid length. [ 499.121697][T20331] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.130999][T20331] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.139848][T20331] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.148688][T20331] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.226012][T20331] vxlan0: entered promiscuous mode [ 499.243141][T20335] netlink: 'syz.0.3806': attribute type 5 has an invalid length. [ 499.383343][T20346] __nla_validate_parse: 12 callbacks suppressed [ 499.383367][T20346] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3808'. [ 499.429578][T20350] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 499.448553][T20346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3808'. [ 499.732077][T20364] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3812'. [ 501.089950][T20416] sctp: [Deprecated]: syz.1.3827 (pid 20416) Use of int in max_burst socket option deprecated. [ 501.089950][T20416] Use struct sctp_assoc_value instead [ 501.427602][T20431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3830'. [ 501.879442][T20453] netlink: 404 bytes leftover after parsing attributes in process `syz.1.3838'. [ 501.899916][T20454] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3838'. [ 501.909502][T20453] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3838'. [ 501.941275][T20453] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3838'. [ 502.005850][T20460] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3839'. [ 502.041280][T20460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3839'. [ 502.257411][T20455] gretap0: refused to change device tx_queue_len [ 502.272764][T20455] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 502.542996][T20484] netlink: 'syz.0.3847': attribute type 3 has an invalid length. [ 502.556336][T20484] netlink: 'syz.0.3847': attribute type 3 has an invalid length. [ 502.767864][T20490] Bluetooth: hci3: unsupported parameter 64512 [ 502.798325][T20490] Bluetooth: hci3: invalid length 0, exp 2 for type 7 [ 503.019934][T20501] team_slave_1: entered promiscuous mode [ 503.036558][T20501] team_slave_1: entered allmulticast mode [ 503.114062][T20501] team0: Port device team_slave_1 removed [ 503.405201][T20512] tun0: tun_chr_ioctl cmd 1074812118 [ 503.446935][T20512] pimreg: entered allmulticast mode [ 503.458427][T20517] netlink: 'syz.3.3857': attribute type 1 has an invalid length. [ 503.507205][T20512] dvmrp5: entered allmulticast mode [ 503.538562][T20512] pimreg: left allmulticast mode [ 503.543689][T20512] dvmrp5: left allmulticast mode [ 504.327442][T20558] bridge0: port 2(–eth0_vlan) entered disabled state [ 504.335000][T20558] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.787427][T20568] netlink: 'syz.0.3873': attribute type 4 has an invalid length. [ 504.806153][T20569] netlink: 'syz.0.3873': attribute type 4 has an invalid length. [ 504.858509][T20568] netlink: 'syz.0.3873': attribute type 10 has an invalid length. [ 504.952334][T20568] team0: Port device netdevsim0 added [ 504.986703][T20569] netlink: 'syz.0.3873': attribute type 10 has an invalid length. [ 505.046789][T20577] netlink: 'syz.0.3873': attribute type 10 has an invalid length. [ 505.047106][T20583] netlink: 'syz.2.3876': attribute type 1 has an invalid length. [ 505.103847][T20577] team0: Port device netdevsim0 removed [ 505.146725][T20577] bond0: (slave netdevsim0): Enslaving as an active interface with a down link [ 505.191337][T20584] __nla_validate_parse: 11 callbacks suppressed [ 505.191358][T20584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3876'. [ 505.231045][T20584] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3876'. [ 505.429914][T20591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3877'. [ 505.592939][T20607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3879'. [ 505.613319][T20595] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3878'. [ 505.648578][T20602] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 505.716012][T20608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3878'. [ 505.740497][T20611] netlink: 'syz.2.3882': attribute type 2 has an invalid length. [ 505.868160][T20617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 505.908339][T20620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 505.990891][T20617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 506.033769][T20620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 506.095286][T20617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 506.510793][T20643] syzkaller0: entered allmulticast mode [ 506.557797][T20643] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3889'. [ 506.642096][ C1] eth0: bad gso: type: 1, size: 1408 [ 506.792285][T20661] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3895'. [ 506.825678][T20661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3895'. [ 507.116278][T20682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3900'. [ 507.279237][T20687] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 507.567317][T20671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 507.653084][T20702] netlink: 'syz.2.3908': attribute type 15 has an invalid length. [ 508.362534][T20743] netlink: 'syz.1.3915': attribute type 16 has an invalid length. [ 508.482835][T20759] netlink: 'syz.4.3919': attribute type 1 has an invalid length. [ 508.502882][T20759] NCSI netlink: No device for ifindex 0 [ 508.564163][T20761] bond2: (slave team_slave_1): Releasing backup interface [ 508.575205][T20764] netlink: 'syz.0.3922': attribute type 3 has an invalid length. [ 508.811749][T20774] netlink: 'syz.1.3924': attribute type 10 has an invalid length. [ 509.034029][T20797] delete_channel: no stack [ 509.156697][T20805] ebt_among: wrong size: 2080 against expected 2280, rounded to 2280 [ 509.180672][T20806] ebt_among: wrong size: 2080 against expected 2280, rounded to 2280 [ 509.754076][T20840] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 510.436264][T20868] batadv0: entered promiscuous mode [ 510.570105][T20875] team0: Device batadv0 is up. Set it down before adding it as a team port [ 511.456234][T20900] Bluetooth: MGMT ver 1.23 [ 511.516252][T20904] netlink: 'syz.4.3952': attribute type 1 has an invalid length. [ 511.524432][T20904] __nla_validate_parse: 12 callbacks suppressed [ 511.524446][T20904] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3952'. [ 511.893732][T20916] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3955'. [ 511.980961][T20905] netlink: 'syz.3.3954': attribute type 16 has an invalid length. [ 512.020341][T20914] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.029373][T20914] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.038224][T20914] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.047544][T20914] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.115549][T20914] vxlan0: entered promiscuous mode [ 512.120753][T20914] vxlan0: entered allmulticast mode [ 512.466974][T20935] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3961'. [ 512.513331][T20935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3961'. [ 512.516188][T20934] netlink: 504 bytes leftover after parsing attributes in process `syz.2.3960'. [ 512.705981][T20937] netlink: 'syz.0.3962': attribute type 12 has an invalid length. [ 512.736087][T20937] netlink: 'syz.0.3962': attribute type 10 has an invalid length. [ 512.753831][T20934] tipc: Started in network mode [ 512.772147][T20934] tipc: Node identity 7ff, cluster identity 2 [ 512.788950][T20934] tipc: Node number set to 2047 [ 512.986849][T20944] netlink: 'syz.4.3964': attribute type 8 has an invalid length. [ 513.116918][T20950] macvlan2: entered promiscuous mode [ 513.156622][T20950] vlan0: entered promiscuous mode [ 513.206652][T20950] vlan0: left promiscuous mode [ 513.326412][T20960] netlink: 'syz.4.3970': attribute type 7 has an invalid length. [ 513.334207][T20960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3970'. [ 513.439400][T20965] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3971'. [ 513.467568][T20965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3971'. [ 513.557932][T20965] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3971'. [ 513.689841][T20976] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3974'. [ 513.891516][T20984] netlink: 'syz.4.3977': attribute type 12 has an invalid length. [ 514.127438][ C1] eth0: bad gso: type: 1, size: 1408 [ 514.388860][T21004] pim6reg1: entered promiscuous mode [ 514.394468][T21004] pim6reg1: entered allmulticast mode [ 514.724850][T21018] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 514.736430][T21022] bridge0: port 3(bond3) entered blocking state [ 514.742828][T21022] bridge0: port 3(bond3) entered disabled state [ 514.836693][T21022] bond3: entered allmulticast mode [ 514.876158][T21022] bridge2: entered allmulticast mode [ 514.901376][T21022] bond3: entered promiscuous mode [ 514.918856][T21022] bridge2: entered promiscuous mode [ 515.093350][T21042] SET target dimension over the limit! [ 515.651802][T21061] netlink: 'syz.2.3998': attribute type 3 has an invalid length. [ 516.218623][T21086] netlink: 'syz.0.4005': attribute type 3 has an invalid length. [ 516.238983][T21086] netlink: 'syz.0.4005': attribute type 3 has an invalid length. [ 516.588420][T21094] __nla_validate_parse: 8 callbacks suppressed [ 516.588441][T21094] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4007'. [ 516.870292][T21119] xt_ipcomp: unknown flags B [ 517.106289][T21131] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4015'. [ 517.160325][T21131] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4015'. [ 517.176096][T21131] netlink: 73 bytes leftover after parsing attributes in process `syz.2.4015'. [ 517.291882][T21148] dummy0: entered promiscuous mode [ 517.298321][T21148] dummy0: left promiscuous mode [ 517.443306][T21154] x_tables: unsorted underflow at hook 3 [ 517.671678][T21164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4023'. [ 518.030291][T21177] Cannot find add_set index 0 as target [ 518.117876][T21181] netlink: 'syz.0.4027': attribute type 49 has an invalid length. [ 518.141462][T21177] netlink: 'syz.0.4027': attribute type 49 has an invalid length. [ 518.174456][T21184] dccp_invalid_packet: P.Data Offset(100) too large [ 518.438566][T21193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4031'. [ 518.781095][T21204] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4033'. [ 518.849403][T21210] netlink: 'syz.2.4035': attribute type 4 has an invalid length. [ 518.875209][T21203] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 519.475679][T21230] netlink: 'syz.0.4042': attribute type 4 has an invalid length. [ 519.504525][T21230] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.4042'. [ 519.532634][T21242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4044'. [ 519.559026][T21230] netlink: 'syz.0.4042': attribute type 1 has an invalid length. [ 519.576056][T21230] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4042'. [ 519.599576][T21238] tipc: Started in network mode [ 519.620647][T21238] tipc: Node identity 7ff, cluster identity 2 [ 519.638049][T21238] tipc: Node number set to 2047 [ 532.596957][T21276] __nla_validate_parse: 2 callbacks suppressed [ 532.596981][T21276] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4053'. [ 532.647332][T21276] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 532.834498][T21283] sctp: [Deprecated]: syz.0.4055 (pid 21283) Use of int in maxseg socket option. [ 532.834498][T21283] Use struct sctp_assoc_value instead [ 533.507738][T21304] syzkaller0: left promiscuous mode [ 533.518817][T21304] syzkaller0: left allmulticast mode [ 533.757044][T21323] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4065'. [ 533.867216][T21270] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4051'. [ 533.901247][T21270] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4051'. [ 533.986021][T21333] netlink: 'syz.1.4069': attribute type 1 has an invalid length. [ 534.166457][T21338] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4069'. [ 534.923659][T21362] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4075'. [ 535.051815][T21366] xt_CT: You must specify a L4 protocol and not use inversions on it [ 535.627995][T21381] xt_CT: No such helper "netbios-ns" [ 536.153494][T21395] bridge0: port 3(geneve1) entered blocking state [ 536.186251][T21395] bridge0: port 3(geneve1) entered disabled state [ 536.202131][T21395] geneve1: entered allmulticast mode [ 536.229440][T21395] geneve1: entered promiscuous mode [ 536.260482][T21397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4085'. [ 536.379600][ C1] eth0: bad gso: type: 1, size: 1408 [ 538.527720][T21460] netlink: 'syz.1.4099': attribute type 1 has an invalid length. [ 538.596830][T21460] bond13: entered promiscuous mode [ 538.646190][T21460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4099'. [ 538.676309][T21460] bond13: left promiscuous mode [ 539.225149][T21490] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 539.252849][T21490] vlan2: entered allmulticast mode [ 539.309713][T21490] mac80211_hwsim hwsim55 wlan1: entered allmulticast mode [ 539.317449][T21495] syz.2.4108[21495] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 539.317701][T21495] syz.2.4108[21495] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 539.330417][T21495] syz.2.4108[21495] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 539.344595][T21495] syz.2.4108[21495] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 539.386994][T21495] syz.2.4108[21495] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 539.402397][T21490] mac80211_hwsim hwsim55 wlan1: left allmulticast mode [ 539.411789][T21495] syz.2.4108[21495] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 539.436882][T21495] syz.2.4108[21495] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 539.451038][T21495] syz.2.4108[21495] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 539.464641][T21495] syz.2.4108[21495] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 539.481031][T21495] syz.2.4108[21495] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 539.943162][T21518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4110'. [ 540.326201][T21534] netlink: 'syz.1.4113': attribute type 1 has an invalid length. [ 540.391341][T21534] bond14: entered promiscuous mode [ 540.439315][T21534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4113'. [ 540.485902][T21534] bond14: left promiscuous mode [ 540.621870][T21547] can: request_module (can-proto-0) failed. [ 540.676770][T21547] syzkaller0: entered allmulticast mode [ 540.741380][T21547] syzkaller0 (unregistering): left allmulticast mode [ 540.957109][T21557] netlink: 596 bytes leftover after parsing attributes in process `syz.0.4117'. [ 541.044026][T21542] syzkaller0: entered promiscuous mode [ 541.545891][T21580] xt_CT: You must specify a L4 protocol and not use inversions on it [ 541.762867][T21582] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 541.884646][T21587] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4127'. [ 542.216587][T21593] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4128'. [ 542.236112][T21593] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4128'. [ 542.260720][T21593] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4128'. [ 542.268917][ C1] eth0: bad gso: type: 1, size: 1408 [ 542.277826][T21593] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4128'. [ 542.308674][T21593] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4128'. [ 542.357246][T21602] hsr0: entered promiscuous mode [ 542.363632][T21602] macvlan3: entered allmulticast mode [ 542.381599][T21602] hsr0: entered allmulticast mode [ 542.394366][T21602] hsr_slave_0: entered allmulticast mode [ 542.430438][T21602] hsr_slave_1: entered allmulticast mode [ 542.458436][T21602] hsr0: left allmulticast mode [ 542.463600][T21602] hsr_slave_0: left allmulticast mode [ 542.478010][T21602] hsr_slave_1: left allmulticast mode [ 542.591461][ C1] eth0: bad gso: type: 1, size: 1408 [ 543.546631][T21648] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 543.699357][T21654] __nla_validate_parse: 125 callbacks suppressed [ 543.699383][T21654] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4143'. [ 544.395684][T17513] Bluetooth: hci2: command 0x0405 tx timeout [ 544.914439][T21656] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4144'. [ 544.956336][T21695] netlink: 'syz.2.4153': attribute type 12 has an invalid length. [ 544.996429][T21695] sctp: [Deprecated]: syz.2.4153 (pid 21695) Use of int in maxseg socket option. [ 544.996429][T21695] Use struct sctp_assoc_value instead [ 545.624453][T21721] openvswitch: netlink: IP tunnel attribute has 2 unknown bytes. [ 545.655557][T21720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4159'. [ 545.948337][T21729] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4164'. [ 546.086867][ C1] eth0: bad gso: type: 1, size: 1408 [ 546.160293][T21738] netlink: 'syz.0.4166': attribute type 1 has an invalid length. [ 546.268779][T21738] bond1: entered promiscuous mode [ 546.323171][T21743] bond1: (slave team_slave_1): making interface the new active one [ 546.333760][T21743] bond1: (slave team_slave_1): Enslaving as an active interface with an up link [ 546.343873][T21747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4166'. [ 546.353088][T21747] bond1: left promiscuous mode [ 546.459119][T17513] Bluetooth: hci2: command 0x0405 tx timeout [ 547.131982][T21770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4176'. [ 547.356962][T21775] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.4177'. [ 547.386598][T17513] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 547.399294][T21775] netlink: 'syz.2.4177': attribute type 2 has an invalid length. [ 547.412784][T17513] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 547.416872][T21757] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4170'. [ 547.446192][T17513] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 547.468803][T17513] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 547.478788][T17513] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 547.488334][T17513] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 547.700331][T21745] syzkaller0: entered promiscuous mode [ 547.717754][T21745] syzkaller0: entered allmulticast mode [ 547.873053][T21794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 548.453193][ C1] eth0: bad gso: type: 1, size: 1408 [ 549.576422][ T5230] Bluetooth: hci4: command tx timeout [ 549.801959][T21777] chnl_net:caif_netlink_parms(): no params data found [ 549.892225][T21851] netlink: 'syz.1.4197': attribute type 28 has an invalid length. [ 550.062063][T21856] macvlan3: entered allmulticast mode [ 550.071636][T21856] hsr0: entered allmulticast mode [ 550.084701][T21856] hsr_slave_0: entered allmulticast mode [ 550.100891][T21859] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4198'. [ 550.116174][T21856] hsr_slave_1: entered allmulticast mode [ 550.130456][T21859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4198'. [ 550.156284][T21856] hsr0: left allmulticast mode [ 550.162430][T21856] hsr_slave_0: left allmulticast mode [ 550.165859][T21859] netlink: 31 bytes leftover after parsing attributes in process `syz.1.4198'. [ 550.181478][T21856] hsr_slave_1: left allmulticast mode [ 550.205987][T21859] netlink: 'syz.1.4198': attribute type 3 has an invalid length. [ 550.224355][T21859] netlink: 31 bytes leftover after parsing attributes in process `syz.1.4198'. [ 550.284152][T21777] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.295031][T21777] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.308162][T21777] bridge_slave_0: entered allmulticast mode [ 550.316591][T21777] bridge_slave_0: entered promiscuous mode [ 550.346742][T21777] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.354529][T21777] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.362588][T21777] bridge_slave_1: entered allmulticast mode [ 550.373723][T21777] bridge_slave_1: entered promiscuous mode [ 550.489794][T21777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.517856][T21777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.661038][T21777] team0: Port device team_slave_0 added [ 550.690995][T21777] team0: Port device team_slave_1 added [ 550.779212][T21868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.835273][T21868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.879990][T21777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.911816][T21777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.939592][T21868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 551.007983][T21777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.042970][T21777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.051222][T21777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.079839][T21777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.240506][T21878] xt_policy: neither incoming nor outgoing policy selected [ 551.252460][T21878] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4203'. [ 551.284725][T21777] hsr_slave_0: entered promiscuous mode [ 551.317738][T21777] hsr_slave_1: entered promiscuous mode [ 551.368704][T21777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 551.396346][T21777] Cannot create hsr debugfs directory [ 551.666337][ T5230] Bluetooth: hci4: command tx timeout [ 551.816956][T21889] netlink: 'syz.2.4204': attribute type 1 has an invalid length. [ 551.832586][T21889] netlink: 240 bytes leftover after parsing attributes in process `syz.2.4204'. [ 551.914484][T21891] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 552.342375][T21777] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 552.353784][T21777] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.364606][T21777] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 552.493583][T21916] netlink: 'syz.0.4211': attribute type 11 has an invalid length. [ 552.519956][T21777] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 552.530923][T21777] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.555083][T21777] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 552.704814][T21777] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 552.730644][T21777] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.741985][T21777] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 552.899623][T21777] batman_adv: batadv3: Removing interface: netdevsim0 [ 552.938749][T21777] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 552.965962][T21777] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.985823][T21777] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 553.302929][T21777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 553.314039][T21947] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4219'. [ 553.331626][T21777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 553.338771][T21947] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4219'. [ 553.338806][T21947] netlink: 'syz.0.4219': attribute type 6 has an invalid length. [ 553.338824][T21947] netlink: 'syz.0.4219': attribute type 5 has an invalid length. [ 553.338840][T21947] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4219'. [ 553.441096][T21947] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4219'. [ 553.472447][T21777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 553.578095][T21777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 553.711401][T21953] netlink: 'syz.0.4220': attribute type 6 has an invalid length. [ 553.747079][ T5230] Bluetooth: hci4: command tx timeout [ 553.840952][T21777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.888801][T21777] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.931570][ T942] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.938864][ T942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.006182][ T942] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.013420][ T942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.062629][T21957] netlink: 'syz.0.4222': attribute type 11 has an invalid length. [ 554.204132][T21777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 554.943373][T21777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 555.211010][T21777] veth0_vlan: entered promiscuous mode [ 555.241695][T21981] __nla_validate_parse: 2 callbacks suppressed [ 555.241718][T21981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4226'. [ 555.314111][T21777] veth1_vlan: entered promiscuous mode [ 555.384960][T21777] veth0_macvtap: entered promiscuous mode [ 555.458167][T21777] veth1_macvtap: entered promiscuous mode [ 555.553179][T21777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.585029][T21777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.606801][T21777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.638535][T21777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.655602][T21777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.677197][T21777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.692593][T21988] sctp: [Deprecated]: syz.2.4227 (pid 21988) Use of struct sctp_assoc_value in delayed_ack socket option. [ 555.692593][T21988] Use struct sctp_sack_info instead [ 555.705441][T21777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.731609][T21777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.746828][T21988] sctp: [Deprecated]: syz.2.4227 (pid 21988) Use of struct sctp_assoc_value in delayed_ack socket option. [ 555.746828][T21988] Use struct sctp_sack_info instead [ 555.780863][T21777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.818595][T21777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.833201][ T5230] Bluetooth: hci4: command tx timeout [ 555.852973][T21777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.873851][T21777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.901092][T21777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.932985][T21777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.958762][T21777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.981814][T21777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.005845][T21777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.039304][T21777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.065126][T21777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.085990][T21777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.106950][T21777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.133332][T21777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.167885][T21777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.215994][T21777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 556.252814][T21777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.279022][T21777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.309082][T21777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.334492][T21777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.404445][T22006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4232'. [ 556.686659][T22017] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4235'. [ 556.758963][T20724] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.777960][T20724] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.971014][T21504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.998768][T21504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.207611][T22036] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4238'. [ 558.409289][T22057] sctp: [Deprecated]: syz.3.4243 (pid 22057) Use of struct sctp_assoc_value in delayed_ack socket option. [ 558.409289][T22057] Use struct sctp_sack_info instead [ 558.447177][T22057] sctp: [Deprecated]: syz.3.4243 (pid 22057) Use of struct sctp_assoc_value in delayed_ack socket option. [ 558.447177][T22057] Use struct sctp_sack_info instead [ 559.209701][T22077] x_tables: duplicate entry at hook 2 [ 559.446270][T22082] syzkaller0: entered allmulticast mode [ 559.474829][T22082] syzkaller0 (unregistering): left allmulticast mode [ 560.094632][T22107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4256'. [ 560.236238][ C1] eth0: bad gso: type: 1, size: 1408 [ 560.359418][T22118] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4261'. [ 560.377972][T22119] netlink: 'syz.4.4260': attribute type 1 has an invalid length. [ 560.461911][T22127] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4260'. [ 560.692073][T22134] team_slave_0: Caught tx_queue_len zero misconfig [ 561.085973][T22148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4268'. [ 561.195985][T22153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4270'. [ 561.248215][T22155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4268'. [ 561.940697][T22187] team0: Device sit1 is of different type [ 563.310270][T22233] netlink: 'syz.4.4288': attribute type 5 has an invalid length. [ 563.327810][T22233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4288'. [ 563.879892][T22259] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4295'. [ 563.890640][T22259] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4295'. [ 563.935718][T22260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4295'. [ 563.945005][T22260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4295'. [ 563.975877][T22259] ipt_REJECT: TCP_RESET invalid for non-tcp [ 564.089302][T22269] ax25_connect(): syz.1.4298 uses autobind, please contact jreuter@yaina.de [ 564.669863][T22295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 564.821665][T22303] sctp: [Deprecated]: syz.0.4306 (pid 22303) Use of int in maxseg socket option. [ 564.821665][T22303] Use struct sctp_assoc_value instead [ 565.181226][T22300] Bluetooth: hci3: command 0x0406 tx timeout [ 566.049323][T22340] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 566.507195][T22300] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 566.526406][T22300] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 566.544850][T22300] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 566.556285][T22300] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 566.566550][T22300] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 566.575966][T22300] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 566.860471][T17513] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 568.629492][T17513] Bluetooth: hci3: command tx timeout [ 569.161839][T22364] bridge0: port 2(bridge_slave_1) entered listening state [ 569.181806][T22372] netlink: 'syz.1.4321': attribute type 1 has an invalid length. [ 569.199688][T22372] netlink: 'syz.1.4321': attribute type 2 has an invalid length. [ 569.218458][T22372] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 569.260444][T22373] dvmrp0: entered allmulticast mode [ 569.310886][T22376] No such timeout policy "syz0" [ 570.090335][T22415] __nla_validate_parse: 2 callbacks suppressed [ 570.090356][T22415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4332'. [ 570.411532][T22352] chnl_net:caif_netlink_parms(): no params data found [ 570.419190][T22431] IPv6: addrconf: prefix option has invalid lifetime [ 570.673543][T22441] netlink: 'syz.1.4337': attribute type 1 has an invalid length. [ 570.696460][T17513] Bluetooth: hci3: command tx timeout [ 570.816310][T22441] bond16: entered promiscuous mode [ 570.832136][T22352] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.844661][T22352] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.852849][T22352] bridge_slave_0: entered allmulticast mode [ 570.862395][T22352] bridge_slave_0: entered promiscuous mode [ 570.873626][T22352] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.882574][T22352] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.890478][T22352] bridge_slave_1: entered allmulticast mode [ 570.901506][T22352] bridge_slave_1: entered promiscuous mode [ 570.946363][T22443] bond16: (slave team_slave_1): making interface the new active one [ 570.990601][T22443] bond16: (slave team_slave_1): Enslaving as an active interface with an up link [ 571.099723][T22352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.130516][T22352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.296897][T22352] team0: Port device team_slave_0 added [ 571.310163][T22352] team0: Port device team_slave_1 added [ 571.490600][T22352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.499760][T22352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.586191][T22352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.624363][T22352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.642185][T22479] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4347'. [ 571.653412][T22352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.731701][T22352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.909697][T22492] netlink: 'syz.1.4349': attribute type 1 has an invalid length. [ 571.978400][T22492] bond17: entered promiscuous mode [ 572.000370][T22352] hsr_slave_0: entered promiscuous mode [ 572.040049][T22352] hsr_slave_1: entered promiscuous mode [ 572.054114][T22352] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 572.070111][T22501] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4352'. [ 572.088445][T22352] Cannot create hsr debugfs directory [ 572.097795][T22498] bond16: (slave team_slave_1): Releasing active interface [ 572.136541][T22502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4352'. [ 572.138260][T22498] bond17: (slave team_slave_1): making interface the new active one [ 572.158781][T22498] bond17: (slave team_slave_1): Enslaving as an active interface with an up link [ 572.303228][T22501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4352'. [ 572.357042][T22504] x_tables: duplicate underflow at hook 1 [ 572.438983][T22506] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.4354'. [ 572.786798][T17513] Bluetooth: hci3: command tx timeout [ 572.972016][T22352] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.061880][T22534] syzkaller0: left promiscuous mode [ 573.080112][T22534] syzkaller0: left allmulticast mode [ 573.213199][T22352] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.571828][T22352] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.661486][T22550] netlink: 'syz.1.4364': attribute type 1 has an invalid length. [ 573.823916][T22550] bond18: entered promiscuous mode [ 573.897527][T22552] bond17: (slave team_slave_1): Releasing active interface [ 573.957562][T22552] bond18: (slave team_slave_1): making interface the new active one [ 573.979535][T22552] bond18: (slave team_slave_1): Enslaving as an active interface with an up link [ 574.012613][T22554] netlink: 340 bytes leftover after parsing attributes in process `syz.4.4365'. [ 574.049442][T22558] netlink: 'syz.0.4366': attribute type 9 has an invalid length. [ 574.116149][T22560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4366'. [ 574.269778][T22565] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4368'. [ 574.556584][T22352] bond0: (slave netdevsim0): Releasing backup interface [ 574.609254][T22570] netlink: 'syz.4.4370': attribute type 1 has an invalid length. [ 574.616265][T22352] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.727461][T22572] netlink: 'syz.1.4371': attribute type 10 has an invalid length. [ 574.796841][T22575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4370'. [ 574.869568][T17513] Bluetooth: hci3: command tx timeout [ 575.210057][T22352] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 575.239839][T22589] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4376'. [ 575.254179][T22352] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 575.267847][T22588] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4375'. [ 575.327930][T22352] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 575.407955][T22352] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 575.596186][T22603] netlink: 'syz.1.4377': attribute type 1 has an invalid length. [ 575.763347][T22603] bond19: entered promiscuous mode [ 575.846046][T22601] netlink: 'syz.0.4369': attribute type 30 has an invalid length. [ 575.853964][T22601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4369'. [ 575.900817][T22601] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 575.914911][T22611] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4369'. [ 575.924552][T22611] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4369'. [ 575.956024][T22610] bond18: (slave team_slave_1): Releasing active interface [ 576.036478][T22610] bond19: (slave team_slave_1): making interface the new active one [ 576.048786][T22621] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4380'. [ 576.060812][T22610] bond19: (slave team_slave_1): Enslaving as an active interface with an up link [ 576.209843][T22352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.287686][T22352] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.321105][ T5281] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.328388][ T5281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.378297][ T5281] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.385555][ T5281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.541471][T22627] netlink: 'syz.1.4383': attribute type 10 has an invalid length. [ 576.924332][T22352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.124107][T22352] veth0_vlan: entered promiscuous mode [ 577.171730][T22352] veth1_vlan: entered promiscuous mode [ 577.208494][T22648] netlink: 'syz.3.4389': attribute type 1 has an invalid length. [ 577.403476][T22648] bond1: entered promiscuous mode [ 577.500749][T22665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 577.525804][T22654] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 577.563448][T22654] bond1: (slave netdevsim0): Enslaving as an active interface with a down link [ 577.830210][T22352] veth0_macvtap: entered promiscuous mode [ 577.862347][T22352] veth1_macvtap: entered promiscuous mode [ 577.945224][T22352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.974967][T22673] netlink: 'syz.3.4395': attribute type 1 has an invalid length. [ 577.996003][T22352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.007983][T22352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 578.019646][T22352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.033272][T22352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 578.045289][T22352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.057384][T22352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 578.068169][T22300] Bluetooth: hci3: command 0x0405 tx timeout [ 578.068406][T22352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.094702][T22352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 578.138275][T22352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.163078][T22352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 578.249827][T22352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.305481][T22352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.337081][T22352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.365712][T22352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.385876][T22352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.405704][T22352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.425639][T22352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.445752][T22352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.495496][T22352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.515541][T22352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.535084][T22352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.565723][T22352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.592065][T22352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.616452][T22352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.635722][T22352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.655456][T22352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.702025][T22352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 579.038695][T22681] syzkaller0: entered promiscuous mode [ 579.044281][T22681] syzkaller0: entered allmulticast mode [ 579.097234][T22352] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.135683][T22352] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.144465][T22352] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.187399][T22352] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.256943][T22707] netlink: 'syz.0.4405': attribute type 3 has an invalid length. [ 579.919330][T22731] xt_NFQUEUE: number of total queues is 0 [ 582.547215][T13890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.575808][T13890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.722063][T21504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.746266][T21504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.868647][T22749] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 582.969016][ T942] ================================================================== [ 582.977135][ T942] BUG: KASAN: slab-use-after-free in sco_sock_timeout+0x8b/0x270 [ 582.984903][ T942] Write of size 4 at addr ffff88802be63080 by task kworker/1:2/942 [ 582.992819][ T942] [ 582.995163][ T942] CPU: 1 UID: 0 PID: 942 Comm: kworker/1:2 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 583.005523][ T942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 583.015703][ T942] Workqueue: events sco_sock_timeout [ 583.021048][ T942] Call Trace: [ 583.024348][ T942] [ 583.027302][ T942] dump_stack_lvl+0x241/0x360 [ 583.032242][ T942] ? __pfx_dump_stack_lvl+0x10/0x10 [ 583.037482][ T942] ? __pfx__printk+0x10/0x10 [ 583.042103][ T942] ? _printk+0xd5/0x120 [ 583.046289][ T942] ? __virt_addr_valid+0x183/0x530 [ 583.051427][ T942] ? __virt_addr_valid+0x183/0x530 [ 583.056576][ T942] print_report+0x169/0x550 [ 583.061124][ T942] ? __virt_addr_valid+0x183/0x530 [ 583.066266][ T942] ? __virt_addr_valid+0x183/0x530 [ 583.071408][ T942] ? __virt_addr_valid+0x45f/0x530 [ 583.076551][ T942] ? __phys_addr+0xba/0x170 [ 583.081087][ T942] ? sco_sock_timeout+0x8b/0x270 [ 583.086071][ T942] kasan_report+0x143/0x180 [ 583.090619][ T942] ? __pfx_lock_acquire+0x10/0x10 [ 583.095685][ T942] ? sco_sock_timeout+0x8b/0x270 [ 583.100671][ T942] kasan_check_range+0x282/0x290 [ 583.105661][ T942] sco_sock_timeout+0x8b/0x270 [ 583.110464][ T942] ? process_scheduled_works+0x945/0x1830 [ 583.116220][ T942] process_scheduled_works+0xa2c/0x1830 [ 583.121822][ T942] ? __pfx_process_scheduled_works+0x10/0x10 [ 583.127847][ T942] ? assign_work+0x364/0x3d0 [ 583.132476][ T942] worker_thread+0x86d/0xd40 [ 583.137114][ T942] ? __kthread_parkme+0x169/0x1d0 [ 583.142178][ T942] ? __pfx_worker_thread+0x10/0x10 [ 583.147325][ T942] kthread+0x2f0/0x390 [ 583.151422][ T942] ? __pfx_worker_thread+0x10/0x10 [ 583.156576][ T942] ? __pfx_kthread+0x10/0x10 [ 583.161191][ T942] ret_from_fork+0x4b/0x80 [ 583.165642][ T942] ? __pfx_kthread+0x10/0x10 [ 583.170257][ T942] ret_from_fork_asm+0x1a/0x30 [ 583.175073][ T942] [ 583.178113][ T942] [ 583.180466][ T942] Allocated by task 22587: [ 583.184892][ T942] kasan_save_track+0x3f/0x80 [ 583.189606][ T942] __kasan_kmalloc+0x98/0xb0 [ 583.194235][ T942] __kmalloc_noprof+0x1fc/0x400 [ 583.199117][ T942] sk_prot_alloc+0xe0/0x210 [ 583.203651][ T942] sk_alloc+0x38/0x370 [ 583.207750][ T942] __netlink_create+0x65/0x260 [ 583.212538][ T942] netlink_create+0x3ab/0x560 [ 583.217248][ T942] __sock_create+0x490/0x920 [ 583.221879][ T942] __sys_socket+0x150/0x3c0 [ 583.226413][ T942] __x64_sys_socket+0x7a/0x90 [ 583.231115][ T942] do_syscall_64+0xf3/0x230 [ 583.235642][ T942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.241566][ T942] [ 583.243911][ T942] Freed by task 16: [ 583.247734][ T942] kasan_save_track+0x3f/0x80 [ 583.252444][ T942] kasan_save_free_info+0x40/0x50 [ 583.257497][ T942] poison_slab_object+0xe0/0x150 [ 583.262470][ T942] __kasan_slab_free+0x37/0x60 [ 583.267266][ T942] kfree+0x149/0x360 [ 583.271192][ T942] __sk_destruct+0x476/0x5f0 [ 583.275816][ T942] rcu_core+0xafd/0x1830 [ 583.280090][ T942] handle_softirqs+0x2c4/0x970 [ 583.284886][ T942] run_ksoftirqd+0xca/0x130 [ 583.289429][ T942] smpboot_thread_fn+0x544/0xa30 [ 583.294401][ T942] kthread+0x2f0/0x390 [ 583.298491][ T942] ret_from_fork+0x4b/0x80 [ 583.302960][ T942] ret_from_fork_asm+0x1a/0x30 [ 583.307757][ T942] [ 583.310095][ T942] Last potentially related work creation: [ 583.315821][ T942] kasan_save_stack+0x3f/0x60 [ 583.320531][ T942] __kasan_record_aux_stack+0xac/0xc0 [ 583.325936][ T942] call_rcu+0x167/0xa70 [ 583.330128][ T942] netlink_release+0x1638/0x1b10 [ 583.335088][ T942] sock_close+0xbc/0x240 [ 583.339354][ T942] __fput+0x24a/0x8a0 [ 583.343369][ T942] task_work_run+0x24f/0x310 [ 583.347987][ T942] syscall_exit_to_user_mode+0x168/0x370 [ 583.353651][ T942] do_syscall_64+0x100/0x230 [ 583.358271][ T942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.364194][ T942] [ 583.366532][ T942] The buggy address belongs to the object at ffff88802be63000 [ 583.366532][ T942] which belongs to the cache kmalloc-2k of size 2048 [ 583.380612][ T942] The buggy address is located 128 bytes inside of [ 583.380612][ T942] freed 2048-byte region [ffff88802be63000, ffff88802be63800) [ 583.394703][ T942] [ 583.397046][ T942] The buggy address belongs to the physical page: [ 583.403486][ T942] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2be60 [ 583.412285][ T942] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 583.420810][ T942] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 583.428827][ T942] page_type: 0xfdffffff(slab) [ 583.433539][ T942] raw: 00fff00000000040 ffff888015442000 0000000000000000 dead000000000001 [ 583.442156][ T942] raw: 0000000000000000 0000000000080008 00000001fdffffff 0000000000000000 [ 583.450776][ T942] head: 00fff00000000040 ffff888015442000 0000000000000000 dead000000000001 [ 583.459476][ T942] head: 0000000000000000 0000000000080008 00000001fdffffff 0000000000000000 [ 583.468178][ T942] head: 00fff00000000003 ffffea0000af9801 ffffffffffffffff 0000000000000000 [ 583.476876][ T942] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 583.485565][ T942] page dumped because: kasan: bad access detected [ 583.492014][ T942] page_owner tracks the page as allocated [ 583.497749][ T942] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6232, tgid 6230 (syz.2.253), ts 104659889280, free_ts 104399946917 [ 583.520448][ T942] post_alloc_hook+0x1f3/0x230 [ 583.525247][ T942] get_page_from_freelist+0x2e4c/0x2f10 [ 583.530832][ T942] __alloc_pages_noprof+0x256/0x6c0 [ 583.536068][ T942] alloc_slab_page+0x5f/0x120 [ 583.540777][ T942] allocate_slab+0x5a/0x2f0 [ 583.545305][ T942] ___slab_alloc+0xcd1/0x14b0 [ 583.550010][ T942] __slab_alloc+0x58/0xa0 [ 583.554382][ T942] __kmalloc_noprof+0x25a/0x400 [ 583.559267][ T942] sk_prot_alloc+0xe0/0x210 [ 583.563801][ T942] sk_alloc+0x38/0x370 [ 583.567901][ T942] __netlink_create+0x65/0x260 [ 583.572690][ T942] __netlink_kernel_create+0x174/0x6f0 [ 583.578177][ T942] nfnetlink_net_init+0xba/0x140 [ 583.583149][ T942] ops_init+0x359/0x610 [ 583.587341][ T942] setup_net+0x515/0xca0 [ 583.591621][ T942] copy_net_ns+0x4e2/0x7b0 [ 583.596065][ T942] page last free pid 6221 tgid 6220 stack trace: [ 583.602411][ T942] free_unref_page+0xd22/0xea0 [ 583.607210][ T942] __put_partials+0xeb/0x130 [ 583.611825][ T942] put_cpu_partial+0x17c/0x250 [ 583.616635][ T942] __slab_free+0x2ea/0x3d0 [ 583.621082][ T942] qlist_free_all+0x9e/0x140 [ 583.625703][ T942] kasan_quarantine_reduce+0x14f/0x170 [ 583.631193][ T942] __kasan_slab_alloc+0x23/0x80 [ 583.636083][ T942] kmem_cache_alloc_noprof+0x135/0x2a0 [ 583.641575][ T942] security_inode_alloc+0x28/0x120 [ 583.646718][ T942] inode_init_always+0x966/0xc90 [ 583.651695][ T942] new_inode_pseudo+0x9e/0x1a0 [ 583.656504][ T942] __sock_create+0x123/0x920 [ 583.661122][ T942] __sys_socket+0x150/0x3c0 [ 583.665654][ T942] __x64_sys_socket+0x7a/0x90 [ 583.670362][ T942] do_syscall_64+0xf3/0x230 [ 583.674909][ T942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.680841][ T942] [ 583.683179][ T942] Memory state around the buggy address: [ 583.688824][ T942] ffff88802be62f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 583.696910][ T942] ffff88802be63000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 583.704996][ T942] >ffff88802be63080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 583.713076][ T942] ^ [ 583.717163][ T942] ffff88802be63100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 583.725247][ T942] ffff88802be63180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 583.733337][ T942] ================================================================== [ 583.748214][ T942] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 583.755463][ T942] CPU: 1 UID: 0 PID: 942 Comm: kworker/1:2 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 583.765912][ T942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 583.776004][ T942] Workqueue: events sco_sock_timeout [ 583.781348][ T942] Call Trace: [ 583.784660][ T942] [ 583.787619][ T942] dump_stack_lvl+0x241/0x360 [ 583.792341][ T942] ? __pfx_dump_stack_lvl+0x10/0x10 [ 583.797585][ T942] ? __pfx__printk+0x10/0x10 [ 583.802293][ T942] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 583.808323][ T942] ? vscnprintf+0x5d/0x90 [ 583.812697][ T942] panic+0x349/0x860 [ 583.816713][ T942] ? check_panic_on_warn+0x21/0xb0 [ 583.821858][ T942] ? __pfx_panic+0x10/0x10 [ 583.826309][ T942] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 583.832237][ T942] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 583.838165][ T942] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 583.844529][ T942] check_panic_on_warn+0x86/0xb0 [ 583.849499][ T942] ? sco_sock_timeout+0x8b/0x270 [ 583.854458][ T942] end_report+0x77/0x160 [ 583.858728][ T942] kasan_report+0x154/0x180 [ 583.863248][ T942] ? __pfx_lock_acquire+0x10/0x10 [ 583.868294][ T942] ? sco_sock_timeout+0x8b/0x270 [ 583.873257][ T942] kasan_check_range+0x282/0x290 [ 583.878216][ T942] sco_sock_timeout+0x8b/0x270 [ 583.883002][ T942] ? process_scheduled_works+0x945/0x1830 [ 583.888739][ T942] process_scheduled_works+0xa2c/0x1830 [ 583.894318][ T942] ? __pfx_process_scheduled_works+0x10/0x10 [ 583.900324][ T942] ? assign_work+0x364/0x3d0 [ 583.904953][ T942] worker_thread+0x86d/0xd40 [ 583.909569][ T942] ? __kthread_parkme+0x169/0x1d0 [ 583.914614][ T942] ? __pfx_worker_thread+0x10/0x10 [ 583.919737][ T942] kthread+0x2f0/0x390 [ 583.923814][ T942] ? __pfx_worker_thread+0x10/0x10 [ 583.928938][ T942] ? __pfx_kthread+0x10/0x10 [ 583.933531][ T942] ret_from_fork+0x4b/0x80 [ 583.937961][ T942] ? __pfx_kthread+0x10/0x10 [ 583.942558][ T942] ret_from_fork_asm+0x1a/0x30 [ 583.947349][ T942] [ 583.950616][ T942] Kernel Offset: disabled [ 583.954947][ T942] Rebooting in 86400 seconds..